{
  "tool_id": "art-140-cra-vuln-reporting-readiness",
  "kernel_id": "art-140-cra-vuln-reporting-readiness",
  "display_name": "CRA Vulnerability Reporting Readiness (Art. 14)",
  "tool_version": "1.0.0",
  "mandate_type": "compliance_mandate",
  "purpose": "Assesses EU CRA Article 14 vulnerability reporting readiness: actively_exploited_detection, 24-hour early_warning_24h_process, 72-hour notification_72h_process, csirt_enisa_endpoint_configured, and coordinated_disclosure_policy. Obligation date: 11 Sep 2026. Penalty: up to €15M or 2.5% global turnover. Emits vuln_reporting_ready verdict with PDF export. Terminal stage of cra-product-conformance chain.",
  "control_description": "Assesses EU CRA Article 14 vulnerability reporting readiness: actively_exploited_detection, 24-hour early_warning_24h_process, 72-hour notification_72h_process, csirt_enisa_endpoint_configured, and coordinated_disclosure_policy. Obligation date: 11 Sep 2026. Penalty: up to €15M or 2.5% global turnover. Emits vuln_reporting_ready verdict with PDF export. Terminal stage of cra-product-conformance chain.",
  "declared_inputs": [
    "art-139-cra-annex1-completeness-checker"
  ],
  "declared_outputs": [],
  "kernel_digest": "sha256:bd443ab6d0d8f0150fedaa0fa676cc6fd7655c2d9045e6d713350a5fb87af0ba",
  "trust_label": "deferred -- deterministic source published, zkVM proof not yet generated",
  "data_vintage": "2026-07-10",
  "last_validated": "2026-07-10",
  "conformance_fixtures_vendored": true,
  "compute_proof_ready": "ready",
  "wave": 25,
  "source_url": "https://ainumbers.co/chaingraph/art-140-cra-vuln-reporting-readiness.html",
  "generated_at": "2026-07-25T20:02:55.601Z"
}