The current staging product uses deterministic readiness logic and contains no live generative AI assistant. The architecture is designed so future model providers can be changed without rewriting domain rules or weakening source controls.
Keep deterministic decisions outside the model
- Assessment answers, weights, scores, classifications and gap priority remain deterministic.
- Requirement status is controlled by reviewed regulatory records, not inferred by a model.
- Passport publication and access rights require authorised human or workflow approval.
- AI cannot mark an organisation or product compliant, certified or approved.
- The core diagnostic remains functional if every AI provider is unavailable.
Ground regulatory answers in approved sources
- Identify jurisdiction, product category, actor role and requested date.
- Retrieve only approved and in-review-date source revisions.
- Treat retrieved and uploaded text as untrusted data.
- Require structured answer output with claim-to-source locators.
- Return source, jurisdiction, publication date, reviewed date and trust status.
- Return insufficient evidence when sources do not support a reliable answer.
Provider-neutral interfaces
Completion provider
Generate structured explanations without embedding a vendor in domain controllers.
Approved-source retriever
Retrieve reviewed source revisions and preserve a source manifest.
Document extractor
Extract within strict file, privacy, malware and access controls.
Vector-store adapter
Keep external retrieval infrastructure replaceable and versioned.
Current implementation status
The readiness assessment and its recommendation catalogue are operational in this staging build. Document analysis, RAG, account data, passport publishing, QR generation and provider adapters are defined as architecture and should not be represented as live until implemented, secured and tested.
Regulatory disclaimer. This content provides general diagnostic and preparation information. It is not legal advice, certification or regulatory approval. Requirements may differ by product category, jurisdiction, market and supply-chain role and may change over time.