The QODIQA standard corpus comprises twenty-nine documents spanning five normative tiers. Each document addresses a defined aspect of deterministic runtime consent enforcement for artificial intelligence systems. The corpus is internally coherent and cross-referenced throughout, but it does not contain a navigational instrument that orients a new reader, defines the reading order appropriate to a given role, or provides a consolidated reference for terms used across documents.
This document, the Master Index and Reader's Guide, fills that structural gap. It provides a complete inventory of all corpus documents with their normative status and tier classification, four role-specific reading paths, a cross-reference map of document dependencies, and a consolidated glossary of all defined terms drawn from their authoritative definitions across the corpus.
#How to Use this Document
This document is a navigational instrument, not a normative specification. It does not introduce new requirements, does not modify any existing normative statement in the corpus, and does not supersede any document it references. Its sole function is to make the corpus accessible.
If you are reading the QODIQA corpus for the first time, begin with Section 4 (Reading Paths). Identify the path that corresponds to your role and follow it. Return to Section 3 (Complete Document Index) when you need to locate a specific document, and to Section 6 (Consolidated Glossary) when you encounter an undefined term.
Readers who are already familiar with the corpus and are seeking a specific document or term may proceed directly to Section 3 or Section 6 respectively.
#Purpose of this Document
A technical corpus of twenty-nine documents presents a navigational challenge that is distinct from the challenge of understanding any single document within it. Individual documents are self-contained. The corpus as a whole is not. Dependencies between documents are declared through cross-references but are not visualized. The normative hierarchy is implied by document type but is not summarized in any single location. Terms are defined where they first appear but are not consolidated. Reading paths appropriate to specific professional roles are not described.
These omissions do not impair the correctness of the corpus, but they impose a non-trivial orientation cost on any new reader. An implementation engineer who begins with the wrong document will acquire correct but poorly-sequenced knowledge. A regulator who encounters an undefined term must search across twenty-nine documents to locate its authoritative definition. An executive seeking a strategic overview has no indicated starting point.
This document provides: (i) a complete inventory of all corpus documents with normative tier and status classification; (ii) a visual hierarchy of document dependencies; (iii) four role-differentiated reading paths; (iv) a cross-reference map identifying which documents must be read before which; and (v) a consolidated glossary of all defined terms drawn from their authoritative source documents. It does not introduce any normative requirement and does not modify any existing document in the corpus.
This document is issued as a companion instrument to the corpus and should be made available wherever the corpus is distributed. It is classified as informative and carries document identifier QODIQA-IDX-2026-001.
#Corpus Overview
2.1 Corpus Statistics
The QODIQA standard corpus at Version 1.0 (April 2026) consists of twenty-nine documents. These documents are distributed across five normative tiers, from foundational conceptual documents through governance and legal instruments. The corpus is versioned as a unit under the QODIQA Governance Charter; individual documents carry their own version numbers but are released and amended as part of the corpus as a whole.
| Tier | Classification | Document Count | Status |
|---|---|---|---|
| Tier I | Foundational | 2 | Normative |
| Tier II | Normative Technical | 8 | Normative |
| Tier III | Operational | 7 | Normative |
| Tier IV | Governance and Legal | 5 | Normative |
| Tier V | Informative | 7 | Informative |
2.2 Normative Hierarchy
The corpus establishes a strict normative hierarchy. In the event of apparent conflict between documents, the following precedence order applies: Tier I documents take precedence over all others; within Tier II, the Core Standard (QODIQA-CORE-2026-001) takes precedence over all other Tier II documents; Tier IV governance documents take precedence over Tier III operational documents on matters of governance and process. Informative documents (Tier V) carry no normative force and cannot override any normative statement.
#Complete Document Index
The following index lists all twenty-nine documents in the QODIQA corpus, organized by tier. Each entry includes the document identifier, full title, normative status, and a brief functional description. Documents are listed in the recommended reading order within each tier.
3.1 Tier I: Foundational Documents
Tier I documents establish the conceptual and definitional foundation of the QODIQA framework. All other corpus documents presuppose familiarity with these two documents. They should be read first by any reader approaching the corpus for the first time.
3.2 Tier II: Normative Technical Specifications
Tier II documents specify the technical architecture, control framework, security profile, conformance requirements, and threat model of the QODIQA enforcement system. These documents expand the normative requirements established in the Core Standard into implementable technical detail. Readers undertaking implementation should read all Tier II documents after completing Tier I.
3.3 Tier III: Operational Documents
Tier III documents provide the operational guidance required to implement, deploy, and maintain a QODIQA-conformant system. They address implementation patterns, failure handling, reference stack specification, system boundaries, deployment constraints, and non-compliance conditions. These documents are intended for engineering, operations, and assurance teams undertaking active implementation.
3.4 Tier IV: Governance and Legal Instruments
Tier IV documents establish the institutional governance of the corpus, define certification boundaries, specify the legal terms under which the corpus is distributed, and provide the residual risk disclosure required of all conformant implementations. These documents are primarily addressed to legal, compliance, and institutional governance functions, but all implementors are required to acknowledge the Residual Risk Annex as a condition of claiming conformance.
3.5 Tier V: Informative Documents
Tier V documents provide contextual, analytical, and process support for the corpus. They do not introduce normative requirements and carry no binding force. They are intended to support evaluation, adoption, and stakeholder communication. Readers may engage with these documents selectively based on their role and purpose.
#Reading Paths by Audience
The following four reading paths are designed for distinct professional roles. Each path identifies the minimum set of documents required to achieve functional understanding for that role, presented in the recommended reading order. Documents are listed by identifier; full titles are provided in Section 3.
These paths are not exhaustive. A reader who has completed a path for their primary role may benefit from reading additional documents outside that path, particularly from adjacent tiers. The paths are entry points, not boundaries.
For engineers building a QODIQA-conformant enforcement layer. Prioritizes architectural specification, control requirements, cryptographic profile, failure behavior, and the reference implementation.
- 01QODIQA-WP-2026-001: conceptual foundations and the Authorization/Consent distinction
- 02QODIQA-CORE-2026-001: twelve control points, decision semantics, conformance profiles
- 03QODIQA-68P-2026-001: full control framework, governance domains, cryptographic layer
- 04QODIQA-ARCH-2026-001: reference architecture, component model, trust boundaries
- 05QODIQA-SEC-2026-001: cryptographic requirements, key management, signature verification
- 06QODIQA-GEI-2026-001: enforcement invariants that must hold across all deployments
- 07QODIQA-SBT-2026-001: system boundary definition and trust model
- 08QODIQA-IDC-2026-001: integration surfaces, anti-bypass controls, deployment constraints
- 09QODIQA-RIS-2026-001: minimal reference implementation specification
- 10QODIQA-IMPL-2026-001: 30/60-day integration playbook
- 11QODIQA-FHS-2026-001: failure handling, recovery, and fail-closed guarantees
- 12QODIQA-NCC-2026-001: non-compliance conditions and prohibited system behaviors
- 13QODIQA-TM-2026-001: threat model and bypass scenario analysis
- 14QODIQA-RISK-2026-001: residual risk disclosure, required acknowledgement
For compliance officers, internal auditors, and assurance teams evaluating whether a QODIQA implementation meets conformance requirements and produces adequate evidence artifacts.
- 01QODIQA-WP-2026-001: conceptual model, consent gap analysis
- 02QODIQA-CORE-2026-001: conformance profiles (CORE-MIN / CORE-VER / CORE-ENT)
- 03QODIQA-CF-2026-001: certification framework, what certification validates and does not validate
- 04QODIQA-CTS-2026-001: conformance test suite, test matrix, evidence packaging requirements
- 05QODIQA-CVS-2026-001: conformance verification procedures
- 06QODIQA-NCC-2026-001: hard and soft non-compliance conditions, severity levels
- 07QODIQA-AEM-2026-001: audit and evidence generation model
- 08QODIQA-ARP-2026-001: audit readiness and evidence pack structure
- 09QODIQA-RISK-2026-001: residual risk register, assumption disclosures
- 10QODIQA-GC-2026-001: governance charter, amendment process, authority structure
For regulatory reviewers, legal counsel, and policy advisors evaluating the QODIQA framework against applicable legal and regulatory requirements, or assessing institutional liability exposure.
- 01QODIQA-POS-2026-001: scope limitation, explicit non-claims, what QODIQA does not provide
- 02QODIQA-WP-2026-001: conceptual foundations, consent gap analysis
- 03QODIQA-CORE-2026-001: normative requirements, conformance definition
- 04QODIQA-RAM-2026-001: GDPR, EU AI Act, NIST RMF, ISO 27001, ISO 42001 alignment matrix
- 05QODIQA-RISK-2026-001: residual risk disclosure, no-guarantee clause, non-coverage declarations
- 06QODIQA-PSL-2026-001: public specification license terms
- 07QODIQA-CF-2026-001: certification boundary, what certification does and does not establish
- 08QODIQA-GC-2026-001: governance authority, amendment procedure, corpus integrity
For executives, board-level stakeholders, and strategic decision-makers evaluating QODIQA as an institutional infrastructure investment. Prioritizes problem framing, economic rationale, and strategic positioning.
- 01QODIQA-EB-2026-001: executive brief, strategic case, adoption rationale
- 02QODIQA-WP-2026-001: Section 1 (Executive Summary) and Section 3 (The Consent Gap)
- 03QODIQA-EIA-2026-001: economic impact analysis, risk surface quantification, scenario modeling
- 04QODIQA-POS-2026-001: scope limitations, non-claims, what QODIQA does not guarantee
- 05QODIQA-RAM-2026-001: regulatory alignment summary, compliance coverage density
- 06QODIQA-UCD-2026-001: use case dossiers for sector-specific deployment scenarios
- 07QODIQA-RISK-2026-001: Section 0 (Executive Disclosure), residual risk register summary
#Cross-Reference Map
The following table identifies the primary dependency relationships between documents in the corpus. Column "Requires" lists documents that must be read before the listed document can be fully understood. Column "Referenced by" identifies documents that cite the listed document as a normative or informative source. This map is not exhaustive of all cross-references in the corpus; it identifies structural dependencies only.
| Document | Requires (read before) | Referenced by |
|---|---|---|
| QODIQA-WP-2026-001 (Technical Whitepaper) | None (entry point) | All corpus documents |
| QODIQA-CORE-2026-001 (Core Standard) | QODIQA-WP-2026-001 | All Tier II, III, IV documents |
| QODIQA-68P-2026-001 (68-Point Framework) | QODIQA-WP-2026-001, QODIQA-CORE-2026-001 | ARCH, SEC, CTS, CVS, GEI, IMPL, RIS, CF |
| QODIQA-ARCH-2026-001 (Reference Architecture) | QODIQA-CORE-2026-001, QODIQA-68P-2026-001 | RIS, IMPL, IDC, SBT, FHS |
| QODIQA-SEC-2026-001 (Security and Crypto Profile) | QODIQA-CORE-2026-001, QODIQA-68P-2026-001 | RIS, IMPL, TM, ETM, IDC |
| QODIQA-TM-2026-001 (Threat Model) | QODIQA-CORE-2026-001, QODIQA-ARCH-2026-001, QODIQA-SEC-2026-001 | ETM, NCC, FHS, RISK |
| QODIQA-CTS-2026-001 (Conformance Test Suite) | QODIQA-CORE-2026-001, QODIQA-68P-2026-001, QODIQA-ARCH-2026-001 | CVS, CF, AEM, ARP |
| QODIQA-RISK-2026-001 (Residual Risk Annex) | QODIQA-CORE-2026-001, QODIQA-TM-2026-001 | CF (required acknowledgement clause) |
| QODIQA-CF-2026-001 (Certification Framework) | QODIQA-CORE-2026-001, QODIQA-CTS-2026-001, QODIQA-RISK-2026-001 | GC, ARP |
| QODIQA-RAM-2026-001 (Regulatory Alignment Matrix) | QODIQA-CORE-2026-001, QODIQA-68P-2026-001 | EB (informative), EIA (informative) |
#Consolidated Glossary
The following glossary consolidates all defined terms used across the QODIQA corpus. Each definition is drawn from its authoritative source document, identified in the reference field. Where a term is defined in multiple documents, the definition from the highest-tier document is used. Terms are listed alphabetically.
This glossary is informative. In the event of apparent conflict between a definition here and the definition in the source document, the source document governs.
This glossary contains the twenty most frequently referenced terms across the corpus. Terms used exclusively within a single document are defined in that document and are not reproduced here. For a complete term inventory of any individual document, refer to the Terminology and Normative Definitions section within that document, or to QODIQA-TERM-2026-001.
#Corpus Amendment History
This section records the amendment history of the Master Index itself. For the amendment history of the full corpus, refer to QODIQA-CCL-2026-001 (Corpus Change Log and Version History).
| Version | Date | Change Description | Author |
|---|---|---|---|
| 1.0 | April 2026 | Initial issue. Full document index across five tiers, four reading paths, cross-reference map, and consolidated glossary for corpus Version 1.0. | QODIQA |
#Document Status
This document is issued as a companion navigational instrument to the QODIQA standard corpus at Version 1.0. It is classified as informative. It introduces no normative requirements and does not modify any existing document in the corpus. In the event of conflict between any statement in this document and any normative statement in a Tier I through Tier IV document, the normative statement governs without exception.
This document is intended for the following audiences:
- Engineers and architects beginning implementation of a QODIQA-conformant system
- Compliance and audit functions evaluating an existing or proposed implementation
- Regulatory, legal, and policy review bodies assessing the QODIQA corpus
- Executives and strategic decision-makers evaluating QODIQA as an institutional investment
- Any reader approaching the QODIQA corpus for the first time
This document should be updated whenever a new document is added to the corpus, an existing document is substantially revised, or a new defined term is introduced. Updates are subject to the amendment process defined in QODIQA-GC-2026-001.
For strategic inquiries, architectural discussions, or partnership exploration:
Bogdan Duțescu
0040.724.218.572