Knox CountyKnox County TennesseeCompliance Scan
← All reports
completedtextCustom layer

AI Gateway auth probe after card

Review date: July 30, 2026 · Layer: TCA 10-7-504 probe · risk 54/100

Limited analysis mode

AI analysis unavailable (Invalid schema for response_format 'response': In context=('properties', 'findings', 'items'), 'required' is required to be supplied and to be an array including every key in properties. Missing 'concernLabel'.). Used rule-based checks — treat locators/citations as starting points.

Fix: set AI_GATEWAY_API_KEY in Vercel project env (or run vercel env pull for OIDC locally), then re-run the scan.

Bottom line

Bottom line: reviewed “Sample Merit System audit excerpt” against “TCA 10-7-504 probe”. 3 passage(s) flagged for human verification with locators and layer citations where available.

This is an issue-spotting review for human verification — not a court ruling or formal legal opinion. Confirm each locator and citation against the source before acting.

Highest-priority passages

  1. 1. Insufficient source coverage — high concern

    Source: Sample Merit System audit excerpt

    Locator: Analyzed ~414 characters

    highCoverage

    The extracted target text is short, so omissions may be overstated and citation quality will be limited.

    Why this is concerning:

    • Human verification needs a fuller source document or OCR for image-only PDFs.

    Recommended action: Provide a fuller document and re-run the scan against your compliance layer.

  2. 2. Unmonitored / camera-coverage detail in Sample Merit System audit excerpt — high concern

    Source: Sample Merit System audit excerpt

    Locator: approx. character offset 190 — search target for “camera”

    highStatutory risk

    The target discusses camera, unmonitored, monitoring in a way that may disclose exploitable security or access detail.

    Evidence from target: nts that lack continuous monitoring and camera visibility. Official personnel files are kept in this area. An unmonitored side door near the records room can be used after hours without camera coverag

    Why this is concerning:

    • Publishing where cameras are absent or ineffective can identify an operational vulnerability.
    • It may fit section 10-7-504(i)(1) (and related subsections in the compliance layer): information identifying an operational vulnerability or usable to gain unauthorized access.
    • A human should verify the exact page/lines before redacting or leaving the passage public.

    Citations to verify:

    • section 10-7-504(i)(1)
    • Section 10-7-504(m)
    • Section 10-7-504(i)(1)(B)

    Recommended action: Replace the public copy with a version that removes the location, camera-coverage, access-method, or storage-arrangement details as applicable. Prefer narrow redaction over withholding the entire otherwise-public document when the layer so provides.

  3. 3. Physical access / entry-point detail in Sample Merit System audit excerpt — high concern

    Source: Sample Merit System audit excerpt

    Locator: approx. character offset 141 — search target for “entry”

    highStatutory risk

    The target discusses entry, access-control, side door, badge, records room in a way that may disclose exploitable security or access detail.

    Evidence from target: control arrangement identifies specific entry points that lack continuous monitoring and camera visibility. Official personnel files are kept in this area. An unmonitored side door near the records ro

    Why this is concerning:

    • Identifying specific entry points or access arrangements may help unauthorized access.
    • It may fit section 10-7-504(i)(1) (and related subsections in the compliance layer): information identifying an operational vulnerability or usable to gain unauthorized access.
    • A human should verify the exact page/lines before redacting or leaving the passage public.

    Citations to verify:

    • section 10-7-504(i)(1)
    • Section 10-7-504(m)
    • Section 10-7-504(i)(1)(B)

    Recommended action: Replace the public copy with a version that removes the location, camera-coverage, access-method, or storage-arrangement details as applicable. Prefer narrow redaction over withholding the entire otherwise-public document when the layer so provides.

Important statutory distinctions

  • section 10-7-504(i)(1) — confirm exact text in the compliance layer before relying on this automated screen.
  • Section 10-7-504(m) — confirm exact text in the compliance layer before relying on this automated screen.
  • Section 10-7-504(i)(1)(B) — confirm exact text in the compliance layer before relying on this automated screen.
  • Section 10-7-504(i)(1) — confirm exact text in the compliance layer before relying on this automated screen.

Scope and limits

  • Automated heuristic screen only — AI Gateway was unavailable.
  • Image-only or truncated sources need OCR / full-text human review.
  • This is issue-spotting support, not a formal legal opinion.

Suggested remediation workflow

  1. Review flagged passages with counsel.
  2. Verify each locator and citation against the source PDF / page / charter.
  3. Apply narrow redactions or conforming edits.
  4. Re-scan after remediation.

Sources

  • TCA 10-7-504 probe
  • Sample Merit System audit excerpt
  • section 10-7-504(i)(1)
  • Section 10-7-504(m)
  • Section 10-7-504(i)(1)(B)
Source excerpt analyzed
Final Audit Report FY26-PA-05 KCSO Employees Merit System. Page 15 Access control: The office access-control arrangement identifies specific entry points that lack continuous monitoring and camera visibility. Official personnel files are kept in this area. An unmonitored side door near the records room can be used after hours without camera coverage. Recommended action included adding cameras and badge readers.
Run another scan