Files
breakpilot-compliance/obligations/machinery_reuse_metrics.json
T
Benjamin Admin f23ae32077 feat: MaschVO als erster Multi-Regulation-Run + Reuse-Metrik (Freeze haelt: 0 neue Klassen)
User-Reframe: nicht „naechste Regulierung", sondern erster MULTI-REGULATION-Reuse-Test.
- obligations/cra_machinery.json: 31 MaschVO-Obligations (25 LM = Anhang-III-Essential-Reqs
  rechtlich legit + 6 BP). Pipeline 2229->1096 micro->120 review-units->Opus. out_of_scope
  41 RU (AI-Act/DSGVO/Common-Criteria/Banking/...).
- obligations/machinery_reuse_metrics.json: ERSTE Reuse-KPI. **NEUE OBJEKTKLASSEN = 0**
  (Architektur-Freeze haelt gegen physische-Safety-Regulierung — empirisch). 39% Reuse / 61%
  net-new; Capability-Reuse 2 (Cyber-Safety-Bruecke: access_control_safety_functions->access,
  protection_against_corruption->integrity/tamper), Procedure-Reuse 6, Evidence-Reuse 2,
  CORE-Spezialisierung 2 (risk_assessment->update_risk_assessment, conformity->sbom_tech_doc).
- join_keys 95->126 (machinery 31). precluster.py: machinery-Scope.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-06-26 10:05:00 +02:00

79 lines
2.5 KiB
JSON

{
"schema_version": "reuse_metrics_v1",
"regulation": "MaschVO_2023_1230",
"measured": "2026-06-26",
"method": "cross_domain_pairs (BGE-M3, machinery vs 95 Bestand) -> classify_relationships (Opus, 54 cross-Paare)",
"kpi": {
"new_object_classes": 0,
"total_obligations": 31,
"reuse_linked": 12,
"reuse_pct": 39,
"net_new": 19,
"net_new_pct": 61,
"capability_reuse_obls": 2,
"procedure_reuse_obls": 6,
"evidence_reuse_obls": 2,
"core_specialization_obls": 2,
"reused_capabilities": [
"least_privilege_access_control",
"tamper_protection"
]
},
"distribution": {
"SHARED_CAPABILITY": 5,
"OVERLAP_ONLY": 19,
"SHARED_PROCEDURE": 6,
"SUPPORTED_BY": 2,
"SHARED_EVIDENCE": 5,
"UNRELATED": 16,
"SHARED_GUIDANCE": 1
},
"cyber_safety_bridges": [
{
"obligation": "access_control_safety_functions",
"relation": "SHARED_CAPABILITY",
"target": "remote_access_control_least_privilege",
"capability": "least_privilege_access_control"
},
{
"obligation": "protection_against_corruption",
"relation": "SHARED_CAPABILITY",
"target": "software_integrity_protection",
"capability": "tamper_protection"
},
{
"obligation": "risk_assessment_machinery_lifecycle",
"relation": "SUPPORTED_BY",
"target": "update_risk_assessment",
"capability": ""
},
{
"obligation": "conformity_assessment",
"relation": "SUPPORTED_BY",
"target": "sbom_technical_documentation",
"capability": ""
}
],
"net_new_obligations": [
"risk_assessment_methodology_competence",
"guards_protective_devices",
"emergency_stop_interlocking",
"safety_functions_design",
"safety_components_conformity",
"operating_instructions",
"eu_declaration_ce_marking",
"manufacturer_economic_operator_obligations",
"essential_safety_requirements_compliance",
"notified_body_requirements",
"market_surveillance_safeguard",
"sanctions",
"scope_transition_application",
"ml_safety_components",
"specific_machine_types",
"vibration_noise_emission",
"quality_management_system",
"long_term_availability_updates",
"security_functions_default_free"
],
"interpretation": "MaschVO ist weit von Cyber entfernt -> erwartbar NIEDRIGER Reuse (39%); die Bruecke ist Cybersicherheit von Sicherheitsfunktionen (access_control_safety_functions->access-control, protection_against_corruption->integrity/tamper). NIS2 (Cyber) wird HOHEN Reuse zeigen. WICHTIGSTES ERGEBNIS: 0 neue Objektklassen = Architektur-Freeze haelt gegen eine physische-Safety-Regulierung (empirisch, nicht nur theoretisch)."
}