CAIN-42 CAIN StudioCAGA · Module 5 of 5 · 11 min
Honest compliance claims
The fastest way to lose an auditor is an overclaim. Software can support compliance; it cannot make an organisation compliant or certified. CAIN is not a certification body and issues no regulatory certificates.
Write claims at the evidence level: 'decision records show human approval for all transfers above $5,000 in Q3', not 'EU AI Act compliant'.
Label evidence by strength: observed, verified, derived, unverified, counterfactual. Never present simulated or self-tested results as independent assurance.
Key points
- Software supports compliance; it doesn't confer it.
- Claim at the evidence level.
- Label evidence strength.
- Self-tests ≠ independent assurance.
In the CAIN-42 codebase
cain/compliance.py— evaluation output (no conformance claims)
Practice check
Practice 1 · choose one
Which claim is honest?
Practice 2 · true or false