| Requirement | Kernel Support |
|---|---|
| Risk classification | Policy & governance layer |
| Transparency | Audit logs & explainable pipelines |
| Human oversight | Kill-switch & approval workflows |
| Data governance | Memory access controls |
| Article | Kernel Mechanism |
|---|---|
| Art. 5 – Data minimization | Scoped memory & retention |
| Art. 6 – Lawful processing | Policy injection |
| Art. 15 – Right of access | Audit & replay |
| Art. 25 – Privacy by design | Local-first architecture |