{
  "contract_version": 5,
  "report_id": "skene-selfhost-openai-full-art10-rerun",
  "meta": {
    "toolkit_version": "1.4.0",
    "spec_version": "aepf-v1",
    "generated_at": 1777525450796,
    "run_id": "skene-selfhost-openai-full-art10-rerun"
  },
  "surface": {
    "id": "eu-ai-act",
    "label": "EU AI Act evidence report",
    "kind": "vertical",
    "base_contract": "report-contract-v5",
    "vertical_contract": "eu-ai-act-full"
  },
  "surface_version": "eu-ai-act-full-v1",
  "environment": {
    "agent_id": "skene",
    "agent_version": "selfhost-openai-cloud-v1",
    "model": "gpt-4o-mini",
    "model_version": "openai-api",
    "prompt_version": "skene-selfhost-default",
    "tools_version": "skene-selfhost-wrapper",
    "config_hash": "cfg-skene-selfhost-openai-gpt-4o-mini"
  },
  "provenance": {
    "baseline": {
      "agent_id": "skene",
      "agent_version": "selfhost-openai-cloud-v1",
      "model": "gpt-4o-mini",
      "model_version": "openai-api",
      "prompt_version": "skene-selfhost-default",
      "tools_version": "skene-selfhost-wrapper",
      "config_hash": "cfg-skene-selfhost-openai-gpt-4o-mini"
    },
    "new": {
      "agent_id": "skene",
      "agent_version": "selfhost-openai-cloud-v1",
      "model": "gpt-4o-mini",
      "model_version": "openai-api",
      "prompt_version": "skene-selfhost-default",
      "tools_version": "skene-selfhost-wrapper",
      "config_hash": "cfg-skene-selfhost-openai-gpt-4o-mini"
    },
    "changed_fields": []
  },
  "baseline_dir": "_source_inputs/baseline",
  "new_dir": "_source_inputs/new",
  "cases_path": "_source_inputs/cases.json",
  "summary": {
    "baseline_pass": 1,
    "new_pass": 1,
    "regressions": 0,
    "improvements": 0,
    "root_cause_breakdown": {},
    "quality": {
      "transfer_class": "internal_only",
      "redaction_status": "none"
    },
    "security": {
      "total_cases": 1,
      "cases_with_signals_new": 0,
      "cases_with_signals_baseline": 0,
      "signal_counts_new": {
        "low": 0,
        "medium": 0,
        "high": 0,
        "critical": 0
      },
      "signal_counts_baseline": {
        "low": 0,
        "medium": 0,
        "high": 0,
        "critical": 0
      },
      "top_signal_kinds_new": [],
      "top_signal_kinds_baseline": []
    },
    "risk_summary": {
      "low": 1,
      "medium": 0,
      "high": 0
    },
    "cases_requiring_approval": 0,
    "cases_block_recommended": 0,
    "data_coverage": {
      "total_cases": 1,
      "items_emitted": 1,
      "missing_baseline_artifacts": 0,
      "missing_new_artifacts": 0,
      "broken_baseline_artifacts": 0,
      "broken_new_artifacts": 0
    },
    "execution_quality": {
      "status": "healthy",
      "reasons": [],
      "thresholds": {
        "min_transport_success_rate": 0.95,
        "max_weak_expected_rate": 0.2,
        "min_pre_action_entropy_removed": 0,
        "min_reconstruction_minutes_saved_per_block": 0
      },
      "total_executed_cases": 1,
      "baseline_runner_failures": 0,
      "new_runner_failures": 0,
      "baseline_runner_failure_rate": 0,
      "new_runner_failure_rate": 0,
      "baseline_transport_success_rate": 1,
      "new_transport_success_rate": 1,
      "baseline_runner_failure_kinds": {},
      "new_runner_failure_kinds": {},
      "weak_expected_cases": 0,
      "weak_expected_rate": 0,
      "model_quality_inconclusive": false,
      "admissibility_kpi": {
        "risk_mass_before": 1,
        "risk_mass_after": 1,
        "pre_action_entropy_removed": 0,
        "blocked_cases": 0,
        "reconstruction_minutes_saved_total": 0,
        "reconstruction_minutes_saved_per_block": 0,
        "model": {
          "risk_weight_by_level": {
            "low": 1,
            "medium": 2,
            "high": 3
          },
          "residual_factor_by_gate": {
            "none": 1,
            "require_approval": 0.4,
            "block": 0
          },
          "minutes_per_removed_risk_unit": 30
        }
      }
    },
    "trace_anchor_coverage": {
      "cases_with_anchor_baseline": 0,
      "cases_with_anchor_new": 0
    },
    "article_50_request": {
      "state": "out_of_scope",
      "source": "builder",
      "verification_mode": "none",
      "declared_roles": [],
      "requested_obligations": [],
      "declared_modalities": [],
      "declared_marking_mechanisms": [],
      "declared_delivery_channels": []
    }
  },
  "summary_by_suite": {
    "skene_selfhost": {
      "baseline_pass": 1,
      "new_pass": 1,
      "regressions": 0,
      "improvements": 0,
      "root_cause_breakdown": {},
      "security": {
        "total_cases": 1,
        "cases_with_signals_new": 0,
        "cases_with_signals_baseline": 0,
        "signal_counts_new": {
          "low": 0,
          "medium": 0,
          "high": 0,
          "critical": 0
        },
        "signal_counts_baseline": {
          "low": 0,
          "medium": 0,
          "high": 0,
          "critical": 0
        },
        "top_signal_kinds_new": [],
        "top_signal_kinds_baseline": []
      },
      "risk_summary": {
        "low": 1,
        "medium": 0,
        "high": 0
      },
      "cases_requiring_approval": 0,
      "cases_block_recommended": 0,
      "data_coverage": {
        "total_cases": 1,
        "items_emitted": 1,
        "missing_baseline_artifacts": 0,
        "missing_new_artifacts": 0,
        "broken_baseline_artifacts": 0,
        "broken_new_artifacts": 0
      }
    }
  },
  "quality_flags": {
    "self_contained": true,
    "portable_paths": true,
    "missing_assets_count": 0,
    "path_violations_count": 0,
    "large_payloads_count": 0,
    "missing_assets": [],
    "path_violations": [],
    "large_payloads": []
  },
  "compliance_mapping": [
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_9",
      "title": "Risk management system",
      "evidence": [
        "compare-report.json.summary.risk_summary",
        "compare-report.json.items[].gate_recommendation",
        "compare-report.json.items[].security",
        "compare-report.json.summary.execution_quality.admissibility_kpi",
        "artifacts/manifest.json"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_10",
      "title": "Data governance and data quality",
      "evidence": [
        "compare-report.json.summary.data_coverage",
        "compare-report.json.quality_flags"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_11",
      "title": "Technical documentation",
      "evidence": [
        "compare-report.json.summary",
        "compare-report.json.environment",
        "artifacts/manifest.json"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Annex_IV",
      "title": "Technical documentation dossier structure",
      "evidence": [
        "compare-report.json.summary",
        "compare-report.json.items[]",
        "artifacts/manifest.json"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_12",
      "title": "Record-keeping and logging",
      "evidence": [
        "compare-report.json.items[].trace_integrity",
        "compare-report.json.items[].artifacts",
        "artifacts/manifest.json"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_13",
      "title": "Transparency and instructions for use",
      "evidence": [
        "compare-report.json.summary.execution_quality",
        "compare-report.json.summary.cases_requiring_approval",
        "compare-report.json.quality_flags",
        "report.html"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_16",
      "title": "Provider obligations",
      "evidence": [
        "compare-report.json.environment",
        "compare-report.json.summary.execution_quality",
        "compare-report.json.quality_flags",
        "report.html"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_17",
      "title": "Quality management system",
      "evidence": [
        "compare-report.json.summary.execution_quality",
        "compare-report.json.summary.cases_requiring_approval",
        "compare-report.json.summary.cases_block_recommended",
        "compare-report.json.quality_flags",
        "report.html"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_18",
      "title": "Documentation keeping",
      "evidence": [
        "compare-report.json.environment",
        "compare-report.json.meta",
        "artifacts/manifest.json"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_19",
      "title": "Automatically generated logs",
      "evidence": [
        "compare-report.json.items[].trace_integrity",
        "compare-report.json.items[].artifacts",
        "artifacts/manifest.json"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_14",
      "title": "Human oversight",
      "evidence": [
        "compare-report.json.summary.cases_requiring_approval",
        "compare-report.json.items[].gate_recommendation",
        "compare-report.json.items[].policy_evaluation"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_15",
      "title": "Accuracy, robustness, and cybersecurity",
      "evidence": [
        "compare-report.json.summary.execution_quality",
        "compare-report.json.summary.security",
        "compare-report.json.items[].risk_level",
        "compare-report.json.items[].security"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_20",
      "title": "Corrective actions and duty of information",
      "evidence": [
        "compare-report.json.summary.execution_quality",
        "compare-report.json.summary.cases_block_recommended",
        "compare-report.json.items[].gate_recommendation",
        "report.html"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_21",
      "title": "Cooperation with competent authorities",
      "evidence": [
        "compare-report.json.environment",
        "compare-report.json.quality_flags",
        "artifacts/manifest.json"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_22",
      "title": "Authorised representatives",
      "evidence": [
        "compare-report.json.environment",
        "compare-report.json.meta",
        "report.html"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_26",
      "title": "Obligations of deployers of high-risk AI systems",
      "evidence": [
        "compare-report.json.summary.execution_quality",
        "compare-report.json.summary.cases_requiring_approval",
        "compare-report.json.items[].gate_recommendation",
        "report.html"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_27",
      "title": "Fundamental rights impact assessment for deployers",
      "evidence": [
        "compare-report.json.summary.execution_quality",
        "compare-report.json.summary.cases_requiring_approval",
        "report.html"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_43",
      "title": "Conformity assessment",
      "evidence": [
        "compare-report.json.environment",
        "compare-report.json.summary.execution_quality",
        "compare-report.json.quality_flags",
        "report.html"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_47",
      "title": "EU declaration of conformity",
      "evidence": [
        "compare-report.json.environment",
        "compare-report.json.meta",
        "report.html"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_48",
      "title": "CE marking",
      "evidence": [
        "compare-report.json.environment",
        "compare-report.json.meta",
        "report.html"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_49",
      "title": "Registration",
      "evidence": [
        "compare-report.json.environment",
        "compare-report.json.meta",
        "report.html"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Annex_V",
      "title": "Declaration content",
      "evidence": [
        "compare-report.json.environment",
        "compare-report.json.meta",
        "report.html"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_72",
      "title": "Post-market monitoring",
      "evidence": [
        "compare-report.json.summary_by_suite",
        "compare-report.json.summary.execution_quality",
        "report.html"
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_73",
      "title": "Serious incident reporting",
      "evidence": [
        "compare-report.json.summary.execution_quality",
        "compare-report.json.summary_by_suite",
        "artifacts/manifest.json"
      ]
    }
  ],
  "items": [
    {
      "case_id": "skene_selfhost_repo_scale",
      "title": "Skene repo-scale self-hosted analysis",
      "suite": "skene_selfhost",
      "data_availability": {
        "baseline": {
          "status": "present"
        },
        "new": {
          "status": "present"
        }
      },
      "case_status": "executed",
      "baseline_pass": true,
      "new_pass": true,
      "preventable_by_policy": false,
      "recommended_policy_rules": [],
      "artifacts": {
        "replay_diff_href": "case-skene_selfhost_repo_scale.html",
        "baseline_run_meta_href": "assets/raw/run_meta/baseline.run.json",
        "new_run_meta_href": "assets/raw/run_meta/new.run.json",
        "baseline_case_response_href": "assets/raw/case_responses/skene_selfhost_repo_scale/baseline.json",
        "new_case_response_href": "assets/raw/case_responses/skene_selfhost_repo_scale/new.json",
        "baseline_case_response_key": "skene_selfhost_repo_scale/baseline/case_response",
        "new_case_response_key": "skene_selfhost_repo_scale/new/case_response",
        "baseline_tool_telemetry_href": "assets/tool_telemetry/skene_selfhost_repo_scale/baseline.json",
        "baseline_tool_telemetry_key": "skene_selfhost_repo_scale/baseline/tool_telemetry",
        "new_tool_telemetry_href": "assets/tool_telemetry/skene_selfhost_repo_scale/new.json",
        "new_tool_telemetry_key": "skene_selfhost_repo_scale/new/tool_telemetry"
      },
      "trace_integrity": {
        "baseline": {
          "status": "ok",
          "issues": []
        },
        "new": {
          "status": "ok",
          "issues": []
        }
      },
      "security": {
        "baseline": {
          "signals": [],
          "requires_gate_recommendation": false
        },
        "new": {
          "signals": [],
          "requires_gate_recommendation": false
        }
      },
      "policy_evaluation": {
        "baseline": {
          "planning_gate_pass": true,
          "repl_policy_pass": true
        },
        "new": {
          "planning_gate_pass": true,
          "repl_policy_pass": true
        }
      },
      "assumption_state": {
        "baseline": {
          "status": "present",
          "source": "response",
          "selected_count": 1,
          "rejected_count": 0
        },
        "new": {
          "status": "present",
          "source": "response",
          "selected_count": 1,
          "rejected_count": 0
        }
      },
      "risk_level": "low",
      "risk_tags": [],
      "gate_recommendation": "none",
      "assertions_baseline": [
        {
          "name": "tool_telemetry",
          "pass": true,
          "details": {
            "required_by": [
              "tool_telemetry_policy"
            ],
            "tool_call_count": 1,
            "tool_result_count": 1,
            "wrapper_tool_call_count": 1,
            "non_wrapper_tool_call_count": 0,
            "telemetry_mode": "wrapper_only",
            "tool_results_missing_output_evidence": [],
            "tool_results_missing_error_evidence": [],
            "violations": [],
            "known_tool_call_ids": [
              "cli_exec_skene_selfhost_repo_scale_1777525203215"
            ]
          }
        },
        {
          "name": "semantic_quality",
          "pass": true,
          "details": {
            "note": "not_required"
          }
        },
        {
          "name": "json_schema",
          "pass": true,
          "details": {
            "schema_errors": []
          }
        },
        {
          "name": "runner_transport_success",
          "pass": true,
          "details": {
            "note": "no_runner_failure"
          }
        },
        {
          "name": "evidence_required_for_actions",
          "pass": true,
          "details": {
            "note": "not required"
          }
        },
        {
          "name": "tool_execution",
          "pass": true,
          "details": {
            "failed": []
          }
        },
        {
          "name": "hallucination_signal_check",
          "pass": true,
          "details": {
            "note": "no ticket id in output"
          }
        },
        {
          "name": "planning_gate",
          "pass": true,
          "details": {
            "note": "not_required"
          }
        },
        {
          "name": "repl_policy",
          "pass": true,
          "details": {
            "note": "not_required"
          }
        },
        {
          "name": "assumption_state",
          "pass": true,
          "details": {
            "source": "response",
            "selected_count": 1,
            "rejected_count": 0,
            "violations": []
          }
        }
      ],
      "assertions_new": [
        {
          "name": "tool_telemetry",
          "pass": true,
          "details": {
            "required_by": [
              "tool_telemetry_policy"
            ],
            "tool_call_count": 1,
            "tool_result_count": 1,
            "wrapper_tool_call_count": 1,
            "non_wrapper_tool_call_count": 0,
            "telemetry_mode": "wrapper_only",
            "tool_results_missing_output_evidence": [],
            "tool_results_missing_error_evidence": [],
            "violations": [],
            "known_tool_call_ids": [
              "cli_exec_skene_selfhost_repo_scale_1777525331306"
            ]
          }
        },
        {
          "name": "semantic_quality",
          "pass": true,
          "details": {
            "note": "not_required"
          }
        },
        {
          "name": "json_schema",
          "pass": true,
          "details": {
            "schema_errors": []
          }
        },
        {
          "name": "runner_transport_success",
          "pass": true,
          "details": {
            "note": "no_runner_failure"
          }
        },
        {
          "name": "evidence_required_for_actions",
          "pass": true,
          "details": {
            "note": "not required"
          }
        },
        {
          "name": "tool_execution",
          "pass": true,
          "details": {
            "failed": []
          }
        },
        {
          "name": "hallucination_signal_check",
          "pass": true,
          "details": {
            "note": "no ticket id in output"
          }
        },
        {
          "name": "planning_gate",
          "pass": true,
          "details": {
            "note": "not_required"
          }
        },
        {
          "name": "repl_policy",
          "pass": true,
          "details": {
            "note": "not_required"
          }
        },
        {
          "name": "assumption_state",
          "pass": true,
          "details": {
            "source": "response",
            "selected_count": 1,
            "rejected_count": 0,
            "violations": []
          }
        }
      ],
      "assertions": [
        {
          "name": "tool_telemetry",
          "pass": true,
          "details": {
            "required_by": [
              "tool_telemetry_policy"
            ],
            "tool_call_count": 1,
            "tool_result_count": 1,
            "wrapper_tool_call_count": 1,
            "non_wrapper_tool_call_count": 0,
            "telemetry_mode": "wrapper_only",
            "tool_results_missing_output_evidence": [],
            "tool_results_missing_error_evidence": [],
            "violations": [],
            "known_tool_call_ids": [
              "cli_exec_skene_selfhost_repo_scale_1777525331306"
            ]
          }
        },
        {
          "name": "semantic_quality",
          "pass": true,
          "details": {
            "note": "not_required"
          }
        },
        {
          "name": "json_schema",
          "pass": true,
          "details": {
            "schema_errors": []
          }
        },
        {
          "name": "runner_transport_success",
          "pass": true,
          "details": {
            "note": "no_runner_failure"
          }
        },
        {
          "name": "evidence_required_for_actions",
          "pass": true,
          "details": {
            "note": "not required"
          }
        },
        {
          "name": "tool_execution",
          "pass": true,
          "details": {
            "failed": []
          }
        },
        {
          "name": "hallucination_signal_check",
          "pass": true,
          "details": {
            "note": "no ticket id in output"
          }
        },
        {
          "name": "planning_gate",
          "pass": true,
          "details": {
            "note": "not_required"
          }
        },
        {
          "name": "repl_policy",
          "pass": true,
          "details": {
            "note": "not_required"
          }
        },
        {
          "name": "assumption_state",
          "pass": true,
          "details": {
            "source": "response",
            "selected_count": 1,
            "rejected_count": 0,
            "violations": []
          }
        }
      ],
      "case_ts": 1777525203215
    }
  ],
  "embedded_manifest_index": {
    "manifest_version": "v1",
    "generated_at": 1777525454717,
    "source_manifest_sha256": "7a142119edf2398680bfc1fed2234c68e1a5fb918323eaa01b5930068823567e",
    "items": [
      {
        "manifest_key": "skene_selfhost_repo_scale/baseline/case_response",
        "rel_path": "assets/raw/case_responses/skene_selfhost_repo_scale/baseline.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "skene_selfhost_repo_scale/new/case_response",
        "rel_path": "assets/raw/case_responses/skene_selfhost_repo_scale/new.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "skene_selfhost_repo_scale/baseline/tool_result_cli_exec_skene_selfhost_repo_scale_1777525203215",
        "rel_path": "assets/tool_telemetry/skene_selfhost_repo_scale/baseline/results/01-cli_exec_skene_selfhost_repo_scale_1777525203215.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "skene_selfhost_repo_scale/baseline/tool_telemetry",
        "rel_path": "assets/tool_telemetry/skene_selfhost_repo_scale/baseline.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "skene_selfhost_repo_scale/new/tool_result_cli_exec_skene_selfhost_repo_scale_1777525331306",
        "rel_path": "assets/tool_telemetry/skene_selfhost_repo_scale/new/results/01-cli_exec_skene_selfhost_repo_scale_1777525331306.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "skene_selfhost_repo_scale/new/tool_telemetry",
        "rel_path": "assets/tool_telemetry/skene_selfhost_repo_scale/new.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "skene_selfhost_repo_scale/baseline/final_output",
        "rel_path": "assets/final_output/skene_selfhost_repo_scale/baseline.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "skene_selfhost_repo_scale/new/final_output",
        "rel_path": "assets/final_output/skene_selfhost_repo_scale/new.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "viewer/skene_selfhost_repo_scale/replay_diff",
        "rel_path": "case-skene_selfhost_repo_scale.html",
        "media_type": "text/html"
      },
      {
        "manifest_key": "bundle/retention_archive_controls",
        "rel_path": "archive/retention-controls.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/coverage",
        "rel_path": "compliance/eu-ai-act-coverage.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/annex_iv",
        "rel_path": "compliance/eu-ai-act-annex-iv.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/article_10_data_governance",
        "rel_path": "compliance/article-10-data-governance.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/report_html",
        "rel_path": "compliance/eu-ai-act-report.html",
        "media_type": "text/html"
      },
      {
        "manifest_key": "compliance/eu_ai_act/reviewer_html",
        "rel_path": "compliance/eu-ai-act-reviewer.html",
        "media_type": "text/html"
      },
      {
        "manifest_key": "compliance/eu_ai_act/reviewer_markdown",
        "rel_path": "compliance/eu-ai-act-reviewer.md",
        "media_type": "text/markdown"
      },
      {
        "manifest_key": "compliance/eu_ai_act/evidence_index",
        "rel_path": "compliance/evidence-index.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/article_13_instructions",
        "rel_path": "compliance/article-13-instructions.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/article_16_provider_obligations",
        "rel_path": "compliance/article-16-provider-obligations.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/article_43_conformity_assessment",
        "rel_path": "compliance/article-43-conformity-assessment.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/article_47_declaration_of_conformity",
        "rel_path": "compliance/article-47-declaration-of-conformity.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/article_9_risk_register",
        "rel_path": "compliance/article-9-risk-register.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/article_72_monitoring_plan",
        "rel_path": "compliance/article-72-monitoring-plan.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/article_17_qms_lite",
        "rel_path": "compliance/article-17-qms-lite.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/annex_v_declaration_content",
        "rel_path": "compliance/annex-v-declaration-content.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/article_73_serious_incident_pack",
        "rel_path": "compliance/article-73-serious-incident-pack.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/human_oversight_summary",
        "rel_path": "compliance/human-oversight-summary.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/release_review",
        "rel_path": "compliance/release-review.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/post_market_monitoring",
        "rel_path": "compliance/post-market-monitoring.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "supplemental/eu_ai_act_builder_draft",
        "rel_path": "supplemental/eu-package-input.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/legal_artifact/annex_iv_technical_documentation-reference",
        "rel_path": "compliance/eu-ai-act-annex-iv.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/legal_artifact/article_17_qms_record-reference",
        "rel_path": "compliance/article-17-qms-lite.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/legal_artifact/article_18_documentation_keeping_record-reference",
        "rel_path": "compliance/evidence-index.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/legal_artifact/article_19_log_retention_record-reference",
        "rel_path": "archive/retention-controls.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/legal_artifact/article_20_corrective_action_record-reference",
        "rel_path": "compliance/release-review.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/legal_artifact/article_21_authority_cooperation_record-reference",
        "rel_path": "compliance/eu-ai-act-reviewer.md",
        "media_type": "text/markdown"
      },
      {
        "manifest_key": "compliance/eu_ai_act/legal_artifact/article_43_conformity_assessment_record-reference",
        "rel_path": "compliance/article-43-conformity-assessment.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/legal_artifact/article_47_declaration_of_conformity-reference",
        "rel_path": "compliance/article-47-declaration-of-conformity.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "supplemental/eu_ai_act_package_input",
        "rel_path": "supplemental/eu-package-input.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/package_completion",
        "rel_path": "compliance/package-completion.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/section_completion",
        "rel_path": "compliance/section-completion.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/legal_record_register",
        "rel_path": "compliance/legal-record-register.json",
        "media_type": "application/json"
      },
      {
        "manifest_key": "compliance/eu_ai_act/legal_artifact_manifest",
        "rel_path": "compliance/legal-artifact-manifest.json",
        "media_type": "application/json"
      }
    ]
  },
  "compliance_coverage": [
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_9",
      "title": "Risk management system",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "toolkit_evidence_ready",
      "required_evidence": [
        "compare-report.json.summary.risk_summary",
        "compare-report.json.items[].gate_recommendation",
        "compare-report.json.items[].security",
        "compare-report.json.summary.execution_quality.admissibility_kpi"
      ],
      "required_evidence_present": [
        "compare-report.json.summary.risk_summary",
        "compare-report.json.items[].gate_recommendation",
        "compare-report.json.items[].security",
        "compare-report.json.summary.execution_quality.admissibility_kpi"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [
        "artifacts/manifest.json"
      ],
      "supporting_evidence_present": [
        "artifacts/manifest.json"
      ],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "Operator-owned risk governance still sits outside the evaluator.",
        "Annex III classification and legal interpretation still require counsel."
      ],
      "notes": [
        "This clause is scored as runtime evidence coverage, not full legal conformity."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_10",
      "title": "Data governance and data quality",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "toolkit_evidence_ready",
      "required_evidence": [
        "builder-draft.json.article_10.mode",
        "builder-draft.json.article_10.provider_non_training_statement_ref",
        "builder-draft.json.article_10.testing_data_provenance_ref",
        "builder-draft.json.article_10.evaluation_scope_record_ref",
        "builder-draft.json.article_10.data_preparation_record_ref",
        "builder-draft.json.article_10.bias_review_record_ref"
      ],
      "required_evidence_present": [
        "builder-draft.json.article_10.mode",
        "builder-draft.json.article_10.provider_non_training_statement_ref",
        "builder-draft.json.article_10.testing_data_provenance_ref",
        "builder-draft.json.article_10.evaluation_scope_record_ref",
        "builder-draft.json.article_10.data_preparation_record_ref",
        "builder-draft.json.article_10.bias_review_record_ref"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [
        "compare-report.json.summary.data_coverage",
        "compare-report.json.quality_flags",
        "builder-draft.json.sections[]"
      ],
      "supporting_evidence_present": [
        "compare-report.json.summary.data_coverage",
        "compare-report.json.quality_flags",
        "builder-draft.json.sections[]"
      ],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "Dataset provenance, representativeness review, bias review, and preparation records remain provider-authored legal inputs."
      ],
      "notes": [
        "Article 10(6) path: the package declares that the provider does not train or fine-tune the model, so Article 10(2) to 10(5) are evidenced through testing datasets and evaluation inputs."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_11",
      "title": "Technical documentation",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "toolkit_evidence_ready",
      "required_evidence": [
        "compare-report.json.summary",
        "compare-report.json.environment",
        "artifacts/manifest.json"
      ],
      "required_evidence_present": [
        "compare-report.json.summary",
        "compare-report.json.environment",
        "artifacts/manifest.json"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [
        "compare-report.json.items[]"
      ],
      "supporting_evidence_present": [
        "compare-report.json.items[]"
      ],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "The evaluator emits evidence inputs, not the full Article 11 technical file."
      ],
      "notes": [
        "Use this output as an annex to a broader technical documentation package."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Annex_IV",
      "title": "Technical documentation dossier structure",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "toolkit_evidence_ready",
      "required_evidence": [
        "compare-report.json.summary",
        "compare-report.json.items[]",
        "artifacts/manifest.json"
      ],
      "required_evidence_present": [
        "compare-report.json.summary",
        "compare-report.json.items[]",
        "artifacts/manifest.json"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [],
      "supporting_evidence_present": [],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "The generated dossier still requires operator-authored intended-use, system-boundary, and deployment-context inputs."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_12",
      "title": "Record-keeping and logging",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "toolkit_evidence_ready",
      "required_evidence": [
        "compare-report.json.items[].trace_integrity",
        "compare-report.json.items[].artifacts",
        "artifacts/manifest.json"
      ],
      "required_evidence_present": [
        "compare-report.json.items[].trace_integrity",
        "compare-report.json.items[].artifacts",
        "artifacts/manifest.json"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [],
      "supporting_evidence_present": [],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "Provider logging-retention periods, production log controls, and system-specific logging scope remain provider-owned."
      ],
      "notes": [
        "This clause is scored as a logging and record-keeping evidence scaffold, not as a complete provider logging program."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_13",
      "title": "Transparency and instructions for use",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "toolkit_evidence_ready",
      "required_evidence": [
        "compare-report.json.summary.execution_quality",
        "compare-report.json.summary.cases_requiring_approval",
        "compare-report.json.quality_flags"
      ],
      "required_evidence_present": [
        "compare-report.json.summary.execution_quality",
        "compare-report.json.summary.cases_requiring_approval",
        "compare-report.json.quality_flags"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [
        "compare-report.json.environment",
        "compare-report.json.items[].gate_recommendation",
        "report.html"
      ],
      "supporting_evidence_present": [
        "compare-report.json.environment",
        "compare-report.json.items[].gate_recommendation",
        "report.html"
      ],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "Operator-authored intended-use, deployer-facing instructions, and operating constraints remain required.",
        "Human oversight procedures for deployers still require operator-authored narrative."
      ],
      "notes": [
        "This clause is scored as a technical instructions scaffold, not a finished instructions-for-use document."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_17",
      "title": "Quality management system",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "toolkit_evidence_ready",
      "required_evidence": [
        "compare-report.json.summary.execution_quality",
        "compare-report.json.summary.cases_requiring_approval",
        "compare-report.json.summary.cases_block_recommended",
        "compare-report.json.quality_flags"
      ],
      "required_evidence_present": [
        "compare-report.json.summary.execution_quality",
        "compare-report.json.summary.cases_requiring_approval",
        "compare-report.json.summary.cases_block_recommended",
        "compare-report.json.quality_flags"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [
        "compare-report.json.summary_by_suite",
        "report.html"
      ],
      "supporting_evidence_present": [
        "compare-report.json.summary_by_suite",
        "report.html"
      ],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "Written QMS procedures, training, document control, supplier management, and authority communication remain operator responsibilities."
      ],
      "notes": [
        "This clause is scored as a technical QMS scaffold, not a complete quality management system."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_14",
      "title": "Human oversight",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "toolkit_evidence_ready",
      "required_evidence": [
        "compare-report.json.summary.cases_requiring_approval",
        "compare-report.json.items[].gate_recommendation",
        "compare-report.json.items[].policy_evaluation"
      ],
      "required_evidence_present": [
        "compare-report.json.summary.cases_requiring_approval",
        "compare-report.json.items[].gate_recommendation",
        "compare-report.json.items[].policy_evaluation"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [],
      "supporting_evidence_present": [],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "Deployer-facing oversight procedures, staffing, escalation rules, and operating playbooks remain operator-authored."
      ],
      "notes": [
        "This clause is scored as a technical oversight scaffold, not as a finished human-oversight operating model."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_15",
      "title": "Accuracy, robustness, and cybersecurity",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "toolkit_evidence_ready",
      "required_evidence": [
        "compare-report.json.summary.execution_quality",
        "compare-report.json.summary.security",
        "compare-report.json.items[].risk_level",
        "compare-report.json.items[].security"
      ],
      "required_evidence_present": [
        "compare-report.json.summary.execution_quality",
        "compare-report.json.summary.security",
        "compare-report.json.items[].risk_level",
        "compare-report.json.items[].security"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [
        "artifacts/manifest.json"
      ],
      "supporting_evidence_present": [
        "artifacts/manifest.json"
      ],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "Sector-specific validation thresholds, production robustness targets, cybersecurity controls, and acceptance criteria remain provider-owned."
      ],
      "notes": [
        "This clause is scored as an evidence scaffold for robustness and cybersecurity, not as a completed assurance program."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_72",
      "title": "Post-market monitoring",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "toolkit_evidence_ready",
      "required_evidence": [
        "compare-report.json.summary.execution_quality",
        "compare-report.json.summary_by_suite"
      ],
      "required_evidence_present": [
        "compare-report.json.summary.execution_quality",
        "compare-report.json.summary_by_suite"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [
        "report.html"
      ],
      "supporting_evidence_present": [
        "report.html"
      ],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "Recurring monitoring cadence, escalation workflow, and regulator-facing reporting remain operator responsibilities."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_73",
      "title": "Serious incident reporting",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "awaiting_operator",
      "required_evidence": [
        "compare-report.json.summary.execution_quality",
        "artifacts/manifest.json"
      ],
      "required_evidence_present": [
        "compare-report.json.summary.execution_quality",
        "artifacts/manifest.json"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [
        "compare-report.json.summary_by_suite",
        "report.html"
      ],
      "supporting_evidence_present": [
        "compare-report.json.summary_by_suite",
        "report.html"
      ],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "Provider-owned incident classification, authority notification timing, and production escalation records remain required."
      ],
      "notes": [
        "This clause is scored as a serious-incident reporting scaffold, not a completed Article 73 authority filing."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_16",
      "title": "Provider obligations",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "awaiting_operator",
      "required_evidence": [
        "compare-report.json.environment",
        "compare-report.json.summary.execution_quality",
        "compare-report.json.quality_flags"
      ],
      "required_evidence_present": [
        "compare-report.json.environment",
        "compare-report.json.summary.execution_quality",
        "compare-report.json.quality_flags"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [
        "report.html"
      ],
      "supporting_evidence_present": [
        "report.html"
      ],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "Provider-owned records for Section 2 compliance, declaration, marking, registration, and authority-facing obligations remain required."
      ],
      "notes": [
        "This clause is scored as a provider-obligations scaffold, not a finished provider obligations record."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_18",
      "title": "Documentation keeping",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "awaiting_operator",
      "required_evidence": [
        "compare-report.json.environment",
        "compare-report.json.meta",
        "artifacts/manifest.json"
      ],
      "required_evidence_present": [
        "compare-report.json.environment",
        "compare-report.json.meta",
        "artifacts/manifest.json"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [
        "compare-report.json.quality_flags"
      ],
      "supporting_evidence_present": [
        "compare-report.json.quality_flags"
      ],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "The 10-year documentation-keeping record for Article 11, Article 17, notified-body records where applicable, and Article 47 remains provider-owned."
      ],
      "notes": [
        "This clause is scored as a documentation-keeping scaffold, not a completed retention and authority-availability record."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_19",
      "title": "Automatically generated logs",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "awaiting_operator",
      "required_evidence": [
        "compare-report.json.items[].trace_integrity",
        "compare-report.json.items[].artifacts",
        "artifacts/manifest.json"
      ],
      "required_evidence_present": [
        "compare-report.json.items[].trace_integrity",
        "compare-report.json.items[].artifacts",
        "artifacts/manifest.json"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [],
      "supporting_evidence_present": [],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "Provider-controlled log retention, six-month minimum retention, and retrieval path still require provider-authored records."
      ],
      "notes": [
        "This clause is scored as a logging scaffold, not a full provider log-retention record."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_20",
      "title": "Corrective actions and duty of information",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "awaiting_operator",
      "required_evidence": [
        "compare-report.json.summary.execution_quality",
        "compare-report.json.summary.cases_block_recommended",
        "compare-report.json.items[].gate_recommendation"
      ],
      "required_evidence_present": [
        "compare-report.json.summary.execution_quality",
        "compare-report.json.summary.cases_block_recommended",
        "compare-report.json.items[].gate_recommendation"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [
        "report.html"
      ],
      "supporting_evidence_present": [
        "report.html"
      ],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "The provider-owned corrective-action, withdrawal or disabling, recall, and notification workflow remains required."
      ],
      "notes": [
        "This clause is scored as a corrective-action scaffold, not a finished Article 20 response record."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_21",
      "title": "Cooperation with competent authorities",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "awaiting_operator",
      "required_evidence": [
        "compare-report.json.environment",
        "artifacts/manifest.json"
      ],
      "required_evidence_present": [
        "compare-report.json.environment",
        "artifacts/manifest.json"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [
        "compare-report.json.quality_flags",
        "report.html"
      ],
      "supporting_evidence_present": [
        "compare-report.json.quality_flags",
        "report.html"
      ],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "The provider-owned authority cooperation path, documentation response process, and log-access process remain required."
      ],
      "notes": [
        "This clause is scored as an authority-cooperation scaffold, not a finished Article 21 cooperation record."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_22",
      "title": "Authorised representatives",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "awaiting_operator",
      "required_evidence": [
        "compare-report.json.environment",
        "compare-report.json.meta"
      ],
      "required_evidence_present": [
        "compare-report.json.environment",
        "compare-report.json.meta"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [
        "report.html"
      ],
      "supporting_evidence_present": [
        "report.html"
      ],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "For providers established outside the Union, the written mandate and named authorised representative record remain required."
      ],
      "notes": [
        "This clause is scored as an authorised-representative scaffold, not a completed Article 22 mandate record."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_26",
      "title": "Obligations of deployers of high-risk AI systems",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "awaiting_operator",
      "required_evidence": [
        "compare-report.json.summary.execution_quality",
        "compare-report.json.summary.cases_requiring_approval",
        "compare-report.json.items[].gate_recommendation"
      ],
      "required_evidence_present": [
        "compare-report.json.summary.execution_quality",
        "compare-report.json.summary.cases_requiring_approval",
        "compare-report.json.items[].gate_recommendation"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [
        "report.html"
      ],
      "supporting_evidence_present": [
        "report.html"
      ],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "The deployer-owned operating record, instructions-of-use alignment, oversight assignment, log handling, and authority or provider notifications remain required where Article 26 applies."
      ],
      "notes": [
        "This clause is scored as a deployer-obligations scaffold, not a completed Article 26 operating record."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_27",
      "title": "Fundamental rights impact assessment for deployers",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "awaiting_operator",
      "required_evidence": [
        "compare-report.json.summary.execution_quality",
        "compare-report.json.summary.cases_requiring_approval"
      ],
      "required_evidence_present": [
        "compare-report.json.summary.execution_quality",
        "compare-report.json.summary.cases_requiring_approval"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [
        "report.html"
      ],
      "supporting_evidence_present": [
        "report.html"
      ],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "The deployer-owned FRIA, updates, consultation path, and any linked impact-assessment records remain required where Article 27 applies."
      ],
      "notes": [
        "This clause is scored as a FRIA scaffold, not a completed Article 27 assessment record."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_43",
      "title": "Conformity assessment",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "outside_toolkit_scope",
      "required_evidence": [
        "compare-report.json.environment",
        "compare-report.json.summary.execution_quality",
        "compare-report.json.quality_flags"
      ],
      "required_evidence_present": [
        "compare-report.json.environment",
        "compare-report.json.summary.execution_quality",
        "compare-report.json.quality_flags"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [
        "report.html"
      ],
      "supporting_evidence_present": [
        "report.html"
      ],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "The provider-owned conformity assessment route and any notified-body records remain required."
      ],
      "notes": [
        "This clause is scored as a conformity-assessment scaffold, not a completed Article 43 record."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_47",
      "title": "EU declaration of conformity",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "outside_toolkit_scope",
      "required_evidence": [
        "compare-report.json.environment",
        "compare-report.json.meta"
      ],
      "required_evidence_present": [
        "compare-report.json.environment",
        "compare-report.json.meta"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [
        "report.html"
      ],
      "supporting_evidence_present": [
        "report.html"
      ],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "The provider-signed EU declaration of conformity remains required before placing on the market or putting into service."
      ],
      "notes": [
        "This clause is scored as a declaration scaffold, not a completed Article 47 declaration."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_48",
      "title": "CE marking",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "outside_toolkit_scope",
      "required_evidence": [
        "compare-report.json.environment",
        "compare-report.json.meta"
      ],
      "required_evidence_present": [
        "compare-report.json.environment",
        "compare-report.json.meta"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [
        "report.html"
      ],
      "supporting_evidence_present": [
        "report.html"
      ],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "The provider-owned CE marking record, including digital or physical placement and notified-body identification where applicable, remains required."
      ],
      "notes": [
        "This clause is scored as a CE-marking scaffold, not a completed Article 48 record."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Art_49",
      "title": "Registration",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "outside_toolkit_scope",
      "required_evidence": [
        "compare-report.json.environment",
        "compare-report.json.meta"
      ],
      "required_evidence_present": [
        "compare-report.json.environment",
        "compare-report.json.meta"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [
        "report.html"
      ],
      "supporting_evidence_present": [
        "report.html"
      ],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "The provider-owned EU database or national registration record remains required where Article 49 applies."
      ],
      "notes": [
        "This clause is scored as a registration scaffold, not a completed Article 49 record."
      ]
    },
    {
      "framework": "EU_AI_ACT",
      "clause": "Annex_V",
      "title": "Declaration content",
      "status": "covered",
      "status_cap": "partial",
      "completion_tier": "outside_toolkit_scope",
      "required_evidence": [
        "compare-report.json.environment",
        "compare-report.json.meta"
      ],
      "required_evidence_present": [
        "compare-report.json.environment",
        "compare-report.json.meta"
      ],
      "required_evidence_missing": [],
      "supporting_evidence": [
        "report.html"
      ],
      "supporting_evidence_present": [
        "report.html"
      ],
      "supporting_evidence_missing": [],
      "residual_gaps": [
        "Provider identification, system identification, legal references, and signatory details for the declaration remain provider-authored."
      ],
      "notes": [
        "This clause is scored as an Annex V content scaffold, not a completed declaration content record."
      ]
    }
  ],
  "compliance_exports": {
    "eu_ai_act": {
      "annex_iv_href": "compliance/eu-ai-act-annex-iv.json",
      "article_10_data_governance_href": "compliance/article-10-data-governance.json",
      "article_13_instructions_href": "compliance/article-13-instructions.json",
      "article_16_provider_obligations_href": "compliance/article-16-provider-obligations.json",
      "article_43_conformity_assessment_href": "compliance/article-43-conformity-assessment.json",
      "article_47_declaration_of_conformity_href": "compliance/article-47-declaration-of-conformity.json",
      "article_9_risk_register_href": "compliance/article-9-risk-register.json",
      "article_72_monitoring_plan_href": "compliance/article-72-monitoring-plan.json",
      "article_17_qms_lite_href": "compliance/article-17-qms-lite.json",
      "annex_v_declaration_content_href": "compliance/annex-v-declaration-content.json",
      "human_oversight_summary_href": "compliance/human-oversight-summary.json",
      "post_market_monitoring_href": "compliance/post-market-monitoring.json",
      "release_review_href": "compliance/release-review.json",
      "coverage_href": "compliance/eu-ai-act-coverage.json",
      "report_html_href": "compliance/eu-ai-act-report.html",
      "reviewer_html_href": "compliance/eu-ai-act-reviewer.html",
      "reviewer_markdown_href": "compliance/eu-ai-act-reviewer.md",
      "evidence_index_href": "compliance/evidence-index.json",
      "article_73_serious_incident_pack_href": "compliance/article-73-serious-incident-pack.json",
      "package_completion_href": "compliance/package-completion.json",
      "section_completion_href": "compliance/section-completion.json",
      "legal_record_register_href": "compliance/legal-record-register.json",
      "legal_artifact_manifest_href": "compliance/legal-artifact-manifest.json"
    }
  },
  "bundle_exports": {
    "retention_archive_controls_href": "archive/retention-controls.json"
  }
}