Community Rules

This wiki is open for anyone to improve. These rules keep it fair: everyone is credited for what they write, and nobody can take credit away from someone else. Most of them are enforced automatically on every pull request.

How credit works

Every page names its author in the page header, and the footer of the published page shows it.

---
title: "Your Page Title"
author: Your Name
coauthors: Another Person, A Third Person
---

Field	Meaning
`author`	The person who wrote the page. Set once, when the page is created.
`coauthors`	People who later made a substantial addition. Optional; names separated by commas.

A page you add is credited to you. A page someone else wrote stays credited to them, and you can be added alongside as a co-author.

The credit rule: add, never take away

Credit can be added to a page but never removed or replaced. The rule protects every contributor equally, whether they wrote one page or sixty.

An automated check compares each pull request with the published version of the wiki. The table shows what it does with the changes people might try.

#	What the pull request does	Outcome	Why
1	Adds a new page with the contributor's own name as `author`	Allowed	You are credited for your own work.
2	Adds the contributor to `coauthors` on an existing page	Allowed	Credit is being added, and nobody loses theirs.
3	Replaces the `author` of someone else's page with another name	Blocked	The original writer's credit would be erased.
4	Makes the contributor `author` and moves the real author down to `coauthors`	Blocked	The author of a page does not change, even if the name is kept elsewhere.
5	Removes an existing co-author	Blocked	Someone's credit would be removed.
6	Deletes or renames a page that carries a credit	Blocked	Removing the page removes the credit with it.
7	Removes or alters a name in the `AUTHORS` file	Blocked	The contributor list is add-only.
8	Edits the checker or its workflow to switch the rule off	No effect	The check always runs the version on the main branch, not the one in the pull request.

Worked examples

Suppose Jane Doe wrote a page and Ali Khan later co-authored it:

author: Jane Doe
coauthors: Ali Khan

Allowed. Bob Lee adds a section and credits himself alongside them:

author: Jane Doe
coauthors: Ali Khan, Bob Lee

Blocked. Bob replaces Jane:

author: Bob Lee
coauthors: Ali Khan

The check reports: author must stay Jane Doe (found Bob Lee); add yourself under 'coauthors:' instead.

Blocked. Bob promotes himself and demotes Jane:

author: Bob Lee
coauthors: Jane Doe, Ali Khan

Same result: the author of an existing page does not change.

Blocked. Bob drops Ali:

author: Jane Doe

The check reports: co-author Ali Khan was removed.

A blocked pull request cannot be merged until the credit is restored.

What the check cannot judge

The check verifies that names are not removed. It cannot verify that a name deserves to be there. The maintainer reviews every pull request for the following, and will ask for changes or decline it:

Claiming co-authorship for a minor edit. Fixing a typo or a link is a welcome contribution, and it is recorded in the Contributors list in AUTHORS, not as co-authorship of the page.
Submitting someone else's work as your own. Only contribute text you wrote or have the right to share, and cite sources.
Adding a person without their knowledge. Do not list someone as author or co-author unless they took part.

Content rules

Stay vendor-neutral. Describe capabilities and evidence. Do not promote or disparage a product.
No confidential, personal or organization-specific information. Write so the page could apply to any organization.
Synthetic test data only. Test cases must never contain real credentials, personal data or customer records.
Edit the Markdown under source/, not the generated .html files.

When a rule is broken

The automated check fails and the pull request cannot be merged.
The maintainer explains what needs to change.
Once the credit or content is corrected, the pull request is reviewed again in the normal way.

Corrections that genuinely need a credit changed, such as fixing a misspelt name or removing a page at its author's request, are made by the maintainer.

Suggesting changes to these rules

These rules are not fixed. Suggestions from contributors are welcome, whether to change a rule, add one, or make the repository work better for the community.

A rule changes when two conditions are met:

It is justified. The proposal explains the problem with the current rule, what should change, and how the change benefits contributors and readers.
It is mutually agreed. The proposer and the maintainer discuss it openly and both agree on the final wording before anything changes.

How to propose a change:

Open an issue titled "Rule proposal: …" and set out the justification.
Discuss it in the issue. Other contributors are welcome to add their views.
Once agreed, the change is made to this page, and to the automated check if the rule is one it enforces.

Until a proposal is agreed, the current rules continue to apply. A pull request that changes this page or the check without an agreed proposal will not be merged.

Licence

Everything in the wiki is published under the Creative Commons Attribution-ShareAlike 4.0 International licence (CC BY-SA 4.0). You may copy, share and adapt it for any purpose, including commercially, as long as you credit the authors and release anything you build from it under the same licence. The full terms are in the LICENSE file.

Rules for reusing the wiki

The conditions apply when you share the material outside your own organization.

What you do	What the licence asks of you
Use the wiki inside your own organization without publishing it	Nothing.
Share a page, or part of one, unchanged	Credit the authors, link to the page and name the licence.
Share an adapted version, such as a translation, an edited copy or a document that builds on wiki text	Credit the authors, link to the page, say what you changed, and release your version under CC BY-SA 4.0.

When you share wiki material, these rules apply:

Credit the people named on the page. Give the page title, the author and any co-authors shown in its footer, a link to the page, and the licence. The credit rule above applies to reuse too: names are not dropped or replaced.
Say what you changed. A short note such as "translated into Arabic" or "sections 3 and 4 shortened" is enough.
Keep the same licence on adaptations. Anyone who receives your version has the same rights you had, so it cannot be made proprietary.
Add no further restrictions. Do not attach terms or technical locks that stop others doing what the licence allows.
Do not suggest endorsement. Credit does not mean the authors approve of your version or of how you use it.

A credit line can look like this:

"Enterprise AI Risk Register" by Nachiket Sathaye, AI Security Wiki
(https://nachi065.github.io/AI-Security-Wiki/), licensed under CC BY-SA 4.0.
Changes: adapted for a retail bank; risk scores removed.

The licence covers the wiki's own text. The frameworks, standards and laws it cites belong to their publishers and keep their own terms.

Versions of the wiki published before 10 October 2026 were released under CC BY 4.0 and remain available under that licence. To use the content under other terms, contact the author.

Licence for contributions

By contributing, you agree to license your contribution under CC BY 4.0, so that it can be published as part of the wiki under CC BY-SA 4.0.

Contribute only material you can license that way: your own writing, or material that is in the public domain or released under CC0 or CC BY, with the source cited. Text taken from a source under a NonCommercial or NoDerivatives licence cannot be accepted.

The step-by-step guide to making a change is in CONTRIBUTING.md.