Discover the AI in a codebase, and which Article 50 limbs could attach
discover_ai_surfacesAnalyze code files to identify AI capabilities and map them to EU AI Act Article 50 obligations, with evidence and duty-bearers. Returns hypotheses, not findings, fully offline.
Instructions
Reads file CONTENT you pass in (a package.json, source files) and proposes which AI capabilities the code could ship, with the evidence for each, then resolves those into Article 50 limbs with their dates and duty-bearers. Returns HYPOTHESES, never findings: a dependency proves what code could do, never what it ships. Offline, no network, nothing stored.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| files | Yes | A map of path to file content. Read the files yourself and pass their contents; the tool never touches the filesystem. A package.json yields "possible" capabilities; a source file containing a real call site raises one to "likely". Passing both is best. | |
| deploys | No | Whether the user also runs the system themselves. Articles 50(3) and 50(4) bind the deployer, so if they only supply it to customers those duties land downstream. Defaults to false. | |
| own_brand | No | Article 3(3): is this placed on the market under the user's own name or trademark? Ask them; do not infer it from the repository or the git author. If true they are the provider whatever model sits underneath, and a provider duty cannot be contracted back upstream. Defaults to true. | |
| on_market_before_2_aug_2026 | No | Article 111(4): was it on the market before 2 August 2026? If yes, the 50(2) marking duty moves to 2 December 2026. If no, it applied the day it shipped, with no transition. Defaults to false, which is the stricter reading. |