v1.3.0 — MLSecOps Practical Reference Guide

v1.3.0 — MLSecOps Practical Reference Guide

NIST Cyber AI Profile (IR 8596 iprd) Secure-theme mapping, release-gate / privacy / navigation integrity fixes, OpenSSF Passing + baseline-2, Dependabot removal — plus a reader-clarity pass (same version): Getting Started terms/role paths, CP8→CP9 order fixes, glossary, filled Evidence Pack sample, Ch.14 CP9/managed-API starting controls, TOC label disambiguation.

DOI: concept 10.5281/zenodo.21206780 (version DOI updates after Zenodo deposit)

Format	Link
Source (ZIP)	https://github.com/MHaghighian/MLSecOps/archive/refs/tags/v1.3.0.zip
Markdown	chapters-en/ in this repository
Site	https://mhaghighian.github.io/MLSecOps/
Maintainer	https://mhsec.me
Word (optional)	python scripts/build-docx.py --render-mermaid

Highlights

• NIST IR 8596 Cyber AI Profile (Secure) mapped in Ch.5 / 8 / 10 / 11 / 15
• Blocking release decisions at CP 4, 7, 8; separately mandatory integrity checkpoint at CP 9
• Getting Started: terms card, role paths, Level 1 vs Level 2+ baselines (do not mix)
• Appendix E.2 flow + filled Evidence Pack sample; NeMo / Llama Guard / Hub naming
• Ch.14 starting controls / maturity tables: CP9 managed-API alternative; TOC heading labels disambiguated
• OpenSSF Best Practices Passing + baseline-2; Dependabot disabled

Haghighian, M. (2026). MLSecOps Practical Reference Guide (v1.3.0).
Zenodo. https://doi.org/10.5281/zenodo.21206780

Full notes: RELEASE_NOTES.md · CHANGELOG.md