Home / Method
How the record is made
One record, four outputs
The record is built once and replayed to the pages, the kit, the API and the free check. A change to one row changes every output, and the refresh fails loudly when the source moves.
What is in data/rule.json
The record holds the public ISO facts, the life-cycle table, 47 oversight units, 18 terms, six themes, four markets, the answers and the free-check logic. Every unit carries the held citation, the requirement in our words, what it means for oversight, the evidence, the gaps and the questions. Every field has a source pointer.
Where the FDIS text is silent, the page says "not stated in the text". The FDIS body is not public, so no page invents a clause number, a clause heading or a quotation.
From record to page
- The held exports are read from the compliance graph: ISO/IEC 42001:2023, ISO/IEC 42005:2025, the EU AI Act and NIST AI RMF 1.0.
- The authored units are composed with the export facts and hashed.
- The page generator renders every page from the same record.
- The kit builder renders the PDF, CSV and XLSX from the same record.
- The free check computes from the same scope and unit set.
There are zero language-model calls at runtime. The pages are static HTML, the check is arithmetic in the browser, and the kit is generated at build time from the record.
What the change watch proves
scripts/refresh re-fetches the official ISO page, compares the stage, the stage date, the title, the committee, the ICS and the page count, and re-hashes the record. If any of them changed, it exits non-zero and prints the diff. A fetch failure is a failure, never a pass.
The same diff is what the paid watch sends. The refresh is the mechanism, not a marketing claim: it fails loudly when the source moves.
Paraphrase, never reproduce
Every requirement, evidence line and note is written in our own words. Before release, the authored text is tested with the strict seven-word overlap check against the held source, so no run of seven words is shared with the licensed text. Only control titles, defined terms and data element names stay verbatim.
The FDIS body is not held and is not quoted. The EU AI Act is public law, and its requirements are still stated in our words and cited to the article.
What this method cannot do
- It cannot state the FDIS clause text, because the body is not public.
- It cannot decide whether a system is high-risk under the EU AI Act; that is a legal classification on the system facts.
- It cannot certify, audit or give legal advice.
- It cannot promise that a page will be cited by a search engine or an AI answer; most citations are decided off-site.