Regulation and benchmarks
Scheduler regulation and benchmark map (LSBU: carbon, scheduling, networking, audit)
Claude-Uriel 12:1623102026-1, 23 October 2026. Each journey contract names the IDs below in "regulation" and "benchmarks".
REGULATION
REG-UKGDPR-44 UK GDPR Article 44, general principle for transfers: personal data leaves the UK only under Chapter V.
https://www.legislation.gov.uk/eur/2016/679/article/44
Journeys: sched-002, sched-003. Outcome: UK-data workloads are placed only where Chapter V allows.
REG-UKGDPR-45 UK GDPR Article 45 and DPA 2018 s.17A, transfers on the basis of UK adequacy regulations.
https://www.legislation.gov.uk/eur/2016/679/article/45 https://www.legislation.gov.uk/ukpga/2018/12/section/17A
Journeys: sched-003, sched-004. Outcome: when adequacy changes, workloads re-place at once, each move receipted.
REG-EU-ADEQ European Commission adequacy decisions for the United Kingdom (GDPR and LED), the EU side of UK-EU flows.
https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en
Journey: sched-003 (EU adequacy lapse and restore presets).
REG-UKUS-BRIDGE UK Extension to the EU-US Data Privacy Framework (UK-US data bridge), Data Protection (Adequacy) (United States
of America) Regulations 2023, SI 2023/1028. https://www.legislation.gov.uk/uksi/2023/1028/contents/made
Journey: sched-004 (suspended and restored by telling Jude).
REG-DUAA Data (Use and Access) Act 2025, Part 5: the new UK test for international transfers (data protection test).
https://www.legislation.gov.uk/ukpga/2025/18/contents
Journey: sched-003. Outcome: the law table is versioned so a change in the UK test is one receipted event.
REG-UKGDPR-5-2 UK GDPR Article 5(2), accountability: the controller can demonstrate compliance.
https://www.legislation.gov.uk/eur/2016/679/article/5 Journey: sched-007 (whole history from receipts).
REG-UKGDPR-30 UK GDPR Article 30, records of processing activities.
https://www.legislation.gov.uk/eur/2016/679/article/30 Journey: sched-007.
REG-GSC Government Security Classifications Policy (OFFICIAL, SECRET, TOP SECRET; OFFICIAL-SENSITIVE handling marking).
https://www.gov.uk/government/publications/government-security-classifications
Journey: sched-002. Outcome: workload classification never exceeds site clearance.
REG-NCSC-CSP NCSC Cloud Security Principles (principle 2, asset protection: data location and legal jurisdiction).
https://www.ncsc.gov.uk/collection/cloud/the-cloud-security-principles Journey: sched-002.
REG-NIS-10 Network and Information Systems Regulations 2018, regulation 10: security duties of operators of essential
services (appropriate measures, prevent and minimise the impact of incidents).
https://www.legislation.gov.uk/uksi/2018/506/regulation/10
Journeys: sched-005, sched-006, sched-008, sched-010. The Cyber Security and Resilience Bill (introduced
November 2025) extends NIS to managed service and data centre providers:
https://www.gov.uk/government/collections/cyber-security-and-resilience-bill
REG-NIS2-20 Directive (EU) 2022/2555 (NIS2), Article 20: management bodies trained in cybersecurity risk.
https://eur-lex.europa.eu/eli/dir/2022/2555/oj Journey: sched-009 (junior team drills).
REG-NIS2-21 NIS2 Article 21: risk-management measures, including business continuity, backup management and disaster
recovery, and crisis management. https://eur-lex.europa.eu/eli/dir/2022/2555/oj
Journeys: sched-005, sched-006, sched-010.
REG-NCSC-CAF NCSC Cyber Assessment Framework (objective D: minimising the impact of incidents; D1 response and recovery
planning, D2 lessons learned). https://www.ncsc.gov.uk/collection/cyber-assessment-framework
Journeys: sched-005, sched-008, sched-009, sched-010.
REG-DORA-12 Regulation (EU) 2022/2554 (DORA), Article 12: backup policies, restoration and recovery, in a location
geographically separate. https://eur-lex.europa.eu/eli/reg/2022/2554/oj Journey: sched-006 (Jordan copies).
REG-ISO22301 ISO 22301:2019 business continuity management systems. https://www.iso.org/standard/75106.html Journey: sched-006.
REG-ISO27001 ISO/IEC 27001:2022, Annex A 8.15 logging and 5.28 collection of evidence. https://www.iso.org/standard/27001
Journey: sched-007.
REG-EED-12 Directive (EU) 2023/1791 (Energy Efficiency Directive), Article 12: data centre energy performance reporting;
Delegated Regulation (EU) 2024/1364. https://eur-lex.europa.eu/eli/dir/2023/1791/oj Journey: sched-001.
REG-GSF-SCI Software Carbon Intensity specification, ISO/IEC 21031:2024: SCI = ((E × I) + M) per R.
https://www.iso.org/standard/86612.html https://sci.greensoftware.foundation/ Journey: sched-001.
REG-NESO NESO Carbon Intensity API (regional and national gCO2/kWh, forecast), CC BY 4.0; read through
carbon.judiverse.tech. https://carbonintensity.org.uk/ Journey: sched-001.
BENCHMARKS
BEN-K8S-SCHED Kubernetes scheduler: filter (predicates) then score (priorities), and scheduler_perf throughput tests.
https://kubernetes.io/docs/concepts/scheduling-eviction/kube-scheduler/
https://github.com/kubernetes/kubernetes/tree/master/test/integration/scheduler_perf
The simulation filters on health, permission, jurisdiction and capacity, then scores on carbon, with a
deterministic tie-break on node ID.
BEN-GOOGLE-CICS Radovanovic et al. 2023, Google's carbon-intelligent compute system, IEEE Transactions on Power Systems.
https://arxiv.org/abs/2106.11750
BEN-CCF Cloud Carbon Footprint methodology (kW per vCPU and GPU, PUE, grid intensity), already used by
carbon.judiverse.tech. https://www.cloudcarbonfootprint.org/docs/methodology
BEN-CHAOS Principles of Chaos Engineering (steady state, real-world events, run in production, automate continuously):
Erling's schedule. https://principlesofchaos.org/
BEN-NETFLOW IETF RFC 7011 (IPFIX) flow accounting: per-flow bytes in and out, the basis of the balance view.
https://www.rfc-editor.org/rfc/rfc7011
BEN-SCITT IETF SCITT architecture (append-only, verifiable transparency receipts) and RFC 9162 Merkle-style logs:
the receipt hash chain. https://datatracker.ietf.org/wg/scitt/about/ https://www.rfc-editor.org/rfc/rfc9162
JOURNEY TO OUTCOME MAP
sched-001 carbon-aware placement REG-GSF-SCI REG-EED-12 REG-NESO BEN-K8S-SCHED BEN-CCF BEN-GOOGLE-CICS
sched-002 permission and jurisdiction REG-UKGDPR-44 REG-GSC REG-NCSC-CSP BEN-K8S-SCHED
sched-003 one-tap law change REG-UKGDPR-44 REG-UKGDPR-45 REG-EU-ADEQ REG-DUAA BEN-K8S-SCHED
sched-004 tell Jude a law change REG-UKGDPR-45 REG-UKUS-BRIDGE BEN-K8S-SCHED
sched-005 node loss self-healing REG-NIS-10 REG-NIS2-21 REG-NCSC-CAF BEN-CHAOS
sched-006 site outage, Jordan recovery REG-NIS-10 REG-NIS2-21 REG-DORA-12 REG-ISO22301 BEN-CHAOS
sched-007 zoom and audit REG-UKGDPR-5-2 REG-UKGDPR-30 REG-ISO27001 BEN-SCITT
sched-008 ingress and egress balance REG-NIS-10 REG-NCSC-CAF BEN-NETFLOW
sched-009 junior team drill REG-NIS2-20 REG-NCSC-CAF BEN-CHAOS
sched-010 Jude monitor and self-repair REG-NIS-10 REG-NIS2-21 REG-NCSC-CAF BEN-CHAOS