The EU AI Act requires human oversight (Article 14), audit logging (Article 12), and risk management (Article 9) for production AI agents. Most LangChain deployments have none of these. Here’s how to add all three in under 5 minutes using the new `langchain-suprawall` package.
## The Problem
A typical LangChain executor in production looks like this:
```python
executor = AgentExecutor(agent=agent, tools=tools)
```
Three things are missing that the EU AI Act requires:
- **No audit trail** — Article 12 mandates automatic logging of all AI decision events
- **No human oversight** — Article 14 requires operators to monitor and intervene in real time
- **No policy engine** — Article 9 demands a risk management system that evaluates tool calls before execution
## The 5-Minute Fix
```bash
pip install langchain-suprawall
```
```python
from langchain_suprawall import SuprawallMiddleware, RiskLevel
executor = AgentExecutor(
agent=agent,
tools=tools,
middleware=\[
SuprawallMiddleware(
api_key=os.environ\["SUPRAWALL_API_KEY"\],
risk_level=RiskLevel.HIGH,
require_human_oversight=True, # Article 14
audit_retention_days=730, # Article 12
),
\],
)
```
## What Happens at Runtime
When the agent tries to call a high-risk tool like `send_email`:
1. SupraWall intercepts the call *before* execution
2. Evaluates it against your policy ruleset
3. Dispatches a Slack notification to your compliance officer
4. Logs the decision with timestamp + approver identity (ISO 8601, tamper-evident)
5. Agent proceeds or is blocked based on the response
This is fundamentally different from LangChain’s built-in `HumanApprovalCallbackHandler`, which just prints to your terminal with no log, no identity, no audit trail.
## Generating an Audit Report
```python
from langchain_suprawall import AuditReporter
reporter = AuditReporter(api_key=os.environ[“SUPRAWALL_API_KEY”])
report = reporter.generate(start_date=“2025-01-01”, end_date=“2025-03-31”, format=“pdf”)
report.save(“q1_audit.pdf”)
```
This is what you hand to an auditor — a full log mapped to the specific EU AI Act articles your deployment satisfies.
-–
Full write-up: How to Make Your LangChain Agent EU AI Act Compliant in 5 Minutes - DEV Community
Happy to answer questions about the implementation or how SupraWall’s policy engine works.