diff --git a/obligations/cra_machinery.json b/obligations/cra_machinery.json new file mode 100644 index 00000000..c5661904 --- /dev/null +++ b/obligations/cra_machinery.json @@ -0,0 +1,5556 @@ +{ + "schema_version": "obligation_registry_v1", + "regulation": "MaschVO", + "regulation_code": "MaschVO_2023_1230", + "family": "machinery", + "theme": "Maschinensicherheit / MaschinenVO (EU) 2023/1230 (physische Safety, Anhang III)", + "generated_by": "obligation_discovery/claude-opus-4-8", + "synthesis_version": "v1", + "citation_status": "pending_span_anchor", + "curation": { + "curated_by": "obligation-registry-session 2026-06-26", + "method": "two-stage clustering (2229->1096 micro->120 review-units) -> Opus synthesis -> light review", + "scope_controls": 2229, + "review_units": 120, + "obligations": 31, + "tier_split": { + "LEGAL_MINIMUM": 25, + "BEST_PRACTICE": 6 + }, + "tiering_note": "25 LM hier rechtlich korrekt (MaschVO Anhang III = bindende grundlegende Sicherheitsanforderungen, anders als die Cyber-Cuts). KEINE Hart-Re-Tier.", + "cyber_safety_bridges": [ + "access_control_safety_functions (Anhang III 1.1.9 -> CRA attack_surface/access)", + "protection_against_corruption (1.1.9/1.2.1 -> CRA software_integrity_protection)" + ], + "capability_candidates_physical": [ + "emergency_stop_interlocking", + "guards_protective_devices", + "safety_functions_design" + ], + "out_of_scope": "41 Review-Units (AI-Act Hochrisiko-KI, DSGVO/DPIA, GwG, Common-Criteria/TOE, BCM, Banking, Smart-Meter) — aggressiv ausgesondert.", + "anchor_quality": "Anker auf MaschVO Anhang III/Art-Ebene (Opus), approximativ -> span-genau mit Re-Ingest." + }, + "obligations": [ + { + "id": "risk_assessment_machinery_lifecycle", + "name": "Risikobeurteilung über den gesamten Maschinenlebenszyklus", + "description": "Durchführung einer ganzheitlichen, vollständigen Risikobeurteilung für jede Maschine bzw. jedes Maschinenprodukt über alle Gefährdungen und Lebensphasen, inkl. vorhersehbarer Fehlanwendung, neuartiger Technologien und Wechselwirkungen im Maschinenverbund.", + "tier": "LEGAL_MINIMUM", + "subdomain": "risk_assessment", + "applicability": "universal", + "evidence_facets": { + "governance": true, + "capability": true, + "evidence": true + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Anhang III Nr. 1 (Allgemeine Grundsätze)", + "citation": "Der Hersteller einer Maschine hat eine Risikobeurteilung durchzuführen, um die für die Maschine geltenden Sicherheits- und Gesundheitsschutzanforderungen zu ermitteln." + } + ], + "guidance_basis": [ + { + "source": "ISO", + "anchor": "EN ISO 12100", + "role": "best_practice" + }, + { + "source": "ISO", + "anchor": "CENELEC Guide 29", + "role": "best_practice" + } + ], + "member_review_units": [ + "M13", + "M24", + "M5", + "M14", + "M33", + "M1", + "M44", + "M77", + "M85", + "M104" + ], + "member_controls": [ + "ACC-064", + "AI-051-A07", + "AI-051-A08", + "AI-051-A15", + "AI-051-A16", + "AI-1780-A04", + "AI-1781-A04", + "AI-1787-A04", + "AI-1787-A06", + "AI-1798-A08", + "AI-1805-A01", + "AI-330-A03", + "AI-330-A12", + "AI-330-A14", + "AI-330-A15", + "AI-505-A06", + "AI-505-A07", + "AI-505-A13", + "AI-505-A14", + "AI-607-A06", + "AI-607-A15", + "AI-865-A09", + "AI-865-A12", + "AI-865-A19", + "AI-865-A22", + "AI-865-A25", + "AI-865-A26", + "AI-865-A29", + "AI-865-A32", + "AI-865-A33", + "AI-865-A34", + "AUTH-1278-A07", + "AUTH-1416-A03", + "AUTH-144", + "AUTH-144-A07", + "AUTH-144-A13", + "AUTH-153", + "AUTH-153-A01", + "AUTH-153-A06", + "AUTH-153-A07", + "AUTH-153-A12", + "AUTH-184", + "AUTH-184-A01", + "AUTH-184-A11", + "AUTH-197", + "AUTH-197-A01", + "AUTH-197-A06", + "AUTH-197-A07", + "AUTH-197-A09", + "AUTH-197-A14", + "AUTH-197-A15", + "AUTH-197-A16", + "AUTH-2082-A03", + "AUTH-2092", + "AUTH-2092-A01", + "AUTH-2169-A01", + "AUTH-2169-A02", + "AUTH-2179", + "AUTH-2179-A01", + "AUTH-2179-A03", + "AUTH-2179-A04", + "AUTH-2185", + "AUTH-2185-A01", + "AUTH-2297-A06", + "AUTH-2297-A07", + "AUTH-2401-A04", + "AUTH-2838-A02", + "AUTH-3136-A01", + "AUTH-3144", + "AUTH-3144-A04", + "AUTH-3144-A05", + "AUTH-3144-A06", + "AUTH-3144-A07", + "AUTH-3167-A08", + "AUTH-3288-A01", + "AUTH-3292", + "AUTH-3292-A01", + "AUTH-3292-A07", + "AUTH-3319", + "AUTH-3369-A02", + "AUTH-3386", + "AUTH-3386-A01", + "AUTH-3386-A06", + "AUTH-3514", + "AUTH-3514-A01", + "AUTH-3514-A05", + "AUTH-3565-A09", + "AUTH-3589", + "AUTH-3698", + "AUTH-370-A06", + "AUTH-3779-A07", + "AUTH-3779-A08", + "AUTH-3784-A08", + "AUTH-3801", + "AUTH-3801-A01", + "AUTH-3801-A02", + "AUTH-3809-A02", + "AUTH-3810-A03", + "AUTH-3832", + "AUTH-3832-A02", + "AUTH-3834-A04", + "AUTH-3839", + "AUTH-3839-A04", + "AUTH-3839-A06", + "AUTH-3894-A05", + "AUTH-3895-A01", + "AUTH-3895-A04", + "AUTH-3895-A07", + "AUTH-3918-A04", + "AUTH-3939-A03", + "AUTH-3939-A07", + "AUTH-420-A04", + "AUTH-420-A08", + "AUTH-619", + "AUTH-619-A05", + "AUTH-619-A08", + "COMP-009", + "COMP-1115-A07", + "COMP-133-A05", + "COMP-160", + "COMP-160-A04", + "COMP-160-A06", + "COMP-160-A07", + "COMP-160-A11", + "COMP-160-A13", + "COMP-178", + "COMP-178-A01", + "COMP-178-A02", + "COMP-178-A04", + "COMP-178-A12", + "COMP-178-A13", + "COMP-178-A15", + "COMP-2275-A01", + "COMP-2278-A03", + "COMP-2278-A04", + "COMP-2340-A04", + "COMP-2469-A05", + "COMP-2472-A04", + "COMP-2556-A02", + "COMP-3035-A07", + "COMP-3056-A06", + "COMP-3225-A16", + "COMP-3748", + "COMP-3748-A01", + "COMP-3748-A02", + "COMP-3772-A02", + "COMP-3824-A02", + "COMP-3834-A01", + "COMP-3849-A02", + "COMP-3855-A02", + "COMP-3921-A01", + "COMP-4023-A01", + "COMP-4023-A04", + "COMP-564-A05", + "COMP-564-A15", + "COMP-587-A02", + "COMP-587-A09", + "COMP-745", + "COMP-745-A01", + "COMP-745-A06", + "COMP-745-A07", + "COMP-745-A12", + "COMP-767-A15", + "COMP-772", + "CRYP-1544-A05", + "CRYP-1544-A06", + "CRYP-1549-A01", + "CRYP-1629-A01", + "CRYP-207-A04", + "CRYP-207-A05", + "CRYP-207-A06", + "CRYP-210-A03", + "CRYP-210-A05", + "CRYP-210-A09", + "CRYP-210-A11", + "CRYP-452-A04", + "DATA-1219", + "DATA-1219-A01", + "DATA-1777-A16", + "DATA-1928-A13", + "DATA-2207", + "DATA-2207-A01", + "DATA-2207-A02", + "DATA-2263", + "DATA-2553-A04", + "DATA-2586-A04", + "DATA-2586-A05", + "DATA-2586-A09", + "DATA-2602-A08", + "DATA-2899-A04", + "DATA-3295-A03", + "DATA-3296-A05", + "DATA-3312-A04", + "DATA-3333-A03", + "DATA-3337", + "DATA-3422-A04", + "DATA-3456", + "DATA-3479", + "DATA-3622", + "DATA-3622-A04", + "DATA-3622-A06", + "DATA-3717-A06", + "DATA-3739-A01", + "DATA-3739-A03", + "DATA-3980-A03", + "DATA-4073-A06", + "DATA-4197-A05", + "DATA-4198-A01", + "DATA-4386", + "DATA-4445-A06", + "DATA-4491-A05", + "DATA-4565-A01", + "DATA-749", + "DATA-749-A02", + "DATA-749-A03", + "DATA-892-A03", + "DATA-892-A10", + "DATA-986-A06", + "DATA-986-A13", + "ENV-007-A07", + "ENV-007-A08", + "ENV-015-A11", + "ENV-018-A04", + "ENV-032-A04", + "ENV-043-A03", + "ENV-043-A13", + "ENV-048-A05", + "ENV-048-A06", + "ENV-048-A14", + "ENV-048-A15", + "ENV-060-A04", + "ENV-060-A05", + "ENV-060-A06", + "ENV-060-A10", + "ENV-060-A13", + "ENV-060-A14", + "ENV-060-A15", + "ENV-060-A19", + "ENV-060-A22", + "ENV-060-A23", + "ENV-060-A24", + "ENV-060-A28", + "ENV-060-A31", + "ENV-060-A32", + "ENV-060-A33", + "ENV-060-A37", + "ENV-060-A40", + "ENV-060-A41", + "ENV-060-A42", + "FIN-1029-A04", + "FIN-1067-A01", + "FIN-1278-A02", + "FIN-1278-A03", + "FIN-796", + "FIN-796-A03", + "GOV-1029-A05", + "GOV-1188", + "GOV-1188-A05", + "GOV-2148-A01", + "GOV-2148-A03", + "GOV-270-A04", + "GOV-270-A09", + "GOV-3223-A08", + "GOV-3314-A01", + "GOV-3314-A05", + "GOV-3635-A06", + "GOV-3718-A15", + "GOV-3807-A05", + "GOV-3807-A11", + "GOV-402-A06", + "GOV-402-A11", + "GOV-402-A12", + "HLT-009-A04", + "HLT-034-A22", + "HLT-034-A23", + "HLT-034-A27", + "HLT-052-A01", + "HLT-052-A08", + "HLT-095-A03", + "HLT-095-A09", + "HLT-202-A13", + "HLT-248", + "HLT-248-A02", + "HLT-366-A04", + "HLT-537-A07", + "HLT-563-A01", + "HLT-563-A03", + "HLT-563-A07", + "HLT-563-A08", + "HLT-578-A02", + "HLT-579-A02", + "HLT-582-A05", + "HLT-583", + "HLT-583-A03", + "HLT-583-A04", + "INC-1029-A06", + "INC-1098-A02", + "INC-1137-A02", + "INC-1264-A05", + "LOG-1160-A07", + "LOG-1172-A08", + "LOG-1259-A03", + "LOG-1259-A06", + "LOG-1259-A07", + "LOG-1259-A08", + "LOG-1264", + "LOG-1264-A04", + "LOG-1276-A05", + "LOG-1519-A13", + "LOG-1821", + "LOG-1821-A01", + "LOG-1821-A02", + "LOG-1821-A11", + "LOG-1995-A02", + "LOG-2048-A05", + "LOG-2052-A01", + "LOG-215-A04", + "LOG-215-A11", + "LOG-235-A04", + "LOG-235-A12", + "LOG-271-A15", + "LOG-271-A29", + "LOG-378-A01", + "LOG-378-A05", + "LOG-560-A06", + "LOG-612", + "LOG-612-A01", + "LOG-612-A02", + "LOG-612-A03", + "LOG-612-A06", + "LOG-665", + "LOG-665-A01", + "NET-082-A13", + "NET-082-A26", + "NET-1275-A04", + "NET-1395", + "NET-1512-A01", + "NET-1712", + "NET-1712-A01", + "NET-1804-A06", + "NET-1805-A02", + "NET-210-A07", + "NET-210-A12", + "NET-302-A08", + "NET-788-A02", + "NET-790-A12", + "SEC-006-A05", + "SEC-006-A12", + "SEC-006-A17", + "SEC-044", + "SEC-044-A01", + "SEC-044-A14", + "SEC-115", + "SEC-1222-A14", + "SEC-1222-A15", + "SEC-1227-A04", + "SEC-1248-A04", + "SEC-125-A08", + "SEC-125-A20", + "SEC-1773", + "SEC-1773-A01", + "SEC-1773-A05", + "SEC-1888-A02", + "SEC-189-A02", + "SEC-1971-A06", + "SEC-1971-A10", + "SEC-2186-A05", + "SEC-233-A06", + "SEC-233-A12", + "SEC-237", + "SEC-237-A01", + "SEC-237-A12", + "SEC-237-A13", + "SEC-237-A16", + "SEC-237-A25", + "SEC-237-A26", + "SEC-240-A05", + "SEC-240-A12", + "SEC-2435-A04", + "SEC-2466-A01", + "SEC-2466-A03", + "SEC-2555-A05", + "SEC-256-A06", + "SEC-256-A07", + "SEC-2565-A04", + "SEC-2992-A05", + "SEC-3015-A07", + "SEC-3015-A08", + "SEC-3042-A01", + "SEC-3042-A02", + "SEC-3493-A04", + "SEC-3525-A06", + "SEC-3525-A07", + "SEC-3543", + "SEC-3553-A02", + "SEC-462-A01", + "SEC-462-A08", + "SEC-462-A09", + "SEC-462-A11", + "SEC-467-A13", + "SEC-4838-A07", + "SEC-4845-A02", + "SEC-4845-A03", + "SEC-4845-A05", + "SEC-4845-A06", + "SEC-4864-A07", + "SEC-4891", + "SEC-4891-A01", + "SEC-516", + "SEC-522", + "SEC-522-A07", + "SEC-5261-A04", + "SEC-5291", + "SEC-5292", + "SEC-5292-A03", + "SEC-5292-A04", + "SEC-5292-A05", + "SEC-5292-A06", + "SEC-5292-A08", + "SEC-5364-A01", + "SEC-5364-A05", + "SEC-546", + "SEC-546-A01", + "SEC-546-A06", + "SEC-5643-A05", + "SEC-5847-A07", + "SEC-5861-A05", + "SEC-5879-A10", + "SEC-5952-A01", + "SEC-5952-A02", + "SEC-6441-A02", + "SEC-654-A09", + "SEC-7136-A05", + "SEC-7175-A08", + "SEC-7175-A09", + "SEC-731", + "SEC-7389-A02", + "SEC-755", + "SEC-7704-A05", + "SEC-7707", + "SEC-7713", + "SEC-7771-A04", + "SEC-832-A28", + "SEC-8352", + "SEC-8353-A01", + "SEC-8425-A01", + "SEC-846-A07", + "SEC-8472-A05", + "SEC-8542", + "SEC-8542-A01", + "SEC-8542-A04", + "SEC-857-A01", + "SEC-857-A10", + "SEC-857-A14", + "SEC-857-A15", + "SEC-8577-A08", + "SEC-8581-A06", + "SEC-8603", + "SEC-862-A06", + "SEC-8622-A01", + "SEC-865-A16", + "SEC-8668-A04", + "SEC-8785-A03", + "SEC-8795-A03", + "SEC-8807", + "SEC-8807-A07", + "SEC-8807-A08", + "SEC-8807-A09", + "SEC-8807-A10", + "SEC-8807-A11", + "SEC-8807-A13", + "SEC-8849-A01", + "SEC-9105-A14", + "SEC-997", + "TRD-528", + "TRD-528-A01", + "TRD-528-A04", + "TRD-528-A07", + "TRD-528-A09", + "TRD-528-A11" + ], + "member_count": 480, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.95, + "source_meta_cluster": "M24", + "cluster_size": 67, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "risk_assessment_documentation", + "name": "Dokumentation der Risikobeurteilung", + "description": "Dokumentation der Ergebnisse der Risikobeurteilung einschließlich identifizierter Gefährdungen und getroffener Schutzmaßnahmen in der technischen Dokumentation.", + "tier": "LEGAL_MINIMUM", + "subdomain": "risk_assessment", + "applicability": "universal", + "evidence_facets": { + "governance": false, + "capability": false, + "evidence": true + }, + "source_role": "EVIDENCE", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Anhang IV (Technische Unterlagen)", + "citation": "Die technischen Unterlagen müssen die Risikobeurteilung mit den Ergebnissen enthalten." + } + ], + "guidance_basis": [], + "member_review_units": [ + "M5", + "M32", + "M26", + "M14", + "M62" + ], + "member_controls": [ + "AI-051-A07", + "AI-051-A08", + "AI-051-A15", + "AI-051-A16", + "AI-1780-A04", + "AI-1781-A04", + "AI-1798-A08", + "AI-1805-A01", + "AI-330-A03", + "AI-330-A12", + "AI-330-A14", + "AI-505-A06", + "AI-505-A07", + "AI-505-A13", + "AI-505-A14", + "AI-607-A06", + "AI-607-A15", + "AI-865-A09", + "AI-865-A12", + "AI-865-A19", + "AI-865-A22", + "AI-865-A25", + "AI-865-A26", + "AI-865-A29", + "AI-865-A32", + "AI-865-A33", + "AI-865-A34", + "AUTH-1278-A07", + "AUTH-153-A06", + "AUTH-153-A12", + "AUTH-184-A11", + "AUTH-197-A06", + "AUTH-197-A07", + "AUTH-197-A14", + "AUTH-197-A15", + "AUTH-197-A16", + "AUTH-2061-A05", + "AUTH-2089", + "AUTH-2179-A04", + "AUTH-2297-A06", + "AUTH-2297-A07", + "AUTH-2401-A04", + "AUTH-2490-A02", + "AUTH-2525-A02", + "AUTH-2838-A01", + "AUTH-3136", + "AUTH-3144", + "AUTH-3144-A01", + "AUTH-3144-A02", + "AUTH-3292-A01", + "AUTH-3292-A02", + "AUTH-370-A06", + "AUTH-3779", + "AUTH-3779-A07", + "AUTH-3779-A08", + "AUTH-3801-A01", + "AUTH-3810-A02", + "AUTH-3834-A04", + "AUTH-3842-A02", + "AUTH-3939-A07", + "AUTH-420-A04", + "AUTH-420-A08", + "AUTH-619-A01", + "AUTH-619-A05", + "AUTH-619-A06", + "COMP-009", + "COMP-133-A05", + "COMP-160-A04", + "COMP-160-A06", + "COMP-160-A07", + "COMP-160-A11", + "COMP-160-A13", + "COMP-2275-A09", + "COMP-2278-A03", + "COMP-2278-A04", + "COMP-2469", + "COMP-2469-A01", + "COMP-2469-A04", + "COMP-2472-A05", + "COMP-3225-A16", + "COMP-3772", + "COMP-3772-A02", + "COMP-3772-A08", + "COMP-3833-A04", + "COMP-3855", + "COMP-3855-A03", + "COMP-4023-A01", + "COMP-4023-A04", + "COMP-564-A05", + "COMP-564-A15", + "COMP-587-A02", + "COMP-745-A01", + "COMP-745-A06", + "COMP-745-A07", + "COMP-745-A12", + "CRYP-1544-A05", + "CRYP-1544-A06", + "CRYP-1549-A01", + "CRYP-1629-A01", + "CRYP-207-A04", + "CRYP-207-A05", + "CRYP-2170-A07", + "CRYP-452-A02", + "CRYP-452-A04", + "CRYP-452-A05", + "CRYP-925-A04", + "DATA-1219-A05", + "DATA-1219-A06", + "DATA-2207-A05", + "DATA-2207-A06", + "DATA-2207-A07", + "DATA-2586-A01", + "DATA-2602-A08", + "DATA-2899-A04", + "DATA-3312-A03", + "DATA-3422-A04", + "DATA-3622", + "DATA-3622-A06", + "DATA-3739-A01", + "DATA-3944-A03", + "DATA-3980-A03", + "DATA-4073-A02", + "DATA-4073-A06", + "DATA-4197-A05", + "DATA-4387", + "DATA-4387-A01", + "DATA-4387-A02", + "DATA-4387-A05", + "DATA-4388", + "DATA-4388-A03", + "DATA-4491-A06", + "DATA-4506-A05", + "DATA-4581-A04", + "DATA-749", + "DATA-749-A01", + "DATA-749-A02", + "DATA-749-A03", + "DATA-892-A03", + "DATA-892-A10", + "DATA-986-A06", + "DATA-986-A13", + "ENV-015-A11", + "ENV-032-A04", + "ENV-043-A03", + "ENV-043-A13", + "ENV-048-A05", + "ENV-048-A06", + "ENV-048-A14", + "ENV-048-A15", + "ENV-060-A04", + "ENV-060-A05", + "ENV-060-A13", + "ENV-060-A14", + "ENV-060-A22", + "ENV-060-A23", + "ENV-060-A31", + "ENV-060-A32", + "ENV-060-A40", + "ENV-060-A41", + "FIN-1029-A04", + "FIN-1067-A01", + "FIN-1141-A05", + "FIN-1278-A04", + "FIN-796", + "FIN-796-A03", + "GOV-040-A05", + "GOV-1029-A05", + "GOV-1188", + "GOV-1966-A01", + "GOV-3223-A10", + "GOV-3385-A05", + "GOV-3509-A02", + "GOV-3718-A15", + "HLT-037-A08", + "HLT-052-A01", + "HLT-052-A08", + "HLT-095-A03", + "HLT-095-A09", + "HLT-207-A02", + "HLT-207-A03", + "HLT-207-A04", + "HLT-578-A02", + "HLT-583-A03", + "INC-1029-A06", + "INC-1186-A05", + "LOG-1259-A06", + "LOG-1259-A07", + "LOG-1259-A08", + "LOG-1264", + "LOG-1474-A02", + "LOG-2048-A05", + "LOG-271-A15", + "LOG-271-A29", + "LOG-378-A05", + "LOG-612-A02", + "LOG-612-A03", + "LOG-612-A06", + "NET-1712-A04", + "NET-1804-A06", + "NET-790-A02", + "NET-790-A12", + "SEC-115", + "SEC-1222-A14", + "SEC-1222-A15", + "SEC-1227-A04", + "SEC-1773", + "SEC-1773-A01", + "SEC-1773-A05", + "SEC-1888-A02", + "SEC-1971-A06", + "SEC-1971-A07", + "SEC-2186-A05", + "SEC-237-A01", + "SEC-237-A12", + "SEC-237-A13", + "SEC-237-A16", + "SEC-237-A25", + "SEC-237-A26", + "SEC-2435-A04", + "SEC-2466-A03", + "SEC-2555-A05", + "SEC-2565-A04", + "SEC-2992-A05", + "SEC-3015-A05", + "SEC-3015-A06", + "SEC-3042-A01", + "SEC-3042-A02", + "SEC-3525-A06", + "SEC-3525-A07", + "SEC-3543", + "SEC-3553", + "SEC-3553-A03", + "SEC-4833-A02", + "SEC-4838-A07", + "SEC-4845-A02", + "SEC-4845-A03", + "SEC-4845-A05", + "SEC-4845-A06", + "SEC-4891-A03", + "SEC-4891-A04", + "SEC-5101", + "SEC-522-A07", + "SEC-5291-A01", + "SEC-5291-A03", + "SEC-5292-A08", + "SEC-5643-A05", + "SEC-5861-A05", + "SEC-5952-A04", + "SEC-7175-A08", + "SEC-7175-A09", + "SEC-7441-A05", + "SEC-7704-A05", + "SEC-7707", + "SEC-7713", + "SEC-7771-A04", + "SEC-8103-A01", + "SEC-834-A02", + "SEC-834-A16", + "SEC-8425", + "SEC-846", + "SEC-8494", + "SEC-8538-A02", + "SEC-8546", + "SEC-857-A11", + "SEC-857-A15", + "SEC-857-A16", + "SEC-8581-A06", + "SEC-8622-A01", + "SEC-865-A16", + "SEC-8807-A07", + "SEC-8807-A10", + "SEC-8807-A12", + "SEC-8807-A14", + "SEC-9105-A05", + "SEC-9105-A16", + "TRD-528-A07", + "TRD-528-A09", + "TRD-528-A11" + ], + "member_count": 278, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.9, + "source_meta_cluster": "M5", + "cluster_size": 149, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "risk_assessment_methodology_competence", + "name": "Strukturierte Methodik und Fachkompetenz der Risikobeurteilung", + "description": "Etablierung eines strukturierten Verfahrens und einer organisatorischen Richtlinie zur Risikobeurteilung sowie Nachweis der Fachkompetenz in anerkannten Risikobeurteilungsmethoden.", + "tier": "BEST_PRACTICE", + "subdomain": "risk_assessment", + "applicability": "universal", + "evidence_facets": { + "governance": true, + "capability": true, + "evidence": false + }, + "source_role": "GUIDANCE", + "legal_basis": [], + "guidance_basis": [ + { + "source": "ISO", + "anchor": "EN ISO 12100", + "role": "best_practice" + }, + { + "source": "ISO", + "anchor": "CENELEC Guide 29", + "role": "best_practice" + } + ], + "member_review_units": [ + "M13", + "M26", + "M2", + "M23", + "M85", + "M61" + ], + "member_controls": [ + "ACC-583-A02", + "AI-1787-A04", + "AI-1787-A06", + "AI-330-A15", + "AUTH-1416-A03", + "AUTH-143-A02", + "AUTH-184-A05", + "AUTH-2061-A05", + "AUTH-2082-A03", + "AUTH-2089", + "AUTH-2092-A01", + "AUTH-2169-A01", + "AUTH-2169-A02", + "AUTH-2178", + "AUTH-2179", + "AUTH-2179-A01", + "AUTH-2179-A03", + "AUTH-2184-A14", + "AUTH-2185", + "AUTH-2185-A01", + "AUTH-2297-A03", + "AUTH-2490-A02", + "AUTH-2512-A08", + "AUTH-2525-A02", + "AUTH-2838-A01", + "AUTH-2838-A02", + "AUTH-3136", + "AUTH-3136-A01", + "AUTH-3144-A01", + "AUTH-3144-A02", + "AUTH-3144-A03", + "AUTH-3144-A04", + "AUTH-3144-A05", + "AUTH-3144-A06", + "AUTH-3144-A07", + "AUTH-3167-A08", + "AUTH-3288-A01", + "AUTH-3292", + "AUTH-3292-A02", + "AUTH-3292-A07", + "AUTH-3369-A02", + "AUTH-3386", + "AUTH-3386-A01", + "AUTH-3386-A06", + "AUTH-3514", + "AUTH-3514-A01", + "AUTH-3514-A05", + "AUTH-3565-A09", + "AUTH-3565-A10", + "AUTH-3698", + "AUTH-3698-A01", + "AUTH-3809-A02", + "AUTH-3829-A03", + "AUTH-3839-A06", + "AUTH-3839-A07", + "AUTH-3894-A05", + "AUTH-3895-A01", + "AUTH-3895-A04", + "AUTH-3895-A07", + "AUTH-3918-A04", + "AUTH-3939", + "AUTH-3939-A03", + "AUTH-3939-A04", + "AUTH-4106", + "AUTH-4106-A01", + "AUTH-619", + "AUTH-619-A01", + "AUTH-619-A06", + "AUTH-619-A07", + "AUTH-619-A08", + "COMP-2275-A09", + "COMP-2278-A02", + "COMP-2469", + "COMP-2469-A01", + "COMP-2469-A04", + "COMP-2470", + "COMP-2472-A04", + "COMP-2472-A05", + "COMP-2556-A02", + "COMP-3056-A06", + "COMP-3736", + "COMP-3748", + "COMP-3748-A01", + "COMP-3748-A02", + "COMP-3833-A04", + "COMP-3834-A01", + "COMP-3921-A01", + "COMP-4027", + "COMP-4027-A07", + "COMP-4027-A08", + "COMP-587-A09", + "COMP-767-A15", + "CRYP-1629-A02", + "CRYP-2170-A07", + "CRYP-2232-A05", + "CRYP-452-A02", + "CRYP-452-A05", + "CRYP-723-A02", + "CRYP-925-A04", + "DATA-1201-A01", + "DATA-1219", + "DATA-1219-A01", + "DATA-1219-A05", + "DATA-1777-A16", + "DATA-1928-A13", + "DATA-2207", + "DATA-2207-A01", + "DATA-2207-A02", + "DATA-2207-A05", + "DATA-2207-A06", + "DATA-2207-A07", + "DATA-2263", + "DATA-2370-A04", + "DATA-2553-A04", + "DATA-2586-A01", + "DATA-2586-A04", + "DATA-2586-A05", + "DATA-2586-A09", + "DATA-3295-A03", + "DATA-3295-A04", + "DATA-3296-A05", + "DATA-3312", + "DATA-3312-A03", + "DATA-3312-A04", + "DATA-3333-A03", + "DATA-3337", + "DATA-3479", + "DATA-3622-A02", + "DATA-3622-A04", + "DATA-3717-A06", + "DATA-3739-A03", + "DATA-3891-A01", + "DATA-3944-A03", + "DATA-4073-A02", + "DATA-4198-A01", + "DATA-4386", + "DATA-4387", + "DATA-4387-A01", + "DATA-4387-A02", + "DATA-4387-A05", + "DATA-4445-A06", + "DATA-4491-A05", + "DATA-4491-A06", + "DATA-4506-A01", + "DATA-4506-A05", + "DATA-4565-A01", + "DATA-4581-A04", + "DATA-749-A01", + "ENV-060-A06", + "ENV-060-A10", + "ENV-060-A15", + "ENV-060-A19", + "ENV-060-A24", + "ENV-060-A28", + "ENV-060-A33", + "ENV-060-A37", + "ENV-060-A42", + "FIN-1141-A05", + "FIN-1249-A06", + "FIN-1278-A02", + "FIN-1278-A03", + "FIN-1278-A04", + "FIN-349-A13", + "GOV-040-A05", + "GOV-1188-A05", + "GOV-2146-A02", + "GOV-2214-A02", + "GOV-3223-A08", + "GOV-3314-A01", + "GOV-3314-A05", + "GOV-3385-A05", + "GOV-3460", + "GOV-3509-A02", + "GOV-3635-A06", + "GOV-3807-A05", + "GOV-3807-A11", + "HLT-097-A26", + "HLT-115", + "HLT-248", + "HLT-248-A02", + "HLT-366-A04", + "HLT-537-A07", + "HLT-563-A03", + "HLT-570-A02", + "HLT-570-A08", + "HLT-579-A02", + "INC-1098-A02", + "INC-1137-A02", + "INC-1186-A01", + "INC-1186-A02", + "INC-1186-A05", + "INC-1264-A05", + "INC-1278-A01", + "LOG-1160-A07", + "LOG-1172-A08", + "LOG-1259-A03", + "LOG-1264-A04", + "LOG-1276-A02", + "LOG-1276-A05", + "LOG-1474-A02", + "LOG-1519-A13", + "LOG-1527-A01", + "LOG-1535-A05", + "LOG-1821", + "LOG-1821-A01", + "LOG-1821-A02", + "LOG-1821-A11", + "LOG-2052-A01", + "LOG-560-A06", + "LOG-612", + "LOG-612-A01", + "LOG-612-A07", + "LOG-665", + "LOG-665-A01", + "LOG-956-A02", + "NET-082-A13", + "NET-082-A26", + "NET-1275-A04", + "NET-1512-A01", + "NET-1712", + "NET-1712-A01", + "NET-1712-A04", + "NET-1805-A02", + "NET-210-A07", + "NET-210-A12", + "NET-302-A08", + "NET-788-A02", + "NET-790-A02", + "SEC-1248-A04", + "SEC-125-A08", + "SEC-125-A20", + "SEC-1832-A05", + "SEC-1971-A07", + "SEC-1971-A10", + "SEC-240-A05", + "SEC-240-A12", + "SEC-3015", + "SEC-3015-A01", + "SEC-3015-A04", + "SEC-3015-A06", + "SEC-3015-A07", + "SEC-3493-A04", + "SEC-3553", + "SEC-3553-A01", + "SEC-3553-A02", + "SEC-3553-A03", + "SEC-3955-A03", + "SEC-462-A08", + "SEC-4833-A02", + "SEC-4864-A07", + "SEC-4891-A01", + "SEC-5101", + "SEC-5263-A04", + "SEC-5269", + "SEC-5269-A04", + "SEC-5269-A05", + "SEC-5269-A06", + "SEC-5272-A10", + "SEC-5281", + "SEC-5286-A04", + "SEC-5291", + "SEC-5291-A01", + "SEC-5291-A02", + "SEC-5291-A03", + "SEC-5291-A04", + "SEC-5291-A05", + "SEC-5291-A09", + "SEC-5292", + "SEC-5292-A03", + "SEC-5292-A04", + "SEC-5292-A05", + "SEC-5292-A06", + "SEC-5292-A09", + "SEC-5293", + "SEC-5364-A01", + "SEC-5784-A01", + "SEC-5847-A07", + "SEC-5879-A10", + "SEC-5952-A01", + "SEC-5952-A02", + "SEC-5952-A04", + "SEC-5955", + "SEC-6441-A02", + "SEC-7136-A05", + "SEC-7389-A02", + "SEC-8103-A01", + "SEC-832-A28", + "SEC-8352", + "SEC-8353-A01", + "SEC-8425-A01", + "SEC-857-A11", + "SEC-857-A16", + "SEC-8577-A08", + "SEC-8668-A04", + "SEC-8785-A03", + "SEC-8795", + "SEC-8795-A03", + "SEC-8807", + "SEC-8807-A08", + "SEC-8807-A09", + "SEC-8807-A11", + "SEC-8807-A12", + "SEC-8807-A13", + "SEC-8807-A14", + "SEC-8849-A01", + "SEC-9105-A05", + "TRD-528", + "TRD-528-A04" + ], + "member_count": 308, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.85, + "source_meta_cluster": "M26", + "cluster_size": 61, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "residual_risk_management", + "name": "Bewertung und Dokumentation des Restrisikos", + "description": "Ermittlung des verbleibenden Restrisikos je Einzelgefahr und in Summe, Festlegung zusätzlicher Sicherheitsvorrichtungen bei zu hohem Restrisiko sowie Dokumentation des Restrisikos in der Betriebsanleitung.", + "tier": "LEGAL_MINIMUM", + "subdomain": "residual_risk", + "applicability": "universal", + "evidence_facets": { + "governance": false, + "capability": true, + "evidence": true + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Anhang III Nr. 1.1.2 (Grundsätze für die Integration der Sicherheit)", + "citation": "Verbleibende Restrisiken sind in der Betriebsanleitung anzugeben." + } + ], + "guidance_basis": [], + "member_review_units": [ + "M5", + "M67" + ], + "member_controls": [ + "AI-051-A07", + "AI-051-A08", + "AI-051-A15", + "AI-051-A16", + "AI-1780-A04", + "AI-1781-A04", + "AI-330-A03", + "AI-330-A12", + "AI-330-A14", + "AI-505-A06", + "AI-505-A07", + "AI-505-A13", + "AI-505-A14", + "AI-865-A09", + "AI-865-A12", + "AI-865-A19", + "AI-865-A22", + "AI-865-A25", + "AI-865-A26", + "AI-865-A29", + "AI-865-A32", + "AI-865-A33", + "AI-865-A34", + "AUTH-1278-A07", + "AUTH-153-A06", + "AUTH-153-A12", + "AUTH-184-A11", + "AUTH-197-A06", + "AUTH-197-A07", + "AUTH-197-A14", + "AUTH-197-A15", + "AUTH-2179-A04", + "AUTH-3144", + "AUTH-3779-A07", + "AUTH-3779-A08", + "AUTH-3801-A01", + "AUTH-3834-A04", + "AUTH-3939-A07", + "AUTH-420-A04", + "AUTH-420-A08", + "AUTH-619-A05", + "COMP-009", + "COMP-133-A05", + "COMP-160-A04", + "COMP-160-A06", + "COMP-160-A07", + "COMP-160-A11", + "COMP-160-A13", + "COMP-2278-A03", + "COMP-2278-A04", + "COMP-3225-A16", + "COMP-3772-A02", + "COMP-587-A02", + "COMP-745-A01", + "COMP-745-A06", + "COMP-745-A07", + "COMP-745-A12", + "CRYP-1544-A05", + "CRYP-1544-A06", + "CRYP-1549-A01", + "CRYP-1629-A01", + "CRYP-207-A04", + "CRYP-207-A05", + "DATA-2602-A08", + "DATA-2899-A04", + "DATA-3422-A04", + "DATA-3622", + "DATA-3622-A06", + "DATA-3711-A05", + "DATA-3739-A01", + "DATA-3980-A03", + "DATA-4073-A06", + "DATA-4197-A05", + "DATA-4386-A04", + "DATA-4482-A06", + "DATA-892-A03", + "DATA-892-A10", + "ENV-015-A11", + "ENV-032-A04", + "ENV-043-A03", + "ENV-043-A13", + "ENV-048-A05", + "ENV-048-A14", + "ENV-060-A04", + "ENV-060-A13", + "ENV-060-A22", + "ENV-060-A31", + "ENV-060-A40", + "FIN-1029-A04", + "FIN-796", + "FIN-796-A03", + "GOV-1029-A05", + "GOV-1188", + "GOV-1686-A04", + "HLT-052-A01", + "HLT-052-A08", + "HLT-095-A03", + "HLT-095-A09", + "HLT-578-A02", + "HLT-583-A03", + "HLT-587-A04", + "INC-1029-A06", + "INC-1127-A03", + "LOG-1259-A06", + "LOG-1259-A07", + "LOG-2048-A05", + "LOG-612-A02", + "LOG-612-A03", + "LOG-612-A06", + "NET-790-A12", + "SEC-115", + "SEC-1222-A14", + "SEC-1222-A15", + "SEC-1227-A04", + "SEC-1636-A09", + "SEC-1773", + "SEC-1773-A01", + "SEC-1773-A05", + "SEC-1888-A02", + "SEC-1971-A06", + "SEC-2186-A05", + "SEC-237-A01", + "SEC-237-A12", + "SEC-237-A13", + "SEC-237-A16", + "SEC-237-A25", + "SEC-237-A26", + "SEC-2435-A04", + "SEC-2466-A03", + "SEC-2555-A05", + "SEC-2565-A04", + "SEC-2992-A05", + "SEC-3042-A01", + "SEC-3042-A02", + "SEC-3525-A06", + "SEC-3525-A07", + "SEC-3543", + "SEC-4822-A06", + "SEC-4838-A07", + "SEC-4845-A02", + "SEC-4845-A03", + "SEC-4845-A05", + "SEC-4845-A06", + "SEC-522-A07", + "SEC-5292-A08", + "SEC-5861-A05", + "SEC-7175-A08", + "SEC-7175-A09", + "SEC-7704-A05", + "SEC-7707", + "SEC-7713", + "SEC-7771-A02", + "SEC-7771-A04", + "SEC-857-A15", + "SEC-8581-A06", + "SEC-8622-A01", + "SEC-865-A16", + "TRD-528-A07" + ], + "member_count": 158, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.9, + "source_meta_cluster": "M5", + "cluster_size": 149, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "guards_protective_devices", + "name": "Trennende und nichttrennende Schutzeinrichtungen", + "description": "Konstruktion und Bereitstellung trennender und nichttrennender Schutzeinrichtungen zum Schutz vor beweglichen Teilen, inkl. feststehender oder verriegelter beweglicher Schutzeinrichtungen, Sicherheitsabstand zur Gefahrenstelle und Eignung für den Maschinentyp.", + "tier": "LEGAL_MINIMUM", + "subdomain": "protective_devices", + "applicability": "universal", + "evidence_facets": { + "governance": false, + "capability": true, + "evidence": true + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Anhang III Nr. 1.4 (Anforderungen an Schutzeinrichtungen)", + "citation": "Bewegliche Teile der Maschine sind so zu gestalten und zu bauen, dass jegliches Unfallrisiko durch Kontakt verhütet wird; trennende oder nichttrennende Schutzeinrichtungen sind vorzusehen." + } + ], + "guidance_basis": [ + { + "source": "ISO", + "anchor": "EN ISO 13857", + "role": "best_practice" + } + ], + "member_review_units": [ + "M7", + "M3", + "M19", + "M53", + "M8", + "M82", + "M96", + "M103", + "M59", + "M37" + ], + "member_controls": [ + "ACC-761-A08", + "AI-038-A13", + "AI-038-A14", + "AI-038-A25", + "AI-038-A26", + "AI-1063-A04", + "AI-1064-A07", + "AI-1064-A08", + "AI-1065-A02", + "AI-1065-A04", + "AI-1065-A06", + "AI-1065-A07", + "AI-1070-A02", + "AI-1070-A05", + "AI-1269-A05", + "AI-143-A02", + "AI-143-A03", + "AI-1778-A05", + "AI-1787-A17", + "AI-1801-A01", + "AI-255-A01", + "AI-255-A10", + "AI-331-A02", + "AI-331-A15", + "AI-333-A01", + "AI-579-A04", + "AI-579-A11", + "AI-593-A02", + "AI-593-A04", + "AI-593-A05", + "AI-593-A07", + "AI-593-A13", + "AI-593-A15", + "AI-593-A16", + "AI-593-A17", + "AI-655-A02", + "AI-655-A05", + "AI-655-A06", + "AI-660-A02", + "AI-660-A07", + "AI-660-A10", + "AUTH-1391-A03", + "AUTH-1391-A04", + "AUTH-1413-A05", + "AUTH-155", + "AUTH-178", + "AUTH-2086-A01", + "AUTH-2086-A02", + "AUTH-2086-A06", + "AUTH-2087", + "AUTH-2282-A01", + "AUTH-2282-A02", + "AUTH-2586-A02", + "AUTH-2837", + "AUTH-3783-A02", + "AUTH-3783-A03", + "AUTH-3783-A04", + "AUTH-3790-A03", + "AUTH-3793-A02", + "AUTH-3812", + "AUTH-3812-A07", + "AUTH-3820-A11", + "AUTH-3821", + "AUTH-3821-A01", + "AUTH-3821-A04", + "AUTH-3821-A05", + "AUTH-3824", + "AUTH-3838-A01", + "AUTH-3838-A12", + "AUTH-3842-A04", + "AUTH-4066-A04", + "AUTH-4100-A01", + "AUTH-4112", + "AUTH-4112-A02", + "AUTH-413-A07", + "AUTH-413-A14", + "AUTH-420-A03", + "AUTH-420-A07", + "AUTH-570-A05", + "AUTH-862-A05", + "AUTH-862-A06", + "AUTH-862-A14", + "AUTH-862-A15", + "AUTH-862-A20", + "AUTH-862-A21", + "AUTH-862-A23", + "AUTH-862-A24", + "AUTH-862-A29", + "AUTH-862-A30", + "COMP-149", + "COMP-149-A01", + "COMP-149-A02", + "COMP-149-A03", + "COMP-191-A06", + "COMP-2245-A01", + "COMP-2327-A02", + "COMP-2327-A04", + "COMP-2327-A07", + "COMP-2340", + "COMP-2340-A03", + "COMP-2887-A01", + "COMP-2926-A05", + "COMP-3035-A05", + "COMP-3421-A12", + "COMP-3807", + "COMP-3811", + "COMP-3811-A02", + "COMP-3811-A03", + "COMP-3811-A04", + "COMP-3811-A05", + "COMP-3811-A06", + "COMP-3811-A07", + "COMP-3846-A03", + "COMP-3859-A02", + "COMP-3862-A03", + "COMP-3885-A01", + "COMP-3885-A04", + "COMP-501", + "COMP-563-A24", + "COMP-954-A02", + "COMP-954-A03", + "COMP-954-A05", + "COMP-954-A07", + "COMP-954-A14", + "COMP-954-A15", + "COMP-954-A17", + "COMP-954-A18", + "COMP-954-A20", + "COMP-960-A12", + "COMP-962", + "COMP-962-A02", + "COMP-962-A03", + "COMP-962-A11", + "COMP-962-A12", + "COMP-962-A15", + "COMP-962-A19", + "COMP-973-A02", + "COMP-973-A23", + "COMP-977-A13", + "COMP-985", + "CRYP-016-A05", + "CRYP-055", + "CRYP-063-A05", + "CRYP-105", + "CRYP-105-A01", + "CRYP-105-A02", + "CRYP-105-A07", + "CRYP-105-A10", + "CRYP-105-A15", + "CRYP-106-A13", + "CRYP-151", + "CRYP-151-A01", + "CRYP-151-A02", + "CRYP-151-A07", + "CRYP-151-A12", + "CRYP-151-A13", + "CRYP-1574-A06", + "CRYP-1575-A06", + "CRYP-1575-A12", + "CRYP-183", + "CRYP-183-A02", + "CRYP-183-A09", + "CRYP-183-A10", + "CRYP-2209-A04", + "CRYP-2215", + "CRYP-2215-A01", + "CRYP-2230-A03", + "CRYP-2234", + "CRYP-2234-A01", + "CRYP-2234-A02", + "CRYP-2234-A04", + "CRYP-2234-A06", + "CRYP-2234-A09", + "CRYP-2238-A01", + "DATA-3325-A11", + "DATA-4607-A01", + "DATA-928-A05", + "DATA-928-A06", + "DATA-928-A15", + "DATA-928-A16", + "ENV-008-A05", + "ENV-008-A06", + "ENV-008-A07", + "ENV-008-A13", + "ENV-018-A06", + "ENV-025-A06", + "ENV-025-A14", + "ENV-029-A06", + "ENV-029-A12", + "ENV-040-A03", + "ENV-040-A06", + "ENV-040-A13", + "ENV-040-A16", + "ENV-040-A19", + "ENV-040-A26", + "ENV-046-A04", + "ENV-046-A09", + "ENV-084", + "ENV-084-A01", + "ENV-114-A02", + "GOV-1964", + "GOV-229-A09", + "GOV-229-A10", + "GOV-3582", + "GOV-385-A09", + "GOV-385-A10", + "GOV-385-A19", + "GOV-401-A01", + "GOV-417-A18", + "GOV-417-A19", + "GOV-419", + "HLT-009-A06", + "HLT-009-A11", + "HLT-101-A24", + "HLT-101-A25", + "HLT-568-A05", + "HLT-571-A07", + "HLT-584-A06", + "HLT-596-A10", + "INC-005-A08", + "INC-020", + "INC-1097-A01", + "LAB-010", + "LAB-010-A04", + "LAB-010-A07", + "LAB-010-A10", + "LAB-010-A11", + "LAB-010-A12", + "LAB-010-A16", + "LAB-010-A19", + "LAB-010-A22", + "LAB-010-A23", + "LAB-010-A24", + "LAB-012-A08", + "LAB-012-A20", + "LAB-146-A04", + "LAB-502-A03", + "LOG-1168-A06", + "LOG-1172-A05", + "LOG-181-A05", + "LOG-188", + "LOG-188-A01", + "LOG-198", + "LOG-1984-A04", + "LOG-2001-A03", + "LOG-2001-A04", + "LOG-2001-A05", + "LOG-223", + "LOG-223-A04", + "LOG-223-A11", + "LOG-223-A17", + "LOG-262-A04", + "LOG-262-A12", + "LOG-266-A08", + "LOG-445-A01", + "LOG-445-A04", + "LOG-445-A05", + "LOG-445-A14", + "LOG-445-A15", + "LOG-560", + "LOG-735", + "NET-0655-A01", + "NET-0655-A02", + "NET-0655-A06", + "NET-0657-A04", + "NET-106-A04", + "NET-106-A12", + "NET-146", + "NET-152", + "NET-1710-A02", + "NET-939-A02", + "SEC-044-A09", + "SEC-044-A22", + "SEC-1030-A08", + "SEC-119", + "SEC-119-A05", + "SEC-119-A06", + "SEC-119-A12", + "SEC-138", + "SEC-138-A05", + "SEC-138-A08", + "SEC-138-A17", + "SEC-138-A27", + "SEC-138-A30", + "SEC-138-A38", + "SEC-148-A02", + "SEC-148-A10", + "SEC-148-A15", + "SEC-148-A23", + "SEC-174-A04", + "SEC-174-A05", + "SEC-174-A13", + "SEC-174-A14", + "SEC-180-A10", + "SEC-180-A11", + "SEC-180-A22", + "SEC-180-A23", + "SEC-180-A32", + "SEC-181-A03", + "SEC-181-A10", + "SEC-181-A15", + "SEC-181-A17", + "SEC-181-A18", + "SEC-189", + "SEC-189-A01", + "SEC-189-A05", + "SEC-189-A06", + "SEC-189-A11", + "SEC-189-A14", + "SEC-228", + "SEC-228-A01", + "SEC-228-A02", + "SEC-228-A04", + "SEC-228-A05", + "SEC-228-A06", + "SEC-228-A07", + "SEC-228-A08", + "SEC-228-A09", + "SEC-228-A10", + "SEC-228-A12", + "SEC-228-A13", + "SEC-228-A14", + "SEC-243-A03", + "SEC-246", + "SEC-246-A01", + "SEC-246-A03", + "SEC-246-A04", + "SEC-246-A05", + "SEC-246-A06", + "SEC-246-A07", + "SEC-246-A08", + "SEC-246-A09", + "SEC-2466-A04", + "SEC-2471-A03", + "SEC-2535-A05", + "SEC-2571-A04", + "SEC-269", + "SEC-3162-A02", + "SEC-3162-A03", + "SEC-3162-A04", + "SEC-3162-A08", + "SEC-3162-A09", + "SEC-3524-A01", + "SEC-3578-A02", + "SEC-4197-A01", + "SEC-4197-A02", + "SEC-4247", + "SEC-4247-A01", + "SEC-4247-A02", + "SEC-4247-A03", + "SEC-4247-A04", + "SEC-4247-A05", + "SEC-4247-A08", + "SEC-431-A20", + "SEC-4834-A01", + "SEC-4834-A02", + "SEC-4834-A03", + "SEC-4834-A04", + "SEC-4834-A07", + "SEC-4841-A01", + "SEC-4841-A04", + "SEC-4841-A05", + "SEC-4841-A06", + "SEC-4841-A09", + "SEC-4845", + "SEC-4847", + "SEC-4847-A01", + "SEC-4847-A04", + "SEC-4847-A07", + "SEC-4850-A08", + "SEC-4851-A01", + "SEC-4852", + "SEC-4852-A01", + "SEC-4852-A02", + "SEC-4852-A04", + "SEC-4859-A06", + "SEC-4860", + "SEC-4860-A08", + "SEC-4860-A09", + "SEC-4864", + "SEC-4864-A01", + "SEC-4864-A02", + "SEC-4864-A05", + "SEC-4864-A06", + "SEC-4867", + "SEC-4867-A01", + "SEC-4870", + "SEC-4872-A02", + "SEC-4876-A01", + "SEC-4876-A02", + "SEC-4876-A03", + "SEC-4876-A04", + "SEC-4876-A05", + "SEC-4876-A06", + "SEC-4876-A07", + "SEC-4876-A10", + "SEC-4880", + "SEC-4880-A01", + "SEC-4880-A02", + "SEC-4880-A03", + "SEC-4880-A04", + "SEC-4880-A05", + "SEC-4880-A07", + "SEC-4880-A11", + "SEC-4880-A13", + "SEC-4880-A14", + "SEC-4880-A15", + "SEC-4883-A03", + "SEC-4883-A05", + "SEC-4883-A06", + "SEC-4883-A07", + "SEC-4883-A12", + "SEC-4883-A13", + "SEC-4884", + "SEC-4884-A01", + "SEC-4884-A02", + "SEC-4884-A03", + "SEC-4884-A04", + "SEC-4884-A05", + "SEC-4888-A02", + "SEC-4888-A05", + "SEC-4890-A03", + "SEC-4890-A04", + "SEC-4993-A10", + "SEC-542", + "SEC-554", + "SEC-558", + "SEC-5758-A07", + "SEC-5861-A01", + "SEC-5861-A02", + "SEC-5861-A06", + "SEC-5885-A02", + "SEC-595", + "SEC-599-A13", + "SEC-599-A14", + "SEC-6132-A02", + "SEC-6132-A07", + "SEC-6139-A05", + "SEC-616", + "SEC-6162-A03", + "SEC-6174-A02", + "SEC-6174-A03", + "SEC-6174-A09", + "SEC-6176", + "SEC-6181-A05", + "SEC-648", + "SEC-654", + "SEC-654-A10", + "SEC-6842-A03", + "SEC-6871-A01", + "SEC-692", + "SEC-705", + "SEC-705-A08", + "SEC-705-A09", + "SEC-705-A10", + "SEC-705-A13", + "SEC-705-A14", + "SEC-725-A16", + "SEC-7351-A08", + "SEC-782-A12", + "SEC-818-A08", + "SEC-827", + "SEC-827-A01", + "SEC-827-A02", + "SEC-827-A11", + "SEC-827-A12", + "SEC-832-A15", + "SEC-832-A25", + "SEC-832-A26", + "SEC-8423-A03", + "SEC-8436-A05", + "SEC-8442-A02", + "SEC-8458", + "SEC-8470-A03", + "SEC-8474", + "SEC-8492-A01", + "SEC-8492-A05", + "SEC-8496", + "SEC-850", + "SEC-850-A08", + "SEC-850-A09", + "SEC-850-A10", + "SEC-850-A14", + "SEC-8508-A06", + "SEC-8520", + "SEC-8531", + "SEC-8536-A03", + "SEC-856", + "SEC-856-A01", + "SEC-856-A02", + "SEC-856-A03", + "SEC-856-A12", + "SEC-856-A13", + "SEC-856-A14", + "SEC-856-A15", + "SEC-856-A17", + "SEC-856-A19", + "SEC-856-A20", + "SEC-8575", + "SEC-8586-A02", + "SEC-8599-A04", + "SEC-8616", + "SEC-8618-A02", + "SEC-8618-A04", + "SEC-8630-A05", + "SEC-8630-A06", + "SEC-8639-A01", + "SEC-8639-A02", + "SEC-8639-A04", + "SEC-8639-A05", + "SEC-8640-A01", + "SEC-8648-A04", + "SEC-8649-A01", + "SEC-8649-A02", + "SEC-865-A19", + "SEC-8651", + "SEC-8651-A01", + "SEC-867-A14", + "SEC-868-A11", + "SEC-8770-A02", + "SEC-8936", + "SEC-8936-A02", + "SEC-8936-A03", + "SEC-8936-A07", + "SEC-8936-A08", + "SEC-8936-A09", + "SEC-8936-A10", + "SEC-8936-A12", + "SEC-8936-A13", + "SEC-9112-A06" + ], + "member_count": 530, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.9, + "source_meta_cluster": "M7", + "cluster_size": 162, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "emergency_stop_interlocking", + "name": "Not-Halt-, Stillsetz- und Verriegelungsfunktionen", + "description": "Bereitstellung von Not-Halt- und Stillsetzfunktionen sowie Verriegelungsvorrichtungen, inkl. Positionierung, Erkennbarkeit, Moduswahlvorrichtung mit Verriegelung und Vermeidung zusätzlicher Gefährdungen.", + "tier": "LEGAL_MINIMUM", + "subdomain": "safety_functions", + "applicability": "universal", + "evidence_facets": { + "governance": false, + "capability": true, + "evidence": true + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Anhang III Nr. 1.2.4 (Stillsetzen, Not-Halt)", + "citation": "Jede Maschine muss mit einer oder mehreren Notvorrichtungen ausgerüstet sein, mit denen sich drohende oder eintretende Gefahren abwenden lassen." + } + ], + "guidance_basis": [], + "member_review_units": [ + "M91", + "M12", + "M107", + "M116", + "M112", + "M74" + ], + "member_controls": [ + "AI-143-A07", + "AUTH-3824-A03", + "COMP-3862-A04", + "ENV-004-A06", + "FIN-1249-A02", + "LOG-223-A06", + "LOG-223-A07", + "LOG-223-A13", + "LOG-223-A14", + "LOG-223-A19", + "LOG-223-A20", + "LOG-223-A24", + "SEC-138-A01", + "SEC-138-A22", + "SEC-138-A24", + "SEC-138-A42", + "SEC-5292-A11", + "SEC-689", + "SEC-7136-A04", + "SEC-827-A14", + "SEC-827-A16", + "SEC-827-A17", + "SEC-8470", + "SEC-8470-A01", + "SEC-8470-A04", + "SEC-8572", + "SEC-860", + "SEC-8630-A01", + "SEC-8651-A04", + "SEC-8770-A17", + "SEC-8770-A18", + "SEC-8878" + ], + "member_count": 32, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.88, + "source_meta_cluster": "M91", + "cluster_size": 9, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "safety_functions_design", + "name": "Auslegung und Zuverlässigkeit von Sicherheitsfunktionen", + "description": "Konstruktion sicherheitsfunktionaler Komponenten und kritischer Sicherheitsfunktionen mit angemessenem Sicherheitsniveau, Absicherung gegen Ausfälle kritischer Sicherheitsfunktionen und Bewertung von Software mit Sicherheitsfunktionen auf Architekturebene.", + "tier": "LEGAL_MINIMUM", + "subdomain": "safety_functions", + "applicability": "universal", + "evidence_facets": { + "governance": false, + "capability": true, + "evidence": true + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Anhang III Nr. 1.2.1 (Sicherheit und Zuverlässigkeit von Steuerungen)", + "citation": "Steuerungen sind so zu gestalten, dass sie sicher und zuverlässig sind und Gefährdungssituationen verhindern." + } + ], + "guidance_basis": [ + { + "source": "ISO", + "anchor": "EN ISO 13849", + "role": "best_practice" + } + ], + "member_review_units": [ + "M3", + "M41", + "M37", + "M78", + "M92", + "M94", + "M114" + ], + "member_controls": [ + "ACC-761-A08", + "AI-038-A13", + "AI-038-A14", + "AI-038-A25", + "AI-038-A26", + "AI-1064-A07", + "AI-1064-A08", + "AI-1065-A06", + "AI-1065-A07", + "AI-1269-A05", + "AI-143-A02", + "AI-143-A03", + "AI-255-A01", + "AI-255-A10", + "AI-331-A02", + "AI-331-A15", + "AI-655-A02", + "AI-655-A05", + "AUTH-1391-A03", + "AUTH-1391-A04", + "AUTH-1413-A05", + "AUTH-2086-A01", + "AUTH-2086-A02", + "AUTH-2086-A06", + "AUTH-2282-A01", + "AUTH-2282-A02", + "AUTH-2586-A02", + "AUTH-2837", + "AUTH-3820-A11", + "AUTH-3842-A04", + "AUTH-4066-A04", + "AUTH-4100-A01", + "AUTH-4112", + "AUTH-4112-A02", + "AUTH-413-A07", + "AUTH-413-A14", + "AUTH-570-A05", + "AUTH-862-A05", + "AUTH-862-A06", + "AUTH-862-A14", + "AUTH-862-A15", + "AUTH-862-A20", + "AUTH-862-A21", + "AUTH-862-A23", + "AUTH-862-A24", + "AUTH-862-A29", + "AUTH-862-A30", + "AVL-001", + "AVL-001-A01", + "AVL-001-A02", + "AVL-001-A03", + "COMP-1111-A03", + "COMP-1111-A08", + "COMP-191-A06", + "COMP-2327-A02", + "COMP-2327-A04", + "COMP-2327-A07", + "COMP-2887-A01", + "COMP-2926-A05", + "COMP-3035-A05", + "COMP-3421-A07", + "COMP-3421-A12", + "COMP-3811", + "COMP-3846-A03", + "COMP-3859-A02", + "COMP-3885-A04", + "COMP-498", + "COMP-563-A24", + "COMP-954-A05", + "COMP-954-A14", + "COMP-954-A15", + "COMP-977-A13", + "CRYP-1574-A06", + "CRYP-1575-A12", + "CRYP-1728", + "CRYP-183", + "CRYP-183-A02", + "CRYP-183-A09", + "CRYP-183-A10", + "CRYP-2209-A04", + "CRYP-2230-A03", + "CRYP-2341-A04", + "DATA-3325-A11", + "DATA-4605-A04", + "DATA-4607-A01", + "DATA-928-A05", + "DATA-928-A06", + "DATA-928-A15", + "DATA-928-A16", + "ENV-114-A02", + "GOV-277-A02", + "GOV-277-A04", + "GOV-277-A10", + "GOV-413-A02", + "GOV-413-A11", + "HLT-009-A11", + "HLT-568-A05", + "HLT-571-A07", + "INC-1097-A01", + "INC-1122-A03", + "LAB-502-A03", + "LOG-1168-A06", + "LOG-181-A03", + "LOG-181-A05", + "LOG-262-A04", + "LOG-262-A12", + "LOG-266-A12", + "LOG-445-A01", + "LOG-445-A04", + "LOG-445-A05", + "LOG-445-A09", + "LOG-445-A11", + "LOG-445-A14", + "LOG-445-A15", + "LOG-445-A19", + "LOG-735", + "NET-0655-A01", + "NET-0655-A02", + "NET-0655-A06", + "NET-0657-A04", + "NET-1703-A02", + "NET-1710-A02", + "NET-362-A08", + "NET-550-A02", + "NET-550-A08", + "NET-550-A36", + "NET-939-A02", + "SEC-026-A04", + "SEC-026-A11", + "SEC-026-A21", + "SEC-119-A07", + "SEC-119-A13", + "SEC-174-A04", + "SEC-174-A05", + "SEC-174-A13", + "SEC-174-A14", + "SEC-180-A32", + "SEC-181-A03", + "SEC-181-A10", + "SEC-181-A15", + "SEC-181-A17", + "SEC-181-A18", + "SEC-2466-A04", + "SEC-2471-A03", + "SEC-252-A05", + "SEC-2535-A05", + "SEC-2571-A04", + "SEC-3162-A02", + "SEC-3162-A03", + "SEC-3162-A04", + "SEC-3162-A08", + "SEC-3162-A09", + "SEC-3524-A01", + "SEC-3578-A02", + "SEC-4197-A01", + "SEC-4197-A02", + "SEC-4247", + "SEC-4247-A01", + "SEC-4247-A02", + "SEC-4247-A03", + "SEC-4247-A04", + "SEC-4247-A05", + "SEC-4247-A08", + "SEC-431-A20", + "SEC-4834-A07", + "SEC-4841-A06", + "SEC-4841-A09", + "SEC-4851-A01", + "SEC-4860-A08", + "SEC-4888-A02", + "SEC-4892-A06", + "SEC-4993-A10", + "SEC-548", + "SEC-5861-A01", + "SEC-5879", + "SEC-5885-A02", + "SEC-599-A14", + "SEC-6132-A02", + "SEC-6132-A07", + "SEC-6139-A05", + "SEC-6162", + "SEC-6162-A03", + "SEC-6174-A01", + "SEC-6174-A02", + "SEC-6174-A03", + "SEC-6174-A09", + "SEC-6176", + "SEC-6181-A05", + "SEC-6345-A02", + "SEC-6842-A03", + "SEC-6871-A01", + "SEC-7021-A02", + "SEC-705-A13", + "SEC-7351-A08", + "SEC-8423-A03", + "SEC-8436-A05", + "SEC-8442-A02", + "SEC-8531", + "SEC-8536-A03", + "SEC-8582-A05", + "SEC-8599-A04", + "SEC-8648-A04", + "SEC-8649-A02", + "SEC-8770-A02", + "SEC-8936", + "SEC-8936-A02", + "SEC-8936-A03", + "SEC-8936-A07", + "SEC-8936-A08", + "SEC-8936-A09", + "SEC-8936-A10", + "SEC-8936-A12", + "SEC-8936-A13", + "SEC-9112-A06" + ], + "member_count": 214, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.85, + "source_meta_cluster": "M3", + "cluster_size": 158, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "safety_components_conformity", + "name": "Sicherheitsbauteile: Identifikation, Test und Konformität", + "description": "Identifikation, Test und Konformitätsnachweis je Sicherheitsbauteil, Führung einer Liste der Sicherheitsbauteile sowie Behandlung von Sicherheitsbauteilen als Ersatzteile.", + "tier": "LEGAL_MINIMUM", + "subdomain": "safety_components", + "applicability": "conditional:safety_component", + "evidence_facets": { + "governance": true, + "capability": true, + "evidence": true + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Anhang I (Liste der Sicherheitsbauteile), Art. 5", + "citation": "Sicherheitsbauteile gemäß Anhang I unterliegen den Anforderungen der Verordnung und der Konformitätsbewertung." + } + ], + "guidance_basis": [], + "member_review_units": [ + "M15", + "M76", + "M53", + "M10", + "M59" + ], + "member_controls": [ + "AI-1152", + "AI-331-A07", + "AI-331-A10", + "AI-331-A13", + "COMP-2293-A04", + "COMP-954-A03", + "COMP-954-A07", + "COMP-954-A18", + "COMP-954-A20", + "CRYP-151", + "CRYP-151-A01", + "CRYP-151-A02", + "CRYP-151-A09", + "CRYP-151-A12", + "CRYP-151-A13", + "CRYP-151-A18", + "CRYP-151-A19", + "CRYP-213-A08", + "CRYP-2234-A02", + "CRYP-2234-A04", + "GOV-1966", + "SEC-138", + "SEC-181", + "SEC-181-A01", + "SEC-181-A04", + "SEC-181-A08", + "SEC-181-A11", + "SEC-228-A01", + "SEC-228-A02", + "SEC-228-A09", + "SEC-233-A03", + "SEC-233-A09", + "SEC-4841-A04", + "SEC-4864", + "SEC-4864-A01", + "SEC-705", + "SEC-705-A08", + "SEC-829-A17", + "SEC-832-A15", + "SEC-8427-A02", + "SEC-850-A08", + "SEC-850-A09", + "SEC-8649-A01" + ], + "member_count": 43, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.85, + "source_meta_cluster": "M15", + "cluster_size": 14, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "operating_instructions", + "name": "Betriebsanleitung – Inhalt und Bereitstellung", + "description": "Erstellung und Bereitstellung einer vollständigen, barrierefrei zugänglichen und verständlichen Betriebsanleitung in der/den Landessprache(n), inkl. Leistungskennzahlen, sicherer Bedienung, Notfall-/Störungsverfahren, Wartung, vorhersehbarer Fehlanwendung sowie digitaler Bereitstellung.", + "tier": "LEGAL_MINIMUM", + "subdomain": "operating_instructions", + "applicability": "universal", + "evidence_facets": { + "governance": false, + "capability": true, + "evidence": true + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Anhang III Nr. 1.7.4 (Betriebsanleitung)", + "citation": "Jeder Maschine muss eine Betriebsanleitung in der/den Amtssprache(n) des Mitgliedstaats beiliegen, in dem die Maschine in Verkehr gebracht wird." + } + ], + "guidance_basis": [], + "member_review_units": [ + "M9", + "M11", + "M34", + "M35", + "M84", + "M17", + "M36", + "M93", + "M110", + "M99" + ], + "member_controls": [ + "AI-1121-A08", + "AI-1160-A03", + "AI-1801-A02", + "AI-205-A02", + "AI-472-A03", + "AI-504-A02", + "AI-504-A03", + "AI-504-A06", + "AI-504-A08", + "AI-504-A11", + "AI-504-A12", + "AI-504-A14", + "AI-504-A18", + "AI-504-A20", + "AI-504-A23", + "AI-504-A24", + "AI-505-A05", + "AI-505-A12", + "AI-562-A02", + "AI-562-A03", + "AI-562-A13", + "AI-562-A14", + "AI-593-A08", + "AI-593-A18", + "AI-660-A04", + "AI-660-A09", + "AUTH-160", + "AUTH-2082", + "AUTH-2082-A02", + "AUTH-2082-A04", + "AUTH-2082-A05", + "AUTH-2215-A03", + "AUTH-2215-A04", + "AUTH-2257-A07", + "AUTH-2265-A01", + "AUTH-2266-A02", + "AUTH-2266-A07", + "AUTH-3782", + "AUTH-3782-A03", + "AUTH-3782-A04", + "AUTH-3784-A06", + "AUTH-3806-A01", + "AUTH-3819", + "AUTH-3819-A01", + "AUTH-3833-A04", + "AUTH-3833-A13", + "AUTH-3834-A01", + "AUTH-3834-A03", + "AUTH-3834-A07", + "AUTH-3839-A02", + "AUTH-3841", + "AUTH-3841-A02", + "AUTH-3841-A03", + "AUTH-3841-A05", + "AUTH-3841-A06", + "COMP-063", + "COMP-063-A07", + "COMP-111-A02", + "COMP-111-A09", + "COMP-1137-A02", + "COMP-1137-A04", + "COMP-2233-A07", + "COMP-2260-A03", + "COMP-2274", + "COMP-2274-A02", + "COMP-2274-A03", + "COMP-2274-A04", + "COMP-2614-A07", + "COMP-2689-A03", + "COMP-3768-A06", + "COMP-3768-A09", + "COMP-3776", + "COMP-3776-A01", + "COMP-3786-A04", + "COMP-3786-A05", + "COMP-3786-A06", + "COMP-3842-A07", + "COMP-3874-A07", + "COMP-3879-A02", + "COMP-563-A16", + "COMP-563-A19", + "COMP-563-A20", + "COMP-563-A21", + "COMP-563-A22", + "COMP-597-A04", + "COMP-597-A09", + "COMP-742-A04", + "COMP-742-A12", + "COMP-993", + "COMP-993-A01", + "COMP-993-A03", + "COMP-993-A04", + "COMP-993-A06", + "COMP-993-A07", + "COMP-993-A08", + "CRYP-022", + "CRYP-022-A09", + "CRYP-022-A18", + "CRYP-106-A06", + "CRYP-106-A18", + "CRYP-106-A24", + "CRYP-150-A04", + "CRYP-150-A09", + "CRYP-151-A10", + "CRYP-151-A11", + "CRYP-151-A20", + "CRYP-151-A21", + "CRYP-151-A22", + "CRYP-1580-A11", + "CRYP-167-A03", + "CRYP-167-A09", + "CRYP-167-A14", + "CRYP-203", + "CRYP-203-A03", + "CRYP-203-A04", + "DATA-375", + "DATA-375-A01", + "DATA-375-A02", + "DATA-375-A03", + "DATA-375-A06", + "DATA-375-A07", + "DATA-375-A08", + "DATA-375-A09", + "DATA-375-A12", + "ENV-001-A01", + "ENV-006-A05", + "ENV-006-A06", + "ENV-006-A08", + "ENV-006-A10", + "ENV-006-A18", + "ENV-006-A20", + "ENV-007-A05", + "ENV-007-A11", + "ENV-008-A08", + "ENV-008-A14", + "ENV-008-A15", + "ENV-010-A04", + "ENV-010-A08", + "ENV-020-A04", + "ENV-083", + "ENV-083-A01", + "ENV-118-A04", + "ENV-122-A12", + "GOV-273-A06", + "GOV-419-A10", + "GOV-419-A11", + "GOV-419-A20", + "GOV-609-A01", + "GOV-609-A06", + "GOV-609-A33", + "HLT-032-A18", + "HLT-097-A25", + "HLT-191", + "HLT-191-A01", + "HLT-191-A02", + "HLT-191-A03", + "HLT-191-A04", + "HLT-191-A05", + "HLT-191-A06", + "HLT-191-A07", + "HLT-191-A08", + "HLT-200-A11", + "HLT-537-A05", + "HLT-571-A03", + "HLT-587-A07", + "HLT-587-A09", + "LAB-010-A13", + "LAB-010-A25", + "LAB-021", + "LAB-699-A03", + "LAB-699-A04", + "LAB-717", + "LAB-717-A01", + "LOG-1402-A05", + "LOG-1722-A08", + "LOG-381-A06", + "LOG-381-A11", + "LOG-437", + "LOG-437-A01", + "LOG-437-A02", + "LOG-437-A04", + "LOG-437-A05", + "LOG-437-A08", + "LOG-437-A09", + "LOG-437-A10", + "LOG-490-A04", + "LOG-490-A09", + "LOG-556-A04", + "LOG-556-A07", + "LOG-562-A01", + "LOG-562-A03", + "LOG-570", + "LOG-570-A05", + "LOG-570-A10", + "LOG-590", + "LOG-590-A05", + "LOG-590-A10", + "LOG-590-A14", + "NET-027-A04", + "NET-027-A05", + "NET-027-A09", + "NET-027-A14", + "NET-027-A15", + "NET-1057", + "NET-1057-A01", + "NET-1057-A07", + "NET-1058-A07", + "NET-1059-A13", + "NET-1062-A10", + "NET-1063-A04", + "NET-1063-A09", + "NET-1261-A07", + "NET-143", + "NET-163-A21", + "NET-163-A22", + "NET-164", + "NET-164-A08", + "NET-164-A11", + "NET-164-A14", + "NET-164-A20", + "NET-1709-A03", + "NET-212-A04", + "NET-212-A09", + "NET-307-A10", + "SEC-127-A11", + "SEC-127-A25", + "SEC-127-A37", + "SEC-145", + "SEC-145-A01", + "SEC-145-A10", + "SEC-148-A13", + "SEC-148-A26", + "SEC-173-A08", + "SEC-173-A21", + "SEC-189-A07", + "SEC-201", + "SEC-221-A05", + "SEC-221-A07", + "SEC-221-A12", + "SEC-221-A14", + "SEC-247-A21", + "SEC-4059-A02", + "SEC-4059-A03", + "SEC-4059-A04", + "SEC-4059-A06", + "SEC-4059-A07", + "SEC-452-A13", + "SEC-4833-A01", + "SEC-4833-A03", + "SEC-4833-A04", + "SEC-4833-A05", + "SEC-4833-A07", + "SEC-4839-A03", + "SEC-4839-A08", + "SEC-4840-A01", + "SEC-4840-A02", + "SEC-4840-A06", + "SEC-4841-A07", + "SEC-4847-A10", + "SEC-4856-A03", + "SEC-4856-A06", + "SEC-4856-A07", + "SEC-4875-A09", + "SEC-4891-A07", + "SEC-516-A09", + "SEC-536", + "SEC-536-A02", + "SEC-536-A03", + "SEC-536-A04", + "SEC-536-A05", + "SEC-536-A07", + "SEC-536-A08", + "SEC-5395-A06", + "SEC-554-A32", + "SEC-568", + "SEC-568-A02", + "SEC-574", + "SEC-596", + "SEC-599", + "SEC-599-A11", + "SEC-599-A18", + "SEC-618", + "SEC-649-A13", + "SEC-731-A12", + "SEC-749-A05", + "SEC-755-A07", + "SEC-766", + "SEC-766-A01", + "SEC-766-A07", + "SEC-766-A08", + "SEC-766-A09", + "SEC-833", + "SEC-833-A10", + "SEC-833-A12", + "SEC-833-A14", + "SEC-833-A16", + "SEC-841", + "SEC-841-A21", + "SEC-842-A20", + "SEC-843", + "SEC-843-A01", + "SEC-843-A06", + "SEC-8445-A01", + "SEC-8460-A08", + "SEC-8478", + "SEC-8490-A10", + "SEC-851", + "SEC-851-A01", + "SEC-851-A09", + "SEC-851-A10", + "SEC-8513-A01", + "SEC-8518-A03", + "SEC-8546-A03", + "SEC-861", + "SEC-861-A01", + "SEC-861-A10", + "SEC-861-A12", + "SEC-8624-A03", + "SEC-8630-A07", + "SEC-8633-A03", + "SEC-8633-A08", + "SEC-867", + "SEC-9037", + "SEC-9054-A08", + "SEC-997-A04" + ], + "member_count": 325, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.92, + "source_meta_cluster": "M9", + "cluster_size": 143, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "blocking_release_procedure", + "name": "Sichere Blockierungsfreigabe und Freigabeverfahren", + "description": "Berücksichtigung von Blockierungsszenarien in der Risikobeurteilung und Dokumentation eines sicheren Freigabeverfahrens in der Betriebsanleitung.", + "tier": "LEGAL_MINIMUM", + "subdomain": "protective_devices", + "applicability": "conditional:blocking_risk", + "evidence_facets": { + "governance": false, + "capability": true, + "evidence": true + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Anhang III Nr. 1.3.7/1.7.4", + "citation": "Gefährdungen durch Blockierung beweglicher Teile sind zu berücksichtigen und Maßnahmen zur sicheren Beseitigung in der Betriebsanleitung anzugeben." + } + ], + "guidance_basis": [], + "member_review_units": [ + "M13", + "M7", + "M81" + ], + "member_controls": [ + "AI-1063-A04", + "AI-1065-A02", + "AI-1065-A04", + "AI-1778-A05", + "AI-1787-A04", + "AI-1787-A06", + "AI-1787-A17", + "AI-330-A15", + "AI-333-A01", + "AI-579-A04", + "AI-579-A11", + "AI-593-A02", + "AI-593-A04", + "AI-593-A13", + "AI-593-A15", + "AI-660-A02", + "AI-660-A07", + "AI-660-A10", + "AUTH-1416-A03", + "AUTH-178", + "AUTH-2082-A03", + "AUTH-2092-A01", + "AUTH-2169-A01", + "AUTH-2169-A02", + "AUTH-2179", + "AUTH-2179-A01", + "AUTH-2179-A03", + "AUTH-2185", + "AUTH-2185-A01", + "AUTH-2838-A02", + "AUTH-3136-A01", + "AUTH-3144-A04", + "AUTH-3144-A05", + "AUTH-3144-A06", + "AUTH-3144-A07", + "AUTH-3167-A08", + "AUTH-3288-A01", + "AUTH-3292", + "AUTH-3292-A07", + "AUTH-3369-A02", + "AUTH-3386", + "AUTH-3386-A01", + "AUTH-3386-A06", + "AUTH-3514", + "AUTH-3514-A01", + "AUTH-3514-A05", + "AUTH-3565-A09", + "AUTH-3698", + "AUTH-3783-A04", + "AUTH-3790-A03", + "AUTH-3809-A02", + "AUTH-3812", + "AUTH-3812-A07", + "AUTH-3821", + "AUTH-3821-A01", + "AUTH-3821-A04", + "AUTH-3821-A05", + "AUTH-3824", + "AUTH-3838-A01", + "AUTH-3838-A12", + "AUTH-3839-A06", + "AUTH-3894-A05", + "AUTH-3895-A01", + "AUTH-3895-A04", + "AUTH-3895-A07", + "AUTH-3918-A04", + "AUTH-3939-A03", + "AUTH-420-A03", + "AUTH-420-A07", + "AUTH-619", + "AUTH-619-A08", + "COMP-149-A03", + "COMP-2472-A04", + "COMP-2556-A02", + "COMP-3056-A06", + "COMP-3748", + "COMP-3748-A01", + "COMP-3748-A02", + "COMP-3834-A01", + "COMP-3862-A03", + "COMP-3885-A01", + "COMP-3921-A01", + "COMP-587-A09", + "COMP-767-A15", + "CRYP-016-A05", + "CRYP-055", + "CRYP-106-A13", + "CRYP-1575-A06", + "CRYP-2215", + "CRYP-2215-A01", + "CRYP-2238-A01", + "DATA-1219", + "DATA-1219-A01", + "DATA-1777-A16", + "DATA-1928-A13", + "DATA-2207", + "DATA-2207-A01", + "DATA-2207-A02", + "DATA-2263", + "DATA-2553-A04", + "DATA-2586-A04", + "DATA-2586-A05", + "DATA-2586-A09", + "DATA-3295-A03", + "DATA-3296-A05", + "DATA-3312-A04", + "DATA-3333-A03", + "DATA-3337", + "DATA-3479", + "DATA-3622-A04", + "DATA-3717-A06", + "DATA-3739-A03", + "DATA-4198-A01", + "DATA-4386", + "DATA-4445-A06", + "DATA-4491-A05", + "DATA-4565-A01", + "ENV-025-A06", + "ENV-025-A14", + "ENV-040-A03", + "ENV-040-A06", + "ENV-040-A19", + "ENV-060-A06", + "ENV-060-A10", + "ENV-060-A15", + "ENV-060-A19", + "ENV-060-A24", + "ENV-060-A28", + "ENV-060-A33", + "ENV-060-A37", + "ENV-060-A42", + "ENV-084-A01", + "FIN-1278-A02", + "FIN-1278-A03", + "GOV-1188-A05", + "GOV-1964", + "GOV-229-A09", + "GOV-229-A10", + "GOV-3223-A08", + "GOV-3314-A01", + "GOV-3314-A05", + "GOV-3582", + "GOV-3635-A06", + "GOV-3807-A05", + "GOV-3807-A11", + "GOV-385-A09", + "GOV-385-A10", + "GOV-385-A19", + "GOV-401-A01", + "GOV-413-A07", + "GOV-413-A16", + "GOV-419", + "HLT-366-A04", + "HLT-537-A07", + "HLT-563-A03", + "HLT-579-A02", + "INC-020", + "INC-1098-A02", + "INC-1137-A02", + "INC-1264-A05", + "LAB-010-A10", + "LAB-010-A22", + "LAB-012-A08", + "LAB-012-A20", + "LOG-1160-A07", + "LOG-1168-A13", + "LOG-1170-A03", + "LOG-1172-A08", + "LOG-1259-A03", + "LOG-1264-A04", + "LOG-1276-A05", + "LOG-1519-A13", + "LOG-1821", + "LOG-1821-A01", + "LOG-1821-A02", + "LOG-1821-A11", + "LOG-188", + "LOG-188-A01", + "LOG-198", + "LOG-1984-A04", + "LOG-2001-A03", + "LOG-2001-A04", + "LOG-2001-A05", + "LOG-2052-A01", + "LOG-223", + "LOG-223-A04", + "LOG-223-A11", + "LOG-223-A17", + "LOG-260-A03", + "LOG-266-A08", + "LOG-560", + "LOG-560-A06", + "LOG-612", + "LOG-612-A01", + "LOG-665", + "LOG-665-A01", + "NET-082-A13", + "NET-082-A26", + "NET-106-A04", + "NET-106-A12", + "NET-1275-A04", + "NET-1512-A01", + "NET-152", + "NET-1712", + "NET-1712-A01", + "NET-210-A07", + "NET-210-A12", + "NET-302-A08", + "NET-788-A02", + "SEC-119", + "SEC-1248-A04", + "SEC-138-A08", + "SEC-138-A30", + "SEC-148-A02", + "SEC-148-A10", + "SEC-148-A15", + "SEC-148-A23", + "SEC-180-A10", + "SEC-180-A11", + "SEC-180-A22", + "SEC-180-A23", + "SEC-189", + "SEC-189-A01", + "SEC-189-A06", + "SEC-189-A11", + "SEC-1971-A10", + "SEC-228", + "SEC-228-A06", + "SEC-228-A08", + "SEC-228-A10", + "SEC-228-A13", + "SEC-240-A05", + "SEC-240-A12", + "SEC-243-A03", + "SEC-246", + "SEC-246-A04", + "SEC-246-A05", + "SEC-246-A08", + "SEC-246-A09", + "SEC-269", + "SEC-3015-A07", + "SEC-3493-A04", + "SEC-3553-A02", + "SEC-4834-A02", + "SEC-4834-A03", + "SEC-4841-A05", + "SEC-4845", + "SEC-4847-A04", + "SEC-4850-A08", + "SEC-4852", + "SEC-4852-A01", + "SEC-4852-A02", + "SEC-4852-A04", + "SEC-4859-A06", + "SEC-4864-A06", + "SEC-4864-A07", + "SEC-4870", + "SEC-4876-A03", + "SEC-4876-A04", + "SEC-4876-A05", + "SEC-4876-A06", + "SEC-4876-A09", + "SEC-4876-A10", + "SEC-4880-A04", + "SEC-4880-A07", + "SEC-4880-A13", + "SEC-4883-A03", + "SEC-4884", + "SEC-4884-A02", + "SEC-4891-A01", + "SEC-5292", + "SEC-5292-A03", + "SEC-5292-A04", + "SEC-5292-A05", + "SEC-5292-A06", + "SEC-5364-A01", + "SEC-554", + "SEC-558", + "SEC-5847-A07", + "SEC-595", + "SEC-5952-A01", + "SEC-5952-A02", + "SEC-616", + "SEC-6441-A02", + "SEC-648", + "SEC-654", + "SEC-692", + "SEC-705-A14", + "SEC-7136-A05", + "SEC-725-A16", + "SEC-7389-A02", + "SEC-782-A12", + "SEC-827", + "SEC-827-A01", + "SEC-827-A02", + "SEC-827-A11", + "SEC-827-A12", + "SEC-832-A25", + "SEC-832-A28", + "SEC-8352", + "SEC-8353-A01", + "SEC-8425-A01", + "SEC-8470-A03", + "SEC-8474", + "SEC-8492-A01", + "SEC-8492-A05", + "SEC-8496", + "SEC-850", + "SEC-850-A10", + "SEC-850-A14", + "SEC-856-A19", + "SEC-8575", + "SEC-8577-A08", + "SEC-8616", + "SEC-8618-A02", + "SEC-8618-A04", + "SEC-8630-A05", + "SEC-8630-A06", + "SEC-8639-A01", + "SEC-8639-A02", + "SEC-8639-A04", + "SEC-8639-A05", + "SEC-8668-A04", + "SEC-868-A11", + "SEC-8785-A03", + "SEC-8795-A03", + "SEC-8807", + "SEC-8807-A08", + "SEC-8807-A09", + "SEC-8807-A11", + "SEC-8807-A13", + "SEC-8849-A01", + "TRD-528", + "TRD-528-A04" + ], + "member_count": 334, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.8, + "source_meta_cluster": "M13", + "cluster_size": 166, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "conformity_assessment", + "name": "Konformitätsbewertungsverfahren", + "description": "Durchführung des Konformitätsbewertungsverfahrens gemäß Maschinenverordnung, ggf. unter Einbindung einer notifizierten Stelle, einschließlich Risikobeurteilung und EHSR-Konformitätsnachweis.", + "tier": "LEGAL_MINIMUM", + "subdomain": "conformity", + "applicability": "universal", + "evidence_facets": { + "governance": true, + "capability": true, + "evidence": true + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Art. 25 (Konformitätsbewertungsverfahren)", + "citation": "Vor dem Inverkehrbringen führt der Hersteller das anwendbare Konformitätsbewertungsverfahren durch." + } + ], + "guidance_basis": [], + "member_review_units": [ + "M8", + "M45", + "M52", + "M27", + "M32", + "M86", + "M21" + ], + "member_controls": [ + "AI-1070-A02", + "AI-1070-A05", + "AI-1801-A01", + "AI-655-A06", + "AI-929-A14", + "AI-929-A25", + "AI-929-A36", + "AI-929-A47", + "AUTH-2085-A01", + "AUTH-2087", + "AUTH-2087-A03", + "AUTH-276-A04", + "AUTH-276-A05", + "AUTH-3779", + "AUTH-3810-A02", + "AUTH-3842-A02", + "AUTH-427-A07", + "AUTH-427-A16", + "AUTH-427-A17", + "COMP-2245-A01", + "COMP-2261-A09", + "COMP-2265-A02", + "COMP-2275", + "COMP-2340", + "COMP-2340-A03", + "COMP-2887-A03", + "COMP-3772", + "COMP-3772-A08", + "COMP-3795-A02", + "COMP-3807", + "COMP-3811-A02", + "COMP-3811-A08", + "COMP-3833-A01", + "COMP-3834", + "COMP-3855", + "COMP-3855-A03", + "COMP-3859-A06", + "COMP-468", + "COMP-495-A04", + "COMP-495-A05", + "COMP-495-A11", + "COMP-495-A12", + "COMP-501", + "COMP-501-A13", + "COMP-564-A03", + "COMP-564-A04", + "COMP-564-A13", + "COMP-564-A14", + "COMP-567", + "COMP-567-A01", + "COMP-567-A10", + "COMP-745-A02", + "COMP-745-A08", + "COMP-954-A02", + "COMP-954-A17", + "COMP-960-A12", + "COMP-962", + "COMP-962-A02", + "COMP-962-A03", + "COMP-962-A11", + "COMP-962-A12", + "COMP-962-A15", + "COMP-962-A19", + "COMP-973-A02", + "COMP-973-A23", + "COMP-975-A11", + "COMP-985", + "CRYP-105", + "CRYP-105-A01", + "CRYP-105-A02", + "CRYP-105-A07", + "CRYP-105-A10", + "CRYP-105-A15", + "CRYP-106-A07", + "CRYP-106-A19", + "CRYP-151-A07", + "CRYP-151-A08", + "CRYP-1581-A01", + "CRYP-192-A04", + "CRYP-213-A01", + "CRYP-213-A07", + "CRYP-2234-A06", + "CRYP-2235-A04", + "CRYP-723-A11", + "DATA-2207-A03", + "ENV-040-A08", + "ENV-040-A09", + "ENV-040-A21", + "ENV-040-A22", + "ENV-123", + "ENV-123-A01", + "ENV-123-A02", + "GOV-1966-A01", + "GOV-3223-A10", + "GOV-3601-A04", + "HLT-009-A07", + "HLT-037-A08", + "HLT-199", + "HLT-207-A02", + "HLT-207-A03", + "HLT-207-A04", + "HLT-366-A05", + "HLT-584-A08", + "HLT-594-A02", + "HLT-595-A01", + "LAB-010", + "LAB-010-A11", + "LAB-010-A12", + "LAB-010-A23", + "LAB-010-A24", + "LAB-012-A12", + "LAB-012-A24", + "LOG-1821-A10", + "LOG-1984-A02", + "LOG-223-A18", + "LOG-223-A23", + "LOG-380-A04", + "LOG-380-A12", + "NET-106-A07", + "NET-106-A08", + "NET-106-A15", + "NET-106-A16", + "NET-195-A05", + "NET-244-A08", + "NET-306-A04", + "NET-306-A09", + "SEC-044-A09", + "SEC-044-A22", + "SEC-138-A15", + "SEC-138-A16", + "SEC-138-A37", + "SEC-138-A45", + "SEC-180-A12", + "SEC-180-A24", + "SEC-237-A07", + "SEC-237-A08", + "SEC-3015-A05", + "SEC-3059-A03", + "SEC-4834-A09", + "SEC-4842-A03", + "SEC-4864-A03", + "SEC-4864-A04", + "SEC-4876-A01", + "SEC-4876-A08", + "SEC-4880-A12", + "SEC-4883-A06", + "SEC-4883-A07", + "SEC-4883-A12", + "SEC-4891-A03", + "SEC-4891-A04", + "SEC-522-A08", + "SEC-522-A12", + "SEC-522-A13", + "SEC-5949-A02", + "SEC-705-A05", + "SEC-705-A12", + "SEC-7441-A05", + "SEC-827-A15", + "SEC-834-A02", + "SEC-834-A16", + "SEC-8425", + "SEC-8427", + "SEC-846", + "SEC-8494", + "SEC-8520", + "SEC-8538-A02", + "SEC-8546", + "SEC-856-A18", + "SEC-865-A21", + "SEC-8651", + "SEC-9105-A16", + "SEC-997-A08" + ], + "member_count": 172, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.88, + "source_meta_cluster": "M8", + "cluster_size": 45, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "technical_documentation", + "name": "Technische Dokumentation", + "description": "Erstellung und Aufbewahrung der technischen Unterlagen einschließlich Konstruktionsdatei, Risikobeurteilung, Kopie der Betriebsanleitung und Lückenanalyse.", + "tier": "LEGAL_MINIMUM", + "subdomain": "documentation", + "applicability": "universal", + "evidence_facets": { + "governance": false, + "capability": false, + "evidence": true + }, + "source_role": "EVIDENCE", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Anhang IV (Technische Unterlagen)", + "citation": "Die technischen Unterlagen müssen die Konstruktions-, Herstellungs- und Funktionsbeschreibung sowie die Risikobeurteilung enthalten." + } + ], + "guidance_basis": [], + "member_review_units": [ + "M32", + "M52", + "M87", + "M48", + "M36" + ], + "member_controls": [ + "AUTH-3779", + "AUTH-3810-A02", + "AUTH-3841-A03", + "AUTH-3842-A02", + "COMP-3772", + "COMP-3772-A08", + "COMP-3786", + "COMP-3855", + "COMP-3855-A03", + "COMP-464", + "COMP-478", + "COMP-495-A04", + "COMP-495-A05", + "COMP-495-A11", + "COMP-495-A12", + "COMP-745-A02", + "COMP-745-A08", + "CRYP-167-A14", + "CRYP-171-A07", + "CRYP-171-A16", + "DATA-2207-A03", + "GOV-1966-A01", + "GOV-3223-A10", + "HLT-037-A08", + "HLT-207-A02", + "HLT-207-A03", + "HLT-207-A04", + "HLT-563-A05", + "LOG-1821-A10", + "NET-106-A06", + "NET-106-A14", + "NET-1709-A03", + "NET-195-A05", + "SEC-146-A07", + "SEC-146-A08", + "SEC-180-A14", + "SEC-180-A26", + "SEC-3015-A05", + "SEC-4891-A03", + "SEC-4891-A04", + "SEC-522-A08", + "SEC-522-A12", + "SEC-522-A13", + "SEC-5949", + "SEC-5949-A02", + "SEC-7441-A05", + "SEC-825-A12", + "SEC-834-A02", + "SEC-834-A16", + "SEC-8425", + "SEC-8437-A01", + "SEC-846", + "SEC-8494", + "SEC-8538-A02", + "SEC-8546", + "SEC-867", + "SEC-9105-A16" + ], + "member_count": 57, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.85, + "source_meta_cluster": "M32", + "cluster_size": 25, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "eu_declaration_ce_marking", + "name": "EU-Konformitätserklärung und CE-Kennzeichnung", + "description": "Ausstellung der EU-Konformitätserklärung (auch in digitalem Format), Einbauerklärung für unvollständige Maschinen sowie Anbringung der CE-Kennzeichnung.", + "tier": "LEGAL_MINIMUM", + "subdomain": "conformity", + "applicability": "universal", + "evidence_facets": { + "governance": false, + "capability": true, + "evidence": true + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Art. 21, Art. 22 (EU-Konformitätserklärung, CE-Kennzeichnung)", + "citation": "Der Hersteller stellt eine EU-Konformitätserklärung aus und bringt die CE-Kennzeichnung an." + } + ], + "guidance_basis": [], + "member_review_units": [ + "M48", + "M21", + "M18", + "M109", + "M15" + ], + "member_controls": [ + "AI-331-A07", + "AI-331-A10", + "AI-331-A13", + "AI-532", + "AI-929-A14", + "AI-929-A25", + "AI-929-A36", + "AI-929-A47", + "AUTH-276-A04", + "AUTH-276-A05", + "COMP-111", + "COMP-154-A16", + "COMP-2265-A02", + "COMP-2293-A04", + "COMP-344", + "COMP-344-A01", + "COMP-3786", + "COMP-464", + "COMP-478", + "COMP-495", + "COMP-495-A01", + "COMP-495-A09", + "COMP-567", + "COMP-567-A01", + "COMP-567-A10", + "COMP-977-A01", + "COMP-977-A07", + "COMP-988-A06", + "CRYP-151-A08", + "CRYP-151-A09", + "CRYP-151-A18", + "CRYP-151-A19", + "CRYP-1581-A01", + "CRYP-171-A07", + "CRYP-171-A16", + "CRYP-213-A08", + "HLT-052-A10", + "HLT-095-A01", + "HLT-095-A07", + "LOG-046-A07", + "LOG-1996-A04", + "LOG-490", + "SEC-138-A15", + "SEC-138-A37", + "SEC-181", + "SEC-181-A01", + "SEC-181-A04", + "SEC-181-A08", + "SEC-181-A11", + "SEC-639", + "SEC-8427-A02", + "SEC-8437-A01", + "SEC-8447", + "SEC-8476-A04", + "SEC-8532-A03", + "SEC-8642-A08", + "TRD-655-A02" + ], + "member_count": 57, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.85, + "source_meta_cluster": "M48", + "cluster_size": 6, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "manufacturer_economic_operator_obligations", + "name": "Pflichten der Hersteller und Wirtschaftsakteure", + "description": "Erfüllung der Pflichten von Herstellern, Händlern und sonstigen Wirtschaftsakteuren gemäß Maschinenverordnung, inkl. Kennzeichnungspflichten, Produktdokumentation und Maßnahmen bei nicht-konformen Produkten.", + "tier": "LEGAL_MINIMUM", + "subdomain": "economic_operators", + "applicability": "universal", + "evidence_facets": { + "governance": true, + "capability": true, + "evidence": true + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Art. 10, Art. 11 (Pflichten der Hersteller)", + "citation": "Die Hersteller gewährleisten, dass ihre Maschinen gemäß den grundlegenden Sicherheits- und Gesundheitsschutzanforderungen konstruiert und hergestellt wurden." + } + ], + "guidance_basis": [], + "member_review_units": [ + "M18", + "M37", + "M43", + "M58", + "M89" + ], + "member_controls": [ + "AI-532", + "AUTH-3842-A04", + "COMP-111", + "COMP-154-A16", + "COMP-172-A03", + "COMP-344", + "COMP-344-A01", + "COMP-3811", + "COMP-3846-A03", + "COMP-495", + "COMP-495-A01", + "COMP-495-A09", + "COMP-977-A01", + "COMP-977-A07", + "COMP-977-A13", + "COMP-988-A06", + "CRYP-069", + "CRYP-166-A05", + "CRYP-202", + "DATA-4605-A03", + "ENV-114-A02", + "GOV-227", + "HLT-052-A10", + "HLT-095-A01", + "HLT-095-A07", + "HLT-568-A05", + "HLT-571-A07", + "LOG-046-A07", + "LOG-1996-A04", + "LOG-2008", + "LOG-490", + "NET-1710-A02", + "SEC-1000-A02", + "SEC-1000-A03", + "SEC-1000-A112", + "SEC-1000-A113", + "SEC-1000-A18", + "SEC-1000-A19", + "SEC-1000-A46", + "SEC-1000-A47", + "SEC-1000-A63", + "SEC-1000-A64", + "SEC-1000-A90", + "SEC-1000-A91", + "SEC-639", + "SEC-8423-A03", + "SEC-8436-A05", + "SEC-8442-A02", + "SEC-8447", + "SEC-8531", + "SEC-8532-A03", + "SEC-8536-A03", + "SEC-8599-A04", + "SEC-8642-A08", + "SEC-8649-A02" + ], + "member_count": 55, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.85, + "source_meta_cluster": "M18", + "cluster_size": 21, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "essential_safety_requirements_compliance", + "name": "Einhaltung grundlegender Sicherheits- und Gesundheitsschutzanforderungen", + "description": "Erfüllung der grundlegenden Sicherheits- und Gesundheitsschutzanforderungen (EHSR) der Maschinenverordnung, inkl. Standsicherheit, Überrollschutz, Strahlung/Emissionen und Rückhaltesysteme.", + "tier": "LEGAL_MINIMUM", + "subdomain": "ehsr", + "applicability": "universal", + "evidence_facets": { + "governance": false, + "capability": true, + "evidence": true + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Anhang III (Grundlegende Sicherheits- und Gesundheitsschutzanforderungen)", + "citation": "Maschinen müssen die in Anhang III aufgeführten grundlegenden Sicherheits- und Gesundheitsschutzanforderungen erfüllen." + } + ], + "guidance_basis": [], + "member_review_units": [ + "M19", + "M50", + "M56", + "M93", + "M97", + "M104", + "M100", + "M108", + "M84", + "M77" + ], + "member_controls": [ + "AI-593-A05", + "AI-593-A07", + "AI-593-A16", + "AI-593-A17", + "AUTH-155", + "AUTH-3783-A02", + "AUTH-3783-A03", + "AUTH-3793-A02", + "COMP-149", + "COMP-149-A01", + "COMP-149-A02", + "COMP-3811-A03", + "COMP-3811-A04", + "COMP-3811-A05", + "COMP-3811-A06", + "COMP-3811-A07", + "COMP-3880-A01", + "COMP-967-A26", + "CRYP-063-A05", + "CRYP-1576-A07", + "CRYP-2234", + "CRYP-2234-A01", + "CRYP-2234-A09", + "ENV-006-A04", + "ENV-006-A09", + "ENV-006-A19", + "ENV-008-A05", + "ENV-008-A06", + "ENV-008-A07", + "ENV-008-A13", + "ENV-018-A06", + "ENV-029-A06", + "ENV-029-A12", + "ENV-040-A13", + "ENV-040-A16", + "ENV-040-A26", + "ENV-046-A04", + "ENV-046-A09", + "ENV-084", + "GOV-270-A04", + "GOV-270-A09", + "GOV-3600-A03", + "GOV-402-A06", + "GOV-402-A11", + "GOV-402-A12", + "HLT-009-A04", + "HLT-009-A06", + "HLT-034-A24", + "HLT-034-A28", + "HLT-101-A24", + "HLT-101-A25", + "HLT-191-A03", + "HLT-191-A04", + "HLT-191-A06", + "HLT-191-A08", + "HLT-584-A06", + "HLT-594-A01", + "HLT-594-A08", + "HLT-596-A10", + "INC-005-A08", + "INC-1235-A10", + "LAB-010-A04", + "LAB-010-A07", + "LAB-010-A16", + "LAB-010-A19", + "LAB-021", + "LAB-146-A04", + "LAB-685-A04", + "LOG-1166-A06", + "LOG-1172-A05", + "LOG-562-A01", + "LOG-562-A03", + "LOG-578-A02", + "LOG-578-A07", + "NET-016-A01", + "NET-016-A22", + "NET-146", + "NET-306", + "NET-306-A01", + "NET-306-A07", + "SEC-006-A09", + "SEC-006-A11", + "SEC-044-A12", + "SEC-119-A05", + "SEC-119-A06", + "SEC-119-A12", + "SEC-138-A05", + "SEC-138-A17", + "SEC-138-A27", + "SEC-138-A38", + "SEC-189-A02", + "SEC-189-A05", + "SEC-228-A07", + "SEC-228-A14", + "SEC-233-A06", + "SEC-233-A12", + "SEC-246-A01", + "SEC-246-A03", + "SEC-246-A06", + "SEC-246-A07", + "SEC-256-A03", + "SEC-4834-A01", + "SEC-4834-A04", + "SEC-4840-A06", + "SEC-4841-A01", + "SEC-4847", + "SEC-4847-A01", + "SEC-4847-A07", + "SEC-4854-A01", + "SEC-4856-A10", + "SEC-4860-A05", + "SEC-4860-A06", + "SEC-4860-A09", + "SEC-4867", + "SEC-4867-A01", + "SEC-4872-A02", + "SEC-4876-A02", + "SEC-4876-A07", + "SEC-4880", + "SEC-4880-A01", + "SEC-4880-A02", + "SEC-4880-A03", + "SEC-4883-A05", + "SEC-4883-A13", + "SEC-4884-A01", + "SEC-4884-A03", + "SEC-4884-A04", + "SEC-4884-A05", + "SEC-4888-A05", + "SEC-4890-A03", + "SEC-4890-A04", + "SEC-516", + "SEC-516-A09", + "SEC-542", + "SEC-592", + "SEC-596", + "SEC-599", + "SEC-599-A13", + "SEC-654-A09", + "SEC-654-A10", + "SEC-705-A09", + "SEC-751-A04", + "SEC-755", + "SEC-755-A07", + "SEC-824-A18", + "SEC-832-A26", + "SEC-833", + "SEC-8436-A01", + "SEC-8442-A03", + "SEC-8444-A02", + "SEC-8458", + "SEC-8476-A08", + "SEC-8492-A09", + "SEC-8518-A03", + "SEC-856", + "SEC-856-A01", + "SEC-856-A02", + "SEC-856-A03", + "SEC-856-A12", + "SEC-856-A13", + "SEC-856-A17", + "SEC-8603", + "SEC-8614-A03", + "SEC-862-A06", + "SEC-8624-A03", + "SEC-8641-A02", + "SEC-865-A19", + "SEC-8651-A01", + "SEC-867-A14", + "SEC-997-A04", + "SEC-997-A05" + ], + "member_count": 171, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.85, + "source_meta_cluster": "M50", + "cluster_size": 14, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "harmonised_standards_selection", + "name": "Auswahl harmonisierter Normen auf Basis der Risikobeurteilung", + "description": "Auswahl harmonisierter Normen und Prüfkoeffizienten anhand der Risikobeurteilung sowie Erstellung eines Bewertungsberichts bei Abweichung von harmonisierten Normen.", + "tier": "BEST_PRACTICE", + "subdomain": "standards", + "applicability": "universal", + "evidence_facets": { + "governance": false, + "capability": true, + "evidence": true + }, + "source_role": "GUIDANCE", + "legal_basis": [], + "guidance_basis": [ + { + "source": "ISO", + "anchor": "EN ISO 12100", + "role": "best_practice" + } + ], + "member_review_units": [ + "M44" + ], + "member_controls": [ + "COMP-178-A04", + "COMP-178-A15", + "COMP-2340-A04", + "COMP-3824-A02", + "COMP-3849-A02", + "COMP-772", + "DATA-3456", + "ENV-007-A07", + "ENV-007-A08", + "GOV-2148-A01", + "GOV-2148-A03", + "HLT-563-A07", + "HLT-582-A05", + "SEC-2466-A01", + "SEC-3015-A08", + "SEC-5261-A04", + "SEC-8542-A01", + "SEC-9105-A14" + ], + "member_count": 18, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.75, + "source_meta_cluster": "M44", + "cluster_size": 18, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "notified_body_requirements", + "name": "Anforderungen an notifizierte Stellen", + "description": "Anforderungen an Unabhängigkeit, Fachkompetenz, Koordinierung und Auditpflichten notifizierter Stellen sowie Konformitätsvermutung.", + "tier": "LEGAL_MINIMUM", + "subdomain": "notified_body", + "applicability": "domain:notified_body", + "evidence_facets": { + "governance": true, + "capability": true, + "evidence": false + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Kapitel IV (Notifizierung von Konformitätsbewertungsstellen)", + "citation": "Notifizierte Stellen müssen die Anforderungen an Unabhängigkeit, Kompetenz und Unparteilichkeit erfüllen." + } + ], + "guidance_basis": [], + "member_review_units": [ + "M42" + ], + "member_controls": [ + "COMP-1258", + "COMP-337", + "COMP-372", + "COMP-381", + "COMP-3858-A04", + "COMP-428", + "COMP-494", + "COMP-504", + "CRYP-053", + "SEC-519", + "SEC-577" + ], + "member_count": 11, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.8, + "source_meta_cluster": "M42", + "cluster_size": 11, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "market_surveillance_safeguard", + "name": "Marktüberwachung, nationale Schutzmaßnahmen und Korrekturmaßnahmen", + "description": "Nationale Schutzmaßnahmen, Kommissions- und Ausschussverfahren bei Risiken, Normenmängeln und nicht-konformen Maschinen sowie unionsweit koordinierte Korrekturmaßnahmen.", + "tier": "LEGAL_MINIMUM", + "subdomain": "market_surveillance", + "applicability": "domain:authority", + "evidence_facets": { + "governance": true, + "capability": false, + "evidence": false + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Kapitel V/VI (Marktüberwachung, Schutzklauselverfahren)", + "citation": "Mitgliedstaaten ergreifen geeignete Maßnahmen gegen Maschinen, die ein Risiko darstellen; die Kommission koordiniert Schutzmaßnahmen." + } + ], + "guidance_basis": [], + "member_review_units": [ + "M82", + "M83", + "M58", + "M89" + ], + "member_controls": [ + "CRYP-166-A05", + "CRYP-202", + "GOV-227", + "GOV-417-A18", + "GOV-417-A19", + "GOV-425", + "LOG-1166", + "LOG-2008", + "LOG-483", + "LOG-483-A03", + "LOG-587", + "SEC-189-A14", + "SEC-228-A04", + "SEC-228-A05", + "SEC-228-A12", + "SEC-232", + "SEC-232-A01", + "SEC-233-A04", + "SEC-233-A10", + "SEC-4860", + "SEC-4864-A02", + "SEC-538", + "SEC-5861-A02", + "SEC-5861-A06", + "SEC-687", + "SEC-687-A14", + "SEC-705-A10", + "SEC-818-A08", + "SEC-825-A10", + "SEC-871" + ], + "member_count": 30, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.8, + "source_meta_cluster": "M82", + "cluster_size": 12, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "sanctions", + "name": "Sanktionen für Verstöße gegen die Maschinenverordnung", + "description": "Festlegung wirksamer, verhältnismäßiger und abschreckender Sanktionen für Verstöße gegen die Maschinenverordnung.", + "tier": "LEGAL_MINIMUM", + "subdomain": "sanctions", + "applicability": "domain:authority", + "evidence_facets": { + "governance": true, + "capability": false, + "evidence": false + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Art. 50 (Sanktionen)", + "citation": "Die Mitgliedstaaten legen Vorschriften über Sanktionen für Verstöße gegen diese Verordnung fest." + } + ], + "guidance_basis": [], + "member_review_units": [ + "M49", + "M105" + ], + "member_controls": [ + "COMP-3808-A02", + "COMP-3808-A03", + "COMP-3808-A04", + "GOV-1964-A01", + "GOV-1964-A02", + "GOV-3582-A02", + "GOV-3582-A05", + "GOV-3582-A06", + "GOV-3582-A07", + "GOV-385-A15", + "GOV-385-A20", + "LOG-1984", + "SEC-510", + "SEC-510-A08", + "SEC-633", + "SEC-633-A01", + "SEC-751-A02", + "SEC-751-A10", + "SEC-848" + ], + "member_count": 19, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.85, + "source_meta_cluster": "M49", + "cluster_size": 18, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "scope_transition_application", + "name": "Anwendungsbereich, Geltung und Übergangsregelungen", + "description": "Bestimmung des Anwendungsbereichs, der gestaffelten Geltungszeitpunkte, der unmittelbaren EU-Geltung sowie der Übergangs- und Durchführungsregelungen der Maschinenverordnung.", + "tier": "LEGAL_MINIMUM", + "subdomain": "scope", + "applicability": "universal", + "evidence_facets": { + "governance": true, + "capability": false, + "evidence": false + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Art. 1, Art. 53, Art. 54 (Anwendungsbereich, Übergangsbestimmungen, Geltungsbeginn)", + "citation": "Diese Verordnung gilt ab dem festgelegten Datum unmittelbar in allen Mitgliedstaaten; Übergangsbestimmungen regeln die Anwendbarkeit." + } + ], + "guidance_basis": [], + "member_review_units": [ + "M16", + "M54", + "M55", + "M80", + "M79", + "M56", + "M119" + ], + "member_controls": [ + "AI-503", + "AUTH-079", + "AUTH-3783", + "AUTH-3783-A06", + "AUTH-3783-A07", + "COMP-1254-A07", + "COMP-1254-A25", + "COMP-461-A05", + "COMP-461-A11", + "COMP-593", + "COMP-962-A18", + "COMP-962-A23", + "COMP-967", + "COMP-981-A02", + "COMP-981-A07", + "CRYP-068", + "CRYP-068-A01", + "CRYP-1576-A07", + "CRYP-1581", + "CRYP-213", + "ENV-006-A04", + "ENV-006-A09", + "ENV-006-A19", + "ENV-023-A05", + "ENV-023-A11", + "GOV-052-A05", + "GOV-052-A11", + "GOV-3596-A04", + "GOV-3600", + "GOV-3600-A01", + "GOV-3600-A02", + "GOV-3600-A04", + "GOV-3603-A03", + "GOV-3643-A05", + "GOV-385-A08", + "GOV-385-A18", + "GOV-410", + "GOV-410-A01", + "GOV-410-A06", + "GOV-410-A11", + "GOV-410-A12", + "GOV-410-A13", + "GOV-410-A14", + "GOV-410-A15", + "GOV-417-A24", + "HLT-034-A24", + "HLT-034-A28", + "HLT-569", + "HLT-591-A01", + "LAB-009-A12", + "LAB-725", + "LOG-1166-A06", + "LOG-1993-A05", + "LOG-270", + "LOG-448-A02", + "LOG-448-A03", + "LOG-448-A06", + "LOG-448-A07", + "LOG-578-A02", + "LOG-578-A07", + "NET-016-A01", + "NET-016-A22", + "NET-306", + "NET-306-A01", + "NET-306-A07", + "NET-312", + "NET-312-A07", + "NET-312-A08", + "NET-312-A09", + "NET-312-A10", + "SEC-006-A09", + "SEC-006-A11", + "SEC-243", + "SEC-4842-A01", + "SEC-4854-A01", + "SEC-751", + "SEC-751-A01", + "SEC-751-A04", + "SEC-829", + "SEC-8511", + "SEC-8532-A01", + "SEC-8532-A05", + "SEC-870", + "SEC-9124", + "SEC-997-A07" + ], + "member_count": 85, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.85, + "source_meta_cluster": "M16", + "cluster_size": 30, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "modification_substantial_change", + "name": "Risikobeurteilung bei Modifizierung und wesentlicher Veränderung", + "description": "Durchführung einer (erneuten) Risikobeurteilung und Konformitätsbewertung vor Modifizierung von Maschinen bzw. bei wesentlichen Veränderungen sowie Aktualisierung der Risikobeurteilung.", + "tier": "LEGAL_MINIMUM", + "subdomain": "modification", + "applicability": "conditional:modification", + "evidence_facets": { + "governance": false, + "capability": true, + "evidence": true + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Art. 18 (wesentliche Veränderung)", + "citation": "Wer eine wesentliche Veränderung an einer Maschine vornimmt, gilt als Hersteller und muss die Anforderungen erfüllen." + } + ], + "guidance_basis": [], + "member_review_units": [ + "M45", + "M74" + ], + "member_controls": [ + "COMP-2275", + "COMP-2887-A03", + "COMP-3795-A02", + "COMP-3811-A08", + "COMP-3833-A01", + "COMP-3834", + "COMP-3859-A06", + "COMP-468", + "COMP-501-A13", + "COMP-564-A03", + "COMP-564-A13", + "CRYP-106-A07", + "CRYP-106-A19", + "CRYP-192-A04", + "CRYP-2235-A04", + "CRYP-723-A11", + "ENV-040-A08", + "ENV-040-A09", + "ENV-040-A21", + "ENV-040-A22", + "ENV-123", + "ENV-123-A01", + "ENV-123-A02", + "FIN-1249-A02", + "HLT-009-A07", + "HLT-584-A08", + "LOG-223-A06", + "LOG-223-A07", + "LOG-223-A13", + "LOG-223-A14", + "LOG-223-A18", + "LOG-223-A19", + "LOG-223-A23", + "LOG-223-A24", + "NET-106-A07", + "NET-106-A08", + "NET-106-A15", + "NET-106-A16", + "NET-244-A08", + "NET-306-A04", + "NET-306-A09", + "SEC-138-A16", + "SEC-138-A45", + "SEC-180-A12", + "SEC-180-A24", + "SEC-237-A07", + "SEC-237-A08", + "SEC-4834-A09", + "SEC-4864-A03", + "SEC-4864-A04", + "SEC-4876-A08", + "SEC-4880-A12", + "SEC-5292-A11", + "SEC-705-A05", + "SEC-705-A12", + "SEC-7136-A04", + "SEC-827-A15", + "SEC-8427", + "SEC-856-A18", + "SEC-865-A21" + ], + "member_count": 60, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.8, + "source_meta_cluster": "M45", + "cluster_size": 51, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "access_control_safety_functions", + "name": "Zugriffsschutz von Sicherheitsfunktionen", + "description": "Schutz von Sicherheitsfunktionen (Hardware/Software) gegen nicht autorisierte Zugriffe durch Zugriffsbeschränkung, Least Privilege, Isolation/Hardware-Trennung und Führung einer Liste der sicherheitsrelevanten Funktionen.", + "tier": "LEGAL_MINIMUM", + "subdomain": "cybersecurity", + "applicability": "universal", + "evidence_facets": { + "governance": true, + "capability": true, + "evidence": true + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Anhang III Nr. 1.1.9 (Schutz gegen Korrumpierung)", + "citation": "Die Maschine ist so zu konstruieren, dass die Verbindung mit anderen Geräten nicht zu einer gefährlichen Situation führt; Hard- und Software, die für sicherheitsrelevante Funktionen kritisch sind, sind gegen unbeabsichtigte oder vorsätzliche Korrumpierung zu schützen." + } + ], + "guidance_basis": [ + { + "source": "OWASP", + "anchor": "Access Control", + "role": "best_practice" + }, + { + "source": "NIST", + "anchor": "AC-6 Least Privilege", + "role": "best_practice" + } + ], + "member_review_units": [ + "M0", + "M65", + "M39", + "M73", + "M94", + "M51", + "M63", + "M90", + "M95" + ], + "member_controls": [ + "ACC-0372-A01", + "ACC-0372-A06", + "ACC-0372-A08", + "ACC-083", + "ACC-083-A05", + "ACC-083-A06", + "ACC-083-A07", + "ACC-083-A12", + "ACC-083-A13", + "ACC-089", + "ACC-089-A02", + "ACC-089-A03", + "ACC-089-A10", + "ACC-093", + "ACC-093-A01", + "ACC-093-A02", + "ACC-093-A06", + "ACC-313-A04", + "ACC-313-A22", + "ACC-313-A31", + "ACC-313-A40", + "ACC-313-A49", + "ACC-319-A03", + "ACC-319-A12", + "ACC-319-A21", + "ACC-319-A30", + "ACC-319-A39", + "ACC-319-A46", + "ACC-761-A06", + "AUTH-2176-A06", + "AUTH-2841-A01", + "AUTH-2841-A05", + "AUTH-4092-A01", + "AUTH-4106-A03", + "AUTH-570-A04", + "AUTH-731-A03", + "AUTH-731-A08", + "COMP-1104-A11", + "COMP-1108-A06", + "COMP-1108-A12", + "COMP-172-A01", + "COMP-172-A09", + "COMP-191", + "COMP-2293-A05", + "COMP-4086-A01", + "COMP-4088", + "COMP-4102", + "COMP-4102-A01", + "CRYP-1728-A03", + "DATA-134", + "DATA-1879-A10", + "DATA-1881-A05", + "DATA-2063", + "DATA-2995-A02", + "DATA-3071", + "DATA-4605-A01", + "DATA-4605-A02", + "DATA-747", + "LOG-1485", + "LOG-2073-A03", + "NET-004-A05", + "NET-004-A09", + "NET-004-A19", + "NET-0653-A01", + "NET-0653-A06", + "NET-0654-A01", + "NET-0654-A06", + "NET-1273-A04", + "NET-1282-A05", + "NET-1835-A04", + "NET-362-A08", + "NET-788-A10", + "SEC-5784-A03", + "SEC-5879", + "SEC-6127-A03", + "SEC-6162-A01", + "SEC-6174-A01", + "SEC-6769", + "SEC-6795-A02", + "SEC-6809-A01", + "SEC-6835", + "SEC-6871-A06", + "SEC-6883-A04", + "SEC-8833-A10", + "SEC-9018-A08", + "SEC-9115-A02" + ], + "member_count": 86, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.9, + "source_meta_cluster": "M0", + "cluster_size": 54, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "protection_against_corruption", + "name": "Schutz von Sicherheitsfunktionen gegen Korrumpierung (CRA-Brücke)", + "description": "Absicherung sicherheitskritischer Hardware-/Software-Bauteile gegen Manipulation und Ausfall, kryptographischer Schutz, Tamperproof-Eigenschaften und Schutz gegen Seitenkanal-/Fehlerangriffe.", + "tier": "LEGAL_MINIMUM", + "subdomain": "cybersecurity", + "applicability": "conditional:digital_safety_function", + "evidence_facets": { + "governance": false, + "capability": true, + "evidence": true + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Anhang III Nr. 1.1.9, Nr. 1.2.1", + "citation": "Sicherheitsrelevante Hard- und Software ist gegen unbeabsichtigte oder vorsätzliche Korrumpierung zu schützen; eine Korrumpierung darf nicht zu gefährlichen Situationen führen." + } + ], + "guidance_basis": [ + { + "source": "OWASP", + "anchor": "Cryptographic Storage", + "role": "best_practice" + } + ], + "member_review_units": [ + "M41", + "M51", + "M63", + "M47", + "M60", + "M118" + ], + "member_controls": [ + "AVL-001", + "AVL-001-A01", + "AVL-001-A02", + "AVL-001-A03", + "COMP-1111-A03", + "COMP-1111-A08", + "COMP-3421-A07", + "COMP-3663-A05", + "COMP-4088", + "COMP-498", + "CRYP-1728", + "CRYP-1728-A03", + "CRYP-2321-A01", + "CRYP-2341-A04", + "DATA-134", + "DATA-2063", + "DATA-4605-A04", + "GOV-277-A02", + "GOV-277-A10", + "GOV-413-A02", + "GOV-413-A11", + "INC-1122-A03", + "LOG-266-A12", + "NET-004-A05", + "NET-004-A09", + "NET-004-A19", + "NET-061-A01", + "NET-061-A11", + "NET-1342-A05", + "NET-550-A02", + "NET-550-A08", + "NET-550-A36", + "SEC-026-A04", + "SEC-026-A11", + "SEC-026-A21", + "SEC-119-A07", + "SEC-119-A13", + "SEC-252-A05", + "SEC-548", + "SEC-6162", + "SEC-6345-A02", + "SEC-6769", + "SEC-7021-A02", + "SEC-9018-A08", + "SEC-9105", + "SEC-9105-A07" + ], + "member_count": 46, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.8, + "source_meta_cluster": "M41", + "cluster_size": 30, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "ml_safety_components", + "name": "Sicherheitsbauteile mit maschinellem Lernen / autonomes Verhalten", + "description": "Behandlung von Sicherheitsbauteilen und Software mit (selbstentwickelndem) Verhalten durch maschinelles Lernen, inkl. Klassifikation, unabhängiger Bewertung und Berücksichtigung künftiger autonomer Verhaltensänderungen in der Risikobeurteilung.", + "tier": "LEGAL_MINIMUM", + "subdomain": "ml_safety", + "applicability": "conditional:ml_safety_function", + "evidence_facets": { + "governance": false, + "capability": true, + "evidence": true + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Anhang I Teil A, Anhang III Nr. 1.2.1", + "citation": "Maschinen mit sich vollständig oder teilweise selbst entwickelndem Verhalten durch maschinelles Lernen gelten als Hochrisikomaschinen und unterliegen besonderen Anforderungen." + } + ], + "guidance_basis": [], + "member_review_units": [ + "M8", + "M20", + "M2", + "M86" + ], + "member_controls": [ + "ACC-583-A02", + "AI-1070-A02", + "AI-1070-A05", + "AI-1801-A01", + "AI-655-A03", + "AI-655-A04", + "AI-655-A06", + "AUTH-184-A05", + "AUTH-2087", + "AUTH-2184-A14", + "AUTH-3565-A10", + "AUTH-3698-A01", + "AUTH-3783-A01", + "AUTH-3829-A03", + "AUTH-3842-A01", + "COMP-2245-A01", + "COMP-2293-A01", + "COMP-2340", + "COMP-2340-A03", + "COMP-2470", + "COMP-3736", + "COMP-3807", + "COMP-3811-A02", + "COMP-501", + "COMP-954-A02", + "COMP-954-A17", + "COMP-960-A12", + "COMP-962", + "COMP-962-A02", + "COMP-962-A03", + "COMP-962-A11", + "COMP-962-A12", + "COMP-962-A15", + "COMP-962-A19", + "COMP-973-A02", + "COMP-973-A23", + "COMP-985", + "CRYP-105", + "CRYP-105-A01", + "CRYP-105-A02", + "CRYP-105-A07", + "CRYP-105-A10", + "CRYP-105-A15", + "CRYP-151-A07", + "CRYP-1629-A02", + "CRYP-2234-A06", + "CRYP-723-A02", + "DATA-3622-A02", + "DATA-3891-A01", + "DATA-4506-A01", + "FIN-1249-A06", + "FIN-349-A13", + "GOV-2146-A02", + "GOV-3460", + "HLT-097-A26", + "HLT-366-A05", + "HLT-570-A02", + "HLT-570-A08", + "HLT-594-A02", + "HLT-595-A01", + "INC-1186-A02", + "LAB-010", + "LAB-010-A11", + "LAB-010-A12", + "LAB-010-A23", + "LAB-010-A24", + "LAB-012-A12", + "LAB-012-A24", + "LOG-956-A02", + "SEC-044-A09", + "SEC-044-A22", + "SEC-1832-A05", + "SEC-3015", + "SEC-3015-A01", + "SEC-3015-A04", + "SEC-3059-A03", + "SEC-3553-A01", + "SEC-3955-A03", + "SEC-4876-A01", + "SEC-4883-A06", + "SEC-4883-A07", + "SEC-4883-A12", + "SEC-5263-A04", + "SEC-5269-A05", + "SEC-5269-A06", + "SEC-5272-A10", + "SEC-5281", + "SEC-5291-A02", + "SEC-5291-A04", + "SEC-5291-A05", + "SEC-5292-A09", + "SEC-5293", + "SEC-5784-A01", + "SEC-8520", + "SEC-8651", + "SEC-997-A08" + ], + "member_count": 96, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.8, + "source_meta_cluster": "M20", + "cluster_size": 5, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "autonomous_mobile_machinery", + "name": "Autonome mobile Maschinen – Gefahrenbereiche und Fernsteuerung", + "description": "Sicherheitsanforderungen für autonome mobile Maschinen, inkl. Überwachung von Bewegungs-/Arbeits-/Gefahrenbereichen, Fernstart-/Fernstop-Freigabe nur bei Betriebsbereitschaft und Sichtbedingung sowie Schulung für Gefahrenbereiche.", + "tier": "LEGAL_MINIMUM", + "subdomain": "mobile_machinery", + "applicability": "domain:mobile_machinery", + "evidence_facets": { + "governance": false, + "capability": true, + "evidence": true + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Anhang III Nr. 3 (Mobile Maschinen) / Nr. 6", + "citation": "Mobile Maschinen sind so zu konstruieren, dass Risiken im Gefahrenbereich und bei Fernsteuerung beherrscht werden." + } + ], + "guidance_basis": [], + "member_review_units": [ + "M81", + "M100", + "M99", + "M64", + "M78", + "M117" + ], + "member_controls": [ + "DATA-2334", + "GOV-277-A04", + "GOV-413-A07", + "GOV-413-A16", + "LOG-1168-A13", + "LOG-1170-A03", + "LOG-181-A03", + "LOG-260-A03", + "NET-1703-A02", + "SEC-4059-A02", + "SEC-4059-A03", + "SEC-4059-A04", + "SEC-4059-A06", + "SEC-4059-A07", + "SEC-4856-A06", + "SEC-4856-A10", + "SEC-4860-A05", + "SEC-4860-A06", + "SEC-4876-A09", + "SEC-4892-A06", + "SEC-824-A18", + "SEC-8569", + "SEC-8655" + ], + "member_count": 23, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.78, + "source_meta_cluster": "M81", + "cluster_size": 6, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "specific_machine_types", + "name": "Spezifische Anforderungen für besondere Maschinentypen", + "description": "Anwendung spezifischer Sicherheitsbestimmungen und Schutzmaßnahmen für besondere Maschinentypen (Krane, Hebebühnen, Aufzüge, Personen-Fördermaschinen, Spritzgeräte, Kreissägen etc.).", + "tier": "LEGAL_MINIMUM", + "subdomain": "specific_machinery", + "applicability": "conditional:specific_machine_type", + "evidence_facets": { + "governance": false, + "capability": true, + "evidence": true + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Anhang III Nr. 2-6 (besondere Maschinenkategorien)", + "citation": "Für bestimmte Maschinenkategorien gelten zusätzliche grundlegende Sicherheitsanforderungen." + } + ], + "guidance_basis": [], + "member_review_units": [ + "M37", + "M53", + "M115", + "M101", + "M91", + "M33", + "M34", + "M97", + "M25", + "M104" + ], + "member_controls": [ + "AUTH-2061", + "AUTH-3784-A08", + "AUTH-3806-A01", + "AUTH-3832-A02", + "AUTH-3833-A13", + "AUTH-3842-A04", + "COMP-3035-A07", + "COMP-3811", + "COMP-3846-A03", + "COMP-3855-A02", + "COMP-954-A03", + "COMP-954-A07", + "COMP-954-A18", + "COMP-954-A20", + "COMP-977-A13", + "CRYP-106-A06", + "CRYP-106-A18", + "CRYP-150-A04", + "CRYP-150-A09", + "CRYP-151", + "CRYP-151-A01", + "CRYP-151-A02", + "CRYP-151-A12", + "CRYP-151-A13", + "CRYP-203-A03", + "CRYP-2241-A03", + "DATA-375", + "DATA-375-A01", + "DATA-375-A02", + "DATA-375-A03", + "DATA-375-A07", + "DATA-375-A08", + "DATA-375-A09", + "ENV-020-A04", + "ENV-114-A02", + "GOV-616-A01", + "HLT-032-A18", + "HLT-034-A22", + "HLT-034-A23", + "HLT-034-A27", + "HLT-202-A13", + "HLT-568-A05", + "HLT-571-A07", + "HLT-583-A04", + "HLT-587-A07", + "HLT-587-A09", + "LOG-223-A20", + "LOG-437-A04", + "LOG-437-A10", + "LOG-490-A04", + "LOG-490-A09", + "LOG-556-A04", + "LOG-556-A07", + "LOG-590", + "LOG-590-A10", + "NET-1057", + "NET-1057-A01", + "NET-1395", + "NET-163-A21", + "NET-164", + "NET-1710-A02", + "SEC-138", + "SEC-145", + "SEC-145-A01", + "SEC-145-A10", + "SEC-228-A01", + "SEC-228-A02", + "SEC-228-A09", + "SEC-256-A03", + "SEC-4833-A03", + "SEC-4841-A04", + "SEC-4856-A03", + "SEC-4864", + "SEC-4864-A01", + "SEC-4865", + "SEC-4865-A01", + "SEC-516", + "SEC-592", + "SEC-654-A09", + "SEC-689", + "SEC-705", + "SEC-705-A08", + "SEC-755", + "SEC-827-A14", + "SEC-827-A17", + "SEC-832-A15", + "SEC-841", + "SEC-8423-A03", + "SEC-843", + "SEC-843-A01", + "SEC-8436-A05", + "SEC-8442-A02", + "SEC-8470", + "SEC-8470-A01", + "SEC-8470-A04", + "SEC-850-A08", + "SEC-850-A09", + "SEC-851-A10", + "SEC-8531", + "SEC-8536-A03", + "SEC-8542-A04", + "SEC-8599-A04", + "SEC-860", + "SEC-8603", + "SEC-8614-A03", + "SEC-8630-A01", + "SEC-8633-A03", + "SEC-8639-A09", + "SEC-8649-A01", + "SEC-8649-A02", + "TRD-528-A01" + ], + "member_count": 111, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.75, + "source_meta_cluster": "M37", + "cluster_size": 15, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "vibration_noise_emission", + "name": "Vibrations-, Lärm- und Emissionsangaben", + "description": "Messung und Dokumentation von Vibrations- (Ganzkörper/Hand-Arm, Stoßvibration), Luftschallemissions- und sonstigen Emissionswerten in der Betriebsanleitung.", + "tier": "LEGAL_MINIMUM", + "subdomain": "emissions", + "applicability": "universal", + "evidence_facets": { + "governance": false, + "capability": true, + "evidence": true + }, + "source_role": "LEGAL_BASIS", + "legal_basis": [ + { + "source": "MaschVO", + "anchor": "Anhang III Nr. 1.5.8/1.5.9, Nr. 1.7.4.2", + "citation": "Die Betriebsanleitung muss Angaben zu Luftschallemissionen und Vibrationen enthalten." + } + ], + "guidance_basis": [], + "member_review_units": [ + "M84", + "M77" + ], + "member_controls": [ + "GOV-270-A04", + "GOV-270-A09", + "GOV-402-A06", + "GOV-402-A11", + "GOV-402-A12", + "HLT-009-A04", + "HLT-191-A03", + "HLT-191-A04", + "HLT-191-A06", + "HLT-191-A08", + "LAB-021", + "SEC-189-A02", + "SEC-233-A06", + "SEC-233-A12", + "SEC-4840-A06", + "SEC-516-A09", + "SEC-596", + "SEC-755-A07", + "SEC-833", + "SEC-8518-A03", + "SEC-862-A06", + "SEC-8624-A03" + ], + "member_count": 22, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.8, + "source_meta_cluster": "M84", + "cluster_size": 12, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "verification_inspection_maintenance", + "name": "Verifikation, Prüfung und Wartung von Schutz- und Sicherheitseinrichtungen", + "description": "Dokumentierte Überprüfung der Sicherheitsfunktionen, visuelle und funktionale Prüfung von Schutz- und Verriegelungseinrichtungen, Laufzeit-Verifikationswerkzeuge und Arbeitsschutzmaßnahmen vor der Maschinenprüfung.", + "tier": "BEST_PRACTICE", + "subdomain": "verification", + "applicability": "universal", + "evidence_facets": { + "governance": false, + "capability": true, + "evidence": true + }, + "source_role": "GUIDANCE", + "legal_basis": [], + "guidance_basis": [ + { + "source": "ISO", + "anchor": "EN ISO 13849-2 (Validierung)", + "role": "best_practice" + } + ], + "member_review_units": [ + "M45", + "M96", + "M17", + "M102", + "M59" + ], + "member_controls": [ + "AI-504-A12", + "AI-504-A24", + "AUTH-3833-A04", + "COMP-1137-A02", + "COMP-1137-A04", + "COMP-2275", + "COMP-2614-A07", + "COMP-2887-A03", + "COMP-3795-A02", + "COMP-3811-A08", + "COMP-3833-A01", + "COMP-3834", + "COMP-3859-A06", + "COMP-468", + "COMP-501-A13", + "COMP-564-A03", + "COMP-564-A13", + "CRYP-106-A07", + "CRYP-106-A19", + "CRYP-192-A04", + "CRYP-2234-A02", + "CRYP-2234-A04", + "CRYP-2235-A04", + "CRYP-723-A11", + "ENV-040-A08", + "ENV-040-A09", + "ENV-040-A21", + "ENV-040-A22", + "ENV-123", + "ENV-123-A01", + "ENV-123-A02", + "HLT-009-A07", + "HLT-537-A05", + "HLT-584-A08", + "LOG-223-A18", + "LOG-223-A23", + "LOG-590-A05", + "LOG-590-A14", + "NET-1057-A07", + "NET-106-A07", + "NET-106-A08", + "NET-106-A15", + "NET-106-A16", + "NET-244-A08", + "NET-306-A04", + "NET-306-A09", + "SEC-1030-A08", + "SEC-138-A16", + "SEC-138-A45", + "SEC-180-A12", + "SEC-180-A24", + "SEC-237-A07", + "SEC-237-A08", + "SEC-4833-A05", + "SEC-4834-A09", + "SEC-4864-A03", + "SEC-4864-A04", + "SEC-4864-A05", + "SEC-4876-A08", + "SEC-4876-A11", + "SEC-4880-A11", + "SEC-4880-A12", + "SEC-4880-A15", + "SEC-536-A08", + "SEC-568", + "SEC-568-A02", + "SEC-5758-A07", + "SEC-705-A05", + "SEC-705-A12", + "SEC-827-A15", + "SEC-833-A10", + "SEC-8427", + "SEC-843-A06", + "SEC-851", + "SEC-851-A01", + "SEC-851-A09", + "SEC-856-A15", + "SEC-856-A18", + "SEC-8640-A01", + "SEC-865-A21" + ], + "member_count": 80, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.75, + "source_meta_cluster": "M45", + "cluster_size": 51, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "quality_management_system", + "name": "Qualitätssicherungssystem zur Konformitätssicherung", + "description": "Einrichtung eines Qualitätssicherungssystems zur fortlaufenden Sicherstellung der Konformität der Produkte mit den Anforderungen der Maschinenverordnung.", + "tier": "BEST_PRACTICE", + "subdomain": "quality_management", + "applicability": "conditional:full_qa_module", + "evidence_facets": { + "governance": true, + "capability": true, + "evidence": false + }, + "source_role": "GUIDANCE", + "legal_basis": [], + "guidance_basis": [ + { + "source": "ISO", + "anchor": "ISO 9001", + "role": "best_practice" + } + ], + "member_review_units": [ + "M27" + ], + "member_controls": [ + "AUTH-2085-A01", + "AUTH-2087-A03", + "AUTH-427-A07", + "AUTH-427-A16", + "AUTH-427-A17", + "COMP-2261-A09", + "COMP-564-A04", + "COMP-564-A14", + "COMP-975-A11", + "CRYP-213-A01", + "CRYP-213-A07", + "GOV-3601-A04", + "HLT-199", + "LOG-1984-A02", + "LOG-380-A04", + "LOG-380-A12", + "SEC-4842-A03" + ], + "member_count": 17, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.7, + "source_meta_cluster": "M27", + "cluster_size": 17, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "long_term_availability_updates", + "name": "Langzeitverfügbarkeit und Aktualität von Sicherheitsfunktionen/Betriebsanleitung", + "description": "Definierter Prozess zur Langzeitverfügbarkeit, Bereitstellung neuester Sicherheitsfunktionen und Prüfung der Aktualität von Betriebsanleitungen.", + "tier": "BEST_PRACTICE", + "subdomain": "maintenance", + "applicability": "universal", + "evidence_facets": { + "governance": true, + "capability": true, + "evidence": false + }, + "source_role": "GUIDANCE", + "legal_basis": [], + "guidance_basis": [ + { + "source": "NIST", + "anchor": "SI-2 Flaw Remediation", + "role": "best_practice" + } + ], + "member_review_units": [ + "M17", + "M41" + ], + "member_controls": [ + "AI-504-A12", + "AI-504-A24", + "AUTH-3833-A04", + "AVL-001", + "AVL-001-A01", + "AVL-001-A02", + "AVL-001-A03", + "COMP-1111-A03", + "COMP-1111-A08", + "COMP-1137-A02", + "COMP-1137-A04", + "COMP-2614-A07", + "COMP-3421-A07", + "COMP-498", + "CRYP-1728", + "CRYP-2341-A04", + "DATA-4605-A04", + "GOV-277-A02", + "GOV-277-A10", + "GOV-413-A02", + "GOV-413-A11", + "HLT-537-A05", + "INC-1122-A03", + "LOG-266-A12", + "LOG-590-A05", + "LOG-590-A14", + "NET-1057-A07", + "NET-550-A02", + "NET-550-A08", + "NET-550-A36", + "SEC-026-A04", + "SEC-026-A11", + "SEC-026-A21", + "SEC-119-A07", + "SEC-119-A13", + "SEC-252-A05", + "SEC-4833-A05", + "SEC-536-A08", + "SEC-548", + "SEC-568", + "SEC-568-A02", + "SEC-6162", + "SEC-6345-A02", + "SEC-7021-A02", + "SEC-833-A10", + "SEC-843-A06", + "SEC-851", + "SEC-851-A01", + "SEC-851-A09" + ], + "member_count": 49, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.65, + "source_meta_cluster": "M17", + "cluster_size": 19, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + }, + { + "id": "security_functions_default_free", + "name": "Sicherheitsfunktionen als kostenfreier Standard (CRA)", + "description": "Bereitstellung grundlegender Sicherheitsfunktionen by-default und kostenfrei für Endnutzer und Administratoren.", + "tier": "BEST_PRACTICE", + "subdomain": "cybersecurity", + "applicability": "conditional:digital_product", + "evidence_facets": { + "governance": true, + "capability": true, + "evidence": false + }, + "source_role": "GUIDANCE", + "legal_basis": [], + "guidance_basis": [ + { + "source": "OWASP", + "anchor": "Secure by Default", + "role": "best_practice" + } + ], + "member_review_units": [ + "M29", + "M43" + ], + "member_controls": [ + "AUTH-2473-A10", + "AUTH-413", + "AUTH-413-A03", + "COMP-172-A03", + "COMP-2777-A06", + "CRYP-069", + "DATA-4605-A03", + "SEC-1000-A02", + "SEC-1000-A03", + "SEC-1000-A112", + "SEC-1000-A113", + "SEC-1000-A18", + "SEC-1000-A19", + "SEC-1000-A46", + "SEC-1000-A47", + "SEC-1000-A63", + "SEC-1000-A64", + "SEC-1000-A90", + "SEC-1000-A91" + ], + "member_count": 19, + "relationships": [], + "citation_anchor_ids": [], + "citation_status": "pending_span_anchor", + "review_status": "draft", + "provenance": { + "discovery_confidence": 0.6, + "source_meta_cluster": "M29", + "cluster_size": 4, + "llm_model": "claude-opus-4-8", + "synthesis_version": "v1" + }, + "family": "machinery" + } + ], + "relationships": [ + { + "type": "produces_evidence_for", + "from": "risk_assessment_documentation", + "to": "risk_assessment_machinery_lifecycle", + "note": "Dokumentation belegt die durchgeführte Risikobeurteilung" + }, + { + "type": "supports", + "from": "risk_assessment_methodology_competence", + "to": "risk_assessment_machinery_lifecycle", + "note": "Methodik/Kompetenz untermauert die Risikobeurteilung" + }, + { + "type": "derived_from", + "from": "residual_risk_management", + "to": "risk_assessment_machinery_lifecycle", + "note": "Restrisiko ergibt sich aus der Risikobeurteilung" + }, + { + "type": "depends_on", + "from": "guards_protective_devices", + "to": "risk_assessment_machinery_lifecycle", + "note": "Auswahl der Schutzeinrichtungen basiert auf der Risikobeurteilung" + }, + { + "type": "depends_on", + "from": "safety_functions_design", + "to": "risk_assessment_machinery_lifecycle", + "note": "Sicherheitsfunktionen leiten sich aus identifizierten Risiken ab" + }, + { + "type": "produces_evidence_for", + "from": "technical_documentation", + "to": "conformity_assessment", + "note": "Technische Unterlagen sind Grundlage der Konformitätsbewertung" + }, + { + "type": "produces_evidence_for", + "from": "eu_declaration_ce_marking", + "to": "conformity_assessment", + "note": "Konformitätserklärung schließt die Konformitätsbewertung ab" + }, + { + "type": "supports", + "from": "harmonised_standards_selection", + "to": "essential_safety_requirements_compliance", + "note": "Harmonisierte Normen begründen Konformitätsvermutung" + }, + { + "type": "depends_on", + "from": "protection_against_corruption", + "to": "access_control_safety_functions", + "note": "Korrumpierungsschutz baut auf Zugriffsschutz auf" + }, + { + "type": "implements", + "from": "verification_inspection_maintenance", + "to": "safety_functions_design", + "note": "Verifikation prüft die Sicherheitsfunktionen" + }, + { + "type": "depends_on", + "from": "modification_substantial_change", + "to": "conformity_assessment", + "note": "Bei wesentlicher Veränderung erneute Konformitätsbewertung" + }, + { + "type": "out_of_scope", + "review_units": [ + "M4", + "M6", + "M21", + "M71", + "M61", + "M70", + "M72", + "M68", + "M38", + "M46", + "M31", + "M23", + "M26", + "M28", + "M66", + "M75", + "M118", + "M86" + ], + "note": "Betreffen AI Act Hochrisiko-KI-Betrieb, DSGVO/DPIA, GwG, NIS/CRA-Lieferketten und Datenschutz-Risikobeurteilungen außerhalb der MaschVO-Maschinensicherheit; teils nur fälschlich gebündelte fremdregulatorische Pflichten" + }, + { + "type": "out_of_scope", + "review_units": [ + "M30", + "M40", + "M47", + "M60", + "M69", + "M88", + "M98", + "M22", + "M73", + "M85", + "M87", + "M1", + "M67", + "M77", + "M57", + "M65", + "M39", + "M51", + "M63", + "M90", + "M95", + "M62", + "M52" + ], + "note": "Common-Criteria-/TOE-/SFR-Evaluierung, BCM, Banking, Smart-Meter-Gateway, DNS und allgemeine ISMS-/OT-Cybersecurity-Themen ohne direkten MaschVO-Bezug; nur teilweise IN-Scope-Anteile bereits in access_control_safety_functions abgebildet" + } + ] +} \ No newline at end of file diff --git a/obligations/machinery_reuse_metrics.json b/obligations/machinery_reuse_metrics.json new file mode 100644 index 00000000..ba2c2b7b --- /dev/null +++ b/obligations/machinery_reuse_metrics.json @@ -0,0 +1,79 @@ +{ + "schema_version": "reuse_metrics_v1", + "regulation": "MaschVO_2023_1230", + "measured": "2026-06-26", + "method": "cross_domain_pairs (BGE-M3, machinery vs 95 Bestand) -> classify_relationships (Opus, 54 cross-Paare)", + "kpi": { + "new_object_classes": 0, + "total_obligations": 31, + "reuse_linked": 12, + "reuse_pct": 39, + "net_new": 19, + "net_new_pct": 61, + "capability_reuse_obls": 2, + "procedure_reuse_obls": 6, + "evidence_reuse_obls": 2, + "core_specialization_obls": 2, + "reused_capabilities": [ + "least_privilege_access_control", + "tamper_protection" + ] + }, + "distribution": { + "SHARED_CAPABILITY": 5, + "OVERLAP_ONLY": 19, + "SHARED_PROCEDURE": 6, + "SUPPORTED_BY": 2, + "SHARED_EVIDENCE": 5, + "UNRELATED": 16, + "SHARED_GUIDANCE": 1 + }, + "cyber_safety_bridges": [ + { + "obligation": "access_control_safety_functions", + "relation": "SHARED_CAPABILITY", + "target": "remote_access_control_least_privilege", + "capability": "least_privilege_access_control" + }, + { + "obligation": "protection_against_corruption", + "relation": "SHARED_CAPABILITY", + "target": "software_integrity_protection", + "capability": "tamper_protection" + }, + { + "obligation": "risk_assessment_machinery_lifecycle", + "relation": "SUPPORTED_BY", + "target": "update_risk_assessment", + "capability": "" + }, + { + "obligation": "conformity_assessment", + "relation": "SUPPORTED_BY", + "target": "sbom_technical_documentation", + "capability": "" + } + ], + "net_new_obligations": [ + "risk_assessment_methodology_competence", + "guards_protective_devices", + "emergency_stop_interlocking", + "safety_functions_design", + "safety_components_conformity", + "operating_instructions", + "eu_declaration_ce_marking", + "manufacturer_economic_operator_obligations", + "essential_safety_requirements_compliance", + "notified_body_requirements", + "market_surveillance_safeguard", + "sanctions", + "scope_transition_application", + "ml_safety_components", + "specific_machine_types", + "vibration_noise_emission", + "quality_management_system", + "long_term_availability_updates", + "security_functions_default_free" + ], + "interpretation": "MaschVO ist weit von Cyber entfernt -> erwartbar NIEDRIGER Reuse (39%); die Bruecke ist Cybersicherheit von Sicherheitsfunktionen (access_control_safety_functions->access-control, protection_against_corruption->integrity/tamper). NIS2 (Cyber) wird HOHEN Reuse zeigen. WICHTIGSTES ERGEBNIS: 0 neue Objektklassen = Architektur-Freeze haelt gegen eine physische-Safety-Regulierung (empirisch, nicht nur theoretisch)." +} \ No newline at end of file diff --git a/obligations/obligation_join_keys.json b/obligations/obligation_join_keys.json index e5838c54..b87ad077 100644 --- a/obligations/obligation_join_keys.json +++ b/obligations/obligation_join_keys.json @@ -1,7 +1,7 @@ { "schema_version": "obligation_join_keys_v1", "contract": "obligation_id ist der stabile Join-Key. Legal Knowledge Graph haengt citation_spans an obligation_id; Compliance Execution Graph mappt control_mapping.source_norm -> obligation_id. Interim-Bruecke = citation_units. obligation_id NIE neu vergeben (re-link).", - "count": 95, + "count": 126, "obligation_ids": [ { "obligation_id": "sbom_creation", @@ -841,6 +841,304 @@ "tier": "BEST_PRACTICE", "citation_units": [], "source_role": "IMPLEMENTATION" + }, + { + "obligation_id": "risk_assessment_machinery_lifecycle", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Anhang III Nr. 1 (Allgemeine Grundsätze)" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "risk_assessment_documentation", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Anhang IV (Technische Unterlagen)" + ], + "source_role": "EVIDENCE" + }, + { + "obligation_id": "risk_assessment_methodology_competence", + "regulation": "MaschVO", + "family": "machinery", + "tier": "BEST_PRACTICE", + "citation_units": [], + "source_role": "GUIDANCE" + }, + { + "obligation_id": "residual_risk_management", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Anhang III Nr. 1.1.2 (Grundsätze für die Integration der Sicherheit)" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "guards_protective_devices", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Anhang III Nr. 1.4 (Anforderungen an Schutzeinrichtungen)" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "emergency_stop_interlocking", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Anhang III Nr. 1.2.4 (Stillsetzen, Not-Halt)" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "safety_functions_design", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Anhang III Nr. 1.2.1 (Sicherheit und Zuverlässigkeit von Steuerungen)" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "safety_components_conformity", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Anhang I (Liste der Sicherheitsbauteile), Art. 5" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "operating_instructions", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Anhang III Nr. 1.7.4 (Betriebsanleitung)" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "blocking_release_procedure", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Anhang III Nr. 1.3.7/1.7.4" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "conformity_assessment", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Art. 25 (Konformitätsbewertungsverfahren)" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "technical_documentation", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Anhang IV (Technische Unterlagen)" + ], + "source_role": "EVIDENCE" + }, + { + "obligation_id": "eu_declaration_ce_marking", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Art. 21, Art. 22 (EU-Konformitätserklärung, CE-Kennzeichnung)" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "manufacturer_economic_operator_obligations", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Art. 10, Art. 11 (Pflichten der Hersteller)" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "essential_safety_requirements_compliance", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Anhang III (Grundlegende Sicherheits- und Gesundheitsschutzanforderungen)" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "harmonised_standards_selection", + "regulation": "MaschVO", + "family": "machinery", + "tier": "BEST_PRACTICE", + "citation_units": [], + "source_role": "GUIDANCE" + }, + { + "obligation_id": "notified_body_requirements", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Kapitel IV (Notifizierung von Konformitätsbewertungsstellen)" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "market_surveillance_safeguard", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Kapitel V/VI (Marktüberwachung, Schutzklauselverfahren)" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "sanctions", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Art. 50 (Sanktionen)" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "scope_transition_application", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Art. 1, Art. 53, Art. 54 (Anwendungsbereich, Übergangsbestimmungen, Geltungsbeginn)" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "modification_substantial_change", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Art. 18 (wesentliche Veränderung)" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "access_control_safety_functions", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Anhang III Nr. 1.1.9 (Schutz gegen Korrumpierung)" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "protection_against_corruption", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Anhang III Nr. 1.1.9, Nr. 1.2.1" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "ml_safety_components", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Anhang I Teil A, Anhang III Nr. 1.2.1" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "autonomous_mobile_machinery", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Anhang III Nr. 3 (Mobile Maschinen) / Nr. 6" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "specific_machine_types", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Anhang III Nr. 2-6 (besondere Maschinenkategorien)" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "vibration_noise_emission", + "regulation": "MaschVO", + "family": "machinery", + "tier": "LEGAL_MINIMUM", + "citation_units": [ + "Anhang III Nr. 1.5.8/1.5.9, Nr. 1.7.4.2" + ], + "source_role": "LEGAL_BASIS" + }, + { + "obligation_id": "verification_inspection_maintenance", + "regulation": "MaschVO", + "family": "machinery", + "tier": "BEST_PRACTICE", + "citation_units": [], + "source_role": "GUIDANCE" + }, + { + "obligation_id": "quality_management_system", + "regulation": "MaschVO", + "family": "machinery", + "tier": "BEST_PRACTICE", + "citation_units": [], + "source_role": "GUIDANCE" + }, + { + "obligation_id": "long_term_availability_updates", + "regulation": "MaschVO", + "family": "machinery", + "tier": "BEST_PRACTICE", + "citation_units": [], + "source_role": "GUIDANCE" + }, + { + "obligation_id": "security_functions_default_free", + "regulation": "MaschVO", + "family": "machinery", + "tier": "BEST_PRACTICE", + "citation_units": [], + "source_role": "GUIDANCE" } ] } \ No newline at end of file diff --git a/scripts/obligation_discovery/precluster.py b/scripts/obligation_discovery/precluster.py index f4b09dd8..3d703e54 100644 --- a/scripts/obligation_discovery/precluster.py +++ b/scripts/obligation_discovery/precluster.py @@ -33,6 +33,12 @@ SCOPES = { "%automatische aktualisierung%", "%update-mechanismus%", "%update-bereitstellung%", "%bereitstellung von updates%", "%sichere aktualisierung%", "%signierte update%", "%update-paket%"], + "machinery": ["%maschinensicherheit%", "%risikobeurteilung%", "%schutzeinrichtung%", + "%not-halt%", "%nothalt%", "%sicherheitsfunktion%", "%sicherheitsbauteil%", + "%betriebsanleitung%", "%trennende schutz%", "%verriegelung%", + "%zweihandschaltung%", "%gefahrbringend%", "%maschinenrichtlinie%", + "%maschinenverordnung%", "%restrisiko%", "%schutzma%nahme%maschine%", + "%gefahrenbereich%", "%schutzabstand%", "%performance level%"], }