Changes

# TwinEthos data releases

_Generated by `tools/release.py`. Informational data only — not legal advice. No attorney-client relationship is created. No rule has been reviewed by a lawyer unless its provenance_status is legal_reviewed. See TERMS.md._

## 2026.10.05 (2026-10-05)

53 added · 54 changed · 0 removed — packs: `ar-hb1071`, `au-arm-codes`, `ca-ab1008`, `co-hb26-1139`, `co-hb26-1195`, `hi-hb2137`, `mitre-atlas`, `mt-hb513`, `nh-hb143`, `nist-ai-rmf`, `nist-aml-agentic`, `nist-genai-profile`, `nv-ab325`, `ny-s8391`, `or-hb2748`, `recommended-guardrails`, `ri-hb7538`, `sa-pdpl-regs`, `tx-hb581`, `us-cfpb-reg-b-adverse-action`, `us-cms-ma-medical-necessity`, `us-fcc-tcpa-ai-voice`, `us-ftc-reviews-rule`, `us-hhs-1557-decision-support-tools`, `us-onc-hti1-dsi`, `ut-hb276`, `ut-sb271`, `wa-hb1170`

Corpus audit (`docs/AUDIT-STANDARD.md`, as of 2026-10-04): 99.8% of 7962 checks pass; 1017 of 1029 artefacts audit-grade.

- `ar-hb1071.ai-likeness-commercial-use-consent` added (ar-hb1071 0.2.0)
- `au-arm-codes.genai-age-assurance-before-restricted-generation` changed (au-arm-codes 0.2.1)
- `au-arm-codes.genai-restricted-output-prevention-and-model-testing` changed (au-arm-codes 0.2.1)
- `ca-ab1008.consumer-requests-reach-ai-systems` added (ca-ab1008 0.2.0)
- `co-hb26-1139.ai-use-disclosure-to-regulator` added (co-hb26-1139 0.2.0)
- `co-hb26-1139.audit-logs-and-model-governance-records` added (co-hb26-1139 0.2.0)
- `co-hb26-1139.clinician-approves-medical-necessity-denial` added (co-hb26-1139 0.2.0)
- `co-hb26-1139.fair-application-and-periodic-review` added (co-hb26-1139 0.2.0)
- `co-hb26-1139.individual-clinical-data-basis` added (co-hb26-1139 0.2.0)
- `co-hb26-1139.patient-data-purpose-limit` added (co-hb26-1139 0.2.0)
- `co-hb26-1195.ai-privacy-compliance` changed (co-hb26-1195 0.2.1)
- `co-hb26-1195.ai-session-recording-notice-consent` changed (co-hb26-1195 0.2.1)
- `co-hb26-1195.no-ai-psychotherapy-without-synchronous-therapist` changed (co-hb26-1195 0.2.1)
- `co-hb26-1195.no-implied-therapist-client-confidentiality` changed (co-hb26-1195 0.2.1)
- `co-hb26-1195.no-psychotherapist-equivalence-claims` changed (co-hb26-1195 0.2.1)
- `co-hb26-1195.no-psychotherapy-service-representation` changed (co-hb26-1195 0.2.1)
- `co-hb26-1195.therapist-review-of-ai-plans-and-outputs` changed (co-hb26-1195 0.2.1)
- `hi-hb2137.realistic-digital-imitation-consent` added (hi-hb2137 0.2.0)
- `mitre-atlas.agent-and-tool-permissions` added (mitre-atlas 0.2.0)
- `mitre-atlas.agent-component-input-output-validation` added (mitre-atlas 0.2.0)
- `mitre-atlas.ai-red-team` added (mitre-atlas 0.2.0)
- `mitre-atlas.ai-telemetry-logging` added (mitre-atlas 0.2.0)
- `mitre-atlas.authority-expansion-and-scope-drift` added (mitre-atlas 0.2.0)
- `mitre-atlas.human-in-the-loop-for-agent-actions` added (mitre-atlas 0.2.0)
- `mitre-atlas.limit-workload-resource-consumption` added (mitre-atlas 0.2.0)
- `mitre-atlas.memory-hardening` added (mitre-atlas 0.2.0)
- `mitre-atlas.restrict-tool-invocation-on-untrusted-data` added (mitre-atlas 0.2.0)
- `mt-hb513.digital-depiction-commercial-use-consent` added (mt-hb513 0.2.0)
- `mt-hb513.likeness-tool-distribution` added (mt-hb513 0.2.0)
- `nh-hb143.no-ai-chat-solicitation-of-children` added (nh-hb143 0.2.0)
- `nist-ai-rmf.map-3-5-human-oversight` added (nist-ai-rmf 0.2.0)
- `nist-aml-agentic.knowledge-base-poisoning` added (nist-aml-agentic 0.3.0)
- `nist-aml-agentic.output-handling-and-render-exfiltration` added (nist-aml-agentic 0.3.0)
- `nist-genai-profile.deactivation-protocols` added (nist-genai-profile 0.3.0)
- `nist-genai-profile.content-filters` changed (nist-genai-profile 0.3.0)
- `nv-ab325.utility-shutdown-decision-not-solely-ai` added (nv-ab325 0.2.0)
- `ny-s8391.deceased-performer-digital-replica-consent` added (ny-s8391 0.2.0)
- `or-hb2748.no-nursing-title-for-ai` added (or-hb2748 0.2.0)
- `guardrail.agent-ai-generated-code-provenance` changed (recommended-guardrails 0.5.3)
- `guardrail.agent-component-provenance` changed (recommended-guardrails 0.5.3)
- `guardrail.agent-egress-and-environment-boundary` changed (recommended-guardrails 0.5.3)
- `guardrail.agent-high-impact-action-approval` changed (recommended-guardrails 0.5.3)
- `guardrail.agent-identity-and-action-traceability` changed (recommended-guardrails 0.5.3)
- `guardrail.agent-incident-detection-and-disclosure` changed (recommended-guardrails 0.5.3)
- `guardrail.agent-ingest-provenance-and-sanitization` changed (recommended-guardrails 0.5.3)
- `guardrail.agent-least-privilege-tool-scope` changed (recommended-guardrails 0.5.3)
- `guardrail.agent-memory-write-controls` changed (recommended-guardrails 0.5.3)
- `guardrail.agent-retrieval-respects-requester-permissions` changed (recommended-guardrails 0.5.3)
- `guardrail.agent-tool-server-authentication` changed (recommended-guardrails 0.5.3)
- `guardrail.agent-untrusted-content-isolation` changed (recommended-guardrails 0.5.3)
- `guardrail.baseline-adverse-decision-explanation` changed (recommended-guardrails 0.5.3)
- `guardrail.baseline-ai-interaction-disclosure` changed (recommended-guardrails 0.5.3)
- `guardrail.baseline-crisis-protocol` changed (recommended-guardrails 0.5.3)
- `guardrail.ethics-advice-not-tuned-for-approval` changed (recommended-guardrails 0.5.3)
- `guardrail.ethics-conversation-content-out-of-ads-and-trackers` changed (recommended-guardrails 0.5.3)
- `guardrail.ethics-evaluate-proxy-features-for-disparity` changed (recommended-guardrails 0.5.3)
- `guardrail.ethics-honor-age-signals` changed (recommended-guardrails 0.5.3)
- `guardrail.ethics-no-anthropomorphic-persona-claims` changed (recommended-guardrails 0.5.3)
- `guardrail.ethics-no-engagement-maximizing-design` changed (recommended-guardrails 0.5.3)
- `guardrail.ethics-no-professional-credential-claims` changed (recommended-guardrails 0.5.3)
- `guardrail.ethics-no-profiling-from-inferred-emotions-or-traits` changed (recommended-guardrails 0.5.3)
- `guardrail.ethics-purpose-limited-training-consent` changed (recommended-guardrails 0.5.3)
- `guardrail.ethics-stored-content-analysis-opt-in` changed (recommended-guardrails 0.5.3)
- `guardrail.ethics-substantiated-capability-claims` changed (recommended-guardrails 0.5.3)
- `guardrail.opint-bounded-spend-and-usage` changed (recommended-guardrails 0.5.3)
- `guardrail.opint-disclosures-survive-output-limits` changed (recommended-guardrails 0.5.3)
- `guardrail.opint-fallback-keeps-guardrails` changed (recommended-guardrails 0.5.3)
- `guardrail.opint-guards-fail-closed` changed (recommended-guardrails 0.5.3)
- `guardrail.opint-idempotent-side-effecting-tools` changed (recommended-guardrails 0.5.3)
- `guardrail.opint-reevaluate-on-model-change` changed (recommended-guardrails 0.5.3)
- `guardrail.opint-safeguards-survive-long-context` changed (recommended-guardrails 0.5.3)
- `guardrail.opint-scoped-response-cache` changed (recommended-guardrails 0.5.3)
- `guardrail.opint-screen-every-item-not-a-sample` changed (recommended-guardrails 0.5.3)
- `guardrail.output-confabulation-controls` changed (recommended-guardrails 0.5.3)
- `guardrail.output-decision-reproducibility-record` changed (recommended-guardrails 0.5.3)
- `guardrail.output-pii-leakage-screening` changed (recommended-guardrails 0.5.3)
- `guardrail.review-reversal-rate-monitoring` changed (recommended-guardrails 0.5.3)
- `guardrail.review-substantive-human-review` changed (recommended-guardrails 0.5.3)
- `guardrail.sec-ai-security-telemetry` changed (recommended-guardrails 0.5.3)
- `guardrail.sec-authenticated-model-and-vector-endpoints` changed (recommended-guardrails 0.5.3)
- `guardrail.sec-face-verification-presentation-attack-detection` changed (recommended-guardrails 0.5.3)
- `guardrail.sec-no-secrets-or-access-rules-in-prompts` changed (recommended-guardrails 0.5.3)
- `ri-hb7538.ai-visit-documentation-patient-notice` added (ri-hb7538 0.2.0)
- `ri-hb7538.clinician-review-of-ai-visit-documentation` added (ri-hb7538 0.2.0)
- `sa-pdpl-regs.automated-decision-notice` added (sa-pdpl-regs 0.2.0)
- `sa-pdpl-regs.explicit-consent-for-automated-decisions` added (sa-pdpl-regs 0.2.0)
- `sa-pdpl-regs.impact-assessment-for-automated-decisions` added (sa-pdpl-regs 0.2.0)
- `tx-hb581.age-verification-for-sexual-material-tools` added (tx-hb581 0.2.0)
- `tx-hb581.source-individual-adult-and-consented` added (tx-hb581 0.2.0)
- `us-cfpb-reg-b-adverse-action.specific-principal-reasons-for-adverse-action` added (us-cfpb-reg-b-adverse-action 0.2.0)
- `us-cms-ma-medical-necessity.determination-on-individual-medical-history` added (us-cms-ma-medical-necessity 0.2.0)
- `us-cms-ma-medical-necessity.physician-reviews-adverse-medical-necessity-decision` added (us-cms-ma-medical-necessity 0.2.0)
- `us-fcc-tcpa-ai-voice.ai-voice-call-identifies-caller-and-callback-number` added (us-fcc-tcpa-ai-voice 0.2.0)
- `us-fcc-tcpa-ai-voice.ai-voice-telemarketing-automated-opt-out` added (us-fcc-tcpa-ai-voice 0.2.0)
- `us-fcc-tcpa-ai-voice.prior-express-consent-before-ai-voice-call` added (us-fcc-tcpa-ai-voice 0.2.0)
- `us-ftc-reviews-rule.no-ai-generated-fake-reviews-or-testimonials` added (us-ftc-reviews-rule 0.2.0)
- `us-hhs-1557-decision-support-tools.identify-and-mitigate-protected-attribute-inputs` added (us-hhs-1557-decision-support-tools 0.2.0)
- `us-onc-hti1-dsi.predictive-dsi-intervention-risk-management` added (us-onc-hti1-dsi 0.2.0)
- `us-onc-hti1-dsi.predictive-dsi-source-attributes` added (us-onc-hti1-dsi 0.2.0)
- `ut-hb276.capture-device-latent-disclosure` added (ut-hb276 0.2.0)
- `ut-hb276.genai-latent-disclosure` added (ut-hb276 0.2.0)
- `ut-hb276.generation-service-intimate-image-consent-system` added (ut-hb276 0.2.0)
- `ut-hb276.large-platform-provenance-detection-and-display` added (ut-hb276 0.2.0)
- `ut-sb271.commercial-use-of-identity-consent` added (ut-sb271 0.2.0)
- `ut-sb271.identity-replication-tool-distribution` added (ut-sb271 0.2.0)
- `ut-sb271.unauthorized-identity-made-available` added (ut-sb271 0.2.0)
- `wa-hb1170.genai-media-provenance-data` added (wa-hb1170 0.2.0)

## 2026.10.04.3 (2026-10-04)

37 added · 44 changed · 0 removed — packs: `ai-security`, `az-hb2175`, `ca-ab723`, `ca-sb1050`, `ca-sb524`, `ca-sb867`, `in-sb480`, `ny-gbl-396b`, `owasp-agentic-top10`, `recommended-guardrails`, `tr-ad-regulation-ai`, `us-coppa`

Corpus audit (`docs/AUDIT-STANDARD.md`, as of 2026-10-04): 99.7% of 7038 checks pass; 897 of 917 artefacts audit-grade.

- `ai-security.ai-component-inventory` added (ai-security 0.2.0)
- `ai-security.approval-for-high-impact-actions` added (ai-security 0.2.0)
- `ai-security.bounded-consumption` added (ai-security 0.2.0)
- `ai-security.ingest-provenance-and-trust-tiers` added (ai-security 0.2.0)
- `ai-security.least-privilege-agent-tools` added (ai-security 0.2.0)
- `ai-security.model-output-handling` added (ai-security 0.2.0)
- `ai-security.no-secrets-or-access-rules-in-prompts` added (ai-security 0.2.0)
- `ai-security.retrieval-enforces-requester-permissions` added (ai-security 0.2.0)
- `ai-security.screen-output-for-sensitive-data` added (ai-security 0.2.0)
- `ai-security.scrub-prompts-from-logs-and-traces` added (ai-security 0.2.0)
- `ai-security.verify-acquired-model-artifacts` added (ai-security 0.2.0)
- `ai-security.verify-claims-before-action` added (ai-security 0.2.0)
- `az-hb2175.medical-director-reviews-every-denial` added (az-hb2175 0.2.0)
- `ca-ab723.altered-listing-image-disclosure-and-original` added (ca-ab723 0.2.0)
- `ca-sb1050.synthetic-performer-ad-disclosure` added (ca-sb1050 0.2.0)
- `ca-sb524.ai-first-draft-and-audit-trail-retained` added (ca-sb524 0.2.0)
- `ca-sb524.ai-report-disclosure-and-officer-signature` added (ca-sb524 0.2.0)
- `ca-sb524.contracted-vendor-limits-on-agency-data` added (ca-sb524 0.2.0)
- `ca-sb867.no-companion-chatbot-in-toys` added (ca-sb867 0.2.0)
- `in-sb480.clinical-peer-makes-adverse-determinations` added (in-sb480 0.2.0)
- `ny-gbl-396b.synthetic-performer-ad-disclosure` added (ny-gbl-396b 0.2.0)
- `owasp-agentic-top10.authenticated-inter-agent-channels` added (owasp-agentic-top10 0.2.0)
- `owasp-agentic-top10.bounded-agent-fan-out-and-budgets` added (owasp-agentic-top10 0.2.0)
- `owasp-agentic-top10.component-provenance-and-pinning` added (owasp-agentic-top10 0.2.0)
- `owasp-agentic-top10.human-confirmation-high-impact-actions` added (owasp-agentic-top10 0.2.0)
- `owasp-agentic-top10.least-privilege-tools-and-identity` added (owasp-agentic-top10 0.2.0)
- `owasp-agentic-top10.memory-write-validation` added (owasp-agentic-top10 0.2.0)
- `owasp-agentic-top10.no-unvalidated-code-execution` added (owasp-agentic-top10 0.2.0)
- `owasp-agentic-top10.prompt-and-goal-change-control` added (owasp-agentic-top10 0.2.0)
- `owasp-agentic-top10.rogue-agent-detection-and-containment` added (owasp-agentic-top10 0.2.0)
- `owasp-agentic-top10.sandboxed-execution-and-egress` added (owasp-agentic-top10 0.2.0)
- `owasp-agentic-top10.tamper-evident-agent-action-logs` added (owasp-agentic-top10 0.2.0)
- `owasp-agentic-top10.untrusted-input-goal-hijack` added (owasp-agentic-top10 0.2.0)
- `guardrail.agent-ai-generated-code-provenance` changed (recommended-guardrails 0.5.2)
- `guardrail.agent-component-provenance` changed (recommended-guardrails 0.5.2)
- `guardrail.agent-egress-and-environment-boundary` changed (recommended-guardrails 0.5.2)
- `guardrail.agent-high-impact-action-approval` changed (recommended-guardrails 0.5.2)
- `guardrail.agent-identity-and-action-traceability` changed (recommended-guardrails 0.5.2)
- `guardrail.agent-incident-detection-and-disclosure` changed (recommended-guardrails 0.5.2)
- `guardrail.agent-ingest-provenance-and-sanitization` changed (recommended-guardrails 0.5.2)
- `guardrail.agent-least-privilege-tool-scope` changed (recommended-guardrails 0.5.2)
- `guardrail.agent-memory-write-controls` changed (recommended-guardrails 0.5.2)
- `guardrail.agent-retrieval-respects-requester-permissions` changed (recommended-guardrails 0.5.2)
- `guardrail.agent-tool-server-authentication` changed (recommended-guardrails 0.5.2)
- `guardrail.agent-untrusted-content-isolation` changed (recommended-guardrails 0.5.2)
- `guardrail.baseline-adverse-decision-explanation` changed (recommended-guardrails 0.5.2)
- `guardrail.baseline-ai-interaction-disclosure` changed (recommended-guardrails 0.5.2)
- `guardrail.baseline-crisis-protocol` changed (recommended-guardrails 0.5.2)
- `guardrail.ethics-advice-not-tuned-for-approval` changed (recommended-guardrails 0.5.2)
- `guardrail.ethics-conversation-content-out-of-ads-and-trackers` changed (recommended-guardrails 0.5.2)
- `guardrail.ethics-evaluate-proxy-features-for-disparity` changed (recommended-guardrails 0.5.2)
- `guardrail.ethics-honor-age-signals` changed (recommended-guardrails 0.5.2)
- `guardrail.ethics-no-anthropomorphic-persona-claims` changed (recommended-guardrails 0.5.2)
- `guardrail.ethics-no-engagement-maximizing-design` changed (recommended-guardrails 0.5.2)
- `guardrail.ethics-no-professional-credential-claims` changed (recommended-guardrails 0.5.2)
- `guardrail.ethics-no-profiling-from-inferred-emotions-or-traits` changed (recommended-guardrails 0.5.2)
- `guardrail.ethics-purpose-limited-training-consent` changed (recommended-guardrails 0.5.2)
- `guardrail.ethics-stored-content-analysis-opt-in` changed (recommended-guardrails 0.5.2)
- `guardrail.ethics-substantiated-capability-claims` changed (recommended-guardrails 0.5.2)
- `guardrail.opint-bounded-spend-and-usage` changed (recommended-guardrails 0.5.2)
- `guardrail.opint-disclosures-survive-output-limits` changed (recommended-guardrails 0.5.2)
- `guardrail.opint-fallback-keeps-guardrails` changed (recommended-guardrails 0.5.2)
- `guardrail.opint-guards-fail-closed` changed (recommended-guardrails 0.5.2)
- `guardrail.opint-idempotent-side-effecting-tools` changed (recommended-guardrails 0.5.2)
- `guardrail.opint-reevaluate-on-model-change` changed (recommended-guardrails 0.5.2)
- `guardrail.opint-safeguards-survive-long-context` changed (recommended-guardrails 0.5.2)
- `guardrail.opint-scoped-response-cache` changed (recommended-guardrails 0.5.2)
- `guardrail.opint-screen-every-item-not-a-sample` changed (recommended-guardrails 0.5.2)
- `guardrail.output-confabulation-controls` changed (recommended-guardrails 0.5.2)
- `guardrail.output-decision-reproducibility-record` changed (recommended-guardrails 0.5.2)
- `guardrail.output-pii-leakage-screening` changed (recommended-guardrails 0.5.2)
- `guardrail.review-reversal-rate-monitoring` changed (recommended-guardrails 0.5.2)
- `guardrail.review-substantive-human-review` changed (recommended-guardrails 0.5.2)
- `guardrail.sec-ai-security-telemetry` changed (recommended-guardrails 0.5.2)
- `guardrail.sec-authenticated-model-and-vector-endpoints` changed (recommended-guardrails 0.5.2)
- `guardrail.sec-face-verification-presentation-attack-detection` changed (recommended-guardrails 0.5.2)
- `guardrail.sec-no-secrets-or-access-rules-in-prompts` changed (recommended-guardrails 0.5.2)
- `tr-ad-regulation-ai.ai-use-and-digital-characters-in-ads-disclosed` added (tr-ad-regulation-ai 0.2.0)
- `us-coppa.child-data-retention-limit-in-ai-stores` added (us-coppa 0.2.0)
- `us-coppa.separate-consent-before-child-data-to-third-party-ai-training` added (us-coppa 0.2.0)
- `us-coppa.verifiable-parental-consent-before-ai-collection` added (us-coppa 0.2.0)

## 2026.10.04.2 (2026-10-04)

0 added · 8 changed · 0 removed — packs: `ca-sb1119`, `co-hb26-1263`, `ga-sb540`, `ia-sf2417`, `id-s1297`, `me-ld1727`, `recommended-guardrails`, `tx-sb1188`

Corpus audit (`docs/AUDIT-STANDARD.md`, as of 2026-10-04): 99.7% of 6508 checks pass; 833 of 853 artefacts audit-grade.

- `ca-sb1119.child-no-sentience-or-human-claims` changed (ca-sb1119 0.2.1)
- `co-hb26-1263.minor-emotional-dependence-safeguards` changed (co-hb26-1263 0.2.2)
- `ga-sb540.minor-no-human-claims` changed (ga-sb540 0.2.2)
- `ia-sf2417.no-human-like-statements` changed (ia-sf2417 0.2.2)
- `id-s1297.minor-no-human-like-statements` changed (id-s1297 0.2.2)
- `me-ld1727.chatbot-not-human-notice` changed (me-ld1727 0.2.3)
- `guardrail.ethics-no-anthropomorphic-persona-claims` changed (recommended-guardrails 0.5.1)
- `tx-sb1188.ehr-treatment-tool-biological-sex-input` changed (tx-sb1188 0.3.5)

## 2026.10.04 (2026-10-04)

23 added · 57 changed · 0 removed — packs: `ae-pdpl-art18`, `au-arm-codes`, `cn-gb-45438`, `cn-genai-labeling`, `co-hb26-1195`, `ec-lopdp-art20`, `ec-spdp-ai`, `ga-sb444`, `in-it-rules-sgi`, `naic-ai-bulletin`, `ng-ndpa-s37`, `nist-sp800-218a`, `qc-law25`, `recommended-guardrails`, `tx-sb1188`, `tx-sb815`, `tx-traiga`, `uz-informatization-ai`

Corpus audit (`docs/AUDIT-STANDARD.md`, as of 2026-10-03): 99.6% of 6508 checks pass; 828 of 853 artefacts audit-grade.

- `ae-pdpl-art18.object-and-human-review` added (ae-pdpl-art18 0.2.0)
- `au-arm-codes.genai-age-assurance-before-restricted-generation` added (au-arm-codes 0.2.0)
- `au-arm-codes.genai-restricted-output-prevention-and-model-testing` added (au-arm-codes 0.2.0)
- `cn-gb-45438.labelling-methods` changed (cn-gb-45438 0.2.1)
- `cn-genai-labeling.dual-label-genai-content` changed (cn-genai-labeling 0.2.1)
- `cn-genai-labeling.platform-verify-and-label` changed (cn-genai-labeling 0.2.1)
- `co-hb26-1195.ai-privacy-compliance` added (co-hb26-1195 0.2.0)
- `co-hb26-1195.ai-session-recording-notice-consent` added (co-hb26-1195 0.2.0)
- `co-hb26-1195.no-ai-psychotherapy-without-synchronous-therapist` added (co-hb26-1195 0.2.0)
- `co-hb26-1195.no-implied-therapist-client-confidentiality` added (co-hb26-1195 0.2.0)
- `co-hb26-1195.no-psychotherapist-equivalence-claims` added (co-hb26-1195 0.2.0)
- `co-hb26-1195.no-psychotherapy-service-representation` added (co-hb26-1195 0.2.0)
- `co-hb26-1195.therapist-review-of-ai-plans-and-outputs` added (co-hb26-1195 0.2.0)
- `ec-lopdp-art20.automated-decision-rights` added (ec-lopdp-art20 0.2.0)
- `ec-spdp-ai.processor-information-to-controller` added (ec-spdp-ai 0.3.0)
- `ec-spdp-ai.ai-processing-information` changed (ec-spdp-ai 0.3.0)
- `ec-spdp-ai.assessment-before-development` changed (ec-spdp-ai 0.3.0)
- `ga-sb444.clinical-peer-review-before-adverse-determination` changed (ga-sb444 0.2.1)
- `in-it-rules-sgi.ssmi-synthetic-declaration-verification-label` changed (in-it-rules-sgi 0.2.1)
- `in-it-rules-sgi.synthetic-content-label-and-provenance` changed (in-it-rules-sgi 0.2.1)
- `in-it-rules-sgi.unlawful-synthetic-content-blocked` changed (in-it-rules-sgi 0.2.1)
- `naic-ai-bulletin.ais-program` changed (naic-ai-bulletin 0.1.5)
- `naic-ai-bulletin.model-validation-bias-testing` changed (naic-ai-bulletin 0.1.5)
- `naic-ai-bulletin.third-party-ai-oversight` changed (naic-ai-bulletin 0.1.5)
- `ng-ndpa-s37.automated-decision-safeguards` added (ng-ndpa-s37 0.2.0)
- `nist-sp800-218a.rv-1-1-log-monitor-ai-io` added (nist-sp800-218a 0.3.0)
- `qc-law25.automated-decision-inform-and-review` changed (qc-law25 0.1.5)
- `guardrail.agent-ingest-provenance-and-sanitization` added (recommended-guardrails 0.5.0)
- `guardrail.opint-disclosures-survive-output-limits` added (recommended-guardrails 0.5.0)
- `guardrail.opint-fallback-keeps-guardrails` added (recommended-guardrails 0.5.0)
- `guardrail.opint-idempotent-side-effecting-tools` added (recommended-guardrails 0.5.0)
- `guardrail.opint-screen-every-item-not-a-sample` added (recommended-guardrails 0.5.0)
- `guardrail.sec-ai-security-telemetry` added (recommended-guardrails 0.5.0)
- `guardrail.sec-authenticated-model-and-vector-endpoints` added (recommended-guardrails 0.5.0)
- `guardrail.sec-face-verification-presentation-attack-detection` added (recommended-guardrails 0.5.0)
- `guardrail.sec-no-secrets-or-access-rules-in-prompts` added (recommended-guardrails 0.5.0)
- `guardrail.agent-ai-generated-code-provenance` changed (recommended-guardrails 0.5.0)
- `guardrail.agent-component-provenance` changed (recommended-guardrails 0.5.0)
- `guardrail.agent-egress-and-environment-boundary` changed (recommended-guardrails 0.5.0)
- `guardrail.agent-high-impact-action-approval` changed (recommended-guardrails 0.5.0)
- `guardrail.agent-identity-and-action-traceability` changed (recommended-guardrails 0.5.0)
- `guardrail.agent-incident-detection-and-disclosure` changed (recommended-guardrails 0.5.0)
- `guardrail.agent-least-privilege-tool-scope` changed (recommended-guardrails 0.5.0)
- `guardrail.agent-memory-write-controls` changed (recommended-guardrails 0.5.0)
- `guardrail.agent-retrieval-respects-requester-permissions` changed (recommended-guardrails 0.5.0)
- `guardrail.agent-tool-server-authentication` changed (recommended-guardrails 0.5.0)
- `guardrail.agent-untrusted-content-isolation` changed (recommended-guardrails 0.5.0)
- `guardrail.baseline-adverse-decision-explanation` changed (recommended-guardrails 0.5.0)
- `guardrail.baseline-ai-interaction-disclosure` changed (recommended-guardrails 0.5.0)
- `guardrail.baseline-crisis-protocol` changed (recommended-guardrails 0.5.0)
- `guardrail.ethics-advice-not-tuned-for-approval` changed (recommended-guardrails 0.5.0)
- `guardrail.ethics-conversation-content-out-of-ads-and-trackers` changed (recommended-guardrails 0.5.0)
- `guardrail.ethics-evaluate-proxy-features-for-disparity` changed (recommended-guardrails 0.5.0)
- `guardrail.ethics-honor-age-signals` changed (recommended-guardrails 0.5.0)
- `guardrail.ethics-no-anthropomorphic-persona-claims` changed (recommended-guardrails 0.5.0)
- `guardrail.ethics-no-engagement-maximizing-design` changed (recommended-guardrails 0.5.0)
- `guardrail.ethics-no-professional-credential-claims` changed (recommended-guardrails 0.5.0)
- `guardrail.ethics-no-profiling-from-inferred-emotions-or-traits` changed (recommended-guardrails 0.5.0)
- `guardrail.ethics-purpose-limited-training-consent` changed (recommended-guardrails 0.5.0)
- `guardrail.ethics-stored-content-analysis-opt-in` changed (recommended-guardrails 0.5.0)
- `guardrail.ethics-substantiated-capability-claims` changed (recommended-guardrails 0.5.0)
- `guardrail.opint-bounded-spend-and-usage` changed (recommended-guardrails 0.5.0)
- `guardrail.opint-guards-fail-closed` changed (recommended-guardrails 0.5.0)
- `guardrail.opint-reevaluate-on-model-change` changed (recommended-guardrails 0.5.0)
- `guardrail.opint-safeguards-survive-long-context` changed (recommended-guardrails 0.5.0)
- `guardrail.opint-scoped-response-cache` changed (recommended-guardrails 0.5.0)
- `guardrail.output-confabulation-controls` changed (recommended-guardrails 0.5.0)
- `guardrail.output-decision-reproducibility-record` changed (recommended-guardrails 0.5.0)
- `guardrail.output-pii-leakage-screening` changed (recommended-guardrails 0.5.0)
- `guardrail.review-reversal-rate-monitoring` changed (recommended-guardrails 0.5.0)
- `guardrail.review-substantive-human-review` changed (recommended-guardrails 0.5.0)
- `tx-sb1188.ai-created-records-practitioner-review` changed (tx-sb1188 0.3.4)
- `tx-sb1188.ai-diagnostic-use-patient-disclosure` changed (tx-sb1188 0.3.4)
- `tx-sb1188.ehr-treatment-tool-biological-sex-input` changed (tx-sb1188 0.3.4)
- `tx-sb815.no-automated-adverse-determination` changed (tx-sb815 0.2.1)
- `tx-traiga.government-ai-consumer-disclosure` changed (tx-traiga 0.1.5)
- `tx-traiga.government-social-scoring` changed (tx-traiga 0.1.5)
- `tx-traiga.intentional-unlawful-discrimination` changed (tx-traiga 0.1.5)
- `tx-traiga.no-ai-designed-to-incite-harm` changed (tx-traiga 0.1.5)
- `uz-informatization-ai.no-legally-significant-decision-solely-on-ai` changed (uz-informatization-ai 0.2.1)

## 2026.10.03.4 (2026-10-03)

41 added · 45 changed · 0 removed — packs: `al-sb63`, `ca-cmia`, `ca-sb1120`, `eu-gdpr-art22`, `ga-sb444`, `gr-law-5321`, `ia-hf2635`, `il-hb2472`, `md-hb820`, `me-ld2082`, `ne-lb77`, `nv-ab406`, `qc-law25`, `recommended-guardrails`, `ri-s2197`, `tx-sb815`, `uk-ico-ai`, `us-hipaa-privacy`, `us-state-privacy-admt`, `vt-h816`

Corpus audit (`docs/AUDIT-STANDARD.md`, as of 2026-10-03): 99.7% of 6167 checks pass; 790 of 809 artefacts audit-grade.

- `al-sb63.ai-use-disclosure-in-policies` added (al-sb63 0.2.0)
- `al-sb63.annual-certification-fairness-and-periodic-review` added (al-sb63 0.2.0)
- `al-sb63.individual-clinical-data-basis` added (al-sb63 0.2.0)
- `al-sb63.licensed-reviewer-decides-denial` added (al-sb63 0.2.0)
- `al-sb63.patient-data-purpose-limit` added (al-sb63 0.2.0)
- `ca-cmia.medical-information-to-ai-vendor` changed (ca-cmia 0.2.5)
- `ca-sb1120.ai-policies-disclosure-and-inspection` added (ca-sb1120 0.2.0)
- `ca-sb1120.fair-application-and-periodic-review` added (ca-sb1120 0.2.0)
- `ca-sb1120.individual-clinical-data-basis` added (ca-sb1120 0.2.0)
- `ca-sb1120.licensed-reviewer-decides-medical-necessity` added (ca-sb1120 0.2.0)
- `ca-sb1120.patient-data-purpose-limit` added (ca-sb1120 0.2.0)
- `eu-gdpr-art22.solely-automated-decision-safeguards` changed (eu-gdpr-art22 0.1.4)
- `ga-sb444.clinical-peer-review-before-adverse-determination` added (ga-sb444 0.2.0)
- `gr-law-5321.no-removal-of-ai-output-marking` added (gr-law-5321 0.2.0)
- `ia-hf2635.ai-not-sole-basis-for-denial` added (ia-hf2635 0.2.0)
- `ia-hf2635.qualified-reviewer-signed-denial` added (ia-hf2635 0.2.0)
- `il-hb2472.automated-process-criteria-and-integrity` added (il-hb2472 0.2.0)
- `il-hb2472.clinical-peer-adverse-determination` added (il-hb2472 0.2.0)
- `md-hb820.individual-clinical-data-basis` added (md-hb820 0.2.0)
- `md-hb820.no-ai-denial-provider-decides` added (md-hb820 0.2.0)
- `md-hb820.patient-data-purpose-limit` added (md-hb820 0.2.0)
- `md-hb820.quarterly-accuracy-and-fairness-review` added (md-hb820 0.2.0)
- `md-hb820.quarterly-report-ai-use-in-adverse-decisions` added (md-hb820 0.2.0)
- `md-hb820.utilization-plan-ai-policies-and-inspection` added (md-hb820 0.2.0)
- `me-ld2082.ai-privacy-compliance` added (me-ld2082 0.2.0)
- `me-ld2082.ai-supplementary-support-notice-consent` added (me-ld2082 0.2.0)
- `me-ld2082.ai-therapy-role-limits` added (me-ld2082 0.2.0)
- `me-ld2082.no-unlicensed-ai-therapy` added (me-ld2082 0.2.0)
- `ne-lb77.ai-not-sole-basis-physician-decides` added (ne-lb77 0.2.0)
- `ne-lb77.ai-use-disclosure` added (ne-lb77 0.2.0)
- `nv-ab406.no-ai-programmed-to-practice-mental-health-care` added (nv-ab406 0.2.0)
- `nv-ab406.no-ai-school-mental-health-functions` added (nv-ab406 0.2.0)
- `nv-ab406.no-mental-health-care-representation` added (nv-ab406 0.2.0)
- `nv-ab406.provider-ai-administrative-support-only` added (nv-ab406 0.2.0)
- `nv-ab406.provider-ai-privacy-compliance` added (nv-ab406 0.2.0)
- `nv-ab406.provider-review-of-ai-records` added (nv-ab406 0.2.0)
- `qc-law25.automated-decision-inform-and-review` changed (qc-law25 0.1.4)
- `guardrail.agent-ai-generated-code-provenance` changed (recommended-guardrails 0.4.5)
- `guardrail.agent-component-provenance` changed (recommended-guardrails 0.4.5)
- `guardrail.agent-egress-and-environment-boundary` changed (recommended-guardrails 0.4.5)
- `guardrail.agent-high-impact-action-approval` changed (recommended-guardrails 0.4.5)
- `guardrail.agent-identity-and-action-traceability` changed (recommended-guardrails 0.4.5)
- `guardrail.agent-incident-detection-and-disclosure` changed (recommended-guardrails 0.4.5)
- `guardrail.agent-least-privilege-tool-scope` changed (recommended-guardrails 0.4.5)
- `guardrail.agent-memory-write-controls` changed (recommended-guardrails 0.4.5)
- `guardrail.agent-retrieval-respects-requester-permissions` changed (recommended-guardrails 0.4.5)
- `guardrail.agent-tool-server-authentication` changed (recommended-guardrails 0.4.5)
- `guardrail.agent-untrusted-content-isolation` changed (recommended-guardrails 0.4.5)
- `guardrail.baseline-adverse-decision-explanation` changed (recommended-guardrails 0.4.5)
- `guardrail.baseline-ai-interaction-disclosure` changed (recommended-guardrails 0.4.5)
- `guardrail.baseline-crisis-protocol` changed (recommended-guardrails 0.4.5)
- `guardrail.ethics-advice-not-tuned-for-approval` changed (recommended-guardrails 0.4.5)
- `guardrail.ethics-conversation-content-out-of-ads-and-trackers` changed (recommended-guardrails 0.4.5)
- `guardrail.ethics-evaluate-proxy-features-for-disparity` changed (recommended-guardrails 0.4.5)
- `guardrail.ethics-honor-age-signals` changed (recommended-guardrails 0.4.5)
- `guardrail.ethics-no-anthropomorphic-persona-claims` changed (recommended-guardrails 0.4.5)
- `guardrail.ethics-no-engagement-maximizing-design` changed (recommended-guardrails 0.4.5)
- `guardrail.ethics-no-professional-credential-claims` changed (recommended-guardrails 0.4.5)
- `guardrail.ethics-no-profiling-from-inferred-emotions-or-traits` changed (recommended-guardrails 0.4.5)
- `guardrail.ethics-purpose-limited-training-consent` changed (recommended-guardrails 0.4.5)
- `guardrail.ethics-stored-content-analysis-opt-in` changed (recommended-guardrails 0.4.5)
- `guardrail.ethics-substantiated-capability-claims` changed (recommended-guardrails 0.4.5)
- `guardrail.opint-bounded-spend-and-usage` changed (recommended-guardrails 0.4.5)
- `guardrail.opint-guards-fail-closed` changed (recommended-guardrails 0.4.5)
- `guardrail.opint-reevaluate-on-model-change` changed (recommended-guardrails 0.4.5)
- `guardrail.opint-safeguards-survive-long-context` changed (recommended-guardrails 0.4.5)
- `guardrail.opint-scoped-response-cache` changed (recommended-guardrails 0.4.5)
- `guardrail.output-confabulation-controls` changed (recommended-guardrails 0.4.5)
- `guardrail.output-decision-reproducibility-record` changed (recommended-guardrails 0.4.5)
- `guardrail.output-pii-leakage-screening` changed (recommended-guardrails 0.4.5)
- `guardrail.review-reversal-rate-monitoring` changed (recommended-guardrails 0.4.5)
- `guardrail.review-substantive-human-review` changed (recommended-guardrails 0.4.5)
- `ri-s2197.ai-session-recording-notice-consent` added (ri-s2197 0.2.0)
- `ri-s2197.ai-therapy-role-limits` added (ri-s2197 0.2.0)
- `ri-s2197.no-unlicensed-ai-therapy` added (ri-s2197 0.2.0)
- `tx-sb815.no-automated-adverse-determination` added (tx-sb815 0.2.0)
- `uk-ico-ai.ai-adm-safeguards-dpia` changed (uk-ico-ai 0.1.5)
- `us-hipaa-privacy.ai-vendor-business-associate-contract` changed (us-hipaa-privacy 0.2.5)
- `us-hipaa-privacy.minimum-necessary-phi-to-ai` changed (us-hipaa-privacy 0.2.5)
- `us-state-privacy-admt.ct-llm-training-statement` changed (us-state-privacy-admt 0.3.1)
- `us-state-privacy-admt.ct-profiling-result-contest` changed (us-state-privacy-admt 0.3.1)
- `us-state-privacy-admt.mn-profiling-result-question` changed (us-state-privacy-admt 0.3.1)
- `us-state-privacy-admt.profiling-optout` changed (us-state-privacy-admt 0.3.1)
- `vt-h816.hipaa-covered-ai-tools` added (vt-h816 0.2.0)
- `vt-h816.no-ai-mental-health-services-without-professional` added (vt-h816 0.2.0)
- `vt-h816.professional-review-of-ai-mental-health-services` added (vt-h816 0.2.0)

## 2026.10.03.3 (2026-10-03)

77 added · 37 changed · 0 removed — packs: `au-dis-standard`, `au-privacy-app-1-7`, `br-lgpd`, `ch-fadp`, `cl-law-21719`, `cn-anthropomorphic-ai`, `cn-gb-45438`, `cn-genai-labeling`, `cn-pipl-adm`, `difc-dp-law-art38`, `difc-dp-reg10`, `ec-spdp-ai`, `id-pdp-law`, `in-it-rules-sgi`, `it-law-132`, `jp-ai-guidelines`, `jp-ai-promotion-guideline`, `ke-dpa-s35`, `kg-digital-code`, `kg-digital-code-adm`, `kr-ai-basic-act`, `kr-pipa-adm`, `kz-ai-law`, `kz-digital-code`, `mx-lfda-performers`, `on-esa-ai-job-postings`, `pe-ai-regulation`, `recommended-guardrails`, `sg-pdpa-ai-data`, `sv-dl-234`, `tr-kvkk-art11`, `uz-informatization-ai`, `vn-ai-law`, `za-popia-s71`

Corpus audit (`docs/AUDIT-STANDARD.md`, as of 2026-10-03): 99.7% of 5535 checks pass; 715 of 734 artefacts audit-grade.

- `au-dis-standard.genai-csem-terror-safeguards` added (au-dis-standard 0.2.0)
- `au-dis-standard.genai-output-differentiation` added (au-dis-standard 0.2.0)
- `au-privacy-app-1-7.privacy-policy-automated-decisions` added (au-privacy-app-1-7 0.2.0)
- `br-lgpd.automated-decision-review-and-criteria` added (br-lgpd 0.2.0)
- `ch-fadp.automated-individual-decision-information-and-review` added (ch-fadp 0.2.0)
- `cl-law-21719.automated-decision-safeguards` added (cl-law-21719 0.2.0)
- `cn-anthropomorphic-ai.ai-not-human-notice-and-reminders` added (cn-anthropomorphic-ai 0.2.0)
- `cn-anthropomorphic-ai.chat-history-copy-and-delete` added (cn-anthropomorphic-ai 0.2.0)
- `cn-anthropomorphic-ai.crisis-intervention-and-emergency-contact` added (cn-anthropomorphic-ai 0.2.0)
- `cn-anthropomorphic-ai.easy-exit` added (cn-anthropomorphic-ai 0.2.0)
- `cn-anthropomorphic-ai.interaction-data-not-to-third-parties` added (cn-anthropomorphic-ai 0.2.0)
- `cn-anthropomorphic-ai.minor-mode-guardian-controls-and-consent` added (cn-anthropomorphic-ai 0.2.0)
- `cn-anthropomorphic-ai.minors-no-virtual-intimacy-and-minor-mode-switch` added (cn-anthropomorphic-ai 0.2.0)
- `cn-anthropomorphic-ai.no-dependence-or-emotional-manipulation` added (cn-anthropomorphic-ai 0.2.0)
- `cn-anthropomorphic-ai.no-training-on-sensitive-chats-without-separate-consent` added (cn-anthropomorphic-ai 0.2.0)
- `cn-anthropomorphic-ai.security-assessment-and-filing` added (cn-anthropomorphic-ai 0.2.0)
- `cn-anthropomorphic-ai.training-data-management` added (cn-anthropomorphic-ai 0.2.0)
- `cn-gb-45438.labelling-methods` added (cn-gb-45438 0.2.0)
- `cn-genai-labeling.platform-verify-and-label` added (cn-genai-labeling 0.2.0)
- `cn-pipl-adm.push-marketing-non-personalised-option` added (cn-pipl-adm 0.2.0)
- `cn-pipl-adm.significant-decision-explanation-and-refusal` added (cn-pipl-adm 0.2.0)
- `difc-dp-law-art38.object-and-manual-review` added (difc-dp-law-art38 0.2.0)
- `difc-dp-reg10.ai-system-notice-on-first-use` added (difc-dp-reg10 0.2.0)
- `ec-spdp-ai.ai-processing-information` added (ec-spdp-ai 0.2.0)
- `ec-spdp-ai.assessment-before-development` added (ec-spdp-ai 0.2.0)
- `id-pdp-law.automated-decision-objection` added (id-pdp-law 0.2.0)
- `in-it-rules-sgi.ssmi-synthetic-declaration-verification-label` added (in-it-rules-sgi 0.2.0)
- `in-it-rules-sgi.synthetic-content-label-and-provenance` added (in-it-rules-sgi 0.2.0)
- `in-it-rules-sgi.unlawful-synthetic-content-blocked` added (in-it-rules-sgi 0.2.0)
- `it-law-132.ai-processing-information-and-objection` added (it-law-132 0.2.0)
- `it-law-132.ai-tdm-respects-rights-reservation` added (it-law-132 0.2.0)
- `it-law-132.health-ai-patient-informed` added (it-law-132 0.2.0)
- `it-law-132.health-ai-periodic-verification` added (it-law-132 0.2.0)
- `it-law-132.health-ai-physician-decides` added (it-law-132 0.2.0)
- `it-law-132.minor-under-14-parental-consent` added (it-law-132 0.2.0)
- `it-law-132.professional-ai-client-information` added (it-law-132 0.2.0)
- `it-law-132.workplace-ai-worker-information` added (it-law-132 0.2.0)
- `jp-ai-guidelines.transparency-accountability` changed (jp-ai-guidelines 0.1.5)
- `jp-ai-promotion-guideline.ai-content-identification` added (jp-ai-promotion-guideline 0.2.0)
- `jp-ai-promotion-guideline.user-information-for-proper-use` added (jp-ai-promotion-guideline 0.2.0)
- `ke-dpa-s35.automated-decision-notice-and-reconsideration` added (ke-dpa-s35 0.2.0)
- `kg-digital-code.ai-interaction-notice` added (kg-digital-code 0.2.0)
- `kg-digital-code.deepfake-disclosure` added (kg-digital-code 0.2.0)
- `kg-digital-code.emotion-biometric-notice` added (kg-digital-code 0.2.0)
- `kg-digital-code.high-danger-ai-information-and-explanation` added (kg-digital-code 0.2.0)
- `kg-digital-code.high-danger-ai-logs` added (kg-digital-code 0.2.0)
- `kg-digital-code-adm.stop-automated-decisions-and-human-review` added (kg-digital-code-adm 0.2.0)
- `kr-ai-basic-act.domestic-representative` added (kr-ai-basic-act 0.2.0)
- `kr-ai-basic-act.frontier-ai-safety` added (kr-ai-basic-act 0.2.0)
- `kr-ai-basic-act.high-impact-impact-assessment` added (kr-ai-basic-act 0.2.0)
- `kr-ai-basic-act.high-impact-pre-review` added (kr-ai-basic-act 0.2.0)
- `kr-ai-basic-act.ai-transparency` changed (kr-ai-basic-act 0.2.0)
- `kr-pipa-adm.explanation-and-published-criteria` added (kr-pipa-adm 0.2.0)
- `kr-pipa-adm.refuse-or-human-reprocessing` added (kr-pipa-adm 0.2.0)
- `kz-ai-law.ai-use-notice` added (kz-ai-law 0.2.0)
- `kz-ai-law.explanation-and-decision-data-on-request` added (kz-ai-law 0.2.0)
- `kz-ai-law.no-biometric-categorisation-for-discrimination` added (kz-ai-law 0.2.0)
- `kz-ai-law.no-emotion-recognition-without-consent` added (kz-ai-law 0.2.0)
- `kz-ai-law.refuse-ai-interaction` added (kz-ai-law 0.2.0)
- `kz-ai-law.synthetic-output-label-and-warning` added (kz-ai-law 0.2.0)
- `kz-ai-law.training-respects-machine-readable-opt-out` added (kz-ai-law 0.2.0)
- `kz-digital-code.fully-automated-decision-rights` added (kz-digital-code 0.2.0)
- `mx-lfda-performers.performer-voice-image-ai-consent` added (mx-lfda-performers 0.2.0)
- `on-esa-ai-job-postings.ai-screening-disclosed-in-posting` added (on-esa-ai-job-postings 0.2.0)
- `pe-ai-regulation.high-risk-decision-explanation` added (pe-ai-regulation 0.2.0)
- `pe-ai-regulation.high-risk-prior-information-and-label` added (pe-ai-regulation 0.2.0)
- `pe-ai-regulation.high-risk-record-and-human-oversight` added (pe-ai-regulation 0.2.0)
- `pe-ai-regulation.no-sensitive-trait-inference-from-biometrics` added (pe-ai-regulation 0.2.0)
- `guardrail.agent-ai-generated-code-provenance` changed (recommended-guardrails 0.4.4)
- `guardrail.agent-component-provenance` changed (recommended-guardrails 0.4.4)
- `guardrail.agent-egress-and-environment-boundary` changed (recommended-guardrails 0.4.4)
- `guardrail.agent-high-impact-action-approval` changed (recommended-guardrails 0.4.4)
- `guardrail.agent-identity-and-action-traceability` changed (recommended-guardrails 0.4.4)
- `guardrail.agent-incident-detection-and-disclosure` changed (recommended-guardrails 0.4.4)
- `guardrail.agent-least-privilege-tool-scope` changed (recommended-guardrails 0.4.4)
- `guardrail.agent-memory-write-controls` changed (recommended-guardrails 0.4.4)
- `guardrail.agent-retrieval-respects-requester-permissions` changed (recommended-guardrails 0.4.4)
- `guardrail.agent-tool-server-authentication` changed (recommended-guardrails 0.4.4)
- `guardrail.agent-untrusted-content-isolation` changed (recommended-guardrails 0.4.4)
- `guardrail.baseline-adverse-decision-explanation` changed (recommended-guardrails 0.4.4)
- `guardrail.baseline-ai-interaction-disclosure` changed (recommended-guardrails 0.4.4)
- `guardrail.baseline-crisis-protocol` changed (recommended-guardrails 0.4.4)
- `guardrail.ethics-advice-not-tuned-for-approval` changed (recommended-guardrails 0.4.4)
- `guardrail.ethics-conversation-content-out-of-ads-and-trackers` changed (recommended-guardrails 0.4.4)
- `guardrail.ethics-evaluate-proxy-features-for-disparity` changed (recommended-guardrails 0.4.4)
- `guardrail.ethics-honor-age-signals` changed (recommended-guardrails 0.4.4)
- `guardrail.ethics-no-anthropomorphic-persona-claims` changed (recommended-guardrails 0.4.4)
- `guardrail.ethics-no-engagement-maximizing-design` changed (recommended-guardrails 0.4.4)
- `guardrail.ethics-no-professional-credential-claims` changed (recommended-guardrails 0.4.4)
- `guardrail.ethics-no-profiling-from-inferred-emotions-or-traits` changed (recommended-guardrails 0.4.4)
- `guardrail.ethics-purpose-limited-training-consent` changed (recommended-guardrails 0.4.4)
- `guardrail.ethics-stored-content-analysis-opt-in` changed (recommended-guardrails 0.4.4)
- `guardrail.ethics-substantiated-capability-claims` changed (recommended-guardrails 0.4.4)
- `guardrail.opint-bounded-spend-and-usage` changed (recommended-guardrails 0.4.4)
- `guardrail.opint-guards-fail-closed` changed (recommended-guardrails 0.4.4)
- `guardrail.opint-reevaluate-on-model-change` changed (recommended-guardrails 0.4.4)
- `guardrail.opint-safeguards-survive-long-context` changed (recommended-guardrails 0.4.4)
- `guardrail.opint-scoped-response-cache` changed (recommended-guardrails 0.4.4)
- `guardrail.output-confabulation-controls` changed (recommended-guardrails 0.4.4)
- `guardrail.output-decision-reproducibility-record` changed (recommended-guardrails 0.4.4)
- `guardrail.output-pii-leakage-screening` changed (recommended-guardrails 0.4.4)
- `guardrail.review-reversal-rate-monitoring` changed (recommended-guardrails 0.4.4)
- `guardrail.review-substantive-human-review` changed (recommended-guardrails 0.4.4)
- `sg-pdpa-ai-data.ai-training-use-consent-unbundled-and-withdrawable` added (sg-pdpa-ai-data 0.2.0)
- `sv-dl-234.ai-decision-notice-explanation-and-human-challenge` added (sv-dl-234 0.2.0)
- `tr-kvkk-art11.object-to-adverse-automated-result` added (tr-kvkk-art11 0.2.0)
- `uz-informatization-ai.no-legally-significant-decision-solely-on-ai` added (uz-informatization-ai 0.2.0)
- `vn-ai-law.ai-interaction-notice` added (vn-ai-law 0.2.0)
- `vn-ai-law.generated-media-machine-marking` added (vn-ai-law 0.2.0)
- `vn-ai-law.high-risk-risk-management-and-human-oversight` added (vn-ai-law 0.2.0)
- `vn-ai-law.high-risk-technical-records-and-logs` added (vn-ai-law 0.2.0)
- `vn-ai-law.misleading-content-notice-and-likeness-label` added (vn-ai-law 0.2.0)
- `vn-ai-law.serious-incident-reporting` added (vn-ai-law 0.2.0)
- `za-popia-s71.automated-profiling-decision-representations-and-logic` added (za-popia-s71 0.2.0)

## 2026.10.03.2 (2026-10-03)

1 added · 37 changed · 0 removed — packs: `recommended-guardrails`, `us-state-privacy-admt`

Corpus audit (`docs/AUDIT-STANDARD.md`, as of 2026-10-03): 99.6% of 4399 checks pass; 579 of 598 artefacts audit-grade.

- `guardrail.agent-ai-generated-code-provenance` changed (recommended-guardrails 0.4.3)
- `guardrail.agent-component-provenance` changed (recommended-guardrails 0.4.3)
- `guardrail.agent-egress-and-environment-boundary` changed (recommended-guardrails 0.4.3)
- `guardrail.agent-high-impact-action-approval` changed (recommended-guardrails 0.4.3)
- `guardrail.agent-identity-and-action-traceability` changed (recommended-guardrails 0.4.3)
- `guardrail.agent-incident-detection-and-disclosure` changed (recommended-guardrails 0.4.3)
- `guardrail.agent-least-privilege-tool-scope` changed (recommended-guardrails 0.4.3)
- `guardrail.agent-memory-write-controls` changed (recommended-guardrails 0.4.3)
- `guardrail.agent-retrieval-respects-requester-permissions` changed (recommended-guardrails 0.4.3)
- `guardrail.agent-tool-server-authentication` changed (recommended-guardrails 0.4.3)
- `guardrail.agent-untrusted-content-isolation` changed (recommended-guardrails 0.4.3)
- `guardrail.baseline-adverse-decision-explanation` changed (recommended-guardrails 0.4.3)
- `guardrail.baseline-ai-interaction-disclosure` changed (recommended-guardrails 0.4.3)
- `guardrail.baseline-crisis-protocol` changed (recommended-guardrails 0.4.3)
- `guardrail.ethics-advice-not-tuned-for-approval` changed (recommended-guardrails 0.4.3)
- `guardrail.ethics-conversation-content-out-of-ads-and-trackers` changed (recommended-guardrails 0.4.3)
- `guardrail.ethics-evaluate-proxy-features-for-disparity` changed (recommended-guardrails 0.4.3)
- `guardrail.ethics-honor-age-signals` changed (recommended-guardrails 0.4.3)
- `guardrail.ethics-no-anthropomorphic-persona-claims` changed (recommended-guardrails 0.4.3)
- `guardrail.ethics-no-engagement-maximizing-design` changed (recommended-guardrails 0.4.3)
- `guardrail.ethics-no-professional-credential-claims` changed (recommended-guardrails 0.4.3)
- `guardrail.ethics-no-profiling-from-inferred-emotions-or-traits` changed (recommended-guardrails 0.4.3)
- `guardrail.ethics-purpose-limited-training-consent` changed (recommended-guardrails 0.4.3)
- `guardrail.ethics-stored-content-analysis-opt-in` changed (recommended-guardrails 0.4.3)
- `guardrail.ethics-substantiated-capability-claims` changed (recommended-guardrails 0.4.3)
- `guardrail.opint-bounded-spend-and-usage` changed (recommended-guardrails 0.4.3)
- `guardrail.opint-guards-fail-closed` changed (recommended-guardrails 0.4.3)
- `guardrail.opint-reevaluate-on-model-change` changed (recommended-guardrails 0.4.3)
- `guardrail.opint-safeguards-survive-long-context` changed (recommended-guardrails 0.4.3)
- `guardrail.opint-scoped-response-cache` changed (recommended-guardrails 0.4.3)
- `guardrail.output-confabulation-controls` changed (recommended-guardrails 0.4.3)
- `guardrail.output-decision-reproducibility-record` changed (recommended-guardrails 0.4.3)
- `guardrail.output-pii-leakage-screening` changed (recommended-guardrails 0.4.3)
- `guardrail.review-reversal-rate-monitoring` changed (recommended-guardrails 0.4.3)
- `guardrail.review-substantive-human-review` changed (recommended-guardrails 0.4.3)
- `us-state-privacy-admt.mn-profiling-result-question` added (us-state-privacy-admt 0.3.0)
- `us-state-privacy-admt.ct-profiling-result-contest` changed (us-state-privacy-admt 0.3.0)
- `us-state-privacy-admt.profiling-optout` changed (us-state-privacy-admt 0.3.0)

## 2026.10.03 (2026-10-03)

8 added · 193 changed · 0 removed — packs: `ai-security`, `ca-ab1836`, `ca-ab2013`, `ca-ab3030`, `ca-ab489`, `ca-ab853`, `ca-cmia`, `ca-sb243`, `ca-sb53`, `ca-sb942`, `ccpa-admt`, `cn-algo-recommendation`, `cn-deep-synthesis`, `cn-genai-interim`, `cn-genai-labeling`, `co-hb26-1263`, `co-sb21-169`, `co-sb26-189`, `coe-ai-convention`, `ct-cart`, `eu-ai-act`, `eu-altai`, `eu-gdpr-ai-data`, `eu-gdpr-art22`, `eu-gpai-cop`, `finra-genai`, `hi-sb3001`, `ieee-7003`, `il-ai-video-interview`, `il-bipa`, `il-hb1806`, `il-hb3773`, `imda-agentic`, `jp-ai-guidelines`, `kr-ai-basic-act`, `mas-feat`, `md-hb1202`, `me-ld1727`, `naic-ai-bulletin`, `ne-lb525`, `nist-ai-rmf`, `nist-aml-agentic`, `nist-genai-profile`, `nist-sp800-218a`, `ny-gbl-art47`, `ny-raise-act`, `nyc-ll144`, `oecd-ai`, `or-sb1546`, `qc-law25`, `recommended-guardrails`, `tn-elvis-act`, `tn-sb1580`, `tx-bc-503`, `tx-sb1188`, `tx-traiga`, `uk-ico-ai`, `unesco-ai-ethics`, `us-ftc-impersonation`, `us-hipaa-privacy`, `us-state-privacy-admt`, `ut-ai-policy-act`, `ut-hb452`, `wa-hb2225`, `wa-mhmda`, `who-health-ai`

Corpus audit (`docs/AUDIT-STANDARD.md`, as of 2026-10-02): 99.6% of 4368 checks pass; 575 of 594 artefacts audit-grade.

**Note:** Seven more sources are now citation-only (owner decision, D-14 follow-up): Council of Europe AI Convention, FINRA, IMDA agentic framework, Singapore Model AI Governance Framework, MAS FEAT, UNESCO and WHO, whose publisher terms bar commercial reuse. Releases up to 2026.10.02.2 shipped excerpts of these texts in paid packs; the excerpts are withdrawn and each rule now cites the provision by location, with a summary in TwinEthos's own words.

- `ai-security.untrusted-input-to-agent-instructions-or-tools` changed (ai-security 0.1.5)
- `ca-ab1836.digital-replica-deceased-consent` changed (ca-ab1836 0.1.4)
- `ca-ab2013.training-data-disclosure` changed (ca-ab2013 0.1.4)
- `ca-ab3030.genai-patient-communication-disclaimer` changed (ca-ab3030 0.1.3)
- `ca-ab489.no-implied-licensed-professional` changed (ca-ab489 0.1.3)
- `ca-ab853.capture-device-latent-disclosure` changed (ca-ab853 0.1.5)
- `ca-ab853.genai-hosting-platform-gate` changed (ca-ab853 0.1.5)
- `ca-ab853.platform-provenance-detection-and-display` changed (ca-ab853 0.1.5)
- `ca-cmia.medical-information-to-ai-vendor` changed (ca-cmia 0.2.4)
- `ca-sb243.companion-bot-crisis-protocol` changed (ca-sb243 0.3.3)
- `ca-sb243.companion-bot-disclosure` changed (ca-sb243 0.3.3)
- `ca-sb243.known-minor-safeguards` changed (ca-sb243 0.3.3)
- `ca-sb243.minor-suitability-disclosure` changed (ca-sb243 0.3.3)
- `ca-sb53.frontier-ai-framework` changed (ca-sb53 0.1.4)
- `ca-sb53.frontier-whistleblower-protection` changed (ca-sb53 0.1.4)
- `ca-sb942.disclosure-verification-tool` changed (ca-sb942 0.1.5)
- `ca-sb942.provenance-disclosure` changed (ca-sb942 0.1.5)
- `ccpa-admt.access-explanation` changed (ccpa-admt 0.1.4)
- `ccpa-admt.opt-out` changed (ccpa-admt 0.1.4)
- `ccpa-admt.pre-use-notice` changed (ccpa-admt 0.1.4)
- `cn-algo-recommendation.minor-protection` changed (cn-algo-recommendation 0.2.3)
- `cn-algo-recommendation.no-addiction-inducing-models` changed (cn-algo-recommendation 0.2.3)
- `cn-algo-recommendation.recommendation-optout` changed (cn-algo-recommendation 0.2.3)
- `cn-deep-synthesis.biometric-editing-consent` changed (cn-deep-synthesis 0.1.4)
- `cn-deep-synthesis.conspicuous-label` changed (cn-deep-synthesis 0.1.4)
- `cn-genai-interim.filing-and-security-assessment` changed (cn-genai-interim 0.1.4)
- `cn-genai-interim.training-data-legitimacy` changed (cn-genai-interim 0.1.4)
- `cn-genai-labeling.dual-label-genai-content` changed (cn-genai-labeling 0.1.4)
- `co-hb26-1263.age-estimation` changed (co-hb26-1263 0.2.1)
- `co-hb26-1263.ai-disclosure` changed (co-hb26-1263 0.2.1)
- `co-hb26-1263.minor-emotional-dependence-safeguards` changed (co-hb26-1263 0.2.1)
- `co-hb26-1263.minor-privacy-and-account-tools` changed (co-hb26-1263 0.2.1)
- `co-hb26-1263.minor-sexual-content-safeguards` changed (co-hb26-1263 0.2.1)
- `co-hb26-1263.minor-unpredictable-rewards` changed (co-hb26-1263 0.2.1)
- `co-hb26-1263.no-licensed-professional-representation` changed (co-hb26-1263 0.2.1)
- `co-hb26-1263.suicide-self-harm-protocol` changed (co-hb26-1263 0.2.1)
- `co-sb21-169.insurance-ecdis-unfair-discrimination` changed (co-sb21-169 0.1.4)
- `co-sb26-189.adverse-outcome-explanation` changed (co-sb26-189 0.1.3)
- `co-sb26-189.consumer-notice-consequential-decision` changed (co-sb26-189 0.1.3)
- `co-sb26-189.developer-documentation-to-deployers` changed (co-sb26-189 0.1.3)
- `co-sb26-189.human-review-and-data-correction` changed (co-sb26-189 0.1.3)
- `coe-ai-convention.ai-interaction-notification` changed (coe-ai-convention 0.1.4)
- `coe-ai-convention.documentation-and-contest` changed (coe-ai-convention 0.1.4)
- `ct-cart.ai-companion-crisis-protocol` changed (ct-cart 0.1.5)
- `ct-cart.ai-companion-disclosure` changed (ct-cart 0.1.5)
- `eu-ai-act.art10.data-governance-bias` changed (eu-ai-act 0.1.5)
- `eu-ai-act.art12.record-keeping` changed (eu-ai-act 0.1.5)
- `eu-ai-act.art14.human-oversight` changed (eu-ai-act 0.1.5)
- `eu-ai-act.art15.accuracy-robustness-cybersecurity` changed (eu-ai-act 0.1.5)
- `eu-ai-act.art26.inform-affected-persons` changed (eu-ai-act 0.1.5)
- `eu-ai-act.art27.fria` changed (eu-ai-act 0.1.5)
- `eu-ai-act.art5.biometric-categorisation-sensitive-traits` changed (eu-ai-act 0.1.5)
- `eu-ai-act.art5.emotion-recognition-workplace-education` changed (eu-ai-act 0.1.5)
- `eu-ai-act.art5.nonconsensual-intimate-and-csam` changed (eu-ai-act 0.1.5)
- `eu-ai-act.art5.untargeted-facial-scraping` changed (eu-ai-act 0.1.5)
- `eu-ai-act.art50.chatbot-disclosure` changed (eu-ai-act 0.1.5)
- `eu-ai-act.art50.deepfake-disclosure` changed (eu-ai-act 0.1.5)
- `eu-ai-act.art50.emotion-biometric-notice` changed (eu-ai-act 0.1.5)
- `eu-ai-act.art50.public-interest-text-disclosure` changed (eu-ai-act 0.1.5)
- `eu-ai-act.art50.synthetic-content-machine-marking` changed (eu-ai-act 0.1.5)
- `eu-ai-act.art86.right-to-explanation` changed (eu-ai-act 0.1.5)
- `eu-altai.human-oversight` changed (eu-altai 0.1.4)
- `eu-altai.non-discrimination-fairness` changed (eu-altai 0.1.4)
- `eu-altai.transparency-traceability` changed (eu-altai 0.1.4)
- `eu-gdpr-ai-data.ai-data-minimal-by-default` changed (eu-gdpr-ai-data 0.2.3)
- `eu-gdpr-ai-data.ai-recipients-named-at-collection` changed (eu-gdpr-ai-data 0.2.3)
- `eu-gdpr-ai-data.biometric-identification-explicit-consent` changed (eu-gdpr-ai-data 0.2.3)
- `eu-gdpr-ai-data.erasure-reaches-ai-data-stores` changed (eu-gdpr-ai-data 0.2.3)
- `eu-gdpr-ai-data.minimise-personal-data-sent-to-ai` changed (eu-gdpr-ai-data 0.2.3)
- `eu-gdpr-art22.solely-automated-decision-safeguards` changed (eu-gdpr-art22 0.1.3)
- `eu-gpai-cop.model-documentation` changed (eu-gpai-cop 0.1.3)
- `finra-genai.agentic-supervision` changed (finra-genai 0.1.4)
- `finra-genai.genai-monitoring-logging` changed (finra-genai 0.1.4)
- `hi-sb3001.ai-companion-not-human-notice` changed (hi-sb3001 0.2.2)
- `hi-sb3001.known-minor-sexual-content-safeguards` changed (hi-sb3001 0.2.2)
- `hi-sb3001.minor-screen-time-and-account-tools` changed (hi-sb3001 0.2.2)
- `hi-sb3001.no-encouraging-harm-to-others` changed (hi-sb3001 0.2.2)
- `hi-sb3001.no-mental-health-care-representation` changed (hi-sb3001 0.2.2)
- `ieee-7003.proxy-variable-analysis` changed (ieee-7003 0.1.3)
- `il-ai-video-interview.ai-only-screening-demographic-report` added (il-ai-video-interview 0.2.0)
- `il-ai-video-interview.video-deletion-on-request` added (il-ai-video-interview 0.2.0)
- `il-ai-video-interview.video-sharing-limited` added (il-ai-video-interview 0.2.0)
- `il-ai-video-interview.video-interview-ai-consent` changed (il-ai-video-interview 0.2.0)
- `il-bipa.biometric-disclosure-consent` changed (il-bipa 0.2.3)
- `il-bipa.biometric-notice-and-written-release` changed (il-bipa 0.2.3)
- `il-bipa.biometric-retention-and-destruction` changed (il-bipa 0.2.3)
- `il-hb1806.ai-therapy-role-limits` changed (il-hb1806 0.2.3)
- `il-hb3773.ai-use-employee-notice` changed (il-hb3773 0.1.3)
- `il-hb3773.proxy-discrimination-llm-decision-path` changed (il-hb3773 0.1.3)
- `imda-agentic.agent-identity-and-action-traceability` changed (imda-agentic 0.1.6)
- `imda-agentic.human-approval-gate-high-impact-action` changed (imda-agentic 0.1.6)
- `imda-agentic.mgf-human-involvement-explainability` changed (imda-agentic 0.1.6)
- `jp-ai-guidelines.transparency-accountability` changed (jp-ai-guidelines 0.1.4)
- `kr-ai-basic-act.ai-transparency` changed (kr-ai-basic-act 0.1.4)
- `kr-ai-basic-act.high-impact-ai-responsibilities` changed (kr-ai-basic-act 0.1.4)
- `mas-feat.accuracy-bias-validation` changed (mas-feat 0.1.3)
- `mas-feat.external-review-channels` changed (mas-feat 0.1.3)
- `mas-feat.fairness-justifiability` changed (mas-feat 0.1.3)
- `mas-feat.transparency-disclosure-explanation` changed (mas-feat 0.1.3)
- `md-hb1202.facial-recognition-interview-consent` changed (md-hb1202 0.1.3)
- `me-ld1727.chatbot-not-human-notice` changed (me-ld1727 0.2.2)
- `naic-ai-bulletin.ais-program` changed (naic-ai-bulletin 0.1.4)
- `naic-ai-bulletin.model-validation-bias-testing` changed (naic-ai-bulletin 0.1.4)
- `naic-ai-bulletin.third-party-ai-oversight` changed (naic-ai-bulletin 0.1.4)
- `ne-lb525.conversational-ai-crisis-protocol` changed (ne-lb525 0.1.4)
- `ne-lb525.conversational-ai-disclosure` changed (ne-lb525 0.1.4)
- `ne-lb525.no-mental-health-care-representation` changed (ne-lb525 0.1.4)
- `nist-ai-rmf.manage-4-1-oversight` changed (nist-ai-rmf 0.1.4)
- `nist-ai-rmf.measure-2-11-fairness` changed (nist-ai-rmf 0.1.4)
- `nist-aml-agentic.agentic-adversarial-security` changed (nist-aml-agentic 0.2.2)
- `nist-aml-agentic.usage-restrictions` changed (nist-aml-agentic 0.2.2)
- `nist-genai-profile.confabulation-controls` changed (nist-genai-profile 0.2.2)
- `nist-genai-profile.content-filters` changed (nist-genai-profile 0.2.2)
- `nist-genai-profile.content-provenance` changed (nist-genai-profile 0.2.2)
- `nist-genai-profile.output-pii-leakage-detection` changed (nist-genai-profile 0.2.2)
- `nist-genai-profile.reassess-after-adaptation` changed (nist-genai-profile 0.2.2)
- `nist-genai-profile.value-chain-provenance` changed (nist-genai-profile 0.2.2)
- `nist-sp800-218a.pw-4-4-verify-acquired-models` changed (nist-sp800-218a 0.2.1)
- `nist-sp800-218a.pw-5-1-model-io-handling` changed (nist-sp800-218a 0.2.1)
- `ny-gbl-art47.companion-crisis-protocol` changed (ny-gbl-art47 0.2.4)
- `ny-gbl-art47.companion-not-human-notification` changed (ny-gbl-art47 0.2.4)
- `ny-raise-act.critical-safety-incident-reporting` changed (ny-raise-act 0.2.3)
- `ny-raise-act.frontier-ai-framework` changed (ny-raise-act 0.2.3)
- `ny-raise-act.transparency-report` changed (ny-raise-act 0.2.3)
- `nyc-ll144.aedt-candidate-notice` changed (nyc-ll144 0.1.4)
- `nyc-ll144.bias-audit` changed (nyc-ll144 0.1.4)
- `oecd-ai.ai-interaction-awareness` changed (oecd-ai 0.2.4)
- `oecd-ai.capabilities-and-limitations` changed (oecd-ai 0.2.4)
- `oecd-ai.reproducible-consequential-decisions` changed (oecd-ai 0.2.4)
- `or-sb1546.ai-companion-crisis-protocol` changed (or-sb1546 0.1.4)
- `or-sb1546.ai-companion-disclosure` changed (or-sb1546 0.1.4)
- `qc-law25.automated-decision-inform-and-review` changed (qc-law25 0.1.3)
- `guardrail.agent-ai-generated-code-provenance` changed (recommended-guardrails 0.4.2)
- `guardrail.agent-component-provenance` changed (recommended-guardrails 0.4.2)
- `guardrail.agent-egress-and-environment-boundary` changed (recommended-guardrails 0.4.2)
- `guardrail.agent-high-impact-action-approval` changed (recommended-guardrails 0.4.2)
- `guardrail.agent-identity-and-action-traceability` changed (recommended-guardrails 0.4.2)
- `guardrail.agent-incident-detection-and-disclosure` changed (recommended-guardrails 0.4.2)
- `guardrail.agent-least-privilege-tool-scope` changed (recommended-guardrails 0.4.2)
- `guardrail.agent-memory-write-controls` changed (recommended-guardrails 0.4.2)
- `guardrail.agent-retrieval-respects-requester-permissions` changed (recommended-guardrails 0.4.2)
- `guardrail.agent-tool-server-authentication` changed (recommended-guardrails 0.4.2)
- `guardrail.agent-untrusted-content-isolation` changed (recommended-guardrails 0.4.2)
- `guardrail.baseline-adverse-decision-explanation` changed (recommended-guardrails 0.4.2)
- `guardrail.baseline-ai-interaction-disclosure` changed (recommended-guardrails 0.4.2)
- `guardrail.baseline-crisis-protocol` changed (recommended-guardrails 0.4.2)
- `guardrail.ethics-advice-not-tuned-for-approval` changed (recommended-guardrails 0.4.2)
- `guardrail.ethics-conversation-content-out-of-ads-and-trackers` changed (recommended-guardrails 0.4.2)
- `guardrail.ethics-evaluate-proxy-features-for-disparity` changed (recommended-guardrails 0.4.2)
- `guardrail.ethics-honor-age-signals` changed (recommended-guardrails 0.4.2)
- `guardrail.ethics-no-anthropomorphic-persona-claims` changed (recommended-guardrails 0.4.2)
- `guardrail.ethics-no-engagement-maximizing-design` changed (recommended-guardrails 0.4.2)
- `guardrail.ethics-no-professional-credential-claims` changed (recommended-guardrails 0.4.2)
- `guardrail.ethics-no-profiling-from-inferred-emotions-or-traits` changed (recommended-guardrails 0.4.2)
- `guardrail.ethics-purpose-limited-training-consent` changed (recommended-guardrails 0.4.2)
- `guardrail.ethics-stored-content-analysis-opt-in` changed (recommended-guardrails 0.4.2)
- `guardrail.ethics-substantiated-capability-claims` changed (recommended-guardrails 0.4.2)
- `guardrail.opint-bounded-spend-and-usage` changed (recommended-guardrails 0.4.2)
- `guardrail.opint-guards-fail-closed` changed (recommended-guardrails 0.4.2)
- `guardrail.opint-reevaluate-on-model-change` changed (recommended-guardrails 0.4.2)
- `guardrail.opint-safeguards-survive-long-context` changed (recommended-guardrails 0.4.2)
- `guardrail.opint-scoped-response-cache` changed (recommended-guardrails 0.4.2)
- `guardrail.output-confabulation-controls` changed (recommended-guardrails 0.4.2)
- `guardrail.output-decision-reproducibility-record` changed (recommended-guardrails 0.4.2)
- `guardrail.output-pii-leakage-screening` changed (recommended-guardrails 0.4.2)
- `guardrail.review-reversal-rate-monitoring` changed (recommended-guardrails 0.4.2)
- `guardrail.review-substantive-human-review` changed (recommended-guardrails 0.4.2)
- `tn-elvis-act.ai-likeness-tool-authorization` changed (tn-elvis-act 0.1.4)
- `tn-sb1580.no-mental-health-professional-representation` changed (tn-sb1580 0.1.3)
- `tx-bc-503.biometric-disclosure-consent` added (tx-bc-503 0.3.0)
- `tx-bc-503.biometric-capture-notice-and-consent` changed (tx-bc-503 0.3.0)
- `tx-bc-503.biometric-destruction` changed (tx-bc-503 0.3.0)
- `tx-sb1188.ai-created-records-practitioner-review` changed (tx-sb1188 0.3.3)
- `tx-sb1188.ehr-treatment-tool-biological-sex-input` changed (tx-sb1188 0.3.3)
- `tx-traiga.government-ai-consumer-disclosure` changed (tx-traiga 0.1.4)
- `tx-traiga.government-social-scoring` changed (tx-traiga 0.1.4)
- `tx-traiga.intentional-unlawful-discrimination` changed (tx-traiga 0.1.4)
- `tx-traiga.no-ai-designed-to-incite-harm` changed (tx-traiga 0.1.4)
- `uk-ico-ai.ai-adm-safeguards-dpia` changed (uk-ico-ai 0.1.4)
- `unesco-ai-ethics.ethical-impact-assessment` changed (unesco-ai-ethics 0.1.4)
- `unesco-ai-ethics.human-oversight-overturn` changed (unesco-ai-ethics 0.1.4)
- `us-ftc-impersonation.ai-agent-government-or-business-impersonation` changed (us-ftc-impersonation 0.2.3)
- `us-hipaa-privacy.ai-vendor-business-associate-contract` changed (us-hipaa-privacy 0.2.4)
- `us-hipaa-privacy.minimum-necessary-phi-to-ai` changed (us-hipaa-privacy 0.2.4)
- `us-state-privacy-admt.ct-llm-training-statement` added (us-state-privacy-admt 0.2.0)
- `us-state-privacy-admt.ct-profiling-result-contest` added (us-state-privacy-admt 0.2.0)
- `us-state-privacy-admt.profiling-optout` changed (us-state-privacy-admt 0.2.0)
- `ut-ai-policy-act.genai-consumer-transaction-disclosure` changed (ut-ai-policy-act 0.1.3)
- `ut-ai-policy-act.genai-regulated-occupation-disclosure` changed (ut-ai-policy-act 0.1.3)
- `ut-hb452.in-conversation-ad-disclosure` changed (ut-hb452 0.3.2)
- `ut-hb452.mental-health-chatbot-ai-disclosure` changed (ut-hb452 0.3.2)
- `ut-hb452.mental-health-chatbot-safe-harbor-policy` changed (ut-hb452 0.3.2)
- `ut-hb452.no-ad-targeting-on-user-input` changed (ut-hb452 0.3.2)
- `ut-hb452.no-sale-or-sharing-of-user-input` changed (ut-hb452 0.3.2)
- `wa-hb2225.ai-companion-crisis-protocol` changed (wa-hb2225 0.1.4)
- `wa-hb2225.ai-companion-disclosure` changed (wa-hb2225 0.1.4)
- `wa-mhmda.ai-health-data-uses-disclosed-or-consented` added (wa-mhmda 0.3.0)
- `wa-mhmda.deletion-reaches-ai-data-stores` added (wa-mhmda 0.3.0)
- `wa-mhmda.biometric-data-collection-consent` changed (wa-mhmda 0.3.0)
- `who-health-ai.clinician-oversight-accountability` changed (who-health-ai 0.1.3)
- `who-health-ai.transparency-documentation` changed (who-health-ai 0.1.3)

## 2026.10.02.2 (2026-10-02)

20 added · 176 changed · 0 removed — packs: `ai-security`, `ca-ab1836`, `ca-ab2013`, `ca-ab3030`, `ca-ab489`, `ca-ab853`, `ca-civ-3344`, `ca-cmia`, `ca-sb1119`, `ca-sb243`, `ca-sb53`, `ca-sb942`, `ccpa-admt`, `cn-algo-recommendation`, `cn-deep-synthesis`, `cn-genai-interim`, `cn-genai-labeling`, `co-hb26-1263`, `co-sb21-169`, `coe-ai-convention`, `ct-cart`, `eu-ai-act`, `eu-gdpr-ai-data`, `eu-gdpr-art22`, `ga-sb540`, `hi-sb3001`, `ia-sf2417`, `id-s1297`, `il-bipa`, `il-hb1806`, `il-hb3773`, `il-sb315`, `imda-agentic`, `kr-ai-basic-act`, `me-ld1727`, `ne-lb525`, `nist-ai-rmf`, `nist-aml-agentic`, `nist-genai-profile`, `ny-gbl-art47`, `ny-raise-act`, `oecd-ai`, `or-sb1546`, `qc-law25`, `recommended-guardrails`, `ri-s2195`, `tn-elvis-act`, `tn-sb1580`, `tx-bc-503`, `tx-sb1188`, `tx-traiga`, `us-ftc-impersonation`, `us-hipaa-privacy`, `us-state-privacy-admt`, `ut-ai-policy-act`, `wa-hb2225`, `wa-mhmda`

Corpus audit (`docs/AUDIT-STANDARD.md`, as of 2026-10-02): 88.6% of 3956 checks pass; 277 of 533 artefacts audit-grade.

**Note:** The ai-security pack (OWASP) is now citation-only. Releases up to 2026.10.02 shipped a joined, elided excerpt of OWASP LLM01:2025 labelled CC BY 4.0; OWASP's text is CC BY-SA 4.0, and the excerpt has been withdrawn (owner decision D-14). The pack is now proprietary like every other law and standard pack.

- `ai-security.untrusted-input-to-agent-instructions-or-tools` changed (ai-security 0.1.4)
- `ca-ab1836.digital-replica-deceased-consent` changed (ca-ab1836 0.1.3)
- `ca-ab2013.training-data-disclosure` changed (ca-ab2013 0.1.3)
- `ca-ab3030.genai-patient-communication-disclaimer` changed (ca-ab3030 0.1.2)
- `ca-ab489.no-implied-licensed-professional` changed (ca-ab489 0.1.2)
- `ca-ab853.capture-device-latent-disclosure` changed (ca-ab853 0.1.4)
- `ca-ab853.genai-hosting-platform-gate` changed (ca-ab853 0.1.4)
- `ca-ab853.platform-provenance-detection-and-display` changed (ca-ab853 0.1.4)
- `ca-civ-3344.ai-likeness-commercial-use-consent` changed (ca-civ-3344 0.2.2)
- `ca-cmia.medical-information-to-ai-vendor` changed (ca-cmia 0.2.3)
- `ca-sb1119.age-determination-or-protect-all-users` added (ca-sb1119 0.2.0)
- `ca-sb1119.child-ads-labeled` added (ca-sb1119 0.2.0)
- `ca-sb1119.child-ai-notice` added (ca-sb1119 0.2.0)
- `ca-sb1119.child-chat-data-not-for-ads-or-sale` added (ca-sb1119 0.2.0)
- `ca-sb1119.child-crisis-response-protocol` added (ca-sb1119 0.2.0)
- `ca-sb1119.child-engagement-and-attachment-safeguards` added (ca-sb1119 0.2.0)
- `ca-sb1119.child-harmful-content-safeguards` added (ca-sb1119 0.2.0)
- `ca-sb1119.child-no-sentience-or-human-claims` added (ca-sb1119 0.2.0)
- `ca-sb1119.child-protective-default-settings` added (ca-sb1119 0.2.0)
- `ca-sb1119.child-safety-risk-assessment-and-policy` added (ca-sb1119 0.2.0)
- `ca-sb1119.independent-child-safety-audit` added (ca-sb1119 0.2.0)
- `ca-sb1119.parental-controls-and-safety-interface` added (ca-sb1119 0.2.0)
- `ca-sb243.companion-bot-crisis-protocol` changed (ca-sb243 0.3.2)
- `ca-sb243.companion-bot-disclosure` changed (ca-sb243 0.3.2)
- `ca-sb243.known-minor-safeguards` changed (ca-sb243 0.3.2)
- `ca-sb243.minor-suitability-disclosure` changed (ca-sb243 0.3.2)
- `ca-sb53.frontier-ai-framework` changed (ca-sb53 0.1.3)
- `ca-sb53.frontier-whistleblower-protection` changed (ca-sb53 0.1.3)
- `ca-sb942.disclosure-verification-tool` changed (ca-sb942 0.1.4)
- `ca-sb942.provenance-disclosure` changed (ca-sb942 0.1.4)
- `ccpa-admt.access-explanation` changed (ccpa-admt 0.1.3)
- `ccpa-admt.opt-out` changed (ccpa-admt 0.1.3)
- `ccpa-admt.pre-use-notice` changed (ccpa-admt 0.1.3)
- `cn-algo-recommendation.minor-protection` changed (cn-algo-recommendation 0.2.2)
- `cn-algo-recommendation.no-addiction-inducing-models` changed (cn-algo-recommendation 0.2.2)
- `cn-algo-recommendation.recommendation-optout` changed (cn-algo-recommendation 0.2.2)
- `cn-deep-synthesis.biometric-editing-consent` changed (cn-deep-synthesis 0.1.3)
- `cn-deep-synthesis.conspicuous-label` changed (cn-deep-synthesis 0.1.3)
- `cn-genai-interim.filing-and-security-assessment` changed (cn-genai-interim 0.1.3)
- `cn-genai-interim.training-data-legitimacy` changed (cn-genai-interim 0.1.3)
- `cn-genai-labeling.dual-label-genai-content` changed (cn-genai-labeling 0.1.3)
- `co-hb26-1263.age-estimation` added (co-hb26-1263 0.2.0)
- `co-hb26-1263.ai-disclosure` added (co-hb26-1263 0.2.0)
- `co-hb26-1263.minor-emotional-dependence-safeguards` added (co-hb26-1263 0.2.0)
- `co-hb26-1263.minor-privacy-and-account-tools` added (co-hb26-1263 0.2.0)
- `co-hb26-1263.minor-sexual-content-safeguards` added (co-hb26-1263 0.2.0)
- `co-hb26-1263.minor-unpredictable-rewards` added (co-hb26-1263 0.2.0)
- `co-hb26-1263.no-licensed-professional-representation` added (co-hb26-1263 0.2.0)
- `co-hb26-1263.suicide-self-harm-protocol` added (co-hb26-1263 0.2.0)
- `co-sb21-169.insurance-ecdis-unfair-discrimination` changed (co-sb21-169 0.1.3)
- `coe-ai-convention.ai-interaction-notification` changed (coe-ai-convention 0.1.3)
- `ct-cart.aedt-predecision-notice` changed (ct-cart 0.1.4)
- `ct-cart.ai-companion-crisis-protocol` changed (ct-cart 0.1.4)
- `ct-cart.ai-companion-disclosure` changed (ct-cart 0.1.4)
- `ct-cart.synthetic-content-provenance` changed (ct-cart 0.1.4)
- `eu-ai-act.art10.data-governance-bias` changed (eu-ai-act 0.1.4)
- `eu-ai-act.art12.record-keeping` changed (eu-ai-act 0.1.4)
- `eu-ai-act.art14.human-oversight` changed (eu-ai-act 0.1.4)
- `eu-ai-act.art15.accuracy-robustness-cybersecurity` changed (eu-ai-act 0.1.4)
- `eu-ai-act.art26.inform-affected-persons` changed (eu-ai-act 0.1.4)
- `eu-ai-act.art27.fria` changed (eu-ai-act 0.1.4)
- `eu-ai-act.art5.biometric-categorisation-sensitive-traits` changed (eu-ai-act 0.1.4)
- `eu-ai-act.art5.emotion-recognition-workplace-education` changed (eu-ai-act 0.1.4)
- `eu-ai-act.art5.nonconsensual-intimate-and-csam` changed (eu-ai-act 0.1.4)
- `eu-ai-act.art5.untargeted-facial-scraping` changed (eu-ai-act 0.1.4)
- `eu-ai-act.art50.chatbot-disclosure` changed (eu-ai-act 0.1.4)
- `eu-ai-act.art50.deepfake-disclosure` changed (eu-ai-act 0.1.4)
- `eu-ai-act.art50.emotion-biometric-notice` changed (eu-ai-act 0.1.4)
- `eu-ai-act.art50.public-interest-text-disclosure` changed (eu-ai-act 0.1.4)
- `eu-ai-act.art50.synthetic-content-machine-marking` changed (eu-ai-act 0.1.4)
- `eu-ai-act.art86.right-to-explanation` changed (eu-ai-act 0.1.4)
- `eu-gdpr-ai-data.ai-data-minimal-by-default` changed (eu-gdpr-ai-data 0.2.2)
- `eu-gdpr-ai-data.ai-recipients-named-at-collection` changed (eu-gdpr-ai-data 0.2.2)
- `eu-gdpr-ai-data.biometric-identification-explicit-consent` changed (eu-gdpr-ai-data 0.2.2)
- `eu-gdpr-ai-data.erasure-reaches-ai-data-stores` changed (eu-gdpr-ai-data 0.2.2)
- `eu-gdpr-ai-data.minimise-personal-data-sent-to-ai` changed (eu-gdpr-ai-data 0.2.2)
- `eu-gdpr-art22.solely-automated-decision-safeguards` changed (eu-gdpr-art22 0.1.2)
- `ga-sb540.age-assurance-before-explicit-features` changed (ga-sb540 0.2.1)
- `ga-sb540.ai-companion-chatbot-disclosure` changed (ga-sb540 0.2.1)
- `ga-sb540.minor-account-tools` changed (ga-sb540 0.2.1)
- `ga-sb540.minor-content-safeguards` changed (ga-sb540 0.2.1)
- `ga-sb540.minor-engagement-techniques` changed (ga-sb540 0.2.1)
- `ga-sb540.minor-no-human-claims` changed (ga-sb540 0.2.1)
- `ga-sb540.no-licensed-professional-claims` changed (ga-sb540 0.2.1)
- `ga-sb540.severe-harm-crisis-protocol` changed (ga-sb540 0.2.1)
- `hi-sb3001.ai-companion-crisis-protocol` changed (hi-sb3001 0.2.1)
- `hi-sb3001.ai-companion-not-human-notice` changed (hi-sb3001 0.2.1)
- `hi-sb3001.known-minor-engagement-limits` changed (hi-sb3001 0.2.1)
- `hi-sb3001.known-minor-sexual-content-safeguards` changed (hi-sb3001 0.2.1)
- `hi-sb3001.minor-screen-time-and-account-tools` changed (hi-sb3001 0.2.1)
- `hi-sb3001.no-encouraging-harm-to-others` changed (hi-sb3001 0.2.1)
- `hi-sb3001.no-mental-health-care-representation` changed (hi-sb3001 0.2.1)
- `ia-sf2417.conversational-ai-disclosure` changed (ia-sf2417 0.2.1)
- `ia-sf2417.minor-privacy-and-account-tools` changed (ia-sf2417 0.2.1)
- `ia-sf2417.minor-sexual-content-safeguards` changed (ia-sf2417 0.2.1)
- `ia-sf2417.minor-variable-rewards` changed (ia-sf2417 0.2.1)
- `ia-sf2417.no-human-like-statements` changed (ia-sf2417 0.2.1)
- `ia-sf2417.no-mental-health-care-representation` changed (ia-sf2417 0.2.1)
- `ia-sf2417.suicide-self-harm-protocol` changed (ia-sf2417 0.2.1)
- `id-s1297.account-privacy-and-parental-tools` changed (id-s1297 0.2.1)
- `id-s1297.conversational-ai-disclosure` changed (id-s1297 0.2.1)
- `id-s1297.minor-no-human-like-statements` changed (id-s1297 0.2.1)
- `id-s1297.minor-sexual-content-safeguards` changed (id-s1297 0.2.1)
- `id-s1297.minor-variable-rewards` changed (id-s1297 0.2.1)
- `id-s1297.no-mental-health-care-representation` changed (id-s1297 0.2.1)
- `id-s1297.suicidal-ideation-crisis-protocol` changed (id-s1297 0.2.1)
- `il-bipa.biometric-disclosure-consent` changed (il-bipa 0.2.2)
- `il-bipa.biometric-notice-and-written-release` changed (il-bipa 0.2.2)
- `il-bipa.biometric-retention-and-destruction` changed (il-bipa 0.2.2)
- `il-hb1806.ai-session-recording-notice-consent` changed (il-hb1806 0.2.2)
- `il-hb1806.ai-therapy-role-limits` changed (il-hb1806 0.2.2)
- `il-hb1806.no-ai-emotion-detection-in-therapy` changed (il-hb1806 0.2.2)
- `il-hb1806.no-unlicensed-ai-therapy` changed (il-hb1806 0.2.2)
- `il-hb3773.ai-use-employee-notice` changed (il-hb3773 0.1.2)
- `il-hb3773.proxy-discrimination-llm-decision-path` changed (il-hb3773 0.1.2)
- `il-sb315.critical-safety-incident-reporting` changed (il-sb315 0.3.2)
- `il-sb315.frontier-ai-framework` changed (il-sb315 0.3.2)
- `il-sb315.independent-compliance-audit` changed (il-sb315 0.3.2)
- `il-sb315.transparency-report` changed (il-sb315 0.3.2)
- `il-sb315.whistleblower-protection` changed (il-sb315 0.3.2)
- `imda-agentic.human-approval-gate-high-impact-action` changed (imda-agentic 0.1.5)
- `kr-ai-basic-act.ai-transparency` changed (kr-ai-basic-act 0.1.3)
- `kr-ai-basic-act.high-impact-ai-responsibilities` changed (kr-ai-basic-act 0.1.3)
- `me-ld1727.chatbot-not-human-notice` changed (me-ld1727 0.2.1)
- `ne-lb525.conversational-ai-crisis-protocol` changed (ne-lb525 0.1.3)
- `ne-lb525.conversational-ai-disclosure` changed (ne-lb525 0.1.3)
- `ne-lb525.no-mental-health-care-representation` changed (ne-lb525 0.1.3)
- `nist-ai-rmf.manage-4-1-oversight` changed (nist-ai-rmf 0.1.3)
- `nist-ai-rmf.measure-2-11-fairness` changed (nist-ai-rmf 0.1.3)
- `nist-aml-agentic.agentic-adversarial-security` changed (nist-aml-agentic 0.2.1)
- `nist-genai-profile.output-pii-leakage-detection` changed (nist-genai-profile 0.2.1)
- `ny-gbl-art47.companion-crisis-protocol` changed (ny-gbl-art47 0.2.3)
- `ny-gbl-art47.companion-not-human-notification` changed (ny-gbl-art47 0.2.3)
- `ny-raise-act.critical-safety-incident-reporting` changed (ny-raise-act 0.2.2)
- `ny-raise-act.frontier-ai-framework` changed (ny-raise-act 0.2.2)
- `ny-raise-act.transparency-report` changed (ny-raise-act 0.2.2)
- `oecd-ai.ai-interaction-awareness` changed (oecd-ai 0.2.3)
- `oecd-ai.reproducible-consequential-decisions` changed (oecd-ai 0.2.3)
- `or-sb1546.ai-companion-crisis-protocol` changed (or-sb1546 0.1.3)
- `or-sb1546.ai-companion-disclosure` changed (or-sb1546 0.1.3)
- `qc-law25.automated-decision-inform-and-review` changed (qc-law25 0.1.2)
- `guardrail.agent-ai-generated-code-provenance` changed (recommended-guardrails 0.4.1)
- `guardrail.agent-component-provenance` changed (recommended-guardrails 0.4.1)
- `guardrail.agent-egress-and-environment-boundary` changed (recommended-guardrails 0.4.1)
- `guardrail.agent-high-impact-action-approval` changed (recommended-guardrails 0.4.1)
- `guardrail.agent-identity-and-action-traceability` changed (recommended-guardrails 0.4.1)
- `guardrail.agent-incident-detection-and-disclosure` changed (recommended-guardrails 0.4.1)
- `guardrail.agent-least-privilege-tool-scope` changed (recommended-guardrails 0.4.1)
- `guardrail.agent-memory-write-controls` changed (recommended-guardrails 0.4.1)
- `guardrail.agent-retrieval-respects-requester-permissions` changed (recommended-guardrails 0.4.1)
- `guardrail.agent-tool-server-authentication` changed (recommended-guardrails 0.4.1)
- `guardrail.agent-untrusted-content-isolation` changed (recommended-guardrails 0.4.1)
- `guardrail.baseline-adverse-decision-explanation` changed (recommended-guardrails 0.4.1)
- `guardrail.baseline-ai-interaction-disclosure` changed (recommended-guardrails 0.4.1)
- `guardrail.baseline-crisis-protocol` changed (recommended-guardrails 0.4.1)
- `guardrail.ethics-advice-not-tuned-for-approval` changed (recommended-guardrails 0.4.1)
- `guardrail.ethics-conversation-content-out-of-ads-and-trackers` changed (recommended-guardrails 0.4.1)
- `guardrail.ethics-evaluate-proxy-features-for-disparity` changed (recommended-guardrails 0.4.1)
- `guardrail.ethics-honor-age-signals` changed (recommended-guardrails 0.4.1)
- `guardrail.ethics-no-anthropomorphic-persona-claims` changed (recommended-guardrails 0.4.1)
- `guardrail.ethics-no-engagement-maximizing-design` changed (recommended-guardrails 0.4.1)
- `guardrail.ethics-no-professional-credential-claims` changed (recommended-guardrails 0.4.1)
- `guardrail.ethics-no-profiling-from-inferred-emotions-or-traits` changed (recommended-guardrails 0.4.1)
- `guardrail.ethics-purpose-limited-training-consent` changed (recommended-guardrails 0.4.1)
- `guardrail.ethics-stored-content-analysis-opt-in` changed (recommended-guardrails 0.4.1)
- `guardrail.ethics-substantiated-capability-claims` changed (recommended-guardrails 0.4.1)
- `guardrail.opint-bounded-spend-and-usage` changed (recommended-guardrails 0.4.1)
- `guardrail.opint-guards-fail-closed` changed (recommended-guardrails 0.4.1)
- `guardrail.opint-reevaluate-on-model-change` changed (recommended-guardrails 0.4.1)
- `guardrail.opint-safeguards-survive-long-context` changed (recommended-guardrails 0.4.1)
- `guardrail.opint-scoped-response-cache` changed (recommended-guardrails 0.4.1)
- `guardrail.output-confabulation-controls` changed (recommended-guardrails 0.4.1)
- `guardrail.output-decision-reproducibility-record` changed (recommended-guardrails 0.4.1)
- `guardrail.output-pii-leakage-screening` changed (recommended-guardrails 0.4.1)
- `guardrail.review-reversal-rate-monitoring` changed (recommended-guardrails 0.4.1)
- `guardrail.review-substantive-human-review` changed (recommended-guardrails 0.4.1)
- `ri-s2195.ai-companion-crisis-protocol` changed (ri-s2195 0.2.1)
- `ri-s2195.ai-companion-not-human-notification` changed (ri-s2195 0.2.1)
- `tn-elvis-act.ai-likeness-tool-authorization` changed (tn-elvis-act 0.1.3)
- `tn-sb1580.no-mental-health-professional-representation` changed (tn-sb1580 0.1.2)
- `tx-bc-503.biometric-capture-notice-and-consent` changed (tx-bc-503 0.2.2)
- `tx-bc-503.biometric-destruction` changed (tx-bc-503 0.2.2)
- `tx-sb1188.ai-created-records-practitioner-review` changed (tx-sb1188 0.3.2)
- `tx-sb1188.ai-diagnostic-use-patient-disclosure` changed (tx-sb1188 0.3.2)
- `tx-traiga.government-ai-consumer-disclosure` changed (tx-traiga 0.1.3)
- `tx-traiga.government-social-scoring` changed (tx-traiga 0.1.3)
- `tx-traiga.intentional-unlawful-discrimination` changed (tx-traiga 0.1.3)
- `tx-traiga.no-ai-designed-to-incite-harm` changed (tx-traiga 0.1.3)
- `us-ftc-impersonation.ai-agent-government-or-business-impersonation` changed (us-ftc-impersonation 0.2.2)
- `us-hipaa-privacy.ai-vendor-business-associate-contract` changed (us-hipaa-privacy 0.2.3)
- `us-hipaa-privacy.minimum-necessary-phi-to-ai` changed (us-hipaa-privacy 0.2.3)
- `us-state-privacy-admt.profiling-optout` changed (us-state-privacy-admt 0.1.4)
- `ut-ai-policy-act.genai-regulated-occupation-disclosure` changed (ut-ai-policy-act 0.1.2)
- `wa-hb2225.ai-companion-crisis-protocol` changed (wa-hb2225 0.1.3)
- `wa-hb2225.ai-companion-disclosure` changed (wa-hb2225 0.1.3)
- `wa-mhmda.biometric-data-collection-consent` changed (wa-mhmda 0.2.2)

## 2026.10.02 (2026-10-02)

42 added · 54 changed · 0 removed — packs: `ai-security`, `ca-ab853`, `ca-sb942`, `eu-ai-act`, `ga-sb540`, `hi-sb3001`, `ia-sf2417`, `id-s1297`, `ieee-7003`, `imda-agentic`, `me-ld1727`, `nist-ai-rmf`, `nist-aml-agentic`, `nist-genai-profile`, `nist-sp800-218a`, `ny-gbl-art47`, `oecd-ai`, `recommended-guardrails`, `ri-s2195`, `unesco-ai-ethics`

Corpus audit (`docs/AUDIT-STANDARD.md`, as of 2026-10-01): 81.3% of 3709 checks pass; 171 of 505 artefacts audit-grade.

- `ai-security.untrusted-input-to-agent-instructions-or-tools` changed (ai-security 0.1.3)
- `ca-ab853.genai-hosting-platform-gate` changed (ca-ab853 0.1.4)
- `ca-sb942.disclosure-verification-tool` added (ca-sb942 0.2.0)
- `ca-sb942.provenance-disclosure` changed (ca-sb942 0.2.0)
- `eu-ai-act.art10.data-governance-bias` changed (eu-ai-act 0.1.3)
- `eu-ai-act.art12.record-keeping` changed (eu-ai-act 0.1.3)
- `eu-ai-act.art14.human-oversight` changed (eu-ai-act 0.1.3)
- `eu-ai-act.art15.accuracy-robustness-cybersecurity` changed (eu-ai-act 0.1.3)
- `eu-ai-act.art26.inform-affected-persons` changed (eu-ai-act 0.1.3)
- `eu-ai-act.art27.fria` changed (eu-ai-act 0.1.3)
- `eu-ai-act.art5.biometric-categorisation-sensitive-traits` changed (eu-ai-act 0.1.3)
- `eu-ai-act.art5.emotion-recognition-workplace-education` changed (eu-ai-act 0.1.3)
- `eu-ai-act.art5.untargeted-facial-scraping` changed (eu-ai-act 0.1.3)
- `ga-sb540.age-assurance-before-explicit-features` added (ga-sb540 0.2.0)
- `ga-sb540.ai-companion-chatbot-disclosure` added (ga-sb540 0.2.0)
- `ga-sb540.minor-account-tools` added (ga-sb540 0.2.0)
- `ga-sb540.minor-content-safeguards` added (ga-sb540 0.2.0)
- `ga-sb540.minor-engagement-techniques` added (ga-sb540 0.2.0)
- `ga-sb540.minor-no-human-claims` added (ga-sb540 0.2.0)
- `ga-sb540.no-licensed-professional-claims` added (ga-sb540 0.2.0)
- `ga-sb540.severe-harm-crisis-protocol` added (ga-sb540 0.2.0)
- `hi-sb3001.ai-companion-crisis-protocol` added (hi-sb3001 0.2.0)
- `hi-sb3001.ai-companion-not-human-notice` added (hi-sb3001 0.2.0)
- `hi-sb3001.known-minor-engagement-limits` added (hi-sb3001 0.2.0)
- `hi-sb3001.known-minor-sexual-content-safeguards` added (hi-sb3001 0.2.0)
- `hi-sb3001.minor-screen-time-and-account-tools` added (hi-sb3001 0.2.0)
- `hi-sb3001.no-encouraging-harm-to-others` added (hi-sb3001 0.2.0)
- `hi-sb3001.no-mental-health-care-representation` added (hi-sb3001 0.2.0)
- `ia-sf2417.conversational-ai-disclosure` added (ia-sf2417 0.2.0)
- `ia-sf2417.minor-privacy-and-account-tools` added (ia-sf2417 0.2.0)
- `ia-sf2417.minor-sexual-content-safeguards` added (ia-sf2417 0.2.0)
- `ia-sf2417.minor-variable-rewards` added (ia-sf2417 0.2.0)
- `ia-sf2417.no-human-like-statements` added (ia-sf2417 0.2.0)
- `ia-sf2417.no-mental-health-care-representation` added (ia-sf2417 0.2.0)
- `ia-sf2417.suicide-self-harm-protocol` added (ia-sf2417 0.2.0)
- `id-s1297.account-privacy-and-parental-tools` added (id-s1297 0.2.0)
- `id-s1297.conversational-ai-disclosure` added (id-s1297 0.2.0)
- `id-s1297.minor-no-human-like-statements` added (id-s1297 0.2.0)
- `id-s1297.minor-sexual-content-safeguards` added (id-s1297 0.2.0)
- `id-s1297.minor-variable-rewards` added (id-s1297 0.2.0)
- `id-s1297.no-mental-health-care-representation` added (id-s1297 0.2.0)
- `id-s1297.suicidal-ideation-crisis-protocol` added (id-s1297 0.2.0)
- `ieee-7003.proxy-variable-analysis` changed (ieee-7003 0.1.2)
- `imda-agentic.agent-identity-and-action-traceability` changed (imda-agentic 0.1.4)
- `imda-agentic.human-approval-gate-high-impact-action` changed (imda-agentic 0.1.4)
- `me-ld1727.chatbot-not-human-notice` added (me-ld1727 0.2.0)
- `nist-ai-rmf.manage-4-1-oversight` changed (nist-ai-rmf 0.1.2)
- `nist-ai-rmf.measure-2-11-fairness` changed (nist-ai-rmf 0.1.2)
- `nist-aml-agentic.usage-restrictions` added (nist-aml-agentic 0.2.0)
- `nist-genai-profile.content-filters` added (nist-genai-profile 0.2.0)
- `nist-genai-profile.reassess-after-adaptation` added (nist-genai-profile 0.2.0)
- `nist-sp800-218a.pw-4-4-verify-acquired-models` added (nist-sp800-218a 0.2.0)
- `nist-sp800-218a.pw-5-1-model-io-handling` added (nist-sp800-218a 0.2.0)
- `ny-gbl-art47.companion-crisis-protocol` changed (ny-gbl-art47 0.2.2)
- `ny-gbl-art47.companion-not-human-notification` changed (ny-gbl-art47 0.2.2)
- `oecd-ai.ai-interaction-awareness` changed (oecd-ai 0.2.2)
- `oecd-ai.capabilities-and-limitations` changed (oecd-ai 0.2.2)
- `oecd-ai.reproducible-consequential-decisions` changed (oecd-ai 0.2.2)
- `guardrail.ethics-conversation-content-out-of-ads-and-trackers` added (recommended-guardrails 0.4.0)
- `guardrail.ethics-no-professional-credential-claims` added (recommended-guardrails 0.4.0)
- `guardrail.ethics-no-profiling-from-inferred-emotions-or-traits` added (recommended-guardrails 0.4.0)
- `guardrail.ethics-stored-content-analysis-opt-in` added (recommended-guardrails 0.4.0)
- `guardrail.agent-ai-generated-code-provenance` changed (recommended-guardrails 0.4.0)
- `guardrail.agent-component-provenance` changed (recommended-guardrails 0.4.0)
- `guardrail.agent-egress-and-environment-boundary` changed (recommended-guardrails 0.4.0)
- `guardrail.agent-high-impact-action-approval` changed (recommended-guardrails 0.4.0)
- `guardrail.agent-identity-and-action-traceability` changed (recommended-guardrails 0.4.0)
- `guardrail.agent-incident-detection-and-disclosure` changed (recommended-guardrails 0.4.0)
- `guardrail.agent-least-privilege-tool-scope` changed (recommended-guardrails 0.4.0)
- `guardrail.agent-memory-write-controls` changed (recommended-guardrails 0.4.0)
- `guardrail.agent-retrieval-respects-requester-permissions` changed (recommended-guardrails 0.4.0)
- `guardrail.agent-tool-server-authentication` changed (recommended-guardrails 0.4.0)
- `guardrail.agent-untrusted-content-isolation` changed (recommended-guardrails 0.4.0)
- `guardrail.baseline-adverse-decision-explanation` changed (recommended-guardrails 0.4.0)
- `guardrail.baseline-ai-interaction-disclosure` changed (recommended-guardrails 0.4.0)
- `guardrail.baseline-crisis-protocol` changed (recommended-guardrails 0.4.0)
- `guardrail.ethics-advice-not-tuned-for-approval` changed (recommended-guardrails 0.4.0)
- `guardrail.ethics-evaluate-proxy-features-for-disparity` changed (recommended-guardrails 0.4.0)
- `guardrail.ethics-honor-age-signals` changed (recommended-guardrails 0.4.0)
- `guardrail.ethics-no-anthropomorphic-persona-claims` changed (recommended-guardrails 0.4.0)
- `guardrail.ethics-no-engagement-maximizing-design` changed (recommended-guardrails 0.4.0)
- `guardrail.ethics-purpose-limited-training-consent` changed (recommended-guardrails 0.4.0)
- `guardrail.ethics-substantiated-capability-claims` changed (recommended-guardrails 0.4.0)
- `guardrail.opint-bounded-spend-and-usage` changed (recommended-guardrails 0.4.0)
- `guardrail.opint-guards-fail-closed` changed (recommended-guardrails 0.4.0)
- `guardrail.opint-reevaluate-on-model-change` changed (recommended-guardrails 0.4.0)
- `guardrail.opint-safeguards-survive-long-context` changed (recommended-guardrails 0.4.0)
- `guardrail.opint-scoped-response-cache` changed (recommended-guardrails 0.4.0)
- `guardrail.output-confabulation-controls` changed (recommended-guardrails 0.4.0)
- `guardrail.output-decision-reproducibility-record` changed (recommended-guardrails 0.4.0)
- `guardrail.output-pii-leakage-screening` changed (recommended-guardrails 0.4.0)
- `guardrail.review-reversal-rate-monitoring` changed (recommended-guardrails 0.4.0)
- `guardrail.review-substantive-human-review` changed (recommended-guardrails 0.4.0)
- `ri-s2195.ai-companion-crisis-protocol` added (ri-s2195 0.2.0)
- `ri-s2195.ai-companion-not-human-notification` added (ri-s2195 0.2.0)
- `unesco-ai-ethics.human-oversight-overturn` changed (unesco-ai-ethics 0.1.3)

## 2026.10.01.3 (2026-10-01)

0 added · 36 changed · 0 removed — packs: `ca-ab853`, `ca-sb942`, `ct-cart`, `recommended-guardrails`

- `ca-ab853.capture-device-latent-disclosure` changed (ca-ab853 0.1.3)
- `ca-ab853.genai-hosting-platform-gate` changed (ca-ab853 0.1.3)
- `ca-ab853.platform-provenance-detection-and-display` changed (ca-ab853 0.1.3)
- `ca-sb942.provenance-disclosure` changed (ca-sb942 0.1.3)
- `ct-cart.synthetic-content-provenance` changed (ct-cart 0.1.3)
- `guardrail.agent-ai-generated-code-provenance` changed (recommended-guardrails 0.3.4)
- `guardrail.agent-component-provenance` changed (recommended-guardrails 0.3.4)
- `guardrail.agent-egress-and-environment-boundary` changed (recommended-guardrails 0.3.4)
- `guardrail.agent-high-impact-action-approval` changed (recommended-guardrails 0.3.4)
- `guardrail.agent-identity-and-action-traceability` changed (recommended-guardrails 0.3.4)
- `guardrail.agent-incident-detection-and-disclosure` changed (recommended-guardrails 0.3.4)
- `guardrail.agent-least-privilege-tool-scope` changed (recommended-guardrails 0.3.4)
- `guardrail.agent-memory-write-controls` changed (recommended-guardrails 0.3.4)
- `guardrail.agent-retrieval-respects-requester-permissions` changed (recommended-guardrails 0.3.4)
- `guardrail.agent-tool-server-authentication` changed (recommended-guardrails 0.3.4)
- `guardrail.agent-untrusted-content-isolation` changed (recommended-guardrails 0.3.4)
- `guardrail.baseline-adverse-decision-explanation` changed (recommended-guardrails 0.3.4)
- `guardrail.baseline-ai-interaction-disclosure` changed (recommended-guardrails 0.3.4)
- `guardrail.baseline-crisis-protocol` changed (recommended-guardrails 0.3.4)
- `guardrail.ethics-advice-not-tuned-for-approval` changed (recommended-guardrails 0.3.4)
- `guardrail.ethics-evaluate-proxy-features-for-disparity` changed (recommended-guardrails 0.3.4)
- `guardrail.ethics-honor-age-signals` changed (recommended-guardrails 0.3.4)
- `guardrail.ethics-no-anthropomorphic-persona-claims` changed (recommended-guardrails 0.3.4)
- `guardrail.ethics-no-engagement-maximizing-design` changed (recommended-guardrails 0.3.4)
- `guardrail.ethics-purpose-limited-training-consent` changed (recommended-guardrails 0.3.4)
- `guardrail.ethics-substantiated-capability-claims` changed (recommended-guardrails 0.3.4)
- `guardrail.opint-bounded-spend-and-usage` changed (recommended-guardrails 0.3.4)
- `guardrail.opint-guards-fail-closed` changed (recommended-guardrails 0.3.4)
- `guardrail.opint-reevaluate-on-model-change` changed (recommended-guardrails 0.3.4)
- `guardrail.opint-safeguards-survive-long-context` changed (recommended-guardrails 0.3.4)
- `guardrail.opint-scoped-response-cache` changed (recommended-guardrails 0.3.4)
- `guardrail.output-confabulation-controls` changed (recommended-guardrails 0.3.4)
- `guardrail.output-decision-reproducibility-record` changed (recommended-guardrails 0.3.4)
- `guardrail.output-pii-leakage-screening` changed (recommended-guardrails 0.3.4)
- `guardrail.review-reversal-rate-monitoring` changed (recommended-guardrails 0.3.4)
- `guardrail.review-substantive-human-review` changed (recommended-guardrails 0.3.4)

## 2026.10.01.2 (2026-10-01)

0 added · 125 changed · 0 removed — packs: `ai-security`, `ca-ab1836`, `ca-ab2013`, `ca-ab3030`, `ca-ab489`, `ca-ab853`, `ca-civ-3344`, `ca-cmia`, `ca-sb243`, `ca-sb53`, `ca-sb942`, `ccpa-admt`, `cn-algo-recommendation`, `cn-deep-synthesis`, `cn-genai-interim`, `cn-genai-labeling`, `co-sb21-169`, `co-sb26-189`, `coe-ai-convention`, `ct-cart`, `eu-ai-act`, `eu-altai`, `eu-gdpr-ai-data`, `eu-gdpr-art22`, `eu-gpai-cop`, `finra-genai`, `ieee-7003`, `il-ai-video-interview`, `il-bipa`, `il-hb1806`, `il-hb3773`, `il-sb315`, `imda-agentic`, `jp-ai-guidelines`, `kr-ai-basic-act`, `mas-feat`, `md-hb1202`, `naic-ai-bulletin`, `ne-lb525`, `nist-aml-agentic`, `nist-genai-profile`, `ny-gbl-art47`, `ny-raise-act`, `nyc-ll144`, `oecd-ai`, `or-sb1546`, `qc-law25`, `recommended-guardrails`, `tn-elvis-act`, `tn-sb1580`, `tx-bc-503`, `tx-sb1188`, `tx-traiga`, `uk-ico-ai`, `us-ftc-impersonation`, `us-hipaa-privacy`, `us-state-privacy-admt`, `ut-ai-policy-act`, `ut-hb452`, `wa-hb2225`, `wa-mhmda`, `who-health-ai`

- `ai-security.untrusted-input-to-agent-instructions-or-tools` changed (ai-security 0.1.2)
- `ca-ab1836.digital-replica-deceased-consent` changed (ca-ab1836 0.1.2)
- `ca-ab2013.training-data-disclosure` changed (ca-ab2013 0.1.2)
- `ca-ab3030.genai-patient-communication-disclaimer` changed (ca-ab3030 0.1.1)
- `ca-ab489.no-implied-licensed-professional` changed (ca-ab489 0.1.1)
- `ca-ab853.capture-device-latent-disclosure` changed (ca-ab853 0.1.2)
- `ca-ab853.genai-hosting-platform-gate` changed (ca-ab853 0.1.2)
- `ca-ab853.platform-provenance-detection-and-display` changed (ca-ab853 0.1.2)
- `ca-civ-3344.ai-likeness-commercial-use-consent` changed (ca-civ-3344 0.2.1)
- `ca-cmia.medical-information-to-ai-vendor` changed (ca-cmia 0.2.2)
- `ca-sb243.companion-bot-crisis-protocol` changed (ca-sb243 0.3.1)
- `ca-sb243.companion-bot-disclosure` changed (ca-sb243 0.3.1)
- `ca-sb243.known-minor-safeguards` changed (ca-sb243 0.3.1)
- `ca-sb243.minor-suitability-disclosure` changed (ca-sb243 0.3.1)
- `ca-sb53.frontier-ai-framework` changed (ca-sb53 0.1.2)
- `ca-sb53.frontier-whistleblower-protection` changed (ca-sb53 0.1.2)
- `ca-sb942.provenance-disclosure` changed (ca-sb942 0.1.2)
- `ccpa-admt.access-explanation` changed (ccpa-admt 0.1.2)
- `ccpa-admt.opt-out` changed (ccpa-admt 0.1.2)
- `ccpa-admt.pre-use-notice` changed (ccpa-admt 0.1.2)
- `cn-algo-recommendation.minor-protection` changed (cn-algo-recommendation 0.2.1)
- `cn-algo-recommendation.no-addiction-inducing-models` changed (cn-algo-recommendation 0.2.1)
- `cn-algo-recommendation.recommendation-optout` changed (cn-algo-recommendation 0.2.1)
- `cn-deep-synthesis.conspicuous-label` changed (cn-deep-synthesis 0.1.2)
- `cn-genai-interim.filing-and-security-assessment` changed (cn-genai-interim 0.1.2)
- `cn-genai-interim.training-data-legitimacy` changed (cn-genai-interim 0.1.2)
- `cn-genai-labeling.dual-label-genai-content` changed (cn-genai-labeling 0.1.2)
- `co-sb21-169.insurance-ecdis-unfair-discrimination` changed (co-sb21-169 0.1.2)
- `co-sb26-189.adverse-outcome-explanation` changed (co-sb26-189 0.1.2)
- `co-sb26-189.consumer-notice-consequential-decision` changed (co-sb26-189 0.1.2)
- `co-sb26-189.developer-documentation-to-deployers` changed (co-sb26-189 0.1.2)
- `co-sb26-189.human-review-and-data-correction` changed (co-sb26-189 0.1.2)
- `coe-ai-convention.documentation-and-contest` changed (coe-ai-convention 0.1.2)
- `ct-cart.aedt-predecision-notice` changed (ct-cart 0.1.2)
- `ct-cart.ai-companion-crisis-protocol` changed (ct-cart 0.1.2)
- `ct-cart.ai-companion-disclosure` changed (ct-cart 0.1.2)
- `ct-cart.synthetic-content-provenance` changed (ct-cart 0.1.2)
- `eu-ai-act.art10.data-governance-bias` changed (eu-ai-act 0.1.2)
- `eu-ai-act.art12.record-keeping` changed (eu-ai-act 0.1.2)
- `eu-ai-act.art14.human-oversight` changed (eu-ai-act 0.1.2)
- `eu-ai-act.art15.accuracy-robustness-cybersecurity` changed (eu-ai-act 0.1.2)
- `eu-ai-act.art26.inform-affected-persons` changed (eu-ai-act 0.1.2)
- `eu-ai-act.art27.fria` changed (eu-ai-act 0.1.2)
- `eu-ai-act.art5.nonconsensual-intimate-and-csam` changed (eu-ai-act 0.1.2)
- `eu-ai-act.art50.chatbot-disclosure` changed (eu-ai-act 0.1.2)
- `eu-ai-act.art50.emotion-biometric-notice` changed (eu-ai-act 0.1.2)
- `eu-ai-act.art50.public-interest-text-disclosure` changed (eu-ai-act 0.1.2)
- `eu-ai-act.art50.synthetic-content-machine-marking` changed (eu-ai-act 0.1.2)
- `eu-ai-act.art86.right-to-explanation` changed (eu-ai-act 0.1.2)
- `eu-altai.non-discrimination-fairness` changed (eu-altai 0.1.3)
- `eu-altai.transparency-traceability` changed (eu-altai 0.1.3)
- `eu-gdpr-ai-data.ai-recipients-named-at-collection` changed (eu-gdpr-ai-data 0.2.1)
- `eu-gdpr-ai-data.biometric-identification-explicit-consent` changed (eu-gdpr-ai-data 0.2.1)
- `eu-gdpr-ai-data.erasure-reaches-ai-data-stores` changed (eu-gdpr-ai-data 0.2.1)
- `eu-gdpr-art22.solely-automated-decision-safeguards` changed (eu-gdpr-art22 0.1.1)
- `eu-gpai-cop.model-documentation` changed (eu-gpai-cop 0.1.2)
- `finra-genai.agentic-supervision` changed (finra-genai 0.1.3)
- `finra-genai.genai-monitoring-logging` changed (finra-genai 0.1.3)
- `ieee-7003.proxy-variable-analysis` changed (ieee-7003 0.1.1)
- `il-ai-video-interview.video-interview-ai-consent` changed (il-ai-video-interview 0.1.2)
- `il-bipa.biometric-disclosure-consent` changed (il-bipa 0.2.1)
- `il-bipa.biometric-notice-and-written-release` changed (il-bipa 0.2.1)
- `il-bipa.biometric-retention-and-destruction` changed (il-bipa 0.2.1)
- `il-hb1806.ai-session-recording-notice-consent` changed (il-hb1806 0.2.1)
- `il-hb1806.ai-therapy-role-limits` changed (il-hb1806 0.2.1)
- `il-hb1806.no-unlicensed-ai-therapy` changed (il-hb1806 0.2.1)
- `il-hb3773.ai-use-employee-notice` changed (il-hb3773 0.1.1)
- `il-hb3773.proxy-discrimination-llm-decision-path` changed (il-hb3773 0.1.1)
- `il-sb315.critical-safety-incident-reporting` changed (il-sb315 0.3.1)
- `il-sb315.frontier-ai-framework` changed (il-sb315 0.3.1)
- `il-sb315.independent-compliance-audit` changed (il-sb315 0.3.1)
- `il-sb315.transparency-report` changed (il-sb315 0.3.1)
- `il-sb315.whistleblower-protection` changed (il-sb315 0.3.1)
- `imda-agentic.agent-identity-and-action-traceability` changed (imda-agentic 0.1.3)
- `imda-agentic.human-approval-gate-high-impact-action` changed (imda-agentic 0.1.3)
- `jp-ai-guidelines.transparency-accountability` changed (jp-ai-guidelines 0.1.3)
- `kr-ai-basic-act.ai-transparency` changed (kr-ai-basic-act 0.1.2)
- `mas-feat.accuracy-bias-validation` changed (mas-feat 0.1.2)
- `mas-feat.external-review-channels` changed (mas-feat 0.1.2)
- `mas-feat.fairness-justifiability` changed (mas-feat 0.1.2)
- `mas-feat.transparency-disclosure-explanation` changed (mas-feat 0.1.2)
- `md-hb1202.facial-recognition-interview-consent` changed (md-hb1202 0.1.2)
- `naic-ai-bulletin.model-validation-bias-testing` changed (naic-ai-bulletin 0.1.3)
- `naic-ai-bulletin.third-party-ai-oversight` changed (naic-ai-bulletin 0.1.3)
- `ne-lb525.conversational-ai-crisis-protocol` changed (ne-lb525 0.1.2)
- `ne-lb525.conversational-ai-disclosure` changed (ne-lb525 0.1.2)
- `nist-aml-agentic.agentic-adversarial-security` changed (nist-aml-agentic 0.1.2)
- `nist-genai-profile.content-provenance` changed (nist-genai-profile 0.1.3)
- `ny-gbl-art47.companion-not-human-notification` changed (ny-gbl-art47 0.2.1)
- `ny-raise-act.critical-safety-incident-reporting` changed (ny-raise-act 0.2.1)
- `ny-raise-act.frontier-ai-framework` changed (ny-raise-act 0.2.1)
- `ny-raise-act.transparency-report` changed (ny-raise-act 0.2.1)
- `nyc-ll144.aedt-candidate-notice` changed (nyc-ll144 0.1.3)
- `nyc-ll144.bias-audit` changed (nyc-ll144 0.1.3)
- `oecd-ai.reproducible-consequential-decisions` changed (oecd-ai 0.2.1)
- `or-sb1546.ai-companion-crisis-protocol` changed (or-sb1546 0.1.2)
- `or-sb1546.ai-companion-disclosure` changed (or-sb1546 0.1.2)
- `qc-law25.automated-decision-inform-and-review` changed (qc-law25 0.1.1)
- `guardrail.agent-high-impact-action-approval` changed (recommended-guardrails 0.3.3)
- `guardrail.baseline-ai-interaction-disclosure` changed (recommended-guardrails 0.3.3)
- `guardrail.baseline-crisis-protocol` changed (recommended-guardrails 0.3.3)
- `tn-elvis-act.ai-likeness-tool-authorization` changed (tn-elvis-act 0.1.2)
- `tn-sb1580.no-mental-health-professional-representation` changed (tn-sb1580 0.1.1)
- `tx-bc-503.biometric-capture-notice-and-consent` changed (tx-bc-503 0.2.1)
- `tx-bc-503.biometric-destruction` changed (tx-bc-503 0.2.1)
- `tx-sb1188.ai-created-records-practitioner-review` changed (tx-sb1188 0.3.1)
- `tx-sb1188.ai-diagnostic-use-patient-disclosure` changed (tx-sb1188 0.3.1)
- `tx-sb1188.ehr-treatment-tool-biological-sex-input` changed (tx-sb1188 0.3.1)
- `tx-traiga.government-ai-consumer-disclosure` changed (tx-traiga 0.1.2)
- `uk-ico-ai.ai-adm-safeguards-dpia` changed (uk-ico-ai 0.1.3)
- `us-ftc-impersonation.ai-agent-government-or-business-impersonation` changed (us-ftc-impersonation 0.2.1)
- `us-hipaa-privacy.ai-vendor-business-associate-contract` changed (us-hipaa-privacy 0.2.2)
- `us-hipaa-privacy.minimum-necessary-phi-to-ai` changed (us-hipaa-privacy 0.2.2)
- `us-state-privacy-admt.profiling-optout` changed (us-state-privacy-admt 0.1.3)
- `ut-ai-policy-act.genai-consumer-transaction-disclosure` changed (ut-ai-policy-act 0.1.1)
- `ut-ai-policy-act.genai-regulated-occupation-disclosure` changed (ut-ai-policy-act 0.1.1)
- `ut-hb452.in-conversation-ad-disclosure` changed (ut-hb452 0.3.1)
- `ut-hb452.mental-health-chatbot-ai-disclosure` changed (ut-hb452 0.3.1)
- `ut-hb452.mental-health-chatbot-safe-harbor-policy` changed (ut-hb452 0.3.1)
- `ut-hb452.no-ad-targeting-on-user-input` changed (ut-hb452 0.3.1)
- `ut-hb452.no-sale-or-sharing-of-user-input` changed (ut-hb452 0.3.1)
- `wa-hb2225.ai-companion-crisis-protocol` changed (wa-hb2225 0.1.2)
- `wa-hb2225.ai-companion-disclosure` changed (wa-hb2225 0.1.2)
- `wa-mhmda.biometric-data-collection-consent` changed (wa-mhmda 0.2.1)
- `who-health-ai.transparency-documentation` changed (who-health-ai 0.1.2)

## 2026.10.01 (2026-10-01)

14 added · 31 changed · 0 removed — packs: `ca-sb243`, `eu-gdpr-ai-data`, `il-bipa`, `ny-gbl-art47`, `recommended-guardrails`, `tx-bc-503`, `wa-mhmda`

- `ca-sb243.minor-suitability-disclosure` added (ca-sb243 0.3.0)
- `eu-gdpr-ai-data.ai-data-minimal-by-default` added (eu-gdpr-ai-data 0.2.0)
- `eu-gdpr-ai-data.ai-recipients-named-at-collection` added (eu-gdpr-ai-data 0.2.0)
- `eu-gdpr-ai-data.biometric-identification-explicit-consent` added (eu-gdpr-ai-data 0.2.0)
- `eu-gdpr-ai-data.erasure-reaches-ai-data-stores` added (eu-gdpr-ai-data 0.2.0)
- `eu-gdpr-ai-data.minimise-personal-data-sent-to-ai` added (eu-gdpr-ai-data 0.2.0)
- `il-bipa.biometric-disclosure-consent` added (il-bipa 0.2.0)
- `il-bipa.biometric-notice-and-written-release` added (il-bipa 0.2.0)
- `il-bipa.biometric-retention-and-destruction` added (il-bipa 0.2.0)
- `ny-gbl-art47.companion-crisis-protocol` added (ny-gbl-art47 0.2.0)
- `ny-gbl-art47.companion-not-human-notification` added (ny-gbl-art47 0.2.0)
- `guardrail.agent-ai-generated-code-provenance` changed (recommended-guardrails 0.3.2)
- `guardrail.agent-component-provenance` changed (recommended-guardrails 0.3.2)
- `guardrail.agent-egress-and-environment-boundary` changed (recommended-guardrails 0.3.2)
- `guardrail.agent-high-impact-action-approval` changed (recommended-guardrails 0.3.2)
- `guardrail.agent-identity-and-action-traceability` changed (recommended-guardrails 0.3.2)
- `guardrail.agent-incident-detection-and-disclosure` changed (recommended-guardrails 0.3.2)
- `guardrail.agent-least-privilege-tool-scope` changed (recommended-guardrails 0.3.2)
- `guardrail.agent-memory-write-controls` changed (recommended-guardrails 0.3.2)
- `guardrail.agent-retrieval-respects-requester-permissions` changed (recommended-guardrails 0.3.2)
- `guardrail.agent-tool-server-authentication` changed (recommended-guardrails 0.3.2)
- `guardrail.agent-untrusted-content-isolation` changed (recommended-guardrails 0.3.2)
- `guardrail.baseline-adverse-decision-explanation` changed (recommended-guardrails 0.3.2)
- `guardrail.baseline-ai-interaction-disclosure` changed (recommended-guardrails 0.3.2)
- `guardrail.baseline-crisis-protocol` changed (recommended-guardrails 0.3.2)
- `guardrail.ethics-advice-not-tuned-for-approval` changed (recommended-guardrails 0.3.2)
- `guardrail.ethics-evaluate-proxy-features-for-disparity` changed (recommended-guardrails 0.3.2)
- `guardrail.ethics-honor-age-signals` changed (recommended-guardrails 0.3.2)
- `guardrail.ethics-no-anthropomorphic-persona-claims` changed (recommended-guardrails 0.3.2)
- `guardrail.ethics-no-engagement-maximizing-design` changed (recommended-guardrails 0.3.2)
- `guardrail.ethics-purpose-limited-training-consent` changed (recommended-guardrails 0.3.2)
- `guardrail.ethics-substantiated-capability-claims` changed (recommended-guardrails 0.3.2)
- `guardrail.opint-bounded-spend-and-usage` changed (recommended-guardrails 0.3.2)
- `guardrail.opint-guards-fail-closed` changed (recommended-guardrails 0.3.2)
- `guardrail.opint-reevaluate-on-model-change` changed (recommended-guardrails 0.3.2)
- `guardrail.opint-safeguards-survive-long-context` changed (recommended-guardrails 0.3.2)
- `guardrail.opint-scoped-response-cache` changed (recommended-guardrails 0.3.2)
- `guardrail.output-confabulation-controls` changed (recommended-guardrails 0.3.2)
- `guardrail.output-decision-reproducibility-record` changed (recommended-guardrails 0.3.2)
- `guardrail.output-pii-leakage-screening` changed (recommended-guardrails 0.3.2)
- `guardrail.review-reversal-rate-monitoring` changed (recommended-guardrails 0.3.2)
- `guardrail.review-substantive-human-review` changed (recommended-guardrails 0.3.2)
- `tx-bc-503.biometric-capture-notice-and-consent` added (tx-bc-503 0.2.0)
- `tx-bc-503.biometric-destruction` added (tx-bc-503 0.2.0)
- `wa-mhmda.biometric-data-collection-consent` added (wa-mhmda 0.2.0)

## 2026.09.30 (2026-09-30)

3 added · 34 changed · 0 removed — packs: `ca-cmia`, `il-sb315`, `recommended-guardrails`, `tx-sb1188`, `us-hipaa-privacy`, `ut-hb452`

- `ca-cmia.medical-information-to-ai-vendor` changed (ca-cmia 0.2.1)
- `il-sb315.independent-compliance-audit` added (il-sb315 0.3.0)
- `il-sb315.frontier-ai-framework` changed (il-sb315 0.3.0)
- `guardrail.agent-ai-generated-code-provenance` changed (recommended-guardrails 0.3.1)
- `guardrail.agent-component-provenance` changed (recommended-guardrails 0.3.1)
- `guardrail.agent-egress-and-environment-boundary` changed (recommended-guardrails 0.3.1)
- `guardrail.agent-high-impact-action-approval` changed (recommended-guardrails 0.3.1)
- `guardrail.agent-identity-and-action-traceability` changed (recommended-guardrails 0.3.1)
- `guardrail.agent-incident-detection-and-disclosure` changed (recommended-guardrails 0.3.1)
- `guardrail.agent-least-privilege-tool-scope` changed (recommended-guardrails 0.3.1)
- `guardrail.agent-memory-write-controls` changed (recommended-guardrails 0.3.1)
- `guardrail.agent-retrieval-respects-requester-permissions` changed (recommended-guardrails 0.3.1)
- `guardrail.agent-tool-server-authentication` changed (recommended-guardrails 0.3.1)
- `guardrail.agent-untrusted-content-isolation` changed (recommended-guardrails 0.3.1)
- `guardrail.baseline-adverse-decision-explanation` changed (recommended-guardrails 0.3.1)
- `guardrail.baseline-ai-interaction-disclosure` changed (recommended-guardrails 0.3.1)
- `guardrail.baseline-crisis-protocol` changed (recommended-guardrails 0.3.1)
- `guardrail.ethics-advice-not-tuned-for-approval` changed (recommended-guardrails 0.3.1)
- `guardrail.ethics-evaluate-proxy-features-for-disparity` changed (recommended-guardrails 0.3.1)
- `guardrail.ethics-honor-age-signals` changed (recommended-guardrails 0.3.1)
- `guardrail.ethics-no-anthropomorphic-persona-claims` changed (recommended-guardrails 0.3.1)
- `guardrail.ethics-no-engagement-maximizing-design` changed (recommended-guardrails 0.3.1)
- `guardrail.ethics-purpose-limited-training-consent` changed (recommended-guardrails 0.3.1)
- `guardrail.ethics-substantiated-capability-claims` changed (recommended-guardrails 0.3.1)
- `guardrail.opint-bounded-spend-and-usage` changed (recommended-guardrails 0.3.1)
- `guardrail.opint-guards-fail-closed` changed (recommended-guardrails 0.3.1)
- `guardrail.opint-reevaluate-on-model-change` changed (recommended-guardrails 0.3.1)
- `guardrail.opint-safeguards-survive-long-context` changed (recommended-guardrails 0.3.1)
- `guardrail.opint-scoped-response-cache` changed (recommended-guardrails 0.3.1)
- `guardrail.output-confabulation-controls` changed (recommended-guardrails 0.3.1)
- `guardrail.output-decision-reproducibility-record` changed (recommended-guardrails 0.3.1)
- `guardrail.output-pii-leakage-screening` changed (recommended-guardrails 0.3.1)
- `guardrail.review-reversal-rate-monitoring` changed (recommended-guardrails 0.3.1)
- `guardrail.review-substantive-human-review` changed (recommended-guardrails 0.3.1)
- `tx-sb1188.ehr-treatment-tool-biological-sex-input` added (tx-sb1188 0.3.0)
- `us-hipaa-privacy.minimum-necessary-phi-to-ai` changed (us-hipaa-privacy 0.2.1)
- `ut-hb452.mental-health-chatbot-safe-harbor-policy` added (ut-hb452 0.3.0)

## 2026.09.29.2 (2026-09-29)

2 added · 29 changed · 0 removed — packs: `recommended-guardrails`

- `guardrail.ethics-evaluate-proxy-features-for-disparity` added (recommended-guardrails 0.3.0)
- `guardrail.ethics-no-anthropomorphic-persona-claims` added (recommended-guardrails 0.3.0)
- `guardrail.agent-ai-generated-code-provenance` changed (recommended-guardrails 0.3.0)
- `guardrail.agent-component-provenance` changed (recommended-guardrails 0.3.0)
- `guardrail.agent-egress-and-environment-boundary` changed (recommended-guardrails 0.3.0)
- `guardrail.agent-high-impact-action-approval` changed (recommended-guardrails 0.3.0)
- `guardrail.agent-identity-and-action-traceability` changed (recommended-guardrails 0.3.0)
- `guardrail.agent-incident-detection-and-disclosure` changed (recommended-guardrails 0.3.0)
- `guardrail.agent-least-privilege-tool-scope` changed (recommended-guardrails 0.3.0)
- `guardrail.agent-memory-write-controls` changed (recommended-guardrails 0.3.0)
- `guardrail.agent-retrieval-respects-requester-permissions` changed (recommended-guardrails 0.3.0)
- `guardrail.agent-tool-server-authentication` changed (recommended-guardrails 0.3.0)
- `guardrail.agent-untrusted-content-isolation` changed (recommended-guardrails 0.3.0)
- `guardrail.baseline-adverse-decision-explanation` changed (recommended-guardrails 0.3.0)
- `guardrail.baseline-ai-interaction-disclosure` changed (recommended-guardrails 0.3.0)
- `guardrail.baseline-crisis-protocol` changed (recommended-guardrails 0.3.0)
- `guardrail.ethics-advice-not-tuned-for-approval` changed (recommended-guardrails 0.3.0)
- `guardrail.ethics-honor-age-signals` changed (recommended-guardrails 0.3.0)
- `guardrail.ethics-no-engagement-maximizing-design` changed (recommended-guardrails 0.3.0)
- `guardrail.ethics-purpose-limited-training-consent` changed (recommended-guardrails 0.3.0)
- `guardrail.ethics-substantiated-capability-claims` changed (recommended-guardrails 0.3.0)
- `guardrail.opint-bounded-spend-and-usage` changed (recommended-guardrails 0.3.0)
- `guardrail.opint-guards-fail-closed` changed (recommended-guardrails 0.3.0)
- `guardrail.opint-reevaluate-on-model-change` changed (recommended-guardrails 0.3.0)
- `guardrail.opint-safeguards-survive-long-context` changed (recommended-guardrails 0.3.0)
- `guardrail.opint-scoped-response-cache` changed (recommended-guardrails 0.3.0)
- `guardrail.output-confabulation-controls` changed (recommended-guardrails 0.3.0)
- `guardrail.output-decision-reproducibility-record` changed (recommended-guardrails 0.3.0)
- `guardrail.output-pii-leakage-screening` changed (recommended-guardrails 0.3.0)
- `guardrail.review-reversal-rate-monitoring` changed (recommended-guardrails 0.3.0)
- `guardrail.review-substantive-human-review` changed (recommended-guardrails 0.3.0)

## 2026.09.29 (2026-09-29)

5 added · 22 changed · 0 removed — packs: `ca-civ-3344`, `ca-cmia`, `eu-altai`, `finra-genai`, `imda-agentic`, `jp-ai-guidelines`, `mas-feat`, `naic-ai-bulletin`, `nist-ai-rmf`, `nist-genai-profile`, `nyc-ll144`, `uk-ico-ai`, `unesco-ai-ethics`, `us-ftc-impersonation`, `us-hipaa-privacy`, `us-state-privacy-admt`, `who-health-ai`

- `ca-civ-3344.ai-likeness-commercial-use-consent` added (ca-civ-3344 0.2.0)
- `ca-cmia.medical-information-to-ai-vendor` added (ca-cmia 0.2.0)
- `eu-altai.human-oversight` changed (eu-altai 0.1.2)
- `eu-altai.transparency-traceability` changed (eu-altai 0.1.2)
- `finra-genai.agentic-supervision` changed (finra-genai 0.1.2)
- `finra-genai.genai-monitoring-logging` changed (finra-genai 0.1.2)
- `imda-agentic.agent-identity-and-action-traceability` changed (imda-agentic 0.1.2)
- `imda-agentic.mgf-human-involvement-explainability` changed (imda-agentic 0.1.2)
- `jp-ai-guidelines.transparency-accountability` changed (jp-ai-guidelines 0.1.2)
- `mas-feat.accuracy-bias-validation` changed (mas-feat 0.1.1)
- `mas-feat.external-review-channels` changed (mas-feat 0.1.1)
- `mas-feat.fairness-justifiability` changed (mas-feat 0.1.1)
- `mas-feat.transparency-disclosure-explanation` changed (mas-feat 0.1.1)
- `naic-ai-bulletin.ais-program` changed (naic-ai-bulletin 0.1.2)
- `naic-ai-bulletin.model-validation-bias-testing` changed (naic-ai-bulletin 0.1.2)
- `nist-ai-rmf.manage-4-1-oversight` changed (nist-ai-rmf 0.1.1)
- `nist-genai-profile.confabulation-controls` changed (nist-genai-profile 0.1.2)
- `nist-genai-profile.content-provenance` changed (nist-genai-profile 0.1.2)
- `nyc-ll144.aedt-candidate-notice` changed (nyc-ll144 0.1.2)
- `nyc-ll144.bias-audit` changed (nyc-ll144 0.1.2)
- `uk-ico-ai.ai-adm-safeguards-dpia` changed (uk-ico-ai 0.1.2)
- `unesco-ai-ethics.human-oversight-overturn` changed (unesco-ai-ethics 0.1.2)
- `us-ftc-impersonation.ai-agent-government-or-business-impersonation` added (us-ftc-impersonation 0.2.0)
- `us-hipaa-privacy.ai-vendor-business-associate-contract` added (us-hipaa-privacy 0.2.0)
- `us-hipaa-privacy.minimum-necessary-phi-to-ai` added (us-hipaa-privacy 0.2.0)
- `us-state-privacy-admt.profiling-optout` changed (us-state-privacy-admt 0.1.2)
- `who-health-ai.clinician-oversight-accountability` changed (who-health-ai 0.1.1)

## 2026.09.28 (2026-09-28)

30 added · 93 changed · 0 removed — packs: `ai-security`, `ca-ab1836`, `ca-ab2013`, `ca-ab853`, `ca-sb243`, `ca-sb53`, `ca-sb942`, `ccpa-admt`, `cn-algo-recommendation`, `cn-deep-synthesis`, `cn-genai-interim`, `cn-genai-labeling`, `co-sb21-169`, `co-sb26-189`, `coe-ai-convention`, `ct-cart`, `eu-ai-act`, `eu-altai`, `eu-gpai-cop`, `finra-genai`, `il-ai-video-interview`, `il-hb1806`, `il-sb315`, `imda-agentic`, `jp-ai-guidelines`, `kr-ai-basic-act`, `md-hb1202`, `naic-ai-bulletin`, `ne-lb525`, `nist-aml-agentic`, `nist-genai-profile`, `ny-raise-act`, `nyc-ll144`, `oecd-ai`, `or-sb1546`, `recommended-guardrails`, `tn-elvis-act`, `tx-sb1188`, `tx-traiga`, `uk-ico-ai`, `unesco-ai-ethics`, `us-state-privacy-admt`, `ut-hb452`, `wa-hb2225`

- `ai-security.untrusted-input-to-agent-instructions-or-tools` changed (ai-security 0.1.1)
- `ca-ab1836.digital-replica-deceased-consent` changed (ca-ab1836 0.1.1)
- `ca-ab2013.training-data-disclosure` changed (ca-ab2013 0.1.1)
- `ca-ab853.genai-hosting-platform-gate` changed (ca-ab853 0.1.1)
- `ca-ab853.platform-provenance-detection-and-display` changed (ca-ab853 0.1.1)
- `ca-sb243.known-minor-safeguards` added (ca-sb243 0.2.0)
- `ca-sb53.frontier-ai-framework` changed (ca-sb53 0.1.1)
- `ca-sb53.frontier-whistleblower-protection` changed (ca-sb53 0.1.1)
- `ca-sb942.provenance-disclosure` changed (ca-sb942 0.1.1)
- `ccpa-admt.access-explanation` changed (ccpa-admt 0.1.1)
- `ccpa-admt.opt-out` changed (ccpa-admt 0.1.1)
- `ccpa-admt.pre-use-notice` changed (ccpa-admt 0.1.1)
- `cn-algo-recommendation.minor-protection` added (cn-algo-recommendation 0.2.0)
- `cn-algo-recommendation.no-addiction-inducing-models` added (cn-algo-recommendation 0.2.0)
- `cn-algo-recommendation.recommendation-optout` changed (cn-algo-recommendation 0.2.0)
- `cn-deep-synthesis.biometric-editing-consent` changed (cn-deep-synthesis 0.1.1)
- `cn-deep-synthesis.conspicuous-label` changed (cn-deep-synthesis 0.1.1)
- `cn-genai-interim.filing-and-security-assessment` changed (cn-genai-interim 0.1.1)
- `cn-genai-interim.training-data-legitimacy` changed (cn-genai-interim 0.1.1)
- `cn-genai-labeling.dual-label-genai-content` changed (cn-genai-labeling 0.1.1)
- `co-sb21-169.insurance-ecdis-unfair-discrimination` changed (co-sb21-169 0.1.1)
- `co-sb26-189.adverse-outcome-explanation` changed (co-sb26-189 0.1.1)
- `co-sb26-189.consumer-notice-consequential-decision` changed (co-sb26-189 0.1.1)
- `co-sb26-189.developer-documentation-to-deployers` changed (co-sb26-189 0.1.1)
- `co-sb26-189.human-review-and-data-correction` changed (co-sb26-189 0.1.1)
- `coe-ai-convention.ai-interaction-notification` changed (coe-ai-convention 0.1.1)
- `coe-ai-convention.documentation-and-contest` changed (coe-ai-convention 0.1.1)
- `ct-cart.aedt-predecision-notice` changed (ct-cart 0.1.1)
- `ct-cart.ai-companion-crisis-protocol` changed (ct-cart 0.1.1)
- `ct-cart.synthetic-content-provenance` changed (ct-cart 0.1.1)
- `eu-ai-act.art10.data-governance-bias` changed (eu-ai-act 0.1.1)
- `eu-ai-act.art12.record-keeping` changed (eu-ai-act 0.1.1)
- `eu-ai-act.art14.human-oversight` changed (eu-ai-act 0.1.1)
- `eu-ai-act.art15.accuracy-robustness-cybersecurity` changed (eu-ai-act 0.1.1)
- `eu-ai-act.art26.inform-affected-persons` changed (eu-ai-act 0.1.1)
- `eu-ai-act.art5.nonconsensual-intimate-and-csam` changed (eu-ai-act 0.1.1)
- `eu-ai-act.art50.emotion-biometric-notice` changed (eu-ai-act 0.1.1)
- `eu-ai-act.art50.public-interest-text-disclosure` changed (eu-ai-act 0.1.1)
- `eu-ai-act.art86.right-to-explanation` changed (eu-ai-act 0.1.1)
- `eu-altai.human-oversight` changed (eu-altai 0.1.1)
- `eu-altai.non-discrimination-fairness` changed (eu-altai 0.1.1)
- `eu-altai.transparency-traceability` changed (eu-altai 0.1.1)
- `eu-gpai-cop.model-documentation` changed (eu-gpai-cop 0.1.1)
- `finra-genai.agentic-supervision` changed (finra-genai 0.1.1)
- `finra-genai.genai-monitoring-logging` changed (finra-genai 0.1.1)
- `il-ai-video-interview.video-interview-ai-consent` changed (il-ai-video-interview 0.1.1)
- `il-hb1806.ai-session-recording-notice-consent` added (il-hb1806 0.2.0)
- `il-hb1806.ai-therapy-role-limits` added (il-hb1806 0.2.0)
- `il-hb1806.no-ai-emotion-detection-in-therapy` added (il-hb1806 0.2.0)
- `il-hb1806.no-unlicensed-ai-therapy` added (il-hb1806 0.2.0)
- `il-sb315.critical-safety-incident-reporting` added (il-sb315 0.2.0)
- `il-sb315.frontier-ai-framework` added (il-sb315 0.2.0)
- `il-sb315.transparency-report` added (il-sb315 0.2.0)
- `il-sb315.whistleblower-protection` added (il-sb315 0.2.0)
- `imda-agentic.agent-identity-and-action-traceability` changed (imda-agentic 0.1.1)
- `imda-agentic.human-approval-gate-high-impact-action` changed (imda-agentic 0.1.1)
- `imda-agentic.mgf-human-involvement-explainability` changed (imda-agentic 0.1.1)
- `jp-ai-guidelines.transparency-accountability` changed (jp-ai-guidelines 0.1.1)
- `kr-ai-basic-act.ai-transparency` changed (kr-ai-basic-act 0.1.1)
- `kr-ai-basic-act.high-impact-ai-responsibilities` changed (kr-ai-basic-act 0.1.1)
- `md-hb1202.facial-recognition-interview-consent` changed (md-hb1202 0.1.1)
- `naic-ai-bulletin.ais-program` changed (naic-ai-bulletin 0.1.1)
- `naic-ai-bulletin.model-validation-bias-testing` changed (naic-ai-bulletin 0.1.1)
- `naic-ai-bulletin.third-party-ai-oversight` changed (naic-ai-bulletin 0.1.1)
- `ne-lb525.conversational-ai-crisis-protocol` changed (ne-lb525 0.1.1)
- `ne-lb525.conversational-ai-disclosure` changed (ne-lb525 0.1.1)
- `ne-lb525.no-mental-health-care-representation` changed (ne-lb525 0.1.1)
- `nist-aml-agentic.agentic-adversarial-security` changed (nist-aml-agentic 0.1.1)
- `nist-genai-profile.confabulation-controls` changed (nist-genai-profile 0.1.1)
- `nist-genai-profile.content-provenance` changed (nist-genai-profile 0.1.1)
- `nist-genai-profile.output-pii-leakage-detection` changed (nist-genai-profile 0.1.1)
- `nist-genai-profile.value-chain-provenance` changed (nist-genai-profile 0.1.1)
- `ny-raise-act.critical-safety-incident-reporting` added (ny-raise-act 0.2.0)
- `ny-raise-act.frontier-ai-framework` added (ny-raise-act 0.2.0)
- `ny-raise-act.transparency-report` added (ny-raise-act 0.2.0)
- `nyc-ll144.aedt-candidate-notice` changed (nyc-ll144 0.1.1)
- `nyc-ll144.bias-audit` changed (nyc-ll144 0.1.1)
- `oecd-ai.capabilities-and-limitations` added (oecd-ai 0.2.0)
- `or-sb1546.ai-companion-crisis-protocol` changed (or-sb1546 0.1.1)
- `or-sb1546.ai-companion-disclosure` changed (or-sb1546 0.1.1)
- `guardrail.agent-ai-generated-code-provenance` added (recommended-guardrails 0.2.0)
- `guardrail.agent-memory-write-controls` added (recommended-guardrails 0.2.0)
- `guardrail.agent-retrieval-respects-requester-permissions` added (recommended-guardrails 0.2.0)
- `guardrail.agent-tool-server-authentication` added (recommended-guardrails 0.2.0)
- `guardrail.ethics-advice-not-tuned-for-approval` added (recommended-guardrails 0.2.0)
- `guardrail.ethics-honor-age-signals` added (recommended-guardrails 0.2.0)
- `guardrail.ethics-no-engagement-maximizing-design` added (recommended-guardrails 0.2.0)
- `guardrail.ethics-purpose-limited-training-consent` added (recommended-guardrails 0.2.0)
- `guardrail.ethics-substantiated-capability-claims` added (recommended-guardrails 0.2.0)
- `guardrail.agent-component-provenance` changed (recommended-guardrails 0.2.0)
- `guardrail.agent-egress-and-environment-boundary` changed (recommended-guardrails 0.2.0)
- `guardrail.agent-high-impact-action-approval` changed (recommended-guardrails 0.2.0)
- `guardrail.agent-identity-and-action-traceability` changed (recommended-guardrails 0.2.0)
- `guardrail.agent-incident-detection-and-disclosure` changed (recommended-guardrails 0.2.0)
- `guardrail.agent-least-privilege-tool-scope` changed (recommended-guardrails 0.2.0)
- `guardrail.agent-untrusted-content-isolation` changed (recommended-guardrails 0.2.0)
- `guardrail.baseline-adverse-decision-explanation` changed (recommended-guardrails 0.2.0)
- `guardrail.baseline-ai-interaction-disclosure` changed (recommended-guardrails 0.2.0)
- `guardrail.baseline-crisis-protocol` changed (recommended-guardrails 0.2.0)
- `guardrail.opint-bounded-spend-and-usage` changed (recommended-guardrails 0.2.0)
- `guardrail.opint-guards-fail-closed` changed (recommended-guardrails 0.2.0)
- `guardrail.opint-reevaluate-on-model-change` changed (recommended-guardrails 0.2.0)
- `guardrail.opint-safeguards-survive-long-context` changed (recommended-guardrails 0.2.0)
- `guardrail.opint-scoped-response-cache` changed (recommended-guardrails 0.2.0)
- `guardrail.output-confabulation-controls` changed (recommended-guardrails 0.2.0)
- `guardrail.output-decision-reproducibility-record` changed (recommended-guardrails 0.2.0)
- `guardrail.output-pii-leakage-screening` changed (recommended-guardrails 0.2.0)
- `guardrail.review-reversal-rate-monitoring` changed (recommended-guardrails 0.2.0)
- `guardrail.review-substantive-human-review` changed (recommended-guardrails 0.2.0)
- `tn-elvis-act.ai-likeness-tool-authorization` changed (tn-elvis-act 0.1.1)
- `tx-sb1188.ai-created-records-practitioner-review` added (tx-sb1188 0.2.0)
- `tx-sb1188.ai-diagnostic-use-patient-disclosure` added (tx-sb1188 0.2.0)
- `tx-traiga.no-ai-designed-to-incite-harm` changed (tx-traiga 0.1.1)
- `uk-ico-ai.ai-adm-safeguards-dpia` changed (uk-ico-ai 0.1.1)
- `unesco-ai-ethics.ethical-impact-assessment` changed (unesco-ai-ethics 0.1.1)
- `unesco-ai-ethics.human-oversight-overturn` changed (unesco-ai-ethics 0.1.1)
- `us-state-privacy-admt.profiling-optout` changed (us-state-privacy-admt 0.1.1)
- `ut-hb452.in-conversation-ad-disclosure` added (ut-hb452 0.2.0)
- `ut-hb452.mental-health-chatbot-ai-disclosure` added (ut-hb452 0.2.0)
- `ut-hb452.no-ad-targeting-on-user-input` added (ut-hb452 0.2.0)
- `ut-hb452.no-sale-or-sharing-of-user-input` added (ut-hb452 0.2.0)
- `wa-hb2225.ai-companion-crisis-protocol` changed (wa-hb2225 0.1.1)
- `wa-hb2225.ai-companion-disclosure` changed (wa-hb2225 0.1.1)

## 2026.09.27 (2026-09-27)

Initial baseline: every rule's content hash recorded; later releases list changes against it.