# NIST AI RMF: MEASURE 2.6

> GAMMA-Ray v0.0.155 (beta, for review; every rating is experimental). One line item of AI Risk Management Framework 1.0, subcategories (nist.MEASURE-2.6): its text, its place in the source, the indicators that cite it and the evidence that reaches it.
> Page: https://gamma-ray.sgit.ai/provisions/nist.MEASURE-2.6/ · Source: data/provisions.json


Provision nist.MEASURE-2.6 · AI Risk Management Framework 1.0, subcategories · subcategory

> AI system is evaluated regularly for safety risks – as identified in the MAP function. The AI system to be deployed is demonstrated to be safe, its residual negative risk does not exceed the risk tolerance, and can fail safely, particularly if made to operate beyond its knowledge limits. Safety metrics implicate system reliability and robustness, real-time monitoring, and response times for AI system failures.

The text is as taken from the source. **In the source:** [https://airc.nist.gov/airmf-resources/playbook/measure/#Measure%202.6](https://airc.nist.gov/airmf-resources/playbook/measure/#Measure%202.6) (the subcategory, in the NIST AI RMF Playbook (anchor found in the page); linked 2026-11-10). The instrument: [AI Risk Management Framework 1.0, subcategories](../../instruments/index.md), a United States government work; freely reusable; read 2026-11-10.

## Who cites it

| Indicator | The fact it asks for | Kind of link | The assertion |
|---|---|---|---|
| [`I51`](../../questions/index.md#I51) | It is tested for safety and security, including by attack | same: evidenced | Asserted in the mapping by gamma-ray@web-summit.dinis; the written basis is not recorded yet. |

A link is our assertion, not the instrument's. "Same" carries the evidence to the provision in full. "Part" marks the provision as partly evidenced: the fact is one piece of what it asks. "Negation" points the other way.

## The evidence that reaches it

| Card | Through | This provision is | The evidence | How far to trust it |
|---|---|---|---|---|
| [Replit Agent](../../spectrum/cards/replit-agent/index.md) | `I51` | evidenced | "continuously probes and tests the AI Agent for safety and security boundaries" [Source](https://replit.com/security) | π Moderate · S1·R5·A1 ×3 |

Touched never means complies.

## Answer it directly

A company can answer this line item itself, in its own file at `/.well-known/fact-ray.json`, with the node `gamma-ray:provision/nist.MEASURE-2.6` ([how](../../fact-ray/well-known/index.md)). A company that already assesses itself against NIST AI RMF can reuse that work.

[All provisions](../../provisions/index.md)