Changes

# TwinEthos data releases

_Generated by `tools/release.py`. Informational data only — not legal advice. No attorney-client relationship is created. No rule has been reviewed by a lawyer unless its provenance_status is legal_reviewed. See TERMS.md._

## 2026.10.01.2 (2026-10-01)

0 added · 125 changed · 0 removed — packs: `ai-security`, `ca-ab1836`, `ca-ab2013`, `ca-ab3030`, `ca-ab489`, `ca-ab853`, `ca-civ-3344`, `ca-cmia`, `ca-sb243`, `ca-sb53`, `ca-sb942`, `ccpa-admt`, `cn-algo-recommendation`, `cn-deep-synthesis`, `cn-genai-interim`, `cn-genai-labeling`, `co-sb21-169`, `co-sb26-189`, `coe-ai-convention`, `ct-cart`, `eu-ai-act`, `eu-altai`, `eu-gdpr-ai-data`, `eu-gdpr-art22`, `eu-gpai-cop`, `finra-genai`, `ieee-7003`, `il-ai-video-interview`, `il-bipa`, `il-hb1806`, `il-hb3773`, `il-sb315`, `imda-agentic`, `jp-ai-guidelines`, `kr-ai-basic-act`, `mas-feat`, `md-hb1202`, `naic-ai-bulletin`, `ne-lb525`, `nist-aml-agentic`, `nist-genai-profile`, `ny-gbl-art47`, `ny-raise-act`, `nyc-ll144`, `oecd-ai`, `or-sb1546`, `qc-law25`, `recommended-guardrails`, `tn-elvis-act`, `tn-sb1580`, `tx-bc-503`, `tx-sb1188`, `tx-traiga`, `uk-ico-ai`, `us-ftc-impersonation`, `us-hipaa-privacy`, `us-state-privacy-admt`, `ut-ai-policy-act`, `ut-hb452`, `wa-hb2225`, `wa-mhmda`, `who-health-ai`

- `ai-security.untrusted-input-to-agent-instructions-or-tools` changed (ai-security 0.1.2)
- `ca-ab1836.digital-replica-deceased-consent` changed (ca-ab1836 0.1.2)
- `ca-ab2013.training-data-disclosure` changed (ca-ab2013 0.1.2)
- `ca-ab3030.genai-patient-communication-disclaimer` changed (ca-ab3030 0.1.1)
- `ca-ab489.no-implied-licensed-professional` changed (ca-ab489 0.1.1)
- `ca-ab853.capture-device-latent-disclosure` changed (ca-ab853 0.1.2)
- `ca-ab853.genai-hosting-platform-gate` changed (ca-ab853 0.1.2)
- `ca-ab853.platform-provenance-detection-and-display` changed (ca-ab853 0.1.2)
- `ca-civ-3344.ai-likeness-commercial-use-consent` changed (ca-civ-3344 0.2.1)
- `ca-cmia.medical-information-to-ai-vendor` changed (ca-cmia 0.2.2)
- `ca-sb243.companion-bot-crisis-protocol` changed (ca-sb243 0.3.1)
- `ca-sb243.companion-bot-disclosure` changed (ca-sb243 0.3.1)
- `ca-sb243.known-minor-safeguards` changed (ca-sb243 0.3.1)
- `ca-sb243.minor-suitability-disclosure` changed (ca-sb243 0.3.1)
- `ca-sb53.frontier-ai-framework` changed (ca-sb53 0.1.2)
- `ca-sb53.frontier-whistleblower-protection` changed (ca-sb53 0.1.2)
- `ca-sb942.provenance-disclosure` changed (ca-sb942 0.1.2)
- `ccpa-admt.access-explanation` changed (ccpa-admt 0.1.2)
- `ccpa-admt.opt-out` changed (ccpa-admt 0.1.2)
- `ccpa-admt.pre-use-notice` changed (ccpa-admt 0.1.2)
- `cn-algo-recommendation.minor-protection` changed (cn-algo-recommendation 0.2.1)
- `cn-algo-recommendation.no-addiction-inducing-models` changed (cn-algo-recommendation 0.2.1)
- `cn-algo-recommendation.recommendation-optout` changed (cn-algo-recommendation 0.2.1)
- `cn-deep-synthesis.conspicuous-label` changed (cn-deep-synthesis 0.1.2)
- `cn-genai-interim.filing-and-security-assessment` changed (cn-genai-interim 0.1.2)
- `cn-genai-interim.training-data-legitimacy` changed (cn-genai-interim 0.1.2)
- `cn-genai-labeling.dual-label-genai-content` changed (cn-genai-labeling 0.1.2)
- `co-sb21-169.insurance-ecdis-unfair-discrimination` changed (co-sb21-169 0.1.2)
- `co-sb26-189.adverse-outcome-explanation` changed (co-sb26-189 0.1.2)
- `co-sb26-189.consumer-notice-consequential-decision` changed (co-sb26-189 0.1.2)
- `co-sb26-189.developer-documentation-to-deployers` changed (co-sb26-189 0.1.2)
- `co-sb26-189.human-review-and-data-correction` changed (co-sb26-189 0.1.2)
- `coe-ai-convention.documentation-and-contest` changed (coe-ai-convention 0.1.2)
- `ct-cart.aedt-predecision-notice` changed (ct-cart 0.1.2)
- `ct-cart.ai-companion-crisis-protocol` changed (ct-cart 0.1.2)
- `ct-cart.ai-companion-disclosure` changed (ct-cart 0.1.2)
- `ct-cart.synthetic-content-provenance` changed (ct-cart 0.1.2)
- `eu-ai-act.art10.data-governance-bias` changed (eu-ai-act 0.1.2)
- `eu-ai-act.art12.record-keeping` changed (eu-ai-act 0.1.2)
- `eu-ai-act.art14.human-oversight` changed (eu-ai-act 0.1.2)
- `eu-ai-act.art15.accuracy-robustness-cybersecurity` changed (eu-ai-act 0.1.2)
- `eu-ai-act.art26.inform-affected-persons` changed (eu-ai-act 0.1.2)
- `eu-ai-act.art27.fria` changed (eu-ai-act 0.1.2)
- `eu-ai-act.art5.nonconsensual-intimate-and-csam` changed (eu-ai-act 0.1.2)
- `eu-ai-act.art50.chatbot-disclosure` changed (eu-ai-act 0.1.2)
- `eu-ai-act.art50.emotion-biometric-notice` changed (eu-ai-act 0.1.2)
- `eu-ai-act.art50.public-interest-text-disclosure` changed (eu-ai-act 0.1.2)
- `eu-ai-act.art50.synthetic-content-machine-marking` changed (eu-ai-act 0.1.2)
- `eu-ai-act.art86.right-to-explanation` changed (eu-ai-act 0.1.2)
- `eu-altai.non-discrimination-fairness` changed (eu-altai 0.1.3)
- `eu-altai.transparency-traceability` changed (eu-altai 0.1.3)
- `eu-gdpr-ai-data.ai-recipients-named-at-collection` changed (eu-gdpr-ai-data 0.2.1)
- `eu-gdpr-ai-data.biometric-identification-explicit-consent` changed (eu-gdpr-ai-data 0.2.1)
- `eu-gdpr-ai-data.erasure-reaches-ai-data-stores` changed (eu-gdpr-ai-data 0.2.1)
- `eu-gdpr-art22.solely-automated-decision-safeguards` changed (eu-gdpr-art22 0.1.1)
- `eu-gpai-cop.model-documentation` changed (eu-gpai-cop 0.1.2)
- `finra-genai.agentic-supervision` changed (finra-genai 0.1.3)
- `finra-genai.genai-monitoring-logging` changed (finra-genai 0.1.3)
- `ieee-7003.proxy-variable-analysis` changed (ieee-7003 0.1.1)
- `il-ai-video-interview.video-interview-ai-consent` changed (il-ai-video-interview 0.1.2)
- `il-bipa.biometric-disclosure-consent` changed (il-bipa 0.2.1)
- `il-bipa.biometric-notice-and-written-release` changed (il-bipa 0.2.1)
- `il-bipa.biometric-retention-and-destruction` changed (il-bipa 0.2.1)
- `il-hb1806.ai-session-recording-notice-consent` changed (il-hb1806 0.2.1)
- `il-hb1806.ai-therapy-role-limits` changed (il-hb1806 0.2.1)
- `il-hb1806.no-unlicensed-ai-therapy` changed (il-hb1806 0.2.1)
- `il-hb3773.ai-use-employee-notice` changed (il-hb3773 0.1.1)
- `il-hb3773.proxy-discrimination-llm-decision-path` changed (il-hb3773 0.1.1)
- `il-sb315.critical-safety-incident-reporting` changed (il-sb315 0.3.1)
- `il-sb315.frontier-ai-framework` changed (il-sb315 0.3.1)
- `il-sb315.independent-compliance-audit` changed (il-sb315 0.3.1)
- `il-sb315.transparency-report` changed (il-sb315 0.3.1)
- `il-sb315.whistleblower-protection` changed (il-sb315 0.3.1)
- `imda-agentic.agent-identity-and-action-traceability` changed (imda-agentic 0.1.3)
- `imda-agentic.human-approval-gate-high-impact-action` changed (imda-agentic 0.1.3)
- `jp-ai-guidelines.transparency-accountability` changed (jp-ai-guidelines 0.1.3)
- `kr-ai-basic-act.ai-transparency` changed (kr-ai-basic-act 0.1.2)
- `mas-feat.accuracy-bias-validation` changed (mas-feat 0.1.2)
- `mas-feat.external-review-channels` changed (mas-feat 0.1.2)
- `mas-feat.fairness-justifiability` changed (mas-feat 0.1.2)
- `mas-feat.transparency-disclosure-explanation` changed (mas-feat 0.1.2)
- `md-hb1202.facial-recognition-interview-consent` changed (md-hb1202 0.1.2)
- `naic-ai-bulletin.model-validation-bias-testing` changed (naic-ai-bulletin 0.1.3)
- `naic-ai-bulletin.third-party-ai-oversight` changed (naic-ai-bulletin 0.1.3)
- `ne-lb525.conversational-ai-crisis-protocol` changed (ne-lb525 0.1.2)
- `ne-lb525.conversational-ai-disclosure` changed (ne-lb525 0.1.2)
- `nist-aml-agentic.agentic-adversarial-security` changed (nist-aml-agentic 0.1.2)
- `nist-genai-profile.content-provenance` changed (nist-genai-profile 0.1.3)
- `ny-gbl-art47.companion-not-human-notification` changed (ny-gbl-art47 0.2.1)
- `ny-raise-act.critical-safety-incident-reporting` changed (ny-raise-act 0.2.1)
- `ny-raise-act.frontier-ai-framework` changed (ny-raise-act 0.2.1)
- `ny-raise-act.transparency-report` changed (ny-raise-act 0.2.1)
- `nyc-ll144.aedt-candidate-notice` changed (nyc-ll144 0.1.3)
- `nyc-ll144.bias-audit` changed (nyc-ll144 0.1.3)
- `oecd-ai.reproducible-consequential-decisions` changed (oecd-ai 0.2.1)
- `or-sb1546.ai-companion-crisis-protocol` changed (or-sb1546 0.1.2)
- `or-sb1546.ai-companion-disclosure` changed (or-sb1546 0.1.2)
- `qc-law25.automated-decision-inform-and-review` changed (qc-law25 0.1.1)
- `guardrail.agent-high-impact-action-approval` changed (recommended-guardrails 0.3.3)
- `guardrail.baseline-ai-interaction-disclosure` changed (recommended-guardrails 0.3.3)
- `guardrail.baseline-crisis-protocol` changed (recommended-guardrails 0.3.3)
- `tn-elvis-act.ai-likeness-tool-authorization` changed (tn-elvis-act 0.1.2)
- `tn-sb1580.no-mental-health-professional-representation` changed (tn-sb1580 0.1.1)
- `tx-bc-503.biometric-capture-notice-and-consent` changed (tx-bc-503 0.2.1)
- `tx-bc-503.biometric-destruction` changed (tx-bc-503 0.2.1)
- `tx-sb1188.ai-created-records-practitioner-review` changed (tx-sb1188 0.3.1)
- `tx-sb1188.ai-diagnostic-use-patient-disclosure` changed (tx-sb1188 0.3.1)
- `tx-sb1188.ehr-treatment-tool-biological-sex-input` changed (tx-sb1188 0.3.1)
- `tx-traiga.government-ai-consumer-disclosure` changed (tx-traiga 0.1.2)
- `uk-ico-ai.ai-adm-safeguards-dpia` changed (uk-ico-ai 0.1.3)
- `us-ftc-impersonation.ai-agent-government-or-business-impersonation` changed (us-ftc-impersonation 0.2.1)
- `us-hipaa-privacy.ai-vendor-business-associate-contract` changed (us-hipaa-privacy 0.2.2)
- `us-hipaa-privacy.minimum-necessary-phi-to-ai` changed (us-hipaa-privacy 0.2.2)
- `us-state-privacy-admt.profiling-optout` changed (us-state-privacy-admt 0.1.3)
- `ut-ai-policy-act.genai-consumer-transaction-disclosure` changed (ut-ai-policy-act 0.1.1)
- `ut-ai-policy-act.genai-regulated-occupation-disclosure` changed (ut-ai-policy-act 0.1.1)
- `ut-hb452.in-conversation-ad-disclosure` changed (ut-hb452 0.3.1)
- `ut-hb452.mental-health-chatbot-ai-disclosure` changed (ut-hb452 0.3.1)
- `ut-hb452.mental-health-chatbot-safe-harbor-policy` changed (ut-hb452 0.3.1)
- `ut-hb452.no-ad-targeting-on-user-input` changed (ut-hb452 0.3.1)
- `ut-hb452.no-sale-or-sharing-of-user-input` changed (ut-hb452 0.3.1)
- `wa-hb2225.ai-companion-crisis-protocol` changed (wa-hb2225 0.1.2)
- `wa-hb2225.ai-companion-disclosure` changed (wa-hb2225 0.1.2)
- `wa-mhmda.biometric-data-collection-consent` changed (wa-mhmda 0.2.1)
- `who-health-ai.transparency-documentation` changed (who-health-ai 0.1.2)

## 2026.10.01 (2026-10-01)

14 added · 31 changed · 0 removed — packs: `ca-sb243`, `eu-gdpr-ai-data`, `il-bipa`, `ny-gbl-art47`, `recommended-guardrails`, `tx-bc-503`, `wa-mhmda`

- `ca-sb243.minor-suitability-disclosure` added (ca-sb243 0.3.0)
- `eu-gdpr-ai-data.ai-data-minimal-by-default` added (eu-gdpr-ai-data 0.2.0)
- `eu-gdpr-ai-data.ai-recipients-named-at-collection` added (eu-gdpr-ai-data 0.2.0)
- `eu-gdpr-ai-data.biometric-identification-explicit-consent` added (eu-gdpr-ai-data 0.2.0)
- `eu-gdpr-ai-data.erasure-reaches-ai-data-stores` added (eu-gdpr-ai-data 0.2.0)
- `eu-gdpr-ai-data.minimise-personal-data-sent-to-ai` added (eu-gdpr-ai-data 0.2.0)
- `il-bipa.biometric-disclosure-consent` added (il-bipa 0.2.0)
- `il-bipa.biometric-notice-and-written-release` added (il-bipa 0.2.0)
- `il-bipa.biometric-retention-and-destruction` added (il-bipa 0.2.0)
- `ny-gbl-art47.companion-crisis-protocol` added (ny-gbl-art47 0.2.0)
- `ny-gbl-art47.companion-not-human-notification` added (ny-gbl-art47 0.2.0)
- `guardrail.agent-ai-generated-code-provenance` changed (recommended-guardrails 0.3.2)
- `guardrail.agent-component-provenance` changed (recommended-guardrails 0.3.2)
- `guardrail.agent-egress-and-environment-boundary` changed (recommended-guardrails 0.3.2)
- `guardrail.agent-high-impact-action-approval` changed (recommended-guardrails 0.3.2)
- `guardrail.agent-identity-and-action-traceability` changed (recommended-guardrails 0.3.2)
- `guardrail.agent-incident-detection-and-disclosure` changed (recommended-guardrails 0.3.2)
- `guardrail.agent-least-privilege-tool-scope` changed (recommended-guardrails 0.3.2)
- `guardrail.agent-memory-write-controls` changed (recommended-guardrails 0.3.2)
- `guardrail.agent-retrieval-respects-requester-permissions` changed (recommended-guardrails 0.3.2)
- `guardrail.agent-tool-server-authentication` changed (recommended-guardrails 0.3.2)
- `guardrail.agent-untrusted-content-isolation` changed (recommended-guardrails 0.3.2)
- `guardrail.baseline-adverse-decision-explanation` changed (recommended-guardrails 0.3.2)
- `guardrail.baseline-ai-interaction-disclosure` changed (recommended-guardrails 0.3.2)
- `guardrail.baseline-crisis-protocol` changed (recommended-guardrails 0.3.2)
- `guardrail.ethics-advice-not-tuned-for-approval` changed (recommended-guardrails 0.3.2)
- `guardrail.ethics-evaluate-proxy-features-for-disparity` changed (recommended-guardrails 0.3.2)
- `guardrail.ethics-honor-age-signals` changed (recommended-guardrails 0.3.2)
- `guardrail.ethics-no-anthropomorphic-persona-claims` changed (recommended-guardrails 0.3.2)
- `guardrail.ethics-no-engagement-maximizing-design` changed (recommended-guardrails 0.3.2)
- `guardrail.ethics-purpose-limited-training-consent` changed (recommended-guardrails 0.3.2)
- `guardrail.ethics-substantiated-capability-claims` changed (recommended-guardrails 0.3.2)
- `guardrail.opint-bounded-spend-and-usage` changed (recommended-guardrails 0.3.2)
- `guardrail.opint-guards-fail-closed` changed (recommended-guardrails 0.3.2)
- `guardrail.opint-reevaluate-on-model-change` changed (recommended-guardrails 0.3.2)
- `guardrail.opint-safeguards-survive-long-context` changed (recommended-guardrails 0.3.2)
- `guardrail.opint-scoped-response-cache` changed (recommended-guardrails 0.3.2)
- `guardrail.output-confabulation-controls` changed (recommended-guardrails 0.3.2)
- `guardrail.output-decision-reproducibility-record` changed (recommended-guardrails 0.3.2)
- `guardrail.output-pii-leakage-screening` changed (recommended-guardrails 0.3.2)
- `guardrail.review-reversal-rate-monitoring` changed (recommended-guardrails 0.3.2)
- `guardrail.review-substantive-human-review` changed (recommended-guardrails 0.3.2)
- `tx-bc-503.biometric-capture-notice-and-consent` added (tx-bc-503 0.2.0)
- `tx-bc-503.biometric-destruction` added (tx-bc-503 0.2.0)
- `wa-mhmda.biometric-data-collection-consent` added (wa-mhmda 0.2.0)

## 2026.09.30 (2026-09-30)

3 added · 34 changed · 0 removed — packs: `ca-cmia`, `il-sb315`, `recommended-guardrails`, `tx-sb1188`, `us-hipaa-privacy`, `ut-hb452`

- `ca-cmia.medical-information-to-ai-vendor` changed (ca-cmia 0.2.1)
- `il-sb315.independent-compliance-audit` added (il-sb315 0.3.0)
- `il-sb315.frontier-ai-framework` changed (il-sb315 0.3.0)
- `guardrail.agent-ai-generated-code-provenance` changed (recommended-guardrails 0.3.1)
- `guardrail.agent-component-provenance` changed (recommended-guardrails 0.3.1)
- `guardrail.agent-egress-and-environment-boundary` changed (recommended-guardrails 0.3.1)
- `guardrail.agent-high-impact-action-approval` changed (recommended-guardrails 0.3.1)
- `guardrail.agent-identity-and-action-traceability` changed (recommended-guardrails 0.3.1)
- `guardrail.agent-incident-detection-and-disclosure` changed (recommended-guardrails 0.3.1)
- `guardrail.agent-least-privilege-tool-scope` changed (recommended-guardrails 0.3.1)
- `guardrail.agent-memory-write-controls` changed (recommended-guardrails 0.3.1)
- `guardrail.agent-retrieval-respects-requester-permissions` changed (recommended-guardrails 0.3.1)
- `guardrail.agent-tool-server-authentication` changed (recommended-guardrails 0.3.1)
- `guardrail.agent-untrusted-content-isolation` changed (recommended-guardrails 0.3.1)
- `guardrail.baseline-adverse-decision-explanation` changed (recommended-guardrails 0.3.1)
- `guardrail.baseline-ai-interaction-disclosure` changed (recommended-guardrails 0.3.1)
- `guardrail.baseline-crisis-protocol` changed (recommended-guardrails 0.3.1)
- `guardrail.ethics-advice-not-tuned-for-approval` changed (recommended-guardrails 0.3.1)
- `guardrail.ethics-evaluate-proxy-features-for-disparity` changed (recommended-guardrails 0.3.1)
- `guardrail.ethics-honor-age-signals` changed (recommended-guardrails 0.3.1)
- `guardrail.ethics-no-anthropomorphic-persona-claims` changed (recommended-guardrails 0.3.1)
- `guardrail.ethics-no-engagement-maximizing-design` changed (recommended-guardrails 0.3.1)
- `guardrail.ethics-purpose-limited-training-consent` changed (recommended-guardrails 0.3.1)
- `guardrail.ethics-substantiated-capability-claims` changed (recommended-guardrails 0.3.1)
- `guardrail.opint-bounded-spend-and-usage` changed (recommended-guardrails 0.3.1)
- `guardrail.opint-guards-fail-closed` changed (recommended-guardrails 0.3.1)
- `guardrail.opint-reevaluate-on-model-change` changed (recommended-guardrails 0.3.1)
- `guardrail.opint-safeguards-survive-long-context` changed (recommended-guardrails 0.3.1)
- `guardrail.opint-scoped-response-cache` changed (recommended-guardrails 0.3.1)
- `guardrail.output-confabulation-controls` changed (recommended-guardrails 0.3.1)
- `guardrail.output-decision-reproducibility-record` changed (recommended-guardrails 0.3.1)
- `guardrail.output-pii-leakage-screening` changed (recommended-guardrails 0.3.1)
- `guardrail.review-reversal-rate-monitoring` changed (recommended-guardrails 0.3.1)
- `guardrail.review-substantive-human-review` changed (recommended-guardrails 0.3.1)
- `tx-sb1188.ehr-treatment-tool-biological-sex-input` added (tx-sb1188 0.3.0)
- `us-hipaa-privacy.minimum-necessary-phi-to-ai` changed (us-hipaa-privacy 0.2.1)
- `ut-hb452.mental-health-chatbot-safe-harbor-policy` added (ut-hb452 0.3.0)

## 2026.09.29.2 (2026-09-29)

2 added · 29 changed · 0 removed — packs: `recommended-guardrails`

- `guardrail.ethics-evaluate-proxy-features-for-disparity` added (recommended-guardrails 0.3.0)
- `guardrail.ethics-no-anthropomorphic-persona-claims` added (recommended-guardrails 0.3.0)
- `guardrail.agent-ai-generated-code-provenance` changed (recommended-guardrails 0.3.0)
- `guardrail.agent-component-provenance` changed (recommended-guardrails 0.3.0)
- `guardrail.agent-egress-and-environment-boundary` changed (recommended-guardrails 0.3.0)
- `guardrail.agent-high-impact-action-approval` changed (recommended-guardrails 0.3.0)
- `guardrail.agent-identity-and-action-traceability` changed (recommended-guardrails 0.3.0)
- `guardrail.agent-incident-detection-and-disclosure` changed (recommended-guardrails 0.3.0)
- `guardrail.agent-least-privilege-tool-scope` changed (recommended-guardrails 0.3.0)
- `guardrail.agent-memory-write-controls` changed (recommended-guardrails 0.3.0)
- `guardrail.agent-retrieval-respects-requester-permissions` changed (recommended-guardrails 0.3.0)
- `guardrail.agent-tool-server-authentication` changed (recommended-guardrails 0.3.0)
- `guardrail.agent-untrusted-content-isolation` changed (recommended-guardrails 0.3.0)
- `guardrail.baseline-adverse-decision-explanation` changed (recommended-guardrails 0.3.0)
- `guardrail.baseline-ai-interaction-disclosure` changed (recommended-guardrails 0.3.0)
- `guardrail.baseline-crisis-protocol` changed (recommended-guardrails 0.3.0)
- `guardrail.ethics-advice-not-tuned-for-approval` changed (recommended-guardrails 0.3.0)
- `guardrail.ethics-honor-age-signals` changed (recommended-guardrails 0.3.0)
- `guardrail.ethics-no-engagement-maximizing-design` changed (recommended-guardrails 0.3.0)
- `guardrail.ethics-purpose-limited-training-consent` changed (recommended-guardrails 0.3.0)
- `guardrail.ethics-substantiated-capability-claims` changed (recommended-guardrails 0.3.0)
- `guardrail.opint-bounded-spend-and-usage` changed (recommended-guardrails 0.3.0)
- `guardrail.opint-guards-fail-closed` changed (recommended-guardrails 0.3.0)
- `guardrail.opint-reevaluate-on-model-change` changed (recommended-guardrails 0.3.0)
- `guardrail.opint-safeguards-survive-long-context` changed (recommended-guardrails 0.3.0)
- `guardrail.opint-scoped-response-cache` changed (recommended-guardrails 0.3.0)
- `guardrail.output-confabulation-controls` changed (recommended-guardrails 0.3.0)
- `guardrail.output-decision-reproducibility-record` changed (recommended-guardrails 0.3.0)
- `guardrail.output-pii-leakage-screening` changed (recommended-guardrails 0.3.0)
- `guardrail.review-reversal-rate-monitoring` changed (recommended-guardrails 0.3.0)
- `guardrail.review-substantive-human-review` changed (recommended-guardrails 0.3.0)

## 2026.09.29 (2026-09-29)

5 added · 22 changed · 0 removed — packs: `ca-civ-3344`, `ca-cmia`, `eu-altai`, `finra-genai`, `imda-agentic`, `jp-ai-guidelines`, `mas-feat`, `naic-ai-bulletin`, `nist-ai-rmf`, `nist-genai-profile`, `nyc-ll144`, `uk-ico-ai`, `unesco-ai-ethics`, `us-ftc-impersonation`, `us-hipaa-privacy`, `us-state-privacy-admt`, `who-health-ai`

- `ca-civ-3344.ai-likeness-commercial-use-consent` added (ca-civ-3344 0.2.0)
- `ca-cmia.medical-information-to-ai-vendor` added (ca-cmia 0.2.0)
- `eu-altai.human-oversight` changed (eu-altai 0.1.2)
- `eu-altai.transparency-traceability` changed (eu-altai 0.1.2)
- `finra-genai.agentic-supervision` changed (finra-genai 0.1.2)
- `finra-genai.genai-monitoring-logging` changed (finra-genai 0.1.2)
- `imda-agentic.agent-identity-and-action-traceability` changed (imda-agentic 0.1.2)
- `imda-agentic.mgf-human-involvement-explainability` changed (imda-agentic 0.1.2)
- `jp-ai-guidelines.transparency-accountability` changed (jp-ai-guidelines 0.1.2)
- `mas-feat.accuracy-bias-validation` changed (mas-feat 0.1.1)
- `mas-feat.external-review-channels` changed (mas-feat 0.1.1)
- `mas-feat.fairness-justifiability` changed (mas-feat 0.1.1)
- `mas-feat.transparency-disclosure-explanation` changed (mas-feat 0.1.1)
- `naic-ai-bulletin.ais-program` changed (naic-ai-bulletin 0.1.2)
- `naic-ai-bulletin.model-validation-bias-testing` changed (naic-ai-bulletin 0.1.2)
- `nist-ai-rmf.manage-4-1-oversight` changed (nist-ai-rmf 0.1.1)
- `nist-genai-profile.confabulation-controls` changed (nist-genai-profile 0.1.2)
- `nist-genai-profile.content-provenance` changed (nist-genai-profile 0.1.2)
- `nyc-ll144.aedt-candidate-notice` changed (nyc-ll144 0.1.2)
- `nyc-ll144.bias-audit` changed (nyc-ll144 0.1.2)
- `uk-ico-ai.ai-adm-safeguards-dpia` changed (uk-ico-ai 0.1.2)
- `unesco-ai-ethics.human-oversight-overturn` changed (unesco-ai-ethics 0.1.2)
- `us-ftc-impersonation.ai-agent-government-or-business-impersonation` added (us-ftc-impersonation 0.2.0)
- `us-hipaa-privacy.ai-vendor-business-associate-contract` added (us-hipaa-privacy 0.2.0)
- `us-hipaa-privacy.minimum-necessary-phi-to-ai` added (us-hipaa-privacy 0.2.0)
- `us-state-privacy-admt.profiling-optout` changed (us-state-privacy-admt 0.1.2)
- `who-health-ai.clinician-oversight-accountability` changed (who-health-ai 0.1.1)

## 2026.09.28 (2026-09-28)

30 added · 93 changed · 0 removed — packs: `ai-security`, `ca-ab1836`, `ca-ab2013`, `ca-ab853`, `ca-sb243`, `ca-sb53`, `ca-sb942`, `ccpa-admt`, `cn-algo-recommendation`, `cn-deep-synthesis`, `cn-genai-interim`, `cn-genai-labeling`, `co-sb21-169`, `co-sb26-189`, `coe-ai-convention`, `ct-cart`, `eu-ai-act`, `eu-altai`, `eu-gpai-cop`, `finra-genai`, `il-ai-video-interview`, `il-hb1806`, `il-sb315`, `imda-agentic`, `jp-ai-guidelines`, `kr-ai-basic-act`, `md-hb1202`, `naic-ai-bulletin`, `ne-lb525`, `nist-aml-agentic`, `nist-genai-profile`, `ny-raise-act`, `nyc-ll144`, `oecd-ai`, `or-sb1546`, `recommended-guardrails`, `tn-elvis-act`, `tx-sb1188`, `tx-traiga`, `uk-ico-ai`, `unesco-ai-ethics`, `us-state-privacy-admt`, `ut-hb452`, `wa-hb2225`

- `ai-security.untrusted-input-to-agent-instructions-or-tools` changed (ai-security 0.1.1)
- `ca-ab1836.digital-replica-deceased-consent` changed (ca-ab1836 0.1.1)
- `ca-ab2013.training-data-disclosure` changed (ca-ab2013 0.1.1)
- `ca-ab853.genai-hosting-platform-gate` changed (ca-ab853 0.1.1)
- `ca-ab853.platform-provenance-detection-and-display` changed (ca-ab853 0.1.1)
- `ca-sb243.known-minor-safeguards` added (ca-sb243 0.2.0)
- `ca-sb53.frontier-ai-framework` changed (ca-sb53 0.1.1)
- `ca-sb53.frontier-whistleblower-protection` changed (ca-sb53 0.1.1)
- `ca-sb942.provenance-disclosure` changed (ca-sb942 0.1.1)
- `ccpa-admt.access-explanation` changed (ccpa-admt 0.1.1)
- `ccpa-admt.opt-out` changed (ccpa-admt 0.1.1)
- `ccpa-admt.pre-use-notice` changed (ccpa-admt 0.1.1)
- `cn-algo-recommendation.minor-protection` added (cn-algo-recommendation 0.2.0)
- `cn-algo-recommendation.no-addiction-inducing-models` added (cn-algo-recommendation 0.2.0)
- `cn-algo-recommendation.recommendation-optout` changed (cn-algo-recommendation 0.2.0)
- `cn-deep-synthesis.biometric-editing-consent` changed (cn-deep-synthesis 0.1.1)
- `cn-deep-synthesis.conspicuous-label` changed (cn-deep-synthesis 0.1.1)
- `cn-genai-interim.filing-and-security-assessment` changed (cn-genai-interim 0.1.1)
- `cn-genai-interim.training-data-legitimacy` changed (cn-genai-interim 0.1.1)
- `cn-genai-labeling.dual-label-genai-content` changed (cn-genai-labeling 0.1.1)
- `co-sb21-169.insurance-ecdis-unfair-discrimination` changed (co-sb21-169 0.1.1)
- `co-sb26-189.adverse-outcome-explanation` changed (co-sb26-189 0.1.1)
- `co-sb26-189.consumer-notice-consequential-decision` changed (co-sb26-189 0.1.1)
- `co-sb26-189.developer-documentation-to-deployers` changed (co-sb26-189 0.1.1)
- `co-sb26-189.human-review-and-data-correction` changed (co-sb26-189 0.1.1)
- `coe-ai-convention.ai-interaction-notification` changed (coe-ai-convention 0.1.1)
- `coe-ai-convention.documentation-and-contest` changed (coe-ai-convention 0.1.1)
- `ct-cart.aedt-predecision-notice` changed (ct-cart 0.1.1)
- `ct-cart.ai-companion-crisis-protocol` changed (ct-cart 0.1.1)
- `ct-cart.synthetic-content-provenance` changed (ct-cart 0.1.1)
- `eu-ai-act.art10.data-governance-bias` changed (eu-ai-act 0.1.1)
- `eu-ai-act.art12.record-keeping` changed (eu-ai-act 0.1.1)
- `eu-ai-act.art14.human-oversight` changed (eu-ai-act 0.1.1)
- `eu-ai-act.art15.accuracy-robustness-cybersecurity` changed (eu-ai-act 0.1.1)
- `eu-ai-act.art26.inform-affected-persons` changed (eu-ai-act 0.1.1)
- `eu-ai-act.art5.nonconsensual-intimate-and-csam` changed (eu-ai-act 0.1.1)
- `eu-ai-act.art50.emotion-biometric-notice` changed (eu-ai-act 0.1.1)
- `eu-ai-act.art50.public-interest-text-disclosure` changed (eu-ai-act 0.1.1)
- `eu-ai-act.art86.right-to-explanation` changed (eu-ai-act 0.1.1)
- `eu-altai.human-oversight` changed (eu-altai 0.1.1)
- `eu-altai.non-discrimination-fairness` changed (eu-altai 0.1.1)
- `eu-altai.transparency-traceability` changed (eu-altai 0.1.1)
- `eu-gpai-cop.model-documentation` changed (eu-gpai-cop 0.1.1)
- `finra-genai.agentic-supervision` changed (finra-genai 0.1.1)
- `finra-genai.genai-monitoring-logging` changed (finra-genai 0.1.1)
- `il-ai-video-interview.video-interview-ai-consent` changed (il-ai-video-interview 0.1.1)
- `il-hb1806.ai-session-recording-notice-consent` added (il-hb1806 0.2.0)
- `il-hb1806.ai-therapy-role-limits` added (il-hb1806 0.2.0)
- `il-hb1806.no-ai-emotion-detection-in-therapy` added (il-hb1806 0.2.0)
- `il-hb1806.no-unlicensed-ai-therapy` added (il-hb1806 0.2.0)
- `il-sb315.critical-safety-incident-reporting` added (il-sb315 0.2.0)
- `il-sb315.frontier-ai-framework` added (il-sb315 0.2.0)
- `il-sb315.transparency-report` added (il-sb315 0.2.0)
- `il-sb315.whistleblower-protection` added (il-sb315 0.2.0)
- `imda-agentic.agent-identity-and-action-traceability` changed (imda-agentic 0.1.1)
- `imda-agentic.human-approval-gate-high-impact-action` changed (imda-agentic 0.1.1)
- `imda-agentic.mgf-human-involvement-explainability` changed (imda-agentic 0.1.1)
- `jp-ai-guidelines.transparency-accountability` changed (jp-ai-guidelines 0.1.1)
- `kr-ai-basic-act.ai-transparency` changed (kr-ai-basic-act 0.1.1)
- `kr-ai-basic-act.high-impact-ai-responsibilities` changed (kr-ai-basic-act 0.1.1)
- `md-hb1202.facial-recognition-interview-consent` changed (md-hb1202 0.1.1)
- `naic-ai-bulletin.ais-program` changed (naic-ai-bulletin 0.1.1)
- `naic-ai-bulletin.model-validation-bias-testing` changed (naic-ai-bulletin 0.1.1)
- `naic-ai-bulletin.third-party-ai-oversight` changed (naic-ai-bulletin 0.1.1)
- `ne-lb525.conversational-ai-crisis-protocol` changed (ne-lb525 0.1.1)
- `ne-lb525.conversational-ai-disclosure` changed (ne-lb525 0.1.1)
- `ne-lb525.no-mental-health-care-representation` changed (ne-lb525 0.1.1)
- `nist-aml-agentic.agentic-adversarial-security` changed (nist-aml-agentic 0.1.1)
- `nist-genai-profile.confabulation-controls` changed (nist-genai-profile 0.1.1)
- `nist-genai-profile.content-provenance` changed (nist-genai-profile 0.1.1)
- `nist-genai-profile.output-pii-leakage-detection` changed (nist-genai-profile 0.1.1)
- `nist-genai-profile.value-chain-provenance` changed (nist-genai-profile 0.1.1)
- `ny-raise-act.critical-safety-incident-reporting` added (ny-raise-act 0.2.0)
- `ny-raise-act.frontier-ai-framework` added (ny-raise-act 0.2.0)
- `ny-raise-act.transparency-report` added (ny-raise-act 0.2.0)
- `nyc-ll144.aedt-candidate-notice` changed (nyc-ll144 0.1.1)
- `nyc-ll144.bias-audit` changed (nyc-ll144 0.1.1)
- `oecd-ai.capabilities-and-limitations` added (oecd-ai 0.2.0)
- `or-sb1546.ai-companion-crisis-protocol` changed (or-sb1546 0.1.1)
- `or-sb1546.ai-companion-disclosure` changed (or-sb1546 0.1.1)
- `guardrail.agent-ai-generated-code-provenance` added (recommended-guardrails 0.2.0)
- `guardrail.agent-memory-write-controls` added (recommended-guardrails 0.2.0)
- `guardrail.agent-retrieval-respects-requester-permissions` added (recommended-guardrails 0.2.0)
- `guardrail.agent-tool-server-authentication` added (recommended-guardrails 0.2.0)
- `guardrail.ethics-advice-not-tuned-for-approval` added (recommended-guardrails 0.2.0)
- `guardrail.ethics-honor-age-signals` added (recommended-guardrails 0.2.0)
- `guardrail.ethics-no-engagement-maximizing-design` added (recommended-guardrails 0.2.0)
- `guardrail.ethics-purpose-limited-training-consent` added (recommended-guardrails 0.2.0)
- `guardrail.ethics-substantiated-capability-claims` added (recommended-guardrails 0.2.0)
- `guardrail.agent-component-provenance` changed (recommended-guardrails 0.2.0)
- `guardrail.agent-egress-and-environment-boundary` changed (recommended-guardrails 0.2.0)
- `guardrail.agent-high-impact-action-approval` changed (recommended-guardrails 0.2.0)
- `guardrail.agent-identity-and-action-traceability` changed (recommended-guardrails 0.2.0)
- `guardrail.agent-incident-detection-and-disclosure` changed (recommended-guardrails 0.2.0)
- `guardrail.agent-least-privilege-tool-scope` changed (recommended-guardrails 0.2.0)
- `guardrail.agent-untrusted-content-isolation` changed (recommended-guardrails 0.2.0)
- `guardrail.baseline-adverse-decision-explanation` changed (recommended-guardrails 0.2.0)
- `guardrail.baseline-ai-interaction-disclosure` changed (recommended-guardrails 0.2.0)
- `guardrail.baseline-crisis-protocol` changed (recommended-guardrails 0.2.0)
- `guardrail.opint-bounded-spend-and-usage` changed (recommended-guardrails 0.2.0)
- `guardrail.opint-guards-fail-closed` changed (recommended-guardrails 0.2.0)
- `guardrail.opint-reevaluate-on-model-change` changed (recommended-guardrails 0.2.0)
- `guardrail.opint-safeguards-survive-long-context` changed (recommended-guardrails 0.2.0)
- `guardrail.opint-scoped-response-cache` changed (recommended-guardrails 0.2.0)
- `guardrail.output-confabulation-controls` changed (recommended-guardrails 0.2.0)
- `guardrail.output-decision-reproducibility-record` changed (recommended-guardrails 0.2.0)
- `guardrail.output-pii-leakage-screening` changed (recommended-guardrails 0.2.0)
- `guardrail.review-reversal-rate-monitoring` changed (recommended-guardrails 0.2.0)
- `guardrail.review-substantive-human-review` changed (recommended-guardrails 0.2.0)
- `tn-elvis-act.ai-likeness-tool-authorization` changed (tn-elvis-act 0.1.1)
- `tx-sb1188.ai-created-records-practitioner-review` added (tx-sb1188 0.2.0)
- `tx-sb1188.ai-diagnostic-use-patient-disclosure` added (tx-sb1188 0.2.0)
- `tx-traiga.no-ai-designed-to-incite-harm` changed (tx-traiga 0.1.1)
- `uk-ico-ai.ai-adm-safeguards-dpia` changed (uk-ico-ai 0.1.1)
- `unesco-ai-ethics.ethical-impact-assessment` changed (unesco-ai-ethics 0.1.1)
- `unesco-ai-ethics.human-oversight-overturn` changed (unesco-ai-ethics 0.1.1)
- `us-state-privacy-admt.profiling-optout` changed (us-state-privacy-admt 0.1.1)
- `ut-hb452.in-conversation-ad-disclosure` added (ut-hb452 0.2.0)
- `ut-hb452.mental-health-chatbot-ai-disclosure` added (ut-hb452 0.2.0)
- `ut-hb452.no-ad-targeting-on-user-input` added (ut-hb452 0.2.0)
- `ut-hb452.no-sale-or-sharing-of-user-input` added (ut-hb452 0.2.0)
- `wa-hb2225.ai-companion-crisis-protocol` changed (wa-hb2225 0.1.1)
- `wa-hb2225.ai-companion-disclosure` changed (wa-hb2225 0.1.1)

## 2026.09.27 (2026-09-27)

Initial baseline: every rule's content hash recorded; later releases list changes against it.