{
  "bundle_version": "0.1",
  "receipt": {
    "type": "ZkVmReceipt",
    "system": "risc0",
    "receiptFormat": "groth16-bn254",
    "imageId": "sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6",
    "seal": "A+8iAubZ5381Z6XSHGoi2xWCVQpV2wImrunE+luQVTELUZpHG/J5JlrMs6EC+m9K+mkcaG1UtQk7xLM0XFOQVgQTg6r6qvVialouuZ95JQ77wdqoqyKgpRvMqJlwpKyuHVvgooka1tTYCPNN9xD6dQJEzcmRAqrcqeQzbzEw8v8h9f6rxeHKqOQqZN18XSaYB+EF02yAxg3xTydFs1Hx6wOkLmOo5Ur7a4JVuK8E+Ue4N+42rPBWvcm9wCBUTIhNI3kCNvfYkOdOiCZzX3qsV8zGxolBUsHYS77sCvhNs4ok+og6ZXCgRyGC2D7H9Csjy84OsXCUmjVDzpmOwer9Hg==",
    "journal": {
      "chaingraph_version": "0.4.0",
      "kernel_digest": "sha256:3aff37d79ff68de2a055c1d32bdabb4376e3fe242656398b2c1d35ca48331cc0",
      "output": {
        "affected_rights": [
          "Non-discrimination and equality (Art 21 EU Charter)",
          "Data protection and privacy (Art 8 EU Charter, GDPR)",
          "Human dignity (Art 1 EU Charter)",
          "Access to essential services (housing, financial services)"
        ],
        "applicable_date_note": "Art 27 FRIA + Art 72 post-market monitoring: Digital Omnibus proposes 2 Dec 2027 (provisional agreement 7 May 2026, pending formal adoption). Verify status against Official Journal. Original date: 2 Aug 2026.",
        "deployment": {
          "affected_persons": "consumers",
          "automation_level": "human-review",
          "use_case": "credit-scoring"
        },
        "fria_gaps": [
          {
            "element": "purpose",
            "label": "Description of intended use, deployment context, and decision impact (Art 27)",
            "remediation": "Complete: Description of intended use, deployment context, and decision impact (Art 27). Verify requirement against EU AI Act Art 27 consolidated text.",
            "status": "not-started"
          },
          {
            "element": "persons",
            "label": "Categories of affected persons (consumers, workers, applicants) and population size (Art 27)",
            "remediation": "Complete: Categories of affected persons (consumers, workers, applicants) and population size (Art 27). Verify requirement against EU AI Act Art 27 consolidated text.",
            "status": "not-started"
          },
          {
            "element": "rights",
            "label": "Fundamental rights and non-discrimination risks identification (Art 27)",
            "remediation": "Complete: Fundamental rights and non-discrimination risks identification (Art 27). Verify requirement against EU AI Act Art 27 consolidated text.",
            "status": "not-started"
          },
          {
            "element": "oversight",
            "label": "Human-oversight measures and escalation procedures (Arts 14+27)",
            "remediation": "Complete: Human-oversight measures and escalation procedures (Arts 14+27). Verify requirement against EU AI Act Art 27 consolidated text.",
            "status": "not-started"
          },
          {
            "element": "mitigation",
            "label": "Risk mitigation measures and residual-risk acceptance (Art 27)",
            "remediation": "Complete: Risk mitigation measures and residual-risk acceptance (Art 27). Verify requirement against EU AI Act Art 27 consolidated text.",
            "status": "not-started"
          },
          {
            "element": "governance",
            "label": "Internal governance: responsible function, review cadence, sign-off (Art 27)",
            "remediation": "Complete: Internal governance: responsible function, review cadence, sign-off (Art 27). Verify requirement against EU AI Act Art 27 consolidated text.",
            "status": "not-started"
          }
        ],
        "fria_grade": "F",
        "fria_score": 0,
        "incident_path": {
          "mapped": false,
          "note": "DECISION-SUPPORT ONLY — verify Art 73 notification requirements, deadlines, and the designated market-surveillance authority (MSA) for your jurisdiction against consolidated AI Act Art 73 text. Deadlines vary by incident severity.",
          "recommendation": "Map the Art 73 serious-incident reporting path now: identify your national market-surveillance authority, determine notification deadline (verify against Art 73 text), assign internal incident-triage function."
        },
        "logging_verdict": "FAIL — no logging. Art 12 requires automatic logging of events enabling post-hoc review.",
        "monitoring_plan_skeleton": {
          "applicable_date_note": "Art 72 post-market monitoring obligations: verify target date (Digital Omnibus: 2 Dec 2027; else 2 Aug 2026) against current Official Journal status.",
          "metrics": [
            {
              "action": "Model review and re-validation",
              "frequency": "Monthly",
              "metric": "Model accuracy on live data vs validation baseline",
              "threshold": "Alert if >5% drift"
            },
            {
              "action": "Fairness audit + Art 10 data review",
              "frequency": "Quarterly",
              "metric": "Adverse decision rate by demographic group",
              "threshold": "Alert on statistically significant disparity"
            },
            {
              "action": "Art 73 notification within deadline — verify current deadline against consolidated text",
              "frequency": "Continuous",
              "metric": "Serious-incident count (Art 73)",
              "threshold": "Any serious incident"
            },
            {
              "action": "Oversight design review",
              "frequency": "Monthly",
              "metric": "Human-oversight intervention rate",
              "threshold": "Alert if intervention rate > 20% (review automation level)"
            },
            {
              "action": "Logging system repair + gap audit",
              "frequency": "Weekly",
              "metric": "Logging completeness",
              "threshold": "100% — zero gaps"
            }
          ],
          "note": "DECISION-SUPPORT SKELETON — not a legally-compliant Art 72 post-market monitoring plan. Review and complete with qualified compliance staff.",
          "responsible_function": "[Assign: Model Risk / AI Governance / Chief Risk Officer]",
          "review_cadence": "Annual full review + ad-hoc review on material change (new use case, model retrain, regulatory update)"
        },
        "note": "PREPARE-AHEAD — Decision-support draft. FRIA/monitoring outputs are NOT legal assessments or compliance certificates. Complete with qualified legal and compliance staff. Verify all Art references against EU AI Act (Reg. 2024/1689) consolidated text at https://eur-lex.europa.eu/eli/reg/2024/1689/oj.",
        "overall_score": 12.5,
        "oversight_verdict": "WARNING — oversight is nominal; upgrade to meaningful review with documented escalation path (Art 14)"
      }
    }
  },
  "journal_contract": {
    "spec": "SPEC.md §18.7",
    "serialization": "rfc8785-jcs+utf8",
    "journal_digest": "sha256:6a9b2ee8928c15836d1b40c9e14c559675c9ac7d34b927cc51602a98f5744fd4",
    "claim_digest": null
  },
  "provenance": {
    "repo": "PostOakLabs/ainumbers",
    "receipt_source": "chaingraph/graph/nodes/art-66-fria-postmarket-monitoring-builder.json",
    "receipt_source_sha256": "sha256:1cbe741fe94266b88e4388b717bd3cd70792e50586df04db89e68cfa13950124",
    "anchor_source": "registry/lineage/checkpoint.sigsum-record.json",
    "checkpoint_source": "registry/lineage/checkpoint"
  },
  "anchor": {
    "type": "c2sp-tlog-proof-v1",
    "record": {
      "anchor_type": "c2sp-tlog-proof-v1",
      "log_origin": "sigsum.org/v1/tree/44ad38f8226ff9bd27629a41e55df727308d0a1cd8a2c31d3170048ac1dd22a1",
      "log_url": "https://seasalp.glasklar.is",
      "log_public_key": "0ec7e16843119b120377a73913ac6acbc2d03d82432e2c36b841b09a95841f25",
      "anchored_hash": "sha256:3b9dddcfacf47214cc0bbb19edbc39a5cd3d1c97fa00aa0fd68a517cf67aee2a",
      "leaf": {
        "checksum": "76ea62f7c28942563a1008b44ff888a990b6b2f1d740023982bbd04662adbedb",
        "signature": "2e994211513e790035c9040f4e23b518e64a188f8fd211d203d3a380511fa355e559348b84fc00953c3aa9d91d95bb3696a292054041389943b0fcf4b6c9c502",
        "public_key": "64ffed0396abb761968b34ce849b7b09bc47b8a492ba2efd006b6b8f5622ceca"
      },
      "tree_head": {
        "size": 75024,
        "root_hash": "3cd5407964fe6c6df9f1e7051f5a8e941030b93b68a97656de81f9baa43d640d",
        "log_signature": "ff6baa55f14a9b9a695483113f00fc5c9f3bbb9ca74c01c83dfd8715ad154b2f2d302e71b1b4f52f87ba58f9c15a80a30c6302f0910dc2f0d3e7d857ab0a5003"
      },
      "inclusion_proof": {
        "leaf_index": 75022,
        "path": [
          "15d2f7a6315ce3382346be0bae0b920bfa68349ad438b517277c6e973f5343ef",
          "33dc416363cc76a4e1d907d7c46cafa5ccde896c4b3aac8783b7dc56df5795d8",
          "d2ee6278e332275416624857eed451d640f159258f4c9b315be88fe939ca8a77",
          "83e35bee174ca40f3413c410657f7b3a7c444435043c0af96c8865e03095913c",
          "a59bef38745cdb26f6b87a19b8cd0f609c2e906f02f1d3991d9fa60f0480b580",
          "3ce012af67840673cbd9835e3e57c1d8c6f47f6d737188365acb80151a30e0cc",
          "668dba989ea933a1ecea7315cad1eb9b4e65c7bfdf993edb5f9e992e4c7a354d",
          "6e3104eb98a720cc868416197a730db01f0032cbbb3f74602bf997125a81f28b"
        ]
      },
      "witness_cosignatures": [
        {
          "key_hash": "0dad9d849c57687454f100d87fa729b54cb69f7af97346613348defcba9c361c",
          "timestamp": 1792825229,
          "signature": "b71a5a1b8d95c3a70512cab1930c2468533f3cf40d09d4126fb3c8eadd17fc738a0944b56886befa48d4f917306867b5d669b77f3091c90d936783f470338c07"
        },
        {
          "key_hash": "cd02db1cc0488c28245d7c3ff50b3e214334c067f2571e849425146bb6bd173d",
          "timestamp": 1792825229,
          "signature": "95d726f8522e14a3ec2bd04687b0ea98db64dad72319e1a40653b9d0066423ffd17f37a44c6e7d1da09c13b4cb3c364080a4850aba12a602456706989bfff303"
        },
        {
          "key_hash": "9a0dcddbd96f6d6d404227b5ff23de7a43f25cdde9790af5ace332d347fac49a",
          "timestamp": 1792825230,
          "signature": "86b01971d57851ba8e5fd51e9c3f4845d50dfe9baead1f72a0e759e6a309386cd234321575bac7986b35fd13f98b6ee8e7645a92afef9cfb9f09cf88c0a81c0e"
        },
        {
          "key_hash": "6d6a78191e59815eff9131941fc3e08dd716a281c8b886dd67880d552e587a23",
          "timestamp": 1792825229,
          "signature": "81671d11a22ae26bd348344f7e15db82ca6267f7de4126a8e947a5da628989eb167a8b282d202c62377bf26753a1de62c322b6460b899f854465da5fc1c27601"
        },
        {
          "key_hash": "6bdf03b285fce48e00ff9b199cb2b77472dcc4a112f067fa5b274929cb9504e3",
          "timestamp": 1792825229,
          "signature": "49450a408ffdb2e047076e8ed01beb2f8077a53e3cab765ecec0614151f50c643038be46f4a7266ed6edb30974d4154b9a4c2c6c3b46d71e10f878dbe2c36102"
        },
        {
          "key_hash": "ff2f237a707a2d3a6adfb1600d3375cafe4527ba4fcec793e6093b9b1a4bd79a",
          "timestamp": 1792825229,
          "signature": "dfa05cb7f4c1389903f8377e8f4daf7fbf3a7c99ad65bc9c81029c12cb07004d25473ed022e0cefe5cdf05e497aeded87e57fabcc7d87dbfc1923bee2ab1260e"
        },
        {
          "key_hash": "81538d254f0a67aa07172826ef46fe0cd04b7425bd634a50bb0a8419d55fa65f",
          "timestamp": 1792825229,
          "signature": "6caece92c05dd00057b0c908c969b0eccbcf87c1b418c3fe4cb7b3dad781c125dc86b1895fc7019614a1eca3cfb6fb19f8442e64069d38870f1f620a6d41a60d"
        },
        {
          "key_hash": "774fafee07d3b0d9399d669676440a6301db9fa8fe2140d7d352418da25144c5",
          "timestamp": 1792825230,
          "signature": "7f0c93c5f31347edcd47f5850bf665de43539efb3b295e32563f004f0feec33ae3d9d84e031f1859e42b10218a17a0f0df019253f448ccd76d7499afa2e0ab04"
        },
        {
          "key_hash": "f6f91669f7955f542718af9edb6a1276d88a0f8822cba9046e549d0b3796f394",
          "timestamp": 1792825229,
          "signature": "a3d77cfcafbc1a1d096b422276fa50994e269a7b61797064a4b2e758808bf8c4e27b4f1caae28291bd486c71ae2c2a6b57d0443cc7a7eac11114ce517c3c800c"
        },
        {
          "key_hash": "5da2b3803c2f802eed9744b74e3e4a3d31e1e77ed994ef56730d57fa52f698a5",
          "timestamp": 1792825229,
          "signature": "302d4d04700aff6efa819b203915b04f7ffdac8b1579b969d54d332f3a74063d390383fa77766d4e3fbe995cc2de69be6127d3a0662559db80b9f6e187c59105"
        },
        {
          "key_hash": "3573fb7fdab7434cd0dad9fd6460abf420388055db8aaaec177c248f03a990cc",
          "timestamp": 1792825230,
          "signature": "a6bdce3abf06934fb65d3ccfa49dab537569f36f9ffddb219642104272de95cdadb2f501cfd0e71995328c5b6df899d89f88650c67a3a61f2cca166ac1556c06"
        },
        {
          "key_hash": "d59098d686f47ec1d4d1984c8ac0ab97a3d8a65c7ba8cb6422ada0fae927e194",
          "timestamp": 1792825230,
          "signature": "8dab0aaec1272e078195a13b620c2a6f46128218ac70440383b59f9038d4d42f4bc8b643c001592ae005b157f221ba0387733d1505dd5b3298ad579398129c04"
        }
      ]
    },
    "checkpoint_text": "ainumbers.co/registry/lineage\n77\n5z6Ug6W2BZ2nOm3btMKO8R4pkYHtYENH0v+MJOm9qac=\n\n— ainumbers.co/registry/lineage JrLnur2JVUx48WLcyZxWqbSgiY63HRRAlGCvfM7AgCcnBY06MX8kbyWE290q052tS6nQyxTr3fclM7c2Qi/pfqcrGAM=\n",
    "subject": {
      "kind": "registry-checkpoint",
      "origin": "ainumbers.co/registry/lineage",
      "log_policy": "chaingraph/policies/ainumbers-registry-lineage.tlog-policy"
    }
  },
  "trust_policy": {
    "name": "sigsum-generic-2025-1",
    "source": "chaingraph/policies/sigsum-generic-2025-1.tlog-policy",
    "sha256": "sha256:666d9d0b9ab2e4019769c42eaccd7d6d502a9abac45979bb9b08b7213e4f53e3",
    "shape": "2 logs, 3 witnesses, quorum 2-of-3"
  }
}