{
      "tool_id": "art-66-fria-postmarket-monitoring-builder",
      "tool_version": "1.0.0",
      "display_name": "FRIA & Post-Market Monitoring Plan Builder",
      "mcp_name": "build_fria_monitoring_plan",
      "mandate_type": "compliance_mandate",
      "wave": 15,
      "gpu": false,
      "url": "https://ainumbers.co/chaingraph/art-66-fria-postmarket-monitoring-builder.html",
      "description": "Builds an Art 27 Fundamental Rights Impact Assessment (FRIA) + Art 72 post-market monitoring plan + Art 12 logging + Art 14 human-oversight design + Art 73 serious-incident reporting path for a bank or insurer deploying a high-risk AI system. Prepare-ahead: 2 Dec 2027 (verify Digital Omnibus). Decision-support draft.",
      "input_schema_ref": "chaingraph/art-66-fria-postmarket-monitoring-builder.html#manifest",
      "consumes": [
        "art-64-ai-act-highrisk-fit-diagnostic"
      ],
      "feeds": [
        "451-sr11-7-model-risk-management-gap-assessor",
        "cry-05-agent-action-audit-trail-aggregator"
      ],
      "status": "live",
      "conformance_fixtures": false,
      "compute_capability": "server",
      "compute_images": [{"system":"sha256-source","image_id":"sha256:3aff37d79ff68de2a055c1d32bdabb4376e3fe242656398b2c1d35ca48331cc0","valid_from":"2026-07-10"},{"system":"risc0","image_id":"sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6","valid_from":"2026-06-28"}],
      "compute_proof": {
        "type": "ZkVmReceipt",
        "system": "risc0",
        "receiptFormat": "groth16-bn254",
        "imageId": "sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6",
        "seal": "A+8iAubZ5381Z6XSHGoi2xWCVQpV2wImrunE+luQVTELUZpHG/J5JlrMs6EC+m9K+mkcaG1UtQk7xLM0XFOQVgQTg6r6qvVialouuZ95JQ77wdqoqyKgpRvMqJlwpKyuHVvgooka1tTYCPNN9xD6dQJEzcmRAqrcqeQzbzEw8v8h9f6rxeHKqOQqZN18XSaYB+EF02yAxg3xTydFs1Hx6wOkLmOo5Ur7a4JVuK8E+Ue4N+42rPBWvcm9wCBUTIhNI3kCNvfYkOdOiCZzX3qsV8zGxolBUsHYS77sCvhNs4ok+og6ZXCgRyGC2D7H9Csjy84OsXCUmjVDzpmOwer9Hg==",
        "journal": {
          "chaingraph_version": "0.4.0",
          "kernel_digest": "sha256:3aff37d79ff68de2a055c1d32bdabb4376e3fe242656398b2c1d35ca48331cc0",
          "output": {
            "affected_rights": [
              "Non-discrimination and equality (Art 21 EU Charter)",
              "Data protection and privacy (Art 8 EU Charter, GDPR)",
              "Human dignity (Art 1 EU Charter)",
              "Access to essential services (housing, financial services)"
            ],
            "applicable_date_note": "Art 27 FRIA + Art 72 post-market monitoring: Digital Omnibus proposes 2 Dec 2027 (provisional agreement 7 May 2026, pending formal adoption). Verify status against Official Journal. Original date: 2 Aug 2026.",
            "deployment": {
              "affected_persons": "consumers",
              "automation_level": "human-review",
              "use_case": "credit-scoring"
            },
            "fria_gaps": [
              {
                "element": "purpose",
                "label": "Description of intended use, deployment context, and decision impact (Art 27)",
                "remediation": "Complete: Description of intended use, deployment context, and decision impact (Art 27). Verify requirement against EU AI Act Art 27 consolidated text.",
                "status": "not-started"
              },
              {
                "element": "persons",
                "label": "Categories of affected persons (consumers, workers, applicants) and population size (Art 27)",
                "remediation": "Complete: Categories of affected persons (consumers, workers, applicants) and population size (Art 27). Verify requirement against EU AI Act Art 27 consolidated text.",
                "status": "not-started"
              },
              {
                "element": "rights",
                "label": "Fundamental rights and non-discrimination risks identification (Art 27)",
                "remediation": "Complete: Fundamental rights and non-discrimination risks identification (Art 27). Verify requirement against EU AI Act Art 27 consolidated text.",
                "status": "not-started"
              },
              {
                "element": "oversight",
                "label": "Human-oversight measures and escalation procedures (Arts 14+27)",
                "remediation": "Complete: Human-oversight measures and escalation procedures (Arts 14+27). Verify requirement against EU AI Act Art 27 consolidated text.",
                "status": "not-started"
              },
              {
                "element": "mitigation",
                "label": "Risk mitigation measures and residual-risk acceptance (Art 27)",
                "remediation": "Complete: Risk mitigation measures and residual-risk acceptance (Art 27). Verify requirement against EU AI Act Art 27 consolidated text.",
                "status": "not-started"
              },
              {
                "element": "governance",
                "label": "Internal governance: responsible function, review cadence, sign-off (Art 27)",
                "remediation": "Complete: Internal governance: responsible function, review cadence, sign-off (Art 27). Verify requirement against EU AI Act Art 27 consolidated text.",
                "status": "not-started"
              }
            ],
            "fria_grade": "F",
            "fria_score": 0,
            "incident_path": {
              "mapped": false,
              "note": "DECISION-SUPPORT ONLY — verify Art 73 notification requirements, deadlines, and the designated market-surveillance authority (MSA) for your jurisdiction against consolidated AI Act Art 73 text. Deadlines vary by incident severity.",
              "recommendation": "Map the Art 73 serious-incident reporting path now: identify your national market-surveillance authority, determine notification deadline (verify against Art 73 text), assign internal incident-triage function."
            },
            "logging_verdict": "FAIL — no logging. Art 12 requires automatic logging of events enabling post-hoc review.",
            "monitoring_plan_skeleton": {
              "applicable_date_note": "Art 72 post-market monitoring obligations: verify target date (Digital Omnibus: 2 Dec 2027; else 2 Aug 2026) against current Official Journal status.",
              "metrics": [
                {
                  "action": "Model review and re-validation",
                  "frequency": "Monthly",
                  "metric": "Model accuracy on live data vs validation baseline",
                  "threshold": "Alert if >5% drift"
                },
                {
                  "action": "Fairness audit + Art 10 data review",
                  "frequency": "Quarterly",
                  "metric": "Adverse decision rate by demographic group",
                  "threshold": "Alert on statistically significant disparity"
                },
                {
                  "action": "Art 73 notification within deadline — verify current deadline against consolidated text",
                  "frequency": "Continuous",
                  "metric": "Serious-incident count (Art 73)",
                  "threshold": "Any serious incident"
                },
                {
                  "action": "Oversight design review",
                  "frequency": "Monthly",
                  "metric": "Human-oversight intervention rate",
                  "threshold": "Alert if intervention rate > 20% (review automation level)"
                },
                {
                  "action": "Logging system repair + gap audit",
                  "frequency": "Weekly",
                  "metric": "Logging completeness",
                  "threshold": "100% — zero gaps"
                }
              ],
              "note": "DECISION-SUPPORT SKELETON — not a legally-compliant Art 72 post-market monitoring plan. Review and complete with qualified compliance staff.",
              "responsible_function": "[Assign: Model Risk / AI Governance / Chief Risk Officer]",
              "review_cadence": "Annual full review + ad-hoc review on material change (new use case, model retrain, regulatory update)"
            },
            "note": "PREPARE-AHEAD — Decision-support draft. FRIA/monitoring outputs are NOT legal assessments or compliance certificates. Complete with qualified legal and compliance staff. Verify all Art references against EU AI Act (Reg. 2024/1689) consolidated text at https://eur-lex.europa.eu/eli/reg/2024/1689/oj.",
            "overall_score": 12.5,
            "oversight_verdict": "WARNING — oversight is nominal; upgrade to meaningful review with documented escalation path (Art 14)"
          }
        }
      },
      "export_capability": [
        "pdf",
        "xlsx"
      ]
    }