19855efacc
Some checks failed
Tests / Go Tests (push) Has been cancelled
Tests / Python Tests (push) Has been cancelled
Tests / Integration Tests (push) Has been cancelled
Tests / Go Lint (push) Has been cancelled
Tests / Python Lint (push) Has been cancelled
Tests / Security Scan (push) Has been cancelled
Tests / All Checks Passed (push) Has been cancelled
Security Scanning / Secret Scanning (push) Has been cancelled
Security Scanning / Dependency Vulnerability Scan (push) Has been cancelled
Security Scanning / Go Security Scan (push) Has been cancelled
Security Scanning / Python Security Scan (push) Has been cancelled
Security Scanning / Node.js Security Scan (push) Has been cancelled
Security Scanning / Docker Image Security (push) Has been cancelled
Security Scanning / Security Summary (push) Has been cancelled
CI/CD Pipeline / Go Tests (push) Has been cancelled
CI/CD Pipeline / Python Tests (push) Has been cancelled
CI/CD Pipeline / Website Tests (push) Has been cancelled
CI/CD Pipeline / Linting (push) Has been cancelled
CI/CD Pipeline / Security Scan (push) Has been cancelled
CI/CD Pipeline / Docker Build & Push (push) Has been cancelled
CI/CD Pipeline / Integration Tests (push) Has been cancelled
CI/CD Pipeline / Deploy to Staging (push) Has been cancelled
CI/CD Pipeline / Deploy to Production (push) Has been cancelled
CI/CD Pipeline / CI Summary (push) Has been cancelled
ci/woodpecker/manual/build-ci-image Pipeline was successful
ci/woodpecker/manual/main Pipeline failed
All services: admin-v2, studio-v2, website, ai-compliance-sdk, consent-service, klausur-service, voice-service, and infrastructure. Large PDFs and compiled binaries excluded via .gitignore.
98 lines
5.0 KiB
Markdown
98 lines
5.0 KiB
Markdown
# AI Compliance SDK
|
|
|
|
Das AI Compliance SDK ist ein Go-basierter Service zur Compliance-Bewertung von KI-Anwendungsfällen.
|
|
|
|
## Übersicht
|
|
|
|
| Eigenschaft | Wert |
|
|
|-------------|------|
|
|
| **Port** | 8090 |
|
|
| **Framework** | Go (Gin) |
|
|
| **Datenbank** | PostgreSQL |
|
|
| **Vector DB** | Qdrant (Legal RAG) |
|
|
|
|
## Kernkomponenten
|
|
|
|
```
|
|
┌─────────────────────────────────────────────────────────────────────────────┐
|
|
│ UCCA System │
|
|
├─────────────────────────────────────────────────────────────────────────────┤
|
|
│ │
|
|
│ ┌──────────────┐ ┌──────────────┐ ┌──────────────┐ │
|
|
│ │ Frontend │───>│ SDK API │───>│ PostgreSQL │ │
|
|
│ │ (Next.js) │ │ (Go) │ │ Database │ │
|
|
│ └──────────────┘ └──────┬───────┘ └──────────────┘ │
|
|
│ │ │
|
|
│ ┌────────────────────┼────────────────────┐ │
|
|
│ │ │ │ │
|
|
│ ▼ ▼ ▼ │
|
|
│ ┌──────────────┐ ┌──────────────┐ ┌──────────────┐ │
|
|
│ │ Policy │ │ Escalation │ │ Legal RAG │ │
|
|
│ │ Engine │ │ Workflow │ │ (Qdrant) │ │
|
|
│ │ (45 Regeln) │ │ (E0-E3) │ │ 2,274 Chunks │ │
|
|
│ └──────────────┘ └──────────────┘ └──────────────┘ │
|
|
│ │
|
|
└─────────────────────────────────────────────────────────────────────────────┘
|
|
```
|
|
|
|
## Features
|
|
|
|
- **UCCA (Use-Case Compliance Advisor)**: Deterministische Bewertung von KI-Anwendungsfällen
|
|
- **Policy Engine**: 45 regelbasierte Compliance-Prüfungen
|
|
- **License Policy Engine**: Standards/Normen-Compliance (DIN, ISO, VDI)
|
|
- **Legal RAG**: Semantische Suche in EU-Verordnungen (DSGVO, AI Act, NIS2)
|
|
- **Eskalations-Workflow**: E0-E3 Stufen mit Human-in-the-Loop
|
|
- **Wizard & Legal Assistant**: Geführte Eingabe mit Rechtsassistent
|
|
- **Generic Obligations Framework**: NIS2, DSGVO, AI Act Module
|
|
|
|
## Kernprinzip
|
|
|
|
> **"LLM ist NICHT die Quelle der Wahrheit. Wahrheit = Regeln + Evidenz. LLM = Übersetzer + Subsumptionshelfer"**
|
|
|
|
Das System folgt einem strikten **Human-in-the-Loop** Ansatz:
|
|
|
|
1. **Deterministische Regeln** treffen alle Compliance-Entscheidungen
|
|
2. **LLM** erklärt nur Ergebnisse, überschreibt nie BLOCK-Entscheidungen
|
|
3. **Menschen** (DSB, Legal) treffen finale Entscheidungen bei kritischen Fällen
|
|
|
|
## API-Endpunkte
|
|
|
|
### Assessment
|
|
|
|
| Method | Endpoint | Beschreibung |
|
|
|--------|----------|--------------|
|
|
| POST | `/sdk/v1/ucca/assess` | Assessment erstellen |
|
|
| GET | `/sdk/v1/ucca/assessments` | Assessments auflisten |
|
|
| GET | `/sdk/v1/ucca/assessments/:id` | Assessment abrufen |
|
|
| POST | `/sdk/v1/ucca/assessments/:id/explain` | LLM-Erklärung generieren |
|
|
|
|
### Eskalation
|
|
|
|
| Method | Endpoint | Beschreibung |
|
|
|--------|----------|--------------|
|
|
| GET | `/sdk/v1/ucca/escalations` | Eskalationen auflisten |
|
|
| POST | `/sdk/v1/ucca/escalations/:id/decide` | Entscheidung treffen |
|
|
|
|
### Obligations Framework
|
|
|
|
| Method | Endpoint | Beschreibung |
|
|
|--------|----------|--------------|
|
|
| POST | `/sdk/v1/ucca/obligations/assess` | Pflichten-Assessment |
|
|
| POST | `/sdk/v1/ucca/obligations/export/memo` | PDF-Export |
|
|
|
|
## Weiterführende Dokumentation
|
|
|
|
- [Architektur](./ARCHITECTURE.md) - Detaillierte Systemarchitektur
|
|
- [Entwickler-Guide](./DEVELOPER.md) - Entwickler-Dokumentation
|
|
- [Auditor-Dokumentation](./AUDITOR_DOCUMENTATION.md) - Dokumentation für externe Auditoren
|
|
|
|
## Tests
|
|
|
|
```bash
|
|
cd ai-compliance-sdk
|
|
go test -v ./...
|
|
|
|
# Mit Coverage
|
|
go test -cover ./...
|
|
```
|