Trust pilot quickstart

Start with a scope record

• Name the organization, system, accountable owner, operator, and technical owner.
• List model and provider routes, memory, tools, data classes, and delegated authority.
• Choose the highest capability gate reachable directly or by delegation.
• Identify exclusions and the person authorized to approve them.

Collect and test evidence

Use the AATS draft to map each applicable control to a source record, test method, owner, and observation time. Local readiness checks can highlight gaps but do not certify the system.