⚠️
Demo dossier — synthetic runtime data. These audits are published for demonstration purposes. Runtime traces were synthetically generated to illustrate the behavioral audit methodology. Systems are anonymised. Full production dossiers with live execution evidence are available under NDA — contact@factnotebook.com
⚠️
STATIC ANALYSIS — Limited confidence Code and documentation were analysed statically — the audit engine did not execute the system live. Where session traces were provided, behavioural findings derive from those traces, not from live execution. Some verdicts rely on heuristic signals and are labelled accordingly; they may not reflect actual runtime behaviour. For a full technical dossier with executable evidence and SHA-256 seal, contact contact@factnotebook.com.

Sincerity Report

agents-for-openbb

Audit ID: CSVA-20260614-9BE11290 | Generated: 2026-06-17 09:47 UTC

'Compliance isn't what you claim — it's what your code executes.'

Sincerity Verdict: GOVERNANCE MATURITY GAP

These three metrics measure independent dimensions of trustworthiness. A system can have no contradictions (SCI=100%) yet still have significant missing evidence (Integrity Gap>0%). The Composite Sincerity score combines all observed dimensions.

Dimension What it detects Status Value
Contradictions — SCI DOC affirms A · CODE shows B (active conflict) ✅ 100.0%
Missing Evidence — Integrity Gap DOC affirms A · CODE shows nothing ✅ 1.9%
Operational Validation — Runtime Confidence Controls verified at runtime ⚠️ 72.5%
Composite Sincerity Combined trustworthiness score — 87.3%

✅ Contradictions: No active contradictions — code and documentation are consistent
✅ Missing Evidence: 1.9% of controls have no technical implementation found in audit scope

4. 🔍 SINCERITY ANALYSIS (Reliability Index of Compliance Declarations)

FINDING : 12.7% SINCERITY GAP

The sincerity analysis measures the correlation between compliance declarations (DOC) and algorithmic reality (CODE).

Sincerity Verdict :

🟠 GOVERNANCE MATURITY GAP

📐 FORMAL METRICS — REGULATORY EVIDENCE ENGINE

Indicator Value Status Interpretation
DFI (Documentation Fidelity Index) 100.0% 🟢 DOC↔CODE truthfulness: 100% = no false claims in documentation
Evidence Coverage Gap 1.9% 🟢 Controls with no evidence in audit scope — distinct from DFI
RuntimeConfidence 72.5% 🟡 Test pass rate — FULL mode only (N/A in STATIC)
Composite Sincerity 87.3% 🟢 DOC↔CODE alignment score
Audit mode STATIC — STATIC = DOC↔CODE analysis · FULL = + runtime execution

Metrics computed from artefacts in audit scope. In STATIC mode, runtime-dependent metrics (RuntimeConfidence) are unavailable. All metrics are anchored in the SHA-256 seal (Section 10).
Note: Exact figures reflect the analysed artefact set — not the full system boundary.

🧠 AUDITOR INTERPRETATION

Situation : Significant gap: important compliance commitments are not found in the code.

Sincerity-related risks : MODERATE. The file is vulnerable. An urgent update of the implementation is required.

🛠️ CORRELATION ANALYSIS (TOP 3)

📊 EVIDENCE BREAKDOWN

checkpoints supported by documentation claims, configuration files, or structural inference only — no source code artifact was directly linked. This does not mean controls are absent; they may exist in code not provided, in external services, or in formats not machine-readable.

Compliance without technical sincerity is legally riskier than non-compliance with honest documentation.

🧾 Evidence Ledger — Regulatory traceability register

CAMSVA Multi-Source Correlation · Triangulation Code × Doc × Tests × Runtime

Indicator Value
Control points analysed 31
Documentary facades detected 0
Skeleton Ratio (Structural density) 100%
Checkpoint Article Sources (Technical) Code Internal Doc Test Trace Execution Trace Seal Sincerité globale Score
Audit Trail N/A Dossier global NOT OBSERVED NOT OBSERVED ❌ ÉCHOUÉ (1) 🔴 20 sess. · 0%✅ · 100%❌ - ⬛NON-COMPLIANTNONEXISTENT CONTROL** 0.00
Automatic Blocking Linked to Human Rejection N/A Dossier global NOT OBSERVED NOT OBSERVED ⚠️ PARTIAL 0✅ / 0❌ 🔴 20 sess. · 0%✅ · 3⚠️ · 85%❌ - ⬛NON-COMPLIANTNONEXISTENT CONTROL** 0.00
Confidence-Based Human Routing N/A Dossier global NOT OBSERVED NOT OBSERVED ⚠️ PARTIAL 0✅ / 0❌ 🟢 20 sess. · 95%✅ · 5%❌ - ⬛⚠️ UNVERIFIABLE — Activity signals detected but no source implementationNONEXISTENT CONTROL** 0.00
Contextual Memory Limitation N/A Dossier global NOT OBSERVED NOT OBSERVED ⚠️ PARTIAL 0✅ / 1❌ 🟢 20 sess. · 100%✅ - ⬛⚠️ UNVERIFIABLE — Activity signals detected but no source implementationNONEXISTENT CONTROL** 0.00
Data Cleansing & Anonymisation N/A Dossier global NOT OBSERVED NOT OBSERVED ⚠️ PARTIAL 0✅ / 0❌ 🟢 20 sess. · 100%✅ - ⬛⚠️ UNVERIFIABLE — Activity signals detected but no source implementationNONEXISTENT CONTROL** 0.00
Decision Record Structure N/A Dossier global NOT OBSERVED NOT OBSERVED ⚠️ PARTIAL 0✅ / 1❌ ⚠️ 20 sess. · 85%✅ · 3⚠️ - ⬛NON-COMPLIANTNONEXISTENT CONTROL** 0.00
Authority Delegation N/A Dossier global NOT OBSERVED NOT OBSERVED ⚠️ PARTIAL 0✅ / 1❌ 🟢 20 sess. · 100%✅ - ⬛⚠️ UNVERIFIABLE — Activity signals detected but no source implementationNONEXISTENT CONTROL** 0.00
Bypass Detection N/A Dossier global NOT OBSERVED NOT OBSERVED ⚠️ PARTIAL 0✅ / 1❌ 🔴 20 sess. · 15%✅ · 85%❌ - ⬛NON-COMPLIANTNONEXISTENT CONTROL** 0.00
Human-in-the-Loop Mechanism N/A Dossier global NOT OBSERVED NOT OBSERVED ⚠️ PARTIAL 0✅ / 1❌ 🟢 20 sess. · 100%✅ - ⬛⚠️ UNVERIFIABLE — Activity signals detected but no source implementationNONEXISTENT CONTROL** 0.00
Escalation to Human N/A Dossier global NOT OBSERVED NOT OBSERVED ❌ ÉCHOUÉ (1) 🟢 20 sess. · 100%✅ - ⬛⚠️ UNVERIFIABLE — Activity signals detected but no source implementationNONEXISTENT CONTROL** 0.00
Human Validation N/A Dossier global NOT OBSERVED NOT OBSERVED ❌ ÉCHOUÉ (1) 🔴 20 sess. · 0%✅ · 3⚠️ · 85%❌ - ⬛NON-COMPLIANTNONEXISTENT CONTROL** 0.00
Execution Limits (Guardrails) N/A Dossier global NOT OBSERVED NOT OBSERVED ⚠️ PARTIAL 0✅ / 1❌ 🟢 20 sess. · 100%✅ - ⬛⚠️ UNVERIFIABLE — Activity signals detected but no source implementationNONEXISTENT CONTROL** 0.00
User Override N/A Dossier global NOT OBSERVED NOT OBSERVED ⚠️ PARTIAL 0✅ / 1❌ 🟢 20 sess. · 100%✅ - ⬛⚠️ UNVERIFIABLE — Activity signals detected but no source implementationNONEXISTENT CONTROL** 0.00
PII Masking Before External Transmission N/A Dossier global NOT OBSERVED NOT OBSERVED ⚠️ PARTIAL 0✅ / 1❌ 🔴 20 sess. · 0%✅ · 100%❌ - ⬛NON-COMPLIANTNONEXISTENT CONTROL** 0.00
Agent Tool Scope Article 14 Dossier global NOT OBSERVED NOT OBSERVED ⚠️ PARTIAL 0✅ / 1❌ NOT OBSERVED - 0.00
Unsafe Serialization Formats Article 15 Dossier global NOT OBSERVED NOT OBSERVED ⚠️ PARTIAL 0✅ / 1❌ NOT OBSERVED - 0.00
Error Handling Article 15 Dossier global NOT OBSERVED NOT OBSERVED ⚠️ PARTIAL 0✅ / 1❌ NOT OBSERVED - 0.00
Prompt Guardrail / Injection Detection Article 15 Dossier global NOT OBSERVED NOT OBSERVED ⚠️ PARTIAL 0✅ / 1❌ NOT OBSERVED - 0.00
Risk Mitigation Article 9 Dossier global NOT OBSERVED NOT OBSERVED ⚠️ PARTIAL 0✅ / 1❌ NOT OBSERVED - 0.00
Logging Implementation Article 12 Dossier global NOT OBSERVED NOT OBSERVED ❌ ÉCHOUÉ (1) NOT OBSERVED - 0.00
Logging Integrity Article 12 Dossier global NOT OBSERVED NOT OBSERVED ❌ ÉCHOUÉ (1) NOT OBSERVED - 0.00
Component Obsolescence Article 15 Dossier global NOT OBSERVED NOT OBSERVED ✅ PASSÉ (1) NOT OBSERVED - 0.00
Continuous Monitoring Article 9 Dossier global NOT OBSERVED NOT OBSERVED ❌ ÉCHOUÉ (1) NOT OBSERVED - 0.00
Physical Dataset Existence Article 10 Dossier global NOT OBSERVED NOT OBSERVED ❌ ÉCHOUÉ (1) NOT OBSERVED - 0.00
Balancing & Representativeness Article 10 Dossier global NOT OBSERVED NOT OBSERVED ⚠️ PARTIAL 0✅ / 0❌ NOT OBSERVED - 0.00
Input Robustness Article 15 Dossier global NOT OBSERVED NOT OBSERVED ⚠️ PARTIAL 0✅ / 1❌ NOT OBSERVED - 0.00
Real Execution Traces Article 12 Dossier global NOT OBSERVED NOT OBSERVED ❌ ÉCHOUÉ (1) NOT OBSERVED - 0.00
Cybersecurity Audit Article 15 Dossier global NOT OBSERVED NOT OBSERVED ✅ PASSÉ (1) NOT OBSERVED - 0.00
Human Decision Endpoint Article 14 Dossier global NOT OBSERVED NOT OBSERVED ⚠️ PARTIAL 0✅ / 0❌ NOT OBSERVED - 0.00
Human Approval Gates Execution Article 14 Dossier global NOT OBSERVED NOT OBSERVED ⚠️ PARTIAL 0✅ / 0❌ NOT OBSERVED - 0.00
Full Workflow Integration Article 14 Dossier global NOT OBSERVED NOT OBSERVED ⚠️ PARTIAL 0✅ / 0❌ NOT OBSERVED - 0.00

📊 COMPLIANCE DASHBOARD (EU AI ACT PILLARS)

Section Score Status
I. Stratégie & Gouvernance 92.5% 🟢 COMPLIANT
II. Ingénierie des Données 92.5% 🟢 COMPLIANT
III. Transparence & Interface 61.7% 🟡 PARTIAL
IV. Résilience & Cybersécurité 85.0% 🟢 COMPLIANT

🛰️ Confrontation & Sincerity Report

Cross-analysis between declared commitments and technical reality.

N/A - Audit Trail

Sincerity Verdict: ⬛NON-COMPLIANTNONEXISTENT CONTROL
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : EVIDENCE INSUFFICIENT
* Tests — result : ❌ ÉCHOUÉ (1)
* External Evidence :** NOT OBSERVED

🔬 Runtime — Process Mining Analysis (Behavioral Audit) :
* Sample : 2026-04-04 → 2026-04-05 (2j)
* Sessions analysed : 20
* ✅ Compliant : 0 (0.0%)
* ⚠️ Partial : 0
* 🔴 Non-compliant : 20 (100.0%)
* Sessions NOK : fb-D534D661, fb-89F335E1, fb-3899A858, fb-6F43C4DE, fb-BB281A1F, fb-FA3E3725, fb-193F126A, fb-3ABD45B7, fb-1ACF4C41, fb-9318008E, hitl-222B705F, hitl-ED2A6C5D, hitl-26E4C429, fb-9EC3B248, fb-E439D5BF, fb-5F56C6CC, fb-659B8219, fb-E3B62030, fb-F7C43BE4, fb-8111D2BC

Detailed analysis :
* ⚠️ FACADE WITHOUT TEST: No test validates the declared compliance.

N/A - Automatic Blocking Linked to Human Rejection

Sincerity Verdict: ⬛NON-COMPLIANTNONEXISTENT CONTROL
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : EVIDENCE INSUFFICIENT
* Tests — result : ⚠️ PARTIAL 0✅ / 0❌
* External Evidence :** NOT OBSERVED

🔬 Runtime — Process Mining Analysis (Behavioral Audit) :
* Sample : 2026-04-04 → 2026-04-05 (2j)
* Sessions analysed : 20
* ✅ Compliant : 0 (0.0%)
* ⚠️ Partial : 3
* 🔴 Non-compliant : 17 (85.0%)
* Sessions NOK : fb-D534D661, fb-89F335E1, fb-3899A858, fb-6F43C4DE, fb-BB281A1F, fb-FA3E3725, fb-193F126A, fb-3ABD45B7, fb-1ACF4C41, fb-9318008E, fb-9EC3B248, fb-E439D5BF, fb-5F56C6CC, fb-659B8219, fb-E3B62030, fb-F7C43BE4, fb-8111D2BC

Detailed analysis :
* ⚠️ FACADE WITHOUT TEST: No test validates the declared compliance.

N/A - Confidence-Based Human Routing

Sincerity Verdict: ⬛⚠️ UNVERIFIABLE — Activity signals detected but no source implementationNONEXISTENT CONTROL
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : OBSERVED
* Tests — result : ⚠️ PARTIAL 0✅ / 0❌
* External Evidence :** NOT OBSERVED

🔬 Runtime — Process Mining Analysis (Behavioral Audit) :
* Sample : 2026-04-04 → 2026-04-05 (2j)
* Sessions analysed : 20
* ✅ Compliant : 19 (95.0%)
* ⚠️ Partial : 0
* 🔴 Non-compliant : 1 (5.0%)
* Sessions NOK : fb-89F335E1

Detailed analysis :
* ⚠️ FACADE WITHOUT TEST: No test validates the declared compliance.
* 🚨 GHOST : Les logs simulent une réussite alors que le code source est absent ou invalide.

N/A - Contextual Memory Limitation

Sincerity Verdict: ⬛⚠️ UNVERIFIABLE — Activity signals detected but no source implementationNONEXISTENT CONTROL
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : OBSERVED
* Tests — result : ⚠️ PARTIAL 0✅ / 1❌
* External Evidence :** NOT OBSERVED

🔬 Runtime — Process Mining Analysis (Behavioral Audit) :
* Sample : 2026-04-04 → 2026-04-05 (2j)
* Sessions analysed : 20
* ✅ Compliant : 20 (100.0%)
* ⚠️ Partial : 0
* 🔴 Non-compliant : 0 (0.0%)

Detailed analysis :
* ⚠️ FACADE WITHOUT TEST: No test validates the declared compliance.
* 🚨 GHOST : Les logs simulent une réussite alors que le code source est absent ou invalide.

N/A - Data Traceability

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

N/A - Data Cleansing & Anonymisation

Sincerity Verdict: ⬛⚠️ UNVERIFIABLE — Activity signals detected but no source implementationNONEXISTENT CONTROL
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : OBSERVED
* Tests — result : ⚠️ PARTIAL 0✅ / 0❌
* External Evidence :** NOT OBSERVED

🔬 Runtime — Process Mining Analysis (Behavioral Audit) :
* Sample : 2026-04-04 → 2026-04-05 (2j)
* Sessions analysed : 20
* ✅ Compliant : 20 (100.0%)
* ⚠️ Partial : 0
* 🔴 Non-compliant : 0 (0.0%)

Detailed analysis :
* ⚠️ FACADE WITHOUT TEST: No test validates the declared compliance.
* 🚨 GHOST : Les logs simulent une réussite alors que le code source est absent ou invalide.

N/A - Decision Record Structure

Sincerity Verdict: ⬛NON-COMPLIANTNONEXISTENT CONTROL
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : PARTIAL
* Tests — result : ⚠️ PARTIAL 0✅ / 1❌
* External Evidence :** NOT OBSERVED

🔬 Runtime — Process Mining Analysis (Behavioral Audit) :
* Sample : 2026-04-04 → 2026-04-05 (2j)
* Sessions analysed : 20
* ✅ Compliant : 17 (85.0%)
* ⚠️ Partial : 3
* 🔴 Non-compliant : 0 (0.0%)

Detailed analysis :
* ⚠️ FACADE WITHOUT TEST: No test validates the declared compliance.

N/A - Authority Delegation

Sincerity Verdict: ⬛⚠️ UNVERIFIABLE — Activity signals detected but no source implementationNONEXISTENT CONTROL
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : OBSERVED
* Tests — result : ⚠️ PARTIAL 0✅ / 1❌
* External Evidence :** NOT OBSERVED

🔬 Runtime — Process Mining Analysis (Behavioral Audit) :
* Sample : 2026-04-04 → 2026-04-05 (2j)
* Sessions analysed : 20
* ✅ Compliant : 20 (100.0%)
* ⚠️ Partial : 0
* 🔴 Non-compliant : 0 (0.0%)

Detailed analysis :
* ⚠️ FACADE WITHOUT TEST: No test validates the declared compliance.
* 🚨 GHOST : Les logs simulent une réussite alors que le code source est absent ou invalide.

N/A - System Explainability

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

N/A - Bypass Detection

Sincerity Verdict: ⬛NON-COMPLIANTNONEXISTENT CONTROL
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : EVIDENCE INSUFFICIENT
* Tests — result : ⚠️ PARTIAL 0✅ / 1❌
* External Evidence :** NOT OBSERVED

🔬 Runtime — Process Mining Analysis (Behavioral Audit) :
* Sample : 2026-04-04 → 2026-04-05 (2j)
* Sessions analysed : 20
* ✅ Compliant : 3 (15.0%)
* ⚠️ Partial : 0
* 🔴 Non-compliant : 17 (85.0%)
* Sessions NOK : fb-D534D661, fb-89F335E1, fb-3899A858, fb-6F43C4DE, fb-BB281A1F, fb-FA3E3725, fb-193F126A, fb-3ABD45B7, fb-1ACF4C41, fb-9318008E, fb-9EC3B248, fb-E439D5BF, fb-5F56C6CC, fb-659B8219, fb-E3B62030, fb-F7C43BE4, fb-8111D2BC

Detailed analysis :
* ⚠️ FACADE WITHOUT TEST: No test validates the declared compliance.

N/A - Human-in-the-Loop Mechanism

Sincerity Verdict: ⬛⚠️ UNVERIFIABLE — Activity signals detected but no source implementationNONEXISTENT CONTROL
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : OBSERVED
* Tests — result : ⚠️ PARTIAL 0✅ / 1❌
* External Evidence :** NOT OBSERVED

🔬 Runtime — Process Mining Analysis (Behavioral Audit) :
* Sample : 2026-04-04 → 2026-04-05 (2j)
* Sessions analysed : 20
* ✅ Compliant : 20 (100.0%)
* ⚠️ Partial : 0
* 🔴 Non-compliant : 0 (0.0%)

Detailed analysis :
* ⚠️ FACADE WITHOUT TEST: No test validates the declared compliance.
* 🚨 GHOST : Les logs simulent une réussite alors que le code source est absent ou invalide.

N/A - Escalation to Human

Sincerity Verdict: ⬛⚠️ UNVERIFIABLE — Activity signals detected but no source implementationNONEXISTENT CONTROL
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : OBSERVED
* Tests — result : ❌ ÉCHOUÉ (1)
* External Evidence :** NOT OBSERVED

🔬 Runtime — Process Mining Analysis (Behavioral Audit) :
* Sample : 2026-04-04 → 2026-04-05 (2j)
* Sessions analysed : 20
* ✅ Compliant : 20 (100.0%)
* ⚠️ Partial : 0
* 🔴 Non-compliant : 0 (0.0%)

Detailed analysis :
* ⚠️ FACADE WITHOUT TEST: No test validates the declared compliance.
* 🚨 GHOST : Les logs simulent une réussite alors que le code source est absent ou invalide.

N/A - Human Validation

Sincerity Verdict: ⬛NON-COMPLIANTNONEXISTENT CONTROL
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : EVIDENCE INSUFFICIENT
* Tests — result : ❌ ÉCHOUÉ (1)
* External Evidence :** NOT OBSERVED

🔬 Runtime — Process Mining Analysis (Behavioral Audit) :
* Sample : 2026-04-04 → 2026-04-05 (2j)
* Sessions analysed : 20
* ✅ Compliant : 0 (0.0%)
* ⚠️ Partial : 3
* 🔴 Non-compliant : 17 (85.0%)
* Sessions NOK : fb-D534D661, fb-89F335E1, fb-3899A858, fb-6F43C4DE, fb-BB281A1F, fb-FA3E3725, fb-193F126A, fb-3ABD45B7, fb-1ACF4C41, fb-9318008E, fb-9EC3B248, fb-E439D5BF, fb-5F56C6CC, fb-659B8219, fb-E3B62030, fb-F7C43BE4, fb-8111D2BC

Detailed analysis :
* ⚠️ FACADE WITHOUT TEST: No test validates the declared compliance.

N/A - Serious Incident Notification Procedure

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

N/A - Execution Limits (Guardrails)

Sincerity Verdict: ⬛⚠️ UNVERIFIABLE — Activity signals detected but no source implementationNONEXISTENT CONTROL
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : OBSERVED
* Tests — result : ⚠️ PARTIAL 0✅ / 1❌
* External Evidence :** NOT OBSERVED

🔬 Runtime — Process Mining Analysis (Behavioral Audit) :
* Sample : 2026-04-04 → 2026-04-05 (2j)
* Sessions analysed : 20
* ✅ Compliant : 20 (100.0%)
* ⚠️ Partial : 0
* 🔴 Non-compliant : 0 (0.0%)

Detailed analysis :
* ⚠️ FACADE WITHOUT TEST: No test validates the declared compliance.
* 🚨 GHOST : Les logs simulent une réussite alors que le code source est absent ou invalide.

N/A - User Override

Sincerity Verdict: ⬛⚠️ UNVERIFIABLE — Activity signals detected but no source implementationNONEXISTENT CONTROL
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : OBSERVED
* Tests — result : ⚠️ PARTIAL 0✅ / 1❌
* External Evidence :** NOT OBSERVED

🔬 Runtime — Process Mining Analysis (Behavioral Audit) :
* Sample : 2026-04-04 → 2026-04-05 (2j)
* Sessions analysed : 20
* ✅ Compliant : 20 (100.0%)
* ⚠️ Partial : 0
* 🔴 Non-compliant : 0 (0.0%)

Detailed analysis :
* ⚠️ FACADE WITHOUT TEST: No test validates the declared compliance.
* 🚨 GHOST : Les logs simulent une réussite alors que le code source est absent ou invalide.

N/A - PII Masking Before External Transmission

Sincerity Verdict: ⬛NON-COMPLIANTNONEXISTENT CONTROL
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : EVIDENCE INSUFFICIENT
* Tests — result : ⚠️ PARTIAL 0✅ / 1❌
* External Evidence :** NOT OBSERVED

🔬 Runtime — Process Mining Analysis (Behavioral Audit) :
* Sample : 2026-04-04 → 2026-04-05 (2j)
* Sessions analysed : 20
* ✅ Compliant : 0 (0.0%)
* ⚠️ Partial : 0
* 🔴 Non-compliant : 20 (100.0%)
* Sessions NOK : fb-D534D661, fb-89F335E1, fb-3899A858, fb-6F43C4DE, fb-BB281A1F, fb-FA3E3725, fb-193F126A, fb-3ABD45B7, fb-1ACF4C41, fb-9318008E, hitl-222B705F, hitl-ED2A6C5D, hitl-26E4C429, fb-9EC3B248, fb-E439D5BF, fb-5F56C6CC, fb-659B8219, fb-E3B62030, fb-F7C43BE4, fb-8111D2BC

Detailed analysis :
* ⚠️ FACADE WITHOUT TEST: No test validates the declared compliance.

N/A - Post-Market Plan

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 14 - Agent Tool Scope

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : ⚠️ PARTIAL 0✅ / 1❌
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 15 - Unsafe Serialization Formats

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : ⚠️ PARTIAL 0✅ / 1❌
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 15 - Error Handling

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : ⚠️ PARTIAL 0✅ / 1❌
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 15 - Prompt Guardrail / Injection Detection

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : ⚠️ PARTIAL 0✅ / 1❌
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 9 - Risk Mitigation

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : ⚠️ PARTIAL 0✅ / 1❌
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 10 - Bias Metrics

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 12 - Logging Implementation

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : ❌ ÉCHOUÉ (1)
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 12 - Logging Integrity

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : ❌ ÉCHOUÉ (1)
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 15 - Component Obsolescence

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : ✅ PASSÉ (1)
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 9 - Continuous Monitoring

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : ❌ ÉCHOUÉ (1)
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 15 - Secure Format Policy

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 10 - Physical Dataset Existence

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : ❌ ÉCHOUÉ (1)
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 10 - Balancing & Representativeness

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : ⚠️ PARTIAL 0✅ / 0❌
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 10 - Dataset Quality

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 10 - Data Inventory

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 15 - Input Robustness

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : ⚠️ PARTIAL 0✅ / 1❌
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 13 - Limitations Disclosure

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 12 - Storage Definition

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 12 - Real Execution Traces

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : ❌ ÉCHOUÉ (1)
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 11 - Model Card

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 15 - Cybersecurity Audit

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : ✅ PASSÉ (1)
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 9 - Risk Matrix

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 9 - Risk Ownership Assignment

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 9 - Risk Register

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 11 - System Architecture

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 13 - User Notice

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 11 - Version Management

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 15 - Robustness Level Reality

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 26 - Deployer Identity

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 12 - Log Retention Policy

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 25 - Provider Identity

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 4 - Documented AI Policy

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Unknown - FACT_ART

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 27 - FRIA — Fundamental Rights Impact Assessment

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : —
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 14 - Human Decision Endpoint

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : ⚠️ PARTIAL 0✅ / 0❌
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 14 - Human Approval Gates Execution

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : ⚠️ PARTIAL 0✅ / 0❌
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

Article 14 - Full Workflow Integration

Sincerity Verdict: **
* Technical Evidence (Code) : NOT OBSERVED
* Documentary Evidence : NOT OBSERVED
* Execution Evidence : NOT OBSERVED
* Tests — result : ⚠️ PARTIAL 0✅ / 0❌
* External Evidence :** NOT OBSERVED

Detailed analysis :
No anomaly detected.

---

🔬 Behavioral Audit — Evidence Summary

Metric Value
RuntimeConfidence 72.5%
Sessions analysed 20
Checkpoints evaluated 18
CRITICAL signals 0

📄 Full detail: see FACTNOTEBOOK_PHASE_W_BEHAVIORAL.html
(checkpoint tables · session × checkpoint matrix · temporal trend · remediation priorities)

Priority Actions

Checkpoint Article Verdict Scope
Audit Trail Article 12 🔴 0.0% 20/20 sessions
Automatic Blocking Linked to Human Rejection Article 14 🔴 0.0% 17/20 sessions
Human Validation Article 14 🔴 0.0% 17/20 sessions
PII Masking Before External Transmission Article 10 🔴 0.0% 20/20 sessions
Bypass Detection Article 15 🔴 15.0% 17/20 sessions
Decision Record Structure Article 12 ⚠️ 85.0% 3/20 partial

Behavioral Audit facts are E5-level evidence — behavioral observation from real event logs,
independent of documentation and code.

⚠️ No AI Act-impacting technical workflow detected.

Inactive Controls — Observable Execution Analysis

Taxonomy: An inactive control is a mechanism declared in documentation or present as a structural pattern in code, but for which no observable execution evidence was found during static analysis. This does not imply intentional misrepresentation — the control may exist but was not exercised in the scanned code paths.

Inactive control analysis inconclusive in STATIC mode. No structural STUB_IMPLEMENTATION/GHOST patterns were found among sampled execution paths, but absence of inactive controls cannot be confirmed without runtime execution evidence. Controls with NON_COMPLIANT verdicts above represent absent controls, not inactive ones.

Contradiction Index

No semantic contradictions detected between code and documentation.

LEGAL STATUS: TECHNICAL EVIDENCE REPORT — This document is an automated factual report. It documents technical alignment with EU AI Act control points. It does not constitute legal advice or regulatory certification.

Methodology Notice
Evidence levels (E0–E5), contradiction detection, assurance scoring and control mapping are defined in the FactNotebook Technical Evidence Framework.
View methodology →
FactNotebook — AI Act Technical Alignment Assessment (Regulation EU 2024/1689)
Audit ID: CSVA-20260614-9BE11290 — Generated on 2026-06-17 09:47 UTC
Verify integrity: factnotebook verify CSVA-20260614-9BE11290  |  This report is a technical evidence document. It does not constitute legal advice, regulatory certification, or an official conformity assessment.
💬 Feedback
Does this report convince you? ×