register_system
Create EU AI Act Art. 9 risk assessment records for AI systems before they process EU personal data. Register systems during design or deployment to map required governance controls.
Instructions
Register an AI system in the Mima governance ledger. Creates an Art. 9 risk assessment record — required once per AI system before it processes EU persons under the EU AI Act.
Use this during design reviews or architecture discussions when a new AI system is being planned or has just been deployed:
"We're adding a loan scoring model to production"
"This new hiring algorithm needs to be registered"
"Register the content moderation system we just deployed"
Pass dry_run=true to preview which controls this registration would earn without writing anything to the ledger. Use this before the real call to confirm the payload is correct.
Returns the record_id and mapped controls (e.g. EUAIA_ART9, ISO42001_6.1). In dry-run mode, record_id is the nil UUID — a clear signal nothing was written.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| dry_run | No | If true, preview which controls this registration would earn without writing to the ledger. record_id in the response will be the nil UUID. Use this before the real call. | |
| risk_level | Yes | 'high' = Annex III system requiring full Art. 9 documentation. 'medium' = limited risk, transparency obligations apply. 'low' = minimal risk, no mandatory requirements. | |
| environment | No | Deployment environment. Defaults to 'production'. | |
| system_name | Yes | Unique identifier for the AI system. Must match what developers pass to mima.attest(system_name=…). Use lowercase with hyphens, e.g. 'loan-scoring-v2'. | |
| risk_summary | Yes | Why this system is classified at this risk level. Write a complete sentence. Example: 'This system scores loan applications for EU consumers under Annex III §(e). Human review is mandatory for scores below 600.' | |
| system_version | No | Optional version string, e.g. 'v2.1.0'. Auditors use this to track change events. | |
| intended_purpose | Yes | Use case, target population, and deployment scope. Auditors check this against Annex IV §1. Example: 'Predicts credit default probability for retail loan applicants aged 18-75 in the EU. Assists (does not replace) manual underwriter assessment.' | |
| technical_doc_url | No | URL to Annex IV technical documentation. Must be a live URL. | |
| training_data_url | No | URL to training dataset specification and lineage. | |
| annex_iii_category | No | The Annex III category for high-risk systems. Required when risk_level is 'high'. Options: biometric_identification, critical_infrastructure, education_vocational, employment_management, essential_services, law_enforcement, migration_border, justice_democratic. | |
| responsible_person | Yes | Email of the named person accountable for this system under Art. 14. Must be a real individual, not a team alias. | |
| art5_self_assessment | Yes | Set true to certify this system does not engage in practices prohibited under Art. 5 (subliminal manipulation, social scoring, real-time biometric identification in public spaces, etc.). Required field — do not set to true without confirming with the system owner. |