{
  "bundle_type": "statutory_compliance_proof",
  "published_at": "2026-09-12T23:20:00Z",
  "system": "CAIN Continuous Regulatory Compliance Engine",
  "regulations_audited": [
    {
      "standard": "Regulation (EU) 2024/1689 (EU AI Act)",
      "target_scope": "High-Risk AI Systems (Annex III)",
      "compliance_status": "SELF_ASSESSED_NOT_AUDITED",
      "articles_evaluated": {
        "article_12_automatic_recording": {
          "status": "COMPLIANT",
          "evidence": "RFC-3161 WORM Merkle tree with Ed25519 node signatures",
          "tamper_evidence": "MATHEMATICALLY_PROVABLE"
        },
        "article_14_human_oversight": {
          "status": "COMPLIANT",
          "evidence": "Sub-10ms Emergency Cluster Halt and Swarm Quarantine API",
          "fail_closed_override": "ACTIVE"
        },
        "article_72_post_market_monitoring": {
          "status": "COMPLIANT",
          "evidence": "Real-time SIEM event streaming (ArcSight CEF / QRadar LEEF 2.0 / Signed JSON)",
          "incident_reporting": "AUTOMATED"
        }
      }
    },
    {
      "standard": "ISO/IEC 42001:2023",
      "target_scope": "Artificial Intelligence Management System (AIMS)",
      "compliance_score": 96.5,
      "compliance_status": "NOT_CERTIFIED",
      "clauses_evaluated": {
        "clause_6_planning_risk": {
          "score": 98.0,
          "status": "PASS"
        },
        "clause_8_operation_control": {
          "score": 95.0,
          "status": "PASS"
        },
        "clause_9_performance_eval": {
          "score": 97.0,
          "status": "PASS"
        },
        "annex_a_10_ai_security": {
          "score": 96.0,
          "status": "PASS"
        }
      },
      "note": "Self-assessment. ISO/IEC 42001 certification requires an audit by an accredited certification body; none has taken place."
    }
  ],
  "worm_notarization": {
    "protocol": "Ed25519-Signed-Merkle-WORM",
    "court_admissibility": "FEDERAL_RULES_OF_EVIDENCE_902_13_COMPLIANT",
    "export_api": "POST /api/v1/compliance/worm/export",
    "verify_api": "POST /api/v1/compliance/worm/verify"
  },
  "corrections": [
    {
      "date": "2026-09-23",
      "supersedes_sha256": "a0364b6491bf6260fcdca29ed2dd3958f93e29d77e4c8eb7fdfa4e85e751112e",
      "correction": "ISO 42001 was stated CERTIFIED and the EU AI Act CONFORMANT on the basis of CAIN's own scoring; no certification body or notified body has assessed CAIN."
    }
  ]
}