The Exemption Zone: Where the State Writes Itself Out of Its Own Canon — Article 49(4) of the EU AI Act and the Asymmetric Termination of the Chain of Proof

Background. In agentic infrastructure, an AI system acting on a principal's behalf can only be held to account if its decisions trace back through a chain of proof to a source that settles the matter. States hold the largest stock of such sources: registries, licences, credentials, final judgments. These are not descriptions of reality but constitutive acts that create it. Finding. Article 49(4) of the EU AI Act (Regulation 2024/1689) routes high-risk AI systems in law enforcement, migration, asylum and border management to a secure non-public section of the EU database. Reading Annex VIII Sections A, B and C against Annex IX shows that the restricted section itself receives a truncated data package. Removed: the description of the system's data, inputs and operating logic; the instructions for use; the certificate and EU declaration of conformity; the summary of the fundamental rights impact assessment; the reasoning behind an Article 6(3) "not high-risk" classification; and the summary of the real-world testing plan. Retained: provider identity, deploying authority, contact details, intended purpose, status. Administrative identifiability is preserved while accountability-constitutive content is selectively withdrawn. Argument. The paper names this pattern the exemption zone and distinguishes it from the de facto opacity documented in earlier algorithmic-state failures: here opacity is a norm, codified in advance, rather than a factual condition that litigation can break open. It shows the chain of proof does not simply break but terminates asymmetrically — the restricted section remains readable to the Commission and designated national authorities and structurally unreadable to affected persons, journalists and civil society. Drawing on republican political theory, it argues that a canon readable only to the sovereign constitutes domination irrespective of any abuse, because unreviewable capacity is itself the harm. It concedes the legitimate core of operational secrecy and locates the objection precisely: not in non-publicity, but in the selection of omissions, since a fundamental rights impact assessment summary is an accountability document rather than an operational secret. Contribution. The paper introduces the constitutive readability gap as a falsifiable indicator and derives two testable predictions, one of which is specified as a cross-jurisdictional natural experiment over open versus closed constitutive registries with matched entity types and corpus frequency. It contrasts Article 49(4) with the eIDAS 2.0 / EUDI Wallet programme, in which the same legislator makes constitutive acts machine-verifiable — where the citizen becomes checkable rather than the state. Status. Written from the enacted text sixteen months before the registration regime becomes operational (2 December 2027 for standalone Annex III systems), while the construction remains amendable. A felmentési zóna: Ahol az állam kiírja magát a saját kánonjából — az EU AI Act 49(4) cikke és a bizonyíthatóság-lánc aszimmetrikus terminálódása. A rekord a magyar teljes szöveget és az angol bővített kivonatot tartalmazza. (This record contains the Hungarian full text and an extended English summary.) Recommended citation: Varga, Zoltán (2026): The Exemption Zone: Where the State Writes Itself Out of Its Own Canon — Article 49(4) of the EU AI Act and the Asymmetric Termination of the Chain of Proof. Zenodo. doi:10.5281/zenodo.21736696 (concept DOI — resolves to the latest version). License: CC BY 4.0. ORCID: 0009-0003-1020-834X.