BM25, not an API call
56 real, cited requirements across the EU AI Act, GDPR, ISO/IEC 42001 and NIST AI RMF — the same data model behind AI Risk Control Room, searched by a ranking function built from scratch: term frequency, inverse document frequency and length normalisation, no model, no network call, no key. Type a plain question — human oversight high-risk systems, automated individual decision-making — and see which article actually matches, and why.