Staff Desk

Governance & NIST AI RMF Card

Election officials can read this system's limits in under a minute and share the same record with the public.

No-Go Zones

Never decides voter eligibility

Registration status, felony restoration, and citizenship determinations are made by humans under A.R.S. Title 16. The AI cannot read or score a voter record.

Never verifies signatures

Early-ballot affidavit signature comparison stays with trained county staff and the statutory cure process. No model output is used as evidence.

Never touches tabulation

Nothing here connects to voting equipment, tabulators, or the election management system. The portal runs on separate, non-air-gapped office infrastructure only.

Never publishes without a human

Every counter-message and public bulletin requires a named official to approve it. Drafts expire unpublished by default.

NIST AI Risk Management Framework

GOVERN

Who is responsible?

The county Elections Director owns every published output; the portal logs the approving human by name and timestamp.

MAP

Who is affected?

Arizona voters (incl. Diné-speaking and Spanish-speaking voters), county staff, poll workers, and candidates named in flagged material.

MEASURE

How will you test?

Red-team mailers with known ground truth, translation review by certified translators, and false-positive tracking on synthetic-media flags.

MANAGE

What will you change?

Confidence thresholds, mandatory legal review for any statute citation, and a kill switch that reverts the Truth Hub to static county guidance.

Human-in-the-loop record

  • Every response stores the approving official's name and timestamp.
  • Diné bizaad text requires certified translator review.
  • Statute citations await county attorney review.
  • Nothing publishes automatically.

Known limitations

  • Synthetic-media detection is probabilistic; it is a triage signal, not evidence.
  • Model knowledge can lag statutory changes; officials confirm against the current Elections Procedures Manual.
  • Machine translation can miss Diné dialect and regional usage.
  • This prototype stores demo bulletins in this browser only.