OMP Domain Profile: AI Governance Evidence Under Singapore's Model AI Governance Framework, MAS FEAT Principles, and the ASEAN Guide on AI Governance and Ethics
draft-veridom-omp-sgapac-00
This document is an Internet-Draft (I-D).
Anyone may submit an I-D to the IETF.
This I-D is not endorsed by the IETF and has no formal standing in the
IETF standards process.
| Document | Type | Active Internet-Draft (individual) | |
|---|---|---|---|
| Authors | Tolulope Adebayo , Oluropo Apalowo , Festus Makanjuola | ||
| Last updated | 2026-04-06 | ||
| RFC stream | (None) | ||
| Intended RFC status | (None) | ||
| Formats | |||
| Stream | Stream state | (No stream defined) | |
| Consensus boilerplate | Unknown | ||
| RFC Editor Note | (None) | ||
| IESG | IESG state | I-D Exists | |
| Telechat date | (None) | ||
| Responsible AD | (None) | ||
| Send notices to | (None) |
draft-veridom-omp-sgapac-00
Internet Engineering Task Force T. Adebayo
Internet-Draft O. Apalowo
Intended status: Informational F. Makanjuola
Expires: 7 October 2026 Veridom Ltd
5 April 2026
OMP Domain Profile: AI Governance Evidence Under Singapore's Model AI
Governance Framework, MAS FEAT Principles, and the ASEAN Guide on AI
Governance and Ethics
draft-veridom-omp-sgapac-00
Abstract
This document defines a domain profile of the Operating Model
Protocol (OMP) for AI systems deployed in Singapore and the ASEAN
region subject to the Singapore Model AI Governance Framework (Second
Edition, 2020), the Monetary Authority of Singapore (MAS) FEAT
Principles for financial services AI, and the ASEAN Guide on AI
Governance and Ethics (2024).
The profile -- designated SingapureMark -- specifies how OMP's
deterministic routing invariant, Watchtower enforcement framework,
and three-layer cryptographic integrity architecture generate the
per-decision accountability evidence required by Singapore's model AI
governance framework, satisfy the MAS FEAT Principles' named
accountability and explainability requirements, and align with the
ASEAN Guide's human oversight and consumer protection governance
standards.
The OMP core specification is defined in the Operating Model Protocol
Internet-Draft (draft-veridom-omp).
Status of This Memo
This Internet-Draft is submitted in full conformance with the
provisions of BCP 78 and BCP 79.
Internet-Drafts are working documents of the Internet Engineering
Task Force (IETF). Note that other groups may also distribute
working documents as Internet-Drafts. The list of current Internet-
Drafts is at https://datatracker.ietf.org/drafts/current/.
Internet-Drafts are draft documents valid for a maximum of six months
and may be updated, replaced, or obsoleted by other documents at any
time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress."
Adebayo, et al. Expires 7 October 2026 [Page 1]
Internet-Draft OMP Singapore APAC Profile April 2026
This Internet-Draft will expire on 7 October 2026.
Copyright Notice
Copyright (c) 2026 IETF Trust and the persons identified as the
document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents (https://trustee.ietf.org/
license-info) in effect on the date of publication of this document.
Please review these documents carefully, as they describe your rights
and restrictions with respect to this document.
Table of Contents
1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 2
2. Profile Specification . . . . . . . . . . . . . . . . . . . . 3
3. The Profile Invariant . . . . . . . . . . . . . . . . . . . . 3
4. Security Considerations . . . . . . . . . . . . . . . . . . . 3
5. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 3
6. References . . . . . . . . . . . . . . . . . . . . . . . . . 3
6.1. Normative References . . . . . . . . . . . . . . . . . . 3
6.2. Informative References . . . . . . . . . . . . . . . . . 4
Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 5
1. Introduction
This document specifies the SingapureMark domain profile for OMP,
covering AI systems deployed in Singapore and the ASEAN region
subject to the Singapore Model AI Governance Framework (MAIGF, Second
Edition) [SG-MAIGF-2020], the Monetary Authority of Singapore (MAS)
FEAT Principles [MAS-FEAT], the MAS AF-FEAT Accountability Framework
[MAS-AF-FEAT], and the ASEAN Guide on AI Governance and Ethics (2024)
[ASEAN-AI-2024]. The full specification is provided in the plain-
text version of this Internet-Draft.
SingapureMark completes the geographic triad of OMP regulatory
profiles alongside the UK FCA DutyMark profile [I-D.veridom-omp-fca],
the EU AI Act EUAIA profile [I-D.veridom-omp-euaia], and the AI
Liability Insurance InsureMark profile [I-D.veridom-omp-aiins].
Audit Trace payloads are canonicalized per [RFC8785]. Audit Traces
are timestamped per [RFC3161]. Sealed Audit Traces are verifiable
using the OMP Reference Validator [OMP-OPEN-CORE]. The OMP
specification is also archived at [ZENODO-OMP].
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
"SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
document are to be interpreted as described in [RFC2119] [RFC8174].
Adebayo, et al. Expires 7 October 2026 [Page 2]
Internet-Draft OMP Singapore APAC Profile April 2026
2. Profile Specification
The complete profile specification -- including all terminology,
regulatory framework analysis, routing state definitions, Watchtower
definitions, Audit Trace schema extensions, deployment category
mappings, invariant definition, and security considerations -- is
provided in the companion plain-text specification for this Internet-
Draft. This XML rendition provides the structured metadata,
references, and IANA considerations for the IETF Datatracker and
xml2rfc processing pipeline.
3. The Profile Invariant
Implementations of this profile MUST satisfy the two-property
invariant specified in the plain-text companion document: (1) every
consequential AI decision generates a sealed Audit Trace documenting
the decision, human oversight applied, and applicable regulatory
evidence fields; and (2) the Audit Trace is sealed with the three-
layer integrity architecture defined in [I-D.veridom-omp] Section 7,
detectable as modified by any third party without access to the
operator's infrastructure.
4. Security Considerations
The security considerations of [I-D.veridom-omp] apply in full.
Operators MUST implement appropriate access controls and data
protection measures for Audit Trace storage, access, and disclosure
consistent with applicable jurisdiction law.
5. IANA Considerations
This document has no IANA actions.
6. References
6.1. Normative References
[I-D.veridom-omp]
Adebayo, T., Apalowo, O., and F. Makanjuola, "Operating
Model Protocol (OMP): A Deterministic Decision-Enforcement
Protocol with Externalized Proof-of-Integrity", Work in
Progress, Internet-Draft, draft-veridom-omp-00, March
2026, <https://datatracker.ietf.org/doc/html/draft-
veridom-omp-00>.
[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate
Requirement Levels", BCP 14, RFC 2119, March 1997,
<https://www.rfc-editor.org/info/rfc2119>.
Adebayo, et al. Expires 7 October 2026 [Page 3]
Internet-Draft OMP Singapore APAC Profile April 2026
[RFC3161] Adams, C., Cain, P., Pinkas, D., and R. Zuccherato,
"Internet X.509 Public Key Infrastructure Time-Stamp
Protocol (TSP)", RFC 3161, August 2001,
<https://www.rfc-editor.org/info/rfc3161>.
[RFC8174] Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC
2119 Key Words", BCP 14, RFC 8174, May 2017,
<https://www.rfc-editor.org/info/rfc8174>.
[RFC8785] Rundgren, A., Jordan, B., and S. Erdtman, "JSON
Canonicalization Scheme (JCS)", RFC 8785, June 2020,
<https://www.rfc-editor.org/info/rfc8785>.
6.2. Informative References
[ASEAN-AI-2024]
Association of Southeast Asian Nations, "ASEAN Guide on AI
Governance and Ethics", 2024.
[I-D.veridom-omp-aiins]
Adebayo, T., Apalowo, O., and F. Makanjuola, "OMP Domain
Profile: AI Liability Insurance Underwriting and
Parametric Claims Evidence", Work in Progress, Internet-
Draft, draft-veridom-omp-aiins-00, 2026,
<https://datatracker.ietf.org/doc/html/draft-veridom-omp-
aiins-00>.
[I-D.veridom-omp-euaia]
Adebayo, T., Apalowo, O., and F. Makanjuola, "OMP Domain
Profile: EU AI Act Article 12 Logging and Traceability
Requirements", Work in Progress, Internet-Draft, draft-
veridom-omp-euaia-00, 2026,
<https://datatracker.ietf.org/doc/html/draft-veridom-omp-
euaia-00>.
[I-D.veridom-omp-fca]
Adebayo, T., Apalowo, O., and F. Makanjuola, "OMP Domain
Profile: FCA Consumer Duty, SM&CR Accountability, and AI
Governance Evidence for UK Retail Financial Services",
Work in Progress, Internet-Draft, draft-veridom-omp-fca-
00, 2026, <https://datatracker.ietf.org/doc/html/draft-
veridom-omp-fca-00>.
[MAS-AF-FEAT]
Monetary Authority of Singapore, "Assessment Framework for
the FEAT Principles", 2022.
Adebayo, et al. Expires 7 October 2026 [Page 4]
Internet-Draft OMP Singapore APAC Profile April 2026
[MAS-FEAT] Monetary Authority of Singapore, "Principles to Promote
Fairness, Ethics, Accountability and Transparency (FEAT)",
2019.
[OMP-OPEN-CORE]
Veridom Ltd, "OMP Open Core: Reference Validator and
Schema Library", Apache 2.0,
https://github.com/veridomltd/omp-open-core, 2026.
[SG-MAIGF-2020]
Adebayo, T., Apalowo, O., and F. Makanjuola, "Model
Artificial Intelligence Governance Framework, Second
Edition", 2020.
[ZENODO-OMP]
Adebayo, T., Apalowo, O., and F. Makanjuola, "OMP --
Operating Model Protocol", Zenodo DOI
10.5281/zenodo.19140948, March 2026.
Authors' Addresses
Tolulope Adebayo
Veridom Ltd
London
United Kingdom
Email: tolulope@veridom.io
Oluropo Apalowo
Veridom Ltd
Awka
Nigeria
Email: ropo@veridom.io
Festus Makanjuola
Veridom Ltd
Toronto
Canada
Email: festus@veridom.io
Adebayo, et al. Expires 7 October 2026 [Page 5]