feat(b7-5-ai-act): EU AI-Act + DORA regulatory artefacts for ai-native-rag (B.7.5 + B.7.8)#30
Merged
Conversation
….7.8) Planning-only brick (#6 of the 9-brick B.7 chain): drives b7-5-ai-act through the Forge pipeline Proposal -> Specs -> Design -> Tasks and STOPS before implementation. No production code, no test bodies, no PR. Unblocks Themis (K.5) by shipping the frozen v1.0.0 .forge/compliance/{ai-act,dora}/ artefacts Themis Phase B will later maintain on a rolling cadence. Scope planned (artefacts described precisely, NOT created): - .forge/compliance/ai-act/: risk-classification.md, transparency-obligations.md, model-card.template.md, dataset-card.template.md, obligations-index.yaml - .forge/compliance/dora/: incident-reporting.md, roi-register.template.yaml, obligations-index.yaml - new standard global/ai-act-dora-artefacts.md v1.0.0 (Phase A BDFL / Phase B Themis governance, mirroring compliance-tiers.md) - additive bundle.sh wiring: regulatory/{ai-act,dora}/* members; bumps the I.6 bundle contract global/compliance-artefacts-bundle.md 1.0.0 -> 1.1.0 (realises FR-I6-CA-053; I.6 standard + i6.test.sh updated in lock-step) - harness .forge/scripts/tests/b7-5.test.sh (>=14 L1 + 3 L2), forge-ci.yml row after i5.test.sh (compliance family); NO new forge-compliance.yml step (artefacts ride the existing bundle step) FR/NFR/ADR: 27 FR (FR-B75-AA-* AI-Act / FR-B75-DO-* DORA / FR-B75-BD-* bundle+ standard+harness+docs) + 8 NFR + 5 design ADRs (ADR-B75-001..005). Legal questions Q-001..Q-005 resolved grounded-or-DEFERRED-TO-THEMIS (Article III.4 -- no fabricated Article numbers / deadlines; every ungrounded legal specific is a [NEEDS CLARIFICATION] tagged Themis K.5; Context7 not used for law). Design questions Q-010..Q-014 -> ADR-B75-001..005. .forge.yaml at status: planned (validate-change-yaml.sh PASS). constitution-linter.sh OVERALL PASS (Specs-Before-Code + III.4 GREEN). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPnqp5voa9PfC5JJ6HCKQz
….5+B.7.8)
Ship the EU AI Act + DORA regulatory artefacts the `ai-native-rag`
archetype carries, fill the I.6-reserved `.forge/compliance/` layout, and
wire them into the I.6 hand-off bundle additively.
Artefacts (.forge/compliance/{ai-act,dora}/):
- ai-act/: risk-classification.md (grounded transparency posture + deployer
escalation triggers), transparency-obligations.md (duties -> Forge evidence
surfaces), model-card.template.md + dataset-card.template.md (adopter-fillable),
obligations-index.yaml.
- dora/: incident-reporting.md (grounded "< 24h" charter figure + the §10.4 RoI
deadline), roi-register.template.yaml, obligations-index.yaml.
- nis2/ + cra/ deliberately NOT created (reserved — ADR-B75-001).
Standard + wiring:
- New standard global/ai-act-dora-artefacts.md v1.0.0 (6 H2, >=3 MUST NOT,
two-phase BDFL -> Themis governance) + index.yml entry + REVIEW.md.
- bundle.sh extended to collect regulatory/{ai-act,dora}/* (graceful absence;
SOURCE_DATE_EPOCH determinism preserved).
- I.6 bundle contract compliance-artefacts-bundle.md bumped 1.0.0 -> 1.1.0 in
lock-step; i6.test.sh frontmatter assertion updated to match (b7-5 owns the
I.6 surface — ratified). i6.test.sh stays GREEN.
- docs/COMPLIANCE.md new H2 + CHANGELOG [Unreleased].
Anti-hallucination (Article III.4 — LOAD-BEARING): every regulatory specific is
grounded-or-deferred. The precise AI Act risk-category mapping, finance
high-risk determination, bias-eval legal trigger, DORA notification windows, and
authoritative RoI schema are [NEEDS CLARIFICATION] markers tagged Themis (K.5)
Phase-B — NOT invented. Negative-grep guard b7-5.test.sh::_test_b75_030 is the
deterministic backstop; independent review lane VERDICT: CLEAN.
TDD: harness b7-5.test.sh (16 L1 + 3 L2) RED -> GREEN, registered in forge-ci.yml
after i5 (ADR-B75-004). Gates: b7-5 19/19, verify.sh 449/0 PASS,
constitution-linter OVERALL PASS, i6 16/16, validate-standards-yaml 0,
i2/i3/i5/j7/b7-1/b7-2a/b7-2 all GREEN. Status -> implemented.
Plan/roadmap resync (T-INV-001/002) intentionally deferred to the maintainer
docs-resync (collision avoidance). VERSION bump deferred to release (NFR-B75-005).
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PPnqp5voa9PfC5JJ6HCKQz
…/ai-native-rag.md Appends the AI-Act + DORA ADDED requirements (FR-B75-* / NFR-B75-* / ADR-B75-*) to the B.7 consolidated spec (prior blocks preserved); flips .forge.yaml status -> archived (timeline.archived 2026-06-22, archived_to set). All archive gates GREEN; anti-hallucination CLEAN. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPnqp5voa9PfC5JJ6HCKQz
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
B.7.5 + B.7.8 — EU AI-Act + DORA regulatory artefacts (b7-5-ai-act)
Ships the frozen v1.0.0 AI-Act + DORA compliance artefacts for the
ai-native-ragarchetype under.forge/compliance/{ai-act,dora}/, plus the I.6 bundle wiring to emit them. Brick #6 of the B.7 chain; unblocks K.5 Themis (Phase-B maintainer of these artefacts).What's in it
ai-act/{risk-classification.md, transparency-obligations.md, model-card.template.md, dataset-card.template.md, obligations-index.yaml}+dora/{incident-reporting.md, roi-register.template.yaml, obligations-index.yaml}. (nis2/,cra/deliberately reserved, not created.)global/ai-act-dora-artefacts.mdv1.0.0 (two-phase BDFL→Themis governance) + index/REVIEW entries.bundle.shcollectsregulatory/{ai-act,dora}/*;compliance-artefacts-bundle.mdbumped 1.0.0→1.1.0;i6.test.shmember-count assertion updated in lock-step. Determinism (SOURCE_DATE_EPOCH) + graceful-absence preserved.b7-5.test.sh(≥14 L1 + 3 L2, in CI),docs/COMPLIANCE.md,CHANGELOG.md.Anti-hallucination (load-bearing — NFR-B75-004)
Zero fabricated legal article / recital / deadline numbers. Ungrounded obligations are marked
status: needs-clarification+themis_owner: K.5(machine-readable) and the legal questions are tracked inopen-questions.md, deferred to Themis. Enforced by the harness negative-grep_test_b75_030; independently re-verified by a manual grep (0 hits) + a dedicated anti-hallucination sub-review (CLEAN).Verification (all GREEN)
b7-5.test.sh19/19 (incl. anti-halluc guard + bundle-determinism + graceful-absence L2) ·verify.shPASS ·constitution-linterPASS ·validate-standards-yaml8/0 · I.6 lock-stepi6 16/0·i5 17/0· regressioni2 14/0 · i3 18/0 · j7 21/0 · b7-2a 4/0. TDD RED→GREEN per the change'stasks.md.Spec consolidated into
.forge/specs/ai-native-rag.md(appended B.7.5/B.7.8 block; prior B.7 blocks preserved); change archived (status: archived, 2026-06-22).🤖 Generated with Claude Code
https://claude.ai/code/session_01PPnqp5voa9PfC5JJ6HCKQz