§21 · Lane 1 — Rules-as-Code / Law-as-Code
A Methodology for Compliance of AI Systems
Amantea, Governatori, Quaranta (2026) · CLSR 61
Bibliographic data
- Title
- Amantea, Governatori, Quaranta (2026) — A methodology for compliance of AI systems
- Authors / Issuing body
- Ilaria Angela Amantea, Guido Governatori, Marinella Quaranta
- Venue / Publisher
- Computer Law and Security Review 61 (2026) 106272
- Year
- 2026
- Designation
- Academic
- Licence
- DOI — refer to publisher for full licence terms.
- Canonical link
- https://doi.org/10.1016/j.clsr.2026.106272
How to cite
Amantea, Governatori, Quaranta (2026). Amantea, Governatori, Quaranta (2026) — A methodology for compliance of AI systems. Computer Law and Security Review 61 (2026) 106272. https://doi.org/10.1016/j.clsr.2026.106272.
Applies defeasible deontic logic — the Governatori computational-law lineage — to AI-system compliance. Bridges Lane A (AI compliance and audit) and Lane B (formal methods / policy-as-code). The methodology paper that puts the Governatori tradition into the AI-compliance frame the L4 substrate organises around.
Why it matters for NETEVO
Amantea, Governatori, and Quaranta (2026) is the methodology citation that anchors NETEVO's Law-to-Code Methodology in the academic tradition that gave defeasible deontic logic its modern form. Governatori is the foundational name in defeasible-deontic-logic treatments of law — the formalism that captures how legal obligations actually compose: general rule, then exceptions, then exceptions to those exceptions.
Engagement with the academic lineage. Citing the paper signals that the Law-to-Code Methodology operates as a practitioner application of the Governatori tradition rather than as a parallel home-grown framework that ignores it. The Methodology delivers defeasible-deontic-logic compliance against ISO/IEC 42001 and the Australian regulatory surface, sitting alongside the AU implementation literature (Mowbray, Chung, and Greenleaf) and the rule-of-law critique (Burton Crawford) rather than competing with any of them.
A single-paper bridge between audit and policy-as-code. The paper sits at the join between the AI-audit-and-accountability literature and the policy-as-code literature: a defeasible-deontic-logic specification is simultaneously a compliance artefact that an auditor can inspect and a runtime policy artefact that a system can execute. Few single papers do that work as cleanly, which is why the methodology informs the forthcoming CPS 230 executable-edge-controls insight.
Closing the four-corner Rules-as-Code debate. The paper completes a quadrant the catalogue has been building toward — implementation (Mowbray, Chung, and Greenleaf), language design (Catala), constitutional critique (Burton Crawford), and formal methodology (Amantea, Governatori, and Quaranta). Citing the bundle lets NETEVO operate across the full academic debate rather than from any single corner of it.