Landscape

What share of EU enterprises with ten or more employees, outside the financial sector, used at least one AI technology on Eurostat's list in 2025?

1. 19.95 per cent
2. 30.36 per cent
3. 55.03 per cent
4. 8.06 per cent

In the AI Incident Database snapshot of 2 November 2026, which domain is the largest among the 1,498 classified incidents?

1. Physical injury from robots and self-driving vehicles, with 566 incidents, 412 of them on public roads
2. AI systems pursuing their own goals against human goals, with 412 incidents
3. Malicious actors and misuse, with 566 incidents, 412 of them fraud, scams and targeted manipulation
4. Hardware and software failures that made services unavailable, with 566 incidents, 412 of them from ransomware

Where does the book rank a self-selected survey such as the Stack Overflow Developer Survey among its five grades of source, and how does it quote it?

1. First, as an official statistic about the population of all developers
2. Second, as a probability survey with a sampling frame and weights
3. Fifth, as a vendor report quoted only where nothing better exists
4. Third, as perception data about its own respondents and nothing wider

According to the author's survey of the 284 diagrams of the seven volumes, how many carry a legend?

1. All 284, because one style guide required it
2. None of the 284, although six colour classes are shared
3. The 275 flowcharts, but not the nine diagrams of any other type
4. Only the 32 that use a rounded stadium shape

Why does the chapter say the picture of humans versus machines puts its one line in the wrong place?

1. Because it draws the line between Level 3 and Level 4, where a person is still informed and can stop each action
2. Because Eurostat measures no technology in which a machine acts alone
3. Because it draws the line after Level 0, while the consequential line runs between Level 2 and Level 3
4. Because the line should separate vendors from the organisation's own staff

On the Commission's Digital Decade definition for cloud, which counts intermediate and sophisticated services only, what was the 2025 share of EU enterprises?

1. 46.69 per cent, against a headline of 52.74 per cent
2. 52.74 per cent, the same as the headline
3. 44.91 per cent, the share of enterprises buying e-mail as a cloud service
4. 14.86 per cent, the share buying computing power

In the chapter's scene, what makes the third rule of Hansa Mutual's IT-operations agent, that it may never delete data, a limit and not a hope?

1. The rule is written in clear words at the top of the agent's instructions and repeated in its playbook
2. The supplier has confirmed the rule in a signed contract clause
3. The agent has been evaluated and found never to have asked to delete data
4. A separate component outside the agent checks every requested action and refuses the rest

Nordvik Region's internal staff assistant drafts a letter that a caseworker edits and sends under their own name. Which property defines this as AI beside people?

1. It is built on a large language model
2. It acts with the caseworker's login and permissions, so it can do nothing the caseworker could not do
3. It serves about 3,200 staff, which places its reach in class L and makes it one of the Region's larger marks
4. It is hosted by a European cloud provider, in the EEA only, with keys that the Region itself holds

In the scenario, Nordvik Region's first out-of-hours stop drill of the benefits-triage system takes 26 minutes against a budget of 15. What does the chapter conclude about the contract clause that required the stop?

1. The clause was not false; it was a promise, which is attestation and not evidence
2. The clause was false and the supplier was in breach of the tender
3. The clause was evidence, because the supplier had accepted it in writing
4. The clause was unnecessary, because caseworkers decide every case

A unit performs several kinds of action. According to the chapter, at which column is its mark drawn?

1. At the level of the action it performs most often in a year
2. At the average of the levels of all its actions, rounded down
3. At the highest level it holds for any action that changes something outside the unit
4. At the highest level it holds for any action at all, read-only actions such as enriching an alert included

How does Contour draw a Level 3 Bounded mark that has no filled diamond, and why?

1. Hollow with a cross through it, because a unit without a policy point counts as retired until one is enforced
2. With a thin red outline, because such a mark is Level 4 with a misleading label
3. With a dashed baseline, because its evidence is only attested
4. In the empty corner, because it cannot be reversed

Reach is drawn as one of four sizes. What does the class XL count?

1. 10,000 or more transactions handled by the unit in a month
2. More than half of the organisation's employees
3. 10,000 or more euros of cost per year
4. 10,000 or more people whose work or outcomes the unit's actions touch in a year

The chapter says about four in ten AI-using EU enterprises used three or more AI technologies in 2025. What is the status of that figure?

1. A share Eurostat publishes directly in its table on AI by size class
2. A result from a vendor survey of AI-using enterprises
3. The author's estimate, from dividing Eurostat's 8.28 per cent by its 19.95 per cent
4. A figure for large enterprises only, those with 250 or more persons employed, taken from Eurostat's table

In Nordvik Region's one-page landscape of 1 January 2027, how many units are drawn and how many does the model hold?

1. Eleven are drawn; the model holds thirteen, two of them planned for later in the year
2. Thirteen are drawn; the model holds seventeen, four of them retired
3. Seven are drawn; the model holds eleven, four of them paused
4. Eleven are drawn and the model holds eleven, all of them active

Why does pausing the AI system, as the committee paper proposes, not work as a single decision at Nordvik Region?

1. Because the AI Act, as amended in 2026, forbids a public authority from pausing a high-risk AI system once it is in use
2. Because it would pause some units, could not pause others, and would make no difference to features the vendors run
3. Because the committee has no authority over systems bought from suppliers
4. Because all thirteen entries are hosted outside the EU and cannot be reached

In Hansa Mutual's decision-rights view, at which level does the SOC investigation agent HM-SOC hold the action of wiping a host, and why?

1. Level 3 Bounded, because the playbook lists it as a pre-approved action
2. Level 4 Autonomous, because it changes nothing outside the case record
3. Level 2 Supervised, because an analyst approves each wipe before it runs
4. Level 0 Advisory, because a wiped host is hard to reverse, so the agent proposes and a person does it

Which two forms of automated management did EU workers report most often in the AIM-WORK survey?

1. Automated instructions and the speed of work set automatically
2. Rosters or shift hours allocated automatically, and work tasks allocated automatically
3. Ranking on a leaderboard and points or prizes for performance
4. Shifts that could be cancelled on a low rating, and work allocated on the basis of customer ratings

What does the chapter say the EU27 rows of the Stack Overflow survey figure are?

1. A filter on a self-selected, unweighted sample, not a representative European figure
2. A probability sample of developers in the 27 member states
3. An official statistic that Eurostat computes from the survey
4. A weighted estimate for all ICT specialists employed in the EU, computed from the survey's country shares

Under Article 25(1)(c) of the AI Act, as the chapter reads it, what follows when a deployer modifies the intended purpose of a system not classified as high-risk so that it becomes a high-risk AI system?

1. The original provider keeps every obligation for the new purpose
2. The system falls outside the Act until the next version of the model is released
3. The deployer is then considered to be the provider of that high-risk system
4. The general-purpose AI model inside it becomes a model with systemic risk

In Figure 7.4, why does the mark of the conversational assistants HM-CONV sit inside a model provider's dashed container, while HM-CA and HM-AWT stay inside Hansa Mutual's own boundary?

1. Because that provider operates the HM-CONV service, while the group operates HM-CA and HM-AWT itself
2. Because HM-CONV uses a larger model than the other two units
3. Because HM-CONV is a high-risk AI system under Annex III, and the notation places such systems with their provider
4. Because HM-CONV has no seat and the other two have one

The Stanford AI Index 2025 reported 233 incidents for 2024, and the snapshot of 2 November 2026 holds 313 for the same year. What limit of the AI Incident Database does this illustrate?

1. The database counts each incident once per harmed party
2. The database only records incidents that its editors can locate in the United States
3. The database merges incidents and hazards into one count
4. The record is revised retroactively, as reports for earlier years arrive

Why did the Commission's 2024 baseline trajectory for AI reach a lower value in 2030 (16.76 per cent) than the 2023 one (20.29 per cent)?

1. Because the 75 per cent target for 2030 had been lowered in the Commission's review of the Decision
2. Because the second observation, for 2023, had barely moved from the first, for 2021
3. Because Eurostat removed one technology from its list in 2023
4. Because the share of enterprises using AI fell between 2021 and 2023

In Nordvik Region's scenario year 2027, drawn in V2, which change does not occur?

1. The rostering system NR-SW moves from Level 2 Supervised to Level 3 Bounded
2. The agentic work tools NR-AWT move from Level 2 Supervised to Level 1 Assisted
3. The recruitment screening pilot NR-TL is retired
4. A unit changes row and becomes harder to reverse

Denmark's share of enterprises using AI was 23.89 per cent in 2021, 15.17 in 2023, 27.58 in 2024 and 42.03 in 2025. What does the chapter use the series to show?

1. That a line through the first two points fell while a line through the last two rises faster than anywhere in the Union
2. That Denmark reached the 75 per cent target ahead of the other member states
3. That the Danish survey was not run in 2024 and 2025
4. That small countries always adopt faster than large ones

In Eurostat's 2024 survey, for which consequence of an ICT security incident does the malicious cause edge ahead of failure or mistake?

1. Services made unavailable
2. Disclosure of confidential data
3. Data destroyed or corrupted by any cause
4. None of the three consequences

On the evidence ladder, as the chapter applies it, where do agents acting beyond their mandate stand today?

1. Pattern at scale, alongside fraud and discrimination by means of AI
2. Fiction only, with no evidence above that rung
3. Incident in the wild, the fourth of the five rungs
4. Argument and laboratory demonstration, like a system escaping control altogether

Read in the full order, which two marks on Hansa Mutual's landscape of 1 January 2027 does the chapter say need a decision?

1. The Mode 0 square HM-AMB at Level 4 without a seat, and HM-TL with a dashed baseline at R3
2. The IT-operations agent HM-ITO at R3 Hard to reverse, and the claims-triage agent HM-CT at R2
3. The agent-boss pilot HM-AB at Level 2, and the evidence-collection agent HM-EVC at R1
4. The two marks that sit in the empty corner at Level 4 and R4

A unit handles 400,000 transactions a year for 12,000 people. Which reach class does Contour give it?

1. L, because it falls between 1,000 and 9,999 people
2. It has no reach class until the transactions have been divided by the people they concern
3. XL, because it touches 10,000 or more people, whatever the number of transactions
4. XL only if the transactions rise to four million

Why can ENISA's 4,875 incidents for the twelve months to June 2025 not be read as a fall from 11,079 the year before?

1. Because the later report covers only public administration
2. Because the two reports cover different member states
3. Because the earlier count included incidents outside Europe
4. Because the counts were produced under different versions of ENISA's methodology

Where does the chapter say the rule of dividing stops applying?

1. At the top row of the landscape: one irreversible outcome for one person is not made small by a rate
2. In the bottom row, where everything is reversible at once
3. For official statistics, which need no denominator
4. For any unit of reach class S, because fewer than 100 people a year are too few to give a meaningful rate

According to the chapter, what did Regulation (EU) 2026/1744 change about the obligations for high-risk AI systems listed in Annex III?

1. It repealed them and replaced them with voluntary codes
2. It left the date at 2 August 2026 and removed recruitment and work allocation from the list in Annex III
3. It moved them to 2 August 2028 together with the Annex I products
4. It moved the date from which they apply to 2 December 2027; the obligations themselves did not change

In Nordvik Region's scenario, what did the reversibility test of the open-shift delegation, run from 5 to 16 April 2027, find?

1. That the rostering system had moved into the empty corner
2. That the deputy had never planned a route by hand and the manual template lacked the travel-time rule
3. That the fallback worked and the delegation could be extended at once
4. That the supplier could not show how applications for care vacancies were ranked, so the pilot was paused

Why does the chapter rewrite AI is being introduced into case handling as the head of the benefits unit decided to procure a triage system that ranks the queue at Level 0 Advisory?

1. Because the second sentence has a seat in it, while the first has a tide
2. Because the first sentence is false and the second is true
3. Because the AI Act requires the second wording in public registers
4. Because the second sentence names the model and the first does not

In Nordvik Region's evidence view of 1 January 2027, which units rest on attestations alone, and what do they have in common?

1. NR-BT, NR-CS, NR-SA and NR-AWT; all four run gates and policies as code
2. NR-CR and NR-CN; both have logs and tests but no gate
3. NR-SW, NR-CA, NR-EWA and NR-TL; all four are operated by suppliers
4. NR-AMB alone; it was switched on by vendors

Where does the chapter say the rule of reading from the other two chairs stops applying?

1. Where the law has already decided for one chair, and where the other chairs are empty
2. Where the unit's reach is S, and where the unit is in pilot
3. Where the supplier has attested the controls, and where the unit is Mode 0
4. Where the productivity case is strong, and where the board has already approved

How does the chapter characterise the leaders' figures from Microsoft's Work Trend Index 2025, such as the 81 per cent expecting agents within twelve to eighteen months?

1. As official statistics on agent deployment in EU enterprises
2. As a probability survey of executives in the 27 member states, with a sampling frame and weights
3. As measured use, taken from the vendor's telemetry of tenants in the European Union
4. As a vendor survey describing expectation and self-reported deployment, not measured use

What is the one-sentence finding of the second draft of the post-mortem on Hansa Mutual's stop drill?

1. The agent is unfit for its autonomy
2. Nobody has been named to decide the time to stop
3. The duty analyst failed to apply the deny rule in time
4. The supplier shipped credentials with too long a validity

After Nordvik Region's first out-of-hours stop drill of the benefits-triage system took 26 minutes against a budget of 15, what was the remedy in the scenario?

1. The regional executive committee took the decision right over the system at T4 and asked for quarterly drill figures
2. The system was retired and the ranking returned to caseworkers
3. The managed security service provider received a break-glass credential for one action; the seat stayed put
4. The budget was raised to 30 minutes and the drill was not repeated

The author sorts the thirty most frequent alleged deployers in the AI Incident Database into named organisations and unnamed categories. What does he say the resulting figure shows?

1. Whom the public blames after an incident involving AI
2. How often a decision right had been designed before the incident
3. That organisations cause fewer incidents than individuals do
4. How the record is labelled, not whom it blames; the split is partly an artefact of the labelling

Nordvik Region's benefits-triage system only ranks a queue while caseworkers decide every case. Why does its mark sit at R3 Hard to reverse?

1. Because the queue it ranks sets how long an applicant waits, and the row follows the outcome it shapes
2. Because a compromised version of the system could delete case files
3. Because it is a high-risk AI system under Annex III, and the notation draws every such system at R3 or above
4. Because it handles about 40,000 applications a month

Nobody has decided the autonomy level of a unit. According to the chapter, how is it drawn?

1. It is left out of the landscape until a named person has decided the level and recorded it
2. At Level 0 Advisory, as the most cautious assumption
3. In the empty corner, with a red outline
4. At the level its permissions allow, with level not decided written in the notes

When is the baseline for a unit's stop path drawn solid, according to the chapter?

1. When the mandate contains a paragraph describing the stop path
2. When the supplier has confirmed the stop path in the contract
3. When the stop has been run in a drill and logged
4. When an executive at T3 holds the seat

Which of these changes during a year does a trail in V2 draw?

1. A seat rising from T2 to T4 after a failed stop drill
2. A unit moving from Level 2 Supervised to Level 3 Bounded
3. A baseline turning from dashed to solid when logs are retained
4. A unit growing from reach S to reach M

The chapter labels one statement about the future as observable. Which one?

1. That the next Eurostat survey will report a higher share of enterprises using AI than 19.95 per cent
2. That agents will take over the decision of benefit cases
3. That the share of enterprises using AI will keep rising at the 2024 to 2025 pace
4. That the AI Act's obligations for Annex III high-risk uses apply from 2 December 2027

In the scenario, neither reversibility test fails outright. What does the chapter say follows for the two models?

1. In neither model does a row move; the finding sits in the conditions and the freezes
2. Both marks move up one row, from R2 to R3
3. Both units are retired and drawn hollow with a cross
4. Both tests are discarded because they were run after go-live

How does V3 draw a unit hosted in the EU data region of a global vendor, and why?

1. Inside the EU and EEA area with a dashed border, because the data stay in the Union under the contract
2. Inside the organisation's solid boundary, because the organisation is the deployer
3. It is left off the view until the vendor confirms the location in writing
4. In a dotted container, because the contract is with a company governed by its home country's law

Why do Hansa Mutual's UK and Swiss subsidiaries have no container in its supply view?

1. Because the AI Act does not apply directly in those two countries, so the notation leaves them out
2. Because the renderer draws a supplier's container only where a unit sits in it, and no unit does
3. Because the subsidiaries use no AI at all
4. Because their units are counted inside the container labelled various

How does the chapter characterise the estimate that European providers held around 15 per cent of the European cloud infrastructure market?

1. As one market research vendor's press-release estimate from a proprietary model, not an official statistic
2. As a Eurostat figure from the survey of enterprises with ten or more persons employed
3. As a measurement the Commission made for its Digital Decade dashboard
4. As a forecast by the book's author for the year 2035

Between 1 January and 31 December 2027, Hansa Mutual's ambient AI row gains a seat reading 2 while its bar stays at Level 4 Autonomous. Why is the bar unchanged?

1. Because the executive board decided, on 31 March, to keep the vendors' features at Level 4
2. Because a policy point now enforces the Level 4 ceiling
3. Because the group cannot change what a vendor's product does; it can only add a seat
4. Because the renderer draws Mode 0 units at Level 4 whatever the model says

Why is Nordvik Region's supplier evidence schedule for the benefits-triage system drawn as a hatched cell in V5?

1. Because it is a dated set of declarations about the supplier's side: the supplier's word, next to the Region's own logs
2. Because the stop drill behind it failed its budget when re-run
3. Because the benefits-triage system produces no logs of its own
4. Because the schedule has not yet entered into force

In the review of one unit, what follows from a no to any of the six capabilities of the named holder?

1. The seat is drawn with a red outline
2. The seat is drawn one tier higher than the holder's role
3. The unit must be retired before the next quarter
4. The seat is not drawn until every answer is yes

In the scenario, what happens to the mark of Hansa Mutual's IT-operations agent HM-ITO on the grid on 31 March 2027?

1. It moves from Level 3 Bounded to Level 2 Supervised, because the stop drill took 17 minutes against a budget of 5
2. Nothing moves; the seat above it changes from 2 to 4 when the executive board takes the decision right
3. It moves from R3 Hard to reverse to R2 Reversible with effort
4. It is drawn hollow because the agent is paused until the next drill

What do the summary strips of Figure 18.6 report for Nordvik Region across the year?

1. Filled diamond 16 before and after, seat 16 then 17, solid baseline 12 then 13
2. Filled diamond 11 then 13, seat 11 then 13, solid baseline 11 then 13
3. Filled diamond 7 then 11, seat 10 then 13, solid baseline 6 then 8, of 11 and then 13 marks
4. Filled diamond 3 then 0, seat 1 then 0, solid baseline 4 then 0

Which trail is the only leftward trail in either landscape during 2027?

1. The rostering system NR-SW, from Level 3 Bounded to Level 2 Supervised
2. The agentic work tools NR-AWT, from Level 2 Supervised to Level 1 Assisted
3. The claims-triage agent HM-CT, from Level 3 Bounded to Level 2 Supervised
4. The citizen-service assistant NR-CS, from Level 4 Autonomous to Level 3 Bounded

In the executive's scene, the board paper says the AI is now automated across claims handling in all markets. What does the second rule find?

1. That the sentence is true of every action of the three units that touch claims handling
2. That the sentence is false, because no unit at Hansa Mutual acts above Level 1 Assisted
3. That it is true of routing, false of settlement and misleading about drafting
4. That the sentence cannot be assessed without the name of the model

How does the regional director answer the question whether the Region's rogue AI could decide about a resident's benefits without a person?

1. No system decides about a resident's benefits; one orders the queue in which people decide
2. The benefits-triage system decides only the simple cases, at Level 3 Bounded, and hands the rest to caseworkers
3. The Region has paused all its AI until the audit committee reports
4. The question cannot be answered because the supplier will not show the ranking

A press release says 463 AI incidents were recorded in 2025, up from 313 in 2024, and that the trend is accelerating. What does the fourth rule say about the second claim?

1. That the trend is confirmed, because both counts come from the same database
2. That the trend is false, because the counts fell after revision
3. That the trend applies to Europe only, where most incidents are located
4. That two points do not make a trend; what bent the curve is partly adoption, partly attention and partly editorial throughput

Which of these statements does the chapter place under Expected, and on what evidence?

1. That a public authority in the EU lets an agent act at Level 3 Bounded on a resident's case within five years, because vendors forecast it
2. That the next Eurostat enterprise survey reports a higher share than 19.95 per cent, because the share has risen at every survey since 2021
3. That the next amendment of the AI Act defers the Annex III date again, because a date that has moved once can move
4. That a system escapes control and causes catastrophic harm, because the incident database holds three entries

In the table of the test retaken, why can the answers to Questions 3 and 9 not change?

1. Because Eurostat has stopped running the AI module, so no later value will replace the two answers
2. Because both rest on vendor surveys that will not be repeated
3. Because both are fixed by Regulation (EU) 2026/1744
4. Because they are history: two published past values, and a 2023 baseline that is a document

What do the chapter's projections have in common in their form?

1. Each carries a label, its evidence and a statement of what would show it wrong
2. Each is labelled observable, because it rests on adopted legislation
3. Each gives a single number for 2030 without a range
4. Each concerns Nordvik Region and Hansa Mutual only