Cross-Framework Translation

Indicative equivalences by framework

Published framework

NIST AI RMF, ISO/IEC 42001, and EU AI Act equivalences are indicative readings, not official certifications.

NIST AI RMF

  • Security → NIST Manage + Measure (misuse safeguards, testing, incident handling)
  • Stability → NIST Manage (continuity, monitoring, recovery)
  • Coherence → NIST Map + Measure (risk identification, behavior measurement)
  • Reputation → NIST Govern (external trust and accountability)
  • Transparency → NIST Govern (documentation, explainability)

Estimated NIST AI RMF maturity tier: Tier 3/4

ISO/IEC 42001

  • Security → clause 6 (risk treatment) + clause 8 (operational controls)
  • Stability → clause 8 (Operations) + clause 10 (Improvement)
  • Coherence → clause 6 (Planning) + clause 9 (Performance evaluation)
  • Reputation → clause 7 (Support)
  • Transparency → clause 4 (Context) + clause 5 (Leadership)

Estimated ISO 42001 coverage: 81%

EU AI Act

Articles 15, 16, 26, 50 mapped to Kanon dimensions.

Article 15 : Aligned

Kanon mapping: Security + Stability

Article 16 : Aligned

Kanon mapping: Security + Stability + Coherence + Transparency

Article 26 : Aligned

Kanon mapping: Security + Transparency

Article 50 : Aligned

Kanon mapping: Transparency

Sources used

Evidence preserved for this rating

Review methodology

Official site

Official Merlin Agent Builder page

Official page describes no-code agent development for production-ready agents using knowledge sources, tools, reasoning, guardrails, audit, and human-in-the-loop review.

Open source

Evaluation notes

Scoring evidence summary

Security 75, Stability 78, Transparency 72, Coherence 82, Reputation 78. Strengths: explicit guardrails, auditability, human-in-the-loop control, and enterprise integration context. Limitation: rating remains public-evidence only.

Open source

Disclosure and risk review

Independent external assessment notice

Kanon has not received private evidence from the operator. Rating is based on public official material and observable reputation signals only.

Open source

Dispute

If new material evidence changes the public record, operators can request a review through the public challenge channel.

Dispute this score

Tray.ai Merlin Agent Builder is rated B+. Get the one-page gap-to-next-tier report.

Get Gap Report — €19