# Governance Report — Risk signals for real estate operations

_HumanOSE — governance preparation, assurance support and audit-ready evidence. No legal compliance certification._

**Product:** HumanOSE  
**Use Case:** uc\_cx\_e05 (v1)  
**Source system:** causax  
**Language:** EN  
**Data mode:** synthetic  
**Generated at:** 2026-09-04T08:17:32.927Z  
**Report status:** Draft  
**Integrity hash:** e954266008a95db7…  

> This report is based exclusively on synthetic data (pilot operation). No real personal data.

> This report does not certify legal compliance.

## Executive summary

Early warning signals at portfolio level (vacancy risk, maintenance backlog) — reference to individual cases raises the risk class.

- **Intended purpose:** Indicators for operational planning — measures are decided by a human.
- **Preliminary risk class:** —
- **Human oversight required:** No
- **Governance Readiness:** —

> Governance Readiness denotes the degree of preparation (evidence in place/reviewed) — it does not certify conformity.

## Use case profile

- **Intended purpose:** Indicators for operational planning — measures are decided by a human.
- **Affected groups of persons:** indirekt\_bei\_einzelfallbezug
- **Data sources:** portfolio\_betriebsdaten\_aggregiert
- **AI function:** classification
- **Potential impact:** operativ
- **Jurisdiction:** eu-de
- **Source system:** causax
- **Lifecycle state:** Draft

## Risk assessment (preliminary)

Use case is not yet classified — controls are only available after the risk classification.

## Policy & control overview

> The control status documents the review of the evidence — it does not certify conformity.

Use case is not yet classified — controls are only available after the risk classification.

## Human oversight

- **Responsible human:** Oversight assignment pending — a final responsible human must be named before approval.
- **Reviewer:** —

> Human responsibility remains mandatory; AI does not make automatic decisions about persons.

### Review history

No review decisions recorded yet.

## Evidence summary

- **Evidence chain status:** invalid (suspected tampering)
- **Number of evidence events:** 31
- **Verification passed:** No

> Simulated anchoring (PageCipher integration pending) — marked as a simulation.

| # | Timestamp | Actor | Action | Hash |
|---|---|---|---|---|
| 975 | 2026-09-04T07:26:49.988Z | actor\_system\_humanose | governance\_report\_generated | f3488fd18ebb… |
| 1058 | 2026-09-04T07:39:13.075Z | actor\_system\_humanose | governance\_report\_generated | 5ed5a2da0d07… |
| 1070 | 2026-09-04T07:39:52.317Z | actor\_system\_humanose | governance\_report\_generated | 309f84555a83… |
| 1172 | 2026-09-04T08:09:53.518Z | actor\_system\_humanose | governance\_report\_generated | 648d393df054… |
| 1174 | 2026-09-04T08:10:21.859Z | actor\_system\_humanose | governance\_report\_generated | fd337eb0e607… |
| 1176 | 2026-09-04T08:10:23.622Z | actor\_system\_humanose | governance\_report\_generated | c756e76c51a6… |
| 1180 | 2026-09-04T08:10:51.381Z | actor\_system\_humanose | governance\_report\_generated | 000c1889f0a1… |
| 1184 | 2026-09-04T08:11:16.912Z | actor\_system\_humanose | governance\_report\_generated | 65275f7ec0f9… |
| 1186 | 2026-09-04T08:11:22.669Z | actor\_system\_humanose | governance\_report\_generated | 38d5cad94f9e… |
| 1188 | 2026-09-04T08:11:28.079Z | actor\_system\_humanose | governance\_report\_generated | 38708fa58091… |
| 1192 | 2026-09-04T08:11:48.961Z | actor\_system\_humanose | governance\_report\_generated | 6f41620fbc44… |
| 1194 | 2026-09-04T08:12:06.905Z | actor\_system\_humanose | governance\_report\_generated | 0dca29ec6c8c… |
| 1202 | 2026-09-04T08:16:14.530Z | actor\_system\_humanose | governance\_report\_generated | 3a8d5e986924… |
| 1217 | 2026-09-04T08:17:14.280Z | actor\_system\_humanose | governance\_report\_generated | 32661f9af6a5… |

### PageCipher anchor status

- **PageCipher integration status:** Active (HTTP integration with PageCipher)
- **PageCipher anchor status:** 30/31 Anchored
- **PageCipher anchor reference:** pagecipher:1e762a21b04d6901a3b0ad1b7f5753bf
- **Last anchoring attempt:** 2026-09-04T08:17:14.288Z

> The PageCipher anchor proves the integrity and provenance of the evidence — it does not certify legal compliance.

## Open risks & gaps

No open items recorded.

## Legal notices (disclaimer)

- This report does not certify legal compliance.
- The risk classification is preliminary and does not replace a legal assessment.
- The legal assessment may require a specialized legal review.
- This report serves governance and compliance preparation on an evidence basis. It does not constitute legal advice, certification, or a conformity attestation.
- Human responsibility remains mandatory; AI does not make automatic decisions about persons.

## Appendix

### Control catalog

| Control | Source | Reference |
|---|---|---|
| Check for prohibited practices | eu\_ai\_act | EU AI Act Art. 5 |
| Risk management system | eu\_ai\_act | EU AI Act Art. 9 |
| Data governance | eu\_ai\_act | EU AI Act Art. 10 |
| Technical documentation (Annex IV-like) | eu\_ai\_act | EU AI Act Art. 11 / Annex IV |
| Record-keeping / logging | eu\_ai\_act | EU AI Act Art. 12 |
| Transparency & labeling | eu\_ai\_act | EU AI Act Art. 13 / 50 |
| Human oversight | eu\_ai\_act | EU AI Act Art. 14 |
| Accuracy, robustness, cybersecurity | eu\_ai\_act | EU AI Act Art. 15 |
| Lawfulness of processing | gdpr | DSGVO Art. 6 |
| Data minimization | gdpr | DSGVO Art. 5(1c) |
| Data protection impact assessment (DPIA) | gdpr | DSGVO Art. 35 |
| Data subject rights | gdpr | DSGVO Art. 12–22 |
| Bias monitoring | internal\_policy | SysTec Policy AI-BIAS-01 |
| AI literacy of those involved | ai\_literacy | EU AI Act Art. 4 |
| Access control | security | ISO 27001 A.9 (Referenz) |
| Audit/evidence chain | audit | SysTec Evidence Standard (ADR-003) |

### Generation metadata

- **Generated at:** 2026-09-04T08:17:32.927Z
- **Version:** 0.1.0
- **Language coverage:** 100 %
- **Number of evidence events:** 1219