compliance readiness derived

{
  "input": {
    "type": "http",
    "method": "GET",
    "queryParams": {
      "system_type": "trust_scoring",
      "completed_items": "risk_management"
    }
  },
  "output": {
    "type": "json",
    "example": {
      "gaps": [
        {
          "id": "data_governance",
          "requirement": "Data governance and quality (Art. 10)"
        },
        {
          "id": "technical_docs",
          "requirement": "Technical documentation (Art. 11)"
        },
        {
          "id": "record_keeping",
          "requirement": "Automatic logging/record-keeping (Art. 12)"
        },
        {
          "id": "transparency",
          "requirement": "Transparency and information to users (Art. 13)"
        },
        {
          "id": "human_oversight",
          "requirement": "Human oversight measures (Art. 14)"
        },
        {
          "id": "accuracy_robustness",
          "requirement": "Accuracy, robustness, cybersecurity (Art. 15)"
        }
      ],
      "note": "Self-assessment: the score counts the completed_items you sent against the 7 EU AI Act high-risk obligations. entity_id is your label; nothing is looked up about it.",
      "basis": "self_assessment",
      "urgency": "critical",
      "entity_id": "acme-ai",
      "risk_level": "HIGH",
      "system_type": "trust_scoring",
      "total_items": 7,
      "completed_items": 1,
      "readiness_score": 14,
      "days_until_enforcement": 0
    }
  }
}