Versatile AI Risk Assessment Edition Release
============================

Product           : Versatile AI Risk Assessment
Package version   : 3.27.1
Edition           : community
Display name      : Versatile AI Risk Assessment Community Edition
Brand             : vara
App title         : Versatile AI Risk Assessment
Built at          : 2026-10-25T09:19:21.972Z

License scope
-------------
Use               : personal and expressly permitted non-commercial use
Business use      : no
Commercial use    : no
Report distribution: noncommercial-only

Included capabilities
---------------------
Watermark         : Erstellt mit Versatile AI Risk Assessment Community Edition
Portfolio         : not included
Threat profiles   : included
Project file      : included
Business/revenue use: not permitted
Backend/telemetry : no configured Versatile AI Risk Assessment backend or telemetry

Hashes
------
index.html              sha256:dc3d9b150163ea812d34b25d3d6bfc31e4fe4700cdd31e8543f56a9d98a43fe9
EULA.md                 sha256:5935c5a994c16334f627fab79e6cf462d6f689cf9647e6e615bbcc17d26651f9
nachweise/LEGAL-PRODUCT-NOTES.md sha256:2fb6cfad59882c25007229b20a1bd107a2c254414637dcd73002ac00f5a8addd
nachweise/SUPPLY-CHAIN.md sha256:3059625a5e6f028e2cb9be631240ba99991aefd856b1b7c4b057cb5a564a069f
nachweise/SECURITY.txt  sha256:2766738492dbcad757779300edf40a35c8a3d2fbf747555e7dbe092c8f7fe28d
nachweise/NOTICE.md     sha256:96a78eb27888e4b44fa2e44f68972c611a208d7fc80e100d38c5c34ce3469130
nachweise/THIRD_PARTY_LICENSES.md sha256:de8bb08879bd3d5008d9e1895be07a394303480c9ca854f7ec6f971e7f537675
nachweise/ANBIETERKENNZEICHNUNG.md sha256:a4e72934c87b6d239eb4bfae377a8687d6ff0043b2cc48f7300c140f81560da5
nachweise/DATA-PROTECTION-NOTES.md sha256:0d0853fdfa1e9b9c42fee0219d413d0adf03d7ac1ac8819223db2523c9198265
nachweise/AI-ACT-STATEMENT.md sha256:d1eb8711df6a35e138209a67a3ada714a7d025949a81288fdc4bc64fa0f2a878
nachweise/CONTENT-ASSURANCE-EVIDENCE.pdf sha256:7fe2868bf32fd0a03dc6b89add7100cdcbfbb4eac38214fd505aeed4e5d3a847
nachweise/CONTENT-ASSURANCE-SUMMARY.md sha256:54978d8bd886d4582e2f48db9b91d0f0c372aeb5667c15f721d40726e1776387
nachweise/VULNERABILITY-AUDIT.md sha256:5ea0bc8bb97cef24fe47bf0f7d2c51f2f56b7720dba96b7aa6fde2394f61f31d
nachweise/NPM-AUDIT-SUMMARY.json sha256:e3764775dff1bd527937428264d30176e8025417f33479b09300d5d72b89035e
nachweise/GRYPE-SBOM-SCAN.json sha256:bb3e330d9e717c9a8738de7ee7db4392564d9ef7ad92aa66d94db2e577172c42
nachweise/GRYPE-SBOM-SCAN.md sha256:4937bebd44dbc73ccc9b62a48bedaec70858eedaa94a03eacc5f57e06d298b68
nachweise/COMMUNITY-GOVERNANCE.md sha256:fc4be2011d2e59df810f443e63091d509e6a12ae0779bb9c740ba43a734aee84
nachweise/COMMUNITY-FEEDBACK-FORM.md sha256:f2d6df9a3bff5294d833eed39919c9972c0b1e928973ef230e1d1ccd8242b194
nachweise/COMMUNITY-CATALOG-MAPPING-FORM.md sha256:ca74576e24c845b7ec1792b15716f20304451f49d67d69dac2c70c01953fd439
nachweise/SECURITY-REPORT-FORM.md sha256:82f0f33865ea21a86bfbeb74e76da6a354b749e38d5b4881d8d3bfc30546b387
nachweise/SBOM.cdx.json sha256:29651ae6d53a7747a6fb2e52473dd0a7814702238b494a4a9a3be05d2b0a9504
nachweise/VEX.cdx.json  sha256:b21e7d938727e1b755e5a799268d14ffbf74e209912cdfbcd6623a8632fb02b0
readme.txt              sha256:e29d288cc46b463f8790880c5ec054f164aa8861f77f9ef52c89e8445d387e4b
favicon.svg             sha256:4e95ad1c184306c6cc6b380e39d62c7181ba65eeaaaff83e440543378ccf84da

SBOM vulnerability scan
-----------------------
Status            : passed
Scanner           : anchore/grype 0.120.1
Database          : schema v6.1.10, built 2026-10-25T06:27:34.000Z
Findings          : 0 (blocking 0)
Evidence          : GRYPE-SBOM-SCAN.md, GRYPE-SBOM-SCAN.json

Companion files
---------------
nachweise/RELEASE.txt
nachweise/LEGAL-PRODUCT-NOTES.md
readme.txt
nachweise/SUPPLY-CHAIN.md
nachweise/SECURITY.txt
nachweise/NOTICE.md
nachweise/THIRD_PARTY_LICENSES.md
EULA.md
nachweise/ANBIETERKENNZEICHNUNG.md
nachweise/DATA-PROTECTION-NOTES.md
nachweise/AI-ACT-STATEMENT.md
nachweise/CONTENT-ASSURANCE-EVIDENCE.pdf
nachweise/CONTENT-ASSURANCE-SUMMARY.md
nachweise/VULNERABILITY-AUDIT.md
nachweise/NPM-AUDIT-SUMMARY.json
nachweise/GRYPE-SBOM-SCAN.json
nachweise/GRYPE-SBOM-SCAN.md
nachweise/COMMUNITY-GOVERNANCE.md
nachweise/COMMUNITY-FEEDBACK-FORM.md
nachweise/COMMUNITY-CATALOG-MAPPING-FORM.md
nachweise/SECURITY-REPORT-FORM.md
nachweise/SBOM.cdx.json
nachweise/VEX.cdx.json
nachweise/SHA256SUMS.txt
nachweise/manifest.json

Verification
------------
1. In the package folder, compare every file against nachweise/SHA256SUMS.txt (shasum -a 256 -c nachweise/SHA256SUMS.txt).
2. A copy is signed only if SHA256SUMS.txt.minisig or SHA256SUMS.txt.asc is present. Verify it
   with minisign or gpg against the release public key obtained out-of-band from the provider.
3. Without a signature file the copy is unsigned; rely on SHA256SUMS.txt and the delivery channel.

Email/download package
----------------------
Versatile_AI_Risk_Assessment-Community-Edition-v3.27.1.zip
Versatile_AI_Risk_Assessment-Community-Edition-v3.27.1.zip.sha256
The ZIP and sidecar checksum are generated together as delivery companion files.

Legal/Product note
------------------
This package includes Community usage notes. They are product information, not legal advice.
