The complete deployed software system, including all dataflow-affecting components, models, guardrails, control systems, accessible resources, allowed operations, and interfaces—not just the underlying model(s). An AI system's risk profile depends not only on model capabilities but on its CORE: the Components it comprises, the Operations it can perform, the Resources it can reach, and the Execution dataflow connecting them. Regulatory obligations under the EU AI Act and sector rules typically attach to the "AI system" as deployed, making it important to distinguish from "model" in contracts and governance.
AI system
C
R
See: CORE; Deployer; High-risk AI system; Model; Provider