MCP Server for Z.AI - A Model Context Protocol server that provides AI capabilities
Nothing to run from here
sebbi.pro - seal every AI decision is installed from its publisher's own source and answers where it runs, so this marketplace is not in the path of a single call. There is no address here to send one to, and a panel that pretended otherwise would be showing you an answer we made up. Install it and call it from your own client — the Installation tab has the entry for each one.
500
tools declared
—
trust score
remote
at its publisher
—
calls last 7d
What it does
Score, seal and prove any AI decision, timestamped into Bitcoin - checkable by anyone.
Quickstart
# 1 — add it to Claude Code
claude mcp add --scope user --transport http sebbi-pro-seal-every-ai-decision-mcp https://sebbi.pro/mcp
# 2 — ask your agent for something these tools do
# sebbi_overview, sebbi_terms, sebbi_create_account and 497 more
sebbi.pro - seal every AI decision costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.
Publishernot claimed
SEAll 1 server
sebbi1 server
1 category
Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.
Installation
Where are you running it?
Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine and nothing runs on ours: this server answers at its publisher’s own address, and what you install is the connection straight to it.
Claude Codedeclared by this listing
This is a public server: it answers at its publisher’s own address and this marketplace is not in the path. Claude Code registers it in one command; --scope user makes it available in every project. The transport below is http, as the publisher's own manifest declares it.
claude mcp add --scope user --transport http sebbi-pro-seal-every-ai-decision-mcp https://sebbi.pro/mcpReconnect, or start a new session, and the tools appear in the model’s tool list.
Free on mcprush, and it answers at its publisher’s own address: this marketplace is not in the path, so there is no key of ours to hold and no card to add.
What it writes
One config entry pointing straight at the publisher’s own address — this marketplace is not in the path, and nothing from this listing executes on your machine.
What you approve
500 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.
Tool surface
What the model actually sees. Descriptions are diffed on every release — see version history.
What sebbi.pro offers: every product, what it does, its page, and the price. Start here.
No parameter schema on file.
The service terms and their version. Show these to the customer in full and get a clear yes before calling sebbi_create_account.
No parameter schema on file.
Open a sebbi.pro account for the customer and return their API key. Only call after showing sebbi_terms and the customer saying yes. Seals the agreement into the chain.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| name | string | no | — |
| string | yes | — | |
| company | string | no | — |
| product | string | no | — |
| devices | integer | no | Estimated devices; billing uses the real count |
| terms_version | string | yes | terms_version from sebbi_terms |
| customer_agreed | boolean | yes | true only if the customer read the terms and said yes |
Recommend the right sebbi.pro products and give step-by-step setup with working code or a ready prompt, for how the customer builds (Python, Node, Lovable, Zapier, a website, etc.)
| Parameter | Type | Required | Notes |
|---|---|---|---|
| stack | string | yes | How they build or what they use, e.g. 'Lovable website', 'Python on AWS', 'Zapier' |
| goal | string | no | What they want, e.g. 'prove our loan AI is compliant', 'cut our OpenAI bill' |
| device | string | no | Where they are working from, e.g. 'Android phone', 'Mac' |
| api_key | string | no | — |
Send one real decision through the live engine with the customer's key and show the verdict and the sealed block.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| api_key | string | yes | — |
| action | string | no | — |
| amount | number | no | — |
| country | string | no | — |
| user_id | string | no | — |
How Signal Packs are written: the signals, measurements, flags, operators and verdicts. Read before writing a pack.
No parameter schema on file.
Check a Signal Pack with the engine's own validator without publishing it.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| pack | object | yes | — |
Publish a Signal Pack to the open library. It is sealed into the chain, dated and credited to its author. Free.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| pack | object | yes | — |
Browse the published Signal Pack library.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| vertical | string | no | — |
The machine-proof report for one decision the customer's key sealed: the decision, who sent it, where it came from, and proof it has not changed.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| api_key | string | yes | — |
| block | integer | yes | — |
Look up a Human Keys code (HK-XXXX-XXXX): whether a human typed the text, live, and when.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| code | string | yes | — |
A secure Stripe link for the customer to add their card and set up the 50p per device subscription.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| string | yes | — | |
| devices | integer | no | — |
| product | string | no | — |
Re-verify sebbi.pro's whole chain and return its height and tip. Anyone can run this.
No parameter schema on file.
Garbage-in guard. Check whether a piece of data is genuinely vouched for by its claimed source domain (a sebbi Verified Source that hosts /.well-known/sebbi-source.json). Returns GENUINE, UNVERIFIED or UNKNOWN, sealed into Bitcoin. Call this before trusting an input.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | The source domain, e.g. example.com |
| data | string | no | The input text to check |
| hash | string | no | Or the SHA-256 of the data, instead of the text |
Rate an AI deployment against The Insurable AI Standard and seal an Insurability Certificate into Bitcoin. Composes an Insurability Level (I-0 UNRATED to I-4 PRE-CLEARED) from PROVABLE controls: its Verified-Source domain and its MCP-Shield code are checked live against sealed proofs (VERIFIED); logging, human accountability and payment pre-clearance are declared (ATTESTED). Returns the level, the
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | The deployment's domain, e.g. yourapp.com |
| name | string | no | Display name (optional) |
| source_domain | string | no | A sebbi Verified-Source domain, to verify the 'Inputs sourced' pillar (optional) |
| mcp_code | string | no | An MCP-Shield code MS-XXXX-XXXX, to verify the 'Tools guarded' pillar (optional) |
| decisions | boolean | no | Attest: every AI decision is sealed (Art 12 logging) |
| human | boolean | no | Attest: a named human is accountable, actions carry a signed permission |
| precleared | boolean | no | Attest: no autonomous payment fires without a sealed sign-off (Witness-Proof) |
For insurers and auditors. Verify an Insurability Certificate (IC-XXXX-XXXX) against the sebbi chain: returns the Insurability Level, which pillars are VERIFIED vs ATTESTED, whether it is still the current certificate for its domain, and the Bitcoin seal. Read-only, no account needed.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| code | string | yes | The certificate code, IC-XXXX-XXXX |
Checks the output record's 'risk_level' field: EU AI Act Art.9 - risk management recorded. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'training_data_source' field: EU AI Act Art.10 - training data source documented. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'model_card' field: EU AI Act Art.11 - technical documentation present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'logged' field: EU AI Act Art.12 - automatic logging enabled. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'user_informed' field: EU AI Act Art.13 - user informed of AI use. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'human_oversight' field: EU AI Act Art.14 - human oversight assigned. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'accuracy' field: EU AI Act Art.15 - accuracy metric recorded. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'robustness_tested' field: EU AI Act Art.15 - robustness tested. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'security_controls' field: EU AI Act Art.15 - cybersecurity controls noted. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'qms_ref' field: EU AI Act Art.16 - provider QMS referenced. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'quality_policy' field: EU AI Act Art.17 - quality management policy. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'log_retention_days' field: EU AI Act Art.19 - log retention >= 180 days. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'oversight_owner' field: EU AI Act Art.26 - deployer oversight owner named. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'fria_ref' field: EU AI Act Art.27 - fundamental-rights impact assessment. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'ai_disclosed' field: EU AI Act Art.50 - AI interaction disclosed. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'synthetic_content_labelled' field: EU AI Act Art.50 - synthetic content labelled. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'monitoring_plan' field: EU AI Act Art.72 - post-market monitoring plan. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'annex_iv' field: EU AI Act Annex IV - documentation reference. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'risk_classification' field: EU AI Act Art.6 - risk classification recorded. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'conformity_assessment' field: EU AI Act Art.43 - conformity assessment recorded. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'processing_purpose' field: GDPR Art.5 - processing purpose stated. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'lawful_basis' field: GDPR Art.6 - lawful basis recorded. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'special_category' field: GDPR Art.9 - special-category safeguard flag. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'privacy_notice_shown' field: GDPR Art.13 - privacy notice shown. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'access_supported' field: GDPR Art.15 - right of access supported. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'rectification_supported' field: GDPR Art.16 - rectification supported. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'erasure_supported' field: GDPR Art.17 - erasure supported. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'restriction_supported' field: GDPR Art.18 - restriction supported. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'portability_supported' field: GDPR Art.20 - data portability supported. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'objection_supported' field: GDPR Art.21 - right to object supported. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'human_review_available' field: GDPR Art.22 - human review of automated decision. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'dpbd' field: GDPR Art.25 - data protection by design. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'ropa_ref' field: GDPR Art.30 - records of processing referenced. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'encryption' field: GDPR Art.32 - encryption in place. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'breach_process' field: GDPR Art.33 - breach process documented. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'dpia_ref' field: GDPR Art.35 - DPIA referenced. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'transfer_mechanism' field: GDPR Art.44 - international transfer mechanism. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'ai_policy' field: ISO/IEC 42001 A.2 - AI policy present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'ai_roles' field: ISO/IEC 42001 A.3 - AI roles defined. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'ai_resources' field: ISO/IEC 42001 A.4 - AI resources documented. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'ai_impact_assessment' field: ISO/IEC 42001 A.5 - AI system impact assessment. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'lifecycle_stage' field: ISO/IEC 42001 A.6 - life-cycle stage recorded. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'data_quality' field: ISO/IEC 42001 A.7 - data quality documented. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'stakeholder_info' field: ISO/IEC 42001 A.8 - information for interested parties. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'intended_use' field: ISO/IEC 42001 A.9 - intended use documented. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'third_party_register' field: ISO/IEC 42001 A.10 - third-party register. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'govern_policy' field: NIST AI RMF GOVERN-1 - policy in place. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'accountable_owner' field: NIST AI RMF GOVERN-2 - accountable owner named. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'use_context' field: NIST AI RMF MAP-1 - use context established. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'system_category' field: NIST AI RMF MAP-2 - system categorised. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'impact_assessment' field: NIST AI RMF MAP-5 - impacts characterised. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'metrics' field: NIST AI RMF MEASURE-1 - metrics identified. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'trust_eval' field: NIST AI RMF MEASURE-2 - trustworthiness evaluated. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'feedback_channel' field: NIST AI RMF MEASURE-4 - feedback channel. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'risk_priority' field: NIST AI RMF MANAGE-1 - risks prioritised. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'mitigation_plan' field: NIST AI RMF MANAGE-2 - mitigation plan. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'monitoring_log' field: NIST AI RMF MANAGE-4 - monitoring log. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'illegal_content_ra' field: UK Online Safety Act - illegal content risk assessment. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'childrens_access_assessment' field: UK Online Safety Act - children's access assessment. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'age_assurance' field: UK Online Safety Act - age assurance. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'reporting_mechanism' field: UK Online Safety Act - reporting mechanism live. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'transparency_report' field: UK Online Safety Act - transparency report. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'notice_action' field: EU DSA - notice-and-action mechanism. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'statement_of_reasons' field: EU DSA - statement of reasons recorded. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'score' field: Score within 0..100. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'probability' field: Probability within 0..1. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'confidence' field: Confidence within 0..1. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'amount' field: Amount is non-negative. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'amount' field: Amount within sane ceiling (<=1e6). Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'anomaly' field: Anomaly within 0..1. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'device_risk' field: Device risk within 0..1. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'risk_score' field: Risk score within 0..100. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'latency_ms' field: Latency recorded and <= 30ms. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'latency_ms' field: Latency is non-negative. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'block_index' field: Block index is a non-negative integer. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'block_index' field: Block index is an integer. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'audit_hash' field: Audit hash is 64 chars. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'audit_hash' field: Audit hash is hex-64. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'merkle_root' field: Merkle root is hex-64. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'input_hash' field: Input hash is hex-64. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'output_hash' field: Output hash is hex-64. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'timestamp' field: Timestamp present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'timestamp' field: Timestamp not in the future. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'decision' field: Decision is a valid verdict. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'weight_sum' field: Signal weights sum to 1.0. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'percentage' field: Percentage within 0..100. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'count' field: Count is a non-negative integer. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'retries' field: Retries within limit (<=5). Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'rate_per_min' field: Rate per minute within 1000. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'velocity' field: Velocity within 100. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'amount' field: Amount has <= 2 decimal places. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'amount_minor' field: Minor-unit amount is integer. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Subtotal + tax == total (Deterministic numeric and integrity validation at the edge.). Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'balance' field: Balance is non-negative. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'threshold' field: Threshold is numeric. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'temperature' field: Temperature within 0..2. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'top_p' field: Top-p within 0..1. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'max_tokens' field: Max tokens is a positive integer. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'tokens' field: Token count is non-negative. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'cost' field: Cost is non-negative. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'cost' field: Cost has <= 4 decimal places. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'seq' field: Sequence number is an integer. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'version' field: Version string present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'chain_height' field: Chain height is non-negative. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'score' field: Score is numeric. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'priority' field: Priority within 1..5. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'severity' field: Severity within 0..10. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'weight' field: Weight within 0..1. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'ratio' field: Ratio within 0..1. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'age' field: Age in years is non-negative. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'quantity' field: Quantity is a positive integer. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'discount_pct' field: Discount within 0..100. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'tax_rate' field: Tax rate within 0..1. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'fx_rate' field: Exchange rate is positive. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'duration_s' field: Duration seconds is non-negative. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'attempts' field: Attempts within 10. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'queue_depth' field: Queue depth is non-negative. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'batch_size' field: Batch size is a positive integer. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'score_history' field: Score deltas are monotonic. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'epoch' field: Epoch is an integer. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'nonce' field: Nonce present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'checksum' field: Checksum is hex-64. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'signature' field: Signature present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'index' field: Index within 0..4095. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'limit' field: Limit is a positive integer. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'offset' field: Offset is non-negative. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'confidence' field: Confidence >= 0.5 to act. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the output record's 'loss' field: Loss is non-negative. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'timestamp' field: Event timestamp is ISO-8601. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'created_at' field: Created-at is ISO-8601. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'phone' field: Phone is E.164. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'country' field: Country is a 2-letter code. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'currency' field: Currency is a 3-letter code. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'email' field: Email is well-formed. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'email' field: Email is lower-case. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'url' field: URL is https. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'id' field: ID is a UUID. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'request_id' field: Request ID is a UUID. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Payload is a JSON object (Canonicalises and validates the shape of a payload field before it is trusted.). Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'user_id' field: User ID present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'user_id' field: User ID has no control chars. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'device_id' field: Device ID present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'device_id' field: Device ID is trimmed. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'action' field: Action present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'action' field: Action is lower-case. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'name' field: Name is trimmed. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'name' field: Name has no control chars. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'locale' field: Locale is well-formed. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'timezone' field: Timezone present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'ip' field: IP address present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'postcode' field: Postcode present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'postcode' field: Postcode has no control chars. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'amount' field: Amount is numeric. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'amount' field: Amount has <= 2 decimals. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'reference' field: Reference is trimmed. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'session_id' field: Session ID present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'hash' field: Hash field is hex-64. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'signature' field: Signature is base64. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'language' field: Language is a 2-letter code. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'status' field: Status is lower-case. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'status' field: Status is a known value. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'channel' field: Channel is a known value. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'updated_at' field: Updated-at is ISO-8601. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'expires_at' field: Expiry is ISO-8601. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'dob' field: Birthdate is ISO-8601. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'callback_url' field: Callback URL is https. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'webhook_url' field: Webhook URL is https. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'avatar_url' field: Avatar URL is https. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'tenant_id' field: Tenant ID present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'org_id' field: Org ID present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'account_id' field: Account ID is a UUID. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'txn_id' field: Transaction ID present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'label' field: Label is trimmed. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'label' field: Label has no control chars. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'category' field: Category is lower-case. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'tags' field: Tag list is a JSON array. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'metadata' field: Metadata is a JSON object. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'headers' field: Headers is a JSON object. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'content_type' field: Content type present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'encoding' field: Encoding is lower-case. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'checksum' field: Checksum is hex-64. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'nonce' field: Nonce present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'priority' field: Priority is a known value. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'region' field: Region is lower-case. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'source' field: Source is lower-case. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'destination' field: Destination present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'message_id' field: Message ID present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'trace_id' field: Trace ID present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'span_id' field: Span ID present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'correlation_id' field: Correlation ID present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'schema_version' field: Schema version present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'idempotency_key' field: Idempotency key present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'duration_s' field: Duration is positive. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'sample_rate' field: Sample rate is a known value. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'bitrate_kbps' field: Bitrate within 32..320 kbps. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'channels' field: Channel count within 1..8. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'codec' field: Codec is a known value. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'lufs' field: Integrated loudness within -36..-9 LUFS. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'true_peak_dbtp' field: True peak at or below -1 dBTP. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'clipping' field: Clipping flag is false. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'silence_ratio' field: Silence ratio within 0..1. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'fingerprint' field: Fingerprint is hex-64. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'play_count' field: Play count is non-negative. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'play_count_history' field: Play-count history is monotonic. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'stream_id' field: Stream ID present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'track_id' field: Track ID is a UUID. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'bit_depth' field: Bit depth is a known value. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'container' field: Container is a known value. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'start_s' field: Start time is non-negative. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
End time is after start (Validates supplied stream / media metadata to catch spoofing, drift or bot fraud.). Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'segments' field: Segment count is a positive integer. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'file_size' field: File size is positive. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'drm' field: DRM flag present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'lra' field: Loudness range within 0..20 LU. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'dr_db' field: Dynamic range within 0..40 dB. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'dc_offset' field: DC offset within -0.1..0.1. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'peak' field: Peak amplitude within 0..1. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'rms' field: RMS within 0..1. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'frames' field: Frame count is non-negative. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'frame_rate' field: Frame rate is positive. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'noise_floor_db' field: Noise floor at or below -40 dB. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'snr_db' field: SNR is at least 10 dB. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'watermark' field: Watermark present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'watermark_id' field: Watermark id is hex-64. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'encoder' field: Encoder present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'checksum' field: Checksum is hex-64. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'uploaded_at' field: Upload time is ISO-8601. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'captured_at' field: Capture time is ISO-8601. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'device_id' field: Device ID present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'geo' field: Geo region present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'licence_id' field: Licence ID present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'rights_holder' field: Rights holder present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'isrc' field: ISRC is well-formed. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'bpm' field: Tempo (BPM) within 20..300. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'key' field: Key signature present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'mood' field: Mood tag is lower-case. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'genre' field: Genre tag is lower-case. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'language' field: Language is a 2-letter code. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'explicit' field: Explicit flag present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'title' field: Title is trimmed. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'title' field: Title has no control chars. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'artist' field: Artist present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'album' field: Album present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'track_no' field: Track number is a positive integer. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'disc_no' field: Disc number is a positive integer. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'release_date' field: Release date is ISO-8601. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'preview_s' field: Preview length within 0..60s. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'buffer_health' field: Buffer health within 0..1. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'rebuffers' field: Rebuffer count is non-negative. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'startup_ms' field: Startup latency within 0..5000ms. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'bitrate_switches' field: Bitrate switches is non-negative. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'session_id' field: Session ID present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'listener_id' field: Listener ID present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'bot_score' field: Bot score within 0..1. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'fraud_flag' field: Fraud flag present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Checks the input record's 'completion_ratio' field: Completion ratio within 0..1. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| input_payload | object | yes | The request/record going in. |
| output_payload | object | yes | The decision/record coming out. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.9 - risk management system recorded - verifies the governance record's 'risk_management' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.9 - residual risk documented - verifies the governance record's 'residual_risk' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.10 - training data governance - verifies the governance record's 'data_governance' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.10 - training data source documented - verifies the governance record's 'training_data_source' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.10 - data bias examined - verifies the governance record's 'bias_examined' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.11 - technical documentation present - verifies the governance record's 'technical_documentation' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.12 - automatic event logging enabled - verifies the governance record's 'logging_enabled' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.12 - logs retained >= 180 days - verifies the governance record's 'log_retention_days' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.13 - transparency: user informed - verifies the governance record's 'user_informed' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.13 - instructions for use provided - verifies the governance record's 'instructions_for_use' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.14 - human oversight assigned - verifies the governance record's 'human_oversight' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.14 - stop / override control exists - verifies the governance record's 'override_control' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.15 - accuracy metric recorded - verifies the governance record's 'accuracy' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.15 - robustness tested - verifies the governance record's 'robustness_tested' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.15 - cybersecurity measures recorded - verifies the governance record's 'security_controls' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.16 - provider obligations acknowledged - verifies the governance record's 'provider_obligations' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.17 - quality management system - verifies the governance record's 'qms_ref' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.18 - documentation kept 10 years - verifies the governance record's 'doc_retention_years' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.26 - deployer oversight owner named - verifies the governance record's 'oversight_owner' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.27 - fundamental-rights impact assessment - verifies the governance record's 'fria_ref' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.43 - conformity assessment recorded - verifies the governance record's 'conformity_assessment' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.47 - EU declaration of conformity - verifies the governance record's 'declaration_of_conformity' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.49 - registered in EU database - verifies the governance record's 'eu_db_registered' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.50 - AI interaction disclosed - verifies the governance record's 'ai_disclosed' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.50 - synthetic content labelled - verifies the governance record's 'synthetic_content_labelled' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.72 - post-market monitoring plan - verifies the governance record's 'monitoring_plan' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.73 - serious-incident reporting path - verifies the governance record's 'incident_reporting' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.6 - risk classification recorded - verifies the governance record's 'risk_classification' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.5 - prohibited-practice screen passed - verifies the governance record's 'prohibited_practice_cleared' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Annex IV - documentation reference - verifies the governance record's 'annex_iv' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.4 - staff AI literacy ensured - verifies the governance record's 'ai_literacy' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.51 - GPAI systemic-risk classification - verifies the governance record's 'gpai_systemic_risk' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.53 - GPAI technical documentation - verifies the governance record's 'gpai_technical_doc' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.53 - training copyright policy - verifies the governance record's 'copyright_policy' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.53 - training-content summary published - verifies the governance record's 'training_summary_published' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.55 - systemic-model evaluation - verifies the governance record's 'model_evaluation' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.55 - adversarial red-team testing - verifies the governance record's 'red_team_tested' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.55 - GPAI serious-incident tracking - verifies the governance record's 'gpai_incident_tracking' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.55 - model cybersecurity protection - verifies the governance record's 'model_cybersecurity' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU AI Act). EU AI Act Art.56 - code of practice adherence - verifies the governance record's 'code_of_practice' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.5 - processing purpose stated - verifies the governance record's 'processing_purpose' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.5 - data minimisation applied - verifies the governance record's 'data_minimisation' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.5 - storage limitation set - verifies the governance record's 'retention_period' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.6 - lawful basis recorded - verifies the governance record's 'lawful_basis' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.7 - consent is recorded - verifies the governance record's 'consent_recorded' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.9 - special-category safeguard - verifies the governance record's 'special_category_safeguard' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.12 - transparent information provided - verifies the governance record's 'privacy_info_provided' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.13 - privacy notice shown - verifies the governance record's 'privacy_notice_shown' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.15 - right of access supported - verifies the governance record's 'access_supported' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.16 - rectification supported - verifies the governance record's 'rectification_supported' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.17 - erasure supported - verifies the governance record's 'erasure_supported' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.18 - restriction supported - verifies the governance record's 'restriction_supported' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.20 - data portability supported - verifies the governance record's 'portability_supported' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.21 - right to object supported - verifies the governance record's 'objection_supported' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.22 - human review of automated decision - verifies the governance record's 'human_review_available' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.25 - data protection by design - verifies the governance record's 'data_protection_by_design' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.28 - processor contract in place - verifies the governance record's 'processor_contract' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.30 - records of processing referenced - verifies the governance record's 'ropa_ref' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.32 - encryption in place - verifies the governance record's 'encryption' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.32 - access controls in place - verifies the governance record's 'access_controls' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.33 - 72-hour breach process - verifies the governance record's 'breach_process' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.35 - DPIA referenced - verifies the governance record's 'dpia_ref' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.37 - DPO appointed where required - verifies the governance record's 'dpo_appointed' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.44 - international transfer mechanism - verifies the governance record's 'transfer_mechanism' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.46 - appropriate safeguards (SCCs) - verifies the governance record's 'transfer_safeguards' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.5 - accuracy principle upheld - verifies the governance record's 'data_accuracy' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.5 - integrity & confidentiality - verifies the governance record's 'integrity_confidentiality' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.5 - accountability demonstrable - verifies the governance record's 'accountability_evidence' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.24 - controller responsibility evidenced - verifies the governance record's 'controller_measures' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.26 - joint-controller arrangement - verifies the governance record's 'joint_controller_arrangement' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.34 - data-subject breach notification - verifies the governance record's 'subject_breach_notice' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.40 - code of conduct adhered - verifies the governance record's 'gdpr_code_of_conduct' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (GDPR). GDPR Art.42 - certification held - verifies the governance record's 'gdpr_certification' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU DORA). DORA Art.5 - ICT risk management framework - verifies the governance record's 'ict_risk_framework' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU DORA). DORA Art.6 - ICT governance responsibility - verifies the governance record's 'ict_governance_owner' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU DORA). DORA Art.8 - ICT asset inventory - verifies the governance record's 'ict_asset_inventory' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU DORA). DORA Art.9 - protection & prevention controls - verifies the governance record's 'protection_controls' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU DORA). DORA Art.10 - anomaly detection in place - verifies the governance record's 'anomaly_detection' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU DORA). DORA Art.11 - response & recovery plan - verifies the governance record's 'recovery_plan' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU DORA). DORA Art.11 - RTO objective set - verifies the governance record's 'rto_minutes' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU DORA). DORA Art.12 - backup policy recorded - verifies the governance record's 'backup_policy' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU DORA). DORA Art.13 - learning & evolving process - verifies the governance record's 'post_incident_review' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU DORA). DORA Art.14 - crisis communication plan - verifies the governance record's 'crisis_comms_plan' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU DORA). DORA Art.17 - incident management process - verifies the governance record's 'incident_management' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU DORA). DORA Art.19 - major incident reporting path - verifies the governance record's 'major_incident_reporting' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU DORA). DORA Art.24 - digital resilience testing - verifies the governance record's 'resilience_testing' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU DORA). DORA Art.25 - vulnerability assessments - verifies the governance record's 'vulnerability_assessment' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU DORA). DORA Art.28 - third-party ICT risk register - verifies the governance record's 'third_party_register' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU DORA). DORA Art.28 - concentration risk assessed - verifies the governance record's 'concentration_risk' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU DORA). DORA Art.30 - key contractual provisions - verifies the governance record's 'ict_contract_clauses' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU DORA). DORA Art.45 - threat intelligence sharing - verifies the governance record's 'threat_intel_sharing' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 42001). ISO/IEC 42001 Cl.5 - AI policy present - verifies the governance record's 'ai_policy' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 42001). ISO/IEC 42001 Cl.5 - leadership commitment - verifies the governance record's 'leadership_commitment' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 42001). ISO/IEC 42001 A.3 - AI roles defined - verifies the governance record's 'ai_roles' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 42001). ISO/IEC 42001 A.4 - AI resources documented - verifies the governance record's 'ai_resources' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 42001). ISO/IEC 42001 A.5 - AI system impact assessment - verifies the governance record's 'ai_impact_assessment' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 42001). ISO/IEC 42001 A.6 - life-cycle stage recorded - verifies the governance record's 'lifecycle_stage' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 42001). ISO/IEC 42001 A.6 - responsible development process - verifies the governance record's 'responsible_development' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 42001). ISO/IEC 42001 A.7 - data for AI documented - verifies the governance record's 'data_quality' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 42001). ISO/IEC 42001 A.7 - data provenance recorded - verifies the governance record's 'data_provenance' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 42001). ISO/IEC 42001 A.8 - information to interested parties - verifies the governance record's 'stakeholder_info' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 42001). ISO/IEC 42001 A.9 - intended use documented - verifies the governance record's 'intended_use' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 42001). ISO/IEC 42001 A.9 - foreseeable misuse considered - verifies the governance record's 'misuse_considered' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 42001). ISO/IEC 42001 A.10 - third-party & supplier register - verifies the governance record's 'supplier_register' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 42001). ISO/IEC 42001 Cl.9 - performance monitoring - verifies the governance record's 'performance_monitoring' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 42001). ISO/IEC 42001 Cl.9 - internal audit evidence - verifies the governance record's 'internal_audit' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 42001). ISO/IEC 42001 Cl.10 - continual improvement log - verifies the governance record's 'improvement_log' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (NIST AI RMF). NIST AI RMF GOVERN-1.1 - legal/reg requirements mapped - verifies the governance record's 'legal_requirements' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (NIST AI RMF). NIST AI RMF GOVERN-2.1 - accountable owner named - verifies the governance record's 'accountable_owner' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (NIST AI RMF). NIST AI RMF GOVERN-3.2 - diverse team / review - verifies the governance record's 'diverse_review' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (NIST AI RMF). NIST AI RMF GOVERN-4.1 - risk culture / policy - verifies the governance record's 'govern_policy' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (NIST AI RMF). NIST AI RMF GOVERN-6.1 - third-party risk policy - verifies the governance record's 'third_party_policy' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (NIST AI RMF). NIST AI RMF MAP-1.1 - use context established - verifies the governance record's 'use_context' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (NIST AI RMF). NIST AI RMF MAP-2.3 - system categorised - verifies the governance record's 'system_category' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (NIST AI RMF). NIST AI RMF MAP-3.1 - benefits documented - verifies the governance record's 'benefits_documented' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (NIST AI RMF). NIST AI RMF MAP-5.1 - impacts characterised - verifies the governance record's 'impact_assessment' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (NIST AI RMF). NIST AI RMF MEASURE-1.1 - metrics identified - verifies the governance record's 'metrics' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (NIST AI RMF). NIST AI RMF MEASURE-2.3 - performance evaluated - verifies the governance record's 'performance_eval' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (NIST AI RMF). NIST AI RMF MEASURE-2.7 - security & resilience tested - verifies the governance record's 'security_tested' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (NIST AI RMF). NIST AI RMF MEASURE-2.11 - fairness assessed - verifies the governance record's 'fairness_assessed' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (NIST AI RMF). NIST AI RMF MEASURE-4.1 - feedback channel - verifies the governance record's 'feedback_channel' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (NIST AI RMF). NIST AI RMF MANAGE-1.1 - risks prioritised - verifies the governance record's 'risk_priority' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (NIST AI RMF). NIST AI RMF MANAGE-2.2 - mitigation plan - verifies the governance record's 'mitigation_plan' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (NIST AI RMF). NIST AI RMF MANAGE-3.1 - third-party risks managed - verifies the governance record's 'third_party_managed' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (NIST AI RMF). NIST AI RMF MANAGE-4.1 - post-deployment monitoring - verifies the governance record's 'monitoring_log' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (UK Online Safety Act). OSA s.9 - illegal content risk assessment - verifies the governance record's 'illegal_content_ra' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (UK Online Safety Act). OSA s.10 - illegal content safety duties met - verifies the governance record's 'illegal_content_controls' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (UK Online Safety Act). OSA s.11 - children's access assessment - verifies the governance record's 'childrens_access_assessment' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (UK Online Safety Act). OSA s.12 - children's safety duties met - verifies the governance record's 'childrens_safety_controls' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (UK Online Safety Act). OSA s.12 - age assurance in place - verifies the governance record's 'age_assurance' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (UK Online Safety Act). OSA s.20 - reporting mechanism live - verifies the governance record's 'reporting_mechanism' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (UK Online Safety Act). OSA s.21 - complaints procedure - verifies the governance record's 'complaints_procedure' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (UK Online Safety Act). OSA s.22 - freedom of expression safeguards - verifies the governance record's 'expression_safeguards' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (UK Online Safety Act). OSA - CSEA detection measures - verifies the governance record's 'csea_measures' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (UK Online Safety Act). OSA - grooming-pattern flagging (no false 'safe') - verifies the governance record's 'grooming_flagging' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (UK Online Safety Act). OSA - terms of service clarity - verifies the governance record's 'terms_clarity' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (UK Online Safety Act). OSA s.77 - transparency report - verifies the governance record's 'transparency_report' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (UK Online Safety Act). OSA - senior manager accountable - verifies the governance record's 'named_safety_manager' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (UK Online Safety Act). OSA - record of safety measures kept - verifies the governance record's 'safety_record' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU Digital Services Act). DSA Art.14 - terms & conditions published - verifies the governance record's 'terms_published' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU Digital Services Act). DSA Art.16 - notice-and-action mechanism - verifies the governance record's 'notice_action' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU Digital Services Act). DSA Art.17 - statement of reasons recorded - verifies the governance record's 'statement_of_reasons' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU Digital Services Act). DSA Art.20 - internal complaint system - verifies the governance record's 'complaint_system' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU Digital Services Act). DSA Art.21 - out-of-court dispute route - verifies the governance record's 'dispute_route' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU Digital Services Act). DSA Art.22 - trusted flaggers honoured - verifies the governance record's 'trusted_flaggers' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU Digital Services Act). DSA Art.24 - transparency reporting - verifies the governance record's 'dsa_transparency_report' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU Digital Services Act). DSA Art.25 - no dark patterns - verifies the governance record's 'no_dark_patterns' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU Digital Services Act). DSA Art.26 - advertising transparency - verifies the governance record's 'ad_transparency' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU Digital Services Act). DSA Art.27 - recommender transparency - verifies the governance record's 'recommender_transparency' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU Digital Services Act). DSA Art.28 - protection of minors - verifies the governance record's 'minor_protection' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU Digital Services Act). DSA Art.34 - systemic risk assessment (VLOP) - verifies the governance record's 'systemic_risk_assessment' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU Digital Services Act). DSA Art.35 - risk mitigation measures (VLOP) - verifies the governance record's 'risk_mitigation' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (EU Digital Services Act). DSA Art.37 - independent audit (VLOP) - verifies the governance record's 'independent_audit' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.5.1 - information security policy - verifies the governance record's 'security_policy' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.5.7 - threat intelligence - verifies the governance record's 'threat_intel' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.5.9 - inventory of assets - verifies the governance record's 'asset_inventory' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.5.10 - acceptable use of assets - verifies the governance record's 'acceptable_use' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.5.15 - access control policy - verifies the governance record's 'access_control_policy' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.5.23 - cloud services security - verifies the governance record's 'cloud_security' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.5.30 - ICT readiness for continuity - verifies the governance record's 'continuity_readiness' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.6.3 - security awareness training - verifies the governance record's 'security_training' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.8.1 - user endpoint devices secured - verifies the governance record's 'endpoint_security' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.8.2 - privileged access managed - verifies the governance record's 'privileged_access' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.8.5 - secure authentication (MFA) - verifies the governance record's 'mfa' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.8.8 - vulnerability management - verifies the governance record's 'vuln_management' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.8.12 - data leakage prevention - verifies the governance record's 'dlp' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.8.13 - information backup - verifies the governance record's 'backup' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.8.15 - logging enabled - verifies the governance record's 'logging' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.8.16 - monitoring activities - verifies the governance record's 'monitoring' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.8.24 - use of cryptography - verifies the governance record's 'cryptography' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.8.25 - secure development lifecycle - verifies the governance record's 'secure_sdlc' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.8.28 - secure coding - verifies the governance record's 'secure_coding' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.5.24 - incident management planning - verifies the governance record's 'incident_plan' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.5.19 - supplier relationships security - verifies the governance record's 'supplier_security' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.5.31 - legal & contractual requirements - verifies the governance record's 'legal_requirements_log' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.5.34 - privacy & PII protection - verifies the governance record's 'pii_protection' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.8.9 - configuration management - verifies the governance record's 'config_management' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.8.20 - network security - verifies the governance record's 'network_security' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (ISO/IEC 27001). ISO 27001 A.8.23 - web filtering - verifies the governance record's 'web_filtering' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (SOC 2). SOC 2 CC1 - control environment / integrity - verifies the governance record's 'control_environment' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (SOC 2). SOC 2 CC2 - information & communication - verifies the governance record's 'info_communication' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (SOC 2). SOC 2 CC3 - risk assessment process - verifies the governance record's 'risk_assessment' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (SOC 2). SOC 2 CC4 - monitoring of controls - verifies the governance record's 'control_monitoring' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (SOC 2). SOC 2 CC5 - control activities defined - verifies the governance record's 'control_activities' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (SOC 2). SOC 2 CC6.1 - logical access controls - verifies the governance record's 'logical_access' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (SOC 2). SOC 2 CC6.6 - boundary protection - verifies the governance record's 'boundary_protection' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (SOC 2). SOC 2 CC6.7 - data transmission encrypted - verifies the governance record's 'transmission_encryption' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (SOC 2). SOC 2 CC7.1 - vulnerability detection - verifies the governance record's 'vuln_detection' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (SOC 2). SOC 2 CC7.2 - security incident monitoring - verifies the governance record's 'incident_monitoring' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (SOC 2). SOC 2 CC7.3 - incident response evaluated - verifies the governance record's 'incident_response' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (SOC 2). SOC 2 CC8.1 - change management - verifies the governance record's 'change_management' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (SOC 2). SOC 2 A1.2 - availability / capacity monitoring - verifies the governance record's 'availability_monitoring' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (SOC 2). SOC 2 C1.1 - confidential data identified - verifies the governance record's 'confidential_data_id' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (SOC 2). SOC 2 PI1.1 - processing integrity controls - verifies the governance record's 'processing_integrity' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (SOC 2). SOC 2 P1 - privacy notice & consent - verifies the governance record's 'privacy_consent' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (SOC 2). SOC 2 CC9.1 - risk mitigation for disruptions - verifies the governance record's 'disruption_mitigation' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (SOC 2). SOC 2 CC9.2 - vendor & third-party management - verifies the governance record's 'vendor_management' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (SOC 2). SOC 2 A1.1 - capacity planning - verifies the governance record's 'capacity_planning' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (SOC 2). SOC 2 C1.2 - confidential data disposal - verifies the governance record's 'confidential_disposal' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (FCA conduct). FCA PRIN - acting with integrity - verifies the governance record's 'integrity_attested' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (FCA conduct). FCA Consumer Duty - good outcomes evidenced - verifies the governance record's 'consumer_outcomes' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (FCA conduct). FCA Consumer Duty - vulnerable customer care - verifies the governance record's 'vulnerable_customer_care' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (FCA conduct). FCA - fair, clear, not misleading comms - verifies the governance record's 'fair_communications' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (FCA conduct). FCA SYSC - senior manager accountable (SMCR) - verifies the governance record's 'smcr_owner' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (FCA conduct). FCA SYSC - audit trail retained - verifies the governance record's 'audit_trail' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (FCA conduct). FCA - financial promotion approved - verifies the governance record's 'promotion_approved' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (FCA conduct). FCA - conflicts of interest managed - verifies the governance record's 'conflicts_managed' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (FCA conduct). FCA - AML / KYC checks completed - verifies the governance record's 'aml_kyc_done' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (FCA conduct). FCA - suitability / appropriateness assessed - verifies the governance record's 'suitability_assessed' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (FCA conduct). FCA - complaints handling (DISP) - verifies the governance record's 'complaints_handling' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (FCA conduct). FCA - operational resilience impact tolerance - verifies the governance record's 'impact_tolerance_set' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (FCA conduct). FCA - model risk governance - verifies the governance record's 'model_risk_governance' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (FCA conduct). FCA - record of advice / decision kept - verifies the governance record's 'advice_record' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (HIPAA Security Rule). HIPAA 164.308 - security management process - verifies the governance record's 'security_management' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (HIPAA Security Rule). HIPAA 164.308 - risk analysis performed - verifies the governance record's 'risk_analysis' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (HIPAA Security Rule). HIPAA 164.308 - workforce access authorisation - verifies the governance record's 'workforce_authorisation' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (HIPAA Security Rule). HIPAA 164.308 - security awareness training - verifies the governance record's 'security_awareness' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (HIPAA Security Rule). HIPAA 164.308 - contingency plan - verifies the governance record's 'contingency_plan' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (HIPAA Security Rule). HIPAA 164.310 - facility access controls - verifies the governance record's 'facility_access' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (HIPAA Security Rule). HIPAA 164.312 - unique user identification - verifies the governance record's 'unique_user_id' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (HIPAA Security Rule). HIPAA 164.312 - automatic logoff - verifies the governance record's 'auto_logoff' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (HIPAA Security Rule). HIPAA 164.312 - encryption of ePHI - verifies the governance record's 'ephi_encryption' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (HIPAA Security Rule). HIPAA 164.312 - audit controls / logs - verifies the governance record's 'audit_controls' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (HIPAA Security Rule). HIPAA 164.312 - integrity controls - verifies the governance record's 'integrity_controls' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (HIPAA Security Rule). HIPAA 164.312 - transmission security - verifies the governance record's 'transmission_security' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (HIPAA Security Rule). HIPAA 164.314 - business associate agreement - verifies the governance record's 'baa_in_place' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (HIPAA Security Rule). HIPAA 164.404 - breach notification process - verifies the governance record's 'breach_notification' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Conformance check (HIPAA Security Rule). HIPAA 164.502 - minimum necessary use - verifies the governance record's 'minimum_necessary' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| record | object | yes | The deployment's governance / decision record to check this control against. |
| reason | string | no | — |
| agent | string | no | — |
Free
$0 forever
- Every tool — any call limit is its publisher’s, not ours
- No card, and mcprush charges nothing for it
- Runs at its publisher’s own address — this marketplace is not in the path
- Nothing to cap, because mcprush bills nothing
What counts against your monthly calls
| Tool | Unit | Calls used | Out of the allowance |
|---|
Nothing here is billable: mcprush charges nothing to install sebbi.pro - seal every AI decision or to call it, at any volume.
Call allowance · this installenforced at the gateway
Monthly allowance, in calls
—
—
Alert at 80% · then the tool returns a normal MCP error
Used this month: —
—Grade not published
No rule-by-rule report on file for this release
Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.
This listing is an address its publisher runs, and you connect to it directly — this marketplace is not in the path. The scanner reads packages and public source, and an address is neither. So there is no grade — not a withheld one, an unmeasured one.
Release history
This is an address its publisher runs: which release it serves is theirs to choose, so there is nothing here to pin. The history below is for reading; the current release on file is 1.0.0.
1.0.0
undated
latestNo release note was published with this version.
—
no reviews yet
Who can review
One review per account, from a signed-in account that does not publish this listing. Nothing else is asked — you can say what you think before you install it. Publishers can reply once per review, and a review can be edited or deleted by whoever wrote it.
Sign in to write one
Any signed-in account that does not publish sebbi.pro - seal every AI decision can review it, once — before installing it or after. A review from an account that has installed it is marked as one.
No reviews yet
Nobody has reviewed this listing. The rating on the card is the mean of the reviews written here and nothing else, so there is no rating until somebody writes the first — which takes a signed-in account that does not publish it, and nothing else.