iris-security-core 0.1.2__tar.gz → 0.1.3__tar.gz

{iris_security_core-0.1.2 → iris_security_core-0.1.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iris-security-core
-Version: 0.1.2
+Version: 0.1.3
 Summary: IRIS core — Cedar engine, policy models, compliance bundles
 License: Apache-2.0
 Project-URL: Homepage, https://github.com/gimartinb/iris-sdk

{iris_security_core-0.1.2 → iris_security_core-0.1.3}/iris_core/__init__.py

@@ -5,7 +5,7 @@ No network access required. Cedar evaluation is in-process.
 """
 
 # ── Package version ────────────────────────────────────────────────────────────
-__version__ = "0.1.0"
+__version__ = "0.1.3"
 
 # ── Public API ─────────────────────────────────────────────────────────────────
 from iris_core.models.passport import AgentPassport, DataClassification, Environment

iris_security_core-0.1.3/iris_core/compliance/bundles/colorado_ai_act.py

@@ -0,0 +1,343 @@
+"""
+Colorado AI Act compliance bundles.
+
+SB 24-205 (original) was superseded by SB 26-189, signed May 14, 2026.
+The current bundle (colorado-ai-act) reflects SB 26-189, effective January 1, 2027.
+The original bundle is retained as colorado-ai-act-original for historical audit trail.
+"""
+
+from __future__ import annotations
+from typing import List, Dict, Any
+
+
+COLORADO_AI_ACT_ORIGINAL: Dict[str, Any] = {
+    "bundle_id": "colorado-ai-act-sb24-205",
+    "full_name": "Colorado AI Act (SB 24-205)",
+    "status": "SUPERSEDED",
+    "superseded_by": "colorado-ai-act-sb26-189",
+    "superseded_date": "2026-05-14",
+    "warning": (
+        "SB 24-205 was replaced by SB 26-189 signed May 14, 2026. "
+        "This bundle is retained for historical audit trail purposes only. "
+        "Use colorado-ai-act for current compliance requirements."
+    ),
+    "effective_date": "2026-07-01",
+    "jurisdiction": "Colorado, USA",
+    "iris_version": "0.1.0",
+    "rules": [
+        {
+            "rule_id": "CO-001",
+            "name": "High-risk AI inventory",
+            "severity": "CRITICAL",
+            "description": (
+                "Developers of high-risk AI systems must maintain an inventory "
+                "of all deployed systems."
+            ),
+            "iris_control": "AgentPassport.is_high_risk_ai = True",
+            "how_iris_satisfies": (
+                "Every agent with is_high_risk_ai=True is automatically inventoried "
+                "in the IRIS agent registry with full provenance."
+            ),
+            "check": "passport.is_high_risk_ai == True and passport.agent_id is not None",
+        },
+        {
+            "rule_id": "CO-002",
+            "name": "Impact assessment required",
+            "severity": "CRITICAL",
+            "description": (
+                "High-risk AI systems must have a completed impact assessment "
+                "before production deployment."
+            ),
+            "iris_control": "EvidenceVault.impact_assessment entry",
+            "how_iris_satisfies": (
+                "IRIS generates and records impact assessments in the Evidence Vault. "
+                "Production deployment is blocked until the assessment is complete."
+            ),
+            "check": "passport.evidence_vault_id is not None",
+        },
+        {
+            "rule_id": "CO-003",
+            "name": "Transparency disclosure",
+            "severity": "HIGH",
+            "description": (
+                "Consumers must be informed when AI systems make or substantially "
+                "assist in consequential decisions affecting them."
+            ),
+            "iris_control": "policy-intent.md transparency disclosure",
+            "how_iris_satisfies": (
+                "IRIS auto-generates a policy-intent.md for every agent that serves "
+                "as the Colorado AI Act transparency disclosure. "
+                "It is committed to the GitOps repo and versioned."
+            ),
+            "check": "passport.intent_ref is not None",
+        },
+        {
+            "rule_id": "CO-004",
+            "name": "Consumer opt-out",
+            "severity": "HIGH",
+            "description": (
+                "Consumers must be able to opt out of consequential AI decisions "
+                "and request human review."
+            ),
+            "iris_control": "context.user_consent_logged = True + HITL gate",
+            "how_iris_satisfies": (
+                "IRIS enforces user_consent_logged context for agents handling "
+                "consequential decisions. The HITL gate provides the human review path."
+            ),
+            "check": "context.user_consent_logged == True for consequential actions",
+        },
+        {
+            "rule_id": "CO-005",
+            "name": "Non-discrimination",
+            "severity": "CRITICAL",
+            "description": (
+                "High-risk AI systems must not discriminate against consumers "
+                "based on protected characteristics."
+            ),
+            "iris_control": "Dynamic Guardrail Engine (Phase 2)",
+            "how_iris_satisfies": (
+                "Phase 2: IRIS Dynamic Guardrail Engine monitors agent outputs "
+                "for discriminatory patterns and blocks non-compliant responses."
+            ),
+            "check": "dynamic_guardrail.discrimination_check == PASS",
+            "phase": 2,
+        },
+        {
+            "rule_id": "CO-006",
+            "name": "Annual review",
+            "severity": "MEDIUM",
+            "description": (
+                "High-risk AI systems must be reviewed and re-assessed annually."
+            ),
+            "iris_control": "EvidenceVault.review_schedule",
+            "how_iris_satisfies": (
+                "IRIS tracks the last_reviewed_at date on the AgentPassport and "
+                "alerts the security engineer when an annual review is due."
+            ),
+            "check": "passport.last_reviewed_at within 365 days",
+        },
+    ],
+    "high_risk_domains": [
+        "education",
+        "employment",
+        "financial_services",
+        "government",
+        "healthcare",
+        "housing",
+        "insurance",
+        "legal_services",
+    ],
+    "iris_coverage": {
+        "phase_1": ["CO-001", "CO-002", "CO-003", "CO-004", "CO-006"],
+        "phase_2": ["CO-005"],
+        "coverage_percent_phase_1": 83,
+        "coverage_percent_phase_2": 100,
+    },
+}
+
+
+COLORADO_AI_ACT_SB26189: Dict[str, Any] = {
+    "bundle_id": "colorado-ai-act",
+    "full_name": "Colorado AI Act — SB 26-189 (Replacement)",
+    "supersedes": "colorado-ai-act-sb24-205",
+    "signed_date": "2026-05-14",
+    "effective_date": "2027-01-01",
+    "enforcement_note": (
+        "Enforcement contingent on AG rulemaking. "
+        "Practical enforcement expected no earlier than late 2027. "
+        "Federal court stay also extends to this legislation."
+    ),
+    "jurisdiction": "Colorado, USA",
+    "iris_version": "0.2.0",
+    "key_changes_from_original": [
+        (
+            "Eliminated annual impact assessments (CO-002 removed as legal "
+            "requirement — retained as IRIS best practice)"
+        ),
+        (
+            "Eliminated duty to avoid algorithmic discrimination (CO-005 "
+            "removed as legal requirement)"
+        ),
+        "Eliminated risk management programs",
+        (
+            "Renamed coverage from 'AI systems' to 'automated "
+            "decision-making technology' (ADMT)"
+        ),
+        "Added 3-year record retention requirement (NEW: CO-RR-001)",
+        "Added right-to-cure: 60 days to fix violations (NEW)",
+        "Clarified developer vs deployer liability separation",
+    ],
+    "rules": [
+        {
+            "rule_id": "CO-001",
+            "name": "ADMT inventory — know what you are deploying",
+            "severity": "HIGH",
+            "status": "ACTIVE",
+            "description": (
+                "Deployers must know which automated decision-making technology "
+                "systems they use to make or materially influence consequential "
+                "decisions about Colorado consumers."
+            ),
+            "iris_control": "AgentPassport registration",
+            "how_iris_satisfies": (
+                "Every agent registered in IRIS is automatically inventoried with "
+                "its owner, team, data classification, and consequential decision flag."
+            ),
+            "check": "passport.agent_id is not None and passport.owner != ''",
+            "legal_ref": "SB 26-189 — Deployer obligations",
+        },
+        {
+            "rule_id": "CO-002",
+            "name": "Impact assessment (best practice — not legally required)",
+            "severity": "MEDIUM",
+            "status": "BEST_PRACTICE",
+            "legal_status": (
+                "SB 26-189 removed mandatory impact assessments. "
+                "IRIS retains this as a best practice because it satisfies "
+                "NIST AI RMF MAP-1.5 and prepares organizations for other "
+                "state laws that still require assessments."
+            ),
+            "iris_control": "Evidence Vault impact assessment entry",
+            "how_iris_satisfies": (
+                "iris compliance assess generates a structured impact assessment "
+                "stored in the Evidence Vault."
+            ),
+            "check": "passport.evidence_vault_id is not None",
+        },
+        {
+            "rule_id": "CO-003",
+            "name": "Consumer notice — disclosure before or at time of use",
+            "severity": "HIGH",
+            "status": "ACTIVE",
+            "description": (
+                "Deployers must provide consumers with notice before or at the time "
+                "a covered ADMT tool is used to make or materially influence a "
+                "consequential decision."
+            ),
+            "iris_control": "policy-intent.md transparency disclosure",
+            "how_iris_satisfies": (
+                "IRIS auto-generates a policy-intent.md that serves as the technical "
+                "transparency disclosure. Organizations must also implement "
+                "consumer-facing notices in their application layer."
+            ),
+            "check": "passport.intent_ref is not None",
+            "implementation_note": (
+                "IRIS satisfies the technical documentation requirement. "
+                "Organizations must separately implement consumer-facing UI notices."
+            ),
+        },
+        {
+            "rule_id": "CO-004",
+            "name": "Post-adverse-action notice and appeal rights",
+            "severity": "HIGH",
+            "status": "ACTIVE",
+            "description": (
+                "If ADMT contributes to an unfavorable decision affecting a Colorado "
+                "consumer, the consumer must receive information about the decision "
+                "and how to appeal it."
+            ),
+            "iris_control": "HITL gate + user_consent_logged context",
+            "how_iris_satisfies": (
+                "The IRIS HITL gate provides the human review path. "
+                "user_consent_logged enforces the consent gate before consequential "
+                "decisions."
+            ),
+            "check": "context.user_consent_logged == True for consequential actions",
+        },
+        {
+            "rule_id": "CO-RR-001",
+            "name": "3-year record retention (NEW in SB 26-189)",
+            "severity": "HIGH",
+            "status": "ACTIVE",
+            "description": (
+                "Deployers must retain records of covered ADMT tool usage for "
+                "three years."
+            ),
+            "iris_control": "Evidence Vault retention policy",
+            "how_iris_satisfies": (
+                "Evidence Vault Pro configures retention to 3 years minimum for "
+                "agents tagged colorado-ai-act. Free tier retains 30 days locally."
+            ),
+            "check": "evidence_vault.retention_days >= 1095",
+            "free_tier_note": (
+                "Free tier (30-day local retention) does NOT satisfy this requirement. "
+                "Enterprise Pro tier required for full legal compliance."
+            ),
+            "upgrade_message": (
+                "3-year record retention requires IRIS Pro. "
+                "iris license activate <your-key>"
+            ),
+        },
+        {
+            "rule_id": "CO-DEV-001",
+            "name": "Developer documentation obligations",
+            "severity": "MEDIUM",
+            "status": "ACTIVE",
+            "description": (
+                "Developers must provide deployers with documentation about intended "
+                "uses, known harmful uses, training materials, limitations, and "
+                "risk notices."
+            ),
+            "iris_control": "policy-intent.md + passport.yaml",
+            "how_iris_satisfies": (
+                "IRIS policy-intent.md and passport.yaml together constitute the "
+                "developer documentation package."
+            ),
+            "check": "passport.intent_ref is not None and passport.description != ''",
+        },
+    ],
+    "covered_domains": [
+        "employment",
+        "financial_services",
+        "housing",
+        "health_care",
+        "insurance",
+        "education",
+        "government_services",
+        "legal_services",
+    ],
+    "admt_coverage": {
+        "likely_covered": [
+            "AI ranking job applicants",
+            "AI-driven tenant screening",
+            "AI loan scoring",
+            "AI insurance underwriting recommendations",
+            "AI health care prioritization tools",
+        ],
+        "likely_not_covered": [
+            "Spellcheck or grammar tools",
+            "Internal productivity copilots",
+            "Basic analytics dashboards",
+            "General customer support chatbots",
+            "Simple workflow automation",
+            "Cybersecurity and fraud detection tools",
+        ],
+    },
+    "iris_coverage": {
+        "active_rules": ["CO-001", "CO-003", "CO-004", "CO-RR-001", "CO-DEV-001"],
+        "best_practice_rules": ["CO-002"],
+        "removed_from_original": ["CO-005", "CO-006"],
+        "coverage_percent": 100,
+        "pro_required_for": ["CO-RR-001"],
+    },
+}
+
+
+def get_colorado_rules() -> Dict[str, Any]:
+    """Return the current Colorado AI Act bundle (SB 26-189)."""
+    return COLORADO_AI_ACT_SB26189
+
+
+def get_colorado_original_rules() -> Dict[str, Any]:
+    """Return the superseded SB 24-205 bundle for historical audit trail."""
+    return COLORADO_AI_ACT_ORIGINAL
+
+
+def get_phase_1_rules() -> List[Dict[str, Any]]:
+    coverage = COLORADO_AI_ACT_SB26189["iris_coverage"]
+    active_ids = coverage["active_rules"] + coverage.get("best_practice_rules", [])
+    return [r for r in COLORADO_AI_ACT_SB26189["rules"] if r["rule_id"] in active_ids]
+
+
+def is_high_risk_domain(domain: str) -> bool:
+    return domain.lower().replace(" ", "_") in COLORADO_AI_ACT_SB26189["covered_domains"]

iris_security_core-0.1.3/iris_core/compliance/bundles/colorado_chatbot.py

@@ -0,0 +1,91 @@
+"""
+Colorado HB 26-1263 — Chatbot Safety compliance bundle.
+
+Effective: January 1, 2027.
+"""
+
+from __future__ import annotations
+
+from typing import Any, Dict
+
+
+COLORADO_CHATBOT_RULES: Dict[str, Any] = {
+    "bundle_id": "colorado-chatbot",
+    "full_name": "Colorado Chatbot Safety — HB 26-1263",
+    "effective_date": "2027-01-01",
+    "jurisdiction": "Colorado, USA",
+    "iris_version": "0.2.0",
+    "rules": [
+        {
+            "rule_id": "CHAT-001",
+            "name": "Age estimation for conversational AI services",
+            "severity": "HIGH",
+            "status": "ACTIVE",
+            "description": (
+                "Operators must estimate user age and apply appropriate protections."
+            ),
+            "iris_control": "passport.allowed_user_roles (restrict minors)",
+            "how_iris_satisfies": (
+                "IRIS passport allowed_user_roles enforces age-appropriate access "
+                "restrictions for conversational AI agents."
+            ),
+            "check": "passport.allowed_user_roles configured for minor protection",
+            "legal_ref": "HB 26-1263 — Age estimation",
+        },
+        {
+            "rule_id": "CHAT-002",
+            "name": "AI disclosure to users identified as minors",
+            "severity": "HIGH",
+            "status": "ACTIVE",
+            "description": (
+                "Conversational AI must regularly disclose AI status to users "
+                "identified as minors."
+            ),
+            "iris_control": "policy-intent.md transparency disclosure",
+            "how_iris_satisfies": (
+                "IRIS policy-intent.md includes AI disclosure language for "
+                "minor-facing conversational agents."
+            ),
+            "check": "passport.intent_ref is not None",
+            "legal_ref": "HB 26-1263 — AI disclosure",
+        },
+        {
+            "rule_id": "CHAT-003",
+            "name": "No sexually explicit content for minors",
+            "severity": "CRITICAL",
+            "status": "ACTIVE",
+            "description": (
+                "ADMT operators must not generate sexually explicit content for "
+                "users identified as minors."
+            ),
+            "iris_control": "DLP scanner + content guardrails",
+            "how_iris_satisfies": (
+                "IRIS DLP scanner and content guardrails block sexually explicit "
+                "output for minor-identified sessions."
+            ),
+            "check": "dlp_scanner.enabled == True and content_guardrails.active == True",
+            "legal_ref": "HB 26-1263 — Content restrictions",
+        },
+        {
+            "rule_id": "CHAT-004",
+            "name": "Crisis response protocols",
+            "severity": "CRITICAL",
+            "status": "ACTIVE",
+            "description": (
+                "When users express suicidal ideation or self-harm intent, the system "
+                "must have documented crisis response protocols."
+            ),
+            "iris_control": "HITL gate configured for crisis keywords",
+            "how_iris_satisfies": (
+                "IRIS HITL gate routes crisis-keyword detections to human review "
+                "with documented escalation protocols."
+            ),
+            "check": "hitl_gate.crisis_keywords_configured == True",
+            "legal_ref": "HB 26-1263 — Crisis response",
+        },
+    ],
+}
+
+
+def get_colorado_chatbot_rules() -> Dict[str, Any]:
+    return COLORADO_CHATBOT_RULES

iris_security_core-0.1.3/iris_core/compliance/bundles/colorado_health_ai.py

@@ -0,0 +1,92 @@
+"""
+Colorado HB 26-1139 — AI in Health Insurance compliance bundle.
+
+Effective: January 1, 2027.
+"""
+
+from __future__ import annotations
+
+from typing import Any, Dict
+
+
+COLORADO_HEALTH_AI_RULES: Dict[str, Any] = {
+    "bundle_id": "colorado-health-ai",
+    "full_name": "Colorado AI in Health Insurance — HB 26-1139",
+    "effective_date": "2027-01-01",
+    "jurisdiction": "Colorado, USA",
+    "iris_version": "0.2.0",
+    "rules": [
+        {
+            "rule_id": "HLTH-001",
+            "name": "No AI-only coverage decisions",
+            "severity": "CRITICAL",
+            "status": "ACTIVE",
+            "description": (
+                "Health insurers cannot base coverage decisions solely on group data "
+                "collected by AI systems."
+            ),
+            "iris_control": "user_consent_logged + HITL gate for coverage decisions",
+            "how_iris_satisfies": (
+                "IRIS enforces user_consent_logged and HITL gate review before "
+                "any AI-influenced coverage determination is finalized."
+            ),
+            "check": "context.user_consent_logged == True for coverage decisions",
+            "legal_ref": "HB 26-1139 — Coverage decisions",
+        },
+        {
+            "rule_id": "HLTH-002",
+            "name": "Individual medical history consideration",
+            "severity": "HIGH",
+            "status": "ACTIVE",
+            "description": (
+                "Insurers must consider a patient's individual medical and clinical "
+                "history in any AI-influenced coverage determination."
+            ),
+            "iris_control": "passport tool_permissions must include clinician-review",
+            "how_iris_satisfies": (
+                "IRIS tool_permissions require clinician-review tool access for "
+                "agents making coverage determinations."
+            ),
+            "check": "passport.tool_permissions includes clinician-review",
+            "legal_ref": "HB 26-1139 — Individual consideration",
+        },
+        {
+            "rule_id": "HLTH-003",
+            "name": "Licensed clinician review for medical necessity denials",
+            "severity": "CRITICAL",
+            "status": "ACTIVE",
+            "description": (
+                "Denials based on medical necessity must be reviewed by a licensed "
+                "clinician competent to evaluate the specific clinical issues."
+            ),
+            "iris_control": 'HITL gate with reviewer_role = "licensed-clinician"',
+            "how_iris_satisfies": (
+                "IRIS HITL gate requires licensed-clinician reviewer role for "
+                "medical necessity denial workflows."
+            ),
+            "check": 'hitl_gate.reviewer_role == "licensed-clinician"',
+            "legal_ref": "HB 26-1139 — Medical necessity review",
+        },
+        {
+            "rule_id": "HLTH-004",
+            "name": "AI use disclosure to state division",
+            "severity": "HIGH",
+            "status": "ACTIVE",
+            "description": (
+                "Covered entities must disclose to the state division which "
+                "utilization review functions use AI."
+            ),
+            "iris_control": "iris evidence report generates disclosure document",
+            "how_iris_satisfies": (
+                "iris evidence report generates a structured AI utilization "
+                "disclosure document for state division filing."
+            ),
+            "check": "passport.evidence_vault_id is not None",
+            "legal_ref": "HB 26-1139 — State disclosure",
+        },
+    ],
+}
+
+
+def get_colorado_health_ai_rules() -> Dict[str, Any]:
+    return COLORADO_HEALTH_AI_RULES

iris_security_core-0.1.3/iris_core/compliance/bundles/colorado_mental_health_ai.py

@@ -0,0 +1,101 @@
+"""
+Colorado HB 26-1195 — AI in Mental Health Services compliance bundle.
+
+Effective: August 12, 2026.
+"""
+
+from __future__ import annotations
+
+from typing import Any, Dict
+
+
+COLORADO_MENTAL_HEALTH_AI_RULES: Dict[str, Any] = {
+    "bundle_id": "colorado-mental-health-ai",
+    "full_name": "Colorado AI in Mental Health Services — HB 26-1195",
+    "effective_date": "2026-08-12",
+    "jurisdiction": "Colorado, USA",
+    "iris_version": "0.2.0",
+    "rules": [
+        {
+            "rule_id": "MH-001",
+            "name": "No AI chatbot direct patient communication",
+            "severity": "CRITICAL",
+            "status": "ACTIVE",
+            "description": (
+                "Licensed mental health clinicians may not use AI chatbots to "
+                "communicate directly with patients."
+            ),
+            "iris_control": (
+                "passport tool_permissions must NOT include "
+                "direct-patient-communication for AI agents"
+            ),
+            "how_iris_satisfies": (
+                "IRIS blocks direct-patient-communication tool permissions on "
+                "AI agents tagged for mental health services."
+            ),
+            "check": (
+                "passport.tool_permissions does NOT include "
+                "direct-patient-communication"
+            ),
+            "legal_ref": "HB 26-1195 — Direct patient communication",
+        },
+        {
+            "rule_id": "MH-002",
+            "name": "No AI-generated treatment plans without human review",
+            "severity": "CRITICAL",
+            "status": "ACTIVE",
+            "description": (
+                "AI may not generate treatment plans without human clinician review."
+            ),
+            "iris_control": "HITL gate required for all treatment-plan actions",
+            "how_iris_satisfies": (
+                "IRIS HITL gate blocks treatment-plan generation until a licensed "
+                "clinician approves the output."
+            ),
+            "check": "hitl_gate.required_for treatment-plan actions",
+            "legal_ref": "HB 26-1195 — Treatment plans",
+        },
+        {
+            "rule_id": "MH-003",
+            "name": "Patient consent for AI transcription",
+            "severity": "HIGH",
+            "status": "ACTIVE",
+            "description": (
+                "Patient consent is required for AI transcription during sessions."
+            ),
+            "iris_control": "user_consent_logged = True for transcription actions",
+            "how_iris_satisfies": (
+                "IRIS enforces user_consent_logged before any AI transcription "
+                "action during clinical sessions."
+            ),
+            "check": "context.user_consent_logged == True for transcription actions",
+            "legal_ref": "HB 26-1195 — Transcription consent",
+        },
+        {
+            "rule_id": "MH-004",
+            "name": "AI permissible for administrative tasks only (without consent)",
+            "severity": "HIGH",
+            "status": "ACTIVE",
+            "description": (
+                "Without explicit patient consent, AI use is restricted to "
+                "administrative tasks only."
+            ),
+            "iris_control": (
+                "tool_permissions limited to admin-only tools unless consent is logged"
+            ),
+            "how_iris_satisfies": (
+                "IRIS restricts tool_permissions to admin-only tools when "
+                "user_consent_logged is False for mental health agents."
+            ),
+            "check": (
+                "tool_permissions limited to admin-only unless "
+                "context.user_consent_logged == True"
+            ),
+            "legal_ref": "HB 26-1195 — Administrative use",
+        },
+    ],
+}
+
+
+def get_colorado_mental_health_ai_rules() -> Dict[str, Any]:
+    return COLORADO_MENTAL_HEALTH_AI_RULES