AI system
Publication dates and source age
Sources counted: 5
Newest dated source: 2026-08-20
At least one source was published within the 18-month window.
Assessed at this edition's evidence cutoff: 2026-09-15. 18-month boundary: 2025-03-15.
Some publication dates are unknown; the newest dated source may not be the newest source overall.
Publication age does not tell us whether a claim is still valid. Reading an old source again does not make its publication date newer. An update date does not establish that the passage we used was updated.
Open in the glossary Reading notes · Structured record
In plain language
An AI model together with the software and hardware that put it to use. [1] [2]
Reference this explanation or suggest a correction
Link to this explanation · Suggest a correction · How corrections work
Limits & distinctions
A model’s results alone do not establish that a whole system is safe. Tools, access rights and oversight need their own assessment. [5] [4]
Reference this explanation or suggest a correction
Link to this explanation · Suggest a correction · How corrections work
A fuller explanation
For a chatbot, this can include the interface, instructions, model, search tools and permissions. A robot can also include sensors and motors. These parts shape what the system can do. [3] [4] [1]
Reference this explanation or suggest a correction
Link to this explanation · Suggest a correction · How corrections work
How it relates to the map
Map context: distinguish a claim about a model from a claim about the application or machine that uses it. [1] [2]
Reference this explanation or suggest a correction
Link to this explanation · Suggest a correction · How corrections work
Share this page
https://theaiatlas.org/ideas/ai-system/
Download a share image · Vector image
Image previews are summaries. Keep the page link so readers can check the evidence.
Sources and what we read
1. Explanatory memorandum on the updated OECD definition of an AI system
Source is over 18 months old.
Publication dates and source age
Sources counted: 1
Newest dated source: 2024-03-05
Assessed at this edition's evidence cutoff: 2026-09-15. 18-month boundary: 2025-03-15.
Publication age does not tell us whether a claim is still valid. Reading an old source again does not make its publication date newer. An update date does not establish that the passage we used was updated.
Read the updated definition and explanatory sections on techniques, human roles, autonomy, physical and virtual environments, inputs, models and outputs (pages 4 and 6 to 9). Publication date follows the OECD publication landing page. Used to distinguish models from systems and learned methods from knowledge-based approaches, not as a claim about human-like understanding or a legal classification of a particular product.
2. Guidelines for secure AI system development
Source is over 18 months old.
Publication dates and source age
Sources counted: 1
Newest dated source: 2023-11-27
Assessed at this edition's evidence cutoff: 2026-09-15. 18-month boundary: 2025-03-15.
Publication age does not tell us whether a claim is still valid. Reading an old source again does not make its publication date newer. An update date does not establish that the passage we used was updated.
Read executive summary and lifecycle structure. Guidance addresses complete AI systems and recommends security throughout design, development, deployment and operation. Recommendations are not evidence of any organization's implementation.
3. Tool use
Publication dates and source age
Sources counted: 1
Publication dates are unavailable.
Assessed at this edition's evidence cutoff: 2026-09-15. 18-month boundary: 2025-03-15.
Some publication dates are unknown; the newest dated source may not be the newest source overall.
Publication age does not tell us whether a claim is still valid. Reading an old source again does not make its publication date newer. An update date does not establish that the passage we used was updated.
Read tool descriptions, model-generated call requests, application execution and returning results to the chat. Example functions were not run. Used for the separation between requesting and executing an action; live page publication date unspecified.
4. LLM06:2025 Excessive Agency
Publication dates and source age
Sources counted: 1
Publication dates are unavailable.
Assessed at this edition's evidence cutoff: 2026-09-15. 18-month boundary: 2025-03-15.
Some publication dates are unknown; the newest dated source may not be the newest source overall.
Publication age does not tell us whether a claim is still valid. Reading an old source again does not make its publication date newer. An update date does not establish that the passage we used was updated.
Read agency definition, excessive functionality/permissions/autonomy, external authorization, approvals and monitoring limits. The 2025 label identifies the edition; the page does not establish its original publication date.
5. Managing the cyber risk of agentic AI
Publication dates and source age
Sources counted: 1
Newest dated source: 2026-08-20
At least one source was published within the 18-month window.
Assessed at this edition's evidence cutoff: 2026-09-15. 18-month boundary: 2025-03-15.
Publication age does not tell us whether a claim is still valid. Reading an old source again does not make its publication date newer. An update date does not establish that the passage we used was updated.
Read autonomy, model safeguards, oversight, sandbox boundaries, network and credential restrictions, observability and emergency response. The publisher labels this interim practical advice based on its research; formal guidance may supersede it.
Edition and machine-readable evidence
Content version 0.20.0. Evidence cutoff 2026-09-15; this does not mean every source was read on that day.
Pinned complete dataset · Complete evidence page · Agent consumption guide