open/ms-ai-architect
1
0
Fork 0
Code Issues Releases 4 Activity

refactor(examples): replace sector-specific example material with generic, fictitious examples

Browse source 
Reference files, test fixtures, the playground demo project and one design
document now use generic, fictitious examples (buildings, energy, water,
grants, municipal services). The playground demo (17 fixtures plus the
embedded demo state) tells one consistent story: a municipal customer
chatbot that pre-screens housing-benefit applications, classified under
Annex III point 5(a). The embedded demo copies were edited in place rather
than regenerated, because they already carry newer AI Act dates than the
fixture files.

Legal text is unchanged. Test semantics are unchanged. Four dark-theme
onboarding screenshots with outdated placeholder text are removed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Kjell Tore Guttormsen 2026-09-23 14:03:53 +02:00
commit 544934dc57
Signed by: ktg
SSH key fingerprint: SHA256:JakMjO6FTBBzN0Bhfj9saOoEjaFxlSdYuZQQpM/lF9Q
77 changed files with 363 additions and 368 deletions
Download patch file Download diff file Expand all files Collapse all files

8
tests/fixtures/security-assessment/fixture.md vendored
View file

@ -21,7 +21,7 @@
3. **Incident Response-plan mangler** — Ingen prosedyre for AI-spesifikke hendelser (prompt injection breach, PII-lekkasje)
**P1 (Høy prioritet):**
4. **Red team-testing av security trimming** — Må verifisere at regionbasert tilgangskontroll fungerer korrekt
4. **Red team-testing av security trimming** — Må verifisere at rollebasert tilgangskontroll fungerer korrekt
5. **AI-spesifikk alerting mangler** — Ingen varsling for anomalier i prompt-mønstre eller uvanlig token-forbruk
6. **PIM ikke konfigurert** — Admin-tilgang til AI-ressurser bør styres via Privileged Identity Management
@ -52,12 +52,12 @@
| Datatype | Klassifisering | Behandlingsgrunnlag | Lagringssted |
|----------|----------------|---------------------|--------------|
| Håndbøker (N-serien) | Intern | Berettiget interesse | Azure AI Search (Norway East) |
| Retningslinjer | Intern | Berettiget interesse | Azure AI Search (Norway East) |
| Kontrakter | Fortrolig | Berettiget interesse | Azure AI Search (Norway East), security trimmed |
| Inspeksjonsrapporter | Intern | Berettiget interesse | Azure AI Search (Norway East) |
| Saksdokumenter | Intern | Berettiget interesse | Azure AI Search (Norway East) |
| Avviksrapporter (PII) | Fortrolig | Samtykke/Lovhjemmel | Azure AI Search (Norway East), PII-maskert |
| Chatlogger | Intern | Berettiget interesse | Application Insights (Sweden Central), 90d retention |
| NVDB-data | Åpen | Åpne data | Ikke lagret — live API-oppslag |
| Åpne statistikkdata | Åpen | Åpne data | Ikke lagret — live API-oppslag |
---