DSI 001Decision Standards Institute
DSI 001 · For boards and audit committees

Your duty did not change

The evidence required to discharge it did. DSI 001 produces the independently assessed, contemporaneous record a board needs to answer the three accountability questions for an autonomous system, through the structures it already uses.

The accountability standard did not move

The test a court applies after an adverse outcome is unchanged: who held authority, what did they know, what did they do.

Governance that exists on paper but is not exercised does not discharge the duty, a principle the authorities articulate for directors generally and which applies by analogy to autonomous-system oversight.

Question 01
Who held authority?
The autonomy and authority summary, tabled at deployment.
Question 02
What did they know?
An independent assessment, not a management representation.
Question 03
What did they do?
A contemporaneous record of resolutions and escalations.
If absent
Governance on paper
A structure that exists but is not exercised.

Seven obligations, one assessment

Board obligationDSI 001 outputReporting artefact
Know what is deployedRegistry and dimensional profileDecision System Registry
Understand autonomyD1 Autonomy GradientAutonomy and Authority Summary
Challenge managementIndependent GBI assessmentIndependent Governance Assessment Report
Monitor controlsGCI, exercised in practiceGCI Dashboard
Oversee liabilityD4 and multiplier conditionsLiability Architecture Summary
Keep paceD6 and reassessment triggersReassessment and Lifecycle Summary
Keep recordsEIS-01 evidence tiersEvidence Tier Report

The questions the GBI answers

D1Autonomy. What runs without a director or officer in the loop?
D2Data. What is exposed if its decisions are wrong?
D3Contract. Is liability for autonomous actions allocated in the chain?
D4Liability. Are autonomous commitments recognised and treated?
D5Leverage. How dependent is the organisation on the system running?
D6Stability. Does governance keep pace as the system changes?
For APRA-regulated boards

The expectation is explicit: CPS 230 contract compliance is due 1 July 2026, and the April 2026 AI letter calls for board oversight of AI as an enterprise risk. (Regulatory position as at [25 June 2026].)

Bring an assessment to the board

Commission a DSI 001 assessment and table the board paper alongside the registry, the autonomy summary and the independent assessment report.

Status and limits. DSI 001 does not determine whether directors have discharged their duties; it provides a structured, contemporaneous record relevant to that question. A GBI score carries evidential value only when issued by an accredited DSI 001 assessor against the methodology; self-scored or indicative figures are not DSI 001 results. DSI 001 does not determine legal compliance, regulatory approval, insurability, creditworthiness, or the discharge of fiduciary duties. It provides a scoped governance classification and evidence record that may be relevant to those analyses.