Sentinel Sovereignty Report

Project: sentinel-preview · Storage: sqlite · Data residency: EU-DE · Sovereign scope: EU
Generated: 2026-04-11
EU AI Act Annex III enforcement: 2 August 2026. High-risk AI systems must prove automatic tamper-resistant logging.
113
days remaining

Executive summary

Your system meets EU sovereignty requirements.

The runtime sovereignty score is 98% — that is the fraction of installed Python packages with no US CLOUD Act exposure. EU AI Act overall status: PARTIAL. Automated coverage of the required articles: 50%.

Where the report flags partial or non-compliant items, the "recommended actions" block below names each one in priority order. Every action corresponds to a specific file or configuration change.

98%
Sovereignty score

108 of 110 installed packages are EU-sovereign or neutral. 3 are US-incorporated and subject to the CLOUD Act. 80 are unknown.

Critical-path violations: 0. This is a runtime snapshot. CI/CD and infrastructure are reported separately below.

EU AI Act compliance

Overall: PARTIAL · Automated coverage: 50%

Article Title Status Detail What to do
Art. 9Risk managementPARTIALPolicy evaluator configured; every decision records the policy result.Configure a PolicyEvaluator — SimpleRuleEvaluator or LocalRegoEvaluator.
Art. 10Data governanceACTION_REQUIREDData governance is not automatable by a middleware kernel.Data governance is a human process — see docs/bsi-profile.md.
Art. 11Technical documentationACTION_REQUIREDAnnex IV technical documentation is a human deliverable.Review manually.
Art. 12Automatic record keepingCOMPLIANTEvery wrapped call produces a DecisionTrace automatically, stored append-only.Enable storage backend for append-only trace persistence.
Art. 13Transparency & information to deployersCOMPLIANTTraces record agent, model, policy name/version, and result per decision.Populate agent, model, and policy metadata on every trace.
Art. 14Human oversightCOMPLIANTKill switch implemented; every override recorded as linked trace entry.Test the kill switch with engage_kill_switch() before go-live.
Art. 15Accuracy, robustness, cybersecurityACTION_REQUIREDModel evaluation and adversarial testing are outside the trace layer.Configure accuracy thresholds and human review workflows.
Art. 17Quality management systemCOMPLIANTContinuous, append-only trace record satisfies the traceability requirement.Run sentinel compliance check as part of CI on every release.

Recommended actions

HIGH
Art. 9 — Risk management
Configure a PolicyEvaluator — SimpleRuleEvaluator or LocalRegoEvaluator.
MEDIUM
Art. 10 — Data governance
Data governance is a human process — see docs/bsi-profile.md.
MEDIUM
Art. 11 — Technical documentation
Review manually.
MEDIUM
Art. 15 — Accuracy, robustness, cybersecurity
Configure accuracy thresholds and human review workflows.

Manifesto status

Overall manifesto score: 100%

DimensionDetail
✓jurisdiction0 critical-path violations
✓kill_switchkill switch API present
✓storagebackend: sqlite
✓bsitargeting 2026-12-31

Runtime packages

Showing first 60 of 110 installed packages. Sovereign: 108 · US-owned: 3 · Unknown: 80

Package Version Parent Jurisdiction CLOUD Act Critical
typing_extensions4.15.0UnknownUnknown—no
pip26.0.1UnknownUnknown—no
cffi2.0.0UnknownUnknown—no
ptyprocess0.7.0UnknownUnknown—no
opentelemetry-exporter-otlp-proto-http1.41.0UnknownUnknown—no
uv0.11.6UnknownUnknown—no
idna3.11Kim DaviesNeutralNOno
charset-normalizer3.4.7OusretNeutralNOno
mypy_extensions1.1.0UnknownUnknown—no
stack-data0.6.3UnknownUnknown—no
httpcore1.0.9EncodeNeutralNOno
asttokens3.0.1UnknownUnknown—no
urllib32.6.3urllib3NeutralNOno
distlib0.4.0UnknownUnknown—no
SecretStorage3.5.0UnknownUnknown—no
importlib_metadata8.7.1UnknownUnknown—no
matplotlib-inline0.2.1UnknownUnknown—no
opentelemetry-semantic-conventions0.62b0UnknownUnknown—no
sentinel-kernel2.4.0sentinel-kernelEUNOyes
rich14.3.4UnknownUnknown—no
jupyterlab_widgets3.0.16UnknownUnknown—no
markdown-it-py4.0.0UnknownUnknown—no
pytest-asyncio1.3.0pytest-devNeutralNOno
platformdirs4.9.6UnknownUnknown—no
httpx0.28.1EncodeNeutralNOno
backoff2.2.1UnknownUnknown—no
opentelemetry-api1.41.0CNCFNeutralNOno
protobuf6.33.6UnknownUnknown—no
shellingham1.5.4UnknownUnknown—no
pycparser3.0UnknownUnknown—no
prometheus_client0.25.0PrometheusNeutralNOno
orjson3.11.8UnknownUnknown—no
opentelemetry-exporter-otlp-proto-common1.41.0UnknownUnknown—no
pyproject_hooks1.2.0UnknownUnknown—no
hyperlink21.0.0UnknownUnknown—no
keyring25.7.0UnknownUnknown—no
mypy1.20.0Python Software FoundationNeutralNOno
jsonpatch1.33UnknownUnknown—no
widgetsnbextension4.0.15UnknownUnknown—no
python-discovery1.2.2UnknownUnknown—no
zstandard0.25.0UnknownUnknown—no
Django6.0.4UnknownUnknown—no
pytest-cov7.1.0pytest-covNeutralNOno
psycopg2-binary2.9.11PostgreSQL Global Dev GroupNeutralNOno
zipp3.23.0UnknownUnknown—no
prompt_toolkit3.0.52UnknownUnknown—no
librt0.9.0UnknownUnknown—no
opentelemetry-sdk1.41.0CNCFNeutralNOno
PyYAML6.0.3YAMLNeutralNOno
requests2.33.1Python Software FoundationNeutralNOno
tomlkit0.14.0UnknownUnknown—no
iniconfig2.3.0UnknownUnknown—no
opentelemetry-proto1.41.0UnknownUnknown—no
mdurl0.1.2UnknownUnknown—no
certifi2026.2.25CertifiNeutralNOno
grpcio1.80.0UnknownUnknown—no
Pygments2.20.0UnknownUnknown—no
comm0.2.3UnknownUnknown—no
typing-inspection0.4.2UnknownUnknown—no
langsmith0.7.30LangChain Inc.USYESno

CI/CD findings

File Component Vendor Jurisdiction CLOUD Act
.github/workflows/ci.ymlgithub_actionsGitHub (Microsoft)USYES
.github/workflows/pages.ymlgithub_actionsGitHub (Microsoft)USYES
.github/workflows/release.ymlgithub_actionsGitHub (Microsoft)USYES
.github/workflows/rust.ymlgithub_actionsGitHub (Microsoft)USYES
pyproject.tomlpypiPython Package IndexUSNO

Infrastructure findings

File Component Vendor Jurisdiction CLOUD Act
No infrastructure findings