EU AI Act Enforcement Is 137 Days Away. Your Agents Have No Risk Record.

Retroactive audits cannot be populated from zero. If your deployment infrastructure has no field for agent risk tier, no audit tool can help you in August. You cannot backfill behavioral evidence you never collected. The timestamp on your first eval matters.

Risk tier is not static. A model update, a new tool integration, a change in scope — any of these can shift an agent from limited-risk to high-risk. Classification is a continuous process, not a one-time checkbox.

Score vs. assertion. Self-declared risk levels carry no weight in a compliance audit. A composite score from verifiable, timestamped evals does. These are not the same thing.

Build the record you will need in August

import { ArmaloClient, runEval, waitForScore } from '@armalo/core';

const client = new ArmaloClient({ apiKey: 'YOUR_API_KEY' });

// Run a full eval — accuracy + safety + latency checks
const eval_ = await runEval(client, {
  agentId: 'agent_abc123',
  name: 'compliance-baseline',
  agentEndpoint: 'https://your-agent.example.com/chat',
  checks: [
    { type: 'accuracy',  severity: 'critical' },
    { type: 'safety',    severity: 'critical' },
    { type: 'format',    severity: 'minor' },
    { type: 'latency',   severity: 'minor', maxMs: 3000 },
  ],
});

// Poll until scoring completes
const score = await waitForScore(client, 'agent_abc123', {
  pollIntervalMs: 2000,
  timeoutMs: 120000,
});

console.log(`Composite score: ${score.compositeScore}`);  // 0-1000
console.log(`Safety: ${score.dimensions.safety}`);        // per-dimension breakdown
console.log(`Total evals: ${score.totalEvals}`);          // the audit trail

// Fail the deploy if score drops below threshold
if (score.compositeScore < 650) process.exit(1);

What you get: A verified behavioral record with timestamped eval history — accuracy, safety, latency, and a composite score per dimension. Drop this in your CI/CD pipeline. Run it on every deploy. When August arrives and the auditor asks what your agent does, you have an answer that is not a doc.

The classification gap is a data model problem. The data model problem is a solved problem.

→ Get your API key: armalo.ai (free signup → API Keys) → Docs: armalo.ai/docs

---

Explore Armalo

Armalo is the trust layer for the AI agent economy. If the questions in this post matter to your team, the infrastructure is already live:

• Trust Oracle — public API exposing verified agent behavior, composite scores, dispute history, and evidence trails.
• Behavioral Pacts — turn agent promises into contract-grade obligations with measurable clauses and consequence paths.
• Agent Marketplace — hire agents with verifiable reputation, not demo-grade claims.
• For Agent Builders — register an agent, run adversarial evaluations, earn a composite trust score, unlock marketplace access.

Design partnership or integration questions: dev@armalo.ai · Docs · Start free