Compliance Mapping

EU AI Act self-assessment across 6 articles. Per-article pass/fail with recommended next steps. Not legal advice.

EU AI Act self-assessment across 6 articles. Returns per-article pass/fail with recommended next steps. Import from governance-sdk/compliance. Self-assessment only — not a certified audit, not legal advice.

Signature

mapToEuAiAct(config: ComplianceAssessmentConfig) => Promise<ComplianceReport>
// (aliased as `assessCompliance` for backward compatibility)

Usage

import { mapToEuAiAct } from 'governance-sdk/compliance';

const report = await mapToEuAiAct({
  governance: gov,
  agents: ['underwriting-agent'],
  auditIntegrity: true,
  humanOversight: true,
  logRetention: true,
  configVersionControlled: true,
  policiesTested: true,
});

// report:
// {
//   compliant: false,
//   passCount: 4,
//   failCount: 2,
//   articles: [
//     { article: 9,  name: 'Risk Management',    pass: true,  remediation: null },
//     { article: 11, name: 'Technical Docs',      pass: false, remediation: 'Enable output filtering...' },
//     { article: 12, name: 'Record-keeping',      pass: true,  remediation: null },
//     { article: 14, name: 'Human Oversight',     pass: true,  remediation: null },
//     { article: 15, name: 'Accuracy',            pass: false, remediation: 'Add metrics collection...' },
//     { article: 50, name: 'Transparency',        pass: true,  remediation: null },
//   ],
// }

6 EU AI Act Articles

Article	Name	Requirements
Art. 9	Risk Management	Guardrails, injection detection, tool scoping, output filtering
Art. 11	Technical Docs	Observability: logging, tracing, documented tool permissions
Art. 12	Record-keeping	Tamper-evident audit logging with HMAC integrity chain
Art. 14	Human Oversight	Approval workflows and escalation paths for high-risk decisions
Art. 15	Accuracy	Runtime metrics, output validation, continuous monitoring
Art. 50	Transparency	Agent identification, capability disclosure, decision logging

Note: The EU AI Act high-risk enforcement deadline is August 2026. mapToEuAiAct() cross-references your agent configuration against these articles so you can close gaps before the deadline. The output is a self-assessment posture — it does not constitute legal compliance certification.

Return Type

interface ComplianceReport {
  compliant: boolean;      // true only if ALL articles pass
  passCount: number;       // Number of passing articles
  failCount: number;       // Number of failing articles
  articles: ArticleResult[];
}

interface ArticleResult {
  article: number;         // EU AI Act article number
  name: string;            // Human-readable article name
  pass: boolean;           // Whether the agent satisfies this article
  remediation: string | null;  // Actionable fix (null if passing)
}