Sentinel
AI-governance & export-control readiness
Law as-of 2026-10 · verifyas-of 2026-10
Governance readiness for an AI / autonomous-system deployment — not the model’s accuracy. Describe what the system does, the data and autonomy, the sectors and the jurisdictions of build and use. Sentinel returns an EU AI Act risk class, a dual-use / export-control screen, the human-authority and auditability controls you need, a clear verdict, and an exportable audit-ready control record.
Sentinel fuses the two questions a regulated AI programme has to answer at once: is it lawful to build and use (EU AI Act risk tier and the obligations it triggers), and is it lawful to move (dual-use export controls on surveillance, intrusion, cryptography and advanced compute). It then names the meaningful-human-control and logging / auditability measures that make the answer defensible — regulated by design: human authority, auditability, export screening.
Decision-support, not legal advice. The AI Act timeline is moving: prohibitions apply from 2 Feb 2025, GPAI duties from 2 Aug 2025, Art 50 transparency from 2 Aug 2026, and the Digital Omnibus on AI (Regulation (EU) 2026/1744, OJ L 24.7.2026, in force since 27 July 2026) moves Annex III high-risk obligations to 2 Dec 2027 and adds two Art 5 prohibitions, Art 5(1)(ba) and (bb), on AI systems that generate or manipulate non-consensual intimate material or CSAM (from 2 Dec 2026). Control lists and sanctions change too. Positions are dated October 2026, and each reason is labelled legal fact, assessment, verify or action; confirm current sources before you rely on them.