Start here.
Engineer-first tools that produce machine-readable evidence for the EU AI Act articles your auditor will actually ask about. Install in 30 seconds. Run in CI. Pipe the output to the next tool. Apache 2.0, runs offline.
pip install riskforgeIf you adopt only a handful, adopt these.
Each anchors a high-stakes article, ships as a PyPI package, and produces evidence the rest of the toolchain consumes.
Browse the whole toolchain.
Filter by status, search by article or capability. Click any card for install, quick-start, regulatory mapping, FAQ, and known limitations.
One tool covers one article. The full set covers your audit.
Every tool emits an artefact the next tool reads as input — LCC’s SBOM goes into RiskForge’s risk file, RiskForge’s threat list informs RAG-Bench’s evaluation, LitmusAI’s verdict gates the pipeline. Schemas are versioned and forwards-compatible. Dashed edges activate as in-development tools ship.