a catalog of all production models with metadata including purpose, owner, risk tier, data sources, performance metrics, known limitations, deployment date, and review schedule - **Impact assessment records** — completed assessments for all models above the documentation-only tier - **Review and app