Compliance, continuously attested.

Every control for Northwind AI is continuously checked, fixed when broken, mapped across frameworks, and co-signed by a credentialed expert, then written to a signed, tamper-evident ledger.

Last attested 2026-06-30 14:26 UTC

Frameworks covered

Signed attestations

Expert co-signed

Verified

Ledger chain integrity

Framework coverageOne control, many frameworks

EU-AI-Actcovered

GDPRcovered

ISOcovered

SOC2covered

DORAcovered

NIS2covered

Evidence ledgerAppend-only · signed · tamper-evident · head 2dd75fb367

Event	Status	Attested controls	Attested at
Agent with no action ceiling agent/tools.ts scan → fix → re-scan clean · action-ceiling	verified Jco-signed · CISSP	DORA-Art.9NIS2-Art.21	2026-06-30 14:26 UTC 28bf631 · 2dd75fb3
Secret exposed in a prompt agent/tools.ts scan → fix → re-scan clean · secret-vaulting · pii-redaction	verified Jco-signed · CISSP	GDPR-Art.32ISO-A.8.24SOC2-CC6.1SOC2-CC6.7	2026-06-30 14:22 UTC abc37c2 · 37b4f84b
Unfiltered model output agent/tools.ts scan → fix → re-scan clean · output-filtering	verified AI automated	EU-AI-Act-Art.15GDPR-Art.32	2026-06-30 14:18 UTC ad01b65 · 0089837a
Unscoped agent tool access agent/tools.ts scan → fix → re-scan clean · tool-allowlist · action-ceiling	verified Jco-signed · CISSP	DORA-Art.9ISO-A.8.16NIS2-Art.21SOC2-CC6.1	2026-06-30 14:14 UTC c8c07c8 · a78bc9dc
Indirect prompt-injection path agent/tools.ts scan → fix → re-scan clean · input-isolation · tool-allowlist · output-filtering	verified Jco-signed · CISSP	EU-AI-Act-Art.15GDPR-Art.32ISO-A.8.16SOC2-CC6.1	2026-06-30 14:10 UTC 922448e · e6d4c92f