Tech & AI due-diligence, with cited gaps

Feed your tech-stack and AI inventory — yours, or an acquisition target's — and the Tech & AI Due-Diligence Profiler™ returns one cited gap report. Every gap is traced to a framework requirement group, never an LLM guess. That cuts a multi-week regulatory-exposure review to minutes you can defend.

Authority Risk Index™

Demo data

You learn: How exposed your AI authority surface is, on KYE™'s own rubric. You can: Answer the questions; the score and band update as you go.

Inputs
Results

Score (0–100) 8

  1. Defended

    Your AI authority surface is already at protocol-grade. Replay-proof, structurally meta-governed, banking-defensible. If you want third-party verification, we can run a one-week conformance review (free for already-defended teams as a reference engagement).

  2. Exposed

    You're aware of the risk and have partial controls in place — but the audit chain is not replay-proof, and meta-governance is policy-level only. Recommended: a 2-week PoC-XS to produce a signed Authority Gap™ report on one of your highest-risk workflows.

  3. High-risk

    Material exposure. You have agents acting on customer data or payments without offline-verifiable proof of authorisation. A single uncontrolled action could become a regulator-disclosure event. Recommended: a 4-week PoC-S to integrate one Stack Binding and emit a signed Evidence Pack™ for the workflow — regulator-defensible deliverable.

  4. Critical exposure

    Banking-grade buyers stop reading at this score. Your agents touch regulated workflows AND your authority chain isn't structurally enforced AND you cannot prove what happened offline. This is a board-level risk. Recommended: PoC-M (6–8 weeks, two Stack Bindings, regulator-replayable verification deck) OR direct Pilot.

How this widget is built
Demonstrates
KYE™ quizzes
Components
  • Quiz manifest (scores per answer)
  • Scoring bands
Flow
Answers → score → band → recommendation. Architecture diagram
Used on

Edit the inventory below and your cited gap report recomputes live, in your browser — the same deterministic resolver KYE Protocol™ runs server-side. It is a sibling of the Authority Risk Profiler™: this one assesses your framework exposure, that one assesses your agent-authority exposure.

Your inventory

A customer-curated kye.tech_dd_inventory.v1 — declare only what you choose (components · AI systems · data flows · sector · jurisdictions · the controls you already have). It is read-only and stays in your browser.

Loading a sample inventory…

Which frameworks apply — and why

Applicability is deterministic: an AI system in the estate makes AI-governance frameworks apply; personal data makes data-protection frameworks apply; a financial-services sector adds payments and resilience frameworks. Each reason is shown, so you can audit the logic.

Your cited gap report

Per applicable framework, every requirement group is shown with its honest tri-state — KYE™ enforced, a designed gap in build, or out of scope (your own control) — and a citation back to the exact requirement group in the coverage registry. A control you declared covered is credited, so a real gap is never over-claimed and a KYE™ artefact is never inflated.

Make it a sealed diligence report

This in-browser report is the read-only preview. KYE Protocol™ can issue the same gap report as a §62-governed, replay-sealed Tech & AI Due-Diligence edition — every claim cited and pinned, the edition Ed25519-sealed and verifiable from public keys alone, so an acquirer's counsel and the seller's board read the same defensible artefact. The optional freeform-document upload that parses an unstructured stack inventory into this schema is a governed generative surface tracked in the AI-quality registry; until it ships, the cited gap logic above is fully deterministic.

Canonical KYE™ surfaces referenced on this page: KYE Protocol™ · Systemic Authority Risk™.