{
  "$schema": "https://eurocomply.app/schemas/ai-system-v1.json",
  "systemId": "sys-agent-openclaw-01",
  "name": "OpenClaw Workplace Autonomous Agent",
  "version": "1.0.0",
  "deploymentDate": "2026-10-01",
  "provider": {
    "name": "OpenClaw (Open Source / Self-Hosted)",
    "repository": "https://github.com/openclaw/openclaw",
    "nature": "Open-Source Autonomous Agent Framework"
  },
  "deployer": {
    "organization": "SME Deployer",
    "country": "EU",
    "operationalOwner": "Engineering / Operations Lead"
  },
  "runtime": {
    "hostingType": "Self-Hosted / Private VPS",
    "hostingLocation": "EU (Frankfurt / Nuremberg)",
    "interfaces": ["Telegram", "Slack", "CLI"],
    "underlyingModels": [
      {
        "provider": "Mistral AI / Local vLLM",
        "modelName": "Mistral-Large-2411 / Mixtral",
        "dataTransferCountry": "EU",
        "dpaInPlace": true
      }
    ]
  },
  "aiActAssessment": {
    "prohibitedPracticeCheck": {
      "article5Prohibited": false,
      "verificationDate": "2026-10-01",
      "notes": "No biometric categorization, social scoring, or subliminal manipulation."
    },
    "classification": "Specific Transparency Risk / General Purpose",
    "annexIiiHighRisk": false,
    "annexIiiReviewNotes": "Agent is configured strictly for operational summaries, calendar triage, and public research. Does NOT touch candidate CV filtering, credit evaluation, or employee performance appraisal (Annex III, §4). If assigned to recruitment screening, classification shifts immediately to High-Risk.",
    "article4Literacy": {
      "status": "In Progress",
      "applicableStaff": ["Engineering", "Product Operations"],
      "recommendedTrack": "EuroComply AI Literacy Academy - Developer & Operations Track",
      "verificationLedger": "eurocomply-academy-art4-ledger.json"
    },
    "article14HumanOversight": {
      "hasStopMechanism": true,
      "stopMechanismDescription": "Chat command /halt immediately revokes runtime API tokens and halts active execution threads.",
      "humanInTheLoopThreshold": "Any external mutation (emails sent, database write, API dispatch) requires human confirmation."
    },
    "article12Logging": {
      "enabled": true,
      "logRetentionDays": 180,
      "logScope": ["Timestamp", "User ID", "Prompt Token Hash", "Model Response Hash", "Dispatched Tool Calls"]
    }
  },
  "gdprAssessment": {
    "lawfulBasis": "Article 6(1)(f) Legitimate Interests",
    "personalDataProcessed": ["Work emails", "Calendar metadata", "Employee task notes"],
    "subprocessorStatus": {
      "hasSubprocessorAgreement": true,
      "crossBorderDataTransfer": false,
      "transferMechanism": "EU-Resident Processing"
    },
    "securityMeasuresArticle32": [
      "AES-256 encrypted local credential storage",
      "Strict OS-level sandboxing for terminal execution tools",
      "Episodic memory redaction for sensitive PII"
    ]
  },
  "evidenceArtifacts": [
    "eurocomply-ai-xray-report.pdf",
    "article-4-training-certificates.zip",
    "subprocessor-dpa-signed.pdf"
  ]
}