5 Feb 2026 - AI Reference Architecture Library Meeting Agenda

[lucaborella89]

Date

20250205 - 3pm GMT

Zoom details

https://zoom.us/j/96783320878
Meeting ID: 92023325319
Passcode: 528998

Meeting notices

• FINOS Project leads are responsible for observing the FINOS guidelines for running project meetings. Project maintainers can find additional resources in the FINOS Maintainers Cheatsheet.

• All participants in FINOS project meetings are subject to the LF Antitrust Policy, the FINOS Community Code of Conduct and all other FINOS policies.

• FINOS meetings involve participation by industry competitors, and it is the intention of FINOS and the Linux Foundation to conduct all of its activities in accordance with applicable antitrust and competition laws. It is therefore extremely important that attendees adhere to meeting agendas, and be aware of, and not participate in, any activities that are prohibited under applicable US state, federal or foreign antitrust and competition laws. Please contact legal@finos.org with any questions.

• FINOS project meetings may be recorded for use solely by the FINOS team for administration purposes. In very limited instances, and with explicit approval, recordings may be made more widely available.

Agenda and minutes

1. PR merged glossary and in scope / out of scope glossary first draft #23
2. Start mapping threats to architecture ADD : Threat modelling for Multi-agent reference architecture #20

[jwadhwa5000]

Jyoti Wadhwa / Independent

[karlmoll]

For easy reference, CCC GenAI threats: https://github.com/finos/common-cloud-controls/blob/main/catalogs/ai-ml/gen-ai/threats.yaml

RBAC specific Mitigation
https://air-governance-framework.finos.org/mitigations/mi-12_role-based-access-control-for-ai-data.html

[karlmoll]

https://cloudsecurityalliance.org/artifacts/ai-controls-matrix

[atyronesmith]

Aaron Smith / Red Hat

[jwadhwa5000]

Hi, @IamRavanan, if helpful Mahesh Adulla and I would like to take a stab at cross of our identified threats and controls to the CSA AICM for next week.

[IamRavanan]

Hi, @IamRavanan, if helpful Mahesh Adulla and I would like to take a stab at cross of our identified threats and controls to the CSA AICM for next week.

Great! The best way to go about this is, if you (@jwadhwa5000) and Mahesh can syncup and work on the mapping and propose PR with what ever you guys were able to accomplish, we can review the PR together as a team in our next Thursday call and merge once we reach consensus. We can then continue if there is something still left and work -> PR -> review it in the following week.

[jwadhwa5000]

Hi all. I’ve put together a draft crosswalk mapping the FINOS multi-agent threats and controls to CSA’s AICM, along with a light ISO 42001 alignment for context (see attached).

This is a starting point for discussion — would appreciate feedback from @IamRavanan, @d1gital-f and @mahesh (and anyone else interested) on structure and gaps.

FINOS TM_to_CSA_AICM.draftjw.xlsx

Best, Jyoti

[jwadhwa5000]

@d1gital-f I can add you to my Google doc to coordinate on the RA cross-mappings to OWASP, CSA AICM and ISO 42001. What email can I use please? thanks Jyoti