Part 1 · Define the use and responsibilities

Chapter 2: AI System Types and Boundaries

Identify the capabilities and permissions that define an AI system’s assessment boundary.

On this page

Plain meaning

A predictive model estimates a value or category. A generative model produces content. A RAG application supplies retrieved material to support generation. An agent can select or execute actions through tools. These descriptions can overlap within one application.

Three practical examples

A predictive model flags equipment likely to need maintenance. Ask about missed failures, false alarms, operating conditions, and how maintenance decisions are made.

A generative assistant summarizes a deviation. Ask whether it invents facts, omits important qualifications, or merges separate events.

An agent creates follow-up tasks. In addition to content accuracy, ask whether it selects the correct destination, uses authorized parameters, avoids duplicate actions, and recovers safely from interruption.

What to record

Describe the actual capability rather than labeling everything “AI.” Identify whether it learns from deployment data, whether changes are controlled, whether output is repeatable enough for the use, and whether it can alter records or workflows.

Completed classification statement: “The application combines retrieval and generative summarization. It reads an approved document set and produces draft text. Tool execution and write access to controlled records are disabled.”

What changes for this type of AI?

TechnologyFailure and potential impactPractical controlEvidence needed
Generative AIUnsupported statements, omissions or variable output can mislead reviewBound the task, verify sources and evaluate meaningful variabilityClaim-level results, omission checks and recorded configuration
Retrieval-augmented generation (RAG)Wrong, old or unauthorized material can produce a plausible answerControl approved sources, versions, retrieval filters and permissionsExpected/retrieved passages, version checks and citation-support tests
Predictive AIMissed events, false alarms or changed data can distort a process decisionDefine reference outcomes, relevant groups and operating thresholdsStratified results, threshold rationale and data-change monitoring
AI agentsWrong or repeated actions can alter records or disclose dataLimit actions, require defined approval points and provide recoveryNegative permission tests, action records and retry/recovery outcomes
Supplier-hosted AIUnannounced model/configuration changes can invalidate local evidenceAssess available evidence, responsibilities, notifications and change responseSupplier assessment, observed identifiers and targeted reevaluation

Related work: testing, supplier assessment, records, change control, monitoring.

Exercise

A RAG assistant can also send its answer into an eQMS record. Should it be assessed only as a search tool?

Show suggested answer

Include the write action and record workflow. The additional capability changes the boundary even if most users think of the application as search.

Expected records

An AI capability and permission inventory, with the system boundary and unsupported uses recorded. Adapt record names and detail to the applicable procedures; these are practitioner examples, not a universal mandatory document list.

Relevant regulations and guidance

Regulations set requirements within their scope; guidance offers recommendations or explains applicable expectations; standards depend on adoption or incorporation. Voluntary frameworks do not establish compliance. The lesson's controls, test designs and example records are practitioner suggestions unless explicitly identified otherwise.

Artificial Intelligence Risk Management Framework (AI RMF 1.0) ↗

Voluntary framework · National Institute of Standards and Technology · NIST AI 100-1 · January 2023

Scope: United States · Cross-sector AI governance and risk management, including generative AI.

Relevance to this lesson: Provides a voluntary basis for describing AI context and capabilities.

Publication status: Final / published. Source checked 21 September 2026.

Publication identity, scope and status checked against the linked official source. This is not an independent audit of every retained guide statement.

Source details and applicability

Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile ↗

Voluntary framework · National Institute of Standards and Technology · NIST AI 600-1 · July 2024

Scope: United States · Cross-sector AI governance and risk management, including generative AI.

Relevance to this lesson: Provides generative-AI risk context; it does not classify every AI application as a regulated medical device.

Publication status: Final / published. Source checked 21 September 2026.

Publication identity, scope and status checked against the linked official source. This is not an independent audit of every retained guide statement.

Source details and applicability
Editorial information and limitations

Educational chapter · Editorial version 2.0. The update date records substantive site editing; a completed independent technical review is not claimed.

AI tools assisted drafting and structural editing. Examples and results labelled fictional or synthetic are teaching material. Adapt the methods to the actual intended use, applicable requirements and approved procedures.

Estimated reading time uses the written lesson at 220 words per minute, with links and Markdown formatting removed. Video time comes from the media file and is separate.

Sources, authorship and editorial policy
Suggest a correction

Sent privately to the editorial moderation queue. Your account email and correction are not published as a comment. Do not include confidential or personal information.

Chapter: 2: AI System Types and Boundaries · Chapter link

Loading sign-in status…

Correction details

Was this resource useful?

Tell us what helped and what could be clearer. Usefulness feedback does not establish technical validity or regulatory compliance.

Loading contribution options…

Questions and discussion

Ask a question or share a perspective. Contributions are reviewed before publication.

Loading contribution options…