Article 43 — internal control, done with evidence

EU AI Act Article 43 allows most Annex III systems to use the internal-control conformity assessment procedure — self-assessment. The law permits the route; what has been missing is credible self-assessment evidence.

What credible self-assessment looks like

  1. Frozen harness — the tests are published before the run, so the run cannot be tuned to pass.
  2. Deterministic execution — pinned seeds, published splits, confidence intervals on every figure.
  3. Signed artefacts — Ed25519-signed result records a third party can verify without trusting us.
  4. Corpus-watch — when the provision text changes, the affected measurements re-fire. Self-assessment that goes stale is not assessment.

What we publish for this route

Boundary

Notified bodies remain legally required for some conformity routes, and nothing here is legal advice. We make the evidence layer cheaper and verifiable; auditors and counsel stay auditors and counsel.