bmad-plus 0.7.4 → 0.8.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +450 -407
- package/LICENSE +21 -0
- package/README.md +555 -446
- package/osint-agent-package/README.md +88 -88
- package/osint-agent-package/SETUP_KEYS.md +108 -108
- package/osint-agent-package/agents/osint-investigator.md +80 -80
- package/osint-agent-package/install.ps1 +87 -87
- package/osint-agent-package/install.sh +76 -76
- package/osint-agent-package/skills/bmad-osint-investigate/SKILL.md +147 -147
- package/osint-agent-package/skills/bmad-osint-investigate/osint/SKILL.md +452 -452
- package/osint-agent-package/skills/bmad-osint-investigate/osint/assets/dossier-template.md +116 -116
- package/osint-agent-package/skills/bmad-osint-investigate/osint/references/content-extraction.md +100 -100
- package/osint-agent-package/skills/bmad-osint-investigate/osint/references/enrichment-databases-fr.md +148 -148
- package/osint-agent-package/skills/bmad-osint-investigate/osint/references/platforms.md +130 -130
- package/osint-agent-package/skills/bmad-osint-investigate/osint/references/psychoprofile.md +69 -69
- package/osint-agent-package/skills/bmad-osint-investigate/osint/references/tools.md +281 -281
- package/osint-agent-package/skills/bmad-osint-investigate/osint/scripts/_http.py +101 -101
- package/osint-agent-package/skills/bmad-osint-investigate/osint/scripts/apify.py +266 -260
- package/osint-agent-package/skills/bmad-osint-investigate/osint/scripts/brightdata.py +101 -101
- package/osint-agent-package/skills/bmad-osint-investigate/osint/scripts/diagnose.py +141 -141
- package/osint-agent-package/skills/bmad-osint-investigate/osint/scripts/exa.py +79 -79
- package/osint-agent-package/skills/bmad-osint-investigate/osint/scripts/jina.py +71 -71
- package/osint-agent-package/skills/bmad-osint-investigate/osint/scripts/mcp-client.py +136 -136
- package/osint-agent-package/skills/bmad-osint-investigate/osint/scripts/parallel.py +85 -85
- package/osint-agent-package/skills/bmad-osint-investigate/osint/scripts/perplexity.py +102 -102
- package/osint-agent-package/skills/bmad-osint-investigate/osint/scripts/tavily.py +72 -72
- package/osint-agent-package/skills/bmad-osint-investigate/osint/scripts/volley.py +208 -208
- package/osint-agent-package/skills/bmad-osint-investigator/SKILL.md +15 -15
- package/package.json +62 -57
- package/readme-international/README.de.md +576 -426
- package/readme-international/README.es.md +578 -518
- package/readme-international/README.fr.md +576 -516
- package/src/bmad-plus/agents/agent-architect-dev/SKILL.md +96 -96
- package/src/bmad-plus/agents/agent-architect-dev/bmad-skill-manifest.yaml +13 -13
- package/src/bmad-plus/agents/agent-maker/SKILL.md +201 -201
- package/src/bmad-plus/agents/agent-maker/bmad-skill-manifest.yaml +13 -13
- package/src/bmad-plus/agents/agent-orchestrator/SKILL.md +137 -137
- package/src/bmad-plus/agents/agent-orchestrator/bmad-skill-manifest.yaml +13 -13
- package/src/bmad-plus/agents/agent-quality/SKILL.md +83 -83
- package/src/bmad-plus/agents/agent-quality/bmad-skill-manifest.yaml +13 -13
- package/src/bmad-plus/agents/agent-shadow/SKILL.md +71 -71
- package/src/bmad-plus/agents/agent-shadow/bmad-skill-manifest.yaml +13 -13
- package/src/bmad-plus/agents/agent-strategist/SKILL.md +80 -80
- package/src/bmad-plus/agents/agent-strategist/bmad-skill-manifest.yaml +13 -13
- package/src/bmad-plus/agents/pack-animated/animated-website-agent.md +325 -325
- package/src/bmad-plus/agents/pack-animated/templates/animated-website-workflow.md +55 -55
- package/src/bmad-plus/agents/pack-backup/backup-agent.md +71 -71
- package/src/bmad-plus/agents/pack-backup/templates/backup-workflow.md +51 -51
- package/src/bmad-plus/agents/pack-seo/SKILL.md +171 -171
- package/src/bmad-plus/agents/pack-seo/checklist.md +140 -140
- package/src/bmad-plus/agents/pack-seo/pagespeed-playbook.md +320 -320
- package/src/bmad-plus/agents/pack-seo/ref/audit-schema.json +187 -187
- package/src/bmad-plus/agents/pack-seo/ref/cwv-thresholds.md +87 -87
- package/src/bmad-plus/agents/pack-seo/ref/eeat-criteria.md +123 -123
- package/src/bmad-plus/agents/pack-seo/ref/geo-signals.md +167 -167
- package/src/bmad-plus/agents/pack-seo/ref/hreflang-rules.md +153 -153
- package/src/bmad-plus/agents/pack-seo/ref/quality-gates.md +133 -133
- package/src/bmad-plus/agents/pack-seo/ref/schema-catalog.md +91 -91
- package/src/bmad-plus/agents/pack-seo/ref/schema-templates.json +356 -356
- package/src/bmad-plus/agents/pack-seo/seo-chief.md +294 -294
- package/src/bmad-plus/agents/pack-seo/seo-judge.md +241 -241
- package/src/bmad-plus/agents/pack-seo/seo-scout.md +171 -171
- package/src/bmad-plus/agents/pack-seo/templates/seo-audit-workflow.md +241 -241
- package/src/bmad-plus/data/role-triggers.yaml +209 -209
- package/src/bmad-plus/module-help.csv +10 -10
- package/src/bmad-plus/module.yaml +283 -280
- package/src/bmad-plus/packs/pack-animated/animated-website-agent.md +325 -0
- package/src/bmad-plus/packs/pack-animated/templates/animated-website-workflow.md +55 -0
- package/src/bmad-plus/packs/pack-backup/backup-agent.md +71 -0
- package/src/bmad-plus/packs/pack-backup/templates/backup-workflow.md +51 -0
- package/src/bmad-plus/packs/pack-dev-studio/README.md +162 -162
- package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/analyst-agent.md +73 -73
- package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/document-project.md +61 -61
- package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/domain-research.md +95 -95
- package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/market-research.md +95 -95
- package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/prfaq.md +134 -134
- package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/product-brief.md +80 -80
- package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/tech-writer-agent.md +73 -73
- package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/technical-research.md +95 -95
- package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/architect-agent.md +73 -73
- package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/create-architecture.md +73 -73
- package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/create-epics-stories.md +92 -92
- package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/generate-project-context.md +80 -80
- package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/implementation-readiness.md +90 -90
- package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-01-init.md +153 -153
- package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-01b-continue.md +173 -173
- package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-02-context.md +224 -224
- package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-03-starter.md +329 -329
- package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-04-decisions.md +318 -318
- package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-05-patterns.md +359 -359
- package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-06-structure.md +379 -379
- package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-07-validation.md +361 -361
- package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-08-complete.md +81 -81
- package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/checkpoint-preview.md +67 -67
- package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/code-review-steps/step-01-gather-context.md +85 -85
- package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/code-review-steps/step-02-review.md +35 -35
- package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/code-review-steps/step-03-triage.md +49 -49
- package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/code-review-steps/step-04-present.md +131 -131
- package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/code-review.md +89 -89
- package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/correct-course.md +300 -300
- package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/create-story.md +428 -428
- package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/dev-agent.md +73 -73
- package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/dev-story-checklist.md +80 -80
- package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/dev-story.md +484 -484
- package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/investigate.md +193 -193
- package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/qa-e2e-tests.md +175 -175
- package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/quick-dev.md +110 -110
- package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/retrospective.md +1511 -1511
- package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/sprint-planning.md +298 -298
- package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/sprint-status.md +296 -296
- package/src/bmad-plus/packs/pack-dev-studio/categories/planning/create-prd.md +29 -29
- package/src/bmad-plus/packs/pack-dev-studio/categories/planning/create-ux-design.md +74 -74
- package/src/bmad-plus/packs/pack-dev-studio/categories/planning/edit-prd.md +29 -29
- package/src/bmad-plus/packs/pack-dev-studio/categories/planning/pm-agent.md +73 -73
- package/src/bmad-plus/packs/pack-dev-studio/categories/planning/prd.md +89 -89
- package/src/bmad-plus/packs/pack-dev-studio/categories/planning/ux-designer-agent.md +73 -73
- package/src/bmad-plus/packs/pack-dev-studio/categories/planning/validate-prd.md +29 -29
- package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/advanced-elicitation.md +141 -141
- package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/adversarial-review.md +37 -37
- package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/bmad-help.md +75 -75
- package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/brainstorming.md +6 -6
- package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/customize.md +110 -110
- package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/distillator.md +176 -176
- package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/edge-case-hunter.md +67 -67
- package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/editorial-review-prose.md +86 -86
- package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/editorial-review-structure.md +179 -179
- package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/index-docs.md +66 -66
- package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/party-mode.md +127 -127
- package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/shard-doc.md +105 -105
- package/src/bmad-plus/packs/pack-dev-studio/dev-studio-orchestrator.md +120 -120
- package/src/bmad-plus/packs/pack-dev-studio/shared/architecture-decision-template.md +12 -12
- package/src/bmad-plus/packs/pack-dev-studio/shared/bwml-spec.md +328 -328
- package/src/bmad-plus/packs/pack-dev-studio/shared/module-help.csv +32 -32
- package/src/bmad-plus/packs/pack-dev-studio/upstream-sync.yaml +81 -81
- package/src/bmad-plus/packs/pack-memory/README.md +106 -106
- package/src/bmad-plus/packs/pack-memory/memory-orchestrator.md +79 -79
- package/src/bmad-plus/packs/pack-memory/shared/karpathy-guardrails.md +86 -86
- package/src/bmad-plus/packs/pack-memory/shared/memory-protocol.md +143 -143
- package/src/bmad-plus/packs/pack-memory/templates/context.md +39 -39
- package/src/bmad-plus/packs/pack-memory/templates/decisions.md +25 -25
- package/src/bmad-plus/packs/pack-memory/templates/identity.yaml +39 -39
- package/src/bmad-plus/packs/pack-memory/templates/lessons.md +31 -31
- package/src/bmad-plus/packs/pack-memory/templates/patterns.md +24 -24
- package/src/bmad-plus/packs/pack-memory/templates/session-handoff.md +25 -25
- package/src/bmad-plus/packs/pack-memory/zecher-agent.md +157 -157
- package/src/bmad-plus/packs/pack-seo/SKILL.md +171 -0
- package/src/bmad-plus/packs/pack-seo/checklist.md +140 -0
- package/src/bmad-plus/packs/pack-seo/pagespeed-playbook.md +320 -0
- package/src/bmad-plus/packs/pack-seo/ref/audit-schema.json +187 -0
- package/src/bmad-plus/packs/pack-seo/ref/cwv-thresholds.md +87 -0
- package/src/bmad-plus/packs/pack-seo/ref/eeat-criteria.md +123 -0
- package/src/bmad-plus/packs/pack-seo/ref/geo-signals.md +167 -0
- package/src/bmad-plus/packs/pack-seo/ref/hreflang-rules.md +153 -0
- package/src/bmad-plus/packs/pack-seo/ref/quality-gates.md +133 -0
- package/src/bmad-plus/packs/pack-seo/ref/schema-catalog.md +91 -0
- package/src/bmad-plus/packs/pack-seo/ref/schema-templates.json +356 -0
- package/src/bmad-plus/packs/pack-seo/seo-chief.md +294 -0
- package/src/bmad-plus/packs/pack-seo/seo-judge.md +241 -0
- package/src/bmad-plus/packs/pack-seo/seo-scout.md +171 -0
- package/src/bmad-plus/packs/pack-seo/templates/seo-audit-workflow.md +241 -0
- package/src/bmad-plus/packs/pack-shield/README.md +110 -110
- package/src/bmad-plus/packs/pack-shield/categories/accessibility-esg/csrd-agent.md +262 -262
- package/src/bmad-plus/packs/pack-shield/categories/accessibility-esg/section508-agent.md +179 -179
- package/src/bmad-plus/packs/pack-shield/categories/accessibility-esg/wcag-agent.md +201 -201
- package/src/bmad-plus/packs/pack-shield/categories/ai-governance/eu-ai-act-agent.md +97 -97
- package/src/bmad-plus/packs/pack-shield/categories/ai-governance/iso42001-agent.md +251 -251
- package/src/bmad-plus/packs/pack-shield/categories/ai-governance/nist-ai-rmf-agent.md +133 -133
- package/src/bmad-plus/packs/pack-shield/categories/cybersecurity/cis-controls-agent.md +221 -221
- package/src/bmad-plus/packs/pack-shield/categories/cybersecurity/ism-agent.md +150 -150
- package/src/bmad-plus/packs/pack-shield/categories/cybersecurity/iso27001-agent.md +167 -167
- package/src/bmad-plus/packs/pack-shield/categories/cybersecurity/nis2-agent.md +83 -83
- package/src/bmad-plus/packs/pack-shield/categories/cybersecurity/nist-800-53-agent.md +250 -250
- package/src/bmad-plus/packs/pack-shield/categories/cybersecurity/nist-csf-agent.md +218 -218
- package/src/bmad-plus/packs/pack-shield/categories/data-privacy/ccpa-agent.md +94 -94
- package/src/bmad-plus/packs/pack-shield/categories/data-privacy/dpdpa-agent.md +136 -136
- package/src/bmad-plus/packs/pack-shield/categories/data-privacy/gdpr-agent.md +296 -296
- package/src/bmad-plus/packs/pack-shield/categories/data-privacy/iso27701-agent.md +134 -134
- package/src/bmad-plus/packs/pack-shield/categories/data-privacy/lgpd-agent.md +129 -129
- package/src/bmad-plus/packs/pack-shield/categories/defense-export/cmmc-agent.md +127 -127
- package/src/bmad-plus/packs/pack-shield/categories/defense-export/ear-agent.md +272 -272
- package/src/bmad-plus/packs/pack-shield/categories/defense-export/itar-agent.md +202 -202
- package/src/bmad-plus/packs/pack-shield/categories/defense-export/tsa-agent.md +367 -367
- package/src/bmad-plus/packs/pack-shield/categories/industry-compliance/dora-agent.md +510 -510
- package/src/bmad-plus/packs/pack-shield/categories/industry-compliance/fedramp-agent.md +247 -247
- package/src/bmad-plus/packs/pack-shield/categories/industry-compliance/hipaa-agent.md +173 -173
- package/src/bmad-plus/packs/pack-shield/categories/industry-compliance/pci-dss-agent.md +239 -239
- package/src/bmad-plus/packs/pack-shield/categories/industry-compliance/soc2-agent.md +266 -266
- package/src/bmad-plus/packs/pack-shield/categories/industry-compliance/swift-csp-agent.md +164 -164
- package/src/bmad-plus/packs/pack-shield/categories/workflows/ai-act-classifier.md +131 -131
- package/src/bmad-plus/packs/pack-shield/categories/workflows/ai-act-fria.md +155 -155
- package/src/bmad-plus/packs/pack-shield/categories/workflows/ai-act-incidents.md +187 -187
- package/src/bmad-plus/packs/pack-shield/categories/workflows/ai-act-roles.md +113 -113
- package/src/bmad-plus/packs/pack-shield/categories/workflows/breach-sentinel.md +197 -197
- package/src/bmad-plus/packs/pack-shield/categories/workflows/cookie-policy-gen.md +180 -180
- package/src/bmad-plus/packs/pack-shield/categories/workflows/dpia-sentinel.md +235 -235
- package/src/bmad-plus/packs/pack-shield/categories/workflows/legitimate-interest.md +159 -159
- package/src/bmad-plus/packs/pack-shield/categories/workflows/privacy-advisor.md +133 -133
- package/src/bmad-plus/packs/pack-shield/categories/workflows/privacy-notice-gen.md +160 -160
- package/src/bmad-plus/packs/pack-shield/categories/workflows/privacy-policy-gen.md +135 -135
- package/src/bmad-plus/packs/pack-shield/references/ccpa/ccpa-gdpr-comparison.md +117 -117
- package/src/bmad-plus/packs/pack-shield/references/ccpa/consumer-rights-workflows.md +177 -177
- package/src/bmad-plus/packs/pack-shield/references/cis-controls/framework-mappings.md +162 -162
- package/src/bmad-plus/packs/pack-shield/references/cis-controls/implementation-guidance.md +235 -235
- package/src/bmad-plus/packs/pack-shield/references/cis-controls/safeguards-detail.md +252 -252
- package/src/bmad-plus/packs/pack-shield/references/cmmc/cmmc-assessment.md +170 -170
- package/src/bmad-plus/packs/pack-shield/references/cmmc/cmmc-levels.md +113 -113
- package/src/bmad-plus/packs/pack-shield/references/cmmc/cmmc-practices.md +211 -211
- package/src/bmad-plus/packs/pack-shield/references/csrd/compliance-program.md +281 -281
- package/src/bmad-plus/packs/pack-shield/references/csrd/double-materiality.md +253 -253
- package/src/bmad-plus/packs/pack-shield/references/csrd/esrs-standards.md +401 -401
- package/src/bmad-plus/packs/pack-shield/references/dora/article-reference.md +441 -441
- package/src/bmad-plus/packs/pack-shield/references/dora/incident-classification.md +297 -297
- package/src/bmad-plus/packs/pack-shield/references/dora/rts-its-guide.md +306 -306
- package/src/bmad-plus/packs/pack-shield/references/dora/third-party-risk.md +349 -349
- package/src/bmad-plus/packs/pack-shield/references/dpdpa/gdpr-comparison.md +173 -173
- package/src/bmad-plus/packs/pack-shield/references/dpdpa/rights-and-obligations.md +426 -426
- package/src/bmad-plus/packs/pack-shield/references/dpdpa/rules-2025.md +599 -599
- package/src/bmad-plus/packs/pack-shield/references/dpdpa/sections-reference.md +319 -319
- package/src/bmad-plus/packs/pack-shield/references/ear/ccl-eccn-guide.md +250 -250
- package/src/bmad-plus/packs/pack-shield/references/ear/compliance-program.md +280 -280
- package/src/bmad-plus/packs/pack-shield/references/ear/license-exceptions.md +207 -207
- package/src/bmad-plus/packs/pack-shield/references/eu-ai-act/gpai-governance.md +267 -267
- package/src/bmad-plus/packs/pack-shield/references/eu-ai-act/obligations-high-risk.md +287 -287
- package/src/bmad-plus/packs/pack-shield/references/eu-ai-act/risk-classification.md +182 -182
- package/src/bmad-plus/packs/pack-shield/references/fedramp/appendices-guide.md +209 -209
- package/src/bmad-plus/packs/pack-shield/references/fedramp/control-families.md +281 -281
- package/src/bmad-plus/packs/pack-shield/references/fedramp/poam-guide.md +93 -93
- package/src/bmad-plus/packs/pack-shield/references/fedramp/readiness-checklist.md +134 -134
- package/src/bmad-plus/packs/pack-shield/references/fedramp/sap-sar-guide.md +86 -86
- package/src/bmad-plus/packs/pack-shield/references/fedramp/ssp-guide.md +129 -129
- package/src/bmad-plus/packs/pack-shield/references/gdpr-compliance/documents.md +192 -192
- package/src/bmad-plus/packs/pack-shield/references/gdpr-compliance/dpa-template.md +121 -121
- package/src/bmad-plus/packs/pack-shield/references/gdpr-compliance/privacy-notice.md +87 -87
- package/src/bmad-plus/packs/pack-shield/references/hipaa-compliance/breach-notification.md +293 -293
- package/src/bmad-plus/packs/pack-shield/references/hipaa-compliance/privacy-rule.md +276 -276
- package/src/bmad-plus/packs/pack-shield/references/hipaa-compliance/security-rule.md +299 -299
- package/src/bmad-plus/packs/pack-shield/references/hipaa-compliance/templates.md +568 -568
- package/src/bmad-plus/packs/pack-shield/references/ism/control-applicability.md +181 -181
- package/src/bmad-plus/packs/pack-shield/references/ism/guidelines-overview.md +183 -183
- package/src/bmad-plus/packs/pack-shield/references/iso27001/annex-a-2013.md +203 -203
- package/src/bmad-plus/packs/pack-shield/references/iso27001/annex-a-2022.md +132 -132
- package/src/bmad-plus/packs/pack-shield/references/iso27001/control-mapping.md +153 -153
- package/src/bmad-plus/packs/pack-shield/references/iso27701/annex-a-controls.md +195 -195
- package/src/bmad-plus/packs/pack-shield/references/iso27701/regulatory-mapping.md +229 -229
- package/src/bmad-plus/packs/pack-shield/references/iso27701/transition-guide.md +219 -219
- package/src/bmad-plus/packs/pack-shield/references/iso42001/iso42001-ai-risk-assessment.md +258 -258
- package/src/bmad-plus/packs/pack-shield/references/iso42001/iso42001-clauses-requirements.md +279 -279
- package/src/bmad-plus/packs/pack-shield/references/iso42001/iso42001-controls-annex-a.md +155 -155
- package/src/bmad-plus/packs/pack-shield/references/itar/compliance-program.md +174 -174
- package/src/bmad-plus/packs/pack-shield/references/itar/licensing-guide.md +146 -146
- package/src/bmad-plus/packs/pack-shield/references/itar/usml-categories.md +93 -93
- package/src/bmad-plus/packs/pack-shield/references/lgpd/anpd-enforcement.md +147 -147
- package/src/bmad-plus/packs/pack-shield/references/lgpd/compliance-program.md +272 -272
- package/src/bmad-plus/packs/pack-shield/references/lgpd/lgpd-articles.md +271 -271
- package/src/bmad-plus/packs/pack-shield/references/nis2/article-21-measures.md +153 -153
- package/src/bmad-plus/packs/pack-shield/references/nis2/iso27001-nis2-mapping.md +68 -68
- package/src/bmad-plus/packs/pack-shield/references/nist-800-53/assessment-rmf.md +349 -349
- package/src/bmad-plus/packs/pack-shield/references/nist-800-53/baselines-tailoring.md +277 -277
- package/src/bmad-plus/packs/pack-shield/references/nist-800-53/control-families.md +450 -450
- package/src/bmad-plus/packs/pack-shield/references/nist-ai-rmf/rmf-core.md +361 -361
- package/src/bmad-plus/packs/pack-shield/references/nist-ai-rmf/rmf-profiles.md +192 -192
- package/src/bmad-plus/packs/pack-shield/references/nist-csf/csf-10-to-20-mapping.md +143 -143
- package/src/bmad-plus/packs/pack-shield/references/nist-csf/csf-20-functions-categories.md +278 -278
- package/src/bmad-plus/packs/pack-shield/references/nist-csf/csf-implementation-tiers.md +135 -135
- package/src/bmad-plus/packs/pack-shield/references/pci-compliance/pci-dss-requirements.md +366 -366
- package/src/bmad-plus/packs/pack-shield/references/pci-compliance/pci-dss-saq-guide.md +217 -217
- package/src/bmad-plus/packs/pack-shield/references/pci-compliance/pci-dss-v4-changes.md +190 -190
- package/src/bmad-plus/packs/pack-shield/references/section-508/wcag-mapping.md +160 -160
- package/src/bmad-plus/packs/pack-shield/references/soc2/controls.md +241 -241
- package/src/bmad-plus/packs/pack-shield/references/soc2/evidence.md +236 -236
- package/src/bmad-plus/packs/pack-shield/references/soc2/policies.md +254 -254
- package/src/bmad-plus/packs/pack-shield/references/soc2/vendor.md +276 -276
- package/src/bmad-plus/packs/pack-shield/references/swift-csp/swift-assessment.md +202 -202
- package/src/bmad-plus/packs/pack-shield/references/swift-csp/swift-controls.md +545 -545
- package/src/bmad-plus/packs/pack-shield/references/tsa-compliance/tsa-crmp-requirements.md +359 -359
- package/src/bmad-plus/packs/pack-shield/references/tsa-compliance/tsa-directives-overview.md +187 -187
- package/src/bmad-plus/packs/pack-shield/references/tsa-compliance/tsa-incident-reporting.md +187 -187
- package/src/bmad-plus/packs/pack-shield/references/wcag/criteria-detail.md +510 -510
- package/src/bmad-plus/packs/pack-shield/shared/audit-report-template.md +103 -103
- package/src/bmad-plus/packs/pack-shield/shared/cross-framework-mapper.md +103 -103
- package/src/bmad-plus/packs/pack-shield/shared/gap-analysis-template.md +83 -83
- package/src/bmad-plus/packs/pack-shield/shield-orchestrator.md +229 -229
- package/src/bmad-plus/packs/pack-shield/upstream-sync.yaml +68 -68
- package/src/bmad-plus/skills/bmad-plus-autopilot/SKILL.md +99 -99
- package/src/bmad-plus/skills/bmad-plus-parallel/SKILL.md +93 -93
- package/src/bmad-plus/skills/bmad-plus-sync/SKILL.md +69 -69
- package/tools/cli/commands/autoconfig.js +498 -489
- package/tools/cli/commands/doctor.js +222 -175
- package/tools/cli/commands/install.js +739 -739
- package/tools/cli/commands/memory.js +194 -194
- package/tools/cli/commands/scan.js +360 -350
- package/tools/cli/commands/uninstall.js +96 -96
- package/tools/cli/commands/update.js +174 -174
- package/tools/cli/i18n.js +763 -763
|
@@ -1,207 +1,207 @@
|
|
|
1
|
-
# EAR License Exceptions — Complete Reference (15 CFR Part 740)
|
|
2
|
-
|
|
3
|
-
## How License Exceptions Work
|
|
4
|
-
|
|
5
|
-
A license exception is an authorization in the EAR that allows you to export, reexport, or transfer (in-country) items subject to the EAR **without a license** when the conditions of the exception are met. Using a license exception:
|
|
6
|
-
- Certifies that all terms and conditions of the exception have been met
|
|
7
|
-
- Does **not** apply when: (a) BIS has issued a denial order, (b) the destination is embargoed, (c) a WMD end-use is involved, (d) the party is on the Entity List (unless the exception is expressly permitted)
|
|
8
|
-
|
|
9
|
-
**Global restrictions on all license exceptions (§ 740.2):**
|
|
10
|
-
- Cannot be used to supply weapons of mass destruction programmes
|
|
11
|
-
- Cannot be used by or to Denied Persons List parties
|
|
12
|
-
- Cannot be used for prohibited end-uses under Part 744
|
|
13
|
-
- Cannot override UN Security Council arms embargoes (Part 746)
|
|
14
|
-
|
|
15
|
-
---
|
|
16
|
-
|
|
17
|
-
## List-Based License Exceptions
|
|
18
|
-
|
|
19
|
-
These exceptions are only available when the CCL entry for the specific ECCN expressly authorizes them. Check the CCL entry column "License Exceptions" to see which are available.
|
|
20
|
-
|
|
21
|
-
### LVS — Shipments of Limited Value (§ 740.3)
|
|
22
|
-
|
|
23
|
-
**Scope:** Low-value shipments of eligible commodities and software
|
|
24
|
-
**Condition:** The value of the shipment must not exceed the per-shipment dollar threshold listed in the ECCN entry (typically $500–$5,000 depending on ECCN)
|
|
25
|
-
**Restrictions:**
|
|
26
|
-
- Not available for items requiring review for nuclear, missile, chemical/biological, or crime control reasons
|
|
27
|
-
- Not available for exports to Country Groups D or E
|
|
28
|
-
- Aggregate annual reporting requirement for some items (§ 743.1)
|
|
29
|
-
**Recordkeeping:** Retain documentation of the value and ECCN for 5 years
|
|
30
|
-
**Tip:** The LVS threshold is per-shipment, not per-year. Cannot split shipments to stay under threshold.
|
|
31
|
-
|
|
32
|
-
---
|
|
33
|
-
|
|
34
|
-
### GBS — Group B Shipments (§ 740.4)
|
|
35
|
-
|
|
36
|
-
**Scope:** Items controlled **for national security (NS) reasons only** exported to Country Group B countries
|
|
37
|
-
**Key identifier:** The CCL entry must say "GBS—Yes" in the License Exceptions column
|
|
38
|
-
**Conditions:**
|
|
39
|
-
- Destination must be Country Group B (listed in Supplement 1, Part 740)
|
|
40
|
-
- Only applies when NS is the **sole** reason for control — if CB, MT, NP, or other reasons also apply, GBS is unavailable
|
|
41
|
-
- Item cannot be destined for a prohibited end-use or restricted party
|
|
42
|
-
**Common uses:** Dual-use electronics, test equipment, and materials destined for commercial use in allied countries
|
|
43
|
-
|
|
44
|
-
---
|
|
45
|
-
|
|
46
|
-
### CIV — Civil End-Users (§ 740.5)
|
|
47
|
-
|
|
48
|
-
**Scope:** NS-only controlled items exported for **civil end-use** to Country Group D:1 countries
|
|
49
|
-
**Key identifier:** CCL entry must say "CIV—Yes"
|
|
50
|
-
**Conditions:**
|
|
51
|
-
- End-use must be strictly civil (not military, intelligence, or security services)
|
|
52
|
-
- Exporter must obtain a **written end-user/end-use statement** from the buyer certifying civil use
|
|
53
|
-
- Enhanced due diligence required — actual knowledge or reason to know of military diversion triggers denial
|
|
54
|
-
**High-risk alert:** China and Russia are Country Group D:1; this exception is narrow and heavily scrutinised by BIS
|
|
55
|
-
|
|
56
|
-
---
|
|
57
|
-
|
|
58
|
-
### APP — Adjusted Peak Performance Computers (§ 740.7)
|
|
59
|
-
|
|
60
|
-
**Scope:** Certain computer items (ECCN 4A003) at specified performance levels
|
|
61
|
-
**Conditions:** Performance (APP, measured in TP) must not exceed the thresholds set in the CCL entry for the destination country group
|
|
62
|
-
**Tiered thresholds:** APP thresholds differ for Country Groups A, B, and D destinations
|
|
63
|
-
**Not available for:** Embargoed countries or military end-users
|
|
64
|
-
|
|
65
|
-
---
|
|
66
|
-
|
|
67
|
-
### TSR — Technology and Software under Restriction (§ 740.6)
|
|
68
|
-
|
|
69
|
-
**Scope:** Technology and software controlled **for NS reasons only** to Country Group B
|
|
70
|
-
**Key identifier:** CCL entry must say "TSR—Yes"
|
|
71
|
-
**Conditions:**
|
|
72
|
-
- Destination is Country Group B
|
|
73
|
-
- Item is technology or software (Product Group D or E)
|
|
74
|
-
- NS is the sole RFC
|
|
75
|
-
**Common uses:** Exporting software documentation, operating manuals, or technical data to allies/partners in Country Group B
|
|
76
|
-
|
|
77
|
-
---
|
|
78
|
-
|
|
79
|
-
## Non-List-Based License Exceptions
|
|
80
|
-
|
|
81
|
-
These exceptions authorize exports **regardless** of whether the CCL entry lists them. They override the CCL for specific categories of transactions.
|
|
82
|
-
|
|
83
|
-
---
|
|
84
|
-
|
|
85
|
-
### TMP — Temporary Imports/Exports (§ 740.9)
|
|
86
|
-
|
|
87
|
-
**Scope:** Items exported temporarily from the US and returned without transfer of title or ownership
|
|
88
|
-
**Conditions:**
|
|
89
|
-
- Item must be returned to the US within **12 months** (or the period specified by BIS)
|
|
90
|
-
- No permanent transfer of the item to the foreign consignee
|
|
91
|
-
- Cannot be used for embargoed countries or restricted parties
|
|
92
|
-
- Covers: trade show demonstrations, testing abroad, tools/equipment used on a project
|
|
93
|
-
**Documentation required:** Statement that the item is being exported temporarily and will return; must track item and maintain records
|
|
94
|
-
**Common uses:** R&D equipment for offshore testing, display units at international trade fairs, laptops/equipment carried by travelling employees
|
|
95
|
-
|
|
96
|
-
---
|
|
97
|
-
|
|
98
|
-
### RPL — Servicing and Replacement Parts (§ 740.10)
|
|
99
|
-
|
|
100
|
-
**Scope:** Replacement parts, components, and assemblies for items previously legally exported
|
|
101
|
-
**Conditions:**
|
|
102
|
-
- Original export must have been licensed or authorized
|
|
103
|
-
- One-for-one replacement — the old part must be returned or certified as destroyed
|
|
104
|
-
- Cannot be used for embargoed countries or denied parties
|
|
105
|
-
- Not available for items with proliferation controls (CB, MT, NP) without checking CCL
|
|
106
|
-
**Common uses:** Exporting replacement circuit boards or components to repair previously exported equipment
|
|
107
|
-
|
|
108
|
-
---
|
|
109
|
-
|
|
110
|
-
### GOV — Governments (§ 740.11)
|
|
111
|
-
|
|
112
|
-
**Scope:** Exports to US government agencies, cooperating governments, and certain international organisations
|
|
113
|
-
**Four paragraphs:**
|
|
114
|
-
- **(a)** Exports for US government agencies (military, intelligence, diplomatic) — broad coverage
|
|
115
|
-
- **(b)** Exports to cooperating governments for legitimate government use — requires government-to-government verification
|
|
116
|
-
- **(c)** Exports for international inspections (Chemical Weapons Convention verification missions)
|
|
117
|
-
- **(d)** Exports for the International Space Station programme
|
|
118
|
-
**Restrictions:** Must verify the end-user is an actual government entity; diversion to commercial entities voids the exception
|
|
119
|
-
**High-value exception:** Frequently used by defence contractors and government-facing technology suppliers
|
|
120
|
-
|
|
121
|
-
---
|
|
122
|
-
|
|
123
|
-
### TSU — Technology and Software Unrestricted (§ 740.13)
|
|
124
|
-
|
|
125
|
-
**Scope:** Publicly available technology and software
|
|
126
|
-
**Three paragraphs:**
|
|
127
|
-
- **(a) Mass-market software:** Software available to anyone without restriction (retail/internet)
|
|
128
|
-
- **(b) Publicly available technology:** Information in the public domain — published research, textbooks, technical manuals freely available
|
|
129
|
-
- **(c) Pre-release software:** Beta/evaluation software distributed to developers for feedback
|
|
130
|
-
**Key rule:** The **fundamental research exclusion** (§ 734.8) removes most university research from EAR jurisdiction entirely — TSU covers the remainder
|
|
131
|
-
**Important:** Technology that is NOT publicly available cannot use TSU, even if widely shared within a company
|
|
132
|
-
|
|
133
|
-
---
|
|
134
|
-
|
|
135
|
-
### ENC — Encryption Items (§ 740.17)
|
|
136
|
-
|
|
137
|
-
**Scope:** Encryption commodities, software, and technology (primarily ECCN 5E002 and 5D002)
|
|
138
|
-
**Structure:** Three tiers based on encryption strength and market availability:
|
|
139
|
-
- **Tier 1 (§ 740.17(a)):** Mass market encryption (AES-256, standard protocols) — eligible after one-time BIS notification; reexportable to most Country Group B
|
|
140
|
-
- **Tier 2 (§ 740.17(b)(1)):** Source code for mass-market products — one-time BIS notification
|
|
141
|
-
- **Tier 3 (§ 740.17(b)(3)):** Non-standard or proprietary encryption — annual self-classification report
|
|
142
|
-
**Prior notification required:** File Form BIS-748P-A via SNAP-R before first use
|
|
143
|
-
**NOT available for:** Cuba, North Korea, Iran, Syria (E:1 countries) for most encryption items
|
|
144
|
-
**Common uses:** Exporting commercial VPN software, SSL/TLS libraries, encrypted mobile apps, and security products
|
|
145
|
-
|
|
146
|
-
---
|
|
147
|
-
|
|
148
|
-
### BAG — Baggage (§ 740.14)
|
|
149
|
-
|
|
150
|
-
**Scope:** Personal items in traveller's baggage or household effects
|
|
151
|
-
**Conditions:**
|
|
152
|
-
- Items must be for personal use, not for resale or transfer
|
|
153
|
-
- Computer performance limitations apply (laptops within APP thresholds)
|
|
154
|
-
- Personal defence items (shotguns, ammunition) have specific limitations
|
|
155
|
-
- Not available for embargoed countries
|
|
156
|
-
**Practical note:** Employees travelling with company laptops containing controlled technical data should confirm the laptop falls within BAG conditions; country-specific controls may still apply
|
|
157
|
-
|
|
158
|
-
---
|
|
159
|
-
|
|
160
|
-
### AVS — Aircraft and Vessels (§ 740.15)
|
|
161
|
-
|
|
162
|
-
**Scope:** Items exported on aircraft or vessels of non-US registry for use on that aircraft or vessel
|
|
163
|
-
**Conditions:**
|
|
164
|
-
- Items must be for use aboard the aircraft or vessel (fuel, spare parts, equipment)
|
|
165
|
-
- The vessel/aircraft must be legal and not destined for prohibited parties
|
|
166
|
-
- Specific rules apply for aircraft flying into embargoed country airspace
|
|
167
|
-
**Common uses:** Aviation parts, marine equipment, aircraft repair kits exported on the vessel they will service
|
|
168
|
-
|
|
169
|
-
---
|
|
170
|
-
|
|
171
|
-
### ACE — Additional Permissive Reexports (§ 740.16)
|
|
172
|
-
|
|
173
|
-
**Scope:** Reexports of certain controlled items from Country Group A or B countries
|
|
174
|
-
**Conditions:** The original export from the US must have been authorized; subsequent reexports within specified country groups may use ACE
|
|
175
|
-
**Limitation:** Only available for items with NS or AT controls; not for items with proliferation controls
|
|
176
|
-
|
|
177
|
-
---
|
|
178
|
-
|
|
179
|
-
### GFT — Gift Parcels (§ 740.12)
|
|
180
|
-
|
|
181
|
-
**Scope:** Gifts sent by individual US citizens/residents to individuals in embargoed countries
|
|
182
|
-
**Conditions:** Strict value and content limits; not for commercial shipments; recipient must be an individual (not an entity)
|
|
183
|
-
**Primarily used for:** Cuba — specific limits on food, medicine, personal items
|
|
184
|
-
|
|
185
|
-
---
|
|
186
|
-
|
|
187
|
-
## License Exception Recordkeeping (§ 762.2)
|
|
188
|
-
|
|
189
|
-
When using any license exception, retain:
|
|
190
|
-
1. The invoice or order showing the ECCN, description, and value
|
|
191
|
-
2. The license exception symbol used (e.g., "LVS", "ENC")
|
|
192
|
-
3. Any required end-user statement or certification
|
|
193
|
-
4. EEI filing (if required under § 758.1)
|
|
194
|
-
5. Denied party screening records and date of screening
|
|
195
|
-
|
|
196
|
-
Retention period: **5 years** from date of export (§ 762.6)
|
|
197
|
-
|
|
198
|
-
---
|
|
199
|
-
|
|
200
|
-
## AES/EEI Filing Requirements (Part 758)
|
|
201
|
-
|
|
202
|
-
Electronic Export Information (EEI) filing via AES (Automated Export System) is required when:
|
|
203
|
-
- The value of the shipment exceeds **$2,500** per Schedule B number and the destination is outside Canada
|
|
204
|
-
- A BIS license is used (always file regardless of value)
|
|
205
|
-
- Certain license exceptions require filing (check § 758.1 and the specific exception)
|
|
206
|
-
|
|
207
|
-
Cite the license exception symbol or license number in the EEI filing under the license code field.
|
|
1
|
+
# EAR License Exceptions — Complete Reference (15 CFR Part 740)
|
|
2
|
+
|
|
3
|
+
## How License Exceptions Work
|
|
4
|
+
|
|
5
|
+
A license exception is an authorization in the EAR that allows you to export, reexport, or transfer (in-country) items subject to the EAR **without a license** when the conditions of the exception are met. Using a license exception:
|
|
6
|
+
- Certifies that all terms and conditions of the exception have been met
|
|
7
|
+
- Does **not** apply when: (a) BIS has issued a denial order, (b) the destination is embargoed, (c) a WMD end-use is involved, (d) the party is on the Entity List (unless the exception is expressly permitted)
|
|
8
|
+
|
|
9
|
+
**Global restrictions on all license exceptions (§ 740.2):**
|
|
10
|
+
- Cannot be used to supply weapons of mass destruction programmes
|
|
11
|
+
- Cannot be used by or to Denied Persons List parties
|
|
12
|
+
- Cannot be used for prohibited end-uses under Part 744
|
|
13
|
+
- Cannot override UN Security Council arms embargoes (Part 746)
|
|
14
|
+
|
|
15
|
+
---
|
|
16
|
+
|
|
17
|
+
## List-Based License Exceptions
|
|
18
|
+
|
|
19
|
+
These exceptions are only available when the CCL entry for the specific ECCN expressly authorizes them. Check the CCL entry column "License Exceptions" to see which are available.
|
|
20
|
+
|
|
21
|
+
### LVS — Shipments of Limited Value (§ 740.3)
|
|
22
|
+
|
|
23
|
+
**Scope:** Low-value shipments of eligible commodities and software
|
|
24
|
+
**Condition:** The value of the shipment must not exceed the per-shipment dollar threshold listed in the ECCN entry (typically $500–$5,000 depending on ECCN)
|
|
25
|
+
**Restrictions:**
|
|
26
|
+
- Not available for items requiring review for nuclear, missile, chemical/biological, or crime control reasons
|
|
27
|
+
- Not available for exports to Country Groups D or E
|
|
28
|
+
- Aggregate annual reporting requirement for some items (§ 743.1)
|
|
29
|
+
**Recordkeeping:** Retain documentation of the value and ECCN for 5 years
|
|
30
|
+
**Tip:** The LVS threshold is per-shipment, not per-year. Cannot split shipments to stay under threshold.
|
|
31
|
+
|
|
32
|
+
---
|
|
33
|
+
|
|
34
|
+
### GBS — Group B Shipments (§ 740.4)
|
|
35
|
+
|
|
36
|
+
**Scope:** Items controlled **for national security (NS) reasons only** exported to Country Group B countries
|
|
37
|
+
**Key identifier:** The CCL entry must say "GBS—Yes" in the License Exceptions column
|
|
38
|
+
**Conditions:**
|
|
39
|
+
- Destination must be Country Group B (listed in Supplement 1, Part 740)
|
|
40
|
+
- Only applies when NS is the **sole** reason for control — if CB, MT, NP, or other reasons also apply, GBS is unavailable
|
|
41
|
+
- Item cannot be destined for a prohibited end-use or restricted party
|
|
42
|
+
**Common uses:** Dual-use electronics, test equipment, and materials destined for commercial use in allied countries
|
|
43
|
+
|
|
44
|
+
---
|
|
45
|
+
|
|
46
|
+
### CIV — Civil End-Users (§ 740.5)
|
|
47
|
+
|
|
48
|
+
**Scope:** NS-only controlled items exported for **civil end-use** to Country Group D:1 countries
|
|
49
|
+
**Key identifier:** CCL entry must say "CIV—Yes"
|
|
50
|
+
**Conditions:**
|
|
51
|
+
- End-use must be strictly civil (not military, intelligence, or security services)
|
|
52
|
+
- Exporter must obtain a **written end-user/end-use statement** from the buyer certifying civil use
|
|
53
|
+
- Enhanced due diligence required — actual knowledge or reason to know of military diversion triggers denial
|
|
54
|
+
**High-risk alert:** China and Russia are Country Group D:1; this exception is narrow and heavily scrutinised by BIS
|
|
55
|
+
|
|
56
|
+
---
|
|
57
|
+
|
|
58
|
+
### APP — Adjusted Peak Performance Computers (§ 740.7)
|
|
59
|
+
|
|
60
|
+
**Scope:** Certain computer items (ECCN 4A003) at specified performance levels
|
|
61
|
+
**Conditions:** Performance (APP, measured in TP) must not exceed the thresholds set in the CCL entry for the destination country group
|
|
62
|
+
**Tiered thresholds:** APP thresholds differ for Country Groups A, B, and D destinations
|
|
63
|
+
**Not available for:** Embargoed countries or military end-users
|
|
64
|
+
|
|
65
|
+
---
|
|
66
|
+
|
|
67
|
+
### TSR — Technology and Software under Restriction (§ 740.6)
|
|
68
|
+
|
|
69
|
+
**Scope:** Technology and software controlled **for NS reasons only** to Country Group B
|
|
70
|
+
**Key identifier:** CCL entry must say "TSR—Yes"
|
|
71
|
+
**Conditions:**
|
|
72
|
+
- Destination is Country Group B
|
|
73
|
+
- Item is technology or software (Product Group D or E)
|
|
74
|
+
- NS is the sole RFC
|
|
75
|
+
**Common uses:** Exporting software documentation, operating manuals, or technical data to allies/partners in Country Group B
|
|
76
|
+
|
|
77
|
+
---
|
|
78
|
+
|
|
79
|
+
## Non-List-Based License Exceptions
|
|
80
|
+
|
|
81
|
+
These exceptions authorize exports **regardless** of whether the CCL entry lists them. They override the CCL for specific categories of transactions.
|
|
82
|
+
|
|
83
|
+
---
|
|
84
|
+
|
|
85
|
+
### TMP — Temporary Imports/Exports (§ 740.9)
|
|
86
|
+
|
|
87
|
+
**Scope:** Items exported temporarily from the US and returned without transfer of title or ownership
|
|
88
|
+
**Conditions:**
|
|
89
|
+
- Item must be returned to the US within **12 months** (or the period specified by BIS)
|
|
90
|
+
- No permanent transfer of the item to the foreign consignee
|
|
91
|
+
- Cannot be used for embargoed countries or restricted parties
|
|
92
|
+
- Covers: trade show demonstrations, testing abroad, tools/equipment used on a project
|
|
93
|
+
**Documentation required:** Statement that the item is being exported temporarily and will return; must track item and maintain records
|
|
94
|
+
**Common uses:** R&D equipment for offshore testing, display units at international trade fairs, laptops/equipment carried by travelling employees
|
|
95
|
+
|
|
96
|
+
---
|
|
97
|
+
|
|
98
|
+
### RPL — Servicing and Replacement Parts (§ 740.10)
|
|
99
|
+
|
|
100
|
+
**Scope:** Replacement parts, components, and assemblies for items previously legally exported
|
|
101
|
+
**Conditions:**
|
|
102
|
+
- Original export must have been licensed or authorized
|
|
103
|
+
- One-for-one replacement — the old part must be returned or certified as destroyed
|
|
104
|
+
- Cannot be used for embargoed countries or denied parties
|
|
105
|
+
- Not available for items with proliferation controls (CB, MT, NP) without checking CCL
|
|
106
|
+
**Common uses:** Exporting replacement circuit boards or components to repair previously exported equipment
|
|
107
|
+
|
|
108
|
+
---
|
|
109
|
+
|
|
110
|
+
### GOV — Governments (§ 740.11)
|
|
111
|
+
|
|
112
|
+
**Scope:** Exports to US government agencies, cooperating governments, and certain international organisations
|
|
113
|
+
**Four paragraphs:**
|
|
114
|
+
- **(a)** Exports for US government agencies (military, intelligence, diplomatic) — broad coverage
|
|
115
|
+
- **(b)** Exports to cooperating governments for legitimate government use — requires government-to-government verification
|
|
116
|
+
- **(c)** Exports for international inspections (Chemical Weapons Convention verification missions)
|
|
117
|
+
- **(d)** Exports for the International Space Station programme
|
|
118
|
+
**Restrictions:** Must verify the end-user is an actual government entity; diversion to commercial entities voids the exception
|
|
119
|
+
**High-value exception:** Frequently used by defence contractors and government-facing technology suppliers
|
|
120
|
+
|
|
121
|
+
---
|
|
122
|
+
|
|
123
|
+
### TSU — Technology and Software Unrestricted (§ 740.13)
|
|
124
|
+
|
|
125
|
+
**Scope:** Publicly available technology and software
|
|
126
|
+
**Three paragraphs:**
|
|
127
|
+
- **(a) Mass-market software:** Software available to anyone without restriction (retail/internet)
|
|
128
|
+
- **(b) Publicly available technology:** Information in the public domain — published research, textbooks, technical manuals freely available
|
|
129
|
+
- **(c) Pre-release software:** Beta/evaluation software distributed to developers for feedback
|
|
130
|
+
**Key rule:** The **fundamental research exclusion** (§ 734.8) removes most university research from EAR jurisdiction entirely — TSU covers the remainder
|
|
131
|
+
**Important:** Technology that is NOT publicly available cannot use TSU, even if widely shared within a company
|
|
132
|
+
|
|
133
|
+
---
|
|
134
|
+
|
|
135
|
+
### ENC — Encryption Items (§ 740.17)
|
|
136
|
+
|
|
137
|
+
**Scope:** Encryption commodities, software, and technology (primarily ECCN 5E002 and 5D002)
|
|
138
|
+
**Structure:** Three tiers based on encryption strength and market availability:
|
|
139
|
+
- **Tier 1 (§ 740.17(a)):** Mass market encryption (AES-256, standard protocols) — eligible after one-time BIS notification; reexportable to most Country Group B
|
|
140
|
+
- **Tier 2 (§ 740.17(b)(1)):** Source code for mass-market products — one-time BIS notification
|
|
141
|
+
- **Tier 3 (§ 740.17(b)(3)):** Non-standard or proprietary encryption — annual self-classification report
|
|
142
|
+
**Prior notification required:** File Form BIS-748P-A via SNAP-R before first use
|
|
143
|
+
**NOT available for:** Cuba, North Korea, Iran, Syria (E:1 countries) for most encryption items
|
|
144
|
+
**Common uses:** Exporting commercial VPN software, SSL/TLS libraries, encrypted mobile apps, and security products
|
|
145
|
+
|
|
146
|
+
---
|
|
147
|
+
|
|
148
|
+
### BAG — Baggage (§ 740.14)
|
|
149
|
+
|
|
150
|
+
**Scope:** Personal items in traveller's baggage or household effects
|
|
151
|
+
**Conditions:**
|
|
152
|
+
- Items must be for personal use, not for resale or transfer
|
|
153
|
+
- Computer performance limitations apply (laptops within APP thresholds)
|
|
154
|
+
- Personal defence items (shotguns, ammunition) have specific limitations
|
|
155
|
+
- Not available for embargoed countries
|
|
156
|
+
**Practical note:** Employees travelling with company laptops containing controlled technical data should confirm the laptop falls within BAG conditions; country-specific controls may still apply
|
|
157
|
+
|
|
158
|
+
---
|
|
159
|
+
|
|
160
|
+
### AVS — Aircraft and Vessels (§ 740.15)
|
|
161
|
+
|
|
162
|
+
**Scope:** Items exported on aircraft or vessels of non-US registry for use on that aircraft or vessel
|
|
163
|
+
**Conditions:**
|
|
164
|
+
- Items must be for use aboard the aircraft or vessel (fuel, spare parts, equipment)
|
|
165
|
+
- The vessel/aircraft must be legal and not destined for prohibited parties
|
|
166
|
+
- Specific rules apply for aircraft flying into embargoed country airspace
|
|
167
|
+
**Common uses:** Aviation parts, marine equipment, aircraft repair kits exported on the vessel they will service
|
|
168
|
+
|
|
169
|
+
---
|
|
170
|
+
|
|
171
|
+
### ACE — Additional Permissive Reexports (§ 740.16)
|
|
172
|
+
|
|
173
|
+
**Scope:** Reexports of certain controlled items from Country Group A or B countries
|
|
174
|
+
**Conditions:** The original export from the US must have been authorized; subsequent reexports within specified country groups may use ACE
|
|
175
|
+
**Limitation:** Only available for items with NS or AT controls; not for items with proliferation controls
|
|
176
|
+
|
|
177
|
+
---
|
|
178
|
+
|
|
179
|
+
### GFT — Gift Parcels (§ 740.12)
|
|
180
|
+
|
|
181
|
+
**Scope:** Gifts sent by individual US citizens/residents to individuals in embargoed countries
|
|
182
|
+
**Conditions:** Strict value and content limits; not for commercial shipments; recipient must be an individual (not an entity)
|
|
183
|
+
**Primarily used for:** Cuba — specific limits on food, medicine, personal items
|
|
184
|
+
|
|
185
|
+
---
|
|
186
|
+
|
|
187
|
+
## License Exception Recordkeeping (§ 762.2)
|
|
188
|
+
|
|
189
|
+
When using any license exception, retain:
|
|
190
|
+
1. The invoice or order showing the ECCN, description, and value
|
|
191
|
+
2. The license exception symbol used (e.g., "LVS", "ENC")
|
|
192
|
+
3. Any required end-user statement or certification
|
|
193
|
+
4. EEI filing (if required under § 758.1)
|
|
194
|
+
5. Denied party screening records and date of screening
|
|
195
|
+
|
|
196
|
+
Retention period: **5 years** from date of export (§ 762.6)
|
|
197
|
+
|
|
198
|
+
---
|
|
199
|
+
|
|
200
|
+
## AES/EEI Filing Requirements (Part 758)
|
|
201
|
+
|
|
202
|
+
Electronic Export Information (EEI) filing via AES (Automated Export System) is required when:
|
|
203
|
+
- The value of the shipment exceeds **$2,500** per Schedule B number and the destination is outside Canada
|
|
204
|
+
- A BIS license is used (always file regardless of value)
|
|
205
|
+
- Certain license exceptions require filing (check § 758.1 and the specific exception)
|
|
206
|
+
|
|
207
|
+
Cite the license exception symbol or license number in the EEI filing under the license code field.
|