Versatile AI Risk Assessment Edition Release
============================

Product           : Versatile AI Risk Assessment
Package version   : 3.27.1
Edition           : community
Display name      : Versatile AI Risk Assessment Community Edition
Brand             : vara
App title         : Versatile AI Risk Assessment
Built at          : 2026-10-25T09:20:16.844Z

License scope
-------------
Use               : personal and expressly permitted non-commercial use
Business use      : no
Commercial use    : no
Report distribution: noncommercial-only

Included capabilities
---------------------
Watermark         : Erstellt mit Versatile AI Risk Assessment Community Edition
Portfolio         : not included
Threat profiles   : included
Project file      : included
Business/revenue use: not permitted
Backend/telemetry : no configured Versatile AI Risk Assessment backend or telemetry

Hashes
------
index.html              sha256:ffadc122679b0710fa89c0b496569f00cfa6ffdd85cc1a1c921511c0707d1588
EULA.md                 sha256:ba313b45d9b5fe866382632f252d791c4f431c96bb59f58118fd31409561fc3e
nachweise/LEGAL-PRODUCT-NOTES.md sha256:177fcf3e8b92de0f18c38484536d715357d7fd4b4859ca914af8e3ffea2532d3
nachweise/SUPPLY-CHAIN.md sha256:9781b1a852c179c86af51ede255d4ac8925088f69866732236ab05ee7d5f5367
nachweise/SECURITY.txt  sha256:61f311af6dfcd121c13c7d49598cbeac15dcc179c898acea83b0cb15098fdc6f
nachweise/NOTICE.md     sha256:3bcd534713da4a978093c7e23fb206bed8343f3b9f8c4cb25aa4379c1bbeb8aa
nachweise/THIRD_PARTY_LICENSES.md sha256:85217e2238d1f998bd6944f9d2cc8ee49ce193e0388941134e0a0e83ff497075
nachweise/ANBIETERKENNZEICHNUNG.md sha256:6454dd433cab8bd207e586b1f95492c12e8c7c20394892e2ba69977e475e0b59
nachweise/DATA-PROTECTION-NOTES.md sha256:3a4beb8aece1a43da2091859bd02dbcf54b712eb277cb8615f07941085bab4ee
nachweise/AI-ACT-STATEMENT.md sha256:be599dc8443de461631d8b2f6ea02ed1bbfb60dd477d45b30b475f821bcad232
nachweise/CONTENT-ASSURANCE-EVIDENCE.pdf sha256:f9f2edf1f2f95788b184d5f4475c788e44724f835c01b117715bb27e0b43aae4
nachweise/CONTENT-ASSURANCE-SUMMARY.md sha256:1ea0a44a24d489a351fcf934442e03ed59cf266cc865c3ba63b3b0689c540db1
nachweise/VULNERABILITY-AUDIT.md sha256:7c2338ee1fb2095cab92832f8e06d1055c75970dcd3323d5b01967c7047f9c2f
nachweise/NPM-AUDIT-SUMMARY.json sha256:b6ce49edbe5325801cc53cea18e5f44e5963144661894989a8ef6ea09ce8a5d2
nachweise/GRYPE-SBOM-SCAN.json sha256:7fef21383d2c6cdac9593d89174b35c759f5f9c944f50de3664eff5ac1f13b19
nachweise/GRYPE-SBOM-SCAN.md sha256:a51580c69e954adc59ddfd1bb37ca3a49ffeb7d239d5cbe982a413a0019b8b64
nachweise/COMMUNITY-GOVERNANCE.md sha256:fc4be2011d2e59df810f443e63091d509e6a12ae0779bb9c740ba43a734aee84
nachweise/COMMUNITY-FEEDBACK-FORM.md sha256:f2d6df9a3bff5294d833eed39919c9972c0b1e928973ef230e1d1ccd8242b194
nachweise/COMMUNITY-CATALOG-MAPPING-FORM.md sha256:ca74576e24c845b7ec1792b15716f20304451f49d67d69dac2c70c01953fd439
nachweise/SECURITY-REPORT-FORM.md sha256:82f0f33865ea21a86bfbeb74e76da6a354b749e38d5b4881d8d3bfc30546b387
nachweise/SBOM.cdx.json sha256:1acd5da8612bdcc874d1446b68c27381ee80fb1b40b890ffcbac6a01b18b4837
nachweise/VEX.cdx.json  sha256:d52d7b0426701b0b16e27e6b74bf5fc30ed9b02d4420d0dc9cb9e116656ead19
readme.txt              sha256:c396a938022b6921da8d1dd994536a12842fe9a461d27d0de031faa9868775a7
favicon.svg             sha256:4e95ad1c184306c6cc6b380e39d62c7181ba65eeaaaff83e440543378ccf84da

SBOM vulnerability scan
-----------------------
Status            : passed
Scanner           : anchore/grype 0.120.1
Database          : schema v6.1.10, built 2026-10-25T06:27:34.000Z
Findings          : 0 (blocking 0)
Evidence          : GRYPE-SBOM-SCAN.md, GRYPE-SBOM-SCAN.json

Companion files
---------------
nachweise/RELEASE.txt
nachweise/LEGAL-PRODUCT-NOTES.md
readme.txt
nachweise/SUPPLY-CHAIN.md
nachweise/SECURITY.txt
nachweise/NOTICE.md
nachweise/THIRD_PARTY_LICENSES.md
EULA.md
nachweise/ANBIETERKENNZEICHNUNG.md
nachweise/DATA-PROTECTION-NOTES.md
nachweise/AI-ACT-STATEMENT.md
nachweise/CONTENT-ASSURANCE-EVIDENCE.pdf
nachweise/CONTENT-ASSURANCE-SUMMARY.md
nachweise/VULNERABILITY-AUDIT.md
nachweise/NPM-AUDIT-SUMMARY.json
nachweise/GRYPE-SBOM-SCAN.json
nachweise/GRYPE-SBOM-SCAN.md
nachweise/COMMUNITY-GOVERNANCE.md
nachweise/COMMUNITY-FEEDBACK-FORM.md
nachweise/COMMUNITY-CATALOG-MAPPING-FORM.md
nachweise/SECURITY-REPORT-FORM.md
nachweise/SBOM.cdx.json
nachweise/VEX.cdx.json
nachweise/SHA256SUMS.txt
nachweise/manifest.json

Verification
------------
1. In the package folder, compare every file against nachweise/SHA256SUMS.txt (shasum -a 256 -c nachweise/SHA256SUMS.txt).
2. A copy is signed only if SHA256SUMS.txt.minisig or SHA256SUMS.txt.asc is present. Verify it
   with minisign or gpg against the release public key obtained out-of-band from the provider.
3. Without a signature file the copy is unsigned; rely on SHA256SUMS.txt and the delivery channel.

Email/download package
----------------------
Versatile_AI_Risk_Assessment-Community-Delivery-3x3.zip
Versatile_AI_Risk_Assessment-Community-Delivery-3x3.zip.sha256
The ZIP and sidecar checksum are generated together as delivery companion files.

Legal/Product note
------------------
This package includes Community usage notes. They are product information, not legal advice.
