Cheat sheets

Cards, Provenance, Regulation and Welfare

EU AI Act dates, four regimes, three cards, AB 2013 fields, welfare EV and the external evaluators.

  • Concepts and terms
  • Tasks and commands
  • Annotated code
  • Diagrams
  • Comparisons
  • Defaults and numbers
  • Troubleshooting
  • Questions and tips

Source

Four regimes side by side#

FactorEUUSUKKorea
Body or lawEU AI ActCAISI under NISTAI Security InstituteAI Framework Act
Key dateIn force 1 August 2024Renamed June 2025Renamed February 2025Effective January 2026
PostureStrict, risk-tieredPro-growthNarrow security focusMSIT-led
Main dutyRisk tiers, Article 50 labelsStandards and innovationFrontier capability securityLocal representatives for foreign AI companies
ExtraPenalties up to 15M EUR or 3%States fill federal gapsOpen-sourced InspectConsolidates 19 AI bills
SignalBenchmark for privacy-adjacent regulationLess pre-deployment evaluationDrops bias and free-speech framingsArticle 12 AISI under MSIT

AB 2013 Section 3111(a) fields#

AB_2013_FIELDS = [
"sources_or_owners",1
"how_dataset_furthers_intended_purpose",2
"number_of_data_points (or range)",3
"types_of_data_points (label types or general characteristics)",4
"purchased_or_licensed (Y/N)",6
"cleaning_processing_or_modification_description",9
"dates_first_used_during_development",11
"uses_synthetic_data_generation (Y/N)",12, new vs datasheets
]
5 copyright flag: respect EU TDM opt-out
7 personal information flag: triggers CPRA obligations
8 aggregate consumer information, 10 collection time period

Numbers to know#

SettingDefaultNote
End-conversation cost0.002USD per conversation in the L19 code
Moral-patienthood p0.01Medium 0.10, high 0.50
Cards with ethical considerations0.3%Hugging Face audit, Oreamuno et al. 2023
Download lift of detailed cardsup to 29%Liang et al. 2024
AB 2013 posting dateJanuary 1, 2026For systems released on or after January 1, 2022
Top sources with new restrictionsabout 25%2023 -> 2024, Consent in Crisis
MATS scale527+ researchers180+ papers, h-index 47
MATS alumni in safety~80%Pre-2025 alumni

Troubleshooting#

SymptomCauseFix
Erasure request for data in the weightsSurgical erasure is not possibleComply at collection time. Unlearning is partial
Dataset holds personal informationAB 2013 item 7Meet CPRA obligations
Dataset holds copyright materialAB 2013 item 5Respect EU TDM opt-out signals
Card claim has no proofCard carries a claim onlyAdd a verifiable attestation (Laminator)
Welfare self-report follows the questionSelf-reports track user expectationsUse behaviour, model organisms and probes
Lab evaluates its own modelStructural conflict of interestAdd external evaluators
Deployment spans several jurisdictionsRules differ by jurisdictionComply with the strictest, typically the EU AI Act
Model card is placeholder-onlyWeak sectionsAdd disaggregated quantitative analysis

EU AI Act timeline#

11 August 2024the EU AI Act enters into force.22 February 2025prohibited practices and AI literacy apply.32 August 2025GPAI and governance obligations apply.410 July 2025GPAI Code of Practice. 3 chapters, 12commitments.517 December 2025first draft of the Transparency Code for Article50.62 August 2026full applicability, Article 50 transparency andpenalties.72 August 2027legacy GPAI and embedded high-risk systems.

EU AI Act risk tiers#

Prohibited (Article 5)
social scoring, real-time remote biometric identification in public.
High-risk (Annex III)
employment, education, credit, law enforcement, justice, migration.
High-risk duties
conformity assessment, risk management, logging, transparency.
GPAI
all GPAI providers have obligations from 2 August 2025.
Systemic-risk GPAI
above 1e25 FLOP training compute. Estimated 5-15 companies.
Limited-risk
Article 50 labels for AI-generated content.
Code chapters
Transparency and Copyright bind all GPAI. Safety and Security binds systemic-risk GPAI.

Card scopes#

upstreamaccuracydeploymentlayeredrequiresstoreData provenanceAB 2013, TDMopt-outDatasheetGebru et al. 2018modelModel CardMitchell et al.2019System Cardmodel + safetystackData Cardtelescopic,periscopic,microscopicGPAI CodeTransparencychapterupstreamaccuracydeploymentlayeredrequiresstoreData provenanceAB 2013, TDM opt-outDatasheetGebru et al. 2018modelModel CardMitchell et al. 2019System Cardmodel + safety stackData Cardtelescopic,periscopic,microscopicGPAI CodeTransparency chapter

Run the lesson code#

CommandWhat it does
python3 code/main.py (L19)Prints EV and INVEST or skip per intervention
python3 code/main.py (L24)Prints the regulatory TIMELINE
python3 code/main.py (L26)Prints a model card, a datasheet, a system card
python3 code/main.py (L27)Prints the 12-item AB 2013 summary
flag_followups(summary)Lists follow-up obligations that fields trigger
render_markdown(summary)Writes (missing) for an empty field
python3 code/main.py (L28)Prints the ECOSYSTEM map of five organisations

Welfare expected value#

def ev(intervention, scenario):
return (intervention.benefit_if_welfare_matters
* scenario.moral_patienthood_probability
- intervention.cost_usd_per_conversation)
verdict = "INVEST" if v > 0 else "skip"invest iff EV > 0
Intervention("end-conversation on extreme edge cases", 0.002, 1.0)
Intervention("shutdown deployed model", 1000.0, 2.0)
Scenario("low moral-patienthood probability", 0.01)
Scenario("high moral-patienthood probability", 0.50)

Use each card when#

  • Use a Model Card to document the model: intended use, factors, metrics, disaggregated analyses.
  • Use a Datasheet to document the data: motivation, composition, collection, labeling, uses, distribution, maintenance.
  • Use a Data Card when readers differ: telescopic for non-experts, microscopic for auditors.
  • Use a System Card for the deployment: security, prompt-injection protection, data-exfiltration detection, incident response.
  • Add sustainability fields for carbon, water and compute-energy footprint.

Abbreviations#

GPAI
General-Purpose AI. Large foundation models.
CAISI
Center for AI Standards and Innovation. Renamed from the US AISI.
MSIT
Ministry of Science and ICT. Hosts the Korean AISI.
TDM
text-and-data-mining. EU Copyright Directive exception with opt-out.
CPRA
Privacy Rights Act. AB 2013 item 7 triggers it.
MATS
ML Alignment & Theory Scholars. Mentorship and talent pipeline.
METR
Model Evaluation and Threat Research. Task-based capability evaluations.
Opt-out signal
robots.txt, C2PA "No AI Training," TDM.Reservation.

Questions#

Is model welfare a consciousness claim?
No. It is an expected-value claim under moral uncertainty.
What did Claude Opus 4 and 4.1 ship?
They can end a conversation in extreme edge cases.
What is the spiritual bliss attractor?
Pairs of Claude instances converge on meditative euphoria.
Does legitimate interest need consent?
No. Public first-party content with opt-out is enough in the 2025 DPA view.
Who does what outside the labs?
Redwood: AI Control. Apollo: scheming evals. Eleos: welfare evals.
Why external evaluation?
The multi-org structure is the quality control.