{
  "tool_id": "art-467-dora-incident-classifier",
  "tool_version": "1.0.0",
  "display_name": "DORA ICT Incident Classifier & Reporting Clock",
  "mcp_name": "classify_dora_ict_incident_and_clock_deadlines",
  "mandate_type": "attestation_mandate",
  "wave": 74,
  "gpu": false,
  "url": "https://ainumbers.co/chaingraph/art-467-dora-incident-classifier.html",
  "description": "Classifies an ICT-related incident as major or non-major under DORA (EU 2022/2554) Art. 18, applying the published RTS (EU 2024/1772) numeric criteria (clients affected %, duration, geographical spread, data losses, economic impact, critical-services impact, reputational impact), then starts the DORA Art. 19 reporting clock (4-hour initial notification, 72-hour intermediate report, 1-calendar-month final report, all from classification) once classified major. Follows the art-428-cyber-incident-clock deadline-clock pattern for the EU DORA regime; see that node for the analogous US banking/SEC/NYDFS clock. Not a duplicate of the existing art-09-dora-incident-classifier (earlier draft-RTS citation, no notification-clock link, infrastructure_mandate) -- art-467 cites the final 2024 RTS/ITS package and is built to the attestation-clock pattern; the overlap between the two is flagged for review, not hidden. This node classifies and computes deadlines only; it does not itself transmit, file, or submit any regulatory notification, and it is not legal advice.",
  "input_schema_ref": "chaingraph/art-467-dora-incident-classifier.html#manifest",
  "deadline": null,
  "deadline_note": "DORA (EU) 2022/2554 in force January 2025; incident-classification/reporting obligations are ongoing, not a one-time deadline.",
  "consumes": [],
  "feeds": [],
  "status": "live",
  "conformance_fixtures": true,
  "compute_capability": "server",
  "compute_images": [
    {
      "system": "sha256-source",
      "image_id": "sha256:2f4fe65161e59aee68e9609258e251c1a571a671f2167a00a2d0dc1c514ac4a7",
      "valid_from": "2026-07-24"
    },
    {
      "system": "risc0",
      "image_id": "sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6",
      "valid_from": "2026-07-24"
    }
  ],
  "compute_proof_ready": "ready",
  "export_capability": [
    "json"
  ],
  "compute_proof": {
    "type": "ZkVmReceipt",
    "system": "risc0",
    "receiptFormat": "groth16-bn254",
    "imageId": "sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6",
    "seal": "L9gTFTrDTsiZ9UwLpdHCrVbxwgHSD7bQrDxZDjc0Dbod/JZrMw1NBxh0iksyVA9fSRtuRRW9vPjdoOMOvIErPBjXJKi+QSDlyxME15TjJ+e5N7zQbLylb4yz00pHfXWTGY3oGlQrE07WaRxP3aScD5gu/zD8ES32Q/9KnLgjCikQPxdMI4b6A+NLoIoppgdzDu61mqlsi6YgJqDgu78F+ykUL8lbzaM4om12N2Pb0gxn5iJVFyHrkvO4A3wbvTW5J/SuJB3Lsamube6mYX4cXGs3R7Ry8Z6vXCzrghI7LeQMEs46Sb4KEKHb+Ln7OeChF26s3tse62EKrGNfE2xSQw==",
    "journal": {
      "chaingraph_version": "0.4.0",
      "kernel_digest": "sha256:2f4fe65161e59aee68e9609258e251c1a571a671f2167a00a2d0dc1c514ac4a7",
      "output": {
        "criteria_detail": [
          {
            "article": "DORA Art. 18(1)(a); RTS (EU) 2024/1772 clients-affected threshold",
            "criterion_id": "clients_affected",
            "met": false,
            "value": "2% (threshold >=10%)"
          },
          {
            "article": "DORA Art. 18(1)(b); RTS (EU) 2024/1772 duration threshold",
            "criterion_id": "duration",
            "met": false,
            "value": "30 min (threshold >=1440 min)"
          },
          {
            "article": "DORA Art. 18(1)(c); RTS (EU) 2024/1772 geographical-spread threshold",
            "criterion_id": "geographical_spread",
            "met": false,
            "value": "1 member state(s) (threshold >=2)"
          },
          {
            "article": "DORA Art. 18(1)(d); RTS (EU) 2024/1772 data-losses criterion (confidentiality/integrity/availability impact)",
            "criterion_id": "data_losses",
            "met": false,
            "value": "No data loss reported"
          },
          {
            "article": "DORA Art. 18(1)(e); RTS (EU) 2024/1772 economic-impact threshold",
            "criterion_id": "economic_impact",
            "met": false,
            "value": "EUR 5000 (threshold >=EUR 100000)"
          },
          {
            "article": "DORA Art. 18(1)(f); RTS (EU) 2024/1772 criticality-of-services criterion",
            "criterion_id": "critical_services_affected",
            "met": false,
            "value": "No critical/important function affected"
          },
          {
            "article": "DORA Art. 18(1)(g); RTS (EU) 2024/1772 reputational-impact criterion",
            "criterion_id": "reputational_impact",
            "met": false,
            "value": "No reputational impact reported"
          }
        ],
        "incident_id": "INC-2026-0100",
        "major_incident": false,
        "note": "Deterministic DORA (Art. 18) major-incident classification over caller-declared severity dimensions, plus a DORA Art. 19 reporting-clock (initial/intermediate/final) once classified major. See art-428-cyber-incident-clock.kernel.mjs for the analogous US notification-clock pattern. This kernel classifies and computes deadlines only; it does not itself transmit, file, or submit any regulatory notification, and it is not legal advice. Criticality of the affected function/provider (critical_services_affected) is a caller-supplied input, not computed or judged here.",
        "qualifying_criteria": [],
        "reporting_clock": null,
        "table_source": "DORA (EU) 2022/2554 Art. 18 (classification criteria) + Art. 19 (reporting obligations/timelines); Commission Delegated Regulation (EU) 2024/1772 (RTS on classification criteria for major ICT-related incidents and significant cyber threats); Commission Implementing Regulation (EU) 2025/302 (ITS on standard forms/templates and timelines for major-incident reports). Numeric thresholds pinned at MODERATE confidence -- verify against final consolidated RTS/ITS text at legal review before relying on this verdict for an actual filing.",
        "table_version": "DORA-RTS-2024-1772-CLASSIFICATION+ITS-2025-302-TIMELINES-2026-07",
        "verdict": "NON_MAJOR"
      }
    }
  }
}