Skip to content

docs: Add Fundamental Rights Impact Assessment (FRIA) template#1429

Closed
lawcontinue wants to merge 4 commits intomicrosoft:mainfrom
lawcontinue:fria-template
Closed

docs: Add Fundamental Rights Impact Assessment (FRIA) template#1429
lawcontinue wants to merge 4 commits intomicrosoft:mainfrom
lawcontinue:fria-template

Conversation

@lawcontinue
Copy link
Copy Markdown
Contributor

Summary

Adds a FRIA template as requested in #1362, covering all EU AI Act Article 27 requirements for AI agent deployments.

Closes #1362

What's included

  • System Overview (Section 1): Deployment context, agent description, Annex III classification
  • Fundamental Rights Assessment (Section 2): 17 rights from the EU Charter with impact scoring
  • Risk Analysis (Section 3): Risk identification, likelihood/severity matrix, aggregate summary
  • Mitigation Tracker (Section 4): Concrete measures with owners, deadlines, status tracking; AGT integration points
  • Governance (Section 5): Approval workflow (5 roles including optional AI Ethics Lead), review schedule, stakeholder consultation
  • Quick Guide (Appendix A): Time estimates and step-by-step instructions (2-3 hours for first FRIA)

Design rationale

  • Agent-aware: Section 4.2 maps AGT features (policy engine, compliance checker, audit logging, human oversight, transparency controls) to FRIA mitigation use cases
  • Consistent format: Mirrors docs/compliance/eu-ai-act-checklist.md header style, table structure, and regulation citation format
  • Practical: Includes ⬜🟡🟠🔴 visual scoring, risk matrix, time estimates, and a false compliance warning
  • Art. 20 & Art. 41 added: Equality before the law and right to good administration — critical for public-sector deployments that Article 27 primarily targets

Testing

  • Template renders correctly in GitHub Markdown
  • All 17 EU Charter rights covered (Art. 1, 2, 3, 7, 8, 10, 11, 12, 14, 17, 20, 21, 30-34, 38, 41, 47, 48)
  • Cross-references to existing AGT docs verified (docs/GOVERNANCE.md, docs/compliance/eu-ai-act-checklist.md, packages/agent-mesh/examples/06-eu-ai-act-compliance/)
  • Follows repo CONTRIBUTING.md guidelines (MIT license header, English, consistent formatting)

Checklist

  • I have read the Contributing Guide
  • My changes follow the existing documentation style
  • I have added a copyright header matching existing files

lawcontinue and others added 2 commits April 6, 2026 03:07
… systems to COMMUNITY.md

Fulfills承诺 made in issue microsoft#722 comment:
microsoft#722 (comment)

The article covers:
- Delegation chains and monotonic narrowing
- Trust scoring and non-repudiation
- Sequential action safety
- Authorization envelopes and Merkle anchoring

Complements existing AgentMesh documentation with production-grade rigor.
Adds a FRIA template covering EU AI Act Article 27 requirements
for AI agent deployments.

Closes microsoft#1362

- 17 fundamental rights from EU Charter with impact scoring
- Risk analysis with likelihood/severity matrix
- Mitigation tracker with AGT integration points
- Governance approval workflow (5 roles including Ethics Lead)
- Quick guide with time estimates (2-3 hours first FRIA)
- False compliance warning and legal disclaimer
@github-actions
Copy link
Copy Markdown

Welcome to the Agent Governance Toolkit! Thanks for your first pull request.
Please ensure tests pass, code follows style (ruff check), and you have signed the CLA.
See our Contributing Guide.

@github-actions github-actions Bot added documentation Improvements or additions to documentation size/L Large PR (< 500 lines) labels Apr 26, 2026
@imran-siddique
Copy link
Copy Markdown
Member

Thanks @lawcontinue — the FRIA template is thorough and well-structured. Two items before merge:

🔴 Remove MoltyCel community link

The COMMUNITY.md change adds a link to a MoltyCel article. MoltyCel was identified in our contributor audit as part of a suspected synthetic contributor cluster (shared agent-governance-vocabulary fork pattern with tomjwxf, piiiico, etc.). Per our attribution policy, we cannot promote content from flagged accounts.

Please remove the MoltyCel line from COMMUNITY.md and keep only the FRIA template.

🟡 Minor: legal disclaimer

The disclaimer is good (""This is not legal advice""). Consider also adding a note that the template should be reviewed against the final EU AI Act implementing acts, which may refine Article 27 requirements before the Aug 2 deadline.

Happy to merge once the MoltyCel link is removed!

imran-siddique
imran-siddique previously approved these changes Apr 26, 2026
Copy link
Copy Markdown
Member

@imran-siddique imran-siddique left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Thorough FRIA template covering all Art. 27 requirements with proper disclaimers, AGT integration points, and practical guidance.

@imran-siddique imran-siddique enabled auto-merge (squash) April 26, 2026 04:51
@imran-siddique
Copy link
Copy Markdown
Member

Approved and auto-merge set. There's a merge conflict (likely in COMMUNITY.md). @lawcontinue could you rebase on main to resolve? The FRIA template itself looks great.

auto-merge was automatically disabled April 26, 2026 14:27

Head branch was pushed to by a user without write access

@lawcontinue
Copy link
Copy Markdown
Contributor Author

Rebased on main — removed stale root COMMUNITY.md and synced docs/COMMUNITY.md to match main. The merge conflict should be resolved now. Ready for merge.

Copy link
Copy Markdown
Member

@imran-siddique imran-siddique left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Well-structured FRIA template covering all Article 27 requirements. The COMMUNITY.md move to docs/ and new blog entries look good.

@imran-siddique
Copy link
Copy Markdown
Member

Closing this PR. The FRIA template was already merged via PR #1441 (commit 33e8974), and the docs/COMMUNITY.md changes are also already on main. Thanks @lawcontinue for the thorough work on the template. The issue #1362 it closes is already resolved.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation size/L Large PR (< 500 lines)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

docs: Fundamental Rights Impact Assessment (FRIA) template

2 participants