Certification Framework Overview
The AIMCIS certification framework provides a structured path for entities to demonstrate compliance with the standard. Each entity progresses through four assurance levels (AL0–AL3) and can earn domain-specific badges for each of the twelve AIMCIS domains.
Certification Structure
| Level | Name | Verification Method | Issuer |
|---|---|---|---|
| AL0 | Aware | Self-declaration + Registry submission | Entity + AIMCIS Trust Registry |
| AL1 | Compliant | Automated checks (schema, DNS TXT, headers) | AUTOMATED CHECKS + Registry |
| AL2 | Verified | Third-party attestation by registered AAA | Attestation Authority (AAA) |
| AL3 | Certified | Annual recertification with full portfolio audit | AAA (annual review) |
Domain-Specific Certification
Each assurance level is evaluated independently across all twelve domains. An entity may achieve AL1 in some domains while remaining at AL0 in others, forming a certification portfolio that reflects their operational scope.
Certification Portfolio Example:
- A news website might hold:
AIMCIS-AL0,INFO-AL2,TRNS-AL1 - A hospital system might hold:
AIMCIS-AL0,MDCL-AL3,CNSN-AL2,GVRN-AL2,SFTY-AL2 - A full enterprise certification:
AIMCIS-AL0+ 12 ×[DOMAIN]-AL3(13 badges total)
Certification Lifecycle
- Registration: Entity submits self-declaration to AIMCIS Trust Registry at AL0.
- Automated Verification: Pipeline validates aimcis.json schema, DNS TXT records, and HTTP headers for AL1.
- AAA Attestation: Registered AAA conducts manual domain review and issues attestation certificates for AL2.
- Annual Recertification: AAA performs full portfolio audit with HSM key rotation verification for AL3.
Revocation & Renewal
| Level | Trigger | Action | Cure Period |
|---|---|---|---|
| AL1 | Broken DNS TXT or invalid aimcis.json | Automatic downgrade AL1→AL0 | 30 days to restore valid configuration |
| AL2/AL3 | AAA-initiated (material misrepresentation, key compromise) | Badge downgraded or removed | 30-day cure period; appeal to Domain Working Group |
Dispute Resolution
- Domain Working Group Review: Initial review within 14 business days.
- TSC Arbitration: If unresolved, TSC arbitration within 30 business days.
- Board of Stewards Final Decision: Binding decision within 45 business days of TSC referral.
All badge issuances, revocations, downgrades, and renewals are recorded in the AIMCIS Trust Registry public ledger with timestamps, entity identifiers, and attestation certificate hashes (for AL2/AL3).