Margelis Trust Layer · Evidence module · live
Regulatory change, turned into evidence you can verify.
The Regulatory Change Radar watches your regulatory environment, scores how far it has drifted from your baseline, and seals every alert into a signed, tamper-evident chain. An auditor, a supervisor, or a counterparty can re-check the whole trail over HTTP — no account, no trust in us required.
Live verification — run it yourself
GET radar.rupestelis.com/api/v1/verify/KZ-FINTECH-001 → { "client_id": "KZ-FINTECH-001", "length": 2, "valid": true }
linkage · SHA-256 · Ed25519 signature · example client · re-checkable by anyone
From regulatory drift to a record nobody can quietly rewrite
Four deterministic steps. No oracle scores, no black box — every stage is inspectable, and the output is a chain anyone can re-verify.
01 — Detect
A deterministic engine reads regulatory and supervisory text and scores how far it has drifted from your baseline — an anomaly score with the reasons attached, not a guess.
deterministic · reproducible
02 — Map
Each material drift is mapped to the obligations it touches across the regimes you track — for example EU AI Act, DORA, GDPR.
drift → named obligations
03 — Seal
Every alert is sealed into a chain — linkage, SHA-256 hash, Ed25519 signature — so the record cannot be quietly changed after the fact.
tamper-evident by construction
04 — Verify
The chain is exposed read-only over HTTP. A third party re-checks the whole evidence trail themselves and reaches the same result.
anyone can re-verify
See it for yourself — right now
This is not a screenshot. The endpoints below are live. Open them and verify a real chain — no sign-up.
Public, read-only endpoints
- GET /healthservice status
- GET /api/v1/chain/{client}the signed alert chain
- GET /api/v1/verify/{client}re-check linkage · hash · signature
host: radar.rupestelis.com · Ed25519 · tamper-evident
Why evidence, and why now
The AI Act clock moved, but the direction did not: supervisors increasingly expect continuous, reproducible evidence — not a policy document written once. A signed, tamper-evident record is the difference between asserting you were diligent and being able to prove it.
In force today
Prohibitions and AI literacy duties
The earliest AI Act obligations already apply. Gaps are findable in any due-diligence exercise — by regulators, insurers, or acquirers.
2027–2028 window
High-risk obligations land
Under the revised Digital Omnibus timeline, the heavy load for high-risk AI systems — including record-keeping and human oversight — arrives in this window. A re-runnable evidence chain turns a future fire drill into routine.
Every quarter in between
The rules and your estate keep moving
New delegated acts, new vendors, new incidents. A one-off compliance report ages in weeks; a signed chain can be re-verified whenever something changes.
Who it's for
Teams that have to show — not just assert — how they track regulatory change.
Supervisor-ready evidence
A signed, re-checkable trail of how regulatory change was detected and acted on — defensible to auditors, insurers, and the regulator.
Record-keeping without a compliance team
The chain does the evidence-keeping for you. When someone asks for proof, you hand them a URL they can verify themselves.
Evidence that travels
Under fast-moving rules — Kazakhstan's AI law, the UAE's AI authorities — a tamper-evident record any counterparty can independently check.
Part of the Margelis Trust Layer
The Radar is the live Evidence module of the Margelis Trust Layer — boundaries, runtime enforcement, and evidence, built and operated by Rūpestėlis Holding UAB in Klaipėda, Lithuania. We run it against our own fleet of production AI agents before we point it at anyone else's. Data stays in the EU; every chain is white-box and independently verifiable.
EU-built · EU-hosted · tamper-evident
See the whole layer → margelis.ai/platform
Put the Radar on your regimes
Tell us which regulatory regimes you track. We'll show the Radar running against them and hand you a signed chain your auditor can verify. Pricing is scoped after a short call — no SaaS sign-up.