Their solution demonstrated how an organization’s compliance can be automatically checked against a chosen standard (e.g., ISO 27001) using Software Bill of Materials (SBOM), Gaia-X best practices, and reference architecture for digital verification of claims. When non-conformities are detected, an LLM agent-based system interprets information on Common Vulnerabilities and Exposures (CVE) found in publicly accessible databases.
The LLM agent-based framework explains the CVE violations in a user-accessible way and provides a step-by-step remediation plan, ensuring that no sensitive data is shared with the agent-based system. Next to this, the team created a new semantic-driven conceptualization to represent temporary certifications and validate the conformity of verifiable credentials using SHACL shapes.
The provided solution proved to be of help for small and medium companies to accelerate their entrance to marketplaces. Moreover, the prototype is conceptually aligned with the Gaia-X Digital Clearing House, probing their role as trust anchors in an ecosystem.