{ "schemaVersion": "eve.jurisdiction-human-oversight.v1", "initiativeId": "eve-sota-gap-closure-2026-09-01", "taskId": "14.6", "evaluatedOn": "2026-09-15", "policy": { "notLegalAdvice": true, "engineeringMayNotClaimCompliance": true, "unresolvedLegalQuestionDefault": "block-affected-use", "counselDecisionOwner": "role:privacy-counsel", "operatorDecisionOwner": "role:product-operator", "reviewCadenceDays": 90, "changeTriggers": [ "new-territory", "new-user-population", "new-consequential-domain", "new-model-or-material-capability", "new-autonomous-effect", "new-law-or-regulator-guidance", "material-control-change" ] }, "productScope": { "product": "Eve", "deploymentTerritories": "not-attested", "currentUseBoundary": "assistive-copilot-with-human-authority", "solelyAutomatedLegalOrSimilarlySignificantDecisions": "not-admitted", "consequentialDecisionDomains": "not-admitted", "minorDirectedService": "not-admitted", "publicGeneratedMediaRelease": "owned-by-task-14.7", "legalEffect": "This record is an engineering launch boundary and issue map, not a legal conclusion." }, "officialSources": [ { "id": "eu-ai-act-text", "authority": "EUR-Lex", "kind": "law", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng", "retrievedOn": "2026-09-15", "applicabilityNote": "Potentially relevant when an AI system is placed on the Union market, used in the Union, or affects people in the Union; exact provider/deployer and risk classification is counsel-owned." }, { "id": "eu-ai-act-timeline", "authority": "European Commission", "kind": "regulator-guidance", "url": "https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai", "retrievedOn": "2026-09-15", "applicabilityNote": "Article 50 transparency obligations are treated as active from 2026-08-02; Annex III high-risk obligations are tracked for 2027-12-02 without asserting classification." }, { "id": "eu-gdpr", "authority": "EUR-Lex", "kind": "law", "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng", "retrievedOn": "2026-09-15", "applicabilityNote": "Article 22 and related transparency, lawful-basis, DPIA, and data-subject-rights questions require controller-specific counsel review." }, { "id": "uk-ico-adm", "authority": "UK Information Commissioner's Office", "kind": "regulator-guidance-under-review", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/individual-rights/rights-related-to-automated-decision-making-including-profiling/", "retrievedOn": "2026-09-15", "applicabilityNote": "The ICO states its guidance is under review after the Data (Use and Access) Act 2025; no stale UK legal conclusion is inferred." }, { "id": "california-cppa-admt", "authority": "California Privacy Protection Agency", "kind": "final-regulation", "url": "https://cppa.ca.gov/regulations/ccpa_updates.html", "retrievedOn": "2026-09-15", "applicabilityNote": "Final ADMT regulations are effective 2026-01-01, with significant-decision ADMT compliance beginning 2027-01-01; whether the business and use are covered is counsel-owned." }, { "id": "colorado-admt-chatbot", "authority": "Colorado Attorney General", "kind": "law-and-active-rulemaking", "url": "https://coag.gov/ai/", "retrievedOn": "2026-09-15", "applicabilityNote": "The reenacted ADMT law and Chatbot Safety Act are tracked for 2027-01-01; implementing rules were still proposed on the review date." }, { "id": "nist-ai-rmf", "authority": "US National Institute of Standards and Technology", "kind": "voluntary-framework", "url": "https://airc.nist.gov/airmf-resources/airmf/5-sec-core/", "retrievedOn": "2026-09-15", "applicabilityNote": "NIST AI RMF is a voluntary engineering baseline, not a source of legal compliance or a substitute for counsel." } ], "jurisdictions": [ { "id": "eu-eea", "territoryTrigger": "person-in-or-market-use-in-eu-eea", "sourceRefs": ["eu-ai-act-text", "eu-ai-act-timeline", "eu-gdpr"], "applicabilityStatus": "pending-counsel", "currentEngineeringDisposition": "conservative-controls-plus-block-consequential-use", "decisionOwner": "role:privacy-counsel", "operatorOwner": "role:eu-product-operator", "unblockCondition": "Signed counsel classification of role, territory, Article 50 duties, GDPR controller/processor posture, and any Annex III or Article 22 trigger." }, { "id": "uk", "territoryTrigger": "uk-person-or-uk-establishment", "sourceRefs": ["uk-ico-adm"], "applicabilityStatus": "pending-counsel", "currentEngineeringDisposition": "block-solely-automated-significant-decisions", "decisionOwner": "role:privacy-counsel", "operatorOwner": "role:uk-product-operator", "unblockCondition": "Signed UK counsel record against the final post-DUAA ICO guidance and the concrete controller, purpose, data, and decision effect." }, { "id": "us-california", "territoryTrigger": "california-consumer-and-covered-business", "sourceRefs": ["california-cppa-admt"], "applicabilityStatus": "pending-counsel", "currentEngineeringDisposition": "block-admt-significant-decisions", "decisionOwner": "role:privacy-counsel", "operatorOwner": "role:us-product-operator", "unblockCondition": "Signed counsel determination of covered-business and significant-decision scope plus an approved notice, access, opt-out, and risk-assessment operating plan." }, { "id": "us-colorado", "territoryTrigger": "colorado-resident-or-colorado-market", "sourceRefs": ["colorado-admt-chatbot"], "applicabilityStatus": "pending-counsel-and-final-rules", "currentEngineeringDisposition": "block-consequential-decisions-and-minor-directed-chatbot-launch", "decisionOwner": "role:privacy-counsel", "operatorOwner": "role:us-product-operator", "unblockCondition": "Signed counsel review of final rules, consequential-decision use, chatbot age/safety duties, disclosures, privacy tools, and reporting before 2027-01-01 launch." }, { "id": "us-other", "territoryTrigger": "unlisted-us-state-or-federal-use", "sourceRefs": ["nist-ai-rmf"], "applicabilityStatus": "law-census-not-complete", "currentEngineeringDisposition": "assistive-use-only-no-compliance-claim", "decisionOwner": "role:privacy-counsel", "operatorOwner": "role:us-product-operator", "unblockCondition": "Territory-specific statute and regulator census plus signed counsel decision before consequential, minor-directed, or regulated-domain use." }, { "id": "other-territories", "territoryTrigger": "any-territory-not-enumerated-above", "sourceRefs": ["nist-ai-rmf"], "applicabilityStatus": "not-reviewed", "currentEngineeringDisposition": "production-launch-not-admitted-by-this-record", "decisionOwner": "role:privacy-counsel", "operatorOwner": "role:global-product-operator", "unblockCondition": "Named operator attests the launch territory and counsel records applicable law, prohibited uses, required notices, oversight, rights, and evidence." } ], "useCases": [ { "id": "conversational-assistance", "riskPosture": "assistive", "admission": "admitted-with-disclosure", "humanAuthority": "The member chooses whether to rely on, edit, or discard the response.", "solelyAutomatedSignificantDecision": false, "oversightControlRefs": ["ai-identity-disclosure", "domain-human-handoff"] }, { "id": "member-requested-mutation", "riskPosture": "effecting-but-user-directed", "admission": "admitted-with-explicit-confirmation", "humanAuthority": "The authenticated member must confirm the exact pending action before dispatch and can decline it.", "solelyAutomatedSignificantDecision": false, "oversightControlRefs": ["member-action-confirmation", "operator-stop-control"] }, { "id": "operator-workbench-delivery", "riskPosture": "internal-operator-effecting", "admission": "admitted-with-human-activation-and-verification", "humanAuthority": "A tenant-local human accepts current decisions and activates delivery; conflicting decisions stop execution.", "solelyAutomatedSignificantDecision": false, "oversightControlRefs": ["workbench-human-decision", "operator-stop-control"] }, { "id": "trust-safety-moderation", "riskPosture": "rights-affecting", "admission": "conditional-human-review-and-appeal", "humanAuthority": "Reviewers can overturn appealable outcomes; permanent bans require two-reviewer signoff.", "solelyAutomatedSignificantDecision": false, "oversightControlRefs": ["moderation-review-and-appeal", "operator-stop-control"] }, { "id": "legal-clinical-financial-crisis-guidance", "riskPosture": "regulated-or-life-safety", "admission": "handoff-only", "humanAuthority": "The assistant defers legal and clinical judgment to qualified humans and routes crisis cases to human services.", "solelyAutomatedSignificantDecision": false, "oversightControlRefs": ["domain-human-handoff"] }, { "id": "consequential-eligibility-or-access", "riskPosture": "legal-or-similarly-significant", "admission": "blocked", "humanAuthority": "No Eve output may decide or materially determine employment, housing, education, credit, insurance, healthcare access, or essential-service eligibility.", "solelyAutomatedSignificantDecision": false, "oversightControlRefs": ["jurisdiction-release-gate"] }, { "id": "minor-directed-conversational-service", "riskPosture": "vulnerable-population", "admission": "blocked-pending-age-safety-and-counsel-review", "humanAuthority": "No minor-directed launch is admitted; an age/safety design and accountable operator are prerequisites.", "solelyAutomatedSignificantDecision": false, "oversightControlRefs": ["jurisdiction-release-gate"] }, { "id": "customer-facing-generated-media-release", "riskPosture": "synthetic-media-and-rights", "admission": "owned-by-task-14.7", "humanAuthority": "Customer-facing release stays review-gated where triggers fire; Task 14.7 owns licence, likeness, provenance, and disclosure completion.", "solelyAutomatedSignificantDecision": false, "oversightControlRefs": ["generated-media-release-review"] } ], "humanOversightControls": [ { "id": "ai-identity-disclosure", "mode": "inform-and-contextualize", "humanRole": "member", "canOverride": false, "canStop": false, "meaningfulAuthority": "The person is told the assistant is AI and retains the decision whether to use its output.", "sourceBindingRefs": ["assistant-disclosure"] }, { "id": "member-action-confirmation", "mode": "pre-effect-confirmation", "humanRole": "authenticated-member", "canOverride": true, "canStop": true, "meaningfulAuthority": "The action cannot dispatch on model output alone; decline or expiry produces no side effect.", "sourceBindingRefs": ["action-confirmation"] }, { "id": "workbench-human-decision", "mode": "accept-verify-activate", "humanRole": "tenant-local-operator", "canOverride": true, "canStop": true, "meaningfulAuthority": "Only a current human-accepted decision can authorize delivery, and conflict stops delivery.", "sourceBindingRefs": ["workbench-human-boundary"] }, { "id": "domain-human-handoff", "mode": "qualified-human-deferral", "humanRole": "human-counsel-clinician-agent-or-crisis-service", "canOverride": true, "canStop": true, "meaningfulAuthority": "Legal, clinical, crisis, and member-requested triggers transfer or escalate to the named human channel.", "sourceBindingRefs": ["persona-handoff"] }, { "id": "moderation-review-and-appeal", "mode": "review-appeal-two-person-control", "humanRole": "independent-moderator", "canOverride": true, "canStop": true, "meaningfulAuthority": "A reviewer can reverse an appealable decision and a second independent reviewer is mandatory for permanent bans.", "sourceBindingRefs": ["moderation-decisions"] }, { "id": "generated-media-release-review", "mode": "pre-release-review", "humanRole": "assigned-release-reviewer", "canOverride": true, "canStop": true, "meaningfulAuthority": "A review verdict is not dispatch permission; missing assignment or unmet release evidence blocks publication.", "sourceBindingRefs": ["media-release-gate"] }, { "id": "operator-stop-control", "mode": "kill-switch-and-cancellation", "humanRole": "authorized-operator", "canOverride": true, "canStop": true, "meaningfulAuthority": "The kill switch is evaluated before acquisition and prevents new work from starting.", "sourceBindingRefs": ["workbench-kill-switch"] }, { "id": "jurisdiction-release-gate", "mode": "governance-admission", "humanRole": "privacy-counsel-and-product-operator", "canOverride": true, "canStop": true, "meaningfulAuthority": "Unknown territory or unresolved high-impact applicability stays blocked until both named roles record a decision.", "sourceBindingRefs": ["this-record-verifier"] } ], "decisions": [ { "id": "assistive-product-boundary", "ownerRole": "role:product-operator", "status": "approved-engineering-boundary", "decision": "Eve is admitted as an assistive copilot, not an autonomous authority for legal or similarly significant decisions.", "defaultUntilChanged": "assistive-only" }, { "id": "eu-ai-and-data-protection-applicability", "ownerRole": "role:privacy-counsel", "status": "pending-counsel", "decision": "No final provider/deployer, risk-class, controller/processor, or Article 22 applicability conclusion is recorded.", "defaultUntilChanged": "apply-ai-disclosure-and-block-consequential-use" }, { "id": "uk-adm-applicability", "ownerRole": "role:privacy-counsel", "status": "pending-counsel", "decision": "The post-DUAA UK position awaits final regulator guidance and a deployment-specific review.", "defaultUntilChanged": "block-solely-automated-significant-use" }, { "id": "california-admt-applicability", "ownerRole": "role:privacy-counsel", "status": "pending-counsel", "decision": "Covered-business and significant-decision applicability is not determined by engineering.", "defaultUntilChanged": "block-admt-significant-decisions" }, { "id": "colorado-admt-chatbot-applicability", "ownerRole": "role:privacy-counsel", "status": "pending-counsel-and-final-rules", "decision": "Consequential-decision and minor-chatbot duties await final rules and counsel review before 2027 launch.", "defaultUntilChanged": "block-consequential-and-minor-directed-use" }, { "id": "new-territory-admission", "ownerRole": "role:privacy-counsel+role:product-operator", "status": "two-role-approval-required", "decision": "No unlisted territory is admitted by inference from another jurisdiction or from engineering tests.", "defaultUntilChanged": "block-production-launch" } ], "obligationMappings": [ { "id": "ai-interaction-transparency", "sourceRefs": ["eu-ai-act-text", "eu-ai-act-timeline", "colorado-admt-chatbot"], "controlRefs": ["ai-identity-disclosure"], "evidenceRefs": ["assistant-disclosure"], "claimBoundary": "Control evidence shows disclosure behavior only; counsel determines legal sufficiency and territorial applicability." }, { "id": "meaningful-human-intervention", "sourceRefs": ["eu-gdpr", "uk-ico-adm"], "controlRefs": ["member-action-confirmation", "workbench-human-decision"], "evidenceRefs": ["action-confirmation", "workbench-human-boundary"], "claimBoundary": "Confirmation and human acceptance are technical controls; they are not a legal finding that every review is meaningful." }, { "id": "challenge-appeal-and-override", "sourceRefs": ["eu-gdpr", "uk-ico-adm", "california-cppa-admt"], "controlRefs": ["moderation-review-and-appeal"], "evidenceRefs": ["moderation-decisions"], "claimBoundary": "The moderation appeal system does not establish a universal statutory appeal process for other use cases." }, { "id": "consequential-decision-safeguard", "sourceRefs": ["eu-gdpr", "california-cppa-admt", "colorado-admt-chatbot"], "controlRefs": ["jurisdiction-release-gate"], "evidenceRefs": ["this-record-verifier"], "claimBoundary": "The current control is non-admission, not compliance with a consequential-decision regime." }, { "id": "human-oversight-documentation", "sourceRefs": ["eu-ai-act-text", "nist-ai-rmf"], "controlRefs": ["workbench-human-decision", "operator-stop-control"], "evidenceRefs": ["workbench-human-boundary", "workbench-kill-switch"], "claimBoundary": "NIST is voluntary and Article 14 classification remains counsel-owned." }, { "id": "vulnerable-person-chatbot-safeguard", "sourceRefs": ["colorado-admt-chatbot"], "controlRefs": ["jurisdiction-release-gate", "domain-human-handoff"], "evidenceRefs": ["persona-handoff", "this-record-verifier"], "claimBoundary": "No age-estimation or minor-service compliance is claimed; the use remains unadmitted." }, { "id": "operator-stop-and-safe-failure", "sourceRefs": ["nist-ai-rmf"], "controlRefs": ["operator-stop-control"], "evidenceRefs": ["workbench-kill-switch"], "claimBoundary": "The kill switch covers the bound work queue and is not claimed as a universal stop mechanism for every external provider." } ], "sourceBindings": [ { "id": "assistant-disclosure", "source": "apps/oshun/web/src/design-system/disclosure.ts", "includes": ["AI assistant", "not a human operator"] }, { "id": "action-confirmation", "source": "apps/oshun/bff/src/assistant/action-confirm.ts", "includes": ["only the member's explicit POST", "Decline discards"] }, { "id": "workbench-human-boundary", "source": "apps/oshun/bff/src/workbench/intent-store.ts", "includes": ["not human-accepted", "conflicting current human decisions stop delivery"] }, { "id": "persona-handoff", "source": "libs/oshun/persona-registry/src/persona-handoff-policy.ts", "includes": [ "legal-deferral must target human-legal-counsel", "clinical-deferral must target human-clinician" ] }, { "id": "moderation-decisions", "source": "libs/oshun/trust-safety/src/decisions/decisions.ts", "includes": ["two-reviewer-required", "secondReviewerId"] }, { "id": "media-release-gate", "source": "libs/oshun/generation-control-isis/src/release-gate-model.ts", "includes": ["human-review-ready", "human reviewer"] }, { "id": "workbench-kill-switch", "source": "apps/oshun/bff/src/workbench/queue-semantics.ts", "includes": ["operator's stop button", "fleet_halted"] }, { "id": "this-record-verifier", "source": "tools/eve-everywhere/verify-jurisdiction-human-oversight.mjs", "includes": [ "unresolved legal question must fail closed", "engineering evidence cannot claim legal compliance" ] } ], "limitations": [ { "id": "no-counsel-signature", "statement": "No person is represented as counsel and no legal applicability decision is fabricated; pending questions retain a named counsel owner and blocked default." }, { "id": "territory-not-attested", "statement": "The repository does not prove current customer, establishment, or impact territories; unlisted production territory is not admitted by this record." }, { "id": "control-scope-not-universal", "statement": "Bound controls prove their named software paths only; they do not prove every human reviewer is competent, independent, timely, or free from automation bias." }, { "id": "law-is-time-sensitive", "statement": "Sources and effective dates are reviewed as of 2026-09-15 and must be refreshed on the stated cadence or any change trigger." }, { "id": "downstream-media-and-attachments", "statement": "Media rights and public-release governance remain Task 14.7; attachment and generated-artifact lifecycle remains Task 14.8." } ] }