The operational task
Governance records need an application identity, observed inputs/outputs, decisions, owner, and control limits. Legal obligations require a separate qualified assessment.
What the implementation supports
LLM Firewall records rule-based observations over supplied events. Those observations can contribute technical evidence when collection and retention are appropriate.
Integration and limits
1-SEC does not automatically satisfy the EU AI Act or certify compliance. Distinguish a test result, observed event, policy decision, and regulatory conclusion.
Check collector wiring, the current event schema, and the enforcing component before relying on a response. Preserve the original event and verify the result on your actual deployment. An emitted alert does not prove that the initiating operation was stopped.