@grc-claw/ai-governance 0.8.0

package/dist/index.d.ts

@@ -0,0 +1,204 @@
+/**
+ * AIGovernance - EU AI Act compliance and AI risk management
+ *
+ * Provides comprehensive AI governance capabilities including:
+ * - AI system registration and inventory
+ * - Risk classification per EU AI Act
+ * - Model risk scoring
+ * - Bias detection and monitoring
+ * - Transparency and explainability tracking
+ * - Regulatory compliance mapping
+ */
+export interface AISystem {
+    id: string;
+    name: string;
+    description: string;
+    owner: string;
+    department: string;
+    useCase: string;
+    riskClass: 'unacceptable' | 'high' | 'limited' | 'minimal';
+    status: 'registered' | 'assessed' | 'approved' | 'deployed' | 'retired';
+    registrationDate: Date;
+    lastAssessment?: Date;
+    nextAssessment?: Date;
+    models: AIModel[];
+    documentation: AIDocumentation;
+}
+export interface AIModel {
+    id: string;
+    name: string;
+    type: 'llm' | 'ml' | 'dl' | 'rule_based' | 'hybrid';
+    version: string;
+    provider: string;
+    trainingData?: TrainingData;
+    performanceMetrics: ModelMetrics;
+    biasMetrics?: BiasMetrics;
+    explainabilityScore?: number;
+    lastUpdated: Date;
+}
+export interface TrainingData {
+    source: string;
+    size: string;
+    dateRange: {
+        start: Date;
+        end: Date;
+    };
+    demographics: Record<string, number>;
+    consentObtained: boolean;
+    dataProcessingAgreement: boolean;
+}
+export interface ModelMetrics {
+    accuracy: number;
+    precision: number;
+    recall: number;
+    f1Score: number;
+    latencyMs: number;
+    throughput: number;
+    lastEvaluated: Date;
+}
+export interface BiasMetrics {
+    demographicParity: number;
+    equalizedOdds: number;
+    calibration: number;
+    individualFairness: number;
+    lastEvaluated: Date;
+    protectedAttributes: string[];
+}
+export interface AIDocumentation {
+    purposeStatement: string;
+    intendedUse: string;
+    limitations: string[];
+    risksAndMitigations: RiskItem[];
+    monitoringPlan: string;
+    humanOversight: string;
+    dataGovernance: string;
+    technicalDocumentation: string;
+}
+export interface RiskItem {
+    id: string;
+    description: string;
+    likelihood: 'high' | 'medium' | 'low';
+    impact: 'high' | 'medium' | 'low';
+    mitigation: string;
+    status: 'open' | 'mitigated' | 'accepted';
+}
+export interface ComplianceAssessment {
+    id: string;
+    systemId: string;
+    assessmentDate: Date;
+    assessor: string;
+    overallScore: number;
+    requirements: RequirementAssessment[];
+    findings: AssessmentFinding[];
+    recommendations: string[];
+    nextAssessmentDate: Date;
+}
+export interface RequirementAssessment {
+    requirementId: string;
+    description: string;
+    status: 'compliant' | 'partially_compliant' | 'non_compliant' | 'not_applicable';
+    evidence: string[];
+    notes?: string;
+}
+export interface AssessmentFinding {
+    id: string;
+    severity: 'critical' | 'high' | 'medium' | 'low';
+    category: string;
+    description: string;
+    recommendation: string;
+    status: 'open' | 'in_remediation' | 'closed';
+}
+export interface AIUsageLog {
+    id: string;
+    systemId: string;
+    modelId: string;
+    timestamp: Date;
+    input: string;
+    output: string;
+    decision?: string;
+    humanReview: boolean;
+    outcome: 'approved' | 'rejected' | 'flagged' | 'pending';
+}
+export declare class AIGovernance {
+    private readonly options;
+    private systems;
+    private assessments;
+    private usageLogs;
+    constructor(options?: {
+        maxSystems?: number;
+        assessmentFrequencyDays?: number;
+        autoClassify?: boolean;
+    });
+    /**
+     * Register an AI system
+     */
+    registerSystem(system: AISystem): void;
+    /**
+     * Update an AI system
+     */
+    updateSystem(id: string, updates: Partial<AISystem>): void;
+    /**
+     * Get an AI system
+     */
+    getSystem(id: string): AISystem | undefined;
+    /**
+     * Get all AI systems
+     */
+    getSystems(filters?: {
+        riskClass?: string;
+        status?: string;
+        department?: string;
+    }): AISystem[];
+    /**
+     * Assess compliance for a system
+     */
+    assessCompliance(systemId: string, assessor: string, requirements: RequirementAssessment[]): ComplianceAssessment;
+    /**
+     * Get assessments for a system
+     */
+    getAssessments(systemId: string): ComplianceAssessment[];
+    /**
+     * Log AI usage
+     */
+    logUsage(log: AIUsageLog): void;
+    /**
+     * Get usage logs for a system
+     */
+    getUsageLogs(systemId: string, filters?: {
+        fromDate?: Date;
+        toDate?: Date;
+        outcome?: string;
+    }): AIUsageLog[];
+    /**
+     * Get AI governance dashboard data
+     */
+    getDashboardData(): {
+        totalSystems: number;
+        byRiskClass: Record<string, number>;
+        byStatus: Record<string, number>;
+        complianceStats: {
+            assessed: number;
+            compliant: number;
+            needsRemediation: number;
+        };
+        recentAssessments: ComplianceAssessment[];
+        upcomingAssessments: {
+            systemId: string;
+            systemName: string;
+            date: Date;
+        }[];
+    };
+    /**
+     * Classify risk level for an AI system
+     */
+    private classifyRisk;
+    /**
+     * Generate findings from requirements
+     */
+    private generateFindings;
+    /**
+     * Generate recommendations
+     */
+    private generateRecommendations;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;IAC3D,MAAM,EAAE,YAAY,GAAG,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;IACxE,gBAAgB,EAAE,IAAI,CAAC;IACvB,cAAc,CAAC,EAAE,IAAI,CAAC;IACtB,cAAc,CAAC,EAAE,IAAI,CAAC;IACtB,MAAM,EAAE,OAAO,EAAE,CAAC;IAClB,aAAa,EAAE,eAAe,CAAC;CAChC;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,KAAK,GAAG,IAAI,GAAG,IAAI,GAAG,YAAY,GAAG,QAAQ,CAAC;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,kBAAkB,EAAE,YAAY,CAAC;IACjC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,WAAW,EAAE,IAAI,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE;QAAE,KAAK,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,IAAI,CAAA;KAAE,CAAC;IACtC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,eAAe,EAAE,OAAO,CAAC;IACzB,uBAAuB,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,IAAI,CAAC;IACpB,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,mBAAmB,EAAE,QAAQ,EAAE,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACtC,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,UAAU,CAAC;CAC3C;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,IAAI,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,qBAAqB,EAAE,CAAC;IACtC,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,EAAE,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,WAAW,GAAG,qBAAqB,GAAG,eAAe,GAAG,gBAAgB,CAAC;IACjF,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,gBAAgB,GAAG,QAAQ,CAAC;CAC9C;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;CAC1D;AAED,qBAAa,YAAY;IAMrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAL1B,OAAO,CAAC,OAAO,CAAoC;IACnD,OAAO,CAAC,WAAW,CAAkD;IACrE,OAAO,CAAC,SAAS,CAAwC;gBAGtC,OAAO,GAAE;QACxB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,uBAAuB,CAAC,EAAE,MAAM,CAAC;QACjC,YAAY,CAAC,EAAE,OAAO,CAAC;KACnB;IAUR;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,QAAQ,GAAG,IAAI;IAetC;;OAEG;IACH,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI;IAO1D;;OAEG;IACH,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAI3C;;OAEG;IACH,UAAU,CAAC,OAAO,CAAC,EAAE;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,QAAQ,EAAE;IAkBd;;OAEG;IACH,gBAAgB,CACd,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,qBAAqB,EAAE,GACpC,oBAAoB;IAqCvB;;OAEG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB,EAAE;IAIxD;;OAEG;IACH,QAAQ,CAAC,GAAG,EAAE,UAAU,GAAG,IAAI;IAM/B;;OAEG;IACH,YAAY,CACV,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,EAAE,IAAI,CAAC;QAChB,MAAM,CAAC,EAAE,IAAI,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GACA,UAAU,EAAE;IAkBf;;OAEG;IACH,gBAAgB,IAAI;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,eAAe,EAAE;YACf,QAAQ,EAAE,MAAM,CAAC;YACjB,SAAS,EAAE,MAAM,CAAC;YAClB,gBAAgB,EAAE,MAAM,CAAC;SAC1B,CAAC;QACF,iBAAiB,EAAE,oBAAoB,EAAE,CAAC;QAC1C,mBAAmB,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,IAAI,CAAA;SAAE,EAAE,CAAC;KAC7E;IAsDD;;OAEG;IACH,OAAO,CAAC,YAAY;IAiCpB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA4BxB;;OAEG;IACH,OAAO,CAAC,uBAAuB;CAoBhC"}

package/dist/index.js

@@ -0,0 +1,270 @@
+"use strict";
+/**
+ * AIGovernance - EU AI Act compliance and AI risk management
+ *
+ * Provides comprehensive AI governance capabilities including:
+ * - AI system registration and inventory
+ * - Risk classification per EU AI Act
+ * - Model risk scoring
+ * - Bias detection and monitoring
+ * - Transparency and explainability tracking
+ * - Regulatory compliance mapping
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AIGovernance = void 0;
+class AIGovernance {
+    options;
+    systems = new Map();
+    assessments = new Map();
+    usageLogs = new Map();
+    constructor(options = {}) {
+        this.options = options;
+        this.options = {
+            maxSystems: 1000,
+            assessmentFrequencyDays: 90,
+            autoClassify: true,
+            ...options
+        };
+    }
+    /**
+     * Register an AI system
+     */
+    registerSystem(system) {
+        if (this.systems.size >= this.options.maxSystems) {
+            throw new Error('Maximum system limit reached');
+        }
+        // Auto-classify if enabled
+        if (this.options.autoClassify && !system.riskClass) {
+            system.riskClass = this.classifyRisk(system);
+        }
+        system.status = 'registered';
+        system.registrationDate = new Date();
+        this.systems.set(system.id, system);
+    }
+    /**
+     * Update an AI system
+     */
+    updateSystem(id, updates) {
+        const system = this.systems.get(id);
+        if (system) {
+            this.systems.set(id, { ...system, ...updates });
+        }
+    }
+    /**
+     * Get an AI system
+     */
+    getSystem(id) {
+        return this.systems.get(id);
+    }
+    /**
+     * Get all AI systems
+     */
+    getSystems(filters) {
+        let systems = Array.from(this.systems.values());
+        if (filters) {
+            if (filters.riskClass) {
+                systems = systems.filter(s => s.riskClass === filters.riskClass);
+            }
+            if (filters.status) {
+                systems = systems.filter(s => s.status === filters.status);
+            }
+            if (filters.department) {
+                systems = systems.filter(s => s.department === filters.department);
+            }
+        }
+        return systems;
+    }
+    /**
+     * Assess compliance for a system
+     */
+    assessCompliance(systemId, assessor, requirements) {
+        const system = this.systems.get(systemId);
+        if (!system) {
+            throw new Error(`System ${systemId} not found`);
+        }
+        const compliantCount = requirements.filter(r => r.status === 'compliant').length;
+        const partialCount = requirements.filter(r => r.status === 'partially_compliant').length;
+        const overallScore = ((compliantCount + partialCount * 0.5) / requirements.length) * 100;
+        const assessment = {
+            id: `assessment-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`,
+            systemId,
+            assessmentDate: new Date(),
+            assessor,
+            overallScore,
+            requirements,
+            findings: this.generateFindings(requirements),
+            recommendations: this.generateRecommendations(requirements),
+            nextAssessmentDate: new Date(Date.now() + this.options.assessmentFrequencyDays * 24 * 60 * 60 * 1000)
+        };
+        // Store assessment
+        const assessments = this.assessments.get(systemId) || [];
+        assessments.push(assessment);
+        this.assessments.set(systemId, assessments);
+        // Update system
+        system.lastAssessment = new Date();
+        system.nextAssessment = assessment.nextAssessmentDate;
+        system.status = overallScore >= 80 ? 'approved' : 'assessed';
+        return assessment;
+    }
+    /**
+     * Get assessments for a system
+     */
+    getAssessments(systemId) {
+        return this.assessments.get(systemId) || [];
+    }
+    /**
+     * Log AI usage
+     */
+    logUsage(log) {
+        const logs = this.usageLogs.get(log.systemId) || [];
+        logs.push(log);
+        this.usageLogs.set(log.systemId, logs);
+    }
+    /**
+     * Get usage logs for a system
+     */
+    getUsageLogs(systemId, filters) {
+        let logs = this.usageLogs.get(systemId) || [];
+        if (filters) {
+            if (filters.fromDate) {
+                logs = logs.filter(l => l.timestamp >= filters.fromDate);
+            }
+            if (filters.toDate) {
+                logs = logs.filter(l => l.timestamp <= filters.toDate);
+            }
+            if (filters.outcome) {
+                logs = logs.filter(l => l.outcome === filters.outcome);
+            }
+        }
+        return logs;
+    }
+    /**
+     * Get AI governance dashboard data
+     */
+    getDashboardData() {
+        const systems = Array.from(this.systems.values());
+        // Count by risk class
+        const byRiskClass = {};
+        systems.forEach(s => {
+            byRiskClass[s.riskClass] = (byRiskClass[s.riskClass] || 0) + 1;
+        });
+        // Count by status
+        const byStatus = {};
+        systems.forEach(s => {
+            byStatus[s.status] = (byStatus[s.status] || 0) + 1;
+        });
+        // Compliance stats
+        const assessedSystems = systems.filter(s => s.lastAssessment);
+        const compliantSystems = assessedSystems.filter(s => {
+            const assessments = this.assessments.get(s.id) || [];
+            const latest = assessments[assessments.length - 1];
+            return latest && latest.overallScore >= 80;
+        });
+        // Recent assessments
+        const allAssessments = Array.from(this.assessments.values()).flat();
+        const recentAssessments = allAssessments
+            .sort((a, b) => b.assessmentDate.getTime() - a.assessmentDate.getTime())
+            .slice(0, 10);
+        // Upcoming assessments
+        const upcomingAssessments = systems
+            .filter(s => s.nextAssessment)
+            .map(s => ({
+            systemId: s.id,
+            systemName: s.name,
+            date: s.nextAssessment
+        }))
+            .sort((a, b) => a.date.getTime() - b.date.getTime())
+            .slice(0, 10);
+        return {
+            totalSystems: systems.length,
+            byRiskClass,
+            byStatus,
+            complianceStats: {
+                assessed: assessedSystems.length,
+                compliant: compliantSystems.length,
+                needsRemediation: assessedSystems.length - compliantSystems.length
+            },
+            recentAssessments,
+            upcomingAssessments
+        };
+    }
+    /**
+     * Classify risk level for an AI system
+     */
+    classifyRisk(system) {
+        // EU AI Act risk classification logic
+        const highRiskUseCases = [
+            'credit_scoring',
+            'hiring',
+            'law_enforcement',
+            'migration',
+            'justice',
+            'democracy',
+            'safety',
+            'critical_infrastructure'
+        ];
+        const limitedRiskUseCases = [
+            'chatbot',
+            'emotion_recognition',
+            'biometric',
+            'deepfake'
+        ];
+        const useCaseLower = system.useCase.toLowerCase();
+        if (highRiskUseCases.some(uc => useCaseLower.includes(uc))) {
+            return 'high';
+        }
+        if (limitedRiskUseCases.some(uc => useCaseLower.includes(uc))) {
+            return 'limited';
+        }
+        return 'minimal';
+    }
+    /**
+     * Generate findings from requirements
+     */
+    generateFindings(requirements) {
+        const findings = [];
+        requirements.forEach(req => {
+            if (req.status === 'non_compliant') {
+                findings.push({
+                    id: `finding-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`,
+                    severity: 'high',
+                    category: 'compliance',
+                    description: `Non-compliant with requirement: ${req.description}`,
+                    recommendation: `Address gap for requirement ${req.requirementId}`,
+                    status: 'open'
+                });
+            }
+            else if (req.status === 'partially_compliant') {
+                findings.push({
+                    id: `finding-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`,
+                    severity: 'medium',
+                    category: 'compliance',
+                    description: `Partially compliant with requirement: ${req.description}`,
+                    recommendation: `Complete implementation for requirement ${req.requirementId}`,
+                    status: 'open'
+                });
+            }
+        });
+        return findings;
+    }
+    /**
+     * Generate recommendations
+     */
+    generateRecommendations(requirements) {
+        const recommendations = [];
+        const nonCompliant = requirements.filter(r => r.status === 'non_compliant');
+        const partial = requirements.filter(r => r.status === 'partially_compliant');
+        if (nonCompliant.length > 0) {
+            recommendations.push(`Address ${nonCompliant.length} non-compliant requirements immediately`);
+        }
+        if (partial.length > 0) {
+            recommendations.push(`Complete implementation for ${partial.length} partially compliant requirements`);
+        }
+        if (requirements.length > 0) {
+            recommendations.push('Schedule follow-up assessment within 90 days');
+        }
+        return recommendations;
+    }
+}
+exports.AIGovernance = AIGovernance;
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AAwHH,MAAa,YAAY;IAMJ;IALX,OAAO,GAA0B,IAAI,GAAG,EAAE,CAAC;IAC3C,WAAW,GAAwC,IAAI,GAAG,EAAE,CAAC;IAC7D,SAAS,GAA8B,IAAI,GAAG,EAAE,CAAC;IAEzD,YACmB,UAIb,EAAE;QAJW,YAAO,GAAP,OAAO,CAIlB;QAEN,IAAI,CAAC,OAAO,GAAG;YACb,UAAU,EAAE,IAAI;YAChB,uBAAuB,EAAE,EAAE;YAC3B,YAAY,EAAE,IAAI;YAClB,GAAG,OAAO;SACX,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,MAAgB;QAC7B,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,UAAW,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,2BAA2B;QAC3B,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACnD,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC;QAC7B,MAAM,CAAC,gBAAgB,GAAG,IAAI,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,EAAU,EAAE,OAA0B;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,EAAU;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,OAIV;QACC,IAAI,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAEhD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBACvB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,gBAAgB,CACd,QAAgB,EAChB,QAAgB,EAChB,YAAqC;QAErC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,UAAU,QAAQ,YAAY,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,cAAc,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM,CAAC;QACjF,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,qBAAqB,CAAC,CAAC,MAAM,CAAC;QACzF,MAAM,YAAY,GAAG,CAAC,CAAC,cAAc,GAAG,YAAY,GAAG,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC;QAEzF,MAAM,UAAU,GAAyB;YACvC,EAAE,EAAE,cAAc,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YACzE,QAAQ;YACR,cAAc,EAAE,IAAI,IAAI,EAAE;YAC1B,QAAQ;YACR,YAAY;YACZ,YAAY;YACZ,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC;YAC7C,eAAe,EAAE,IAAI,CAAC,uBAAuB,CAAC,YAAY,CAAC;YAC3D,kBAAkB,EAAE,IAAI,IAAI,CAC1B,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CACzE;SACF,CAAC;QAEF,mBAAmB;QACnB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACzD,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAE5C,gBAAgB;QAChB,MAAM,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;QACnC,MAAM,CAAC,cAAc,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACtD,MAAM,CAAC,MAAM,GAAG,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;QAE7D,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,QAAgB;QAC7B,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,GAAe;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,YAAY,CACV,QAAgB,EAChB,OAIC;QAED,IAAI,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAE9C,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,QAAS,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,MAAO,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,gBAAgB;QAYd,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAElD,sBAAsB;QACtB,MAAM,WAAW,GAA2B,EAAE,CAAC;QAC/C,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;YAClB,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,kBAAkB;QAClB,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAC5C,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;YAClB,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,mBAAmB;QACnB,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;QAC9D,MAAM,gBAAgB,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;YAClD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACnD,OAAO,MAAM,IAAI,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,qBAAqB;QACrB,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,MAAM,iBAAiB,GAAG,cAAc;aACrC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;aACvE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEhB,uBAAuB;QACvB,MAAM,mBAAmB,GAAG,OAAO;aAChC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;aAC7B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACT,QAAQ,EAAE,CAAC,CAAC,EAAE;YACd,UAAU,EAAE,CAAC,CAAC,IAAI;YAClB,IAAI,EAAE,CAAC,CAAC,cAAe;SACxB,CAAC,CAAC;aACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;aACnD,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEhB,OAAO;YACL,YAAY,EAAE,OAAO,CAAC,MAAM;YAC5B,WAAW;YACX,QAAQ;YACR,eAAe,EAAE;gBACf,QAAQ,EAAE,eAAe,CAAC,MAAM;gBAChC,SAAS,EAAE,gBAAgB,CAAC,MAAM;gBAClC,gBAAgB,EAAE,eAAe,CAAC,MAAM,GAAG,gBAAgB,CAAC,MAAM;aACnE;YACD,iBAAiB;YACjB,mBAAmB;SACpB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,MAAgB;QACnC,sCAAsC;QACtC,MAAM,gBAAgB,GAAG;YACvB,gBAAgB;YAChB,QAAQ;YACR,iBAAiB;YACjB,WAAW;YACX,SAAS;YACT,WAAW;YACX,QAAQ;YACR,yBAAyB;SAC1B,CAAC;QAEF,MAAM,mBAAmB,GAAG;YAC1B,SAAS;YACT,qBAAqB;YACrB,WAAW;YACX,UAAU;SACX,CAAC;QAEF,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAElD,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC3D,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC9D,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,YAAqC;QAC5D,MAAM,QAAQ,GAAwB,EAAE,CAAC;QAEzC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;YACzB,IAAI,GAAG,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;gBACnC,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;oBACtE,QAAQ,EAAE,MAAM;oBAChB,QAAQ,EAAE,YAAY;oBACtB,WAAW,EAAE,mCAAmC,GAAG,CAAC,WAAW,EAAE;oBACjE,cAAc,EAAE,+BAA+B,GAAG,CAAC,aAAa,EAAE;oBAClE,MAAM,EAAE,MAAM;iBACf,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;gBAChD,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;oBACtE,QAAQ,EAAE,QAAQ;oBAClB,QAAQ,EAAE,YAAY;oBACtB,WAAW,EAAE,yCAAyC,GAAG,CAAC,WAAW,EAAE;oBACvE,cAAc,EAAE,2CAA2C,GAAG,CAAC,aAAa,EAAE;oBAC9E,MAAM,EAAE,MAAM;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,uBAAuB,CAAC,YAAqC;QACnE,MAAM,eAAe,GAAa,EAAE,CAAC;QAErC,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,qBAAqB,CAAC,CAAC;QAE7E,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,eAAe,CAAC,IAAI,CAAC,WAAW,YAAY,CAAC,MAAM,yCAAyC,CAAC,CAAC;QAChG,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,eAAe,CAAC,IAAI,CAAC,+BAA+B,OAAO,CAAC,MAAM,mCAAmC,CAAC,CAAC;QACzG,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,eAAe,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;CACF;AAtUD,oCAsUC"}

package/package.json

@@ -0,0 +1,19 @@
+{
+  "name": "@grc-claw/ai-governance",
+  "version": "0.8.0",
+  "description": "EU AI Act compliance and AI risk management",
+  "license": "MIT",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "node --test dist/**/*.test.js"
+  },
+  "dependencies": {},
+  "devDependencies": {
+    "typescript": "^5.7.0"
+  }
+}

package/src/index.ts

@@ -0,0 +1,457 @@
+/**
+ * AIGovernance - EU AI Act compliance and AI risk management
+ * 
+ * Provides comprehensive AI governance capabilities including:
+ * - AI system registration and inventory
+ * - Risk classification per EU AI Act
+ * - Model risk scoring
+ * - Bias detection and monitoring
+ * - Transparency and explainability tracking
+ * - Regulatory compliance mapping
+ */
+
+export interface AISystem {
+  id: string;
+  name: string;
+  description: string;
+  owner: string;
+  department: string;
+  useCase: string;
+  riskClass: 'unacceptable' | 'high' | 'limited' | 'minimal';
+  status: 'registered' | 'assessed' | 'approved' | 'deployed' | 'retired';
+  registrationDate: Date;
+  lastAssessment?: Date;
+  nextAssessment?: Date;
+  models: AIModel[];
+  documentation: AIDocumentation;
+}
+
+export interface AIModel {
+  id: string;
+  name: string;
+  type: 'llm' | 'ml' | 'dl' | 'rule_based' | 'hybrid';
+  version: string;
+  provider: string;
+  trainingData?: TrainingData;
+  performanceMetrics: ModelMetrics;
+  biasMetrics?: BiasMetrics;
+  explainabilityScore?: number; // 0-100
+  lastUpdated: Date;
+}
+
+export interface TrainingData {
+  source: string;
+  size: string;
+  dateRange: { start: Date; end: Date };
+  demographics: Record<string, number>;
+  consentObtained: boolean;
+  dataProcessingAgreement: boolean;
+}
+
+export interface ModelMetrics {
+  accuracy: number;
+  precision: number;
+  recall: number;
+  f1Score: number;
+  latencyMs: number;
+  throughput: number;
+  lastEvaluated: Date;
+}
+
+export interface BiasMetrics {
+  demographicParity: number;
+  equalizedOdds: number;
+  calibration: number;
+  individualFairness: number;
+  lastEvaluated: Date;
+  protectedAttributes: string[];
+}
+
+export interface AIDocumentation {
+  purposeStatement: string;
+  intendedUse: string;
+  limitations: string[];
+  risksAndMitigations: RiskItem[];
+  monitoringPlan: string;
+  humanOversight: string;
+  dataGovernance: string;
+  technicalDocumentation: string;
+}
+
+export interface RiskItem {
+  id: string;
+  description: string;
+  likelihood: 'high' | 'medium' | 'low';
+  impact: 'high' | 'medium' | 'low';
+  mitigation: string;
+  status: 'open' | 'mitigated' | 'accepted';
+}
+
+export interface ComplianceAssessment {
+  id: string;
+  systemId: string;
+  assessmentDate: Date;
+  assessor: string;
+  overallScore: number; // 0-100
+  requirements: RequirementAssessment[];
+  findings: AssessmentFinding[];
+  recommendations: string[];
+  nextAssessmentDate: Date;
+}
+
+export interface RequirementAssessment {
+  requirementId: string;
+  description: string;
+  status: 'compliant' | 'partially_compliant' | 'non_compliant' | 'not_applicable';
+  evidence: string[];
+  notes?: string;
+}
+
+export interface AssessmentFinding {
+  id: string;
+  severity: 'critical' | 'high' | 'medium' | 'low';
+  category: string;
+  description: string;
+  recommendation: string;
+  status: 'open' | 'in_remediation' | 'closed';
+}
+
+export interface AIUsageLog {
+  id: string;
+  systemId: string;
+  modelId: string;
+  timestamp: Date;
+  input: string;
+  output: string;
+  decision?: string;
+  humanReview: boolean;
+  outcome: 'approved' | 'rejected' | 'flagged' | 'pending';
+}
+
+export class AIGovernance {
+  private systems: Map<string, AISystem> = new Map();
+  private assessments: Map<string, ComplianceAssessment[]> = new Map();
+  private usageLogs: Map<string, AIUsageLog[]> = new Map();
+
+  constructor(
+    private readonly options: {
+      maxSystems?: number;
+      assessmentFrequencyDays?: number;
+      autoClassify?: boolean;
+    } = {}
+  ) {
+    this.options = {
+      maxSystems: 1000,
+      assessmentFrequencyDays: 90,
+      autoClassify: true,
+      ...options
+    };
+  }
+
+  /**
+   * Register an AI system
+   */
+  registerSystem(system: AISystem): void {
+    if (this.systems.size >= this.options.maxSystems!) {
+      throw new Error('Maximum system limit reached');
+    }
+
+    // Auto-classify if enabled
+    if (this.options.autoClassify && !system.riskClass) {
+      system.riskClass = this.classifyRisk(system);
+    }
+
+    system.status = 'registered';
+    system.registrationDate = new Date();
+    this.systems.set(system.id, system);
+  }
+
+  /**
+   * Update an AI system
+   */
+  updateSystem(id: string, updates: Partial<AISystem>): void {
+    const system = this.systems.get(id);
+    if (system) {
+      this.systems.set(id, { ...system, ...updates });
+    }
+  }
+
+  /**
+   * Get an AI system
+   */
+  getSystem(id: string): AISystem | undefined {
+    return this.systems.get(id);
+  }
+
+  /**
+   * Get all AI systems
+   */
+  getSystems(filters?: {
+    riskClass?: string;
+    status?: string;
+    department?: string;
+  }): AISystem[] {
+    let systems = Array.from(this.systems.values());
+
+    if (filters) {
+      if (filters.riskClass) {
+        systems = systems.filter(s => s.riskClass === filters.riskClass);
+      }
+      if (filters.status) {
+        systems = systems.filter(s => s.status === filters.status);
+      }
+      if (filters.department) {
+        systems = systems.filter(s => s.department === filters.department);
+      }
+    }
+
+    return systems;
+  }
+
+  /**
+   * Assess compliance for a system
+   */
+  assessCompliance(
+    systemId: string, 
+    assessor: string,
+    requirements: RequirementAssessment[]
+  ): ComplianceAssessment {
+    const system = this.systems.get(systemId);
+    if (!system) {
+      throw new Error(`System ${systemId} not found`);
+    }
+
+    const compliantCount = requirements.filter(r => r.status === 'compliant').length;
+    const partialCount = requirements.filter(r => r.status === 'partially_compliant').length;
+    const overallScore = ((compliantCount + partialCount * 0.5) / requirements.length) * 100;
+
+    const assessment: ComplianceAssessment = {
+      id: `assessment-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`,
+      systemId,
+      assessmentDate: new Date(),
+      assessor,
+      overallScore,
+      requirements,
+      findings: this.generateFindings(requirements),
+      recommendations: this.generateRecommendations(requirements),
+      nextAssessmentDate: new Date(
+        Date.now() + this.options.assessmentFrequencyDays! * 24 * 60 * 60 * 1000
+      )
+    };
+
+    // Store assessment
+    const assessments = this.assessments.get(systemId) || [];
+    assessments.push(assessment);
+    this.assessments.set(systemId, assessments);
+
+    // Update system
+    system.lastAssessment = new Date();
+    system.nextAssessment = assessment.nextAssessmentDate;
+    system.status = overallScore >= 80 ? 'approved' : 'assessed';
+
+    return assessment;
+  }
+
+  /**
+   * Get assessments for a system
+   */
+  getAssessments(systemId: string): ComplianceAssessment[] {
+    return this.assessments.get(systemId) || [];
+  }
+
+  /**
+   * Log AI usage
+   */
+  logUsage(log: AIUsageLog): void {
+    const logs = this.usageLogs.get(log.systemId) || [];
+    logs.push(log);
+    this.usageLogs.set(log.systemId, logs);
+  }
+
+  /**
+   * Get usage logs for a system
+   */
+  getUsageLogs(
+    systemId: string, 
+    filters?: {
+      fromDate?: Date;
+      toDate?: Date;
+      outcome?: string;
+    }
+  ): AIUsageLog[] {
+    let logs = this.usageLogs.get(systemId) || [];
+
+    if (filters) {
+      if (filters.fromDate) {
+        logs = logs.filter(l => l.timestamp >= filters.fromDate!);
+      }
+      if (filters.toDate) {
+        logs = logs.filter(l => l.timestamp <= filters.toDate!);
+      }
+      if (filters.outcome) {
+        logs = logs.filter(l => l.outcome === filters.outcome);
+      }
+    }
+
+    return logs;
+  }
+
+  /**
+   * Get AI governance dashboard data
+   */
+  getDashboardData(): {
+    totalSystems: number;
+    byRiskClass: Record<string, number>;
+    byStatus: Record<string, number>;
+    complianceStats: {
+      assessed: number;
+      compliant: number;
+      needsRemediation: number;
+    };
+    recentAssessments: ComplianceAssessment[];
+    upcomingAssessments: { systemId: string; systemName: string; date: Date }[];
+  } {
+    const systems = Array.from(this.systems.values());
+
+    // Count by risk class
+    const byRiskClass: Record<string, number> = {};
+    systems.forEach(s => {
+      byRiskClass[s.riskClass] = (byRiskClass[s.riskClass] || 0) + 1;
+    });
+
+    // Count by status
+    const byStatus: Record<string, number> = {};
+    systems.forEach(s => {
+      byStatus[s.status] = (byStatus[s.status] || 0) + 1;
+    });
+
+    // Compliance stats
+    const assessedSystems = systems.filter(s => s.lastAssessment);
+    const compliantSystems = assessedSystems.filter(s => {
+      const assessments = this.assessments.get(s.id) || [];
+      const latest = assessments[assessments.length - 1];
+      return latest && latest.overallScore >= 80;
+    });
+
+    // Recent assessments
+    const allAssessments = Array.from(this.assessments.values()).flat();
+    const recentAssessments = allAssessments
+      .sort((a, b) => b.assessmentDate.getTime() - a.assessmentDate.getTime())
+      .slice(0, 10);
+
+    // Upcoming assessments
+    const upcomingAssessments = systems
+      .filter(s => s.nextAssessment)
+      .map(s => ({
+        systemId: s.id,
+        systemName: s.name,
+        date: s.nextAssessment!
+      }))
+      .sort((a, b) => a.date.getTime() - b.date.getTime())
+      .slice(0, 10);
+
+    return {
+      totalSystems: systems.length,
+      byRiskClass,
+      byStatus,
+      complianceStats: {
+        assessed: assessedSystems.length,
+        compliant: compliantSystems.length,
+        needsRemediation: assessedSystems.length - compliantSystems.length
+      },
+      recentAssessments,
+      upcomingAssessments
+    };
+  }
+
+  /**
+   * Classify risk level for an AI system
+   */
+  private classifyRisk(system: AISystem): AISystem['riskClass'] {
+    // EU AI Act risk classification logic
+    const highRiskUseCases = [
+      'credit_scoring',
+      'hiring',
+      'law_enforcement',
+      'migration',
+      'justice',
+      'democracy',
+      'safety',
+      'critical_infrastructure'
+    ];
+
+    const limitedRiskUseCases = [
+      'chatbot',
+      'emotion_recognition',
+      'biometric',
+      'deepfake'
+    ];
+
+    const useCaseLower = system.useCase.toLowerCase();
+
+    if (highRiskUseCases.some(uc => useCaseLower.includes(uc))) {
+      return 'high';
+    }
+
+    if (limitedRiskUseCases.some(uc => useCaseLower.includes(uc))) {
+      return 'limited';
+    }
+
+    return 'minimal';
+  }
+
+  /**
+   * Generate findings from requirements
+   */
+  private generateFindings(requirements: RequirementAssessment[]): AssessmentFinding[] {
+    const findings: AssessmentFinding[] = [];
+
+    requirements.forEach(req => {
+      if (req.status === 'non_compliant') {
+        findings.push({
+          id: `finding-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`,
+          severity: 'high',
+          category: 'compliance',
+          description: `Non-compliant with requirement: ${req.description}`,
+          recommendation: `Address gap for requirement ${req.requirementId}`,
+          status: 'open'
+        });
+      } else if (req.status === 'partially_compliant') {
+        findings.push({
+          id: `finding-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`,
+          severity: 'medium',
+          category: 'compliance',
+          description: `Partially compliant with requirement: ${req.description}`,
+          recommendation: `Complete implementation for requirement ${req.requirementId}`,
+          status: 'open'
+        });
+      }
+    });
+
+    return findings;
+  }
+
+  /**
+   * Generate recommendations
+   */
+  private generateRecommendations(requirements: RequirementAssessment[]): string[] {
+    const recommendations: string[] = [];
+
+    const nonCompliant = requirements.filter(r => r.status === 'non_compliant');
+    const partial = requirements.filter(r => r.status === 'partially_compliant');
+
+    if (nonCompliant.length > 0) {
+      recommendations.push(`Address ${nonCompliant.length} non-compliant requirements immediately`);
+    }
+
+    if (partial.length > 0) {
+      recommendations.push(`Complete implementation for ${partial.length} partially compliant requirements`);
+    }
+
+    if (requirements.length > 0) {
+      recommendations.push('Schedule follow-up assessment within 90 days');
+    }
+
+    return recommendations;
+  }
+}

package/tsconfig.json

@@ -0,0 +1,9 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "rootDir": "src",
+    "outDir": "dist",
+    "composite": true
+  },
+  "include": ["src/**/*"]
+}