opencomplai-core

License: AGPL-3.0 PyPI Python

The EU AI Act compliance risk engine at the heart of Opencomplai. opencomplai-core turns a declared system-manifest.json and your source tree into a deterministic, rule-based risk classification — no LLM calls, no network access, fully reproducible.

It powers risk classification (UnacceptableRiskRule, AnnexIIIClassifierRule, ProfilingDetectionRule, SubstantialModificationRule) and the code-corroboration scan engine that cross-checks what a manifest claims against what the code actually does.

Install

pip install opencomplai-core

For PDF report generation, install the optional extra:

pip install "opencomplai-core[reports]"

Most users want the opencomplai meta-package (engine + CLI) or the opencomplai-cli command-line tool. Install opencomplai-core directly when you are embedding the engine in your own application.

Quick start

Classify a model from a declared manifest

from opencomplai import assess, AssessmentInput, ModelMetadata

result = assess(AssessmentInput(
    model=ModelMetadata(
        name="loan-scorer",
        version="1.0.0",
        modality="tabular",
        use_case="creditworthiness scoring for consumer loans",
        deployment_context="production",
    )
))

print(result.risk_level)        # e.g. RiskLevel.HIGH
for rule in result.rule_results:
    print(rule.rule_id, "PASS" if rule.passed else "FAIL")

Corroborate a manifest against the code

from pathlib import Path
from opencomplai_core.scan_engine import run_scan

report = run_scan(
    repo_root=Path("."),
    commit_ref="HEAD",
)

print(report.summary.result)            # PASS / CONTROL_FAIL / ...
for finding in report.findings:
    print(finding.finding_id, finding.mapped_taxonomy)

The scan engine extracts features from the repository, fuses evidence across detectors, and maps findings to EU AI Act taxonomy (Annex III high-risk areas, Article 5 prohibited practices, profiling under Article 6).

What you get

  • Deterministic risk classification — same inputs always produce the same output, so results are auditable and CI-gateable.
  • Code corroboration — detect when a manifest under-declares (claims minimal risk while the code does biometric identification, profiling, etc.).
  • Merkle-linked evidence — findings carry verifiable evidence items for audit trails.

Documentation

Full docs, the EU AI Act concepts guide, and the SDK reference live at docs.opencomplai.com.

License

AGPL-3.0-only. See LICENSE.

Project links

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (0.4.0)

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for OCDevAdmin26 from gravatar.com OCDevAdmin26

Credits

PyPI data
Data sourced directly from PyPI's database.

Author: Opencomplai

License

AGPL-3.0-only

Requires

Python >=3.11

Provides Extra

dev inspect-bridge reports

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

opencomplai_core-0.3.0.tar.gz (164.2 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

opencomplai_core-0.3.0-py3-none-any.whl (170.5 kB view details)

Uploaded Python 3

File details

Details for the file opencomplai_core-0.3.0.tar.gz.

File metadata

  • Download URL: opencomplai_core-0.3.0.tar.gz
  • Upload date:
  • Size: 164.2 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for opencomplai_core-0.3.0.tar.gz
Algorithm Hash digest
SHA256 9c7eb69b32dd9a6d3d8338213e91710ff160b20efa1c8253ad421914a5db420a
MD5 4b4a49a2b2e9368b7f09c93741454592
BLAKE2b-256 47f2a58e5e1f648a7a985b311db2ef7f16ceceed48f3c6bb0687aa7f87571600

See more details on using hashes here.

Provenance

The following attestation bundles were made for opencomplai_core-0.3.0.tar.gz:

Publisher: publish-pypi.yml on Opencomplai/opencomplai-enterprise

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file opencomplai_core-0.3.0-py3-none-any.whl.

File metadata

File hashes

Hashes for opencomplai_core-0.3.0-py3-none-any.whl
Algorithm Hash digest
SHA256 83975c69ad2023a52c9e31edad27a5c2c5abd6e29653668efeda6b31353bf92c
MD5 e91406267424a1f8fd04f04601134441
BLAKE2b-256 fc2f581720a5f264eb359deffbdbbdea67d8da2ef54a6066af5137633904cb33

See more details on using hashes here.

Provenance

The following attestation bundles were made for opencomplai_core-0.3.0-py3-none-any.whl:

Publisher: publish-pypi.yml on Opencomplai/opencomplai-enterprise

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

0.4.0

2 files

This release

0.3.0 This release

2 files

0.1.2

2 files

0.1.0

2 files

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page