{
  "tool_id": "art-66-fria-postmarket-monitoring-builder",
  "note": "golden_hash empty until first `node golden-parity.test.mjs --update`.",
  "vectors": [
    {
      "name": "default-inputs",
      "policy_parameters": {},
      "output_payload": {
        "deployment": {
          "use_case": "credit-scoring",
          "affected_persons": "consumers",
          "automation_level": "human-review"
        },
        "overall_score": 12.5,
        "fria_grade": "F",
        "fria_score": 0,
        "fria_gaps": [
          {
            "element": "purpose",
            "label": "Description of intended use, deployment context, and decision impact (Art 27)",
            "status": "not-started",
            "remediation": "Complete: Description of intended use, deployment context, and decision impact (Art 27). Verify requirement against EU AI Act Art 27 consolidated text."
          },
          {
            "element": "persons",
            "label": "Categories of affected persons (consumers, workers, applicants) and population size (Art 27)",
            "status": "not-started",
            "remediation": "Complete: Categories of affected persons (consumers, workers, applicants) and population size (Art 27). Verify requirement against EU AI Act Art 27 consolidated text."
          },
          {
            "element": "rights",
            "label": "Fundamental rights and non-discrimination risks identification (Art 27)",
            "status": "not-started",
            "remediation": "Complete: Fundamental rights and non-discrimination risks identification (Art 27). Verify requirement against EU AI Act Art 27 consolidated text."
          },
          {
            "element": "oversight",
            "label": "Human-oversight measures and escalation procedures (Arts 14+27)",
            "status": "not-started",
            "remediation": "Complete: Human-oversight measures and escalation procedures (Arts 14+27). Verify requirement against EU AI Act Art 27 consolidated text."
          },
          {
            "element": "mitigation",
            "label": "Risk mitigation measures and residual-risk acceptance (Art 27)",
            "status": "not-started",
            "remediation": "Complete: Risk mitigation measures and residual-risk acceptance (Art 27). Verify requirement against EU AI Act Art 27 consolidated text."
          },
          {
            "element": "governance",
            "label": "Internal governance: responsible function, review cadence, sign-off (Art 27)",
            "status": "not-started",
            "remediation": "Complete: Internal governance: responsible function, review cadence, sign-off (Art 27). Verify requirement against EU AI Act Art 27 consolidated text."
          }
        ],
        "oversight_verdict": "WARNING — oversight is nominal; upgrade to meaningful review with documented escalation path (Art 14)",
        "logging_verdict": "FAIL — no logging. Art 12 requires automatic logging of events enabling post-hoc review.",
        "monitoring_plan_skeleton": {
          "note": "DECISION-SUPPORT SKELETON — not a legally-compliant Art 72 post-market monitoring plan. Review and complete with qualified compliance staff.",
          "metrics": [
            {
              "metric": "Model accuracy on live data vs validation baseline",
              "frequency": "Monthly",
              "threshold": "Alert if >5% drift",
              "action": "Model review and re-validation"
            },
            {
              "metric": "Adverse decision rate by demographic group",
              "frequency": "Quarterly",
              "threshold": "Alert on statistically significant disparity",
              "action": "Fairness audit + Art 10 data review"
            },
            {
              "metric": "Serious-incident count (Art 73)",
              "frequency": "Continuous",
              "threshold": "Any serious incident",
              "action": "Art 73 notification within deadline — verify current deadline against consolidated text"
            },
            {
              "metric": "Human-oversight intervention rate",
              "frequency": "Monthly",
              "threshold": "Alert if intervention rate > 20% (review automation level)",
              "action": "Oversight design review"
            },
            {
              "metric": "Logging completeness",
              "frequency": "Weekly",
              "threshold": "100% — zero gaps",
              "action": "Logging system repair + gap audit"
            }
          ],
          "review_cadence": "Annual full review + ad-hoc review on material change (new use case, model retrain, regulatory update)",
          "responsible_function": "[Assign: Model Risk / AI Governance / Chief Risk Officer]",
          "applicable_date_note": "Art 72 post-market monitoring obligations: verify target date (Digital Omnibus: 2 Dec 2027; else 2 Aug 2026) against current Official Journal status."
        },
        "incident_path": {
          "note": "DECISION-SUPPORT ONLY — verify Art 73 notification requirements, deadlines, and the designated market-surveillance authority (MSA) for your jurisdiction against consolidated AI Act Art 73 text. Deadlines vary by incident severity.",
          "mapped": false,
          "recommendation": "Map the Art 73 serious-incident reporting path now: identify your national market-surveillance authority, determine notification deadline (verify against Art 73 text), assign internal incident-triage function."
        },
        "affected_rights": [
          "Non-discrimination and equality (Art 21 EU Charter)",
          "Data protection and privacy (Art 8 EU Charter, GDPR)",
          "Human dignity (Art 1 EU Charter)",
          "Access to essential services (housing, financial services)"
        ],
        "applicable_date_note": "Art 27 FRIA + Art 72 post-market monitoring: Digital Omnibus proposes 2 Dec 2027 (provisional agreement 7 May 2026, pending formal adoption). Verify status against Official Journal. Original date: 2 Aug 2026.",
        "note": "PREPARE-AHEAD — Decision-support draft. FRIA/monitoring outputs are NOT legal assessments or compliance certificates. Complete with qualified legal and compliance staff. Verify all Art references against EU AI Act (Reg. 2024/1689) consolidated text at https://eur-lex.europa.eu/eli/reg/2024/1689/oj."
      },
      "golden_hash": "c46ed1b4b26ce2101c5815df13608c584d2c1a67c730502bb3a8fce1065031de"
    }
  ]
}