Proposal structure systemcard

[ravimeijerrig]

Description

In this PR, we propose the following systemcard structure. With this proposal we move the use and goal of the system card from being an administration to using it as documentation.

In this proposed structure the major changes are:

• We remove the assessment card and replace it by the task card to align with the idea behind the task-registry.
• List of tasks (requirements, measures and tools) that are selected is included in the root of the system card. The result of a task and the audit trail is stored in a task card once the task is completed.
• The fields in the system card related to human_intervention and goal_and_impact etc. have been removed as they are addressed through the execution of specific tasks (see the table below). Alternatively, we could choose to retain these fields and link them to the corresponding tasks. However, I recommend excluding the system card fields that are from Annex IV from the EU AI Act, as they are too specific.

Systemcardfield	Measure
goal_and_impact	Pba-01, Pba-02, Pba-03
considerations	Owp-06
risk_management	Org-03
human_intervention	Imp-03
legal_base	Org-06
used_data	Owp-02
technical_design	Owp-04
external_providers	Owp-12
interaction_details	Vereiste: aia-06 (EU AI Act Annex IV 1b), Maatregel: Owp-04, Owp-20
Version_requirements	Vereiste: aia-06 (EU AI Act Annex IV 1c) Maatregel: Owp-04, Owp-20
deployment_variants	Vereiste: aia-06 (EU AI Act Annex IV 1d) Maatregel: Owp-04, Owp-20
hardware_requirements	Vereiste: aia-06 (EU AI Act Annex IV 1e) Maatregel: Owp-04, Owp-20
product_markings	Vereiste: aia-06 (EU AI Act Annex IV 1f) Maatregel: Owp-04, Owp-20
user_interface	Vereiste: aia-06 (EU AI Act Annex IV 1h) Maatregel: Owp-04, Owp-20

Checklist

Please check all the boxes that apply to this pull request using "x":

• I have tested the changes locally and verified that they work as expected.
• I have followed the project's coding conventions and style guidelines.
• I have rebased my branch onto the latest commit of the main branch.
• I have squashed or reorganized my commits into logical units.
• I have read, understood and agree to the Developer Certificate of Origin below, which this project utilizes.

Developer Certificate of Origin

Developer Certificate of Origin
Version 1.1

Copyright (C) 2004, 2006 The Linux Foundation and its contributors.

Everyone is permitted to copy and distribute verbatim copies of this
license document, but changing it is not allowed.

Developer's Certificate of Origin 1.1

By making a contribution to this project, I certify that:

(a) The contribution was created in whole or in part by me and I
have the right to submit it under the open source license
indicated in the file; or

(b) The contribution is based upon previous work that, to the best
of my knowledge, is covered under an appropriate open source
license and I have the right under that license to submit that
work with modifications, whether created in whole or in part
by me, under the same open source license (unless I am
permitted to submit under a different license), as indicated
in the file; or

(c) The contribution was provided directly to me by some other
person who certified (a), (b) or (c) and I have not modified
it.

(d) I understand and agree that this project and the contribution
are public and that a record of the contribution (including all
personal information I submit with it, including my sign-off) is
maintained indefinitely and may be redistributed consistent with
this project or the open source license(s) involved.