# MON-12 Model identity verification

Domain: MON Continuous Monitoring & Human Oversight · HI-AAF v1.3 · Public review · https://humanintel.net/standard/mon/mon-12

The model serving each request is logged as a verifiable fact and checked against the certified, pinned version. A mismatch generates an alert and is handled as an incident.

The model serving a request is treated as a logged, verifiable fact rather than an assumption. Per-step logs capture the model identity and version actually serving each request, and that identity is verified against the certified, pinned version. A mismatch, including a provider-initiated fallback to a different model, generates an alert and is handled as an incident. This control converts a silent model substitution from an invisible event into a detected one, and is the runtime complement to the fallback-assurance requirement in OUT-16.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for MON-12: Per-request logs capture serving model identity and version; automated comparison against the pinned version is active; at least one mismatch, in testing or production, has been detected and routed to the incident process within the documented latency.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- Per-request logs capture serving model identity and version.
- Automated comparison against the pinned version is active.
- At least one mismatch, in testing or production, has been detected and routed to the incident process within the documented latency.

## Framework mappings

- NIST AI RMF: MEASURE 2.4, MANAGE 4.1
- SOC 2 (TSC): CC7.1, CC7.2
- EU AI Act: Art. 14, Art. 26
- Singapore: MAIGF Incident Reporting

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Related

- Cites OUT-16 Fallback model assurance: https://humanintel.net/standard/out/out-16
- Cited by OUT-16 Fallback model assurance: https://humanintel.net/standard/out/out-16
- Glossary: Fallback model: https://humanintel.net/standard/glossary#fallback-model

## Cite this control

Human Intelligence. HI-AAF v1.3, MON-12 Model identity verification. Public review edition, July 2026. https://humanintel.net/standard/mon/mon-12