# The IOM Standard

> An open, vendor-neutral specification for modeling infrastructure intent, ownership, constraints, and meaning. All publications are CC BY 4.0.

The full library is available as structured data at https://theiom.org/documents/index

## Documents

- [Aspirational Architecture](https://theiom.org/documents/aspirational-architecture/): TOGAF, golden paths, and infrastructure-as-code each declare intent, and each assumes something else will hold reality to it. Nothing validates a change against any of them before it runs.
- [Conformance Submission](https://theiom.org/documents/conformance-submission/): How an implementation is verified against the IOM Standard: what evidence is required, how it must be demonstrated, and what a listing in the conformance directory asserts.
- [Model Inversion](https://theiom.org/documents/model-inversion/): Operations infer intent from telemetry after the fact. Model Inversion reverses the direction, making an authoritative model the first input rather than the last conclusion.
- [The Amalgamation Fallacy](https://theiom.org/documents/the-amalgamation-fallacy/): Discovery, CMDBs, and telemetry each record what is. No amount of integration turns a description of the estate into a statement of what is allowed.
- [The IOM Standard v1.0](https://theiom.org/documents/iom-standard/): A vendor-neutral specification for the infrastructure authority layer.
- [Representation Is Not Authority](https://theiom.org/documents/representation-is-not-authority/): Digital twins represent infrastructure; an Infrastructure Operating Model governs it. Why legitimacy — not fidelity — is the category boundary.
- [Why AI Needs an Infrastructure Operating Model](https://theiom.org/documents/why-ai-needs-an-infrastructure-operating-model/): AI-driven infrastructure stalls for structural reasons, not algorithmic ones. AI can see what exists, not what is legitimate — and autonomy needs legitimacy.
- [Twelve Tools, One Missing Layer](https://theiom.org/documents/twelve-tools-one-missing-layer/): Approximating an IOM takes roughly a dozen platforms — but even one vendor shipping all twelve would not produce one. Authority is not an integration construct.
- [Intelligent Control Plane or Operating Model?](https://theiom.org/documents/intelligent-control-plane-or-operating-model/): A smarter control plane improves how infrastructure executes; it cannot establish what it means, who owns it, or what it may do. Control is not authority.
- [Frameworks Describe. Something Must Govern.](https://theiom.org/documents/frameworks-describe-something-must-govern/): TOGAF, Zachman, ArchiMate and SAFe describe architecture; none enforces it. Why EA needs an IOM authority layer to keep intent and reality reconciled.
- [Security Is an Operating-Model Problem](https://theiom.org/documents/security-is-an-operating-model-problem/): Security fails on static assumptions in a changing world; posture decays between scans. Why preventive security and Zero Trust need an IOM authority layer.
- [From Tool Aggregation to Infrastructure Authority](https://theiom.org/documents/from-tool-aggregation-to-infrastructure-authority/): What an IOM is made of and how it is adopted — a phased, low-risk path that governs existing tools before execution, without replacing them.
- [AIOps Is an Operating-Model Problem](https://theiom.org/documents/aiops-is-an-operating-model-problem/): AIOps noise is not a model problem — telemetry records what happened, not what was intended. An IOM authority layer makes root cause deterministic.
- [IaC Declares How. An IOM Declares What’s Allowed.](https://theiom.org/documents/iac-declares-how-an-iom-declares-whats-allowed/): Infrastructure as Code declares how to build; an Infrastructure Operating Model declares what is allowed — and validates the plan before it runs.
- [The IOM Starter Kit](https://theiom.org/documents/iom-starter-kit/): A working document for scoring IOM readiness across six capability dimensions, mapping existing tools to requirements, and planning adoption in four phases.
- [Authority Layer Context](https://theiom.org/documents/iom-authority-layer-context/)
- [Authority Layer Gate](https://theiom.org/documents/iom-authority-layer-gate/)
- [Authority Stack](https://theiom.org/documents/iom-authority-stack/)
- [Eras Operating Models](https://theiom.org/documents/iom-eras-operating-models/)
- [Five Eras](https://theiom.org/documents/iom-five-eras/)
- [Inference Vs Authority](https://theiom.org/documents/iom-inference-vs-authority/)
- [Maturity Climb](https://theiom.org/documents/iom-maturity-climb/)
- [Operating Loop](https://theiom.org/documents/iom-operating-loop/)
- [Representation Vs Authority](https://theiom.org/documents/iom-representation-vs-authority/)