{
  "$schema_version": "1.0",
  "description": "Controlled vocabulary for the jurisdiction that issues a regulation or standard. Referenced by the 'jurisdiction' field in regulations.json. Levels run from 'international' down to 'subnational'. 'multistate' covers US model-law bodies such as the NAIC. National nodes outside the US hold thin reference instruments so comparative queries can resolve even before vertical controls cite them.",
  "srf_version": "1.0",
  "updated": "2026-07-28",
  "levels": {
    "international": "A standards body or multilateral instrument with no independent force of law.",
    "supranational": "A treaty-based authority whose instruments bind its member states.",
    "national": "A sovereign state or one of its federal agencies.",
    "multistate": "A US model-law or coordinating body whose instruments bind only where a state adopts them.",
    "subnational": "A single US state or equivalent."
  },
  "jurisdictions": [
    {
      "id": "international",
      "name": "International (standards bodies)",
      "level": "international",
      "parent": null,
      "note": "ISO/IEC, IEC, OWASP, MITRE, CIS, CSA, FINOS and similar. Adopted voluntarily or by reference from a binding instrument. Soft-law fora with a distinct issuer identity (OECD) use their own node."
    },
    {
      "id": "oecd",
      "name": "OECD",
      "level": "international",
      "parent": null,
      "note": "Intergovernmental soft law. The OECD AI Principles bind no one directly, but supply vocabulary reused by the EU AI Act, NIST AI RMF, and most national strategies."
    },
    {
      "id": "eu",
      "name": "European Union",
      "level": "supranational",
      "parent": null,
      "note": "Regulations apply directly in member states; directives require transposition."
    },
    {
      "id": "us-federal",
      "name": "United States (federal)",
      "level": "national",
      "parent": null,
      "note": "Statute, agency rule, supervisory guidance, and executive-branch policy such as OMB memoranda."
    },
    {
      "id": "us-multistate",
      "name": "United States (multistate model law)",
      "level": "multistate",
      "parent": null,
      "note": "NAIC and similar model-law bodies. Peer to federal statute, not subordinate to it. Instruments bind only where a state adopts them, so a control citing one may be mandatory in some states and advisory in others."
    },
    {
      "id": "us-colorado",
      "name": "Colorado",
      "level": "subnational",
      "parent": "us-federal"
    },
    {
      "id": "us-new-york",
      "name": "New York",
      "level": "subnational",
      "parent": "us-federal"
    },
    {
      "id": "uk",
      "name": "United Kingdom",
      "level": "national",
      "parent": null,
      "note": "Pro-innovation regulator-led AI approach rather than a single horizontal AI Act. Sector regulators retain primary enforcement."
    },
    {
      "id": "china",
      "name": "People's Republic of China",
      "level": "national",
      "parent": null,
      "note": "CAC and related ministry rules on algorithmic recommendation, deep synthesis, and generative AI services."
    },
    {
      "id": "singapore",
      "name": "Singapore",
      "level": "national",
      "parent": null,
      "note": "Model AI Governance Framework and related IMDA/PDPC guidance. Voluntary baseline widely cited in Asia-Pacific procurement."
    },
    {
      "id": "canada",
      "name": "Canada",
      "level": "national",
      "parent": null,
      "note": "Federal Directive on Automated Decision-Making for government systems; AIDA remains proposed statute rather than enacted law."
    },
    {
      "id": "us-california",
      "name": "California",
      "level": "subnational",
      "parent": "us-federal",
      "note": "State AI transparency and automated-decision rules that sit beside federal privacy and sector law."
    },
    {
      "id": "japan",
      "name": "Japan",
      "level": "national",
      "parent": null,
      "note": "Human-centric AI soft law and METI/MIC guidance; AI Safety Institute workstreams growing."
    },
    {
      "id": "australia",
      "name": "Australia",
      "level": "national",
      "parent": null,
      "note": "Voluntary AI Ethics Principles and Commonwealth AI Safety Standard; sector regulators retain enforcement."
    },
    {
      "id": "south-korea",
      "name": "Republic of Korea",
      "level": "national",
      "parent": null,
      "note": "AI Basic Act (2024) establishes a horizontal national framework with phased obligations."
    },
    {
      "id": "brazil",
      "name": "Brazil",
      "level": "national",
      "parent": null,
      "note": "National AI strategy and proposed AI bill (PL 2338/2023); reference entry until enacted text stabilizes."
    },
    {
      "id": "india",
      "name": "India",
      "level": "national",
      "parent": null,
      "note": "MeitY advisories and IndiaAI programme guidance; soft-law posture pending comprehensive statute."
    }
  ]
}