ComplyForge — EU AI Act Compliance Agent

ComplyForge — Autonomous EU AI Act Compliance Agent PROBLEM On August 2, 2026, the EU AI Act's high-risk system rules become binding. Penalties reach €35M or 7% of global revenue. Over half of enterprises have no AI inventory, no Article 11 technical file, and no Fundamental Rights Impact Assessment. Compliance teams have 75 days to a deadline they cannot meet manually. AUTONOMOUS AGENT DESIGN One Orchestrator plus five specialised sub-agents. No agent-to-agent chains. 1. PlannerAgent — emits an explicit four-step ExecutionPlan with rationale, durations, and a dependency graph, visible in the dashboard before execution starts. 2. ClassifierAgent — reasons about the AI system against the full EU AI Act taxonomy (Article 5, Annex III, Article 50). Drops hallucinated citations against a whitelist; auto-promotes to HIGH_RISK under low confidence (precautionary principle). 3. CriticAgent — independent second-opinion reviewer. Surfaces up to three concerns and a confidence delta. Falls back gracefully if Gemini is unavailable. 4. DocAgent — 10 concurrent Gemini calls across nine Annex IV sections plus the Article 27 FRIA. Renders a 13-page regulator-ready PDF. 5. PolicyAgent — emits a Veea Lobster Trap YAML in the real upstream schema (verified by reading serve.go and handler.go). Hard-locked to the eight documented actions. End-to-end in 60 seconds. MULTIMODAL POST /api/extract-descriptor accepts JSON, PNG / JPEG diagrams, or PDF model cards. Gemini Vision extracts the AgentDescriptor; the same pipeline then runs. ENTERPRISE UTILITY 13-page Article 11 + FRIA + datasheet PDF, plus a Lobster Trap YAML that blocks PII egress, prompt injection, and decisions without Article 14 human oversight. JSONL audit log drops into any SIEM. TECH Python 3.14, FastAPI, Pydantic v2, Google Gemini (2.5-flash-lite + Vision), ReportLab; React, Vite, TailwindCSS, zustand. 116 backend tests passing. Sponsor tech: Google Gemini + Veea Lobster Trap. Built solo. MIT.