Versatile AI Risk Assessment Edition Release
============================

Product           : Versatile AI Risk Assessment
Package version   : 3.27.1
Edition           : community
Display name      : EU-KI-VO-Check Community Edition
Brand             : vara
App title         : Versatile AI Risk Assessment
Built at          : 2026-10-25T09:45:11.410Z

License scope
-------------
Use               : personal and expressly permitted non-commercial use
Business use      : no
Commercial use    : no
Report distribution: noncommercial-only

Included capabilities
---------------------
Watermark         : Erstellt mit Versatile AI Risk Assessment Community Edition
Portfolio         : not included
Threat profiles   : not included
Project file      : included
Business/revenue use: not permitted
Backend/telemetry : no configured Versatile AI Risk Assessment backend or telemetry

Hashes
------
index.html              sha256:5388052d4aca7ec9b1e8b8ff23ba0237946aa12209bc7acb259ef7d947c959f2
EULA.md                 sha256:54be280a3be31d4f32fb4ca56556d34b8de6a6b526079b8e54d196b8033e0b92
nachweise/LEGAL-PRODUCT-NOTES.md sha256:8f488397eef0c625644232adac8cddc57493592c1ae9e430a90b25d91b9591d2
nachweise/SUPPLY-CHAIN.md sha256:928428340d148a64ee162b07a44d621a7e2eb0d87276fffd9dbdb25acfcbe34b
nachweise/SECURITY.txt  sha256:3fdf7c8ec93c66bc2008bcca9a776932ce3121b95b18dc77b567a972f86c2e7b
nachweise/NOTICE.md     sha256:36ec362c81dcd1a10dd5e33141d85085c00192f3d95551adbf2e8f126a9c2eda
nachweise/THIRD_PARTY_LICENSES.md sha256:d9e9a2feecfd14398f6308d0386fa839d3c2c7ec90fbf348076f8731aeed9d51
nachweise/ANBIETERKENNZEICHNUNG.md sha256:2c1b1aa066db7937afba82fdb265635cc501f181c3f985a69629785d2295a743
nachweise/DATA-PROTECTION-NOTES.md sha256:5841b493cfe9f29b89becd9466b11f1099d31d5cbfe5b4aa63d8243bfe7fb4a4
nachweise/AI-ACT-STATEMENT.md sha256:f60f06f3499500128736878b824ea03a2ddead34cef5789792c44d084a6887fd
nachweise/CONTENT-ASSURANCE-EVIDENCE.pdf sha256:95ca0ad0608deb30a535c09acf01f6401b1f34821c88cf9fa3106bbb350745fd
nachweise/CONTENT-ASSURANCE-SUMMARY.md sha256:9d27d6bc41c5a011779f97d339eb2980fed1fe948a9f0abbcc3100d45eb1b333
nachweise/VULNERABILITY-AUDIT.md sha256:13d7a273df6d166dc5824ab2fd80e5eba74bf269a770ae6dc43b412fef41415d
nachweise/NPM-AUDIT-SUMMARY.json sha256:2cb598510003daca1a773dd79b7678f0388f13cb12a7b7edf9564402378b30b2
nachweise/GRYPE-SBOM-SCAN.json sha256:ce926679dba86ea3c45fe8bee28dcaa19a03eb5570c07558ec15a9980f49e33c
nachweise/GRYPE-SBOM-SCAN.md sha256:7394edf69f5e239b38f21899ed3fa1278243e5381113615e52e1918bcfede920
nachweise/COMMUNITY-GOVERNANCE.md sha256:fc4be2011d2e59df810f443e63091d509e6a12ae0779bb9c740ba43a734aee84
nachweise/COMMUNITY-FEEDBACK-FORM.md sha256:f2d6df9a3bff5294d833eed39919c9972c0b1e928973ef230e1d1ccd8242b194
nachweise/COMMUNITY-CATALOG-MAPPING-FORM.md sha256:ca74576e24c845b7ec1792b15716f20304451f49d67d69dac2c70c01953fd439
nachweise/SECURITY-REPORT-FORM.md sha256:82f0f33865ea21a86bfbeb74e76da6a354b749e38d5b4881d8d3bfc30546b387
nachweise/SBOM.cdx.json sha256:2ead7691cc874dbf30ee31b03c0158774acbb41a03a7d407ac1d786451153089
nachweise/VEX.cdx.json  sha256:6ffb43f372def094a95065ea3b203a8f0c991937545fb46aea37137107f4a25e
readme.txt              sha256:192d404b21c26504d6e0eba564637976deb25dc1e32800ecbd4e2ef30e39a934
favicon.svg             sha256:175b93a4f83a7325a3ef1ccd6dec8a615293d3e782609a8413f54e9a01b126ea

SBOM vulnerability scan
-----------------------
Status            : passed
Scanner           : anchore/grype 0.120.1
Database          : schema v6.1.10, built 2026-10-25T06:27:34.000Z
Findings          : 0 (blocking 0)
Evidence          : GRYPE-SBOM-SCAN.md, GRYPE-SBOM-SCAN.json

Companion files
---------------
nachweise/RELEASE.txt
nachweise/LEGAL-PRODUCT-NOTES.md
readme.txt
nachweise/SUPPLY-CHAIN.md
nachweise/SECURITY.txt
nachweise/NOTICE.md
nachweise/THIRD_PARTY_LICENSES.md
EULA.md
nachweise/ANBIETERKENNZEICHNUNG.md
nachweise/DATA-PROTECTION-NOTES.md
nachweise/AI-ACT-STATEMENT.md
nachweise/CONTENT-ASSURANCE-EVIDENCE.pdf
nachweise/CONTENT-ASSURANCE-SUMMARY.md
nachweise/VULNERABILITY-AUDIT.md
nachweise/NPM-AUDIT-SUMMARY.json
nachweise/GRYPE-SBOM-SCAN.json
nachweise/GRYPE-SBOM-SCAN.md
nachweise/COMMUNITY-GOVERNANCE.md
nachweise/COMMUNITY-FEEDBACK-FORM.md
nachweise/COMMUNITY-CATALOG-MAPPING-FORM.md
nachweise/SECURITY-REPORT-FORM.md
nachweise/SBOM.cdx.json
nachweise/VEX.cdx.json
nachweise/SHA256SUMS.txt
nachweise/manifest.json

Verification
------------
1. In the package folder, compare every file against nachweise/SHA256SUMS.txt (shasum -a 256 -c nachweise/SHA256SUMS.txt).
2. A copy is signed only if SHA256SUMS.txt.minisig or SHA256SUMS.txt.asc is present. Verify it
   with minisign or gpg against the release public key obtained out-of-band from the provider.
3. Without a signature file the copy is unsigned; rely on SHA256SUMS.txt and the delivery channel.

Email/download package
----------------------
Versatile_AI_Risk_Assessment-EU-KI-VO-Check-Community-vara-v3.27.1.zip
Versatile_AI_Risk_Assessment-EU-KI-VO-Check-Community-vara-v3.27.1.zip.sha256
The ZIP and sidecar checksum are generated together as delivery companion files.

Legal/Product note
------------------
This package includes Community usage notes. They are product information, not legal advice.
