The framework update is still in development, but its emerging direction points towards responsibility, supervision and role design rather than a catalogue of fashionable AI tools.
The binding law separates provider duties from deployer duties and machine-readable marking from disclosures people can perceive. The Commission's guidance helps, but it is not the law itself.
SAP's 1H 2026 documentation describes a review queue for imported and inferred skills, while trusted sources can write directly to the Attributes Library.
Regulation (EU) 2026/1744 sets different dates for Chapter III, Sections 1–3 duties for Annex III and Annex I high-risk systems. Other AI Act clocks continue.