Fundamental Principles · AI Governance: the course

All courses / AI Governance / Module 1 / Chapter 4

Learning objectives

After the lesson the participant can:

State the eight principles and the verification that proves each one.
Apply the scaling rule that selects principles by risk class.
Resolve a conflict between two principles using the chapter's fixed order.
Draft a time-limited exception to a principle with compensating controls and an expiry date.

Key concepts

Declared intent: Principle 1: every AI system has a codified statement of its purpose, its scope and the uses that are prohibited, and that statement is the reference against which classification, evaluation and oversight are measured.
Bounded autonomy: Principle 4: every AI system, and every agent in particular, operates within explicit limits on actions, resources and decisions without a person, and those limits are enforced outside the model by components it does not control.
Scaling by risk class: The depth of evidence follows the AI Act's gradient. In the principles manifest a minimal-risk system is held to P1, P2, P7 and P8, a limited-risk system adds P5, and a high-risk system is held to all eight.
Order for resolving conflicts: A legal obligation first; then protection of the people affected over efficiency; then the option that is easier to reverse; finally the outcome is recorded as a decision or a time-limited exception in the AI Decision Record.
Principle exception: A record such as Hansa Mutual's EXC-0004 that names the requirement it relaxes, lists compensating controls, states residual risk and who accepted it, and expires. The pipeline treats an expired exception as a failing check.

Interactive exercises

Do them here and get feedback at once. Choose a card and then where it belongs, or drag it.

Interactive exercise 1 · Sort

Eight principles in four groups

Sort the eight principles of AI Architecture into the four groups the chapter gives them.

Interactive exercise 2 · Put in order

The order for resolving conflicts between principles

Put the steps in the order in which the chapter says a conflict between principles is resolved, the same order every time.

Teaching plan

10 min	Opening: the teacher asks which principles in participants' current AI policy have ever changed a decision, then states the chapter's test that a principle earns its place only if it does.
20 min	Teacher presentation of the eight principles by group, with the AI Act anchor and the verification for each, and the scaling block of the principles manifest.
10 min	Group discussion of Table 4.1, the recurring tensions, with attention to lineage against data minimisation and the resolution by reference and hash.
25 min	Exercise in pairs: write three lines of a principles statement with control and test, then record one exception with compensating controls.
10 min	Debrief: each pair presents its exception; the group checks for a named requirement, compensating controls, an acceptor and an expiry date.

Discussion

Nordvik Region expects quarterly override rates between 2 and 30 per cent, or a recorded explanation. Why is a rate near zero treated as a warning, and what would you expect to find behind it?
The chapter says a model cannot be trusted to respect limits it is merely told about. Where in your organisation are limits on an AI system stated only in a prompt or an instruction?
Hansa Mutual keeps one group statement that national entities may tighten but never weaken. What would be lost and gained if each market wrote its own principles instead?

Written exercise

Exercise · 25 minutes

A principles statement and a recorded exception

Part one: following Nordvik Region's one-page statement, choose three of the eight principles and write for each a line with four columns: what the organisation commits to, the control that enforces it, and the test that proves the control works, with a frequency. Part two: pick one principle your organisation cannot currently meet in full for a specific system, as Hansa Mutual cannot meet P3 for a hosted model. Record an exception in the form of EXC-0004: the principle and requirement relaxed, the reason, at least three compensating controls, the residual risk, the role that accepts it and an expiry date no more than twelve months ahead.

Deliverable: Three statement lines with control, test and frequency, and one exception record with compensating controls, acceptor and expiry date.

Your work

Self-test

Choose an answer to see whether it is right, or open the answer below each question.

In the chapter's principles manifest, which principles apply to a minimal-risk system?
Show the answer
A. P1, P2, P7 and P8
The scaling block lists P1, P2, P7 and P8 for minimal risk. A minimal-risk system is spared the rebuilds and oversight checks that would add cost without reducing risk.
How does the chapter resolve the tension between Principle 3, lineage, and data minimisation under the GDPR?
Show the answer
C. By tracing by reference and hash, so that personal data stays in the system of record
A trace that stores identifiers, versions and content hashes and not the documents themselves satisfies both Principle 3 and Articles 5 and 17 of the GDPR, because the personal data remains in the system of record.
Why does Hansa Mutual's exception EXC-0004 carry an expiry date?
Show the answer
D. Because an exception without an expiry date becomes the architecture by default
The chapter states that an exception without an expiry date becomes the architecture by default. The pipeline therefore treats an expired exception as a failing check, which forces the trade-off to be revisited.