Draft working document describing nine common concepts for managing AI risks in automotive regulated products: risk-informed lifecycle approaches, intended purpose and operational assumptions, building upon established sectoral engineering practices, traceability and documentation, data as a safety-relevant engineering artefact, confidence through multiple sources of evidence, organizational capacity and governance, continuous monitoring and improvement, and assurance arguments. The document presumes that existing regulations and established automotive safety engineering practices remain applicable where AI is part of a regulated product, and management of AI risks builds upon those regulations and practices.