Merge branch 'dev' of github.com:billmarinocam/compliancecards into dev

data_cc.yaml

@@ -1,6 +1,6 @@
 card_type: "data" # "project", "data" or "model"
 
-# Meta data related to intended purpose(s) of data 
+# Metadata related to intended purpose(s) of data 
 
 intended_purpose:
   safety_component: 
@@ -192,7 +192,7 @@ high_risk_ai_system_requirements:
     verbose: 'Datset was subject to a quality management system that is documented in a systematic and orderly manner in the form of written policies, procedures and instructions, and includes a description of the systems and procedures for data management, including data acquisition, data collection, data analysis, data labelling, data storage, data filtration, data mining, data aggregation, data retention and any other operation regarding the data'
     value: !!bool false
 
-# Meta data related to data-relaed requirements for GPAI models 
+# Metadata related to data-related requirements for GPAI models 
 
 gpai_model_requirements: 
   data_type: 

model_cc.yaml

@@ -208,7 +208,7 @@ high_risk_ai_system_requirements:
     verbose: 'Examination, test and validation procedures to be carried out before, during and after the development of the high-risk AI system, and the frequency with which they have to be carried out'
     value: !!bool false
 
-# Meta data related to model-related requirements for GPAI models 
+# Metadata related to model-related requirements for GPAI models 
 
 gpai_model_requirements:
   task:  
@@ -308,20 +308,4 @@ gpai_model_with_systemic_risk_requirements:
   cybersecurity: 
     article: 'Art. 55(1)(d)'
     verbose: 'Ensure an adequate level of cybersecurity protection for the GPAI model with systemic risk and the physical infrastructure of the mode'
-    value: !!bool false
-
-# Metadata related to transparency requirements for some AI systems (Article 50)
-
-transparency_requirements:
-  generates_media: # clean this up
-    article: 'Art. 50(2)'
-    verbose: 'If the model generates synthetic audio, image, video or text content'
-    value: !!bool false
-  marked_as_generated: 
-    article: 'Art. 50(2)'
-    verbose: 'If outputs are marked in a machine-readable format and detectable as artificially generated or manipulated'
-    value: !!bool false
-  interoperability: 
-    article: 'Art. 50(2)'
-    verbose: 'Providers shall ensure their technical solutions are effective, interoperable, robust and reliable as far as this is technically feasible, taking into account specificities and limitations of different types of content, costs of implementation and the generally acknowledged state-of-the-art, as may be reflected in relevant technical standards'
     value: !!bool false

project_cc.yaml

@@ -2,6 +2,8 @@
 # Information related to high-level characteristics of AI project, including the role of the operator, their location, and where the output is used
 card_type: "project" # "project", "data" or "model"
   
+# TODO potentially add scenarios that get the provider off the hook per Article 25 
+
 operator_details:
   provider: 
     article: 'Art. 2'
@@ -40,6 +42,8 @@ gpai_model:
 
 # Information related to whether or not the project, if an AI system, is a high-risk AI system
 
+# TODO Potentially add all of the use cases mentioned in Annex I below (those covered by existing regulations) rather than bundle them up as they are now
+
 high_risk_ai_system:
   safety_component: 
     article: 'Art. 6(1)(a)'
@@ -94,6 +98,8 @@ high_risk_ai_system:
     verbose: 'AI project is intended to be used by a judicial authority or on their behalf to assist a judicial authority in researching and interpreting facts and the law and in applying the law to a concrete set of facts, or to be used in a similar way in alternative dispute resolution'
     value: !!bool false 
 
+# TODO potentially add military exception and/or law enforcement exception to the below
+
 high_risk_ai_system_exceptions:    
   filter_exception_rights: 
     article: 'Art. 6(3)'
@@ -133,6 +139,10 @@ gpai_model_systematic_risk:
 # Information related to the Act's exceptions for scientific research, open-source AI, and more
 
 excepted:
+  military: # only applies to AI systems, must implement that in the logic
+    article: 'Art. 2(3)'
+    verbose: 'AI project is placed on the market, put into service, or used with or without modification exclusively for military, defence or national security purposes'
+    value: !!bool false 
   scientific: 
     article: 'Art. 2(6)'
     verbose: 'AI project is or was specifically developed and put into service for the sole purpose of scientific research and development'
@@ -246,11 +256,7 @@ risk_management_system:
     value: !!bool false 
   vulnerable_groups: 
     article: 'Art. 9(9)'
-    verbose: 'Adverse impacts in the view of intended purpose the high-risk AI system on individuals under 18 and other vulnerable groups have been considered'
-    value: !!bool true
-  integration_with_other_laws: 
-    article: 'Art. 9(10)'
-    description: 'For providers subject to other Union law requirements, risk management procedures may be integrated or combined with those established under such law.'
+    verbose: 'The risk management system for the AI project considers impacts in the view of intended purpose the AI project on individuals under 18 and other vulnerable groups have been considered'
     value: !!bool true
 
 # Information related to the risk management system requirements for high-risk AI systems (Article 11)
@@ -286,7 +292,7 @@ technical_documentation:
     value: !!bool false 
   external_features:  
     article: 'Art. 11(1); Annex IV(1)(f)'
-    verbose: 'Technical Documentation includes a general description of the AI project that includes, where the AI system is a component of products, photographs or illustrations showing external features, the marking and internal layout of those products'
+    verbose: 'Technical Documentation includes a general description of the AI project that includes, where it is a component of products, photographs or illustrations showing external features, the marking and internal layout of those products'
     value: !!bool false 
   user_interface:  
     article: 'Art. 11(1); Annex IV(1)(g)'
@@ -577,7 +583,7 @@ gpai_model_obligations:
   documentation:
     intended_uses: 
       article: 'Art. 53(1)(a); Annex XI(1)(1)(a)'
-      verbose: 'The provider has drawn up and will keep up-to-date technical documentation of the model that include a general description of the model includes a description of the tasks that the model is intended to perform and the type and nature of AI systems in which it can be integrated'
+      verbose: 'The provider has drawn up and will keep up-to-date technical documentation of the model that include a general description of the model includes a description of the tasks that the model is intended to perform and the type and nature of AI projects in which it can be integrated'
       value: !!bool false 
     accepable_use_policies: 
       article: 'Art. 53(1)(a); Annex XI(1)(1)(b)'
@@ -601,7 +607,7 @@ gpai_model_obligations:
       value: !!bool false 
     technical_means: 
       article: 'Art. 53(1)(a); Annex XI(1)(2)(a)'
-      verbose: 'The provider has drawn up and will keep up-to-date technical documentation of the model that include a detailed description of the model that includes the technical means (e.g. instructions of use, infrastructure, tools) required for the AI project to be integrated in AI systems'
+      verbose: 'The provider has drawn up and will keep up-to-date technical documentation of the model that include a detailed description of the model that includes the technical means (e.g. instructions of use, infrastructure, tools) required for the AI project to be integrated into other AI projects'
       value: !!bool false 
     design_specs: 
       article: 'Art. 53(1)(a); Annex XI(1)(2)(b)'
@@ -626,39 +632,39 @@ gpai_model_obligations:
   provider_documentation:
     general: 
       article:
-      verbose: 'Provider has draw up and will keep up-to-date and make available to providers of AI systems who intend to integrate the AI project into their AI systems, documentation that enables providers of AI systems to have a good understanding of the capabilities and limitations of the general-purpose AI model and to comply with their obligations pursuant to this Regulation'
+      verbose: 'Provider has draw up and will keep up-to-date and make available to providers of other AI projects who intend to integrate the AI project into their AI systems, documentation that enables providers of AI systems to have a good understanding of the capabilities and limitations of the general-purpose AI model and to comply with their obligations pursuant to this Regulation'
       value: !!bool false 
     tasks: 
       article: 'ANNEX XII(1)(a)'
-      verbose: 'Provider has draw up and will keep up-to-date and make available to providers of AI systems who intend to integrate the AI project into their AI systems, documentation that enables providers of AI systems to have a good understanding of the capabilities and limitations of the general-purpose AI model and to comply with their obligations pursuant to this Regulatio, that includes general description of the AI project including the tasks that the model is intended to perform and the type and nature of AI systems into which it can be integrated;'
+      verbose: 'Provider has draw up and will keep up-to-date and make available to providers of other AI projects who intend to integrate the AI project into their AI systems, documentation that enables providers of AI systems to have a good understanding of the capabilities and limitations of the general-purpose AI model and to comply with their obligations pursuant to this Regulatio, that includes general description of the AI project including the tasks that the model is intended to perform and the type and nature of AI systems into which it can be integrated;'
       value: !!bool false 
     acceptable_use: 
       article: 'ANNEX XII(1)(b)'
-      verbose: 'Provider has draw up and will keep up-to-date and make available to providers of AI systems who intend to integrate the AI project into their AI systems, documentation that enables providers of AI systems to have a good understanding of the capabilities and limitations of the general-purpose AI model and to comply with their obligations pursuant to this Regulatio, that includes general description of the AI project including the acceptable use policies applicable;'
+      verbose: 'Provider has draw up and will keep up-to-date and make available to providers of other AI projects who intend to integrate the AI project into their other AI projects, documentation that enables providers of other AI projects to have a good understanding of the capabilities and limitations of the general-purpose AI model and to comply with their obligations pursuant to this Regulatio, that includes general description of the AI project including the acceptable use policies applicable;'
       value: !!bool false 
     release_date: 
       article: 'ANNEX XII(1)(c)'
-      verbose: 'Provider has draw up and will keep up-to-date and make available to providers of AI systems who intend to integrate the AI project into their AI systems, documentation that enables providers of AI systems to have a good understanding of the capabilities and limitations of the general-purpose AI model and to comply with their obligations pursuant to this Regulatio, that includes general description of the AI project including the date of release and methods of distribution;'
+      verbose: 'Provider has draw up and will keep up-to-date and make available to providers of other AI projects who intend to integrate the AI project into their other AI projects, documentation that enables providers of other AI projects to have a good understanding of the capabilities and limitations of the general-purpose AI model and to comply with their obligations pursuant to this Regulatio, that includes general description of the AI project including the date of release and methods of distribution;'
       value: !!bool false 
     hardware: 
       article: 'ANNEX XII(1)(d)'
-      verbose: 'Provider has draw up and will keep up-to-date and make available to providers of AI systems who intend to integrate the AI project into their AI systems, documentation that enables providers of AI systems to have a good understanding of the capabilities and limitations of the general-purpose AI model and to comply with their obligations pursuant to this Regulatio, that includes general description of the AI project including how the model interacts, or can be used to interact, with hardware or software that is not part of the model itself, where applicable;'
+      verbose: 'Provider has draw up and will keep up-to-date and make available to providers of other AI projects who intend to integrate the AI project into their other AI projects, documentation that enables providers of other AI projects to have a good understanding of the capabilities and limitations of the general-purpose AI model and to comply with their obligations pursuant to this Regulatio, that includes general description of the AI project including how the model interacts, or can be used to interact, with hardware or software that is not part of the model itself, where applicable;'
       value: !!bool false 
     versions: 
       article: 'ANNEX XII(1)(e)'
-      verbose: 'Provider has draw up and will keep up-to-date and make available to providers of AI systems who intend to integrate the AI project into their AI systems, documentation that enables providers of AI systems to have a good understanding of the capabilities and limitations of the general-purpose AI model and to comply with their obligations pursuant to this Regulatio, that includes general description of the AI project including the versions of relevant software related to the use of the general-purpose AI model, where applicable'
+      verbose: 'Provider has draw up and will keep up-to-date and make available to providers of other AI projects who intend to integrate the AI project into their other AI projects, documentation that enables providers of other AI projects to have a good understanding of the capabilities and limitations of the general-purpose AI model and to comply with their obligations pursuant to this Regulatio, that includes general description of the AI project including the versions of relevant software related to the use of the general-purpose AI model, where applicable'
       value: !!bool false 
     architecture: 
       article: 'ANNEX XII(1)(f)'
-      verbose: 'Provider has draw up and will keep up-to-date and make available to providers of AI systems who intend to integrate the AI project into their AI systems, documentation that enables providers of AI systems to have a good understanding of the capabilities and limitations of the general-purpose AI model and to comply with their obligations pursuant to this Regulatio, that includes general description of the AI project including the architecture and number of parameters;'
+      verbose: 'Provider has draw up and will keep up-to-date and make available to providers of other AI projects who intend to integrate the AI project into their other AI projects, documentation that enables providers of other AI projects to have a good understanding of the capabilities and limitations of the general-purpose AI model and to comply with their obligations pursuant to this Regulatio, that includes general description of the AI project including the architecture and number of parameters;'
       value: !!bool false 
     modality:  
       article: 'ANNEX XII(1)(g)'
-      verbose: 'Provider has draw up and will keep up-to-date and make available to providers of AI systems who intend to integrate the AI project into their AI systems, documentation that enables providers of AI systems to have a good understanding of the capabilities and limitations of the general-purpose AI model and to comply with their obligations pursuant to this Regulatio, that includes general description of the AI project including the modality (e.g. text, image) and format of inputs and outputs;'
+      verbose: 'Provider has draw up and will keep up-to-date and make available to providers of other AI projects who intend to integrate the AI project into their other AI projects, documentation that enables providers of other AI projects to have a good understanding of the capabilities and limitations of the general-purpose AI model and to comply with their obligations pursuant to this Regulatio, that includes general description of the AI project including the modality (e.g. text, image) and format of inputs and outputs;'
       value: !!bool false 
     license: 
       article: 'ANNEX XII(1)(h)'
-      verbose: 'Provider has draw up and will keep up-to-date and make available to providers of AI systems who intend to integrate the AI project into their AI systems, documentation that enables providers of AI systems to have a good understanding of the capabilities and limitations of the general-purpose AI model and to comply with their obligations pursuant to this Regulatio, that includes general description of the AI project including the licence for the model.;'
+      verbose: 'Provider has draw up and will keep up-to-date and make available to providers of other AI projects who intend to integrate the AI project into their other AI projects, documentation that enables providers of other AI projects to have a good understanding of the capabilities and limitations of the general-purpose AI model and to comply with their obligations pursuant to this Regulatio, that includes general description of the AI project including the licence for the model.;'
       value: !!bool false 
   other:
     policy: 
@@ -748,6 +754,8 @@ additional_provider_obligations:
 
 # Information related to the additional transparency requirements in Article 50, if applicable
 
+# TODO the requirements seem to be missing from the below. We also need to work on the logic, which is complex. 
+
 transparency_related: 
   direct_user_interaction: 
     article: 'Art. 50'

utils.py

@@ -63,11 +63,11 @@ def check_within_scope_act(project_cc_yaml):
         print("Your project is not within the scope of the Act and its requirements.")      
         return False
 
-def check_excepted(project_cc_yaml):
+def check_excepted(project_cc_yaml):  #it would be nice to pass dispositive_variables into this function so we can run the code commented out below
     if (project_cc_yaml['excepted']['scientific'] or 
         project_cc_yaml['excepted']['pre_market'] or 
         (project_cc_yaml['ai_system']['ai_system']['value'] == True and project_cc_yaml['excepted']['open_source_ai_system']) or 
-        (project_cc_yaml['gpai_model']['gpai_model']['value'] == True and project_cc_yaml['excepted']['open_source_gpai_system'])
+        (project_cc_yaml['gpai_model']['gpai_model']['value'] == True and project_cc_yaml['excepted']['open_source_gpai_system']) #and dispositive_variables['gpai_model_systemic_risk'] == False)
     ):
         print("Your project falls into one of the exemptions from the Act.")   
         return True