{"id":"https://openalex.org/W7116884337","doi":"https://doi.org/10.1109/access.2025.3647479","title":"From Policy to Pipeline: A Governance Framework for AI Development and Operations Pipelines","display_name":"From Policy to Pipeline: A Governance Framework for AI Development and Operations Pipelines","publication_year":2025,"publication_date":"2025-12-23","ids":{"openalex":"https://openalex.org/W7116884337","doi":"https://doi.org/10.1109/access.2025.3647479"},"language":null,"primary_location":{"id":"doi:10.1109/access.2025.3647479","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3647479","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3647479","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5007158848","display_name":"Talal Ashraf Butt","orcid":"https://orcid.org/0000-0002-5566-0992"},"institutions":[{"id":"https://openalex.org/I119744171","display_name":"Higher Colleges of Technology","ror":"https://ror.org/00qmy9z88","country_code":"AE","type":"education","lineage":["https://openalex.org/I119744171"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Talal Ashraf Butt","raw_affiliation_strings":["Higher Colleges of Technology, Abu Dhabi, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0002-5566-0992","affiliations":[{"raw_affiliation_string":"Higher Colleges of Technology, Abu Dhabi, United Arab Emirates","institution_ids":["https://openalex.org/I119744171"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Muhammad Iqbal","orcid":"https://orcid.org/0000-0001-9004-5453"},"institutions":[{"id":"https://openalex.org/I119744171","display_name":"Higher Colleges of Technology","ror":"https://ror.org/00qmy9z88","country_code":"AE","type":"education","lineage":["https://openalex.org/I119744171"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Muhammad Iqbal","raw_affiliation_strings":["Higher Colleges of Technology, Abu Dhabi, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0001-9004-5453","affiliations":[{"raw_affiliation_string":"Higher Colleges of Technology, Abu Dhabi, United Arab Emirates","institution_ids":["https://openalex.org/I119744171"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5121080988","display_name":"Noor Arshad","orcid":null},"institutions":[{"id":"https://openalex.org/I2799350497","display_name":"Water and Power Development Authority","ror":"https://ror.org/03revcz59","country_code":"PK","type":"government","lineage":["https://openalex.org/I2799350497"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Noor Arshad","raw_affiliation_strings":["Punjab Land Records Authority, Lahore, Pakistan"],"raw_orcid":"https://orcid.org/0000-0002-3915-9153","affiliations":[{"raw_affiliation_string":"Punjab Land Records Authority, Lahore, Pakistan","institution_ids":["https://openalex.org/I2799350497"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":1.3134,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.87719475,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"14","issue":null,"first_page":"1373","last_page":"1397"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.2176000028848648,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.2176000028848648,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11636","display_name":"Artificial Intelligence in Healthcare and Education","score":0.20589999854564667,"subfield":{"id":"https://openalex.org/subfields/2718","display_name":"Health Informatics"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.16060000658035278,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/corporate-governance","display_name":"Corporate governance","score":0.7113999724388123},{"id":"https://openalex.org/keywords/traceability","display_name":"Traceability","score":0.5687000155448914},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.5630000233650208},{"id":"https://openalex.org/keywords/accountability","display_name":"Accountability","score":0.5200999975204468},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.45750001072883606},{"id":"https://openalex.org/keywords/documentation","display_name":"Documentation","score":0.445499986410141},{"id":"https://openalex.org/keywords/promotion","display_name":"Promotion (chess)","score":0.4327999949455261},{"id":"https://openalex.org/keywords/verifiable-secret-sharing","display_name":"Verifiable secret sharing","score":0.42899999022483826},{"id":"https://openalex.org/keywords/conformity-assessment","display_name":"Conformity assessment","score":0.40130001306533813}],"concepts":[{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.7113999724388123},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.629800021648407},{"id":"https://openalex.org/C153876917","wikidata":"https://www.wikidata.org/wiki/Q899704","display_name":"Traceability","level":2,"score":0.5687000155448914},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5630000233650208},{"id":"https://openalex.org/C2776007630","wikidata":"https://www.wikidata.org/wiki/Q2798912","display_name":"Accountability","level":2,"score":0.5200999975204468},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.490200012922287},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.4756999909877777},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.45750001072883606},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45010000467300415},{"id":"https://openalex.org/C56666940","wikidata":"https://www.wikidata.org/wiki/Q788790","display_name":"Documentation","level":2,"score":0.445499986410141},{"id":"https://openalex.org/C98147612","wikidata":"https://www.wikidata.org/wiki/Q215599","display_name":"Promotion (chess)","level":3,"score":0.4327999949455261},{"id":"https://openalex.org/C85847156","wikidata":"https://www.wikidata.org/wiki/Q59015987","display_name":"Verifiable secret sharing","level":3,"score":0.42899999022483826},{"id":"https://openalex.org/C5911748","wikidata":"https://www.wikidata.org/wiki/Q4072285","display_name":"Conformity assessment","level":2,"score":0.40130001306533813},{"id":"https://openalex.org/C2779547435","wikidata":"https://www.wikidata.org/wiki/Q1121492","display_name":"Directive","level":2,"score":0.35920000076293945},{"id":"https://openalex.org/C175309249","wikidata":"https://www.wikidata.org/wiki/Q725864","display_name":"Pipeline transport","level":2,"score":0.35760000348091125},{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.35429999232292175},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3084999918937683},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.30790001153945923},{"id":"https://openalex.org/C2781018962","wikidata":"https://www.wikidata.org/wiki/Q5164884","display_name":"Container (type theory)","level":2,"score":0.30070000886917114},{"id":"https://openalex.org/C189922023","wikidata":"https://www.wikidata.org/wiki/Q17056348","display_name":"Information governance","level":4,"score":0.28760001063346863},{"id":"https://openalex.org/C539667460","wikidata":"https://www.wikidata.org/wiki/Q2414942","display_name":"Management science","level":1,"score":0.28540000319480896},{"id":"https://openalex.org/C184356942","wikidata":"https://www.wikidata.org/wiki/Q830382","display_name":"Best practice","level":2,"score":0.2833000123500824},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.2752000093460083},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.26350000500679016},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.25929999351501465},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.2590999901294708},{"id":"https://openalex.org/C2910001868","wikidata":"https://www.wikidata.org/wiki/Q458","display_name":"European union","level":2,"score":0.2581999897956848},{"id":"https://openalex.org/C187691185","wikidata":"https://www.wikidata.org/wiki/Q2020720","display_name":"Grid","level":2,"score":0.25110000371932983}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/access.2025.3647479","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3647479","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3647479","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3647479","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5764716267585754}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W2099419573","https://openalex.org/W2782864149","https://openalex.org/W2897042519","https://openalex.org/W2898017895","https://openalex.org/W2911227954","https://openalex.org/W2922234936","https://openalex.org/W2964010366","https://openalex.org/W2974071289","https://openalex.org/W3094132508","https://openalex.org/W3094233077","https://openalex.org/W3101848621","https://openalex.org/W3206154378","https://openalex.org/W3212368439","https://openalex.org/W4249194216","https://openalex.org/W4316126954","https://openalex.org/W4321470305","https://openalex.org/W4360995249","https://openalex.org/W4387324947","https://openalex.org/W4395064039","https://openalex.org/W4409761114"],"related_works":[],"abstract_inverted_index":{"Artificial":[0],"intelligence":[1],"systems":[2],"increasingly":[3],"operate":[4,194],"in":[5,43,183],"high-risk":[6,185],"domains":[7],"where":[8],"regulatory":[9,68,133],"frameworks":[10],"such":[11],"as":[12,56,72,75,195],"the":[13,122],"EU":[14],"AI":[15,18,59,215],"Act,":[16],"NIST":[17],"RMF,":[19],"and":[20,26,37,48,69,98,153,177,199,213],"ISO/IEC":[21],"42001":[22],"impose":[23],"explicit":[24],"evidence":[25,154],"accountability":[27],"requirements.":[28],"However,":[29],"existing":[30],"engineering":[31],"practice":[32],"remains":[33],"largely":[34],"manual,":[35],"retrospective,":[36],"decoupled":[38],"from":[39,120],"operational":[40],"pipelines,":[41],"resulting":[42],"inconsistent":[44],"provenance,":[45],"limited":[46],"reproducibility,":[47],"inadequate":[49],"clause-level":[50],"traceability.":[51],"This":[52],"paper":[53],"introduces":[54,144],"Governance":[55,74],"Evidence":[57,109],"for":[58],"Pipelines":[60],"(GEAP),":[61],"a":[62,83,107,116,184,196],"pipeline-native":[63],"governance":[64,80,146,192],"framework":[65,142],"that":[66,148,191],"expresses":[67],"organizational":[70],"policies":[71],"machine-interpretable":[73],"Code":[76],"rules.":[77],"GEAP":[78],"integrates":[79],"directly":[81],"into":[82,106,115],"unified":[84],"SDLC\u2013MLOps":[85],"execution":[86],"spine":[87],"by":[88],"enforcing":[89],"promotion":[90,172],"decisions":[91],"at":[92],"five":[93],"gates\u2014Data,":[94],"Training,":[95],"Validation,":[96],"Release,":[97],"Operations\u2014each":[99],"of":[100,161],"which":[101,121],"emits":[102],"signed,":[103],"content-addressed":[104],"artifacts":[105,112],"tamper-evident":[108],"Backbone.":[110],"These":[111],"are":[113],"assembled":[114],"per-run":[117],"Conformity":[118],"Bundle,":[119],"proposed":[123],"Clause-to-Artifact":[124],"Traceability":[125],"mechanism":[126],"deterministically":[127],"renders":[128],"clause":[129],"coverage":[130],"across":[131],"multiple":[132],"regimes":[134],"without":[135],"manual":[136],"crosswalks":[137],"or":[138],"duplicated":[139],"documentation.":[140],"The":[141,188],"further":[143],"quantitative":[145],"metrics":[147],"measure":[149],"adequacy,":[150],"completeness,":[151],"stability,":[152],"hygiene.":[155],"A":[156],"detailed":[157],"synthetic":[158],"case":[159],"study":[160],"an":[162,205],"intensive-care":[163],"sepsis":[164],"early-warning":[165],"system":[166],"demonstrates":[167],"GEAP\u2019s":[168],"ability":[169],"to":[170],"standardize":[171],"control,":[173],"detect":[174],"policy":[175],"violations,":[176],"produce":[178],"replayable,":[179],"audit-ready":[180],"compliance":[181],"manifests":[182],"clinical":[186],"context.":[187],"results":[189],"show":[190],"can":[193],"deterministic,":[197],"reproducible,":[198],"verifiable":[200],"pipeline":[201],"property":[202],"rather":[203],"than":[204],"external":[206],"documentation":[207],"exercise,":[208],"enabling":[209],"more":[210],"disciplined,":[211],"transparent,":[212],"accountable":[214],"deployment":[216],"practices.":[217]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-12-23T00:00:00"}