NOMOS 13 is a normative proposal developed in this book. The audit questions and scenarios presented here are not findings from field research. Examples referring to a NOMOS score or compliance claim are also fictional; this book does not certify any system.
The publications below identify sources for certain established concepts and technical distinctions. These citations do not imply that any person or institution named endorses NOMOS 13. The technical records and machine rules are explanatory schemas; they must not be treated as working software, a universal data schema or a guarantee of application security. The .example suffix in domain names denotes illustrative use.
Artificial Intelligence Risk Management Framework (AI RMF 1.0)
National Institute of Standards and Technology · 2023
Risk-management context. This is not evidence that NOMOS has been validated.
https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.100-1.pdf
OECD AI Principles
OECD · 2019; updated 2024
A contextual reference for human rights, transparency and accountability.
https://oecd.ai/en/ai-principles
Privacy as Contextual Integrity
Helen Nissenbaum · 2004 · Washington Law Review 79(1), 119
The source of the concept of contextual integrity discussed in Article 4.
https://digitalcommons.law.uw.edu/wlr/vol79/iss1/10/
The Protection of Information in Computer Systems
Jerome H. Saltzer and Michael D. Schroeder · 1975
The established source for the principle of least privilege in Article 6.
https://web.mit.edu/Saltzer/www/publications/protection/
Making retries safe with idempotent APIs
Malcolm Featonby · Amazon Builders’ Library
The distinction in Article 6 between a transaction identifier and API behaviour that prevents an effect from actually being repeated.
https://aws.amazon.com/builders-library/making-retries-safe-with-idempotent-APIs/
HTTP Semantics (RFC 9110)
Roy Fielding, Mark Nottingham and Julian Reschke, editors · 2022
The distinction between HTTP 200 and 202 in Article 8, especially sections 15.3.1 and 15.3.3.
https://www.rfc-editor.org/rfc/rfc9110.html#section-15.3
Sources checked on 10 September 2026. Later dates in the cases belong to the fictional narrative.