Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?

Stakeholders / Everyone with PHP in the path / The press / This newsroom / This site's readers

This site's readers: its risk register

Including other people's models, which read llms.txt and the markdown twins.

Kind group · Assigned here 3 · In its register 3

The register

Assigned here, or arriving through a part of this stakeholder. The part played is the one recorded for whoever holds the assignment.

RiskRatingKindPart playedControls
R10 This newsroom's own agents are steered, leak or mislead12 highAI and agentsbearerEU AI Act Art.50, NIST AI RMF MANAGE-2.4, ISO/IEC 42001 6.1.3, OWASP Top 10s LLM06:2025
R10-3 A status word stronger than its evidence12 highAI and agentsbearerOWASP Top 10s LLM09:2025, EU AI Act Art.50
R10-2 A vault key or token published10 mediumAI and agentsbearerOWASP Top 10s LLM02:2025, GDPR Art.32, ISO/IEC 27001 A.5.14

Where its risks sit

Likelihood / impact1 Minor2 Moderate3 Significant4 Major5 Severe
5 Happening5 10 15 20 25
4 Likely4 8 12 R10-316 20
3 Possible3 6 9 12 R1015
2 Unlikely2 4 6 8 10 R10-2
1 Rare1 2 3 4 5

Who it shares risks with

The editor (3), The newsroom's agents (3)

The standards its register touches

OWASP Top 10s (3), EU AI Act (1), NIST AI RMF (1), ISO/IEC 42001 (1), GDPR (1), ISO/IEC 27001 (1)