Skip to main content
Glama

deployer_report

Build an EU AI Act deployer duties report with DPIA and FRIA appendices from ledger evidence, marking missing fields as operator input required and pin the ledger verdict to an expected public key.

Instructions

The EU AI Act Art. 26 deployer duties with the evidence this store and its action ledger supply (oversight recorded, incidents and the Art. 73 clock, log age against the six-month floor, disclosures, personal data inventory, chain verification), plus the GDPR Art. 35(7) DPIA and Art. 27(1) FRIA appendices built from the same evidence, the FRIA cross-referencing the DPIA per Art. 27(4). operator_json is a JSON object string with the deployer's own fields; every field it cannot write is marked OPERATOR INPUT REQUIRED. Not an assessment. expected_pubkey (hex, optional) pins the memory chain verdict and defaults to INSPEXIMUS_RECEIPT_PUBKEY; the action ledger is signed with the writer key, so it is pinned only to a key passed here.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
operator_jsonNo
expected_pubkeyNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. Addedv2.39.0

TDQS

A3.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure and it delivers substantive detail: it pinpoints the evidence sources (store and action ledger), explains that unwritable operator_json fields are flagged OPERATOR INPUT REQUIRED, and discloses the expected_pubkey pinning behavior, its default, and the signing rationale. It does not state whether invocation mutates state or what permissions are needed, but for a report generator the disclosed behavior is unusually specific.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single dense run-on paragraph with no front-loading or sectioning; an agent must read the whole wall of text to extract scope, parameters, and caveats. Every sentence carries information, but the lack of structure hurts scannability and would benefit from a lead sentence stating the tool's purpose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description thoroughly covers the report's regulatory content and both parameters, which is substantial for a 2-parameter tool with no annotations and no output schema. However, it is silent on the return value/format and on whether invoking it performs a write, leaving gaps an agent must guess at.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must carry parameter meaning, and it does: operator_json is explained as a JSON object string whose unwritable fields are marked OPERATOR INPUT REQUIRED, and expected_pubkey is explained as an optional hex pin with a documented default and signing logic. Both parameters receive materially more meaning than the bare schema provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific regulatory deliverable — an EU AI Act Art. 26 deployer-duties report with GDPR DPIA and FRIA appendices built from the store's evidence — which clearly identifies the resource and content. It stops short of an explicit verb ('generates'/'produces') and differentiates only weakly from siblings via 'Not an assessment,' without naming any alternative.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit when-to-use guidance and no mention of any sibling tool. The clause 'Not an assessment' hints at a boundary, but an agent is not told when to choose this over compliance_report, governance_report, oversight_report, or the many other report tools in the sibling list.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools