{"$schema":"https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json","version":"2.1.0","runs":[{"tool":{"driver":{"name":"AiAuditor","informationUri":"https://github.com/drhus/ai-auditor","version":"v0.1.0","rules":[{"id":"eu-ai-act-2024-08/1e-facial-scraping","name":"eu-ai-act-2024-08/1e-facial-scraping","shortDescription":{"text":"Untargeted facial image scraping for face databases"},"fullDescription":{"text":"EU AI Act, Art 5(1)(e) — Untargeted facial image scraping for face databases"},"helpUri":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","defaultConfiguration":{"level":"note"},"properties":{"tags":["ai-compliance","eu-ai-act-2024-08","article-5(1)(e)","privacy"],"regulation":"EU AI Act","article":"5(1)(e)","principle":"privacy"}},{"id":"eu-ai-act-2024-08/risk-management","name":"eu-ai-act-2024-08/risk-management","shortDescription":{"text":"Risk management system established, implemented, documented"},"fullDescription":{"text":"EU AI Act, Art 9 — Risk management system established, implemented, documented"},"helpUri":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","defaultConfiguration":{"level":"warning"},"properties":{"tags":["ai-compliance","eu-ai-act-2024-08","article-9","safety"],"regulation":"EU AI Act","article":"9","principle":"safety"}},{"id":"eu-ai-act-2024-08/data-governance","name":"eu-ai-act-2024-08/data-governance","shortDescription":{"text":"Data and data governance practices documented"},"fullDescription":{"text":"EU AI Act, Art 10 — Data and data governance practices documented"},"helpUri":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","defaultConfiguration":{"level":"error"},"properties":{"tags":["ai-compliance","eu-ai-act-2024-08","article-10","privacy"],"regulation":"EU AI Act","article":"10","principle":"privacy"}},{"id":"eu-ai-act-2024-08/technical-documentation","name":"eu-ai-act-2024-08/technical-documentation","shortDescription":{"text":"Technical documentation drawn up before placing on market"},"fullDescription":{"text":"EU AI Act, Art 11 — Technical documentation drawn up before placing on market"},"helpUri":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","defaultConfiguration":{"level":"error"},"properties":{"tags":["ai-compliance","eu-ai-act-2024-08","article-11","auditability"],"regulation":"EU AI Act","article":"11","principle":"auditability"}},{"id":"eu-ai-act-2024-08/p1-automatic-logs","name":"eu-ai-act-2024-08/p1-automatic-logs","shortDescription":{"text":"Automatic recording of events over the lifetime"},"fullDescription":{"text":"EU AI Act, Art 12(1) — Automatic recording of events over the lifetime"},"helpUri":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","defaultConfiguration":{"level":"warning"},"properties":{"tags":["ai-compliance","eu-ai-act-2024-08","article-12(1)","auditability"],"regulation":"EU AI Act","article":"12(1)","principle":"auditability"}},{"id":"eu-ai-act-2024-08/p2-traceability","name":"eu-ai-act-2024-08/p2-traceability","shortDescription":{"text":"Logging ensures traceability appropriate to risk"},"fullDescription":{"text":"EU AI Act, Art 12(2) — Logging ensures traceability appropriate to risk"},"helpUri":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","defaultConfiguration":{"level":"warning"},"properties":{"tags":["ai-compliance","eu-ai-act-2024-08","article-12(2)","auditability"],"regulation":"EU AI Act","article":"12(2)","principle":"auditability"}},{"id":"eu-ai-act-2024-08/deployer-instructions","name":"eu-ai-act-2024-08/deployer-instructions","shortDescription":{"text":"Transparent operation and instructions for use"},"fullDescription":{"text":"EU AI Act, Art 13 — Transparent operation and instructions for use"},"helpUri":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","defaultConfiguration":{"level":"note"},"properties":{"tags":["ai-compliance","eu-ai-act-2024-08","article-13","transparency"],"regulation":"EU AI Act","article":"13","principle":"transparency"}},{"id":"eu-ai-act-2024-08/p1-accuracy","name":"eu-ai-act-2024-08/p1-accuracy","shortDescription":{"text":"Appropriate level of accuracy declared and tested"},"fullDescription":{"text":"EU AI Act, Art 15(1) — Appropriate level of accuracy declared and tested"},"helpUri":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","defaultConfiguration":{"level":"warning"},"properties":{"tags":["ai-compliance","eu-ai-act-2024-08","article-15(1)","safety"],"regulation":"EU AI Act","article":"15(1)","principle":"safety"}},{"id":"eu-ai-act-2024-08/p4-robustness","name":"eu-ai-act-2024-08/p4-robustness","shortDescription":{"text":"Resilience to errors, faults, inconsistencies"},"fullDescription":{"text":"EU AI Act, Art 15(4) — Resilience to errors, faults, inconsistencies"},"helpUri":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","defaultConfiguration":{"level":"error"},"properties":{"tags":["ai-compliance","eu-ai-act-2024-08","article-15(4)","safety"],"regulation":"EU AI Act","article":"15(4)","principle":"safety"}},{"id":"eu-ai-act-2024-08/p5-cybersecurity","name":"eu-ai-act-2024-08/p5-cybersecurity","shortDescription":{"text":"Cybersecurity measures appropriate to circumstances"},"fullDescription":{"text":"EU AI Act, Art 15(5) — Cybersecurity measures appropriate to circumstances"},"helpUri":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","defaultConfiguration":{"level":"error"},"properties":{"tags":["ai-compliance","eu-ai-act-2024-08","article-15(5)","security-governance"],"regulation":"EU AI Act","article":"15(5)","principle":"security-governance"}},{"id":"eu-ai-act-2024-08/p6-keep-logs","name":"eu-ai-act-2024-08/p6-keep-logs","shortDescription":{"text":"Deployer log-retention capability supported"},"fullDescription":{"text":"EU AI Act, Art 26(6) — Deployer log-retention capability supported"},"helpUri":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","defaultConfiguration":{"level":"warning"},"properties":{"tags":["ai-compliance","eu-ai-act-2024-08","article-26(6)","accountability"],"regulation":"EU AI Act","article":"26(6)","principle":"accountability"}},{"id":"eu-ai-act-2024-08/p1-ai-disclosure","name":"eu-ai-act-2024-08/p1-ai-disclosure","shortDescription":{"text":"Users informed they are interacting with an AI"},"fullDescription":{"text":"EU AI Act, Art 50(1) — Users informed they are interacting with an AI"},"helpUri":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","defaultConfiguration":{"level":"error"},"properties":{"tags":["ai-compliance","eu-ai-act-2024-08","article-50(1)","transparency"],"regulation":"EU AI Act","article":"50(1)","principle":"transparency"}},{"id":"eu-ai-act-2024-08/p3-emotion-biometric-disclosure","name":"eu-ai-act-2024-08/p3-emotion-biometric-disclosure","shortDescription":{"text":"Emotion recognition / biometric categorisation disclosure"},"fullDescription":{"text":"EU AI Act, Art 50(3) — Emotion recognition / biometric categorisation disclosure"},"helpUri":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","defaultConfiguration":{"level":"error"},"properties":{"tags":["ai-compliance","eu-ai-act-2024-08","article-50(3)","transparency"],"regulation":"EU AI Act","article":"50(3)","principle":"transparency"}},{"id":"nist-ai-rmf-1.0/govern-1.5","name":"nist-ai-rmf-1.0/govern-1.5","shortDescription":{"text":"Ongoing monitoring and periodic review of risk management"},"fullDescription":{"text":"NIST AI RMF, Art GOVERN 1.5 — Ongoing monitoring and periodic review of risk management"},"helpUri":"https://www.nist.gov/itl/ai-risk-management-framework","defaultConfiguration":{"level":"warning"},"properties":{"tags":["ai-compliance","nist-ai-rmf-1.0","article-GOVERN 1.5","accountability"],"regulation":"NIST AI RMF","article":"GOVERN 1.5","principle":"accountability"}},{"id":"nist-ai-rmf-1.0/map-1.1","name":"nist-ai-rmf-1.0/map-1.1","shortDescription":{"text":"Context of use established and understood"},"fullDescription":{"text":"NIST AI RMF, Art MAP 1.1 — Context of use established and understood"},"helpUri":"https://www.nist.gov/itl/ai-risk-management-framework","defaultConfiguration":{"level":"note"},"properties":{"tags":["ai-compliance","nist-ai-rmf-1.0","article-MAP 1.1","auditability"],"regulation":"NIST AI RMF","article":"MAP 1.1","principle":"auditability"}},{"id":"nist-ai-rmf-1.0/map-3.4","name":"nist-ai-rmf-1.0/map-3.4","shortDescription":{"text":"Risks and benefits to people identified"},"fullDescription":{"text":"NIST AI RMF, Art MAP 3.4 — Risks and benefits to people identified"},"helpUri":"https://www.nist.gov/itl/ai-risk-management-framework","defaultConfiguration":{"level":"error"},"properties":{"tags":["ai-compliance","nist-ai-rmf-1.0","article-MAP 3.4","safety"],"regulation":"NIST AI RMF","article":"MAP 3.4","principle":"safety"}},{"id":"nist-ai-rmf-1.0/measure-2.3","name":"nist-ai-rmf-1.0/measure-2.3","shortDescription":{"text":"AI system performance evaluated and documented"},"fullDescription":{"text":"NIST AI RMF, Art MEASURE 2.3 — AI system performance evaluated and documented"},"helpUri":"https://www.nist.gov/itl/ai-risk-management-framework","defaultConfiguration":{"level":"warning"},"properties":{"tags":["ai-compliance","nist-ai-rmf-1.0","article-MEASURE 2.3","safety"],"regulation":"NIST AI RMF","article":"MEASURE 2.3","principle":"safety"}},{"id":"nist-ai-rmf-1.0/measure-2.7","name":"nist-ai-rmf-1.0/measure-2.7","shortDescription":{"text":"Security and resilience evaluated"},"fullDescription":{"text":"NIST AI RMF, Art MEASURE 2.7 — Security and resilience evaluated"},"helpUri":"https://www.nist.gov/itl/ai-risk-management-framework","defaultConfiguration":{"level":"error"},"properties":{"tags":["ai-compliance","nist-ai-rmf-1.0","article-MEASURE 2.7","security-governance"],"regulation":"NIST AI RMF","article":"MEASURE 2.7","principle":"security-governance"}}]}},"automationDetails":{"id":"aiauditor/aud_01KS72G4KCVACG3PH14554"},"originalUriBaseIds":{"%SRCROOT%":{"uri":"https://github.com/OpenInterpreter/open-interpreter/blob/e00f08e2ed54e97a530326cc2b1a93389bbe5f7c/"}},"versionControlProvenance":[{"repositoryUri":"https://github.com/OpenInterpreter/open-interpreter","revisionId":"e00f08e2ed54e97a530326cc2b1a93389bbe5f7c","branch":"e00f08e2ed54e97a530326cc2b1a93389bbe5f7c"}],"results":[{"ruleId":"eu-ai-act-2024-08/1e-facial-scraping","level":"note","message":{"text":"Untargeted facial image scraping for face databases — verdict: PASS (55% conf).\n\nComposite raw score 0.00 (0/1 rules matched)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"pyproject.toml","uriBaseId":"%SRCROOT%"}}}],"properties":{"verdict":"pass","score":4,"confidence":0.55,"rawScore":0,"verifyMethod":"deterministic-only","clauseId":"eu-ai-act/art-5/1e-facial-scraping"}},{"ruleId":"eu-ai-act-2024-08/risk-management","level":"warning","message":{"text":"Risk management system established, implemented, documented — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.45 (2/3 rules matched). Supporting docs may exist outside the repo."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"SECURITY.md","uriBaseId":"%SRCROOT%"}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.44999999999999996,"verifyMethod":"skipped","clauseId":"eu-ai-act/art-9/risk-management"}},{"ruleId":"eu-ai-act-2024-08/risk-management","level":"warning","message":{"text":"Risk management system established, implemented, documented — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.45 (2/3 rules matched). Supporting docs may exist outside the repo."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":".github/workflows/python-package.yml","uriBaseId":"%SRCROOT%"}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.44999999999999996,"verifyMethod":"skipped","clauseId":"eu-ai-act/art-9/risk-management"}},{"ruleId":"eu-ai-act-2024-08/data-governance","level":"error","message":{"text":"Data and data governance practices documented — verdict: FAIL (75% conf).\n\nComposite raw score 0.10 (0/3 rules matched). Supporting docs may exist outside the repo.\n\nEvidence: python -c \"import urllib.request; exec(urllib.request.urlopen('$INSTALL_URL').read())\" # elif command -v perl &> /dev/null; then #"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"installers/oi-mac-installer.sh","uriBaseId":"%SRCROOT%"},"region":{"startLine":70,"endLine":70}}}],"properties":{"verdict":"fail","score":0,"confidence":0.75,"rawScore":0.1,"verifyMethod":"deterministic-only","clauseId":"eu-ai-act/art-10/data-governance"}},{"ruleId":"eu-ai-act-2024-08/data-governance","level":"error","message":{"text":"Data and data governance practices documented — verdict: FAIL (75% conf).\n\nComposite raw score 0.10 (0/3 rules matched). Supporting docs may exist outside the repo.\n\nEvidence: rllib.request; exec(urllib.request.urlopen('$INSTALL_URL').read())\" # elif command -v perl &> /dev/null; then # echo \"Using Perl"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"installers/oi-mac-installer.sh","uriBaseId":"%SRCROOT%"},"region":{"startLine":70,"endLine":70}}}],"properties":{"verdict":"fail","score":0,"confidence":0.75,"rawScore":0.1,"verifyMethod":"deterministic-only","clauseId":"eu-ai-act/art-10/data-governance"}},{"ruleId":"eu-ai-act-2024-08/technical-documentation","level":"error","message":{"text":"Technical documentation drawn up before placing on market — verdict: FAIL (80% conf).\n\nComposite raw score 0.15 (1/3 rules matched). Supporting docs may exist outside the repo.\n\nEvidence: 2 required sections present"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"README.md","uriBaseId":"%SRCROOT%"}}}],"properties":{"verdict":"fail","score":1,"confidence":0.8,"rawScore":0.15,"verifyMethod":"deterministic-only","clauseId":"eu-ai-act/art-11/technical-documentation"}},{"ruleId":"eu-ai-act-2024-08/p1-automatic-logs","level":"warning","message":{"text":"Automatic recording of events over the lifetime — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.42 (1/3 rules matched).\n\nEvidence: ssed_lines.append(f'console.log(\"##active_line{i}##\");') processed_lines.append(line) # Join lines to form the processe"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"interpreter/core/computer/terminal/languages/javascript.py","uriBaseId":"%SRCROOT%"},"region":{"startLine":54,"endLine":54}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.4197940008672038,"verifyMethod":"skipped","clauseId":"eu-ai-act/art-12/p1-automatic-logs"}},{"ruleId":"eu-ai-act-2024-08/p1-automatic-logs","level":"warning","message":{"text":"Automatic recording of events over the lifetime — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.42 (1/3 rules matched).\n\nEvidence: }} catch (e) {{ console.log(e); }} console.log(\"##end_of_execution##\"); \"\"\" return code"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"interpreter/core/computer/terminal/languages/javascript.py","uriBaseId":"%SRCROOT%"},"region":{"startLine":65,"endLine":65}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.4197940008672038,"verifyMethod":"skipped","clauseId":"eu-ai-act/art-12/p1-automatic-logs"}},{"ruleId":"eu-ai-act-2024-08/p1-automatic-logs","level":"warning","message":{"text":"Automatic recording of events over the lifetime — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.42 (1/3 rules matched).\n\nEvidence: console.log(e); }} console.log(\"##end_of_execution##\"); \"\"\" return code"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"interpreter/core/computer/terminal/languages/javascript.py","uriBaseId":"%SRCROOT%"},"region":{"startLine":67,"endLine":67}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.4197940008672038,"verifyMethod":"skipped","clauseId":"eu-ai-act/art-12/p1-automatic-logs"}},{"ruleId":"eu-ai-act-2024-08/p1-automatic-logs","level":"warning","message":{"text":"Automatic recording of events over the lifetime — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.42 (1/3 rules matched).\n\nEvidence: ssed_lines.append(f'console.log(\"##active_line{i}##\");') processed_lines.append(line) # Join lines to form the processe"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"interpreter/core/computer/terminal/languages/javascript.py","uriBaseId":"%SRCROOT%"},"region":{"startLine":54,"endLine":54}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.4197940008672038,"verifyMethod":"skipped","clauseId":"eu-ai-act/art-12/p1-automatic-logs"}},{"ruleId":"eu-ai-act-2024-08/p1-automatic-logs","level":"warning","message":{"text":"Automatic recording of events over the lifetime — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.42 (1/3 rules matched).\n\nEvidence: }} catch (e) {{ console.log(e); }} console.log(\"##end_of_execution##\"); \"\"\" return code"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"interpreter/core/computer/terminal/languages/javascript.py","uriBaseId":"%SRCROOT%"},"region":{"startLine":65,"endLine":65}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.4197940008672038,"verifyMethod":"skipped","clauseId":"eu-ai-act/art-12/p1-automatic-logs"}},{"ruleId":"eu-ai-act-2024-08/p2-traceability","level":"warning","message":{"text":"Logging ensures traceability appropriate to risk — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.51 (2/3 rules matched). Supporting docs may exist outside the repo.\n\nEvidence: ssed_lines.append(f'console.log(\"##active_line{i}##\");') processed_lines.append(line) # Join lines to form the processe"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"interpreter/core/computer/terminal/languages/javascript.py","uriBaseId":"%SRCROOT%"},"region":{"startLine":54,"endLine":54}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.5147940008672038,"verifyMethod":"skipped","clauseId":"eu-ai-act/art-12/p2-traceability"}},{"ruleId":"eu-ai-act-2024-08/p2-traceability","level":"warning","message":{"text":"Logging ensures traceability appropriate to risk — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.51 (2/3 rules matched). Supporting docs may exist outside the repo.\n\nEvidence: }} catch (e) {{ console.log(e); }} console.log(\"##end_of_execution##\"); \"\"\" return code"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"interpreter/core/computer/terminal/languages/javascript.py","uriBaseId":"%SRCROOT%"},"region":{"startLine":65,"endLine":65}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.5147940008672038,"verifyMethod":"skipped","clauseId":"eu-ai-act/art-12/p2-traceability"}},{"ruleId":"eu-ai-act-2024-08/p2-traceability","level":"warning","message":{"text":"Logging ensures traceability appropriate to risk — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.51 (2/3 rules matched). Supporting docs may exist outside the repo.\n\nEvidence: console.log(e); }} console.log(\"##end_of_execution##\"); \"\"\" return code"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"interpreter/core/computer/terminal/languages/javascript.py","uriBaseId":"%SRCROOT%"},"region":{"startLine":67,"endLine":67}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.5147940008672038,"verifyMethod":"skipped","clauseId":"eu-ai-act/art-12/p2-traceability"}},{"ruleId":"eu-ai-act-2024-08/p2-traceability","level":"warning","message":{"text":"Logging ensures traceability appropriate to risk — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.51 (2/3 rules matched). Supporting docs may exist outside the repo.\n\nEvidence: his \"\"\" import ast import logging import os import queue import re import sys import threading import time import traceback os.environ[\"LI"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"interpreter/core/computer/terminal/languages/jupyter_language.py","uriBaseId":"%SRCROOT%"},"region":{"startLine":7,"endLine":7}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.5147940008672038,"verifyMethod":"skipped","clauseId":"eu-ai-act/art-12/p2-traceability"}},{"ruleId":"eu-ai-act-2024-08/p2-traceability","level":"warning","message":{"text":"Logging ensures traceability appropriate to risk — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.51 (2/3 rules matched). Supporting docs may exist outside the repo.\n\nEvidence: 999999 import json import logging import subprocess import time import uuid import requests import tokentrim as tt from .run_text_llm imp"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"interpreter/core/llm/llm.py","uriBaseId":"%SRCROOT%"},"region":{"startLine":15,"endLine":15}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.5147940008672038,"verifyMethod":"skipped","clauseId":"eu-ai-act/art-12/p2-traceability"}},{"ruleId":"eu-ai-act-2024-08/p2-traceability","level":"warning","message":{"text":"Logging ensures traceability appropriate to risk — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.51 (2/3 rules matched). Supporting docs may exist outside the repo.\n\nEvidence: ssed_lines.append(f'console.log(\"##active_line{i}##\");') processed_lines.append(line) # Join lines to form the processe"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"interpreter/core/computer/terminal/languages/javascript.py","uriBaseId":"%SRCROOT%"},"region":{"startLine":54,"endLine":54}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.5147940008672038,"verifyMethod":"skipped","clauseId":"eu-ai-act/art-12/p2-traceability"}},{"ruleId":"eu-ai-act-2024-08/p2-traceability","level":"warning","message":{"text":"Logging ensures traceability appropriate to risk — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.51 (2/3 rules matched). Supporting docs may exist outside the repo.\n\nEvidence: }} catch (e) {{ console.log(e); }} console.log(\"##end_of_execution##\"); \"\"\" return code"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"interpreter/core/computer/terminal/languages/javascript.py","uriBaseId":"%SRCROOT%"},"region":{"startLine":65,"endLine":65}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.5147940008672038,"verifyMethod":"skipped","clauseId":"eu-ai-act/art-12/p2-traceability"}},{"ruleId":"eu-ai-act-2024-08/deployer-instructions","level":"note","message":{"text":"Transparent operation and instructions for use — verdict: PASS (90% conf).\n\nComposite raw score 0.75 (3/3 rules matched). Supporting docs may exist outside the repo.\n\nEvidence: 2 required sections present"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"README.md","uriBaseId":"%SRCROOT%"}}}],"properties":{"verdict":"pass","score":3,"confidence":0.9,"rawScore":0.75,"verifyMethod":"deterministic-only","clauseId":"eu-ai-act/art-13/deployer-instructions"}},{"ruleId":"eu-ai-act-2024-08/deployer-instructions","level":"note","message":{"text":"Transparent operation and instructions for use — verdict: PASS (90% conf).\n\nComposite raw score 0.75 (3/3 rules matched). Supporting docs may exist outside the repo."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"README.md","uriBaseId":"%SRCROOT%"}}}],"properties":{"verdict":"pass","score":3,"confidence":0.9,"rawScore":0.75,"verifyMethod":"deterministic-only","clauseId":"eu-ai-act/art-13/deployer-instructions"}},{"ruleId":"eu-ai-act-2024-08/deployer-instructions","level":"note","message":{"text":"Transparent operation and instructions for use — verdict: PASS (90% conf).\n\nComposite raw score 0.75 (3/3 rules matched). Supporting docs may exist outside the repo."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"README.md","uriBaseId":"%SRCROOT%"}}}],"properties":{"verdict":"pass","score":3,"confidence":0.9,"rawScore":0.75,"verifyMethod":"deterministic-only","clauseId":"eu-ai-act/art-13/deployer-instructions"}},{"ruleId":"eu-ai-act-2024-08/p1-accuracy","level":"warning","message":{"text":"Appropriate level of accuracy declared and tested — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.45 (2/3 rules matched)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/","uriBaseId":"%SRCROOT%"}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.45,"verifyMethod":"skipped","clauseId":"eu-ai-act/art-15/p1-accuracy"}},{"ruleId":"eu-ai-act-2024-08/p1-accuracy","level":"warning","message":{"text":"Appropriate level of accuracy declared and tested — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.45 (2/3 rules matched)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"README.md","uriBaseId":"%SRCROOT%"}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.45,"verifyMethod":"skipped","clauseId":"eu-ai-act/art-15/p1-accuracy"}},{"ruleId":"eu-ai-act-2024-08/p1-accuracy","level":"warning","message":{"text":"Appropriate level of accuracy declared and tested — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.45 (2/3 rules matched)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":".github/workflows/python-package.yml","uriBaseId":"%SRCROOT%"}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.45,"verifyMethod":"skipped","clauseId":"eu-ai-act/art-15/p1-accuracy"}},{"ruleId":"eu-ai-act-2024-08/p4-robustness","level":"error","message":{"text":"Resilience to errors, faults, inconsistencies — verdict: FAIL (81% conf).\n\nComposite raw score 0.16 (0/3 rules matched).\n\nEvidence: Anthropic SDK"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"pyproject.toml","uriBaseId":"%SRCROOT%"}}}],"properties":{"verdict":"fail","score":1,"confidence":0.81,"rawScore":0.16000000000000003,"verifyMethod":"deterministic-only","clauseId":"eu-ai-act/art-15/p4-robustness"}},{"ruleId":"eu-ai-act-2024-08/p4-robustness","level":"error","message":{"text":"Resilience to errors, faults, inconsistencies — verdict: FAIL (81% conf).\n\nComposite raw score 0.16 (0/3 rules matched).\n\nEvidence: HuggingFace Transformers"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"pyproject.toml","uriBaseId":"%SRCROOT%"}}}],"properties":{"verdict":"fail","score":1,"confidence":0.81,"rawScore":0.16000000000000003,"verifyMethod":"deterministic-only","clauseId":"eu-ai-act/art-15/p4-robustness"}},{"ruleId":"eu-ai-act-2024-08/p5-cybersecurity","level":"error","message":{"text":"Cybersecurity measures appropriate to circumstances — verdict: FAIL (78% conf).\n\nComposite raw score 0.08 (0/4 rules matched).\n\nEvidence: litellm.exceptions.RateLimitError) and (\"exceeded\" in str(e).lower() or \"insufficient_quota\" i"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"interpreter/core/respond.py","uriBaseId":"%SRCROOT%"},"region":{"startLine":117,"endLine":117}}}],"properties":{"verdict":"fail","score":0,"confidence":0.78,"rawScore":0.08000000000000002,"verifyMethod":"deterministic-only","clauseId":"eu-ai-act/art-15/p5-cybersecurity"}},{"ruleId":"eu-ai-act-2024-08/p6-keep-logs","level":"warning","message":{"text":"Deployer log-retention capability supported — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.50 (1/1 rules matched). Supporting docs may exist outside the repo.\n\nEvidence: ssed_lines.append(f'console.log(\"##active_line{i}##\");') processed_lines.append(line) # Join lines to form the processe"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"interpreter/core/computer/terminal/languages/javascript.py","uriBaseId":"%SRCROOT%"},"region":{"startLine":54,"endLine":54}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.5,"verifyMethod":"skipped","clauseId":"eu-ai-act/art-26/p6-keep-logs"}},{"ruleId":"eu-ai-act-2024-08/p6-keep-logs","level":"warning","message":{"text":"Deployer log-retention capability supported — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.50 (1/1 rules matched). Supporting docs may exist outside the repo.\n\nEvidence: }} catch (e) {{ console.log(e); }} console.log(\"##end_of_execution##\"); \"\"\" return code"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"interpreter/core/computer/terminal/languages/javascript.py","uriBaseId":"%SRCROOT%"},"region":{"startLine":65,"endLine":65}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.5,"verifyMethod":"skipped","clauseId":"eu-ai-act/art-26/p6-keep-logs"}},{"ruleId":"eu-ai-act-2024-08/p1-ai-disclosure","level":"error","message":{"text":"Users informed they are interacting with an AI — verdict: FAIL (80% conf).\n\nComposite raw score 0.20 (1/2 rules matched)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"README.md","uriBaseId":"%SRCROOT%"}}}],"properties":{"verdict":"fail","score":1,"confidence":0.7999999999999999,"rawScore":0.2,"verifyMethod":"deterministic-only","clauseId":"eu-ai-act/art-50/p1-ai-disclosure"}},{"ruleId":"eu-ai-act-2024-08/p3-emotion-biometric-disclosure","level":"error","message":{"text":"Emotion recognition / biometric categorisation disclosure — verdict: FAIL (55% conf).\n\nComposite raw score 0.00 (0/1 rules matched)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"README.md","uriBaseId":"%SRCROOT%"}}}],"properties":{"verdict":"fail","score":0,"confidence":0.55,"rawScore":0,"verifyMethod":"deterministic-only","clauseId":"eu-ai-act/art-50/p3-emotion-biometric-disclosure"}},{"ruleId":"nist-ai-rmf-1.0/govern-1.5","level":"warning","message":{"text":"Ongoing monitoring and periodic review of risk management — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.50 (1/2 rules matched). Supporting docs may exist outside the repo."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":".github/workflows/python-package.yml","uriBaseId":"%SRCROOT%"}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.5,"verifyMethod":"skipped","clauseId":"nist-ai-rmf/govern-1.5"}},{"ruleId":"nist-ai-rmf-1.0/map-1.1","level":"note","message":{"text":"Context of use established and understood — verdict: PASS (90% conf).\n\nComposite raw score 0.70 (2/2 rules matched). Supporting docs may exist outside the repo.\n\nEvidence: 2 required sections present"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"README.md","uriBaseId":"%SRCROOT%"}}}],"properties":{"verdict":"pass","score":3,"confidence":0.9,"rawScore":0.7,"verifyMethod":"skipped","clauseId":"nist-ai-rmf/map-1.1"}},{"ruleId":"nist-ai-rmf-1.0/map-1.1","level":"note","message":{"text":"Context of use established and understood — verdict: PASS (90% conf).\n\nComposite raw score 0.70 (2/2 rules matched). Supporting docs may exist outside the repo."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"README.md","uriBaseId":"%SRCROOT%"}}}],"properties":{"verdict":"pass","score":3,"confidence":0.9,"rawScore":0.7,"verifyMethod":"skipped","clauseId":"nist-ai-rmf/map-1.1"}},{"ruleId":"nist-ai-rmf-1.0/map-3.4","level":"error","message":{"text":"Risks and benefits to people identified — verdict: FAIL (80% conf).\n\nComposite raw score 0.20 (1/2 rules matched). Supporting docs may exist outside the repo."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"SECURITY.md","uriBaseId":"%SRCROOT%"}}}],"properties":{"verdict":"fail","score":1,"confidence":0.7999999999999999,"rawScore":0.2,"verifyMethod":"deterministic-only","clauseId":"nist-ai-rmf/map-3.4"}},{"ruleId":"nist-ai-rmf-1.0/measure-2.3","level":"warning","message":{"text":"AI system performance evaluated and documented — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.45 (2/3 rules matched)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/","uriBaseId":"%SRCROOT%"}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.45,"verifyMethod":"skipped","clauseId":"nist-ai-rmf/measure-2.3"}},{"ruleId":"nist-ai-rmf-1.0/measure-2.3","level":"warning","message":{"text":"AI system performance evaluated and documented — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.45 (2/3 rules matched)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"README.md","uriBaseId":"%SRCROOT%"}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.45,"verifyMethod":"skipped","clauseId":"nist-ai-rmf/measure-2.3"}},{"ruleId":"nist-ai-rmf-1.0/measure-2.3","level":"warning","message":{"text":"AI system performance evaluated and documented — verdict: PARTIAL (100% conf).\n\nComposite raw score 0.45 (2/3 rules matched)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":".github/workflows/python-package.yml","uriBaseId":"%SRCROOT%"}}}],"properties":{"verdict":"partial","score":2,"confidence":1,"rawScore":0.45,"verifyMethod":"skipped","clauseId":"nist-ai-rmf/measure-2.3"}},{"ruleId":"nist-ai-rmf-1.0/measure-2.7","level":"error","message":{"text":"Security and resilience evaluated — verdict: FAIL (73% conf).\n\nComposite raw score 0.08 (0/3 rules matched).\n\nEvidence: litellm.exceptions.RateLimitError) and (\"exceeded\" in str(e).lower() or \"insufficient_quota\" i"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"interpreter/core/respond.py","uriBaseId":"%SRCROOT%"},"region":{"startLine":117,"endLine":117}}}],"properties":{"verdict":"fail","score":0,"confidence":0.7300000000000001,"rawScore":0.08000000000000002,"verifyMethod":"deterministic-only","clauseId":"nist-ai-rmf/measure-2.7"}}],"properties":{"auditId":"aud_01KS72G4KCVACG3PH14554","bundleHash":"01a29b2225da8cc341f86f8f31dc31f77152d14b90fc5e54d2bbf414588c8a65","durationMs":27348,"overallScore":1.6774193548387097,"regulationCoverage":["eu-ai-act-2024-08","nist-ai-rmf-1.0"]}}]}