Article 12 logging support
for autonomous AI agents.

Four audiences. One verifiable evidence layer.

MolTrust's compliance surface is built for the parties who need to evaluate, document, or report on agent behaviour against legal requirements — not just the developers integrating the SDK.

EU AI Act → MolTrust capability.

Each Article 12 obligation mapped to a concrete MolTrust feature, with current implementation status.

Singapore's IMDA Model AI Governance Framework for Agentic AI (January 2026) recommends that each agent carry a unique, cryptographically verifiable identity with scoped, recorded authorization — the properties the AAE implements. The AAE aligns with that guidance.

Eight endpoints against Regulation (EU) 2024/1689.

Each endpoint runs on the live API at api.moltrust.ch. A classification returns the risk tier, the obligations that attach to it, and the EUR-Lex article each rests on. The assessment is a protocol-layer determination pinned to the text; it does not itself constitute compliance, which remains a determination for the deploying organisation.

Classification follows Article 6 and Article 7.

A use case listed in Annex III is high-risk under Article 6(2). The Article 6(3) derogation removes that status for a narrow procedural, preparatory, or human-improving task; a system that performs profiling of natural persons stays high-risk in every case (Article 6(3), final subparagraph). Article 7(2) supplies the criteria — intended purpose, autonomy, data sensitivity, reversibility of harm — that weigh a borderline case.

Example: a signed Annex V declaration.

Issued by POST /compliance/declaration, verifiable by any JOSE library against api.moltrust.ch/.well-known/jwks.json. Trimmed for display.

{
  "@context": ["https://www.w3.org/ns/credentials/v2",
               "https://api.moltrust.ch/contexts/trust/v1"],
  "type": ["VerifiableCredential", "MolTrustConformityDeclaration"],
  "issuer": "did:web:api.moltrust.ch",
  "validFrom": "2026-07-11T19:58:35Z",
  "credentialSubject": {
    "declarationStandard": "EU AI Act Annex V (Reg (EU) 2024/1689, Art 47)",
    "aiSystem": { "name": "Acme Triage Assistant", "reference": "ATA-2026.1" },
    "provider": { "name": "Acme Health GmbH", "address": "Berlin, DE" },
    "soleResponsibilityStatement": "This EU declaration of conformity is issued under the sole responsibility of the provider.",
    "conformityStatement": "The AI system is in conformity with Regulation (EU) 2024/1689.",
    "dataProtectionStatement": "The AI system complies with Regulation (EU) 2016/679, Regulation (EU) 2018/1725 and Directive (EU) 2016/680.",
    "harmonisedStandards": ["EN ISO/IEC 42001:2023"],
    "issuance": { "place": "Berlin", "date": "2026-07-11",
                  "signatory": { "name": "J. Muster", "function": "Head of Compliance" },
                  "onBehalfOf": "Acme Health GmbH" },
    "annexVComplete": true
  },
  "proof": {
    "type": "Ed25519Signature2020",
    "verificationMethod": "did:web:api.moltrust.ch#key-ed25519",
    "canonicalizationAlgorithm": "JCS",
    "proofValue": "84cadfba8f4fd2a535a09292529c3593977ab792d96372632bc9b43b7bee2b68..."
  }
}

Timeline.

Regulation (EU) 2024/1689 applies generally from 2 August 2026, with the exceptions set out in Article 113(a)–(c). Prohibited practices (Chapters I–II) have applied since 2 February 2025; governance and general-purpose-model rules since 2 August 2025; high-risk classification under Article 6(1) applies from 2 August 2027. Dates verbatim from Article 113.

Scope of the service.

MolTrust is a deterministic cryptographic protocol layer, comparable in role to TLS or PKI. It carries agent authorization metadata; it does not process customer payload, personal data of end users, or business secrets in the intended configuration.

From SDK install to auditor-ready evidence in three steps.

Each step is a single command or call. Together they produce a signed, on-chain-anchored Article 12 logging envelope per agent action — the same envelope your conformity assessor will later inspect.

npm install @moltrust/sdk

import { moltrust } from '@moltrust/sdk';

const aae = await moltrust.issue({
  did: 'did:moltrust:your-agent-id',
  mandate: 'process invoice approvals up to USD 5,000',
  constraints: { maxAmount: 5000, validUntil: '2026-12-31' },
  validity: { from: 'now', until: '+30d' }
});

// → AAE issued, signed, anchored on Base L2.
// → aae.hash gives you the anchor reference.

const bundle = await moltrust.exportAuditBundle({
  did: 'did:moltrust:your-agent-id',
  period: { from: '2026-01-01', to: '2026-03-31' }
});

// → Signed PDF (PAdES-B-LT), hash anchored on Base L2.
// → Verifier URL included in bundle for independent verification.

What you get for what you pay.

Signed audit bundles are included in every paid plan — there is no separate compliance SKU. See pricing → · See a sample audit bundle PDF →

Six questions, direct answers.

Ordered by audience arrival on the page. No marketing claims — just what holds under regulatory scrutiny.