I think the breakdown of vulnerability analysis at each phase of the AI model development cycle was clever: rather than treating it all as one step you can assess the risks unique to each phase and mitigate accordingly.
I hope you guys end up working with MITRE or some other large standard to release an industry framework for it.