This document specifies a canonical seven-step audit sequence for governance-grade evaluation of AI and agentic systems. The methodology provides a deterministic, reproducible workflow for auditors operating across organizational, technical, and agentic layers. It integrates the Substrate Governance Instrument Suite (SGIS), the Colorado Evidence Packet Schema (CEPS), the Emotional-Layer Integrity and Operator Capture (EIOC) framework, Agent Lineage and Provenance (ALP) verification, and AI Indicators of Compromise (AIOC) analysis into a unified audit spine. Every step produces hash-anchored evidence artifacts. The final determination is reproducible by a second auditor from the evidence bundle alone. This methodology is designed to be jurisdiction-portable. Colorado AI Act and EU AI Act compliance mappings are noted at each step where applicable, but the spine itself is framework-agnostic.
Narnaiezzsshaa Truong (2026) studied this question.