opencomplai-core

License: AGPL-3.0 PyPI Python

The EU AI Act compliance risk engine at the heart of Opencomplai. opencomplai-core turns a declared system-manifest.json and your source tree into a deterministic, rule-based risk classification — no LLM calls, no network access, fully reproducible.

It powers risk classification (UnacceptableRiskRule, AnnexIIIClassifierRule, ProfilingDetectionRule, SubstantialModificationRule) and the code-corroboration scan engine that cross-checks what a manifest claims against what the code actually does.

Install

pip install opencomplai-core

For PDF report generation, install the optional extra:

pip install "opencomplai-core[reports]"

Most users want the opencomplai meta-package (engine + CLI) or the opencomplai-cli command-line tool. Install opencomplai-core directly when you are embedding the engine in your own application.

Quick start

Classify a model from a declared manifest

from opencomplai import assess, AssessmentInput, ModelMetadata

result = assess(AssessmentInput(
    model=ModelMetadata(
        name="loan-scorer",
        version="1.0.0",
        modality="tabular",
        use_case="creditworthiness scoring for consumer loans",
        deployment_context="production",
    )
))

print(result.risk_level)        # e.g. RiskLevel.HIGH
for rule in result.rule_results:
    print(rule.rule_id, "PASS" if rule.passed else "FAIL")

Corroborate a manifest against the code

from pathlib import Path
from opencomplai_core.scan_engine import run_scan

report = run_scan(
    repo_root=Path("."),
    commit_ref="HEAD",
)

print(report.summary.result)            # PASS / CONTROL_FAIL / ...
for finding in report.findings:
    print(finding.finding_id, finding.mapped_taxonomy)

The scan engine extracts features from the repository, fuses evidence across detectors, and maps findings to EU AI Act taxonomy (Annex III high-risk areas, Article 5 prohibited practices, profiling under Article 6).

What you get

  • Deterministic risk classification — same inputs always produce the same output, so results are auditable and CI-gateable.
  • Code corroboration — detect when a manifest under-declares (claims minimal risk while the code does biometric identification, profiling, etc.).
  • Merkle-linked evidence — findings carry verifiable evidence items for audit trails.

Documentation

Full docs, the EU AI Act concepts guide, and the SDK reference live at docs.opencomplai.com.

License

AGPL-3.0-only. See LICENSE.

Project links

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Latest release

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for OCDevAdmin26 from gravatar.com OCDevAdmin26

Credits

PyPI data
Data sourced directly from PyPI's database.

Author: Opencomplai

License

AGPL-3.0-only

Requires

Python >=3.11

Provides Extra

dev inspect-bridge reports

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

opencomplai_core-0.4.0.tar.gz (185.2 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

opencomplai_core-0.4.0-py3-none-any.whl (185.2 kB view details)

Uploaded Python 3

File details

Details for the file opencomplai_core-0.4.0.tar.gz.

File metadata

  • Download URL: opencomplai_core-0.4.0.tar.gz
  • Upload date:
  • Size: 185.2 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for opencomplai_core-0.4.0.tar.gz
Algorithm Hash digest
SHA256 94320e31095bb0fd35f5640a5508dff909afea6bf6ffa59ca5705334a48bd64f
MD5 1a34c5587edc6271fcb170c75e2fc55a
BLAKE2b-256 7e7b3bed3f11573b626e338f6e5606c1f7eec29bf7788673d8b14832c449841d

See more details on using hashes here.

Provenance

The following attestation bundles were made for opencomplai_core-0.4.0.tar.gz:

Publisher: publish-pypi.yml on Opencomplai/opencomplai-enterprise

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file opencomplai_core-0.4.0-py3-none-any.whl.

File metadata

File hashes

Hashes for opencomplai_core-0.4.0-py3-none-any.whl
Algorithm Hash digest
SHA256 b13ea22a3c1ac1b2f9576755e288571e2ef2920ec046cce4d968f27391c9a7df
MD5 1be9567e954f4e9c346c99aac007d86b
BLAKE2b-256 1768d07cd9706ed09ae742e2be01f691ab0a560a3748358eb8866633bb539919

See more details on using hashes here.

Provenance

The following attestation bundles were made for opencomplai_core-0.4.0-py3-none-any.whl:

Publisher: publish-pypi.yml on Opencomplai/opencomplai-enterprise

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

This release

0.4.0 This release

2 files

0.3.0

2 files

0.1.2

2 files

0.1.0

2 files

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page