Autonomy, ISR, battle management, cyber defense and generative staff assistants are being fielded faster than any defense ministry can test them, while acquisition rules, alliance principles and multilateral norms all now demand evidence of human judgment, tested envelopes and controlled technology. AxiLayer AI and AxiSentinel™ give primes, defense-tech vendors and government programs across the United States, NATO and the European Union, the United Kingdom, the UAE and GCC, and Asia-Pacific third-party, continuous TEVV and compliance evidence, including fully air-gapped and classified deployment. This is an assurance and compliance practice: we evaluate and evidence AI systems; we do not develop weapons. The CCW Review Conference on autonomous weapons meets in Geneva from 16 to 20 November 2026.
Last verified: 23 October 2026
3 industry-specific mandates and 61 that apply across all industries, worldwide.
Next date for this industry: 1 Nov 2026, Egypt PDPL compliance period ends.
See all 64 mandates →Between May 2025 and November 2026, defense AI governance moved on three fronts at once: acquisition rules made cyber and AI evidence a condition of contract, alliance and national budgets made autonomy the fastest-growing spend line, and the multilateral track set an explicit deadline. Each front asks for the same thing, proof.
Adoption is outrunning the capacity to test it. GAO found federal AI use cases nearly doubled from 571 in 2023 to 1,110 in 2024, while its reviews of the DoD AI workforce (GAO-24-105645) echo the National Security Commission on AI's finding that the talent deficit, above all in test and evaluation, is among the greatest impediments to AI readiness. NATO's Alliance-wide TEV&V landscape is still being assembled. And the Replicator dispute, thousands of systems declared fielded in August 2025, hundreds counted by the Congressional Research Service, shows what happens when capability claims outrun third-party evidence. That gap is precisely what a continuous, third-party evidence chain closes.
Everything here is defensive: testing, evaluation, governance and compliance of AI already in or entering service. AxiLayer AI does not design, develop or advise on weapons.
CAGE 20JV1 · UEI CB76ENDLMUC9 · SAM.gov active for all award types. AxiSentinel supports air-gapped and classified deployment via the .axibatch format.
Government ProfileA single autonomy stack can simultaneously face a 3000.09 senior review in the United States, NATO's Principles of Responsible Use in a coalition deployment, JSP 936 in a UK program, an Article 36 legal review before fielding, ITAR licensing on export and a sovereign air-gap requirement in the Gulf. Each regime wants different evidence in a different format. This is the coverage map.
The world's largest defense AI buyer now runs an AI-first innovation enterprise on one side and a contract-clause compliance regime on the other. Vendors must satisfy both.
NATO sets the responsible-use baseline for 32 Allies; the EU funds the industrial base while its AI Act draws a military exclusion line that is narrower than most vendors assume.
The UK is the first ally to turn defense AI ethics into a numbered directive with auditable "musts", which makes it the clearest preview of where allied assurance expectations are heading.
The Gulf is building sovereign defense AI at speed, and every step of it runs through US export-control and security-assurance conditions. Localisation plus tech transfer equals a compliance-evidence market.
The Indo-Pacific is institutionalising military AI four different ways at once: trilateral interoperability, formal ethics directives, dedicated R&D centers and startup pipelines.
None of this layer is a contract clause, yet it defines what "responsible" means in every allied procurement, and export-control law makes parts of it very binding indeed.
Each use case below carries a specific governing instrument, a specific evidence expectation and a specific review gate. AxiSentinel is configured per use case and per program, in your environment, at your classification level, rather than shipped as one fixed pipeline.
Defense programs are adopting agentic AI that works across digital engineering data, from system models to digital twins, and turns complex engineering and acquisition questions into recommendations. The faster those decisions move, the more each one needs a record that holds up in review.
Defense AI is a priority target: adversaries want to poison mission data, steal models and fool sensors. AxiLayer AI works hand in hand with your cybersecurity team to test, monitor and evidence that these AI systems stay secure, under your written authorization.
Explore AI Cybersecurity Request an AI Cybersecurity Readiness Review
Status as of 28 October 2026. General information, not legal advice. Certifications, CE marking and regulated assessments named here are issued by the bodies the law designates.
AxiSentinel does not replace program test organizations, operational test agencies or legal review. It gives all of them, and the oversight bodies above them, a continuous, third-party evidence feed from the fielded system itself, at whatever classification level the program runs.
The AXI-Node agent deploys in your own environment, cloud, on-premise, sovereign or fully disconnected, with air-gapped and classified operation via the .axibatch format. Controlled and classified data stays inside the program's own authorized environment or the air-gapped enclave. No telemetry leaves the enclave.
Test-to-field traceability: the certified envelope, the evidence behind it, and continuous confirmation that the fielded system is still inside it, the artefact NATO's TEV&V landscape and DoD test policy both point to.
Documented, time-ordered records of where humans decide, override and abstain, aligned to DoDD 3000.09's appropriate-human-judgment standard and the Political Declaration's oversight measures.
Full lineage for models, weights, training and update data, including supply-chain integrity and model-update poisoning defense for systems retrained in theatre.
Performance, population and concept drift against the tested envelope for every fielded model, the difference between "it passed the range test" and "it is still passing, today".
Structured adversarial testing records and detection of adversarial inputs in operation, retained as evidence for accreditation and re-accreditation decisions.
Monitoring pipelines architected for CMMC and NIST SP 800-171 boundaries, so the assurance layer never becomes the compliance breach.
Documented classification of dual-use models against ITAR/EAR categories, plus end-user and controlled-access evidence for security-conditioned approvals such as the 2025 GCC frameworks.
Hallucination, data-leakage and prompt-injection monitoring for LLM assistants at GenAI.mil scale, with evidence packs sized for internal oversight rather than screenshots.
Structured capture of unintended behavior, near-misses and out-of-envelope events, routed to program, safety and legal channels with full context preserved.
Time-ordered evidence verifiable without relying on AxiLayer AI, suitable for inspectors general, parliamentary and congressional oversight, and Article 36 legal reviews.
Per-version assurance artefacts that travel with a model when it is exchanged between allies, the missing piece in AUKUS-style model interchange and NATO federated deployments.
DoD Directive 3000.09 remains binding, requiring autonomous and semi-autonomous weapon systems to allow appropriate human judgment over the use of force. CMMC Phase 1 has applied in new U.S. defense contracts since 10 Nov 2025. The UK's JSP 936 directive of 13 Nov 2024 sets auditable lifecycle duties, and NATO's AI Strategy, revised 10 Jul 2024, sets six Principles of Responsible Use.
The Seventh CCW Review Conference meets in Geneva from 16 to 20 Nov 2026. The expert group on lethal autonomous weapons adopted its final report by consensus on 5 Sep 2026, and on 25 Aug 2026 the UN Secretary-General and ICRC president renewed their call for a legally binding instrument by the end of 2026. Binding or not, the direction of evidence expectations is clear.
They need evidence that a human exercised appropriate judgment, that the system stayed inside its tested operating envelope and that controlled technology stayed controlled. In practice that means DoDD 3000.09 senior review records, JSP 936 lifecycle assurance, Article 36 legal review support and field-drift evidence against the tested envelope. Swarming systems also need provenance and revalidation evidence for each model version.
It is a third-party testing, evaluation, verification and validation (TEVV) and compliance assessment of defense AI already in or entering service, such as ISR, logistics, cyber defense and staff assistants, mapped to DoDD 3000.09, CMMC, NATO principles, JSP 936 and export controls. It can run at the program's classification level. A qualified AxiLayer AI auditor reviews and signs every finding.
AxiLayer AI provides continuous, third-party TEVV and compliance evidence with AxiSentinel for primes, defense-tech vendors and government programs, evaluated against the frameworks that apply in each market, from the U.S. and NATO to the UK, the GCC and Asia-Pacific, including air-gapped and classified environments. A qualified AxiLayer AI auditor reviews and signs every finding. Request a briefing to discuss a defense AI engagement.
Last verified: 23 October 2026. See every mandate for this industry on the AI Audit Mandates Map.
A defense AI assurance review maps one program against every instrument that touches it, 3000.09, CMMC, JSP 936, NATO PRUs, Article 36, export controls, and shows exactly which evidence exists, which is missing, and what continuous monitoring would look like inside your own enclave.
