Surfaces
T8

Verification & Certification

8 surfaces
8.1
Service design

Certification marks and trust registries

A registry entry exposes both a rendered trust badge and a machine-readable code in the product interface, so a user reads the badge and an agent queries the code.

Civic tool registry
DebtCalc ProMeridian AnalyticsHigh impact
Independently assessedConformity assessment 2026. Accuracy tested against reference data.
machine-readable mark: trust:assessed/2026/DCP-114
RentAssistK. Tran (independent developer)Low impact
Self-declaredPublished disclosure label. No third-party review required at this tier.
machine-readable mark: trust:self/2026/RA-2201
BenefitBotQuickclaim Pty LtdHigh impact
Never assessedNo conformity assessment on record. Required for high-impact tools.
Referred for enforcement · listing suspended 20 Jun
machine-readable mark: trust:none/2026/BB-9004

The badge is for the user reading a product page; the mark is for their agent, which checks the registry before relying on a tool. Both resolve to the same record, so neither can drift from the other.

8.2
Policy design

Nutrition labels for AI tools and datasets

A fixed label component carries five required fields, with a sector-specific extension for higher-risk domains, so a tool that processes public data or advises users discloses a minimum field set.

Preview the label rendered for people or for agents
RentAssist · disclosure label
Required for any tool that processes public data or advises users
Data sourceOfficial rent-assistance rate tables, city open-data portal
Last updated1 Jul 2026 (rates indexed quarterly; auto-checked weekly)
Accuracy claimMatches the published rate tables exactly. Does not predict any individual’s entitlement.
Accountable partyK. Tran · registry record RA-2201 · contact published
LicenseOpen source (MIT), free for any use

A higher-risk decision-support tool, such as a debt calculator, carries the same five fields plus a sector extension: the tested error rate against reference cases, known failure modes, the population the test data covers, and the date of the last independent check. That is the standard’s documentation, not this low-risk label’s — so the label links out rather than carrying it.

‘Accuracy claim’ and ‘last updated’ are the two fields most often left vague. The label makes both explicit and checkable.

8.3
Service design

Software bills of materials for user-facing tools

A live status badge is driven by continuous SBOM evaluation rather than a static certificate, so the trust signal reflects current supply-chain risk instead of approval-day state.

Preview the signal at a different moment in time
Civic tool registry · component status
RentAssist
Rent-assistance checker · registry RA-2201
At certification · 14 Jan
All dependencies current, no known vulnerabilities
41 components evaluated · 0 advisories open

The signal covers the supply chain only: the components and their known vulnerabilities. Whether the tool’s method is sound is a separate question, answered by accuracy testing.

8.4
Service design

Risk-proportionate review of civic tools

A submission pipeline routes informational tools through automated checks and decision-support tools through additional human review, so review burden scales with consequence.

Preview the review pipeline for a different tool category
Your submission · civic registry
  1. Automated checks

    Disclosure label complete · no undeclared data collection · passed in 4 minutes

  2. Human reviewNot required

    Not required for informational tools

  3. Listed

    Live in the registry with its label and mark

Published review criteria

Every check above links to the published criterion it applies. You can read exactly what will be reviewed before you submit, and if your tool is rejected, you’ll be told which criterion it failed.

Review checks behavior against the stated policies. It does not test whether the outputs are true. That is accuracy testing, a separate duty for decision-support tools.

8.5
Policy design

Lifecycle certification for tools that advise users

An intake step classifies a tool by its intended purpose and the consequence of its outputs, setting its certification obligations from what the tool claims to do rather than whether it contains AI.

What is the tool’s intended purpose?

Your answer sets the certification tier. Whether the tool uses AI does not matter.

Select the tool’s role to see its tier.

Higher tiers keep their obligations after approval. Monitoring on live use continues after launch.

8.6
Policy design

From voluntary framework to certifiable standard

A tiered self-assessment converts a tool's coverage of a regulator-referenced risk-management framework into a certification level, supplying the pass/fail tiers the framework itself leaves undefined.

DebtCalc Pro · certification readiness check
Each answer must cite evidence; the audit reviews any of it
Govern
A named owner is accountable for this tool’s risks, with authority to act
Map
Every use of the tool, and who it affects, is documented
Measure
Error rates and bias are measured on defined cases, on a schedule
Manage
Found risks get risk-based action, tracked to closure
Not ready. 3 of 4 functions evidenced.

Outcome the audit issues at this coverage: Provisional. At audit, partial coverage earns a provisional listing. The gaps are named in public, with a deadline to close them.

The framework names the discipline; the tiers make it enforceable. A readiness check that maps to a public pass/fail line is auditable. One that maps to nothing cannot be checked.

8.7
Interaction design

Grounding and source attribution in AI outputs

Each factual claim in the answer carries an inline citation backed by a typed read-only function call, so a substantive answer about government data is retrieved from the source rather than generated.

How much rent assistance could I get?
Based on the current maximum rate and your reported rent of $310 a week, you could receive up to $94.30 a week. Whether you qualify is decided by City Housing Office when you apply. I can start that application with you.
1Source for “the current maximum rate”
Authoritative sourceRent-assistance rate table · city open-data portal
CurrencyTable effective 1 Jul 2026 · read today, 09:41
How it was read: typed, read-only
get_rate_table(scheme="rent-assistance", household="single") → { max_weekly: 94.30 }

The figures are retrieved from the record, never generated. If a claim can’t be cited, it isn’t stated. The same source information travels with the answer as machine-readable data.

8.8
Service design

Lightweight certification for the long tail

A single-screen self-declaration flow emits a standardized nutrition label and registry entry with no third-party gate, so the lowest tier is achievable by a solo developer in a weekend.

Certify your tool

Two questions about consequence set your tier. Most community tools finish at Tier 1.

Does the tool calculate or decide anything about a specific person? For example, an entitlement, a debt, or an eligibility decision.
Does it handle personal information beyond what the person types into it?

Answer both questions to see the tier your tool routes to.

A scheme only the well-funded can complete certifies the largest vendors and shuts out everyone else. Tier 1 keeps the community tools people rely on inside the system, visible and labeled.