A.1 Legend
- Equivalent. The external framework addresses this ingredient's concern at comparable depth.
- Partial. The external framework names the concern but does not specify the structural mechanism.
- Extends. This framework provides structural specification that the external framework does not address.
A.2 Mapping by Ingredient
| Ingredient | COSO IC 2013 | COSO ERM 2017 | IIA GIAS 2024 | NIST AI RMF | ISO 31000 | ISO 42001 | This Framework Extends |
|---|---|---|---|---|---|---|---|
| Purpose | CE (P1-P5) — Partial | Strategy/Risk Appetite — Partial | Domain III (charter) — Equivalent | GOVERN 1 — Partial | §5.2 — Partial | §4.1 — Partial | Four-fold translation test; negation clause; constituting authority; governance matrix CO-PU-* |
| Distinctions | Not addressed | Not addressed | Not addressed | MAP 1 — Partial | Not addressed | §6.1.2 — Partial | Identifier discipline; namespace resolution; operative term governance |
| Entities | CE (P3-P5) — Partial | Performance (roles) — Partial | Domain III (independence) — Partial | GOVERN 2 — Partial | Not addressed | §5.3 — Partial | Four-type actor taxonomy; three-layer behavioral-contract stack; provider non-existence rule |
| Constraints | CA (P10-P12) — Partial | Review/Revision — Partial | Standard 9 — Partial | GOVERN 1.3 — Partial | §6.4.4 — Partial | §6.1.3 — Partial | Negation clause; constraint-first validation; six propagation patterns |
| Time | M (P16-P17) — Partial | Monitoring cadence — Partial | Standard 15.4 — Partial | MANAGE 2 — Partial | §6.5.2 — Partial | §9 — Partial | Cycle governance; decision-as-temporal-primitive |
| Observation | Not structurally addressed | Not addressed | Domain V — Partial | MAP 3 — Partial | Not addressed | §9.1 — Partial | Four sub-primitives; capture-time immutability; interpretive transparency |
| Relations | Not addressed | Not addressed | Not addressed | Not addressed | Not addressed | Not addressed | Three relation types; graph navigability; forcing-function matrix |
| Transition Logic | CA (P10-P12) — Partial | Performance monitoring — Partial | Domain V — Partial | MAP/MEASURE — Partial | §6.4 — Partial | §8 — Partial | Activation governance; second-order recursive transition rules |
| Memory | I&C (P13-P14) — Partial | I&C for ERM — Partial | Standard 14.6 — Equivalent at engagement level | MEASURE — Partial | Not addressed | §7.5 — Partial | Learning lifecycle; lineage preservation; knowledge representation discipline |
| Uncertainty | Not structurally addressed | Risk appetite (P5) — Partial | Not addressed | MAP 2 — Partial | §6.3 — Partial | §6.1.3 — Partial | Truth-type system; uncertainty propagation; investigative query discipline |
A.3 Summary
The external frameworks provide strongest coverage of Purpose (through charter and control environment requirements), Constraints (through control activities), Time (through monitoring cadences), and Memory (through documentation requirements). They provide weakest coverage of Distinctions (namespace governance), Observation (structured perspective modeling), Relations (governance graph structure), and Uncertainty (epistemic status classification). This framework extends all ten ingredients beyond what the external frameworks specify, with the largest extensions in Entities (the three-layer behavioral-contract architecture), Constraints (constraint-first validation with composition rules), Relations (the three relation types and forcing-function matrix), and Uncertainty (the truth-type system).