Validate an app profile
set_profileStep 1 of the lint. Declare what the app does (activities) and where it will operate (jurisdiction slugs); get back the validated, canonical profile plus what the law library holds for each jurisdiction, so the depth of a run is known before it is spent. Write the returned profile into the project's lexlint.yml and pass it to run_lint. Stores nothing server-side. An unknown activity or a malformed slug is refused here rather than silently weakening a lint later. Costs one upstream request for any number of jurisdictions. It answers the same coverage question check_access's own jurisdictions preview does, off a request check_access spends either way, so asking both is redundant, never costlier: they just repeat the same answer. This tool needs sign-in or an UnGovr Open Data key (metered per request; get one at https://ungovr.org/cli-login?client=lexlint).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| roles | No | Which role this software's maker holds under each regime, keyed by axis: ai_system (provider, deployer, importer, distributor, product_manufacturer, authorised_representative, the EU AI Act's operators) and personal_data (controller, processor, the GDPR's). {"ai_system": ["provider"], "personal_data": ["processor"]}; "none" alone when asked and none applies. Ask the developer; never infer it from the code. Omitted, an axis routes nothing and run_lint counts the duties a role would move in a coverage line. | |
| activities | Yes | What the app does. Allowed: crawls_web, trains_models, generates_content, deploys_chatbot, automated_outreach, high_risk_decisions, processes_voice, processes_biometrics, publishes_adult_content, operates_social_platform, serves_minors, operates_app_store, ships_mobile_app, aggregates_content, distributes_software_product, handles_health_records, provides_financial_services, operates_essential_service, is_listed_company, provides_telecom_services, statutory_requests, records_calls, records_text_chat, tracks_devices, is_bank, is_lender, is_insurer, is_securities_firm, is_payment_provider, is_crypto_asset_provider, employment_decisions, credit_decisions, insurance_decisions, housing_decisions, education_decisions, health_care_decisions, public_services_decisions, justice_decisions | |
| jurisdictions | Yes | Jurisdiction slugs, lowercase, "/"-separated (e.g. "us", "us/ca", "eu", "kr"). A slug is the jurisdiction's UnGovr Atlas path: California is https://ungovr.org/us/ca and its Atlas ID is urn:ungovr:us/ca. Its ISO 3166 code, US-CA, is accepted too. A deeper or unresearched path resolves to the nearest jurisdiction with law, and the jurisdictions whose law is researched are listed at https://lexlint.io/law for the developer to check; name every jurisdiction the app operates in: one left off is unlinted, not passed. | |
| public_sector | No | Is this software run by a public body (body), sold to or run for public bodies (supplier), both, or neither (none)? Ask the developer every time the profile is declared; never infer it from the code. Omitted, duties binding only public bodies are reported as the caller's, and run_lint counts them in a coverage line. | |
| regulated_sector | No | Whose duty a financial-law row is. Is this software run by a bank, insurer or other regulated financial entity (body), supplied to one (supplier), or neither (none)? {"financial": "supplier"}. Ask when provides_financial_services or a license class (is_bank, is_lender, is_insurer, is_securities_firm, is_payment_provider, is_crypto_asset_provider) is declared; never infer it. It routes and never matches, so a supplier still declares the classes of its customers. Omitted, the entity's duties are reported as the caller's, and run_lint counts them in a coverage line. |