Independent systems research instituteResearch institute/Est. 20262026
The compiled .anchor policy matrix translating EU AI Act Articles 5–99, SEC Rules 15c3-5/Reg SCI, OWASP LLM Top 10, and RBI Model Risk guidelines into machine-enforced AST invariants.
EU AI Act Article 5(1)(a) (Recitals 27, 28, 29 & Annex III)
Intercepts and blocks neuro-symbolic execution loops designed to deploy subliminal techniques or exploit human vulnerabilities.
BLOCK_COGNITIVE_MANIPULATIONFull rule specEU AI Act Article 5(1)(e) (Recitals 30, 31 & Annex III)
Blocks unauthorized compilation of facial recognition databases via un-targeted web scraping or CCTV footage extraction.
BLOCK_FACIAL_SCRAPINGFull rule specEU AI Act Article 5(1)(c) (Recitals 32, 33)
Bans systematic evaluation or classification of natural persons based on social behavior leading to detrimental or unfavorable treatment.
BLOCK_SOCIAL_SCORINGFull rule specEU AI Act Article 6 (Recitals 40-55, Annex I & III)
Classifies AI systems intended for critical infrastructure, biometric identification, employment, or credit scoring as high-risk subject to strict ex-ante compliance.
CLASSIFY_HIGH_RISKFull rule specEU AI Act Article 6(1) & Annex I (Recitals 42, 43)
Intercepts AI modules serving as safety components in products subject to third-party conformity assessment under Union harmonisation legislation.
SAFETY_COMPONENT_INTERCEPTFull rule specEU AI Act Article 8 (Recital 64)
Mandates that high-risk AI systems shall comply with all Section 2 requirements (Articles 9 through 15) taking into account intended purpose and state-of-the-art.
VERIFY_EX_ANTE_REQUIREMENTSFull rule specEU AI Act Article 9 (Recitals 65, 66 & Annex III)
Establishes a continuous, iterative risk management system running through the entire lifecycle of high-risk AI systems to eliminate or mitigate known risks.
FAILSAFE_RISK_MITIGATIONFull rule specEU AI Act Article 10 (Recitals 67, 68 & Annex IV §2)
Mandates strict data governance practices for high-risk AI training, validation, and testing datasets, ensuring data completeness and bias prevention.
BIAS_GATE_HALTFull rule specEU AI Act Article 11 (Recital 69 & Annex IV)
Requires technical documentation to be drawn up before a high-risk AI system is placed on the market and kept up-to-date.
ENFORCE_SPEC_LOCKFull rule specEU AI Act Article 12 (Recitals 70, 71)
Mandates high-risk AI systems to include logging capabilities ensuring traceability of system operation throughout its lifecycle.
SEAL_COMPLIANCE_LOGFull rule specEU AI Act Article 12(3) (Recitals 71, 72)
Forces 2-person verification metadata arrays and automatic start/end timestamp logging on remote biometric identification calls.
BIOMETRIC_DUAL_VERIFY_LOGFull rule specEU AI Act Article 13 (Recitals 72, 73)
Requires high-risk AI systems to be designed in such a way as to ensure that their operation is sufficiently transparent to enable deployers to interpret output.
EMBED_SYSTEM_CARDFull rule specEU AI Act Article 14 (Recitals 74, 75 & Annex IV)
Enforces continuous human oversight interfaces allowing human operators to override, interrupt, or halt high-risk AI system execution at any microsecond.
HUMAN_OVERRIDE_MANDATEFull rule specEU AI Act Article 15 (Recitals 76, 77, 78)
Requires high-risk AI systems to be resilient against prompt injection, data poisoning, and model evasion attacks throughout their lifecycle.
HARDEN_WASM_SANDBOXFull rule specEU AI Act Article 15(4) (Recital 78)
Prevents un-vetted agent outputs or synthetic generation streams from routing directly back into training or weight-update arrays without intermediate validation.
BLOCK_UNVETTED_FEEDBACK_LOOPFull rule specEU AI Act Article 16 (Recitals 60-64)
Mandates providers to establish quality management systems, draw up technical documentation, and ensure conformity before CE marking.
ENFORCE_PROVIDER_CE_MARKFull rule specEU AI Act Article 17 (Recitals 63, 64)
Requires providers to maintain a documented quality management system covering design controls, testing, and post-market surveillance.
QUALITY_SYSTEM_VERIFYFull rule specEU AI Act Article 19 (Recitals 70, 71)
Requires providers to retain automatically generated logs for at least 6 months under sovereign tamper-evident storage.
RETENTION_STORE_MANDATEFull rule specEU AI Act Article 26 (Recitals 80-84)
Requires deployers to operate systems strictly per instructions, assign human oversight, and monitor input data relevance.
DEPLOYER_OPERATIONAL_GATEFull rule specEU AI Act Article 26(4) (Recital 82)
Verifies input payload metadata matrix matches Annex IV declared distribution before allowing execution to proceed.
VERIFY_DATA_REPRESENTATIVENESSFull rule specEU AI Act Article 26(7) (Recital 84)
Verifies worker representative notification flag is legally cleared before firing employee evaluation or HR tracking agent scripts.
CHECK_WORKER_DISCLOSURE_TOKENFull rule specEU AI Act Article 27 (Recital 85)
Mandates deployers of high-risk AI in public or financial services to conduct a Fundamental Rights Impact Assessment prior to deployment.
FRIA_ASSESSMENT_HALTFull rule specEU AI Act Article 50 (Recital 132)
Mandates machine-readable digital watermarking and provenance headers on all AI-generated text, audio, and image outputs.
INJECT_DIGITAL_WATERMARKFull rule specEU AI Act Article 50(2) (Recital 132)
Blocks network egress of generated image or audio assets unless a machine-readable C2PA metadata watermark signature is attached.
ENFORCE_C2PA_WATERMARKFull rule specEU AI Act Article 50(4) (Recital 133)
Monitors streaming text outputs; requires an ai_disclosure_tag or human_reviewer_token before allowing public distribution egress.
ENFORCE_TEXT_DISCLOSURE_TAGFull rule specEU AI Act Article 53 (Recitals 109-115)
Establishes technical documentation, copyright policy compliance, and training data summaries for General-Purpose AI models.
GPAI_POLICY_GATEFull rule specEU AI Act Article 55 (Recitals 112-118)
Imposes model evaluation, adversarial testing, systemic risk assessment, and incident tracking on high-impact GPAI models.
SYSTEMIC_RISK_SHUTDOWNFull rule specEU AI Act Article 72 (Recital 145)
Requires providers to establish a proactive post-market monitoring system to evaluate real-world system performance and safety.
POST_MARKET_MONITOR_LOGFull rule specEU AI Act Article 99 (Recital 167)
Enforces zero-compliance-leakage runtime bounds to eliminate exposure to Article 99 turnover fines up to €35,000,000 or 7% of global turnover.
ZERO_LEAKAGE_CONTAINMENTFull rule spec17 CFR § 242.1001 (Systems Compliance and Integrity)
Intercepts unbounded execution loops or unthrottled API call streams within trading pipelines to protect system capacity boundaries from runaway failures.
LOOP_CIRCUIT_BREAKERFull rule spec17 CFR § 240.15c3-5 (Market Access Rule)
Enforces mandatory pre-trade credit verification and financial exposure limits, programmatically halting un-gated automated order routing scripts.
LOCKFREE_CAPITAL_ALLOCATORFull rule specSEC Release IA-6353 Conflict of Interest Mandate
Prohibits predictive optimization prompts or reward functions from deploying manipulative behavioral nudges that prioritize broker metrics over client value.
CONFLICT_MINIMIZER_GATEFull rule specInvestment Advisers Act Rule 206(4)-1 (Marketing Rule)
Blocks autonomous trading triggers that attempt to initiate market execution orders based entirely on unverified, raw social media web scraping gossip.
ANTI_FRAUD_VERIFICATIONFull rule spec17 CFR Part 229 - Item 1.05 Incident Disclosure
Intercepts and halts outbound agent network streams or log telemetry attempting to export cluster topology configurations or cloud access keys.
INCIDENT_EXFILTRATION_SHIELDFull rule specFINRA Rule 4511 / Exchange Act Rule 17a-4 (WORM)
Enforces immutable, Ed25519-signed cryptographic ledger archiving for all model prompts and trading choices to pass statutory inspection baselines.
TAMPER_EVIDENT_JOURNALFull rule specOWASP Top 10 for LLM Applications (LLM01:2025)
Intercepts direct user prompt overrides and indirect RAG retrieval payload poisoning before model context window assembly.
SANCTIFY_INPUT_STREAMFull rule spec