The legal source is identified by official identifiers such as CELEX and ELI.
The smallest useful piece of legal source.
An ActProof atom is the addressable source fragment that lets a reporting field point back to the instrument that gave it meaning.
This page shows the atom lifecycle: how a sentence, article, paragraph, template section or template cell is identified, selected, pinned, reviewed and then consumed by the library as the bedrock under fields, mappings, coverage and bank review artifacts.
Without atoms, a field is just an assertion.
The field name is not the authority. The source binding is.
A reporting field such as classification_criteria_triggered is useful only if a reviewer can see what source material supports it. Atoms make that review possible: they point to an official instrument, a locator, a provision or template cell, a role, and a recomputable identity hash.
That is why ActProof starts below the field. It first records the source units that make field meaning inspectable.
- which legal instrument a field draws from
- whether the source is an article, paragraph, template section, template field, glossary entry or classification rule
- whether the atom is primary or supporting
- whether a source atom is used, contextual, or currently unused
- that the profile is legally complete
- that a bank is compliant
- that the atom text has been externally legally reviewed
- that official-text fragment hashes are complete where they remain pending
From instrument sentence to library primitive.
The lifecycle is intentionally conservative. The source is not swallowed by the library; it is turned into a small, challengeable object.
A specific article, paragraph, annex section, template field, glossary entry or rule is selected.
The fragment receives an addressable locator: article, paragraph, annex, section, field, or rule reference.
The locator and source metadata become a source atom with role, weight and binding status.
The atom identity hash is recomputed over canonical identity fields; official text hash remains separate.
Fields draw on one or more atoms with mapping notes and interpretive load.
The package exports profile views, coverage, mappings, overlays, reports and bank packs built on those atoms.
Inspect the atoms currently recorded for the DORA initial-notification profile.
The current DORA profile records atoms across the base DORA regulation, content/time-limit rules, implementing template structure and classification rules. The table is loaded from the deployed dora.source-atoms.json file.
The atom is deliberately more than a citation.
A normal citation tells a human where to look. An ActProof atom adds machine-readable identity, binding role, maturity state and hash basis.
| Property | Purpose | Why it matters |
|---|---|---|
source_atom_id | Stable atom identifier | Lets fields and derivations point to the same source unit. |
celex / eli | Official legal document identifiers | Supports EU legal-source traceability and reuse. |
locator | Article, paragraph, annex, section, field or rule address | Prevents a field from pointing only to a whole regulation. |
atom_type | Article, template field, glossary entry, rule, threshold | Shows whether the source is obligation, template structure or classification logic. |
source_role | Functional role in the profile | Distinguishes base obligation, content requirement, template field and time limit. |
normative_weight | Primary or supporting | Prevents supporting context from being overclaimed as direct field authority. |
atom_identity_sha256 | Recomputable identity hash | Lets the atom identity be checked independently. |
official_text_sha256 | Hash of the captured official text fragment | Current maturity gate: many atoms remain identity-pinned but text-hash pending. |
Atoms also show what the profile may not yet represent.
The inverse question matters: of the source atoms recorded, which ones are not used by any field?
Source-atom coverage is how ActProof avoids implying that “if it is not in the profile, it does not matter.” A recorded source atom with no field binding becomes a visible gap signal, not an invisible assumption.
SOURCE-ATOM COVERAGE loading current atom usage…
Missingness becomes reviewable.
A bank, auditor or GRC implementer can see whether the profile uses each recorded source atom, which atoms are only contextual, and whether any source provision is waiting for review.
Open source-atom coverage →Everything above the atom inherits its source discipline.
Atoms are not decorative metadata. They are consumed by the library in field derivations, profile-view export, source-atom coverage, candidate schema mapping, bank overlays and overlay impact review.
Explains why a report field exists and how much interpretation enters.
Keeps bank/vendor field names from becoming accidental authority.
Lets an institution record reviewed mapping decisions against source-bound references.
actproof-events source-atom-coverage op:eu.dora.ict_incident_notification_initial.v1 actproof-events compare-schema op:eu.dora.ict_incident_notification_initial.v1 external-schema.json actproof-events export-bank-poc-pack op:eu.dora.ict_incident_notification_initial.v1 --out bank-poc-pack
The atom is the root of the trust chain.
Profile fields, candidate mappings and bank overlays are safer because each one can be traced back to a source atom rather than a private label.
The next hardening step is official-text fragment sealing.
The current atom set is useful because atom identity, locator and role are explicit. The next depth step is to populate text excerpts and official text fragment hashes so reviewers can check not only atom identity, but also the exact captured source text.
- 26 DORA source atoms in the public data file
- CELEX and ELI identifiers
- locators, roles, weights and binding status
- recomputable atom identity hashes
- source-atom coverage and unused-atom gap signal
- populate
text_excerptwith reviewed official source snippets - compute
official_text_sha256over captured text fragments - move selected atoms from provisional binding toward reviewed status
- publish atom NDJSON for richer agent ingestion
Start below the field.
If a bank, GRC vendor, auditor or AI agent cannot inspect the source atom, it cannot safely rely on the field. That is the point of ActProof.