{
  "$schema": "https://xematix.org/hrai-compliance-cam/schema-v0.1.json",
  "id": "urn:xematix:hrai-compliance-cam:pilot:v0.1",
  "title": "HRAI Compliance CAM Pilot",
  "version": "0.1.0",
  "status": "pilot-template",
  "scope": {
    "jurisdiction": "European Union",
    "regulation": "Regulation (EU) 2024/1689 (EU AI Act)",
    "systemClassification": "to-be-confirmed",
    "economicOperatorRole": "to-be-confirmed",
    "intendedUse": "to-be-confirmed",
    "outOfScope": [
      "Legal certification",
      "Conformity assessment",
      "Substitution for legal counsel or notified-body review"
    ]
  },
  "cam": {
    "mission": {
      "intent": "Make the human purpose, authority and responsibility behind an AI system explicit before compliance documentation is assembled or execution is delegated.",
      "accountableOwner": "named human owner required",
      "nonNegotiableConstraints": [
        "No inferred intent may be treated as authorization",
        "Each material claim must link to evidence or remain marked as a gap",
        "Human accountability may not be assigned to an AI model or agent",
        "The record is readiness evidence, not a claim of legal certification"
      ]
    },
    "vision": {
      "desiredState": "A reviewer can trace the system's purpose, intended use, responsibility, controls and evidence from one concise human audit page into machine-readable records and source documentation.",
      "successCriteria": [
        "Intended purpose and system boundary are explicit",
        "Provider, deployer and other responsibility roles are named or visibly unresolved",
        "Every mapped EU AI Act documentation duty has an owner, evidence reference and status",
        "Material gaps are visible rather than buried in prose",
        "The export is versioned and reproducible"
      ]
    },
    "strategy": {
      "pathway": "Use CAM as the upstream intent and accountability spine, then map each relevant documentation obligation to evidence-bearing records without replacing the organization's legal or technical files.",
      "principles": [
        "Purpose before paperwork",
        "Responsibility before automation",
        "Evidence before assertion",
        "Gaps remain explicit",
        "One human view and one machine view"
      ]
    },
    "tactics": [
      {"id":"T1","action":"Confirm AI system scope, intended purpose, affected persons and economic-operator role","owner":"prospect compliance lead","output":"validated scope record"},
      {"id":"T2","action":"Map existing documents and evidence to the relevant EU AI Act duties","owner":"pilot facilitator with prospect SMEs","output":"authority mapping and evidence index"},
      {"id":"T3","action":"Record missing, stale, contradictory or ownerless evidence as governed gaps","owner":"prospect accountable owner","output":"prioritized gap register"},
      {"id":"T4","action":"Publish a one-page human audit trail and versioned JSON export","owner":"pilot facilitator","output":"audit page and machine-readable CAM package"}
    ],
    "reflectiveGovernance": {
      "reviewTriggers": [
        "Change in intended purpose or system boundary",
        "Change in provider, deployer or accountable owner",
        "Material model, data, workflow or human-oversight change",
        "New incident, complaint or fundamental-rights concern",
        "Change in applicable legal classification or harmonised standards"
      ],
      "haltConditions": [
        "No accountable human owner",
        "Unresolved contradiction in intended purpose",
        "Evidence represented as complete when it is not",
        "Pilot used as a conformity or certification claim"
      ]
    }
  },
  "authorityMapping": [
    {"authority":"EU AI Act Article 9","topic":"Risk management system","camLink":["mission.nonNegotiableConstraints","vision.successCriteria","reflectiveGovernance"],"requiredRecord":"risk management lifecycle, foreseeable risks, evaluation and mitigations","owner":"risk owner to be named","evidence":[],"status":"gap"},
    {"authority":"EU AI Act Article 10","topic":"Data and data governance","camLink":["strategy.pathway","tactics.T2"],"requiredRecord":"data provenance, relevance, representativeness, bias and governance controls","owner":"data owner to be named","evidence":[],"status":"gap"},
    {"authority":"EU AI Act Article 11 and Annex IV","topic":"Technical documentation","camLink":["vision.desiredState","tactics.T2","tactics.T4"],"requiredRecord":"system description, intended purpose, design, development, validation, monitoring and risk controls","owner":"provider technical owner to be named","evidence":[],"status":"gap"},
    {"authority":"EU AI Act Article 12","topic":"Record-keeping","camLink":["vision.successCriteria","reflectiveGovernance.reviewTriggers"],"requiredRecord":"automatic logging capabilities and retention arrangements","owner":"operations owner to be named","evidence":[],"status":"gap"},
    {"authority":"EU AI Act Article 13","topic":"Transparency and instructions for use","camLink":["mission.intent","vision.desiredState"],"requiredRecord":"capabilities, limitations, intended purpose, performance and deployer instructions","owner":"product owner to be named","evidence":[],"status":"gap"},
    {"authority":"EU AI Act Article 14","topic":"Human oversight","camLink":["mission.accountableOwner","reflectiveGovernance.haltConditions"],"requiredRecord":"oversight roles, competence, intervention, override and stop mechanisms","owner":"human oversight owner to be named","evidence":[],"status":"gap"},
    {"authority":"EU AI Act Article 17","topic":"Quality management system","camLink":["strategy.principles","reflectiveGovernance.reviewTriggers"],"requiredRecord":"policies, procedures, responsibilities, change control, monitoring and corrective action","owner":"quality owner to be named","evidence":[],"status":"gap"},
    {"authority":"EU AI Act Article 18","topic":"Documentation keeping","camLink":["vision.successCriteria","tactics.T4"],"requiredRecord":"retention and availability of required documentation","owner":"records owner to be named","evidence":[],"status":"gap"},
    {"authority":"EU AI Act Article 26","topic":"Deployer obligations","camLink":["scope.economicOperatorRole","mission.accountableOwner","tactics.T1"],"requiredRecord":"instructions followed, oversight assigned, input data relevant, logs monitored and incidents escalated","owner":"deployer owner to be named","evidence":[],"status":"conditional"},
    {"authority":"EU AI Act Article 27","topic":"Fundamental rights impact assessment","camLink":["scope.affectedPersons","reflectiveGovernance.reviewTriggers"],"requiredRecord":"where applicable, impact assessment covering affected groups, risks, oversight and mitigations","owner":"fundamental-rights owner to be named","evidence":[],"status":"conditional"}
  ],
  "pilot": {
    "duration": "2 weeks",
    "participants": ["one prospect or compliance partner","one accountable business owner","one technical or product owner","one compliance, legal or risk reviewer"],
    "inputs": ["system description or product brief","existing technical, risk, quality and policy documents","known intended use and deployment context","named owners and reviewers"],
    "deliverables": ["validated HRAI Compliance CAM JSON export","one-page human audit trail","authority-to-evidence map","prioritized evidence-gap register","30-minute closeout review"],
    "acceptance": "The prospect confirms that the package makes purpose, ownership and missing evidence easier to inspect than the source documents alone."
  },
  "provenance": {
    "framework": "XEMATIX v1 CAM and pre-execution semantic control",
    "author": "John Deacon",
    "orcid": "0009-0008-1000-1898",
    "created": "2026-08-05",
    "legalNotice": "Pilot readiness artifact only. It does not constitute legal advice, certification, conformity assessment or a declaration of EU AI Act compliance."
  }
}