{
      "tool_id": "art-144-nis2-incident-significance-scorer",
      "tool_version": "1.0.0",
      "display_name": "NIS2 Incident Significance Scorer (Art. 23 Reporting Threshold)",
      "mcp_name": "score_nis2_incident_significance",
      "mandate_type": "compliance_mandate",
      "wave": 26,
      "gpu": false,
      "url": "https://ainumbers.co/chaingraph/art-144-nis2-incident-significance-scorer.html",
      "description": "Score whether an operational event meets the NIS2 Art. 23 significant-incident threshold (any of: service disruption ≥1h, ≥1,000 affected users, estimated financial loss ≥€100k, third-party cascade, malicious act, cross-border impact). Emits significance verdict (not_significant / significant / critical), fires 24h/72h/30d reporting clocks, and identifies recipient authorities. Root stage of nis2-incident-and-supply-chain-readiness chain.",
      "input_schema_ref": "chaingraph/art-144-nis2-incident-significance-scorer.html#manifest",
      "consumes": [],
      "feeds": [
        "art-145-nis2-ict-supply-chain-diligence-scorer"
      ],
      "status": "live",
      "conformance_fixtures": true,
      "compute_capability": "server",
      "compute_images": [{"system":"sha256-source","image_id":"sha256:3cedfccda08a549a70693a65306d63f4593eb7be89533f956fd171400b76bfd2","valid_from":"2026-07-10"},{"system":"risc0","image_id":"sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6","valid_from":"2026-06-28"}],
      "compute_proof": {
        "type": "ZkVmReceipt",
        "system": "risc0",
        "receiptFormat": "groth16-bn254",
        "imageId": "sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6",
        "seal": "AqW7WMgUgifeR3BVHlhGahd1Mdgpls5sPEzajkmdJXcW8hXE2CeNWYmtEGf5EZVVmdlyoHLxSn6dPRPJrffvBSSdYWxfU335fSlKftQyxWK/t/421x/UMa4s2NqJgchaLjT0NvL7E4E18b6Edq1jXJYh/Qncrfvo2jhKQ3SnWiApBPkFpLRNTw+VOEUVpd/KzgzqAKLnTmKg6L7M8e3fbxBSbby3XP1gEd1/tBZfzyUzX/ZARNiT2HWa6PngHWpHHyb+ScYN9GieVg2MMb4cRqri2PrsBLJ8DXp/sEzt06kaxqJyBu8za2xsRJDhyYQFIivSBcIDxihh1IMlqbppZQ==",
        "journal": {
          "chaingraph_version": "0.4.0",
          "kernel_digest": "sha256:4b3d54970b0fb586ea451d0b55674b3322e00fd974a1f1ed54ade8444ca4d385",
          "output": {
            "early_warning_deadline_hours": 24,
            "estimated_affected_users": 5000,
            "estimated_financial_loss_eur": 500000,
            "final_report_deadline_days": 30,
            "notification_deadline_hours": 72,
            "recipients": [
              "national_csirt",
              "supervisory_authority",
              "sector_regulator"
            ],
            "reporting_required": true,
            "service_disruption_hours": 4,
            "significance_verdict": "critical",
            "triggering_factors": [
              "service_disruption",
              "significant_user_impact",
              "considerable_financial_loss"
            ]
          }
        }
      },
      "export_capability": [
        "json",
        "vc"
      ]
    }