CLAIM-2026-08-01-05

Article 55(1)(c) requires providers of general-purpose AI models with systemic risk to track, document and report serious incidents to the AI Office without undue delay, and Article 55(1)(d) requires them to ensure an adequate level of cybersecurity protection for the model and its physical infrastructure.

Why it matters

These are the two obligations an evaluation-sandbox escape lands on directly. They are the specific hooks a deployer should name when asking a vendor for an incident process, rather than asking generally about security.

Sources

• euaiactexpl2026obligatio