Rule set sha256:5f51c649da68
rego-art55-1b-001
One rule of the rule set with digest 5f51c649da68af0ecaa5c68cf661a38494e679fd256373f2ef9f959f54671693. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.
rules/rego/complyedge/gpai/risk_mitigation.rego
- Citation
- Regulation (EU) 2024/1689, Article 55(1)(b)
- Condition
- A general-purpose AI model with systemic risk released or run without assessing and mitigating its systemic risks.
- Layer 1 detects
- as adjacent words, "systemic risk" (also "systemic-risk"), then gpai or model, then without or no, then "risk assessment", "risk mitigation" or "mitigation measure"; and fail, neglect or omit (any ending), then "to", then assess or mitigate, then "systemic risk". It matches wording, not meaning: it misses a release without risk assessment told in other words, and it fires on text that only names it, such as a refusal. Whether a provider fails to assess and mitigate systemic risks is judged in Layer 2.
- Condition type
- deterministic
- Status in the file
- approved