Grimoire One
HomeAuditsAnalyticsEU AI Act
…
…
01Home02Audits03Analytics04EU AI Act
Documentation
OverviewQuickstartEU AI ActProlog ValidationLetter ComparisonAI Best Practices

Grimoire One — a compliance engine

evidence ⊢ verdict

Grimoire One logoGrimoire One

Compliance you can prove. Regulations compiled into executable logic — for FDA 21 CFR and the EU AI Act.

01Product

  • FDA Audit
  • EU AI Act
  • Analytics
  • Pricing

02Resources

  • Documentation
  • Quickstart
  • EU AI Act guide

03Company

  • About
  • Contact

04Legal

  • Terms of Service

© 2026 Grimoire One. All rights reserved.

Prove it. Don't claim it. ∎

Grimoire One — a compliance engine

evidence ⊢ verdict

Prove compliance.
Don't just claim it.

Start an audit →EU AI ActRead the docs

Abstract

Grimoire One compiles regulations into executable logic and validates evidence against them — turning FDA 21 CFR and the EU AI Act into derivable, auditable verdicts. A pass is a theorem; the report is its proof. ∎

CoverageFDA 21 CFR·EU AI Act 2024/1689·GxP·ISO/IEC 42001·21 CFR Part 11

§ 01·The regulations

two frameworks, one engine

01

FDA Title 21

Code of Federal Regulations

Title 21 audits, warning-letter analysis and Prolog validation — proven, not claimed.

Start an audit →
02

EU AI Act

Regulation (EU) 2024/1689

Risk classification, Article 5 & 50 screening, GPAI obligations and Annex IV documentation.

Classify a system →

§ 02·Method

the law, as a program

Every requirement becomes a rule; every answer, a fact.

Regulatory text is compiled into Prolog. Your evidence asserts the facts, and the engine derives the verdict — deterministic, repeatable, and impossible to fudge.

  • ⊢Deterministic pass / fail / escalate — never a confidence score
  • ⊢Every verdict cites the exact rules that fired
  • ⊢Re-run any time; the derivation is identical
derivation — batch_42fig. 1

Evidence documents are asserted as Prolog facts; the regulation, compiled as a rule, is satisfied term by term; the engine derives that the batch is compliant.

% evidence, asserted as facts

→ signature(batch_42).QA sign-off ✓
→ training_log(batch_42).LMS export ✓
→ audit_trail(batch_42).system log ✓

% the regulation, compiled

compliant(B) :-

signature(B),

training_log(B),

audit_trail(B).

?- compliant(batch_42).
true. ⊢ compliant ∎verdict · proven
evidence→rules⊢verdict

§ 03·Evidence

proof, not promises

Hand an auditor the derivation, not a deck.

Each audit and classification produces a report: the verdict, its basis, the underlying logic, and timestamps.1 Export it and move on.

01Classification basis

02Validation results

03Annex IV sections

04The Prolog itself

Evidence reportACT-7F3A

ACME Hiring Model v2.3

high-risk · Reg (EU) 2024/1689

Article 5Prohibited practices
clear
Annex III(4)Employment use
identified
Annex IVTechnical file
9 / 9
Article 50Transparency
disclosed
Derived by the Prolog engine∎

1.The report records which clauses fired and in what order — the same derivation an inspector could reproduce by running the program themselves.

§ 04·In numbers

0+

FDA warning letters analyzed

0+

Regulatory citations per letter

0%

Title 21 CFR section coverage

§ 05·Procedure

scroll — the derivation unfolds

Four stages: first, the statute — 21 CFR § 211.188 requires reviewed and approved batch records, complete records, and the signature of the person performing each step. Second, that requirement is compiled into an executable Prolog rule, one clause per obligation. Third, your evidence — batch record, review log, record index — is asserted as facts. Fourth, the engine derives the verdict, compliant, and exports the derivation as an evidence report with the clauses that fired and timestamps.

i.

Start from the law

Every audit begins with the regulation itself — the paragraph an inspector would read aloud. Grimoire One treats that text as the source of truth, phrase by phrase.

ii.

Compile it into logic

Each obligation becomes a clause of an executable Prolog rule. The underlined phrases reappear, one to one, as the terms of the program — the law, now machine-checkable.

iii.

Assert your evidence

Your documents become facts. A batch record, a review log, a record index — each is asserted into the program as ground truth. No scoring, no judgment calls.

iv.

Derive the verdict

The engine runs the query and the verdict follows — pass, fail, or escalate, with the exact clauses that fired. Every audit exports the derivation as a report an inspector could reproduce.

the statute01 / 04

“Batch production and control records shall be prepared for each batch… reviewed and approved… and shall include complete records of, and the signatureof the person performing, each significant step.”

21 CFR § 211.188 — the source of truth

% 21 CFR § 211.188, compiled

compliant(B) :-

signature(B),% the signature of the person

reviewed(B),% reviewed and approved

records_complete(B).% complete records

one clause per obligation — nothing paraphrased away

Batch record 42QA sign-off ✓
Review logQMS export ✓
Record indexDMS ✓

% facts asserted

→ signature(batch_42).

→ reviewed(batch_42).

→ records_complete(batch_42).

?- compliant(batch_42).

true. ⊢ compliant ∎verdict · proven

Evidence report — CFR-211-188

the clauses that fired · timestamps · exportable ∎

i.

Start from the law

Every audit begins with the regulation itself — the paragraph an inspector would read aloud. Grimoire One treats that text as the source of truth, phrase by phrase.

the statute01 / 04

“Batch production and control records shall be prepared for each batch… reviewed and approved… and shall include complete records of, and the signatureof the person performing, each significant step.”

21 CFR § 211.188 — the source of truth

ii.

Compile it into logic

Each obligation becomes a clause of an executable Prolog rule. The underlined phrases reappear, one to one, as the terms of the program — the law, now machine-checkable.

the compiled rule02 / 04

% 21 CFR § 211.188, compiled

compliant(B) :-

signature(B),% the signature of the person

reviewed(B),% reviewed and approved

records_complete(B).% complete records

one clause per obligation — nothing paraphrased away

iii.

Assert your evidence

Your documents become facts. A batch record, a review log, a record index — each is asserted into the program as ground truth. No scoring, no judgment calls.

the evidence03 / 04
Batch record 42QA sign-off ✓
Review logQMS export ✓
Record indexDMS ✓

% facts asserted

→ signature(batch_42).

→ reviewed(batch_42).

→ records_complete(batch_42).

iv.

Derive the verdict

The engine runs the query and the verdict follows — pass, fail, or escalate, with the exact clauses that fired. Every audit exports the derivation as a report an inspector could reproduce.

the verdict04 / 04

?- compliant(batch_42).

true. ⊢ compliant ∎verdict · proven

Evidence report — CFR-211-188

the clauses that fired · timestamps · exportable ∎

∴ the verdict follows from the evidence — not from anyone's say-so.

Sampling tells you what you checked. Formal verification tells you what's true — across every requirement, every time. ∎

— The Grimoire One thesis

§ 06·Questions

Q.1How is this different from a compliance checklist?+

Checklists record opinions. Grimoire One compiles the regulation into a Prolog program and derives a verdict from your evidence — every pass or fail is backed by the exact rules that fired.

Q.2Which regulations are supported?+

FDA Title 21 CFR (audits, Part 11, warning-letter analysis) and the EU AI Act (Regulation 2024/1689) today, with a shared engine designed to take on more.

Q.3Can I export evidence for an auditor?+

Yes. Every classification and audit produces a report containing the verdict, its basis, the underlying Prolog, and timestamps — ready to hand over.

Q.4Do I have to write Prolog?+

No. You answer plain-language screening forms (and can autofill them from documents). The logic runs underneath.

Make your next inspection a formality.

Start with a single CFR audit or classify an AI system against the EU AI Act — and walk away with proof.

Build an audit →See pricing