PP-SPEC-061: Proof of Efficacy Mapping to ETSI EN 304 223 Baseline Cyber Security Requirements for AI Models and Systems

Status: DRAFT v0.1 Author: Craig Ellrod / Nebulonium, Inc. / HACKERverse® License: Greater Good Commercial License 1.0 (GGL-C-1.0); text CC BY 4.0 under Part S. See LICENSE.md.

Normative specification: PP-SPEC-061-ETSI-EN-304-223-AI-Baseline-Cyber-Security-Mapping.md

Purpose

This repository defines a Proof Protocol mapping between ETSI EN 304 223 V2.1.1 (2025-12), Securing Artificial Intelligence (SAI); Baseline Cyber Security Requirements for AI Models and Systems, and Proof Protocol evidence, efficacy, and proof semantics.

The external framework supplies context describing what may be tested. Proof Protocol remains framework-agnostic and independently establishes whether a selected control performed as claimed.

Repository contents

• PP-SPEC-061-ETSI-EN-304-223-AI-Baseline-Cyber-Security-Mapping.md: normative mapping specification
• README.md: repository overview
• LICENSE: license for original Proof Protocol material
• CONTRIBUTING.md: contribution guidance
• CITATION.cff: citation metadata

Architectural principle

Threat, control, audit, and regulatory frameworks are pluggable inputs to Proof Protocol. Proof Protocol is framework-agnostic.

External frameworks identify what may be tested. Proof Protocol independently establishes whether a control worked and what evidence proves the result.

Ownership and external-framework notice

This Proof Protocol mapping is independently authored. ETSI, ETSI EN 304 223, ETSI TS 104 223, associated names, identifiers, trademarks, standards text, and upstream materials remain subject to ETSI ownership and terms. Mapping establishes interoperability, not dependency, endorsement, certification, or transfer of ownership. No affiliation, endorsement, certification, or sponsorship by ETSI is implied.

ETSI EN 304 223 V2.1.1 (2025-12) is © ETSI 2025. All rights reserved. ETSI states that no part of the deliverable may be reproduced or utilized in any form or by any means except as authorized by written permission of ETSI. This repository references identifiers only and reproduces no ETSI text. Authoritative source: https://www.etsi.org/deliver/etsi_en/304200_304299/304223/02.01.01_60/en_304223v020101p.pdf