为高安全场景时间序列预测提供合规开源工具包,内置法律与标准要求。
Time-Series Forecasting in Safety-Critical Environments: An Open-Source Package for EU-AI-Act-Compliant Development / Zeitreihenprognose in sicherheitskritischen Umgebungen: Ein Open-Source-Paket für die KI-VO-konforme Entwicklung

- 将欧盟AI法案等标准内嵌至API接口、存储格式和持续集成流程中
- 通过四条编码规则确保无死代码、处理确定性、故障安全及依赖最小化
- 适合需符合欧盟AI法案的工业级预测系统开发者使用
我们提出 spotforecast2-safe,一个面向高安全场景下基于Python的时间序列点预测的合规设计一体化方案。现有合规工具多以扫描器、模板或运行时层形式独立存在,而 spotforecast2-safe 将欧盟法规(EU)2024/1689(AI法案,德语:KI-VO)、IEC 61508、ISA/IEC 62443 系列标准及网络安全法案的要求直接嵌入库中,体现在API契约、数据持久化格式与持续集成门禁中。该方法通过四项不可妥协的开发规则实现:零死代码、确定性处理、故障安全机制、最小依赖。配套流程规则包括模型卡、可执行文档字符串、CI工作流、CPE标识符、REUSE兼容许可与发布流水线。主动排除交互式可视化、超参数调优、AutoML及深度学习/大语言模型后端,因它们会扩大攻击面、引入非确定性或破坏可复现性。所有相关条款均在文中详述,并建立双向可追溯矩阵。通过欧洲电力生成、传输与消费的端到端预测案例验证应用。该工具包开源,采用 AGPL 3.0-or-later 许可。
原文摘要 · Abstract (English)
With spotforecast2-safe we present an integrated Compliance-by-Design approach to Python-based point forecasting of time series in safety-critical environments. A review of the relevant open-source tooling shows that existing compliance solutions operate consistently outside of the library to be used - e.g. as scanners, templates, or runtime layers. spotforecast2-safe takes the inverse approach and anchors the requirements of Regulation (EU) 2024/1689 (the EU AI Act, in German: KI-VO), of IEC 61508, of the ISA/IEC 62443 standards series, and of the Cyber Resilience Act within the library: in application-programming-interface contracts, persistence formats, and continuous-integration gates. The approach is operationalised by four non-negotiable code-development rules (zero dead code, deterministic processing, fail-safe handling, minimal dependencies) together with the corresponding process rules (model card, executable docstrings, CI workflows, Common-Platform-Enumeration (CPE) identifier, REUSE-conformant licensing, release pipeline). Interactive visualisation, hyperparameter tuning and automated machine learning (AutoML), as well as deep-learning and large-language-model backends are deliberately excluded, because each of these components either enlarges the attack surface, introduces non-determinism, or impairs reproducibility. Every article of the EU AI Act that is relevant to the library is discussed in detail. A bidirectional traceability matrix maps every regulatory provision onto the corresponding mechanism in the code; an end-to-end example of European-market electricity generation, transmission, and consumption forecasting demonstrates the application. The package is open-source and available under Affero General Public License (AGPL) 3.0-or-later.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。