docs(compliance): update EU AI Act applicability dates

[Tionne Smith (electricwolfemarshmallowhypertext)]

Related Issue

Fixes #3649.

If no related issue is linked above, you must complete "Problem & Solution", "Impact on Your Work", and "Alternatives Considered" below.

Problem & Solution

docs/compliance/eu-ai-act-checklist.md still reflected the pre-amendment EU AI Act applicability schedule.

This PR updates the checklist for Regulation (EU) 2026/1744, including the revised high-risk application dates, Article 5 timing exceptions, Article 50(2) marking transition, and amended Article 4 AI literacy wording.

Impact on Your Work

N/A — linked issue #3649 describes the impact.

Timeline

None.

Alternatives Considered

N/A — linked issue #3649 describes the requested correction.

Type of Change

• Bug fix (non-breaking change that fixes an issue)
• New feature (non-breaking change that adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)
• Documentation update
• Maintenance (dependency updates, CI/CD, refactoring)
• Security fix

Package(s) Affected

Core & runtime:

• agent-governance-toolkit-core
• agent-primitives
• agent-os
• agent-mesh
• agent-runtime
• agent-sre
• agent-compliance

Governance & security:

• agent-mcp-governance
• agent-rag-governance
• agent-sandbox
• agent-discovery
• agt-policies
• policy-engine

Platform & tooling:

• agent-hypervisor
• agent-lightning
• agent-marketplace
• agent-governance-toolkit-cli
• agent-governance-toolkit-integrations
• agent-governance-toolkit-protocols
• agentmesh-integrations (framework integrations)

CLI plugins:

• agent-governance CLI plugins (copilot-cli / claude-code / opencode / antigravity-cli)

Shared / other:

• schemas
• action (GitHub Action)
• examples
• docs / root

Testing

Unit Testing

N/A — documentation-only change.

Manual Testing

• git diff --check passed.
• Verified the amended dates and Article 4 wording against Regulation (EU) 2026/1744 on EUR-Lex.

Checklist

• I have linked a related issue above, or completed "Problem & Solution", "Impact on Your Work", and "Alternatives Considered"
• My code follows the project style guidelines (ruff check)
• I have added tests that prove my fix/feature works
• All new and existing tests pass (pytest)
• I have updated documentation as needed
• I have signed the [Microsoft CLA](https://cla.opensource.microsoft.com/)

Attribution & Prior Art

• This contribution does not contain code copied or derived from other projects without attribution
• Any external projects that inspired this design are credited in code comments or documentation
• If this PR implements functionality similar to an existing open-source project, I have listed it below

Prior art / related projects (if any):

AI Assistance

• I can explain every meaningful change in this PR: what it does, why, and what tradeoffs were considered
• I have run tests and verification appropriate for this change
• No part of this PR was autonomously submitted by an AI agent without my review
• I have not used AI to generate review comments on others' PRs

If AI tools materially shaped this change, briefly note what was used:

AI assistance was used for source verification and review; all changes were manually reviewed before submission.

IP, Patents, and Licensing

• This contribution does not implement patent-pending or patent-encumbered techniques
• This contribution does not require an NDA or licensing agreement to understand or use
• Any AI tools used have terms compatible with the MIT License

[azure-pipelines]

Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

[github-actions]

PR Review Summary

Check	Status	Details
🔍 Code Review	⚠️ Missing	No current-run comment
🛡️ Security Scan	⚠️ Missing	No current-run comment
🔄 Breaking Changes	⚠️ Missing	No current-run comment
📝 Docs Sync	⚠️ Missing	No current-run comment
🧪 Test Coverage	⚠️ Missing	No current-run comment

Verdict: ⚠️ AI review incomplete; ready for human review

AI review comments are untrusted advisory output. The summary reports workflow-generated completion status only, not model-authored pass/fail claims.