The Linux Foundation and the Open Secure AI Alliance have published a Request for Comments (RFC) for the Shared AI Findings Exchange (SAFE) Working Group. Developed by contributors from Cisco, CrowdStrike, Hugging Face, NVIDIA, Red Hat, and others, the proposal aims to create a community framework for confidentially sharing AI security incidents and near misses. Modeled after systems like NASA's Aviation Safety Reporting System, SAFE would enable organizations to learn from AI operational failures without blame, identify recurring control failures, and develop evidence-based defensive guidance. The framework is designed to be vendor-neutral, applying equally to open and proprietary AI systems, and envisions publishing reusable tests, detection rules, and incident response guidance. The RFC is open for community review and contributions on GitHub.
