Control #
E
1
.
4
Evaluate AI behavior against scope boundaries
Run evaluations to test how the AI performs across in-scope, out-of-scope, and gray-area requests. Include adversarial testing to identify scope drift or leakage.
Evidence
Audit results of third-party evals for scope boundaries
Recommended actions
We'll recommend specific practices and actions for complying with this control.