Sources last checked: 9 September 2026
Reading method note
The 99 error records in this book are compound synthetic cases written to make visible behaviour fractures that can be encountered in different sectors. Corporate names, contacts, numbers, dates and event results do not represent a real customer, measured market result, or a specific law dispute. If the technical, legal or platform-related external claim within a case is relevant to the real world, it has been tested with the following primary and official sources.
It is an editorial and operational governance framework proposed by NOMOS GBO, Kaan Muraz and NobleJackal in this series of works. The standard of a regulatory organisation is not a guarantee of independent accreditation, external certification or compliance with legislation. The mention of resources here does not mean that the resource owners approve NOMOS GBO or the suggestions in the book.
Legal departments offer a general risk and design framework; it is not a legal opinion. The rule to be applied must also be assessed by experts authorised according to country, parties, data, purpose, sector and concrete processing. In technical examples, a status code, interface response, or agent statement does not count as evidence of final outcome without a product contract and external system record being examined.
Use of resources
• Source notes were used not to "realize" fictional details of cases, but to confirm or narrow down material claims to the outside world.
• The NOMOS rule, NOMOS measure, Agent Dark Mold, error record and four-level triage model are suggestions of this book; it is not attributable to any other organisation.
• A control to pass a test is evidence for the version, scope and conditions tested alone. It is not a guarantee of indefinite accuracy or legal compliance.
• Sources were last checked on 9 September 2026. In particular, legislation and platform documents must be re-dated prior to publication.
Official and primary sources
1. IETF, RFC 9110 — HTTP Semantics, especially §§9.2.2, 15.3.1 and 15.3.3. https://www.rfc-editor.org/rfc/rfc9110.html
2. IETF, RFC 5321 — Simple Mail Transfer Protocol. https://www.rfc-editor.org/rfc/rfc5321.html
3. IndexNow, official protocol documentation and FAQ. https://www.indexnow.org/documentation and https://www.indexnow.org/faq
4. Google Search Central, General Structured Data Guidelines. https://developers.google.com/search/docs/appearance/structured-data/sd-policies
5. Google Search Central, Google Search Crawling and Indexing FAQ. https://developers.google.com/search/help/crawling-index-faq
6. Google Search Console Help, Removals and SafeSearch Reports Tool. https://support.google.com/webmasters/answer/9689846
7. European Union, Regulation (EU) 2016/679 — General Data Protection Regulation, especially Articles 4, 5, 6, 7, 9, 17 and 22 and Recital 51. https://eur-lex.europa.eu/eli/reg/2016/679/oj
8. European Data Protection Board, Guidelines on Automated Individual Decision-Making and Profiling. https://www.edpb.europa.eu/documents/guideline/automated-decision-making-and-profiling_en
9. European Union, Regulation (EU) 2024/1689 — Artificial Intelligence Act. https://eur-lex.europa.eu/eli/reg/2024/1689/oj
10. European Union, AI Act consolidated text, 27 July 2026. https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX%3A02024R1689-20260727
11. European Commission, AI Act regulatory framework and implementation timeline. https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai
12. European Commission, Transparency obligations under Article 50 AI Act. https://digital-strategy.ec.europa.eu/en/faqs/transparency-obligations-under-article-50-ai-act
13. European Union, Regulation (EU) 2022/2065 — Digital Services Act, especially Articles 25 and 26. https://eur-lex.europa.eu/eli/reg/2022/2065/oj
14. European Union, Directive (EU) 2019/1024 on open data and the re-use of public-sector information. https://eur-lex.europa.eu/eli/dir/2019/1024/oj/eng
15. Federal Trade Commission, Rule on the Use of Consumer Reviews and Testimonials. https://www.ftc.gov/legal-library/browse/rules/rulemaking-use-consumer-reviews-testimonials
16. Federal Trade Commission, Endorsement Guides: What People Are Asking. https://www.ftc.gov/business-guidance/resources/ftcs-endorsement-guides-what-people-are-asking
17. Federal Trade Commission, Bringing Dark Patterns to Light. https://www.ftc.gov/system/files/ftc_gov/pdf/P214800%20Dark%20Patterns%20Report%209.14.2022%20-%20FINAL.pdf
18. NIST, Artificial Intelligence Risk Management Framework 1.0 — Core. https://airc.nist.gov/airmf-resources/airmf/5-sec-core/
19. NIST, AI RMF Playbook — Govern, Measure and Manage. https://airc.nist.gov/airmf-resources/playbook/
20. NIST, Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile, NIST AI 600-1. https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.600-1.pdf
21. OWASP, LLM06:2025 Excessive Agency. https://owasp.org/www-project-top-10-for-large-language-model-applications/2_0_vulns/LLM06_ExcessiveAgency.html
22. MITRE, CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition. https://cwe.mitre.org/data/definitions/367.html
23. NIST, SP 800-34 Rev. 1 — Contingency Planning Guide for Federal Information Systems. https://csrc.nist.gov/pubs/sp/800/34/r1/upd1/final
24. NIST, SP 800-184 — Guide for Cybersecurity Event Recovery. https://csrc.nist.gov/pubs/sp/800/184/final
25. NIST, SP 800-61 Rev. 3 — Incident Response Recommendations and Considerations for Cybersecurity Risk Management. https://csrc.nist.gov/pubs/sp/800/61/r3/final
Current legislation note
As of the research date, the AI Act’s general application date is 2 August 2026. Following the 2026 amendment, however, the obligations in Chapter III, Sections 1–3 for the high-risk systems listed in Annex III apply from 2 December 2027. Examples concerning recruitment and worker management must preserve this distinction. The specific transparency obligations under Article 50 apply from 2 August 2026.
Publication responsibility: legal claims must be verified by an authorised legal professional, and technical claims by a subject-matter specialist, before publication.