{
  "tool_id": "art-139-cra-annex1-completeness-checker",
  "kernel_id": "art-139-cra-annex1-completeness-checker",
  "display_name": "CRA Annex I Completeness Checker",
  "tool_version": "1.0.0",
  "mandate_type": "compliance_mandate",
  "purpose": "Checks EU CRA Annex I Part I essential cybersecurity requirements: sbom_present, sbom_machine_readable, top_level_deps_covered, vuln_handling_policy_present, secure_by_default, and a valid conformity_route (self_assessment | eu_type_examination | full_quality_assurance). Emits annex1_complete verdict and ordered gap list with PDF export. Middle stage of cra-product-conformance chain.",
  "control_description": "Checks EU CRA Annex I Part I essential cybersecurity requirements: sbom_present, sbom_machine_readable, top_level_deps_covered, vuln_handling_policy_present, secure_by_default, and a valid conformity_route (self_assessment | eu_type_examination | full_quality_assurance). Emits annex1_complete verdict and ordered gap list with PDF export. Middle stage of cra-product-conformance chain.",
  "declared_inputs": [
    "art-138-spdx-sbom-validator"
  ],
  "declared_outputs": [
    "art-140-cra-vuln-reporting-readiness"
  ],
  "kernel_digest": "sha256:d12d16825c51f2c5a7e2f5dad4bdf03556bd296c907f8bd5fb8681cc2b6ff663",
  "trust_label": "deferred -- deterministic source published, zkVM proof not yet generated",
  "data_vintage": "2026-07-10",
  "last_validated": "2026-07-10",
  "conformance_fixtures_vendored": true,
  "compute_proof_ready": "ready",
  "wave": 25,
  "source_url": "https://ainumbers.co/chaingraph/art-139-cra-annex1-completeness-checker.html",
  "generated_at": "2026-07-25T20:02:55.601Z"
}