STEM BIO-AI v1.8.4
Deterministic evidence-surface scanner for bio/medical AI repositories.
No LLM · No API key · No model runtime · No secrets sent anywhere.
Scans README, docs, CI, tests, changelogs, and manifests — returns a T0–T4 triage tier
with JSON, Markdown, and PDF artifacts. Rubric items are citation-aligned to
ICH M15 MIDD (Step 4, Jan 2026) and EU AI Act / IMDRF frameworks for regulatory traceability.
No API key required
Clones a public GitHub repository and runs a fully deterministic local scanner. Does not call OpenAI, Anthropic, GitHub API, or any external service.
Local CLI
Run locally for downloadable JSON, Markdown, PDF, and explain artifacts:
stem <folder> --format all --explain
What STEM scans
S1 README hype/responsibility (H1–H6 penalties, R1–R5 credits) S2R Repo-local consistency S3 CI · tests · changelog hygiene · data provenance · bias measurement S4 Replication evidence lane
Triage tiers
T0 Rejected
T1 Quarantine
T2 Caution
T3 Supervised
T4 Candidate
Clinical-adjacent repos without a disclaimer
are hard-capped at T2. T4 is not a clinical safety rating.
Regulatory Traceability
Each rubric item is citation-aligned to official regulatory frameworks.
Every scan output surfaces applicable requirement IDs.
✓ ICH M15 MIDD (Step 4, Jan 2026)
✓ EU AI Act 2024/1689
✓ IMDRF SaMD/GMLP
AIRI — AI Risk Index
AIRI MIT AI Risk Repository runtime bundle maps triggered detectors to covered risks and known gaps across the curated bio/clinical subset (184 risks · 32 in detector scope).
Paste a public bio/medical AI repository URL below. The demo works best on repositories with README/docs/tests/dependency files. Private repositories should be audited locally.
STEM BIO-AI includes deterministic bio diagnostics, contract checks, and a registry-driven regulatory traceability note layer.
Note: This Space scans the current default branch of a public GitHub repository at run time. Results may differ from commit-pinned benchmark artifacts or older local audit snapshots.
This public Space shows report and JSON previews in-browser. For actual downloadable JSON/Markdown/PDF artifacts, run the local CLI.