skip to content

← work — the registryBLT-01built & shipped

Klarvo

EU AI Act compliance platform — engineered and shipped to production

Compliance for European small businesses: a classification engine that reasons over the Act itself, and a companion plugin live on WordPress.org that renders the transparency notices the law requires.

sector
EU AI Act compliance platform · WordPress.org plugin
period
2025 – 2026 · live
role
built and shipped — builder credit

klarvo.io

readouts — measured, sourced

03 on the record · every one names its source

readout

2,816

entries in the AI-detection registry, v264


read from — repository

readout

61k

tokens of the Act in the knowledge base, hash-checked at cold start


read from — repository

readout

5.3.1

plugin version live on WordPress.org


read from — plugin directory

the file — read in order

01

the problem

  • The Act is long, the obligations depend on how a business uses AI, and a confident wrong answer is worse than none. Detection of which AI tools a site runs was producing confident false hundreds.

02

the engineering

  • A three-pass classification engine over the Act distilled into a 61k-token knowledge base whose SHA-256 is checked on cold start — a mutated knowledge base fails closed to a 503.

  • Detection rearchitected: a deterministic registry first, then metadata-only open-world reasoning, then a self-growing flywheel that triaged the ~60,000-plugin WordPress directory through a two-stage cost funnel. When detection cannot be sure, the score refuses to claim 100.

03

the proof

  • The registry walked from v6 to v264 — 2,816 entries.

  • The companion plugin renders Article 50 notices through Shadow DOM so theme CSS can never collide, speaks a versioned wire contract, and preserved every user's declarations across a 2.x → 5.x upgrade path. 5.3.1 is live on WordPress.org.

provenance

surfaces touched
classification engine · detection registry · WordPress plugin · dashboard
numbers read from
repository · WordPress.org plugin directory
stack
React · TypeScript · Supabase (27 edge functions) · Astro marketing tier · PHP plugin · prompt-cached three-pass engine
tags
compliance · classification · wordpress plugin

builder credit — engineered and shipped; ownership sits with the product. every readout above is measured from the repository or the platform that runs it.

the registry

the same hands

The person who diagnosed this file is the person who ships the fix. Two plain sentences beat a brief.