적합성 선언

"""
EU AI Act Article 47 & Annex V 기반 적합성 선언서(DoC) 생성 시스템
고위험 AI 시스템의 CE 마킹을 위한 필수 문서 자동화
"""

from dataclasses import dataclass, field
from datetime import datetime, date
from enum import Enum
from typing import Optional
import hashlib


class ConformityAssessmentProcedure(Enum):
    """Article 43: 적합성 평가 절차 유형"""
    INTERNAL_CONTROL = "annex_vi"           # 부속서 VI: 내부 통제
    NOTIFIED_BODY_QMS = "annex_vii"         # 부속서 VII: 품질관리시스템 평가
    THIRD_PARTY_ASSESSMENT = "article_43_1" # 제43조 제1항: 제3자 평가


class HighRiskCategory(Enum):
    """Annex III: 고위험 AI 시스템 분류"""
    BIOMETRIC_IDENTIFICATION = "annex_iii_1"      # 생체인식
    CRITICAL_INFRASTRUCTURE = "annex_iii_2"       # 핵심 인프라
    EDUCATION_VOCATIONAL = "annex_iii_3"          # 교육/직업훈련
    EMPLOYMENT_HR = "annex_iii_4"                 # 고용/인사
    ESSENTIAL_SERVICES = "annex_iii_5"            # 필수 서비스 접근
    LAW_ENFORCEMENT = "annex_iii_6"               # 법 집행
    MIGRATION_ASYLUM = "annex_iii_7"              # 이민/망명
    JUSTICE_DEMOCRACY = "annex_iii_8"             # 사법/민주주의


@dataclass
class NotifiedBodyInfo:
    """인증기관(Notified Body) 정보"""
    name: str
    identification_number: str
    address: str
    certificate_number: Optional[str] = None
    certificate_date: Optional[date] = None


@dataclass
class HarmonisedStandard:
    """적용된 조화된 표준"""
    standard_id: str      # 예: "EN ISO/IEC 42001:2023"
    title: str
    publication_date: date
    ojeu_reference: str   # EU 관보 참조


@dataclass
class ProviderInfo:
    """공급자 정보 (Annex V 요건)"""
    legal_name: str
    trade_name: Optional[str]
    registered_address: str
    contact_email: str
    contact_phone: str
    registration_number: str  # 사업자등록번호
    authorised_representative: Optional[str] = None  # EU 역외 기업의 경우


@dataclass
class AISystemInfo:
    """AI 시스템 식별 정보"""
    system_name: str
    model_version: str
    unique_identifier: str
    intended_purpose: str
    high_risk_category: HighRiskCategory
    deployment_member_states: list[str]


@dataclass
class DeclarationOfConformity:
    """
    EU AI Act Annex V 적합성 선언서
    Article 47에 따른 필수 구성요소 포함
    """
    # Annex V 필수 항목
    declaration_number: str
    ai_system: AISystemInfo
    provider: ProviderInfo

    # 적합성 평가 정보
    assessment_procedure: ConformityAssessmentProcedure
    notified_body: Optional[NotifiedBodyInfo] = None

    # 적용 표준/사양
    harmonised_standards: list[HarmonisedStandard] = field(default_factory=list)
    common_specifications: list[str] = field(default_factory=list)

    # 규제 준수 선언
    eu_ai_act_articles: list[str] = field(default_factory=list)
    other_union_legislation: list[str] = field(default_factory=list)

    # 서명 정보
    place_of_issue: str = ""
    date_of_issue: date = field(default_factory=date.today)
    signatory_name: str = ""
    signatory_position: str = ""

    def __post_init__(self):
        """필수 EU AI Act 조항 자동 설정"""
        if not self.eu_ai_act_articles:
            self.eu_ai_act_articles = [
                "Article 9 - Risk Management System",
                "Article 10 - Data and Data Governance",
                "Article 11 - Technical Documentation",
                "Article 12 - Record-keeping",
                "Article 13 - Transparency",
                "Article 14 - Human Oversight",
                "Article 15 - Accuracy, Robustness and Cybersecurity"
            ]

    def validate_completeness(self) -> dict:
        """Annex V 필수 항목 완전성 검증"""
        issues = []

        # 필수 항목 검증
        if not self.ai_system.unique_identifier:
            issues.append("AI 시스템 고유 식별자 누락")

        if not self.provider.legal_name:
            issues.append("공급자 법적 명칭 누락")

        if not self.provider.registered_address:
            issues.append("공급자 등록 주소 누락")

        # EU 역외 공급자의 경우 권한대리인 필수
        eu_countries = ["DE", "FR", "IT", "ES", "NL", "BE", "AT", "PL"]
        if not any(
            self.provider.registered_address.endswith(c)
            for c in eu_countries
        ):
            if not self.provider.authorised_representative:
                issues.append("EU 역외 공급자: 권한대리인(Authorised Representative) 정보 필수")

        # 인증기관 필요 여부 검증
        requires_notified_body = (
            self.ai_system.high_risk_category == HighRiskCategory.BIOMETRIC_IDENTIFICATION
            or self.assessment_procedure != ConformityAssessmentProcedure.INTERNAL_CONTROL
        )

        if requires_notified_body and not self.notified_body:
            issues.append(
                f"{self.ai_system.high_risk_category.value} 카테고리: "
                "인증기관(Notified Body) 참여 필수"
            )

        # 서명 정보 검증
        if not self.signatory_name or not self.signatory_position:
            issues.append("서명권자 정보 불완전")

        return {
            "is_complete": len(issues) == 0,
            "issues": issues,
            "ready_for_ce_marking": len(issues) == 0
        }

    def generate_document_hash(self) -> str:
        """선언서 무결성 해시 생성"""
        content = (
            f"{self.declaration_number}"
            f"{self.ai_system.unique_identifier}"
            f"{self.provider.registration_number}"
            f"{self.date_of_issue.isoformat()}"
        )
        return hashlib.sha256(content.encode()).hexdigest()[:16]

    def to_structured_format(self) -> dict:
        """Annex V 형식 구조화된 선언서 출력"""
        return {
            "document_type": "EU Declaration of Conformity",
            "legal_basis": "Regulation (EU) 2024/1689 (AI Act), Article 47",
            "declaration_number": self.declaration_number,
            "document_hash": self.generate_document_hash(),

            "section_1_ai_system": {
                "name": self.ai_system.system_name,
                "version": self.ai_system.model_version,
                "unique_identifier": self.ai_system.unique_identifier,
                "intended_purpose": self.ai_system.intended_purpose,
                "high_risk_classification": self.ai_system.high_risk_category.value
            },

            "section_2_provider": {
                "legal_name": self.provider.legal_name,
                "trade_name": self.provider.trade_name,
                "address": self.provider.registered_address,
                "contact": {
                    "email": self.provider.contact_email,
                    "phone": self.provider.contact_phone
                },
                "authorised_representative": self.provider.authorised_representative
            },

            "section_3_conformity_assessment": {
                "procedure": self.assessment_procedure.value,
                "notified_body": {
                    "name": self.notified_body.name if self.notified_body else None,
                    "id_number": self.notified_body.identification_number if self.notified_body else None,
                    "certificate": self.notified_body.certificate_number if self.notified_body else None
                } if self.notified_body else None
            },

            "section_4_standards_applied": {
                "harmonised_standards": [
                    {"id": hs.standard_id, "title": hs.title}
                    for hs in self.harmonised_standards
                ],
                "common_specifications": self.common_specifications
            },

            "section_5_declaration": {
                "eu_ai_act_compliance": self.eu_ai_act_articles,
                "other_union_legislation": self.other_union_legislation
            },

            "section_6_signature": {
                "place": self.place_of_issue,
                "date": self.date_of_issue.isoformat(),
                "signatory": {
                    "name": self.signatory_name,
                    "position": self.signatory_position
                }
            },

            "retention_requirement": "10 years from market placement (Art 47(2))"
        }


# 사용 예시
if __name__ == "__main__":
    # 고위험 AI 시스템 정보
    ai_system = AISystemInfo(
        system_name="SmartHire AI",
        model_version="2.1.0",
        unique_identifier="SH-AI-2024-001",
        intended_purpose="채용 후보자 이력서 분석 및 적합도 평가",
        high_risk_category=HighRiskCategory.EMPLOYMENT_HR,
        deployment_member_states=["DE", "FR", "NL"]
    )

    # 공급자 정보
    provider = ProviderInfo(
        legal_name="AI Solutions GmbH",
        trade_name="AI Solutions",
        registered_address="Musterstraße 1, 10115 Berlin, DE",
        contact_email="compliance@aisolutions.eu",
        contact_phone="+49 30 1234567",
        registration_number="HRB 123456"
    )

    # 적합성 선언서 생성
    doc = DeclarationOfConformity(
        declaration_number="DoC-2024-SH-001",
        ai_system=ai_system,
        provider=provider,
        assessment_procedure=ConformityAssessmentProcedure.INTERNAL_CONTROL,
        harmonised_standards=[
            HarmonisedStandard(
                standard_id="EN ISO/IEC 42001:2023",
                title="AI Management System",
                publication_date=date(2023, 12, 18),
                ojeu_reference="OJ L 2024/123"
            )
        ],
        place_of_issue="Berlin, Germany",
        signatory_name="Dr. Maria Schmidt",
        signatory_position="Chief Compliance Officer"
    )

    # 완전성 검증
    validation = doc.validate_completeness()
    print(f"CE 마킹 준비 완료: {validation['ready_for_ce_marking']}")
    # 출력: CE 마킹 준비 완료: True