Knowledge Graph · Debug

Validation Report

EU Regulatory AI Navigator — Knowledge Graph · v2.1.2 · 2026-08-07 · en

✓ Integrity OK0 warnings

279

Nodes

957

Edges

Node Types

Edge Types

Detectors

Timeline

Sources

Orphans

Reference Integrity

Duplicate node IDs0

Duplicate edges0

Dangling edge.from0

Dangling edge.to0

Unknown edge types0

Self-loops0

Automated link checks 22/30 rules pass

Every regulation and tech component is validated for required nodes, edges and fields. Errors block a consistent graph; warnings mark incomplete modelling.

Only failing rules

Regulation links

Rule	Check	Scanned	Findings	Status
`reg.currencyFields`	Regulations carry status + lastVerified	38	28	warn
`reg.noTrigger`	Every regulation is triggered by ≥1 use case	38	3	warn
`reg.noObligation`	Regulations expose articles or direct obligations	38	20	warn
`article.noImplementation`	Articles resolve to implementation/control/evidence	21	2	warn

warnreg.currencyFieldsRegulation "EU AI Act" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "GDPR" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "Cyber Resilience Act" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "NIS2 Directive" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "DORA" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "Revised Product Liability Directive" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "Data Act" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "Data Governance Act" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "Digital Services Act" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "ePrivacy Directive" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "General Product Safety Regulation" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "MDR / IVDR" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "EHDS" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "AML Package (AMLR/AMLA)" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "Machinery Regulation" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "Colorado AI Act" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "New York RAISE Act" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "NYC Local Law 144 (AEDT)" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "ECOA / CFPB Adverse-Action Regime" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "Sector Safety Regimes (EASA / ERA / NERC CIP)" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "Unfair Commercial Practices Directive" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "CSDDD (Corporate Sustainability Due Diligence)" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "SEC Rule 17a-4 (US Records Retention)" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "FINRA Rule 4511 (General Books & Records)" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "Bank Secrecy Act / FinCEN Program Rules" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "TCPA / FCC AI-Voice Rules (US)" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "CFAA & Anti-Scraping Regimes" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.currencyFieldsRegulation "EEOC / Title VII Algorithmic Fairness (US)" has no status, lastVerified — staleness cannot be judgedopen →
warnreg.noTriggerRegulation "New York RAISE Act" is not triggered by any use caseopen →
warnreg.noTriggerRegulation "eIDAS 2 (EUDI / Trust Services)" is not triggered by any use caseopen →
warnreg.noTriggerRegulation "EEOC / Title VII Algorithmic Fairness (US)" is not triggered by any use caseopen →
warnreg.noObligationRegulation "Data Act" has neither articles nor direct obligationsopen →
warnreg.noObligationRegulation "Data Governance Act" has neither articles nor direct obligationsopen →
warnreg.noObligationRegulation "Digital Services Act" has neither articles nor direct obligationsopen →
warnreg.noObligationRegulation "ePrivacy Directive" has neither articles nor direct obligationsopen →
warnreg.noObligationRegulation "General Product Safety Regulation" has neither articles nor direct obligationsopen →
warnreg.noObligationRegulation "MDR / IVDR" has neither articles nor direct obligationsopen →
warnreg.noObligationRegulation "EHDS" has neither articles nor direct obligationsopen →
warnreg.noObligationRegulation "AML Package (AMLR/AMLA)" has neither articles nor direct obligationsopen →
warnreg.noObligationRegulation "Machinery Regulation" has neither articles nor direct obligationsopen →

Tech links

Rule	Check	Scanned	Findings	Status
`tech.noVendorLayer`	Components map to a vendor layer	45	29	warn

warntech.noVendorLayerComponent "PII Scrubbing / DLP-NER Layer" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "WORM / Immutable Audit Vault" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "OpenTelemetry / FCoT Tracing" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Explainability API (SHAP/LIME/CoT)" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "SBOM & Dependency Management" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Confidential Computing Enclaves" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "BYOK via External HSM" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Bias Testing & Data Quality Pipeline" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Watchdog Supervisor & Rate Limiting" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Agent Identity & Access (IdP)" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Central Credential Vault" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Multi-Region Failover & Resilience Testing" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Secure Boot & Hardened Runtime" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Unified Incident-Response Runbook" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Deterministic Policy Engine (OPA / Cedar)" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Trust & Risk Dual Scoring" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "External Trust Anchor (Qualified Timestamp / Ledger)" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Multi-Model Orchestration Layer" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Zero-Trust Ingestion Gateway" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Isolated Tenant Storage Enclave" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Segmented Vector Store (RBAC + CMEK)" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Model Drift & Accuracy Monitor" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Document Intelligence Engine" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Deterministic RPA / Workflow Engine" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Marketplace Monitoring & Collection Engine" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Conversational Care Engine" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Identity & Sanctions Screening Engine" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Code Automation & QA Engine" has no supplying vendor layer (supplied_by)open →
warntech.noVendorLayerComponent "Master-Data & Supplier Risk Engine" has no supplying vendor layer (supplied_by)open →

Currency & verifiability

Rule	Check	Scanned	Findings	Status
`currency.lastVerified`	Regulations, articles and standards carry a lastVerified date	89	69	warn
`currency.status`	Regulations, articles and standards carry a lifecycle status	89	69	warn
`evidence.verifiability`	Evidence artefacts declare a rung on the verifiability ladder	26	13	warn

warncurrency.lastVerifiedregulation "EU AI Act" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "AML Package (AMLR/AMLA)" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "Bank Secrecy Act / FinCEN Program Rules" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "CFAA & Anti-Scraping Regimes" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "Colorado AI Act" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "Cyber Resilience Act" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "CSDDD (Corporate Sustainability Due Diligence)" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "Data Act" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "Data Governance Act" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "DORA" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "Digital Services Act" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "ECOA / CFPB Adverse-Action Regime" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "EEOC / Title VII Algorithmic Fairness (US)" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "EHDS" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "ePrivacy Directive" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "FINRA Rule 4511 (General Books & Records)" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "GDPR" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "General Product Safety Regulation" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "NYC Local Law 144 (AEDT)" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "Machinery Regulation" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "MDR / IVDR" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "NIS2 Directive" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "Revised Product Liability Directive" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "New York RAISE Act" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "SEC Rule 17a-4 (US Records Retention)" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "Sector Safety Regimes (EASA / ERA / NERC CIP)" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "TCPA / FCC AI-Voice Rules (US)" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedregulation "Unfair Commercial Practices Directive" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedarticle "Art. 10 — Data Governance" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedarticle "Art. 11 — Technical Documentation" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedarticle "Art. 12 — Record-Keeping / Logging" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedarticle "Art. 13 — Transparency to Deployers" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedarticle "Art. 14 — Human Oversight" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedarticle "Art. 15 — Accuracy, Robustness, Cybersecurity" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedarticle "Art. 17 — Quality Management System" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedarticle "Art. 25 — Value Chain / Role Flip" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedarticle "Art. 26 — Deployer Obligations" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedarticle "Art. 4 — AI Literacy" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedarticle "Art. 43 — Conformity Assessment" has no lastVerified date — an unverified claim, not a factopen →
warncurrency.lastVerifiedarticle "Art. 47/48 — CE Marking & Declaration of Conformity" has no lastVerified date — an unverified claim, not a factopen →

Currency coverage 22% verified

A node without a lastVerified date is a claim, not a fact. The lists below are the worklist for a manual verification sweep — no date is ever inferred.

Nodes in currency scope

With lastVerified

With status

Missing lastVerified

Past 120 days (stale)

Scope: regulation, article, standard · 20 of 89 carry a verification date (22%) · 20 of 89 carry a status (22%).

regulation — missing lastVerified (28)

reg-aiact
reg-aml
reg-bsa
reg-cfaa
reg-colorado
reg-cra
reg-csddd
reg-dataact
reg-dga
reg-dora
reg-dsa
reg-ecoa
reg-eeoc
reg-ehds
reg-eprivacy
reg-finra4511
reg-gdpr
reg-gpsr
reg-ll144
reg-machinery
reg-mdr
reg-nis2
reg-pld
reg-raise
reg-sec17a4
reg-sector-safety
reg-tcpa
reg-ucpd

article — missing lastVerified (21)

art-10
art-11
art-12
art-13
art-14
art-15
art-17
art-25
art-26
art-4
art-43
art-48
art-5
art-50
art-6-3
art-72
art-9
gdpr-17
gdpr-22
gdpr-25
gdpr-35

standard — missing lastVerified (20)

std-bsi-aic4
std-bsi-c5
std-bsi-genai
std-dinspec92001
std-enisa
std-fair
std-ieee
std-iso22989
std-iso23894
std-iso24029
std-iso27001
std-iso42005
std-iso42006
std-iso5259
std-nist
std-nist600
std-nist800218
std-owasp-agentic
std-owasp-llm
std-tagof

Missing status (all types) (69)

reg-aiact
reg-aml
reg-bsa
reg-cfaa
reg-colorado
reg-cra
reg-csddd
reg-dataact
reg-dga
reg-dora
reg-dsa
reg-ecoa
reg-eeoc
reg-ehds
reg-eprivacy
reg-finra4511
reg-gdpr
reg-gpsr
reg-ll144
reg-machinery
reg-mdr
reg-nis2
reg-pld
reg-raise
reg-sec17a4
reg-sector-safety
reg-tcpa
reg-ucpd
art-10
art-11
art-12
art-13
art-14
art-15
art-17
art-25
art-26
art-4
art-43
art-48
art-5
art-50
art-6-3
art-72
art-9
gdpr-17
gdpr-22
gdpr-25
gdpr-35
std-bsi-aic4
std-bsi-c5
std-bsi-genai
std-dinspec92001
std-enisa
std-fair
std-ieee
std-iso22989
std-iso23894
std-iso24029
std-iso27001
std-iso42005
std-iso42006
std-iso5259
std-nist
std-nist600
std-nist800218
std-owasp-agentic
std-owasp-llm
std-tagof

Evidence verifiability coverage

Evidence artefacts

With verifiability rung

Missing rung

Invalid rung

13 of 26 evidence artefacts declare a rung (50%). Ladder: self-asserted → tamper-evident → externally-anchored → independently-attested.

Evidence — missing verifiability (13)

ev-ce
ev-datasheet
ev-doc
ev-dpia
ev-fria
ev-instructions
ev-literacy
ev-oversight-protocol
ev-pmm
ev-qms-doc
ev-riskregister
ev-sbom
ev-vendor-dd

Regulation → tech resolution (38)

Regulation	Articles	Use cases	Components	Derivation paths	Missing fields
eIDAS 2 (EUDI / Trust Services) `reg-eidas2`	0	0	1	`direct`	—	view →
EEOC / Title VII Algorithmic Fairness (US) `reg-eeoc`	0	0	1	`direct`	status, lastVerified	view →
General Product Safety Regulation `reg-gpsr`	0	1	4	`usecase`	status, lastVerified	view →
Machinery Regulation `reg-machinery`	0	1	4	`usecase`	status, lastVerified	view →
New York RAISE Act `reg-raise`	0	0	4	`direct`	status, lastVerified	view →
Sector Safety Regimes (EASA / ERA / NERC CIP) `reg-sector-safety`	0	1	4	`usecase`	status, lastVerified	view →
Digital Services Act `reg-dsa`	0	2	5	`usecase`	status, lastVerified	view →
Data Governance Act `reg-dga`	0	1	7	`usecase`	status, lastVerified	view →
NYC Local Law 144 (AEDT) `reg-ll144`	0	1	7	`usecase`	status, lastVerified	view →
CFAA & Anti-Scraping Regimes `reg-cfaa`	0	1	10	`directusecase`	status, lastVerified	view →
ePrivacy Directive `reg-eprivacy`	0	3	12	`usecase`	status, lastVerified	view →
TCPA / FCC AI-Voice Rules (US) `reg-tcpa`	0	1	12	`directusecase`	status, lastVerified	view →
CSDDD (Corporate Sustainability Due Diligence) `reg-csddd`	0	2	13	`directusecase`	status, lastVerified	view →
FTC Act §5 & Endorsement / AI-Claims Guidance `reg-ftc`	0	3	13	`usecase`	—	view →
Data Act `reg-dataact`	0	2	14	`usecase`	status, lastVerified	view →
MDR / IVDR `reg-mdr`	0	3	14	`usecase`	status, lastVerified	view →
EHDS `reg-ehds`	0	4	14	`usecase`	status, lastVerified	view →
HIPAA (US Health Privacy) `reg-hipaa`	0	4	14	`usecase`	—	view →
Colorado AI Act `reg-colorado`	0	3	15	`usecase`	status, lastVerified	view →
ECOA / CFPB Adverse-Action Regime `reg-ecoa`	0	1	15	`usecase`	status, lastVerified	view →
SEC Predictive Data Analytics Rules (withdrawn 2025) `reg-sec-pda`	0	1	16	`usecase`	—	view →
SEC Regulation Best Interest `reg-regbi`	0	1	16	`usecase`	—	view →
National Tax Codes & OECD BEPS / Pillar Two `reg-tax-beps`	0	1	16	`usecase`	—	view →
Bank Secrecy Act / FinCEN Program Rules `reg-bsa`	0	1	18	`directusecase`	status, lastVerified	view →
SEC Advisers Act Rule 204-2 (Books & Records) `reg-sec2042`	0	2	18	`usecase`	—	view →
Unfair Commercial Practices Directive `reg-ucpd`	0	4	19	`directusecase`	status, lastVerified	view →
AI Liability Directive (withdrawn) `reg-aild`	0	3	20	`directusecase`	—	view →
Cyber Resilience Act `reg-cra`	0	6	22	`directusecase`	status, lastVerified	view →
Revised Product Liability Directive `reg-pld`	0	6	23	`directusecase`	status, lastVerified	view →
AML Package (AMLR/AMLA) `reg-aml`	0	3	23	`usecase`	status, lastVerified	view →
Sarbanes-Oxley Act (SOX §302 / §404) `reg-sox`	0	3	23	`usecase`	—	view →
USA PATRIOT Act §326 (CIP) `reg-patriot`	0	2	23	`usecase`	—	view →
NIS2 Directive `reg-nis2`	0	4	25	`directusecase`	status, lastVerified	view →
FINRA Rule 4511 (General Books & Records) `reg-finra4511`	0	3	31	`directusecase`	status, lastVerified	view →
SEC Rule 17a-4 (US Records Retention) `reg-sec17a4`	0	4	32	`directusecase`	status, lastVerified	view →
DORA `reg-dora`	0	9	33	`directusecase`	status, lastVerified	view →
GDPR `reg-gdpr`	4	24	37	`articleevidencepatternusecase`	status, lastVerified	view →
EU AI Act `reg-aiact`	17	34	45	`articlecontrolevidencepatternusecase`	status, lastVerified	view →

Tech components with weak links

Component	Regulations	Use cases	Vendor layers	Missing fields
AI Intake Portal & Use-Case Triage `comp-intake`	1	0	1	—
External Trust Anchor (Qualified Timestamp / Ledger) `comp-trust-anchor`	2	0	0	—
Code Automation & QA Engine `comp-code-engine`	3	1	0	—
Master-Data & Supplier Risk Engine `comp-data-gov-engine`	4	2	0	—
Marketplace Monitoring & Collection Engine `comp-shelf-monitor`	4	1	0	—
Conversational Care Engine `comp-care-engine`	4	1	0	—
Segmented Vector Store (RBAC + CMEK) `comp-vector-segmentation`	5	1	0	—
Multi-Model Orchestration Layer `comp-orchestrator`	6	2	0	—
Identity & Sanctions Screening Engine `comp-screening-engine`	6	1	0	—
SBOM & Dependency Management `comp-sbom`	8	2	0	—
Deterministic RPA / Workflow Engine `comp-rpa-engine`	8	2	0	—
Secure Boot & Hardened Runtime `comp-secure-boot`	8	0	0	—
Document Intelligence Engine `comp-doc-engine`	9	4	0	—
Unified Incident-Response Runbook `comp-incident`	9	0	0	—
Input Rails / Prompt Shields `comp-input-rails`	15	0	1	—
Retrieval Rails (ACL-aware RAG) `comp-retrieval-rails`	15	0	1	—
Model Drift & Accuracy Monitor `comp-drift-monitor`	16	1	0	—
Watchdog Supervisor & Rate Limiting `comp-watchdog`	16	0	0	—
Agent Identity & Access (IdP) `comp-agent-id`	16	0	0	—
Central Credential Vault `comp-vault`	16	0	0	—
Deterministic Policy Engine (OPA / Cedar) `comp-policy-engine`	17	3	0	—
Trust & Risk Dual Scoring `comp-trust-risk`	17	0	0	—
PII Scrubbing / DLP-NER Layer `comp-pii`	18	2	0	—
Explainability API (SHAP/LIME/CoT) `comp-xai`	18	2	0	—
Zero-Trust Ingestion Gateway `comp-zt-gateway`	18	1	0	—
Isolated Tenant Storage Enclave `comp-tenant-enclave`	18	1	0	—
Confidential Computing Enclaves `comp-confcomp`	18	0	0	—
BYOK via External HSM `comp-byok`	18	0	0	—
Multi-Region Failover & Resilience Testing `comp-failover`	18	0	0	—
Vendor & Model Due-Diligence Kit `comp-vendor-dd`	19	0	1	—
Sovereign Context Layer `comp-sovereign-context`	19	0	1	—
Bias Testing & Data Quality Pipeline `comp-bias`	21	1	0	—
OpenTelemetry / FCoT Tracing `comp-otel`	23	2	0	—
WORM / Immutable Audit Vault `comp-worm-log`	28	8	0	—

Nodes by Type

Type	Label	Count
`component`	Technical Component	45
`regulation`	Regulation / Law	38
`useCase`	Use Case	35
`standard`	Standard / Framework	30
`pattern`	Design Pattern	28
`evidence`	Evidence Artifact	26
`threat`	Threat (OWASP)	22
`article`	AI Act / GDPR Article	21
`control`	Control Objective	12
`blueprint`	Architecture Blueprint	6
`vendorCategory`	Vendor Category	6
`riskClass`	AI Act Risk Class	4
`oversight`	Oversight Mode	4
`role`	Value-Chain Role	2

Edge Types (usage)

Type	Label	Uses
`triggers`	triggers	165
`recommends`	recommends	131
`evidenced_by`	evidenced by	119
`requires`	requires	103
`includes`	includes	65
`mitigated_by`	mitigated by	59
`implemented_by`	implemented by	58
`threatens`	threatens	56
`relates_to`	relates to	42
`classified_as`	classified as	35
`supported_by`	supported by	33
`imposes`	imposes	22
`supplied_by`	supplied by	22
`satisfied_by`	satisfied by	19
`produced_by`	produced by	15
`operationalized_by`	operationalized by	13

Top 15 Connected Nodes

#	Node	Type	in	out	total
1	EU AI Act `reg-aiact`	Regulation / Law	33	4	37	open →
2	Clinical Imaging Triage & Patient Follow-Up `uc-svc-imaging`	Use Case	0	32	32	open →
3	GDPR `reg-gdpr`	Regulation / Law	25	5	30	open →
4	Algorithmic Portfolio Execution & Advisory `uc-svc-portfolio`	Use Case	0	30	30	open →
5	Agentic RDA Stack (6 Layers) `bp-rda`	Architecture Blueprint	9	17	26	open →
6	WORM / Immutable Audit Vault `comp-worm-log`	Technical Component	23	2	25	open →
7	KYC & Client Onboarding Automation (Managed Service) `uc-svc-onboarding`	Use Case	0	25	25	open →
8	Automated Financial Forecasting & Audit Trails `uc-svc-forecast`	Use Case	0	25	25	open →
9	Art. 15 — Accuracy, Robustness, Cybersecurity `art-15`	AI Act / GDPR Article	6	18	24	open →
10	Event Logs & Decision Traces `ev-logs`	Evidence Artifact	22	2	24	open →
11	Continuous Technical Documentation Generation `uc-svc-techdoc`	Use Case	0	24	24	open →
12	High Risk `rc-high`	AI Act Risk Class	11	12	23	open →
13	Legal Contract & Regulatory Clause Extraction `uc-svc-contract`	Use Case	0	23	23	open →
14	Omnichannel Virtual Support & Voice Bots `uc-svc-carebot`	Use Case	0	23	23	open →
15	Cross-Border Statutory Tax & Wealth Filing `uc-svc-tax`	Use Case	0	23	23	open →

Issues (0)

No integrity issues found. ✓