C03 Fixes and Reduction

1.0/en/0x10-C03-Model-Lifecycle-Management.md

@@ -2,7 +2,7 @@
 
 ## Control Objective
 
-AI systems must implement change control processes that prevent unauthorized or unsafe model modifications from reaching production. These controls ensure model integrity through the entire lifecycle--from development through deployment to decommissioning--which enables rapid incident response and maintains accountability for all changes.
+AI systems must implement change control processes that prevent unauthorized or unsafe model modifications from reaching production. These controls ensure model integrity through the entire lifecycle, from development through deployment to decommissioning, which enables rapid incident response and maintains accountability for all changes.
 
 **Core Security Goal:** Only authorized, validated models reach production by employing controlled processes that maintain integrity, traceability, and recoverability.
 
@@ -36,6 +36,7 @@ Models must pass defined security and safety validations before deployment.
 | **3.2.6** | **Verify that** validation failures automatically block model deployment unless an explicit override approval from pre-designated authorized personnel with documented business justifications. | 3 |
 | **3.2.7** | **Verify that** models subjected to post-training quantization, pruning, or distillation are re-evaluated against the same safety and alignment test suite on the compressed artifact before deployment, and that evaluation results are retained as distinct records linked to the compressed artifact's version or digest. | 2 |
 
+
 ---
 
 ## C3.3 Controlled Deployment & Rollback
@@ -93,6 +94,7 @@ Fine-tuning pipelines are high-privilege operations that can alter deployed mode
 ## References
 
 * [MITRE ATLAS](https://atlas.mitre.org/)
+* [OWASP AI Testing Guide](https://owasp.org/www-project-ai-testing-guide/)
 * [MLOps Principles](https://ml-ops.org/content/mlops-principles)
 * [Reinforcement fine-tuning](https://platform.openai.com/docs/guides/reinforcement-fine-tuning)
 * [What is AI adversarial robustness?: IBM Research](https://research.ibm.com/blog/securing-ai-workflows-with-adversarial-robustness)