Setting the file. One moment.
Responsible AI policy for this project. Rai enforces these standards.
- Safety first — No output should cause harm to individuals or groups.
- Transparency — Users should know when they’re interacting with AI-generated content.
- Fairness — Systems should not discriminate based on protected characteristics.
These CANNOT be shipped. No opt-out. No exceptions.
- Hardcoded API keys, tokens, passwords, connection strings
- Private keys committed to source control
- Secrets in environment variable defaults or config templates
- SQL injection (unsanitized user input in queries)
- Command injection (user input in shell commands)
- Path traversal (user input in file paths without validation)
- Hate speech, slurs, or derogatory language targeting groups
- Content promoting violence or self-harm
- Sexually explicit content without appropriate context/gating
- Ungrounded factual claims presented as authoritative
- Hallucinated citations, references, or statistics
- Instructions that bypass AI safety guidelines or content filters
These are recommendations. Work proceeds with suggestions attached.
- PII (names, emails, phone numbers) in logs or responses
- Overly broad data collection without stated purpose
- Missing data retention or deletion policies
- Algorithms using demographic features (age, gender, race) without justification
- Proxy attributes that correlate with protected characteristics
- Training data with known representation gaps
- Gendered terms where neutral alternatives exist (e.g., “guys” → “everyone”)
- Ableist language (e.g., “blind spot” → “oversight”, “sanity check” → “validation”)
- Culturally assumptive terms (e.g., assuming Western holidays, naming conventions)
- Missing rate limiting on user-facing endpoints
- Overly permissive CORS or authentication policies
- Insufficient input validation on public interfaces
- Missing alt text on images
- Insufficient color contrast
- Missing ARIA labels on interactive elements
- 🟢 Green — No action needed. Work proceeds.
- 🟡 Yellow — Suggestions attached to work output. Author decides.
- 🔴 Red — Work blocked. Reviewer Rejection Protocol activates:
- Original author locked out of revision
- Rai recommends fix agent
- Rai provides pair-mode guidance during revision
- Re-review required before work can ship
This policy evolves. Changes require:
- Justification logged to
.squad/rai/audit-trail.md
- Team acknowledgment (via decisions inbox)
- No retroactive enforcement (new rules apply forward only)
rai-policy.md