{
  "type": "ZkVmReceipt",
  "system": "risc0",
  "receiptFormat": "groth16-bn254",
  "imageId": "sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6",
  "seal": "A+8iAubZ5381Z6XSHGoi2xWCVQpV2wImrunE+luQVTELUZpHG/J5JlrMs6EC+m9K+mkcaG1UtQk7xLM0XFOQVgQTg6r6qvVialouuZ95JQ77wdqoqyKgpRvMqJlwpKyuHVvgooka1tTYCPNN9xD6dQJEzcmRAqrcqeQzbzEw8v8h9f6rxeHKqOQqZN18XSaYB+EF02yAxg3xTydFs1Hx6wOkLmOo5Ur7a4JVuK8E+Ue4N+42rPBWvcm9wCBUTIhNI3kCNvfYkOdOiCZzX3qsV8zGxolBUsHYS77sCvhNs4ok+og6ZXCgRyGC2D7H9Csjy84OsXCUmjVDzpmOwer9Hg==",
  "journal": {
    "chaingraph_version": "0.4.0",
    "kernel_digest": "sha256:3aff37d79ff68de2a055c1d32bdabb4376e3fe242656398b2c1d35ca48331cc0",
    "output": {
      "affected_rights": [
        "Non-discrimination and equality (Art 21 EU Charter)",
        "Data protection and privacy (Art 8 EU Charter, GDPR)",
        "Human dignity (Art 1 EU Charter)",
        "Access to essential services (housing, financial services)"
      ],
      "applicable_date_note": "Art 27 FRIA + Art 72 post-market monitoring: Digital Omnibus proposes 2 Dec 2027 (provisional agreement 7 May 2026, pending formal adoption). Verify status against Official Journal. Original date: 2 Aug 2026.",
      "deployment": {
        "affected_persons": "consumers",
        "automation_level": "human-review",
        "use_case": "credit-scoring"
      },
      "fria_gaps": [
        {
          "element": "purpose",
          "label": "Description of intended use, deployment context, and decision impact (Art 27)",
          "remediation": "Complete: Description of intended use, deployment context, and decision impact (Art 27). Verify requirement against EU AI Act Art 27 consolidated text.",
          "status": "not-started"
        },
        {
          "element": "persons",
          "label": "Categories of affected persons (consumers, workers, applicants) and population size (Art 27)",
          "remediation": "Complete: Categories of affected persons (consumers, workers, applicants) and population size (Art 27). Verify requirement against EU AI Act Art 27 consolidated text.",
          "status": "not-started"
        },
        {
          "element": "rights",
          "label": "Fundamental rights and non-discrimination risks identification (Art 27)",
          "remediation": "Complete: Fundamental rights and non-discrimination risks identification (Art 27). Verify requirement against EU AI Act Art 27 consolidated text.",
          "status": "not-started"
        },
        {
          "element": "oversight",
          "label": "Human-oversight measures and escalation procedures (Arts 14+27)",
          "remediation": "Complete: Human-oversight measures and escalation procedures (Arts 14+27). Verify requirement against EU AI Act Art 27 consolidated text.",
          "status": "not-started"
        },
        {
          "element": "mitigation",
          "label": "Risk mitigation measures and residual-risk acceptance (Art 27)",
          "remediation": "Complete: Risk mitigation measures and residual-risk acceptance (Art 27). Verify requirement against EU AI Act Art 27 consolidated text.",
          "status": "not-started"
        },
        {
          "element": "governance",
          "label": "Internal governance: responsible function, review cadence, sign-off (Art 27)",
          "remediation": "Complete: Internal governance: responsible function, review cadence, sign-off (Art 27). Verify requirement against EU AI Act Art 27 consolidated text.",
          "status": "not-started"
        }
      ],
      "fria_grade": "F",
      "fria_score": 0,
      "incident_path": {
        "mapped": false,
        "note": "DECISION-SUPPORT ONLY — verify Art 73 notification requirements, deadlines, and the designated market-surveillance authority (MSA) for your jurisdiction against consolidated AI Act Art 73 text. Deadlines vary by incident severity.",
        "recommendation": "Map the Art 73 serious-incident reporting path now: identify your national market-surveillance authority, determine notification deadline (verify against Art 73 text), assign internal incident-triage function."
      },
      "logging_verdict": "FAIL — no logging. Art 12 requires automatic logging of events enabling post-hoc review.",
      "monitoring_plan_skeleton": {
        "applicable_date_note": "Art 72 post-market monitoring obligations: verify target date (Digital Omnibus: 2 Dec 2027; else 2 Aug 2026) against current Official Journal status.",
        "metrics": [
          {
            "action": "Model review and re-validation",
            "frequency": "Monthly",
            "metric": "Model accuracy on live data vs validation baseline",
            "threshold": "Alert if >5% drift"
          },
          {
            "action": "Fairness audit + Art 10 data review",
            "frequency": "Quarterly",
            "metric": "Adverse decision rate by demographic group",
            "threshold": "Alert on statistically significant disparity"
          },
          {
            "action": "Art 73 notification within deadline — verify current deadline against consolidated text",
            "frequency": "Continuous",
            "metric": "Serious-incident count (Art 73)",
            "threshold": "Any serious incident"
          },
          {
            "action": "Oversight design review",
            "frequency": "Monthly",
            "metric": "Human-oversight intervention rate",
            "threshold": "Alert if intervention rate > 20% (review automation level)"
          },
          {
            "action": "Logging system repair + gap audit",
            "frequency": "Weekly",
            "metric": "Logging completeness",
            "threshold": "100% — zero gaps"
          }
        ],
        "note": "DECISION-SUPPORT SKELETON — not a legally-compliant Art 72 post-market monitoring plan. Review and complete with qualified compliance staff.",
        "responsible_function": "[Assign: Model Risk / AI Governance / Chief Risk Officer]",
        "review_cadence": "Annual full review + ad-hoc review on material change (new use case, model retrain, regulatory update)"
      },
      "note": "PREPARE-AHEAD — Decision-support draft. FRIA/monitoring outputs are NOT legal assessments or compliance certificates. Complete with qualified legal and compliance staff. Verify all Art references against EU AI Act (Reg. 2024/1689) consolidated text at https://eur-lex.europa.eu/eli/reg/2024/1689/oj.",
      "overall_score": 12.5,
      "oversight_verdict": "WARNING — oversight is nominal; upgrade to meaningful review with documented escalation path (Art 14)"
    }
  }
}