Versatile AI Risk Assessment Edition Release
============================

Product           : Versatile AI Risk Assessment
Package version   : 3.27.1
Edition           : community
Display name      : KI-Risiko-Check Community Edition
Brand             : vara
App title         : Versatile AI Risk Assessment
Built at          : 2026-10-25T09:44:56.732Z

License scope
-------------
Use               : personal and expressly permitted non-commercial use
Business use      : no
Commercial use    : no
Report distribution: noncommercial-only

Included capabilities
---------------------
Watermark         : Erstellt mit Versatile AI Risk Assessment Community Edition
Portfolio         : not included
Threat profiles   : included
Project file      : included
Business/revenue use: not permitted
Backend/telemetry : no configured Versatile AI Risk Assessment backend or telemetry

Hashes
------
index.html              sha256:b4e010c36151f02fb911250c905ae667978a2ff78aae717dfa7a1d29a2a376d8
EULA.md                 sha256:5de5aec01d23fb3ccd70a5332cd126cb4dcf663aab9754ef802e7513db7e0f67
nachweise/LEGAL-PRODUCT-NOTES.md sha256:446b9cdc7a1fb81e79baf64b9d8745f79a2aa574f2318ba12198a62b13943f5c
nachweise/SUPPLY-CHAIN.md sha256:76f20f747ac26b7fa34c46757f3f4ea972f969f7a612691fdc28fe8dcc1c7b9c
nachweise/SECURITY.txt  sha256:e7a244ef2319e74bf340c375dd1ec1c087d3f1395beec4f051244d8ea439b7f9
nachweise/NOTICE.md     sha256:c3ecc6f19f36d5943410abb6988515c19f93da0425c11a48b0f5ad7138ba85f3
nachweise/THIRD_PARTY_LICENSES.md sha256:3e136e3680932cc477611ae2652726cc88c65574f3ea5340fd65fd6b6b0b6ff5
nachweise/ANBIETERKENNZEICHNUNG.md sha256:217a88c87518912db9b3f8b7a05b2e203c47944e866c44f554a136297718e97f
nachweise/DATA-PROTECTION-NOTES.md sha256:2c1714f6117b78065b7c09898e6f2ed5e215bb11ddd32f8aa836b8c704feb356
nachweise/AI-ACT-STATEMENT.md sha256:d49a5e044929ad5de5b015be20280b02fbee79e9c2e7c7920510286c10e42168
nachweise/CONTENT-ASSURANCE-EVIDENCE.pdf sha256:6deca1ebf6013aa3b8ea739d108d2cbec2342468115759c53fbd68cdfcc29e67
nachweise/CONTENT-ASSURANCE-SUMMARY.md sha256:fd122aaa9ab859d9bc5b047ff6960fbc79971576e2f0ebfd1eedeb96ec91d539
nachweise/VULNERABILITY-AUDIT.md sha256:4cf9ecffb98e7383780382efc8e6a7b9f232acd78de059ceae479cbd5fd4eb51
nachweise/NPM-AUDIT-SUMMARY.json sha256:5cd48f1629966ba475dba36b2369b08b28b5b263dd3670cc1c4377b13668bdf6
nachweise/GRYPE-SBOM-SCAN.json sha256:305f32df68608dbdda75f23457d87185ea4d4efd886b3d0c079e83a48164d828
nachweise/GRYPE-SBOM-SCAN.md sha256:6bb624c0d2b8a62f89fc1604b4b8754fbc9768189bfff1547f637b5cc88fd68f
nachweise/COMMUNITY-GOVERNANCE.md sha256:fc4be2011d2e59df810f443e63091d509e6a12ae0779bb9c740ba43a734aee84
nachweise/COMMUNITY-FEEDBACK-FORM.md sha256:f2d6df9a3bff5294d833eed39919c9972c0b1e928973ef230e1d1ccd8242b194
nachweise/COMMUNITY-CATALOG-MAPPING-FORM.md sha256:ca74576e24c845b7ec1792b15716f20304451f49d67d69dac2c70c01953fd439
nachweise/SECURITY-REPORT-FORM.md sha256:82f0f33865ea21a86bfbeb74e76da6a354b749e38d5b4881d8d3bfc30546b387
nachweise/SBOM.cdx.json sha256:5e854c7b27a247eaa5c56076346455cc954cdbbad05bc5c794a065c1c6376582
nachweise/VEX.cdx.json  sha256:72fa41e8a43a0524858efb1016b2f67696f2795367a4c91a6974e19365e772bc
readme.txt              sha256:5d32d63a0a8ddf4c61ef875fbd00d4baa41ba648536b4a4946d9d3a1a14084a1
favicon.svg             sha256:608f2b7b8e23ab62cd8acd322d5f7606598f724d31cf01c98aaa454358c73dd6

SBOM vulnerability scan
-----------------------
Status            : passed
Scanner           : anchore/grype 0.120.1
Database          : schema v6.1.10, built 2026-10-25T06:27:34.000Z
Findings          : 0 (blocking 0)
Evidence          : GRYPE-SBOM-SCAN.md, GRYPE-SBOM-SCAN.json

Companion files
---------------
nachweise/RELEASE.txt
nachweise/LEGAL-PRODUCT-NOTES.md
readme.txt
nachweise/SUPPLY-CHAIN.md
nachweise/SECURITY.txt
nachweise/NOTICE.md
nachweise/THIRD_PARTY_LICENSES.md
EULA.md
nachweise/ANBIETERKENNZEICHNUNG.md
nachweise/DATA-PROTECTION-NOTES.md
nachweise/AI-ACT-STATEMENT.md
nachweise/CONTENT-ASSURANCE-EVIDENCE.pdf
nachweise/CONTENT-ASSURANCE-SUMMARY.md
nachweise/VULNERABILITY-AUDIT.md
nachweise/NPM-AUDIT-SUMMARY.json
nachweise/GRYPE-SBOM-SCAN.json
nachweise/GRYPE-SBOM-SCAN.md
nachweise/COMMUNITY-GOVERNANCE.md
nachweise/COMMUNITY-FEEDBACK-FORM.md
nachweise/COMMUNITY-CATALOG-MAPPING-FORM.md
nachweise/SECURITY-REPORT-FORM.md
nachweise/SBOM.cdx.json
nachweise/VEX.cdx.json
nachweise/SHA256SUMS.txt
nachweise/manifest.json

Verification
------------
1. In the package folder, compare every file against nachweise/SHA256SUMS.txt (shasum -a 256 -c nachweise/SHA256SUMS.txt).
2. A copy is signed only if SHA256SUMS.txt.minisig or SHA256SUMS.txt.asc is present. Verify it
   with minisign or gpg against the release public key obtained out-of-band from the provider.
3. Without a signature file the copy is unsigned; rely on SHA256SUMS.txt and the delivery channel.

Email/download package
----------------------
Versatile_AI_Risk_Assessment-KI-Risiko-Check-Community-vara-v3.27.1.zip
Versatile_AI_Risk_Assessment-KI-Risiko-Check-Community-vara-v3.27.1.zip.sha256
The ZIP and sidecar checksum are generated together as delivery companion files.

Legal/Product note
------------------
This package includes Community usage notes. They are product information, not legal advice.
