9.7 Emerging

Sovereign AI model selection and disclosure

A model provenance label that names the provider, training jurisdiction, hosting jurisdiction, and governing law, surfaced at the point a citizen interacts with the AI.

01 Emerging Challenges

When a government deploys AI in citizen-facing services, which model it uses, and who controls that model, is a sovereignty question. A government service powered by a US-headquartered model provider is subject to different legal and political risks than one powered by a domestically developed or EU-sovereign model. Citizens currently have no visibility into this choice.

02 Assurance

When a government chooses which AI model powers a service, it must make that sovereignty choice visible at the point of interaction, disclosing the model provider, the training jurisdiction, the inference-hosting jurisdiction, and the legal framework that governs the data. A choice held only at the policy level, unseen by the citizen the model decides about, does not meet that requirement.

03 Access

A single form of disclosure reaches one kind of reader and excludes the others: a dense page label loses citizens with low reading confidence, while a glanceable badge gives an agent nothing to evaluate, so each is left unable to weigh the sovereignty of the system handling them. Keep the path open by offering the disclosure at graduated depth, a static page label, a contextual tooltip, and machine-readable metadata, so citizens with different needs and their agents can each read it, and by presenting sovereignty as an informed choice across the range of provenance rather than a single domestic-or-foreign verdict.

04 Response surface
Interaction design Considered
The response this pattern proposes

A food-origin-style provenance label names the provider, training jurisdiction, hosting jurisdiction, and governing law, shown at the point of AI interaction.

No surface has been built yet; the approach above is the brief for one.

05 Maturity
  1. Emerging Headline

    Sovereign AI model selection as government policy.

  2. Frontier

    Citizen-facing AI model provenance labeling, and machine-readable model-provenance metadata for agent-to-agent queries.

06 Precedents

France — Mistral for government and defense. France has committed to deploying Mistral models in government services, with a framework agreement for the Ministry of Armed Forces spanning 2026-2030. In late 2025, Mistral partnered with SAP and the French and German governments to build a sovereign AI stack for public administrations. This represents the clearest example of a government explicitly linking AI model selection to sovereignty objectives.

Wider sovereign-AI investment. Other governments are backing sovereign AI capacity by different routes (the UK through equity stakes in domestic AI companies, the EU through public investment in compute infrastructure), which is why a service's choice of model is increasingly a deliberate sovereignty decision rather than a default.

2025 AI Agent Index — disclosure gap. Fewer than 20% of AI agent developers disclose formal safety policies, and fewer than 10% report external safety evaluations. This quantifies the disclosure deficit: even basic transparency about the AI system is rare, let alone sovereignty-relevant details like model provenance and hosting jurisdiction.

Arxiv paper — UI for AI agent governance. A December 2025 paper "On the Regulatory Potential of User Interfaces for AI Agent Governance" directly addresses the role of user interfaces in governing AI agents, arguing that UI design is an underexplored regulatory lever. The paper notes that 15 months after the EU AI Act came into force, the AI Office has not issued specific guidance for AI agents.

07 Transferability

The France/Mistral model demonstrates sovereign AI selection at policy level. The part still to be built is citizen-facing disclosure at the point of interaction.

The pattern is an "AI model provenance label" that discloses: (a) the model provider, (b) the model's training jurisdiction, (c) the inference-hosting jurisdiction, and (d) the legal framework governing data processed through it. This could be implemented as a static disclosure on the service page, a contextual tooltip at point of AI interaction, or a machine-readable metadata field that a citizen's own agent can query and evaluate.

The 2025 AI Agent Index disclosure gap suggests that market forces alone will not produce this transparency. Regulatory mandate, building on Article 50 of the EU AI Act, is likely necessary.

08 Where things go wrong

The failure mode is an opaque automated decision with no record of which model decided a case, or under whose law it ran. Labeling that provenance makes the deciding system contestable.

09 Sources
6 references France · UK · EU