Government
US
8 source references
4 mapped control areas
Sovereign region
About this template
Federal AI work has two audiences. One is the person who needs an answer today. The other is the reviewer who asks, months later, who did this and on what basis. Agency teams must satisfy both. The configuration ties every request to a named person, refuses controlled records and requires a citation before an answer ships.
Nothing proceeds without an attributable federal identity. The role check refuses a call that arrives without a user, an organization and a card backed authentication header. That single setting turns a shared assistant into a reviewable one.
Sensitive records handling fills most of the request side. Control markings and sensitive designations are refused by name, along with grand jury material, procurement sensitive content and source selection information. Redaction masks case and docket numbers, claim and policy numbers, taxpayer identifiers, benefit recipient names and personnel files. Read only research tools cover document, records request and regulation lookup, and a session may take three actions.
Citations are strict here. Sources are required, they must match, and an unverified or fabricated claim is blocked instead of flagged. Output scoring holds the answer to a combined 0.93, with accuracy at 0.95 and faithfulness at 0.95. A response under 300 characters or three sentences fails as well, and a failing answer is blocked outright.
Volume control and record keeping fill out the rest of this configuration. Automated traffic detection refuses a client above eight requests in five minutes, which keeps citizen facing surfaces from being scraped. Capture runs in redacted mode, includes blocked events, and stops the request on failure. Audit marking notes the evaluation and adds no gate of its own. Records schedules, authorization boundaries and agency approvals stay outside these settings and remain your responsibility.
Source frameworks, standards and obligations
Control areas mapped by this template
Deployment options
Adapt the template in three steps
Review the scope
Confirm that the regions, source references, control areas and deployment options fit your use case.
Adapt the configuration
Open the template in the Verdictan console. Set its policies, thresholds, routing and review requirements for your environment.
Test before deployment
Test each policy outcome. Confirm that allowed, redacted, blocked and reviewed requests behave as expected.
Explore more Industry-Specific templates
Finance
Protect financial data, flag material nonpublic information, add supervisory notices and retain audit evidence with this starter.
Healthcare (U.S. — HIPAA)
Start with selected HIPAA controls for protected health information, minimum-necessary access, retention and clinical review.
Healthcare (EU — GDPR)
Map European health-data controls for GDPR Article 9 and EU AI Act risk management with this starter.