osa risk assessmentHEADmaster

3 files changed, 132 insertions, 0 deletions

diff --git a/src/osa/fedi-risk-assessment/.gitignore b/src/osa/fedi-risk-assessment/.gitignore
new file mode 100644
index 0000000..08d33d4
--- /dev/null
+++ b/src/osa/fedi-risk-assessment/.gitignore
@@ -0,0 +1,2 @@
+/document.en.du.xml
+/document.it.du.xml
diff --git a/src/osa/fedi-risk-assessment/document.en.rest.txt b/src/osa/fedi-risk-assessment/document.en.rest.txt
new file mode 100644
index 0000000..8b71b9d
--- /dev/null
+++ b/src/osa/fedi-risk-assessment/document.en.rest.txt
@@ -0,0 +1,129 @@
+.. -*- fill-column: 130; -*-
+
+============================================================
+Online Safety Act - risk assesment for ``s.thenautilus.net``
+============================================================
+:CreationDate: 2025-03-07 10:39:12
+:Id: osa/fedi-risk-assessment
+:tags: - legal
+
+Key Information
+===============
+
+Service to which the risk assessment relates:
+
+  my Fediverse instance, https://s.thenautilus.net/
+
+Person responsible for the risk assessment:
+
+  Gianni Ceccarelli
+
+Next scheduled review date:
+
+  2026-03-08
+
+Risk Factors
+============
+
+My Fediverse instance is part of a social media platform. I am the only person who can post to it.
+
+Visitors from anywhere on the Internet can only see my own posts, and posts my other people from different services that I am
+replying to, or that are replying to me.
+
+My instance possibly meets some or all of the following "risk factors" from Ofcom's guidance:
+
+* it's (part of) a social media platform
+* everyone can view my instance, so it's technically accessible to children
+* there are user profiles (mine, and copies of profiles of people I interact with)
+* users from other Fediverse instances can connect and interact with my account, and vice-versa
+* there are images and/or videos associated with some of the posts, and some of the users' profiles
+* there are hyperlinks to other sites on the Internet
+
+Illegal content
+===============
+
+For all these types of contents:
+
+* Terrorism
+* Child Sexual Exploitation and Abuse (CSEA): grooming, images, URLs
+* Encouraging or assisting suicide
+* Hate
+* Harassment, stalking, threats and abuse
+* Controlling or coercive behaviour
+* Drugs and psychoactive substances
+* Firearms, knives or other weapons
+* Human trafficking
+* Unlawful immigration
+* Sexual exploitation of adults
+* Extreme pornography
+* Intimate image abuse
+* Proceeds of crime
+* Fraud and financial offences
+* Foreign interference
+* Animal cruelty
+
+the risk of encountering such content on this service is negligible:
+
+* I don't write any of that, or link to any of that
+* if someone else posts such content, or links to such content, in replies to my posts (which would then become visible through
+  the public interface of this service), I will promptly remove the content as soon as I become aware of it
+
+Therefore, I do not need to implement any further measures.
+
+Safety duties
+=============
+
+To prevent individuals from encountering priority illegal content by means of this service; To effectively mitigate and manage the
+risk of this service being used for the commission or facilitation of a priority offence; To effectively mitigate and manage the
+risks of harm to individuals:
+
+  I will not post any illegal content
+
+  I will remove any publicly viewable illegal content that might enter my service from other instances
+
+To minimise the length of time for which any priority illegal content is present; To moderate content, including taking down
+content:
+
+  I will remove such content as soon as I become aware of it; other people can make me aware by sending me messages on this
+  service, or by sending email messages to my public email address
+
+Policies on user access, terms of use and terms of service:
+
+  I am the only person who is directly using this service, therefore the only person who would be subject to such policies and
+  terms; this document is effectively my policy for my own service
+
+If I were to become aware of unreported CSEA, I will report it to the NCA.
+
+========= ===================================  ============
+Ofcom ref Measure                              Comment
+========= ===================================  ============
+ICU A2    Accountable individual               Gianni Ceccarelli
+
+ICU C1    Content moderation function          I personally review and assess suspected illegal content
+
+ICU C2    Take down                            I will remove the local copy of other people's content, and if appropriate, report
+                                               it to their instance's administrators
+
+ICU D1    Enabling complaints                  Anyone can complain to me via direct message or email
+
+ICU D2    Easy to find complaints information  My own profile, and every page on this website
+
+ICU D7    Appropriate action for complaints    I personally handle any complaints
+
+ICU D9    Appeals                              I will handle appeals promptly
+
+ICU D10   Appeals                              I will handle appeals
+
+ICU D11   Proactive technology                 I am not using proactive technology
+
+ICU D12   Appropriate action for complaints    As per ICU D7, I will handle any complaints
+
+ICU D13   Manifestly unfounded complaints      I will handle complaints
+
+ICU G1    Terms of service                     Not applicable, as I am the only user
+
+ICU G3    Clarity of terms                     Same as above
+
+ICU H1    Proscribed organisations             I will block any user and instance if I become aware that they are a member of a
+                                               proscribed organisation.
+========= ===================================  ============
diff --git a/src/osa/fedi-risk-assessment/du2html.xsl b/src/osa/fedi-risk-assessment/du2html.xsl
new file mode 120000
index 0000000..e2487e0
--- /dev/null
+++ b/src/osa/fedi-risk-assessment/du2html.xsl
@@ -0,0 +1 @@
+../../../templates/du2html.xsl
\ No newline at end of file