Corobate
A bank's supply chain · five sealed decisions · six scoped copies each
What Corobate emits across a bank's supply chain
A bank is a hard case for a provenance gate, and that is why it is worth doing. There are no shipments. There are almost no materials. What there is instead is the shape most large organisations actually have: a long tail of small vendors touching sensitive data, a physical chain that is vehicles rather than manufacturing, and field services performed by people driving to addresses.
The five decisions below come from three of those segments. Each one is real: the engine ran, a receipt was sealed, and the six scoped copies were derived and checked against the digest the receipt committed to before this page was written. Each is governed by instruments taken from real published documents — a company's own supplier standard, the interagency guidance it is written against, and an industry arbitration policy.
The pair worth reading first. The first two tabs are the SAME vendor with the SAME evidence, minutes apart, at two contract values. One clears. One does not. Nobody's opinion changed — a seller's assertion caps at 50% and the bar for material exposure sits above it. That is why a bank asks an auditor rather than the vendor, expressed as arithmetic on two receipts anyone can re-run rather than as policy in a manual.
And the last tab, which is the one a risk committee should read. A director with real authority prices a gap in good faith — valid signature, entitled role, a genuine actuarial basis, a figure well inside their limit — and the price does not count, because the authority that wrote the requirement declared it unwaivable. Until 8 August 2026 that control existed on paper and nothing enforced it: the rule composed, bound, sealed onto the receipt and drew as the strictest setting on the dial while no code ever read it. It was found by auditing a patent drawing against the software it depicts. The tab is here because a control nobody has watched fire is a control nobody should believe.
A twelve-person analytics vendor with access to non-public customer data, up for routine renewal. There are hundreds of these in a bank; individually small, collectively most of the third-party risk. Independent findings carry the file and the vendor’s own statements are admissible at this value.
- Subject
- supplier:NORTHSTAR-ANALYTICS
- Question
- May Northstar Analytics be renewed at current scope with continued access to Non-Public Ally Data?
- Exposure
- $8,400
- Instruments
- Ally — Supply Chain · Board of Governors of the Federal Reserve System
- Outcome
- CAUTION — the action may proceed
- Receipt
- sha256:306aafb286f897cd0083ab0052171d5419b38003f984e2bb58c3e18a6911d31e
- Fourth party
- 68 components ingested from a CycloneDX 1.5 bill of materials · sha256:e4daced4f23c89e…
The gate variables this decision ran under — a dial per question, read back off the sealed receipt
dr test certificationrequired
necessityrequiredAlly — Supply Chain — § 11.6.1 [VERIFY]
staleness365 daysAlly — Supply Chain — § 11.6.1 [VERIFY]
reputation class—No class floor was set, so the seller's own assertion is admissible for this claim up to the ceiling that class carries. That is a setting, not an absence.
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "dr_test_certification". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
financial condition reviewrequired
necessityrequiredBoard of Governors of the Federal Reserve System — Due diligence — financial condition [VERIFY]
staleness90 daysNo instrument set an age limit for this claim, so the deploying organisation's own freshness policy binds at 90 days. It is not unlimited.
reputation class—No class floor was set, so the seller's own assertion is admissible for this claim up to the ceiling that class carries. That is a setting, not an absence.
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "financial_condition_review". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
incident response plan testrequired
necessityrequiredAlly — Supply Chain — § 8.7.2 [VERIFY]
staleness90 daysNo instrument set an age limit for this claim, so the deploying organisation's own freshness policy binds at 90 days. It is not unlimited.
reputation class—No class floor was set, so the seller's own assertion is admissible for this claim up to the ceiling that class carries. That is a setting, not an absence.
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "incident_response_plan_test". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
penetration testrequired
necessityrequiredAlly — Supply Chain — § 8.9.1 [VERIFY]
staleness365 daysAlly — Supply Chain — § 8.9.1 [VERIFY]
reputation classverifiedAlly — Supply Chain — § 8.9.1 [VERIFY]
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "penetration_test". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
privacy breach notification 24hrequired never waivable
necessityrequired never waivableAlly — Supply Chain — § 9.7.1 [VERIFY]
staleness90 daysNo instrument set an age limit for this claim, so the deploying organisation's own freshness policy binds at 90 days. It is not unlimited.
reputation class—No class floor was set, so the seller's own assertion is admissible for this claim up to the ceiling that class carries. That is a setting, not an absence.
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "privacy_breach_notification_24h". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
soc2 type2 reportrequired
necessityrequiredAlly — Supply Chain — § 13.1.6 [VERIFY]
staleness365 daysAlly — Supply Chain — § 13.1.5 [VERIFY]
reputation classverifiedAlly — Supply Chain — § 13.1.6 [VERIFY]
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "soc2_type2_report". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
1 displaced ask. Another authority asked for less on this claim and was displaced by a stricter one. The lesser ask travels on the receipt rather than vanishing, so a supplier can show a regulator that a different regulation would have been satisfied.
subcontractor inventoryrequired
necessityrequiredAlly — Supply Chain — § 13.1.1 [VERIFY]
staleness90 daysNo instrument set an age limit for this claim, so the deploying organisation's own freshness policy binds at 90 days. It is not unlimited.
reputation class—No class floor was set, so the seller's own assertion is admissible for this claim up to the ceiling that class carries. That is a setting, not an absence.
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "subcontractor_inventory". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
Every bar above was re-derived from the regulatory bindings inside this receipt’s hashed body, not from the configuration that produced it. A bar in grey is a setting no instrument made — the deploying organisation’s own default, which still binds and is not an absence. A bar position renders an ordinal on a declared ladder: it is a way to draw a control and to compare two settings on the same axis, and it is not a measurement. The value printed beside each bar is the authoritative one.
Whoever must act now
The person with the next action in their hands: the sourcing manager who must renew or not, the lister who must publish the lane, the dispatcher who must send an agent.
Sees one instruction and the reason in words. No score, no money, no signatures — nothing that turns a decision into a negotiation with whoever is waiting.
DO NOT PROCEED
supplier:NORTHSTAR-ANALYTICS
Everything required is on file and current.
Seven or eight fields, and not one of them is a number somebody can argue with. This person is not being asked to re-judge the evidence; somebody already did, and it is on the record.
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:70e18b5d442662fa3d026113397306c6340b981d5b3c9c38c702b1204f20aa8d matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "OPERATOR",
"purpose": "Whoever must act on this decision now — release the goods, fund the draw, dispatch the agent, ship the title. Sees one instruction and the reason in plain words, and nothing that could be argued about while somebody waits.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:306aafb286f897cd0083ab0052171d5419b38003f984e2bb58c3e18a6911d31e",
"entry_hash": "sha256:0e8d1549830d4d20f19b53cff5539e4d01275dacabc1c861f563253b98dfce96",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:70e18b5d442662fa3d026113397306c6340b981d5b3c9c38c702b1204f20aa8d",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "tprm_NORTHSTAR_2026Q3_renewal",
"subject": "supplier:NORTHSTAR-ANALYTICS"
},
"memory": {
"state_digest": "sha256:7f997249df06dcd91ce8bb406695bd40b8b579a6b27477286d64f9b908f73144",
"ledger_head": "sha256:63d2a61949b31d42085612a6595ceed2e82822b69d1c3fa3632135f4fc9f2559",
"coverage_gaps": []
},
"verdict": {
"value": "CAUTION"
},
"release": {
"state": "NOT_REQUIRED"
}
}
}Vendor / selling dealer
The party whose evidence was judged — the vendor under review, or the dealer consigning the vehicle.
Sees which of their own claims were required and by whose clause. Does not see the bank’s exposure, how the bank priced any shortfall, or any other party’s evidence in the same file.
What is outstanding on your file
Nothing. Every required item is present and current.
| Claim | Required | Evidence class | Who | Age | Outcome |
|---|---|---|---|---|---|
| subcontractor_inventory | yes | SELLER-ASSERTED | — | 2026-08-05 | admitted |
| financial_condition_review | yes | VERIFIED | — | 2026-07-08 | admitted |
| incident_response_plan_test | yes | SELLER-ASSERTED | — | 2026-06-09 | admitted |
| soc2_type2_report | yes | VERIFIED | — | 2026-05-04 | admitted |
| penetration_test | yes | VERIFIED | — | 2026-04-10 | admitted |
| dr_test_certification | yes | SELLER-ASSERTED | — | 2026-03-21 | admitted |
| privacy_breach_notification_24h | yes | VERIFIED | — | 2026-02-09 | admitted |
The clause is here because it turns an argument into an errand. What is not here: what the bank had at stake, and whether anyone priced the shortfall.
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:8f65ec2c40843db1449968392de3b66358b4f1f8c5f27b42900136b0507d6ccf matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "SUPPLIER",
"purpose": "The party whose evidence was judged. Sees every claim the decision required, which fell short, and the clause that required it — and nothing about what the buyer had at stake or how the buyer priced any shortfall. NOTE, because an earlier draft of this sentence was untrue: this projection carries the WHOLE inputs array, so where several parties supplied evidence for one decision, each of them sees all of it. Per-party scoping cannot be expressed by a commitment scheme with one digest per role, and claiming it anyway would be the kind of promise this file exists to stop making.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:306aafb286f897cd0083ab0052171d5419b38003f984e2bb58c3e18a6911d31e",
"entry_hash": "sha256:0e8d1549830d4d20f19b53cff5539e4d01275dacabc1c861f563253b98dfce96",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:8f65ec2c40843db1449968392de3b66358b4f1f8c5f27b42900136b0507d6ccf",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "tprm_NORTHSTAR_2026Q3_renewal",
"subject": "supplier:NORTHSTAR-ANALYTICS",
"question": "May Northstar Analytics be renewed at current scope with continued access to Non-Public Ally Data?"
},
"memory": {
"state_digest": "sha256:7f997249df06dcd91ce8bb406695bd40b8b579a6b27477286d64f9b908f73144",
"ledger_head": "sha256:63d2a61949b31d42085612a6595ceed2e82822b69d1c3fa3632135f4fc9f2559",
"coverage_gaps": []
},
"verdict": {
"value": "CAUTION"
},
"inputs": [
{
"key": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory",
"provenance": "SELLER-ASSERTED",
"observed_at": "2026-08-05T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::financial_condition_review",
"provenance": "VERIFIED",
"observed_at": "2026-07-08T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::incident_response_plan_test",
"provenance": "SELLER-ASSERTED",
"observed_at": "2026-06-09T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::soc2_type2_report",
"provenance": "VERIFIED",
"observed_at": "2026-05-04T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::penetration_test",
"provenance": "VERIFIED",
"observed_at": "2026-04-10T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification",
"provenance": "SELLER-ASSERTED",
"observed_at": "2026-03-21T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::privacy_breach_notification_24h",
"provenance": "VERIFIED",
"observed_at": "2026-02-09T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
}
],
"regulatory": {
"bindings": [
{
"claim": "dr_test_certification",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "dr_test_certification",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "financial_condition_review",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — financial condition [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "incident_response_plan_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.7.2 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "never_waivable",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.5 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": [
{
"value": "SELLER-ASSERTED",
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — controls [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
}
}
],
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "subcontractor_inventory",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
}
],
"applied": [
{
"instrument_id": "ally-third-party-requirements",
"version": 5,
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"edition": "V.5.0",
"citation": "§ 8, 9, 11, 13 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
},
{
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"edition": "2023-06-06",
"citation": "Due diligence and ongoing monitoring [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"defaults": [
{
"claim": "dr_test_certification",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"dr_test_certification\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "financial_condition_review",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"financial_condition_review\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "incident_response_plan_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"incident_response_plan_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "penetration_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"penetration_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"privacy_breach_notification_24h\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "soc2_type2_report",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"soc2_type2_report\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "subcontractor_inventory",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"subcontractor_inventory\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
}
}
}Bank examiner
An examiner under the interagency third-party guidance, or a market-conduct supervisor. Same position as a customs officer: a public mandate over the record and no claim on the commercial position.
The regulatory record in full — every instrument by authority, clause, edition and document digest, and every required claim with who supplied it and when. No exposure, no risk pricing, no confidence score, no quorum.
Ally — Supply Chain
Third Party Requirements V.5.0
§ 8, 9, 11, 13 [VERIFY] · edition V.5.0
document sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1
entered by actor:human:tprm-officer
Board of Governors of the Federal Reserve System
Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)
Due diligence and ongoing monitoring [VERIFY] · edition 2023-06-06
document sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2
entered by actor:human:tprm-officer
What each authority bound
| Claim | Requirement | Level | Bound by |
|---|---|---|---|
| dr_test_certification | max age days | 365 | Ally — Supply Chain § 11.6.1 [VERIFY] · Third Party Requirements V.5.0 |
| dr_test_certification | required | true | Ally — Supply Chain § 11.6.1 [VERIFY] · Third Party Requirements V.5.0 |
| financial_condition_review | required | true | Board of Governors of the Federal Reserve System Due diligence — financial condition [VERIFY] · Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4) |
| incident_response_plan_test | required | true | Ally — Supply Chain § 8.7.2 [VERIFY] · Third Party Requirements V.5.0 |
| penetration_test | max age days | 365 | Ally — Supply Chain § 8.9.1 [VERIFY] · Third Party Requirements V.5.0 |
| penetration_test | min class | VERIFIED | Ally — Supply Chain § 8.9.1 [VERIFY] · Third Party Requirements V.5.0 |
| penetration_test | required | true | Ally — Supply Chain § 8.9.1 [VERIFY] · Third Party Requirements V.5.0 |
| privacy_breach_notification_24h | never waivable | true | Ally — Supply Chain § 9.7.1 [VERIFY] · Third Party Requirements V.5.0 |
| privacy_breach_notification_24h | required | true | Ally — Supply Chain § 9.7.1 [VERIFY] · Third Party Requirements V.5.0 |
| soc2_type2_report | max age days | 365 | Ally — Supply Chain § 13.1.5 [VERIFY] · Third Party Requirements V.5.0 |
| soc2_type2_report | min class | VERIFIED | Ally — Supply Chain § 13.1.6 [VERIFY] · Third Party Requirements V.5.0 Board of Governors of the Federal Reserve System asked only for SELLER-ASSERTED (Due diligence — controls [VERIFY]) |
| soc2_type2_report | required | true | Ally — Supply Chain § 13.1.6 [VERIFY] · Third Party Requirements V.5.0 |
| subcontractor_inventory | required | true | Ally — Supply Chain § 13.1.1 [VERIFY] · Third Party Requirements V.5.0 |
Every required claim, and what was actually held
| Claim | Required | Evidence class | Who | Age | Outcome |
|---|---|---|---|---|---|
| subcontractor_inventory | yes | SELLER-ASSERTED | actor:org:NORTHSTAR-ANALYTICS | 2026-08-05 | admitted |
| financial_condition_review | yes | VERIFIED | actor:sys:registry:dnb-financials | 2026-07-08 | admitted |
| incident_response_plan_test | yes | SELLER-ASSERTED | actor:org:NORTHSTAR-ANALYTICS | 2026-06-09 | admitted |
| soc2_type2_report | yes | VERIFIED | actor:org:CERT-DELOITTE-SOC | 2026-05-04 | admitted |
| penetration_test | yes | VERIFIED | actor:org:LAB-BISHOPFOX-PEN | 2026-04-10 | admitted |
| dr_test_certification | yes | SELLER-ASSERTED | actor:org:NORTHSTAR-ANALYTICS | 2026-03-21 | admitted |
| privacy_breach_notification_24h | yes | VERIFIED | actor:sys:registry:contract-repository | 2026-02-09 | admitted |
Absent from this copy, deliberatelyNo exposure figure, no risk pricing, no confidence score, no release quorum. The examiner’s claim is on the record of what was required and what was held — answered here completely, down to the digest of the document each requirement was configured from. The institution’s commercial position is a different question and this document does not answer it. The published verifier checks that on the content of the copy, not on the intentions of whoever produced it.
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:4cf49cefd2b65c07ec86b7cea224013c2e486c115b38186961378405ac6ec668 matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "REGULATOR",
"purpose": "An official holding a public mandate over this record — a customs officer, a bank examiner, a market conduct supervisor. Sees the regulatory record in full: their own instrument named, every required claim and whether it was met, by whom, how old. No commercial figure of any kind.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:306aafb286f897cd0083ab0052171d5419b38003f984e2bb58c3e18a6911d31e",
"entry_hash": "sha256:0e8d1549830d4d20f19b53cff5539e4d01275dacabc1c861f563253b98dfce96",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:4cf49cefd2b65c07ec86b7cea224013c2e486c115b38186961378405ac6ec668",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "tprm_NORTHSTAR_2026Q3_renewal",
"subject": "supplier:NORTHSTAR-ANALYTICS",
"question": "May Northstar Analytics be renewed at current scope with continued access to Non-Public Ally Data?"
},
"memory": {
"state_digest": "sha256:7f997249df06dcd91ce8bb406695bd40b8b579a6b27477286d64f9b908f73144",
"ledger_head": "sha256:63d2a61949b31d42085612a6595ceed2e82822b69d1c3fa3632135f4fc9f2559",
"coverage_gaps": []
},
"data_horizon": "2026-08-08T14:00:00.000Z",
"verdict": {
"value": "CAUTION"
},
"regulatory": {
"spec": "corobate:regulatory:2",
"resolved": true,
"applied": [
{
"instrument_id": "ally-third-party-requirements",
"version": 5,
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"edition": "V.5.0",
"citation": "§ 8, 9, 11, 13 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
},
{
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"edition": "2023-06-06",
"citation": "Due diligence and ongoing monitoring [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"skipped": [],
"conflicts": [],
"bindings": [
{
"claim": "dr_test_certification",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "dr_test_certification",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "financial_condition_review",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — financial condition [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "incident_response_plan_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.7.2 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "never_waivable",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.5 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": [
{
"value": "SELLER-ASSERTED",
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — controls [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
}
}
],
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "subcontractor_inventory",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
}
],
"defaults": [
{
"claim": "dr_test_certification",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"dr_test_certification\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "financial_condition_review",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"financial_condition_review\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "incident_response_plan_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"incident_response_plan_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "penetration_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"penetration_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"privacy_breach_notification_24h\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "soc2_type2_report",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"soc2_type2_report\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "subcontractor_inventory",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"subcontractor_inventory\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
},
"inputs": [
{
"key": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory",
"provenance": "SELLER-ASSERTED",
"source": "NORTHSTAR-ANALYTICS:subcontractor_inventory",
"observed_at": "2026-08-05T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:org:NORTHSTAR-ANALYTICS"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::financial_condition_review",
"provenance": "VERIFIED",
"source": "dnb-financials:financial_condition_review",
"observed_at": "2026-07-08T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:sys:registry:dnb-financials"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::incident_response_plan_test",
"provenance": "SELLER-ASSERTED",
"source": "NORTHSTAR-ANALYTICS:incident_response_plan_test",
"observed_at": "2026-06-09T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:org:NORTHSTAR-ANALYTICS"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::soc2_type2_report",
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:soc2_type2_report",
"observed_at": "2026-05-04T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:org:CERT-DELOITTE-SOC"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::penetration_test",
"provenance": "VERIFIED",
"source": "LAB-BISHOPFOX-PEN:penetration_test",
"observed_at": "2026-04-10T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:org:LAB-BISHOPFOX-PEN"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification",
"provenance": "SELLER-ASSERTED",
"source": "NORTHSTAR-ANALYTICS:dr_test_certification",
"observed_at": "2026-03-21T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:org:NORTHSTAR-ANALYTICS"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::privacy_breach_notification_24h",
"provenance": "VERIFIED",
"source": "contract-repository:privacy_breach_notification_24h",
"observed_at": "2026-02-09T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:sys:registry:contract-repository"
}
],
"crypto_suite": {
"spec": "corobate:suite:1",
"id": "CB-1-ES256-SHA256",
"receipt_digest": "sha256",
"chain_digest": "sha256",
"content_digest": "sha256",
"envelope_signature": "ES256",
"signature_curve": "P-256",
"canonicalisation": "attest-canon/2",
"quantum_resistant": false
}
}
}Third-party risk officer
The third-party risk function that owns the file.
The fullest internal view: every input, its class, its age, its score, the exposure, and every instrument in force.
VerdictCAUTION
Confidence50%
bound by subcontractor_inventory
Exposure$8,400
ReleaseNOT_REQUIRED
Risk acceptedNONE
Every input the gate saw
| Claim | Required | Evidence class | Who | Age | Score | Outcome |
|---|---|---|---|---|---|---|
| subcontractor_inventory | yes | SELLER-ASSERTED | actor:org:NORTHSTAR-ANALYTICS | 3d | 50% | admitted |
| financial_condition_review | yes | VERIFIED | actor:sys:registry:dnb-financials | 31d | 95% | admitted |
| incident_response_plan_test | yes | SELLER-ASSERTED | actor:org:NORTHSTAR-ANALYTICS | 60d | 50% | admitted |
| soc2_type2_report | yes | VERIFIED | actor:org:CERT-DELOITTE-SOC | 96d | 95% | admitted |
| penetration_test | yes | VERIFIED | actor:org:LAB-BISHOPFOX-PEN | 120d | 95% | admitted |
| dr_test_certification | yes | SELLER-ASSERTED | actor:org:NORTHSTAR-ANALYTICS | 140d | 50% | admitted |
| privacy_breach_notification_24h | yes | VERIFIED | actor:sys:registry:contract-repository | 180d | 95% | admitted |
Instruments in force
Ally — Supply Chain
Third Party Requirements V.5.0
§ 8, 9, 11, 13 [VERIFY] · edition V.5.0
document sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1
entered by actor:human:tprm-officer
Board of Governors of the Federal Reserve System
Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)
Due diligence and ongoing monitoring [VERIFY] · edition 2023-06-06
document sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2
entered by actor:human:tprm-officer
Why
- Confidence 50.00% is bound by "supplier:NORTHSTAR-ANALYTICS|subcontractor_inventory".
- Thresholds for $8,400 exposure: approve 80%, caution 50%.
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:4a6f167bcd30ff079dfa5b708b713e2cb87a2283a41da59a3f680bd297999d90 matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "COMPLIANCE",
"purpose": "The operator’s own compliance function. The fullest internal view: every gap, every instrument in force, the waivability of each requirement and who accepted what.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:306aafb286f897cd0083ab0052171d5419b38003f984e2bb58c3e18a6911d31e",
"entry_hash": "sha256:0e8d1549830d4d20f19b53cff5539e4d01275dacabc1c861f563253b98dfce96",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:4a6f167bcd30ff079dfa5b708b713e2cb87a2283a41da59a3f680bd297999d90",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "tprm_NORTHSTAR_2026Q3_renewal",
"domain": "supply-chain",
"subject": "supplier:NORTHSTAR-ANALYTICS",
"question": "May Northstar Analytics be renewed at current scope with continued access to Non-Public Ally Data?"
},
"memory": {
"state_digest": "sha256:7f997249df06dcd91ce8bb406695bd40b8b579a6b27477286d64f9b908f73144",
"ledger_head": "sha256:63d2a61949b31d42085612a6595ceed2e82822b69d1c3fa3632135f4fc9f2559",
"coverage_gaps": [],
"exposure": {
"usd": 8400,
"declared_by": "actor:human:tprm-officer",
"ledger_seq": 7
},
"policy_digest": "sha256:a6b69b7d20f7fb04d522364af1d92992058b04a5835fcec9d1c9f2261c7ef636"
},
"data_horizon": "2026-08-08T14:00:00.000Z",
"verdict": {
"value": "CAUTION",
"threshold_approve": 0.8,
"threshold_caution": 0.5,
"rule": "confidence>=threshold"
},
"confidence": {
"value": 0.5,
"method": "min-over-critical-inputs",
"bound_by": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory"
},
"release": {
"required": false,
"required_by_tier": false,
"escalated_by_acceptance": false,
"risk_accepted": false,
"state": "NOT_REQUIRED",
"code": "QUORUM_NOT_REQUIRED",
"reason": "this decision is below the top exposure tier (floor $10,000,000) and no risk acceptance escalated into this gate, so no multi-party release requirement applies.",
"tier_floor_cents": 1000000000,
"exposure_usd_cents": 840000,
"required_m": 2,
"declared_n": 3,
"floor_m": 2,
"distinct_signers": 0,
"superseded": 0,
"collapsed": 0,
"release_digest": "sha256:00ce64cd32a1df4489279466606cb256f35c810d629bcf435ccc8c4980c9463a",
"governance_digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
"governance_signed": true,
"counted_voices": [],
"signatures": [],
"ledger_seq": null
},
"acceptance": {
"state": "NONE",
"code": "ACCEPTANCE_NONE",
"reason": "no risk acceptance was presented for this decision. This is the ordinary case: a refusal is a refusal unless a named person has priced it.",
"permitted_basis": null,
"presented": 0,
"superseded": 0,
"expired": 0,
"gaps_not_covered": 0,
"coverage_gaps_in_force": [],
"evidentiary_digest": "sha256:00ce64cd32a1df4489279466606cb256f35c810d629bcf435ccc8c4980c9463a",
"margin_floor_bp": 100,
"authority_ceiling_cents": {
"SUPERVISOR": 1000000,
"MANAGER": 25000000,
"DIRECTOR": 500000000,
"OFFICER": 5000000000
},
"acceptances": [],
"escalated": false,
"live": false,
"ledger_seq": null
},
"regulatory": {
"spec": "corobate:regulatory:2",
"resolved": true,
"applied": [
{
"instrument_id": "ally-third-party-requirements",
"version": 5,
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"edition": "V.5.0",
"citation": "§ 8, 9, 11, 13 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
},
{
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"edition": "2023-06-06",
"citation": "Due diligence and ongoing monitoring [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"skipped": [],
"conflicts": [],
"bindings": [
{
"claim": "dr_test_certification",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "dr_test_certification",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "financial_condition_review",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — financial condition [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "incident_response_plan_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.7.2 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "never_waivable",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.5 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": [
{
"value": "SELLER-ASSERTED",
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — controls [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
}
}
],
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "subcontractor_inventory",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
}
],
"defaults": [
{
"claim": "dr_test_certification",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"dr_test_certification\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "financial_condition_review",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"financial_condition_review\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "incident_response_plan_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"incident_response_plan_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "penetration_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"penetration_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"privacy_breach_notification_24h\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "soc2_type2_report",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"soc2_type2_report\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "subcontractor_inventory",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"subcontractor_inventory\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
},
"reasons": [
"Confidence 50.00% is bound by \"supplier:NORTHSTAR-ANALYTICS|subcontractor_inventory\".",
"Thresholds for $8,400 exposure: approve 80%, caution 50%."
],
"inputs": [
{
"key": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory",
"value": "68 components",
"provenance": "SELLER-ASSERTED",
"source": "NORTHSTAR-ANALYTICS:subcontractor_inventory",
"observed_at": "2026-08-05T14:00:00.000Z",
"reliability": 0.5,
"critical": true,
"memory_status": "admitted",
"memory_kind": "test_report",
"memory_actor": "actor:org:NORTHSTAR-ANALYTICS",
"memory_age_days": 3
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::financial_condition_review",
"value": "stable",
"provenance": "VERIFIED",
"source": "dnb-financials:financial_condition_review",
"observed_at": "2026-07-08T14:00:00.000Z",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted",
"memory_kind": "test_report",
"memory_actor": "actor:sys:registry:dnb-financials",
"memory_age_days": 31
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::incident_response_plan_test",
"value": "tabletop-2026",
"provenance": "SELLER-ASSERTED",
"source": "NORTHSTAR-ANALYTICS:incident_response_plan_test",
"observed_at": "2026-06-09T14:00:00.000Z",
"reliability": 0.5,
"critical": true,
"memory_status": "admitted",
"memory_kind": "test_report",
"memory_actor": "actor:org:NORTHSTAR-ANALYTICS",
"memory_age_days": 60
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::soc2_type2_report",
"value": "unqualified",
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:soc2_type2_report",
"observed_at": "2026-05-04T14:00:00.000Z",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:org:CERT-DELOITTE-SOC",
"memory_age_days": 96
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::penetration_test",
"value": "no-critical",
"provenance": "VERIFIED",
"source": "LAB-BISHOPFOX-PEN:penetration_test",
"observed_at": "2026-04-10T14:00:00.000Z",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted",
"memory_kind": "test_report",
"memory_actor": "actor:org:LAB-BISHOPFOX-PEN",
"memory_age_days": 120
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification",
"value": "passed",
"provenance": "SELLER-ASSERTED",
"source": "NORTHSTAR-ANALYTICS:dr_test_certification",
"observed_at": "2026-03-21T14:00:00.000Z",
"reliability": 0.5,
"critical": true,
"memory_status": "admitted",
"memory_kind": "test_report",
"memory_actor": "actor:org:NORTHSTAR-ANALYTICS",
"memory_age_days": 140
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::privacy_breach_notification_24h",
"value": "contracted",
"provenance": "VERIFIED",
"source": "contract-repository:privacy_breach_notification_24h",
"observed_at": "2026-02-09T14:00:00.000Z",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:sys:registry:contract-repository",
"memory_age_days": 180
}
],
"crypto_suite": {
"spec": "corobate:suite:1",
"id": "CB-1-ES256-SHA256",
"receipt_digest": "sha256",
"chain_digest": "sha256",
"content_digest": "sha256",
"envelope_signature": "ES256",
"signature_curve": "P-256",
"canonicalisation": "attest-canon/2",
"quantum_resistant": false
}
}
}Executive signer
A named signer on the release gate — the person whose signature is over the evidentiary state, not over the sentence.
What is at stake, what the evidence supports, what is missing, and the digest they are signing over.
You are being asked to sign
May Northstar Analytics be renewed at current scope with continued access to Non-Public Ally Data?
At stake$8,400
Evidence saysCAUTION
Release stateNOT_REQUIRED
signing over evidentiary digest sha256:00ce64cd32a1df4489279466606cb256f35c810d629bcf435ccc8c4980c9463a
The signature is over the STATE OF THE EVIDENCE. Move one fact behind this decision and the digest moves and the signature stops counting — which is what makes it safe to collect signatures before everyone is in the room.
What is missing
- Nothing required is missing.
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:e96ac1308a262596159951620a7f99bc5c5c432fac89a811dc9589540f9d4194 matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "EXECUTIVE",
"purpose": "A named signer on the release gate. Sees what is at stake, what the evidence supports, who else has signed and what they are being asked to sign over.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:306aafb286f897cd0083ab0052171d5419b38003f984e2bb58c3e18a6911d31e",
"entry_hash": "sha256:0e8d1549830d4d20f19b53cff5539e4d01275dacabc1c861f563253b98dfce96",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:e96ac1308a262596159951620a7f99bc5c5c432fac89a811dc9589540f9d4194",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "tprm_NORTHSTAR_2026Q3_renewal",
"domain": "supply-chain",
"subject": "supplier:NORTHSTAR-ANALYTICS",
"question": "May Northstar Analytics be renewed at current scope with continued access to Non-Public Ally Data?"
},
"memory": {
"state_digest": "sha256:7f997249df06dcd91ce8bb406695bd40b8b579a6b27477286d64f9b908f73144",
"ledger_head": "sha256:63d2a61949b31d42085612a6595ceed2e82822b69d1c3fa3632135f4fc9f2559",
"coverage_gaps": [],
"exposure": {
"usd": 8400,
"declared_by": "actor:human:tprm-officer",
"ledger_seq": 7
}
},
"verdict": {
"value": "CAUTION",
"threshold_approve": 0.8,
"threshold_caution": 0.5,
"rule": "confidence>=threshold"
},
"confidence": {
"value": 0.5,
"method": "min-over-critical-inputs",
"bound_by": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory"
},
"release": {
"required": false,
"required_by_tier": false,
"escalated_by_acceptance": false,
"risk_accepted": false,
"state": "NOT_REQUIRED",
"code": "QUORUM_NOT_REQUIRED",
"reason": "this decision is below the top exposure tier (floor $10,000,000) and no risk acceptance escalated into this gate, so no multi-party release requirement applies.",
"tier_floor_cents": 1000000000,
"exposure_usd_cents": 840000,
"required_m": 2,
"declared_n": 3,
"floor_m": 2,
"distinct_signers": 0,
"superseded": 0,
"collapsed": 0,
"release_digest": "sha256:00ce64cd32a1df4489279466606cb256f35c810d629bcf435ccc8c4980c9463a",
"governance_digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
"governance_signed": true,
"counted_voices": [],
"signatures": [],
"ledger_seq": null
},
"acceptance": {
"state": "NONE",
"code": "ACCEPTANCE_NONE",
"reason": "no risk acceptance was presented for this decision. This is the ordinary case: a refusal is a refusal unless a named person has priced it.",
"permitted_basis": null,
"presented": 0,
"superseded": 0,
"expired": 0,
"gaps_not_covered": 0,
"coverage_gaps_in_force": [],
"evidentiary_digest": "sha256:00ce64cd32a1df4489279466606cb256f35c810d629bcf435ccc8c4980c9463a",
"margin_floor_bp": 100,
"authority_ceiling_cents": {
"SUPERVISOR": 1000000,
"MANAGER": 25000000,
"DIRECTOR": 500000000,
"OFFICER": 5000000000
},
"acceptances": [],
"escalated": false,
"live": false,
"ledger_seq": null
},
"reasons": [
"Confidence 50.00% is bound by \"supplier:NORTHSTAR-ANALYTICS|subcontractor_inventory\".",
"Thresholds for $8,400 exposure: approve 80%, caution 50%."
],
"regulatory": {
"applied": [
{
"instrument_id": "ally-third-party-requirements",
"version": 5,
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"edition": "V.5.0",
"citation": "§ 8, 9, 11, 13 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
},
{
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"edition": "2023-06-06",
"citation": "Due diligence and ongoing monitoring [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"conflicts": [],
"defaults": [
{
"claim": "dr_test_certification",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"dr_test_certification\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "financial_condition_review",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"financial_condition_review\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "incident_response_plan_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"incident_response_plan_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "penetration_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"penetration_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"privacy_breach_notification_24h\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "soc2_type2_report",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"soc2_type2_report\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "subcontractor_inventory",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"subcontractor_inventory\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
},
"inputs": [
{
"key": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory",
"provenance": "SELLER-ASSERTED",
"reliability": 0.5,
"critical": true,
"memory_status": "admitted"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::financial_condition_review",
"provenance": "VERIFIED",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::incident_response_plan_test",
"provenance": "SELLER-ASSERTED",
"reliability": 0.5,
"critical": true,
"memory_status": "admitted"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::soc2_type2_report",
"provenance": "VERIFIED",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::penetration_test",
"provenance": "VERIFIED",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification",
"provenance": "SELLER-ASSERTED",
"reliability": 0.5,
"critical": true,
"memory_status": "admitted"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::privacy_breach_notification_24h",
"provenance": "VERIFIED",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted"
}
]
}
}Internal / external audit
Internal audit, or the external auditor testing the third-party programme.
Everything, plus the verifier’s own findings over the sealed record.
This view withholds nothing. What it adds is the 22 checks the published verifier ran over the sealed record behind every other view of this decision — recomputed at build time, not asserted.
| # | Check | Detail | |
|---|---|---|---|
| 1 | Content reproduces (JCS + SHA-256) | PASS | matches sha256:306aafb286f897cd0083ab0052171d5419b38003f984e2bb58c3e18a6911d31e |
| 2 | Hash chain links (entry = H(prev||content)) | PASS | head sha256:0e8d1549830d4d20f19b53cff5539e4d01275dacabc1c861f563253b98dfce96 |
| 3 | Confidence gated by weakest critical input | PASS | min over critical = 0.5, bound_by supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory (SELLER-ASSERTED) |
| 3b | Verdict follows the threshold rule | PASS | 0.5 => CAUTION; recorded CAUTION |
| 4 | Point-in-time seal (no input past data_horizon) | PASS | all inputs <= 2026-08-08T14:00:00.000Z |
| 5 | Anchor covers the head, and the timestamp token re-reads | PASS | internally consistent; NO external anchor was requested — this is not a validated timestamp |
| 6 | Criteria travel with the receipt and reproduce | PASS | policy_body hashes to sha256:a6b69b7d20f7fb04d522364af1d92992058b04a5835fcec9d1c9f2261c7ef636 |
| 7 | Reliability re-derives from recorded evidence | PASS | all 7 inputs re-derive exactly |
| 8 | Outcome trials and lineage discounts re-derive | PASS | 7 input(s) re-derive: 0 credited outcome trial(s), 0 lineage-discounted corroboration(s); every reliability is at or under its class ceiling |
| 9 | Re-ingested receipts respect their weakest-input ceiling | PASS | no re-ingested receipts: every input rests on a primary observation |
| 10 | Release quorum re-derives | PASS | NOT_REQUIRED - below the top exposure tier, no multi-party requirement applies |
| 11 | Risk acceptance re-derives | PASS | no risk acceptance: this decision stands or falls on its evidence |
| 12 | Observer credentials were not revoked as of observation time | PASS | revocation list 12 (0 entries, issued 2026-08-06T00:00:00.000Z, next update due 2026-08-13T00:00:00.000Z) reproduces; 4 observer signature(s) judged as of their own instant, none under a key revoked as compromised or retired by then |
| 13 | The cryptographic suite is named and is one this verifier implements | PASS | sealed under CB-1-ES256-SHA256 (ES256 / sha256, attest-canon/2); this verifier implements it; the suite states it is NOT quantum resistant |
| 14 | Regulatory bindings are attributed and were enforced | PASS | 13 binding(s) from 2 instrument(s) in force, each attributed to an authority, a citation and a document digest; 7 required claim(s) all reached the gate |
| 15 | Role-view commitments re-derive, and the customs view carries no money | PASS | 6 role-view commitment(s) re-derived from this receipt’s own body by this verifier’s independent projection; the REGULATOR view carries no commercial figure |
| 16 | AI-authored input was admitted only where an authority allowed it | PASS | 0 claim(s) carry a position on AI-authored evidence set by an authority and 7 carry a recorded default nobody set; 0 exclusion(s) and 0 corroboration-only rule(s) re-derived against this receipt's own admitted inputs; 0 admitted input(s) are AI-authored by their enrolled identity |
| 17 | State digest recomputes from the ledger alone | UNVERIFIABLE | NOT APPLICABLE — you supplied no ledger, so the state digest cannot be re-derived from anything. This receipt commits to the corpus the deciding system held at the instant it sealed, and that commitment is checked by recomputing it from the append-only ledger and comparing; with no ledger in hand there is no second artefact to recompute from. The receipt is not at fault and nothing here is missing from it. Obtain the ledger from the issuer and re-run with --ledger <file>, or verifyReceipt(r, {ledger}). Nothing here has failed and nothing here has passed. |
| 18 | Registry membership re-derives for every key relied on | PASS | all 4 key(s) relied on re-derive to the entries root registry v7 committed to and the trust root signed |
| 20 | Geometric support re-derives, and an unevaluated record is not a supported one | PASS | no authority bound a metric to any claim on this receipt, so no geometric test applied. A claim nobody bound a metric to is not a claim about geometry, and this is a stated absence rather than a silent one |
| 19 | The cause of every uncovered requirement re-derives | PASS | every required claim on this receipt is covered, so this check ran and had nothing to explain |
| 21 | The sealing party is the one you were told to expect | UNVERIFIABLE | NOT APPLICABLE — you supplied no trust bundle, so nothing here establishes who sealed this. Identities 1 to 20 prove that this document agrees with itself; not one of them asks whose trust root it was sealed under, and a document that agrees with itself about a decision nobody made agrees with itself perfectly. Obtain the issuer's corobate:trust-bundle:1 out of band, confirm its spoken fingerprint with them by voice, and re-run with --trust-bundle <file> --expect-fingerprint <what you heard>. Nothing here has failed and nothing here has passed. |
The scoped copy itself — complete for this role
FAITHFUL digest sha256:66305cfcac3f36e9f27a782436a6dd2900a20926e43a51c246810673f1866e1a matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "AUDITOR",
"purpose": "An external assessor. Sees the complete sealed record: this view withholds nothing and exists so the identity case is a case rather than an exception.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:306aafb286f897cd0083ab0052171d5419b38003f984e2bb58c3e18a6911d31e",
"entry_hash": "sha256:0e8d1549830d4d20f19b53cff5539e4d01275dacabc1c861f563253b98dfce96",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:66305cfcac3f36e9f27a782436a6dd2900a20926e43a51c246810673f1866e1a",
"withheld": {
"anything_withheld": false,
"note": "Nothing outside the seal was removed for this role."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"engine": {
"name": "corobate-memory",
"version": "1.0.0"
},
"decision": {
"id": "tprm_NORTHSTAR_2026Q3_renewal",
"domain": "supply-chain",
"subject": "supplier:NORTHSTAR-ANALYTICS",
"question": "May Northstar Analytics be renewed at current scope with continued access to Non-Public Ally Data?"
},
"issued_at": "2026-08-08T14:00:00.000Z",
"data_horizon": "2026-08-08T14:00:00.000Z",
"inputs": [
{
"key": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory",
"value": "68 components",
"provenance": "SELLER-ASSERTED",
"source": "NORTHSTAR-ANALYTICS:subcontractor_inventory",
"observed_at": "2026-08-05T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.5,
"critical": true,
"memory_id": "mem_29d8f7588fbf",
"memory_status": "admitted",
"memory_kind": "test_report",
"memory_actor": "actor:org:NORTHSTAR-ANALYTICS",
"memory_age_days": 3,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:4875c4de5149f13817ba1322154bc9c2406d1d6514d7f23a0783934bfb256352",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": null,
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": false,
"observer_auth_code": "NO_ENVELOPE",
"observer_key_id": null,
"attestation": null,
"derivation": {
"provenance": "SELLER-ASSERTED",
"ceiling_bp": 5000,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 3,
"max_age_days": 180,
"house_max_age_days": 180,
"instrument_max_age_days": null,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[SELLER-ASSERTED · r=50.0% · 3d · NORTHSTAR-ANALYTICS:subcontractor_inventory] supplier:NORTHSTAR-ANALYTICS / subcontractor_inventory: 68 components"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::financial_condition_review",
"value": "stable",
"provenance": "VERIFIED",
"source": "dnb-financials:financial_condition_review",
"observed_at": "2026-07-08T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.95,
"critical": true,
"memory_id": "mem_a4238af53f4e",
"memory_status": "admitted",
"memory_kind": "test_report",
"memory_actor": "actor:sys:registry:dnb-financials",
"memory_age_days": 31,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:1bda32df7c47b9fe46a32e281617ce03eb37cd514bd347e7110328ef69093fb2",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": null,
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_cc91f681b6ae25fd",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 31,
"max_age_days": 180,
"house_max_age_days": 180,
"instrument_max_age_days": null,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[VERIFIED · r=95.0% · 31d · dnb-financials:financial_condition_review] supplier:NORTHSTAR-ANALYTICS / financial_condition_review: stable"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::incident_response_plan_test",
"value": "tabletop-2026",
"provenance": "SELLER-ASSERTED",
"source": "NORTHSTAR-ANALYTICS:incident_response_plan_test",
"observed_at": "2026-06-09T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.5,
"critical": true,
"memory_id": "mem_4e28ba56ddfd",
"memory_status": "admitted",
"memory_kind": "test_report",
"memory_actor": "actor:org:NORTHSTAR-ANALYTICS",
"memory_age_days": 60,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:840aedb17ad0030307e6907737cdd677b7b82de442e0547a1645bcbe01fe47c2",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": null,
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": false,
"observer_auth_code": "NO_ENVELOPE",
"observer_key_id": null,
"attestation": null,
"derivation": {
"provenance": "SELLER-ASSERTED",
"ceiling_bp": 5000,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 60,
"max_age_days": 180,
"house_max_age_days": 180,
"instrument_max_age_days": null,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[SELLER-ASSERTED · r=50.0% · 60d · NORTHSTAR-ANALYTICS:incident_response_plan_test] supplier:NORTHSTAR-ANALYTICS / incident_response_plan_test: tabletop-2026"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::soc2_type2_report",
"value": "unqualified",
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:soc2_type2_report",
"observed_at": "2026-05-04T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.95,
"critical": true,
"memory_id": "mem_23f774942083",
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:org:CERT-DELOITTE-SOC",
"memory_age_days": 96,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:190730b6169ae0f150c9781e96ce941150b290677c0108399596df713feb9fcc",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": "VERIFIED",
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_c3c95bc9795296cd",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 96,
"max_age_days": 365,
"house_max_age_days": 365,
"instrument_max_age_days": 365,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"min_class_floor": "VERIFIED",
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[VERIFIED · r=95.0% · 96d · CERT-DELOITTE-SOC:soc2_type2_report] supplier:NORTHSTAR-ANALYTICS / soc2_type2_report: unqualified"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::penetration_test",
"value": "no-critical",
"provenance": "VERIFIED",
"source": "LAB-BISHOPFOX-PEN:penetration_test",
"observed_at": "2026-04-10T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.95,
"critical": true,
"memory_id": "mem_4507819e76ea",
"memory_status": "admitted",
"memory_kind": "test_report",
"memory_actor": "actor:org:LAB-BISHOPFOX-PEN",
"memory_age_days": 120,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:8d7c23e02b253c59f2f037e7e68388eca30be2815afcd9f70a95807ff6fdecc0",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": "VERIFIED",
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_a6cacbd0fd83f53b",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 120,
"max_age_days": 180,
"house_max_age_days": 180,
"instrument_max_age_days": 365,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"min_class_floor": "VERIFIED",
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[VERIFIED · r=95.0% · 120d · LAB-BISHOPFOX-PEN:penetration_test] supplier:NORTHSTAR-ANALYTICS / penetration_test: no-critical"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification",
"value": "passed",
"provenance": "SELLER-ASSERTED",
"source": "NORTHSTAR-ANALYTICS:dr_test_certification",
"observed_at": "2026-03-21T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.5,
"critical": true,
"memory_id": "mem_ed82848e18de",
"memory_status": "admitted",
"memory_kind": "test_report",
"memory_actor": "actor:org:NORTHSTAR-ANALYTICS",
"memory_age_days": 140,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:bbe38e53bce95f47e792ae19729c3f74619276d2c3be8e64ceb9a3f5a0d8227e",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": null,
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": false,
"observer_auth_code": "NO_ENVELOPE",
"observer_key_id": null,
"attestation": null,
"derivation": {
"provenance": "SELLER-ASSERTED",
"ceiling_bp": 5000,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 140,
"max_age_days": 180,
"house_max_age_days": 180,
"instrument_max_age_days": 365,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[SELLER-ASSERTED · r=50.0% · 140d · NORTHSTAR-ANALYTICS:dr_test_certification] supplier:NORTHSTAR-ANALYTICS / dr_test_certification: passed"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::privacy_breach_notification_24h",
"value": "contracted",
"provenance": "VERIFIED",
"source": "contract-repository:privacy_breach_notification_24h",
"observed_at": "2026-02-09T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.95,
"critical": true,
"memory_id": "mem_07b1bcf4ecc6",
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:sys:registry:contract-repository",
"memory_age_days": 180,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:c3a793f4d568c91509554986256545c2f114213dbc5984beff99df6955d55fd7",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": null,
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_393d373ff1a0f1b4",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 180,
"max_age_days": 365,
"house_max_age_days": 365,
"instrument_max_age_days": null,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[VERIFIED · r=95.0% · 180d · contract-repository:privacy_breach_notification_24h] supplier:NORTHSTAR-ANALYTICS / privacy_breach_notification_24h: contracted"
}
],
"serialization": {
"algorithm": "RFC8785-JCS",
"hash": "sha256"
},
"crypto_suite": {
"spec": "corobate:suite:1",
"id": "CB-1-ES256-SHA256",
"receipt_digest": "sha256",
"chain_digest": "sha256",
"content_digest": "sha256",
"envelope_signature": "ES256",
"signature_curve": "P-256",
"canonicalisation": "attest-canon/2",
"quantum_resistant": false
},
"confidence": {
"value": 0.5,
"method": "min-over-critical-inputs",
"bound_by": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory"
},
"verdict": {
"value": "CAUTION",
"threshold_approve": 0.8,
"threshold_caution": 0.5,
"rule": "confidence>=threshold"
},
"release": {
"required": false,
"required_by_tier": false,
"escalated_by_acceptance": false,
"risk_accepted": false,
"state": "NOT_REQUIRED",
"code": "QUORUM_NOT_REQUIRED",
"reason": "this decision is below the top exposure tier (floor $10,000,000) and no risk acceptance escalated into this gate, so no multi-party release requirement applies.",
"tier_floor_cents": 1000000000,
"exposure_usd_cents": 840000,
"required_m": 2,
"declared_n": 3,
"floor_m": 2,
"distinct_signers": 0,
"superseded": 0,
"collapsed": 0,
"release_digest": "sha256:00ce64cd32a1df4489279466606cb256f35c810d629bcf435ccc8c4980c9463a",
"governance_digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
"governance_signed": true,
"counted_voices": [],
"signatures": [],
"ledger_seq": null
},
"acceptance": {
"state": "NONE",
"code": "ACCEPTANCE_NONE",
"reason": "no risk acceptance was presented for this decision. This is the ordinary case: a refusal is a refusal unless a named person has priced it.",
"permitted_basis": null,
"presented": 0,
"superseded": 0,
"expired": 0,
"gaps_not_covered": 0,
"coverage_gaps_in_force": [],
"evidentiary_digest": "sha256:00ce64cd32a1df4489279466606cb256f35c810d629bcf435ccc8c4980c9463a",
"margin_floor_bp": 100,
"authority_ceiling_cents": {
"SUPERVISOR": 1000000,
"MANAGER": 25000000,
"DIRECTOR": 500000000,
"OFFICER": 5000000000
},
"acceptances": [],
"escalated": false,
"live": false,
"ledger_seq": null
},
"regulatory": {
"spec": "corobate:regulatory:2",
"resolved": true,
"applied": [
{
"instrument_id": "ally-third-party-requirements",
"version": 5,
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"edition": "V.5.0",
"citation": "§ 8, 9, 11, 13 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
},
{
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"edition": "2023-06-06",
"citation": "Due diligence and ongoing monitoring [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"skipped": [],
"conflicts": [],
"bindings": [
{
"claim": "dr_test_certification",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "dr_test_certification",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "financial_condition_review",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — financial condition [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "incident_response_plan_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.7.2 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "never_waivable",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.5 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": [
{
"value": "SELLER-ASSERTED",
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — controls [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
}
}
],
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "subcontractor_inventory",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
}
],
"defaults": [
{
"claim": "dr_test_certification",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"dr_test_certification\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "financial_condition_review",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"financial_condition_review\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "incident_response_plan_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"incident_response_plan_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "penetration_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"penetration_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"privacy_breach_notification_24h\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "soc2_type2_report",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"soc2_type2_report\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "subcontractor_inventory",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"subcontractor_inventory\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
},
"reasons": [
"Confidence 50.00% is bound by \"supplier:NORTHSTAR-ANALYTICS|subcontractor_inventory\".",
"Thresholds for $8,400 exposure: approve 80%, caution 50%."
],
"memory": {
"layer": "capture->store->recall->act",
"ledger_head": "sha256:63d2a61949b31d42085612a6595ceed2e82822b69d1c3fa3632135f4fc9f2559",
"ledger_entries": 9,
"context_digest": "sha256:98eea4c9c91799a319cfdcfadbc5d2ef21fbb9ed9c668f69f18edbec66b2aa6d",
"context_memory_ids": [
"mem_07b1bcf4ecc6",
"mem_23f774942083",
"mem_29d8f7588fbf",
"mem_4507819e76ea",
"mem_4e28ba56ddfd",
"mem_a4238af53f4e",
"mem_ed82848e18de"
],
"state_digest": "sha256:7f997249df06dcd91ce8bb406695bd40b8b579a6b27477286d64f9b908f73144",
"retrieval_method": "idf-lexical",
"corpus_size": 7,
"considered": 7,
"admitted": 7,
"withheld": 0,
"not_considered": 0,
"coverage_gaps": [],
"exposure": {
"usd": 8400,
"declared_by": "actor:human:tprm-officer",
"ledger_seq": 7
},
"salience_policy": {
"half_life_days": 90,
"grace_days": 7,
"access_boost_bp": 500,
"access_boost_cap_bp": 2500,
"relevance_weight_bp": 6000,
"recency_weight_bp": 3000,
"usage_weight_bp": 1000,
"context_cap": 12,
"method": "idf-lexical",
"candidate_list_digest": "sha256:32b73396008a282563d6d4a45a48482362a3bbdeac7d5c89ee2440b73a20bfd9",
"note": "salience orders retrieval only; it never contributes to reliability"
},
"policy_digest": "sha256:a6b69b7d20f7fb04d522364af1d92992058b04a5835fcec9d1c9f2261c7ef636",
"policy_body": {
"class_ceiling_bp": {
"VERIFIED": 9500,
"MODELED": 8000,
"SELLER-ASSERTED": 5000,
"MISSING": 0
},
"actor_class_ceiling": [
[
"^actor:ai:",
"MODELED"
],
[
"^actor:agent:",
"MODELED"
],
[
"^actor:human:",
"SELLER-ASSERTED"
],
[
"^actor:org:LAB-",
"VERIFIED"
],
[
"^actor:org:CERT-",
"VERIFIED"
],
[
"^actor:org:",
"SELLER-ASSERTED"
],
[
"^actor:sys:registry:",
"VERIFIED"
],
[
"^actor:sys:sensor:",
"VERIFIED"
],
[
"^actor:sys:",
"MODELED"
]
],
"freshness_cap_bp": 4000,
"max_age_days": {
"telemetry": 1,
"price": 7,
"status": 14,
"certificate": 365,
"test_report": 180,
"filing": 90,
"transcript": 120,
"highlight": 365,
"voice_note": 120,
"note": 365,
"preference": 540,
"decision": 1825,
"receipt": 365,
"default": 90
},
"wilson_z_milli": 1960,
"min_track_n": 5,
"exposure_tiers_bp": [
[
1000000000,
9500,
8000
],
[
100000000,
9000,
7000
],
[
1000000,
8500,
6000
],
[
0,
8000,
5000
]
],
"max_context_memories": 12,
"contradiction_resolve_margin": 2,
"salience": {
"half_life_days": 90,
"grace_days": 7,
"access_boost_bp": 500,
"access_boost_cap_bp": 2500,
"relevance_weight_bp": 6000,
"recency_weight_bp": 3000,
"usage_weight_bp": 1000
}
},
"observer_auth": {
"mode": "required",
"registry_version": 7,
"registry_digest": "sha256:bb1bffa0668fd3ddcc24d30288a62fe52c873bba1396a245c138765263ca68e4",
"entries_root": "sha256:052a44853cd278e4d33a14e709d108aadf2b2079177402c408b935a574b7b8b1",
"memberships": [
{
"key_id": "k_393d373ff1a0f1b4",
"index": 6,
"entry": {
"actor": "actor:sys:registry:contract-repository",
"class": "VERIFIED",
"kind": "system",
"key_id": "k_393d373ff1a0f1b4",
"jwk": {
"kty": "EC",
"crv": "P-256",
"x": "p7fbljJU3LbgvYVbDJvlFhvgeRtxIl6a7hcGn6gw37o",
"y": "QIz0r6fSv_fpuHexvW8T5BnxzQe8zqAC-_OW7UtNoa4"
},
"valid_from": "2025-01-01T00:00:00.000Z",
"valid_to": "2027-06-01T00:00:00.000Z"
},
"path": [
{
"side": "right",
"sibling": "sha256:770d3738b21df6728542e9a3d8d8313b5b83a4dc49819d40519ec9bcf9d6c93a"
},
{
"side": "left",
"sibling": "sha256:a7c0de2a235c1c26640b4db5b931ee69e09f4da9a2d96f07997c5f51f8e0ad4a"
},
{
"side": "left",
"sibling": "sha256:dcea5dab73759e138fad2cd13ff65c0a9fbd8172beab6f9eb480d802f741d0b6"
},
{
"side": "right",
"sibling": "sha256:b0d6d854c0fbace92cd9b0e1b8f05851c2a6f51da82f934b55f3391095b9e3c6"
}
]
},
{
"key_id": "k_a6cacbd0fd83f53b",
"index": 1,
"entry": {
"actor": "actor:org:LAB-BISHOPFOX-PEN",
"class": "VERIFIED",
"kind": "org",
"key_id": "k_a6cacbd0fd83f53b",
"jwk": {
"kty": "EC",
"crv": "P-256",
"x": "Ch_GAfrcwbNBD53nf8MhzRQv3dvkYrQwYaut1kmrQu4",
"y": "26e0at_OMmtDi7iOSK7RqjeyZomyasIEM20iF0cxfrA"
},
"valid_from": "2025-01-01T00:00:00.000Z",
"valid_to": "2027-06-01T00:00:00.000Z"
},
"path": [
{
"side": "left",
"sibling": "sha256:7676859944c464baf75a2d7d4be7ff2f1632b94921aff419d7908f5d0c15d2bc"
},
{
"side": "right",
"sibling": "sha256:97bc43a75580b998c635a55a452ec5e66fea912fbdb987a9c14e29d6311be924"
},
{
"side": "right",
"sibling": "sha256:4f3031707d2416b5567eb739ca5d25f2cc36acc2bd8d026bf221c367179718a0"
},
{
"side": "right",
"sibling": "sha256:b0d6d854c0fbace92cd9b0e1b8f05851c2a6f51da82f934b55f3391095b9e3c6"
}
]
},
{
"key_id": "k_c3c95bc9795296cd",
"index": 0,
"entry": {
"actor": "actor:org:CERT-DELOITTE-SOC",
"class": "VERIFIED",
"kind": "org",
"key_id": "k_c3c95bc9795296cd",
"jwk": {
"kty": "EC",
"crv": "P-256",
"x": "cO4w4AuCfc-hheIJnEzQj-z-MBcHIfl34mygv9kl3mI",
"y": "PDPYdxnb9V0d43GLjpNC2_xyHVBbarmHkHxa3EOXJxg"
},
"valid_from": "2025-01-01T00:00:00.000Z",
"valid_to": "2027-06-01T00:00:00.000Z"
},
"path": [
{
"side": "right",
"sibling": "sha256:aff188754372ce4622403f6cb8e4c7f2456137aa416b101109aad75f6e614acb"
},
{
"side": "right",
"sibling": "sha256:97bc43a75580b998c635a55a452ec5e66fea912fbdb987a9c14e29d6311be924"
},
{
"side": "right",
"sibling": "sha256:4f3031707d2416b5567eb739ca5d25f2cc36acc2bd8d026bf221c367179718a0"
},
{
"side": "right",
"sibling": "sha256:b0d6d854c0fbace92cd9b0e1b8f05851c2a6f51da82f934b55f3391095b9e3c6"
}
]
},
{
"key_id": "k_cc91f681b6ae25fd",
"index": 5,
"entry": {
"actor": "actor:sys:registry:dnb-financials",
"class": "VERIFIED",
"kind": "system",
"key_id": "k_cc91f681b6ae25fd",
"jwk": {
"kty": "EC",
"crv": "P-256",
"x": "DFXpGQ7rpQaaBpywUK8Pj8S2cxPbM88v8-bbykgRHv4",
"y": "H_xRwy6ppm8p99nST5CibdkIu7bk8hl_2DFuuV43zUU"
},
"valid_from": "2025-01-01T00:00:00.000Z",
"valid_to": "2027-06-01T00:00:00.000Z"
},
"path": [
{
"side": "left",
"sibling": "sha256:820b93ba17cff14537dccf9ad01952b78f5d18d8044ada2d11a8211bb6399dcb"
},
{
"side": "right",
"sibling": "sha256:36eb73c9aa8175028706fd11c7981df6bb6fd33dc0acc6d7a10e179c7bf5f295"
},
{
"side": "left",
"sibling": "sha256:dcea5dab73759e138fad2cd13ff65c0a9fbd8172beab6f9eb480d802f741d0b6"
},
{
"side": "right",
"sibling": "sha256:b0d6d854c0fbace92cd9b0e1b8f05851c2a6f51da82f934b55f3391095b9e3c6"
}
]
}
],
"memberships_unproven": [],
"revocation": {
"source": "SIGNED_LIST",
"digest": "sha256:739c516c92fbb8d46951fc274ec199896004081698b412180c096074bd59b884",
"sequence": 12,
"registry_version": 7,
"issued_at": "2026-08-06T00:00:00.000Z",
"next_update_due": "2026-08-13T00:00:00.000Z",
"entry_count": 0,
"body": {
"sequence": 12,
"registry_version": 7,
"issuer": {
"name": "Ally-shaped demonstration trust root",
"key_id": "k_d2a5a08e98bed6cd"
},
"issued_at": "2026-08-06T00:00:00.000Z",
"next_update_due": "2026-08-13T00:00:00.000Z",
"entries": [],
"spec": "corobate:revocation-list:1"
}
}
},
"governance": {
"digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
"signed": true,
"actor_trust": "FLOOR_TO_SELLER_ASSERTED",
"outcome_trial_weight": 1,
"max_reingest_depth": 3,
"release_quorum_m": 2,
"release_quorum_n": 3,
"risk_acceptance_margin_bp": 500,
"risk_acceptance_max_days": 30,
"risk_acceptance_authority_cents": {
"SUPERVISOR": 1000000,
"MANAGER": 25000000,
"DIRECTOR": 500000000,
"OFFICER": 5000000000
},
"template_author_roles": [
"MANAGER",
"DIRECTOR",
"OFFICER"
]
},
"observers_attested": 4,
"outcomes": {
"attestations_counted": 0,
"attestations_recorded": 0,
"records_with_outcomes": 0
},
"lineage": {
"corroborations_counted": 0,
"corroborations_discounted": 0,
"records_with_discounted_corroborations": 0
},
"reingest": {
"records": 0,
"max_depth": 0,
"weakest_class": null,
"chain_weakest_bp": 10000,
"chain": []
},
"template": null
}
}
}The identical vendor, the identical evidence, proposed for a materially larger engagement minutes later. Nothing about the vendor changed. What changed is that a seller’s assertion caps at 50% and the bar for this exposure sits above it — which is why a bank asks an auditor rather than the vendor, expressed as arithmetic instead of as policy.
- Subject
- supplier:NORTHSTAR-ANALYTICS
- Question
- May Northstar Analytics be expanded to the enterprise marketing platform, with the same evidence on file?
- Exposure
- $480,000
- Instruments
- Ally — Supply Chain · Board of Governors of the Federal Reserve System
- Outcome
- WITHHELD — the action is not permitted; outstanding: dr test certification, incident response plan test, subcontractor inventory
- Receipt
- sha256:3fe5f53b486468e78fab5212c7398edaebb380b10052745319070a1b35c6b575
- Fourth party
- 68 components ingested from a CycloneDX 1.5 bill of materials · sha256:e4daced4f23c89e…
The gate variables this decision ran under — a dial per question, read back off the sealed receipt
dr test certificationrequired
necessityrequiredAlly — Supply Chain — § 11.6.1 [VERIFY]
staleness365 daysAlly — Supply Chain — § 11.6.1 [VERIFY]
reputation class—No class floor was set, so the seller's own assertion is admissible for this claim up to the ceiling that class carries. That is a setting, not an absence.
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "dr_test_certification". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
financial condition reviewrequired
necessityrequiredBoard of Governors of the Federal Reserve System — Due diligence — financial condition [VERIFY]
staleness90 daysNo instrument set an age limit for this claim, so the deploying organisation's own freshness policy binds at 90 days. It is not unlimited.
reputation class—No class floor was set, so the seller's own assertion is admissible for this claim up to the ceiling that class carries. That is a setting, not an absence.
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "financial_condition_review". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
incident response plan testrequired
necessityrequiredAlly — Supply Chain — § 8.7.2 [VERIFY]
staleness90 daysNo instrument set an age limit for this claim, so the deploying organisation's own freshness policy binds at 90 days. It is not unlimited.
reputation class—No class floor was set, so the seller's own assertion is admissible for this claim up to the ceiling that class carries. That is a setting, not an absence.
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "incident_response_plan_test". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
penetration testrequired
necessityrequiredAlly — Supply Chain — § 8.9.1 [VERIFY]
staleness365 daysAlly — Supply Chain — § 8.9.1 [VERIFY]
reputation classverifiedAlly — Supply Chain — § 8.9.1 [VERIFY]
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "penetration_test". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
privacy breach notification 24hrequired never waivable
necessityrequired never waivableAlly — Supply Chain — § 9.7.1 [VERIFY]
staleness90 daysNo instrument set an age limit for this claim, so the deploying organisation's own freshness policy binds at 90 days. It is not unlimited.
reputation class—No class floor was set, so the seller's own assertion is admissible for this claim up to the ceiling that class carries. That is a setting, not an absence.
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "privacy_breach_notification_24h". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
soc2 type2 reportrequired
necessityrequiredAlly — Supply Chain — § 13.1.6 [VERIFY]
staleness365 daysAlly — Supply Chain — § 13.1.5 [VERIFY]
reputation classverifiedAlly — Supply Chain — § 13.1.6 [VERIFY]
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "soc2_type2_report". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
1 displaced ask. Another authority asked for less on this claim and was displaced by a stricter one. The lesser ask travels on the receipt rather than vanishing, so a supplier can show a regulator that a different regulation would have been satisfied.
subcontractor inventoryrequired
necessityrequiredAlly — Supply Chain — § 13.1.1 [VERIFY]
staleness90 daysNo instrument set an age limit for this claim, so the deploying organisation's own freshness policy binds at 90 days. It is not unlimited.
reputation class—No class floor was set, so the seller's own assertion is admissible for this claim up to the ceiling that class carries. That is a setting, not an absence.
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "subcontractor_inventory". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
Every bar above was re-derived from the regulatory bindings inside this receipt’s hashed body, not from the configuration that produced it. A bar in grey is a setting no instrument made — the deploying organisation’s own default, which still binds and is not an absence. A bar position renders an ordinal on a declared ladder: it is a way to draw a control and to compare two settings on the same axis, and it is not a measurement. The value printed beside each bar is the authoritative one.
Whoever must act now
The person with the next action in their hands: the sourcing manager who must renew or not, the lister who must publish the lane, the dispatcher who must send an agent.
Sees one instruction and the reason in words. No score, no money, no signatures — nothing that turns a decision into a negotiation with whoever is waiting.
DO NOT PROCEED
supplier:NORTHSTAR-ANALYTICS
Missing or out of date: dr test certification, incident response plan test, subcontractor inventory
Seven or eight fields, and not one of them is a number somebody can argue with. This person is not being asked to re-judge the evidence; somebody already did, and it is on the record.
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:ddfd6052c94fd6d7e5a075dd94eb897fec7a0515527bfac228696b41d23bf09c matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "OPERATOR",
"purpose": "Whoever must act on this decision now — release the goods, fund the draw, dispatch the agent, ship the title. Sees one instruction and the reason in plain words, and nothing that could be argued about while somebody waits.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:3fe5f53b486468e78fab5212c7398edaebb380b10052745319070a1b35c6b575",
"entry_hash": "sha256:37a3a1388d3fffb67b2159e25e83797e270f8f8fe652b37743a35e3b1e0f29dd",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:ddfd6052c94fd6d7e5a075dd94eb897fec7a0515527bfac228696b41d23bf09c",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "tprm_NORTHSTAR_2026Q3_expansion",
"subject": "supplier:NORTHSTAR-ANALYTICS"
},
"memory": {
"state_digest": "sha256:7f997249df06dcd91ce8bb406695bd40b8b579a6b27477286d64f9b908f73144",
"ledger_head": "sha256:b51c29b9df0271d0099057f73642b9c50199fa6bba9c7f03343559c0c53eec67",
"coverage_gaps": [
"supplier:NORTHSTAR-ANALYTICS|dr_test_certification",
"supplier:NORTHSTAR-ANALYTICS|incident_response_plan_test",
"supplier:NORTHSTAR-ANALYTICS|subcontractor_inventory"
]
},
"verdict": {
"value": "WITHHELD"
},
"release": {
"state": "WITHHELD_NO_EVIDENCE"
}
}
}Vendor / selling dealer
The party whose evidence was judged — the vendor under review, or the dealer consigning the vehicle.
Sees which of their own claims were required and by whose clause. Does not see the bank’s exposure, how the bank priced any shortfall, or any other party’s evidence in the same file.
What is outstanding on your file
- dr test certification — required by Ally — Supply Chain, § 11.6.1 [VERIFY]
- incident response plan test — required by Ally — Supply Chain, § 8.7.2 [VERIFY]
- subcontractor inventory — required by Ally — Supply Chain, § 13.1.1 [VERIFY]
| Claim | Required | Evidence class | Who | Age | Outcome |
|---|---|---|---|---|---|
| financial_condition_review | yes | VERIFIED | — | 2026-07-08 | admitted |
| soc2_type2_report | yes | VERIFIED | — | 2026-05-04 | admitted |
| penetration_test | yes | VERIFIED | — | 2026-04-10 | admitted |
| privacy_breach_notification_24h | yes | VERIFIED | — | 2026-02-09 | admitted |
| subcontractor_inventory | no | SELLER-ASSERTED | — | 2026-08-05 | withheld |
| incident_response_plan_test | no | SELLER-ASSERTED | — | 2026-06-09 | withheld |
| dr_test_certification | no | SELLER-ASSERTED | — | 2026-03-21 | withheld |
| dr_test_certification | yes | MISSING | — | 2026-08-08 | coverage gap |
| incident_response_plan_test | yes | MISSING | — | 2026-08-08 | coverage gap |
| subcontractor_inventory | yes | MISSING | — | 2026-08-08 | coverage gap |
The clause is here because it turns an argument into an errand. What is not here: what the bank had at stake, and whether anyone priced the shortfall.
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:0765b0c70616d4a23ee8a3534588ac14ef657c6baebc8d1be638496baf6102d0 matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "SUPPLIER",
"purpose": "The party whose evidence was judged. Sees every claim the decision required, which fell short, and the clause that required it — and nothing about what the buyer had at stake or how the buyer priced any shortfall. NOTE, because an earlier draft of this sentence was untrue: this projection carries the WHOLE inputs array, so where several parties supplied evidence for one decision, each of them sees all of it. Per-party scoping cannot be expressed by a commitment scheme with one digest per role, and claiming it anyway would be the kind of promise this file exists to stop making.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:3fe5f53b486468e78fab5212c7398edaebb380b10052745319070a1b35c6b575",
"entry_hash": "sha256:37a3a1388d3fffb67b2159e25e83797e270f8f8fe652b37743a35e3b1e0f29dd",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:0765b0c70616d4a23ee8a3534588ac14ef657c6baebc8d1be638496baf6102d0",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "tprm_NORTHSTAR_2026Q3_expansion",
"subject": "supplier:NORTHSTAR-ANALYTICS",
"question": "May Northstar Analytics be expanded to the enterprise marketing platform, with the same evidence on file?"
},
"memory": {
"state_digest": "sha256:7f997249df06dcd91ce8bb406695bd40b8b579a6b27477286d64f9b908f73144",
"ledger_head": "sha256:b51c29b9df0271d0099057f73642b9c50199fa6bba9c7f03343559c0c53eec67",
"coverage_gaps": [
"supplier:NORTHSTAR-ANALYTICS|dr_test_certification",
"supplier:NORTHSTAR-ANALYTICS|incident_response_plan_test",
"supplier:NORTHSTAR-ANALYTICS|subcontractor_inventory"
]
},
"verdict": {
"value": "WITHHELD"
},
"inputs": [
{
"key": "supplier:NORTHSTAR-ANALYTICS::financial_condition_review",
"provenance": "VERIFIED",
"observed_at": "2026-07-08T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::soc2_type2_report",
"provenance": "VERIFIED",
"observed_at": "2026-05-04T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::penetration_test",
"provenance": "VERIFIED",
"observed_at": "2026-04-10T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::privacy_breach_notification_24h",
"provenance": "VERIFIED",
"observed_at": "2026-02-09T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory",
"provenance": "SELLER-ASSERTED",
"observed_at": "2026-08-05T14:00:00.000Z",
"memory_status": "withheld",
"critical": false
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::incident_response_plan_test",
"provenance": "SELLER-ASSERTED",
"observed_at": "2026-06-09T14:00:00.000Z",
"memory_status": "withheld",
"critical": false
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification",
"provenance": "SELLER-ASSERTED",
"observed_at": "2026-03-21T14:00:00.000Z",
"memory_status": "withheld",
"critical": false
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification",
"provenance": "MISSING",
"observed_at": "2026-08-08T14:00:00.000Z",
"memory_status": "coverage_gap",
"critical": true
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::incident_response_plan_test",
"provenance": "MISSING",
"observed_at": "2026-08-08T14:00:00.000Z",
"memory_status": "coverage_gap",
"critical": true
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory",
"provenance": "MISSING",
"observed_at": "2026-08-08T14:00:00.000Z",
"memory_status": "coverage_gap",
"critical": true
}
],
"regulatory": {
"bindings": [
{
"claim": "dr_test_certification",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "dr_test_certification",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "financial_condition_review",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — financial condition [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "incident_response_plan_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.7.2 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "never_waivable",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.5 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": [
{
"value": "SELLER-ASSERTED",
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — controls [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
}
}
],
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "subcontractor_inventory",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
}
],
"applied": [
{
"instrument_id": "ally-third-party-requirements",
"version": 5,
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"edition": "V.5.0",
"citation": "§ 8, 9, 11, 13 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
},
{
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"edition": "2023-06-06",
"citation": "Due diligence and ongoing monitoring [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"defaults": [
{
"claim": "dr_test_certification",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"dr_test_certification\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "financial_condition_review",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"financial_condition_review\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "incident_response_plan_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"incident_response_plan_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "penetration_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"penetration_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"privacy_breach_notification_24h\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "soc2_type2_report",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"soc2_type2_report\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "subcontractor_inventory",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"subcontractor_inventory\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
}
}
}Bank examiner
An examiner under the interagency third-party guidance, or a market-conduct supervisor. Same position as a customs officer: a public mandate over the record and no claim on the commercial position.
The regulatory record in full — every instrument by authority, clause, edition and document digest, and every required claim with who supplied it and when. No exposure, no risk pricing, no confidence score, no quorum.
Ally — Supply Chain
Third Party Requirements V.5.0
§ 8, 9, 11, 13 [VERIFY] · edition V.5.0
document sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1
entered by actor:human:tprm-officer
Board of Governors of the Federal Reserve System
Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)
Due diligence and ongoing monitoring [VERIFY] · edition 2023-06-06
document sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2
entered by actor:human:tprm-officer
What each authority bound
| Claim | Requirement | Level | Bound by |
|---|---|---|---|
| dr_test_certification | max age days | 365 | Ally — Supply Chain § 11.6.1 [VERIFY] · Third Party Requirements V.5.0 |
| dr_test_certification | required | true | Ally — Supply Chain § 11.6.1 [VERIFY] · Third Party Requirements V.5.0 |
| financial_condition_review | required | true | Board of Governors of the Federal Reserve System Due diligence — financial condition [VERIFY] · Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4) |
| incident_response_plan_test | required | true | Ally — Supply Chain § 8.7.2 [VERIFY] · Third Party Requirements V.5.0 |
| penetration_test | max age days | 365 | Ally — Supply Chain § 8.9.1 [VERIFY] · Third Party Requirements V.5.0 |
| penetration_test | min class | VERIFIED | Ally — Supply Chain § 8.9.1 [VERIFY] · Third Party Requirements V.5.0 |
| penetration_test | required | true | Ally — Supply Chain § 8.9.1 [VERIFY] · Third Party Requirements V.5.0 |
| privacy_breach_notification_24h | never waivable | true | Ally — Supply Chain § 9.7.1 [VERIFY] · Third Party Requirements V.5.0 |
| privacy_breach_notification_24h | required | true | Ally — Supply Chain § 9.7.1 [VERIFY] · Third Party Requirements V.5.0 |
| soc2_type2_report | max age days | 365 | Ally — Supply Chain § 13.1.5 [VERIFY] · Third Party Requirements V.5.0 |
| soc2_type2_report | min class | VERIFIED | Ally — Supply Chain § 13.1.6 [VERIFY] · Third Party Requirements V.5.0 Board of Governors of the Federal Reserve System asked only for SELLER-ASSERTED (Due diligence — controls [VERIFY]) |
| soc2_type2_report | required | true | Ally — Supply Chain § 13.1.6 [VERIFY] · Third Party Requirements V.5.0 |
| subcontractor_inventory | required | true | Ally — Supply Chain § 13.1.1 [VERIFY] · Third Party Requirements V.5.0 |
Every required claim, and what was actually held
| Claim | Required | Evidence class | Who | Age | Outcome |
|---|---|---|---|---|---|
| financial_condition_review | yes | VERIFIED | actor:sys:registry:dnb-financials | 2026-07-08 | admitted |
| soc2_type2_report | yes | VERIFIED | actor:org:CERT-DELOITTE-SOC | 2026-05-04 | admitted |
| penetration_test | yes | VERIFIED | actor:org:LAB-BISHOPFOX-PEN | 2026-04-10 | admitted |
| privacy_breach_notification_24h | yes | VERIFIED | actor:sys:registry:contract-repository | 2026-02-09 | admitted |
| subcontractor_inventory | no | SELLER-ASSERTED | actor:org:NORTHSTAR-ANALYTICS | 2026-08-05 | withheld |
| incident_response_plan_test | no | SELLER-ASSERTED | actor:org:NORTHSTAR-ANALYTICS | 2026-06-09 | withheld |
| dr_test_certification | no | SELLER-ASSERTED | actor:org:NORTHSTAR-ANALYTICS | 2026-03-21 | withheld |
| dr_test_certification | yes | MISSING | — | 2026-08-08 | coverage gap |
| incident_response_plan_test | yes | MISSING | — | 2026-08-08 | coverage gap |
| subcontractor_inventory | yes | MISSING | — | 2026-08-08 | coverage gap |
Absent from this copy, deliberatelyNo exposure figure, no risk pricing, no confidence score, no release quorum. The examiner’s claim is on the record of what was required and what was held — answered here completely, down to the digest of the document each requirement was configured from. The institution’s commercial position is a different question and this document does not answer it. The published verifier checks that on the content of the copy, not on the intentions of whoever produced it.
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:61de7b71b4e4fe8dcf5c16bb1aae3496d6863061b8889510a07727abed824c32 matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "REGULATOR",
"purpose": "An official holding a public mandate over this record — a customs officer, a bank examiner, a market conduct supervisor. Sees the regulatory record in full: their own instrument named, every required claim and whether it was met, by whom, how old. No commercial figure of any kind.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:3fe5f53b486468e78fab5212c7398edaebb380b10052745319070a1b35c6b575",
"entry_hash": "sha256:37a3a1388d3fffb67b2159e25e83797e270f8f8fe652b37743a35e3b1e0f29dd",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:61de7b71b4e4fe8dcf5c16bb1aae3496d6863061b8889510a07727abed824c32",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "tprm_NORTHSTAR_2026Q3_expansion",
"subject": "supplier:NORTHSTAR-ANALYTICS",
"question": "May Northstar Analytics be expanded to the enterprise marketing platform, with the same evidence on file?"
},
"memory": {
"state_digest": "sha256:7f997249df06dcd91ce8bb406695bd40b8b579a6b27477286d64f9b908f73144",
"ledger_head": "sha256:b51c29b9df0271d0099057f73642b9c50199fa6bba9c7f03343559c0c53eec67",
"coverage_gaps": [
"supplier:NORTHSTAR-ANALYTICS|dr_test_certification",
"supplier:NORTHSTAR-ANALYTICS|incident_response_plan_test",
"supplier:NORTHSTAR-ANALYTICS|subcontractor_inventory"
]
},
"data_horizon": "2026-08-08T14:00:00.000Z",
"verdict": {
"value": "WITHHELD"
},
"regulatory": {
"spec": "corobate:regulatory:2",
"resolved": true,
"applied": [
{
"instrument_id": "ally-third-party-requirements",
"version": 5,
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"edition": "V.5.0",
"citation": "§ 8, 9, 11, 13 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
},
{
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"edition": "2023-06-06",
"citation": "Due diligence and ongoing monitoring [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"skipped": [],
"conflicts": [],
"bindings": [
{
"claim": "dr_test_certification",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "dr_test_certification",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "financial_condition_review",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — financial condition [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "incident_response_plan_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.7.2 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "never_waivable",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.5 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": [
{
"value": "SELLER-ASSERTED",
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — controls [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
}
}
],
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "subcontractor_inventory",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
}
],
"defaults": [
{
"claim": "dr_test_certification",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"dr_test_certification\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "financial_condition_review",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"financial_condition_review\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "incident_response_plan_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"incident_response_plan_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "penetration_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"penetration_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"privacy_breach_notification_24h\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "soc2_type2_report",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"soc2_type2_report\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "subcontractor_inventory",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"subcontractor_inventory\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
},
"inputs": [
{
"key": "supplier:NORTHSTAR-ANALYTICS::financial_condition_review",
"provenance": "VERIFIED",
"source": "dnb-financials:financial_condition_review",
"observed_at": "2026-07-08T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:sys:registry:dnb-financials"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::soc2_type2_report",
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:soc2_type2_report",
"observed_at": "2026-05-04T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:org:CERT-DELOITTE-SOC"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::penetration_test",
"provenance": "VERIFIED",
"source": "LAB-BISHOPFOX-PEN:penetration_test",
"observed_at": "2026-04-10T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:org:LAB-BISHOPFOX-PEN"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::privacy_breach_notification_24h",
"provenance": "VERIFIED",
"source": "contract-repository:privacy_breach_notification_24h",
"observed_at": "2026-02-09T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:sys:registry:contract-repository"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory",
"provenance": "SELLER-ASSERTED",
"source": "NORTHSTAR-ANALYTICS:subcontractor_inventory",
"observed_at": "2026-08-05T14:00:00.000Z",
"critical": false,
"memory_status": "withheld",
"memory_actor": "actor:org:NORTHSTAR-ANALYTICS"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::incident_response_plan_test",
"provenance": "SELLER-ASSERTED",
"source": "NORTHSTAR-ANALYTICS:incident_response_plan_test",
"observed_at": "2026-06-09T14:00:00.000Z",
"critical": false,
"memory_status": "withheld",
"memory_actor": "actor:org:NORTHSTAR-ANALYTICS"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification",
"provenance": "SELLER-ASSERTED",
"source": "NORTHSTAR-ANALYTICS:dr_test_certification",
"observed_at": "2026-03-21T14:00:00.000Z",
"critical": false,
"memory_status": "withheld",
"memory_actor": "actor:org:NORTHSTAR-ANALYTICS"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification",
"provenance": "MISSING",
"source": null,
"observed_at": "2026-08-08T14:00:00.000Z",
"critical": true,
"memory_status": "coverage_gap"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::incident_response_plan_test",
"provenance": "MISSING",
"source": null,
"observed_at": "2026-08-08T14:00:00.000Z",
"critical": true,
"memory_status": "coverage_gap"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory",
"provenance": "MISSING",
"source": null,
"observed_at": "2026-08-08T14:00:00.000Z",
"critical": true,
"memory_status": "coverage_gap"
}
],
"crypto_suite": {
"spec": "corobate:suite:1",
"id": "CB-1-ES256-SHA256",
"receipt_digest": "sha256",
"chain_digest": "sha256",
"content_digest": "sha256",
"envelope_signature": "ES256",
"signature_curve": "P-256",
"canonicalisation": "attest-canon/2",
"quantum_resistant": false
}
}
}Third-party risk officer
The third-party risk function that owns the file.
The fullest internal view: every input, its class, its age, its score, the exposure, and every instrument in force.
VerdictWITHHELD
Confidence0%
bound by dr_test_certification
Exposure$480,000
ReleaseWITHHELD_NO_EVIDENCE
Risk acceptedNONE
Every input the gate saw
| Claim | Required | Evidence class | Who | Age | Score | Outcome |
|---|---|---|---|---|---|---|
| financial_condition_review | yes | VERIFIED | actor:sys:registry:dnb-financials | 31d | 95% | admitted |
| soc2_type2_report | yes | VERIFIED | actor:org:CERT-DELOITTE-SOC | 96d | 95% | admitted |
| penetration_test | yes | VERIFIED | actor:org:LAB-BISHOPFOX-PEN | 120d | 95% | admitted |
| privacy_breach_notification_24h | yes | VERIFIED | actor:sys:registry:contract-repository | 180d | 95% | admitted |
| subcontractor_inventory | no | SELLER-ASSERTED | actor:org:NORTHSTAR-ANALYTICS | 3d | 50% | withheld |
| incident_response_plan_test | no | SELLER-ASSERTED | actor:org:NORTHSTAR-ANALYTICS | 60d | 50% | withheld |
| dr_test_certification | no | SELLER-ASSERTED | actor:org:NORTHSTAR-ANALYTICS | 140d | 50% | withheld |
| dr_test_certification | yes | MISSING | — | 2026-08-08 | 0% | coverage gap |
| incident_response_plan_test | yes | MISSING | — | 2026-08-08 | 0% | coverage gap |
| subcontractor_inventory | yes | MISSING | — | 2026-08-08 | 0% | coverage gap |
Instruments in force
Ally — Supply Chain
Third Party Requirements V.5.0
§ 8, 9, 11, 13 [VERIFY] · edition V.5.0
document sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1
entered by actor:human:tprm-officer
Board of Governors of the Federal Reserve System
Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)
Due diligence and ongoing monitoring [VERIFY] · edition 2023-06-06
document sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2
entered by actor:human:tprm-officer
Why
- Coverage gap: no admissible memory for required claim(s) supplier:NORTHSTAR-ANALYTICS|dr_test_certification, supplier:NORTHSTAR-ANALYTICS|incident_response_plan_test, supplier:NORTHSTAR-ANALYTICS|subcontractor_inventory.
- Confidence 0.00% is bound by "supplier:NORTHSTAR-ANALYTICS|dr_test_certification".
- 3 memories were withheld from the context block: supplier:NORTHSTAR-ANALYTICS|subcontractor_inventory (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands); supplier:NORTHSTAR-ANALYTICS|incident_response_plan_test (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands); supplier:NORTHSTAR-ANALYTICS|dr_test_certification (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands).
- Thresholds for $480,000 exposure: approve 85%, caution 60%.
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:f929c4174b3f9e8f34bc6d4139c6dcc7948d75c0c5ef6b15e08d05e4de725166 matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "COMPLIANCE",
"purpose": "The operator’s own compliance function. The fullest internal view: every gap, every instrument in force, the waivability of each requirement and who accepted what.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:3fe5f53b486468e78fab5212c7398edaebb380b10052745319070a1b35c6b575",
"entry_hash": "sha256:37a3a1388d3fffb67b2159e25e83797e270f8f8fe652b37743a35e3b1e0f29dd",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:f929c4174b3f9e8f34bc6d4139c6dcc7948d75c0c5ef6b15e08d05e4de725166",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "tprm_NORTHSTAR_2026Q3_expansion",
"domain": "supply-chain",
"subject": "supplier:NORTHSTAR-ANALYTICS",
"question": "May Northstar Analytics be expanded to the enterprise marketing platform, with the same evidence on file?"
},
"memory": {
"state_digest": "sha256:7f997249df06dcd91ce8bb406695bd40b8b579a6b27477286d64f9b908f73144",
"ledger_head": "sha256:b51c29b9df0271d0099057f73642b9c50199fa6bba9c7f03343559c0c53eec67",
"coverage_gaps": [
"supplier:NORTHSTAR-ANALYTICS|dr_test_certification",
"supplier:NORTHSTAR-ANALYTICS|incident_response_plan_test",
"supplier:NORTHSTAR-ANALYTICS|subcontractor_inventory"
],
"exposure": {
"usd": 480000,
"declared_by": "actor:human:tprm-officer",
"ledger_seq": 9
},
"policy_digest": "sha256:a6b69b7d20f7fb04d522364af1d92992058b04a5835fcec9d1c9f2261c7ef636"
},
"data_horizon": "2026-08-08T14:00:00.000Z",
"verdict": {
"value": "WITHHELD",
"threshold_approve": 0.85,
"threshold_caution": 0.6,
"rule": "confidence>=threshold"
},
"confidence": {
"value": 0,
"method": "min-over-critical-inputs",
"bound_by": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification"
},
"release": {
"required": false,
"required_by_tier": false,
"escalated_by_acceptance": false,
"risk_accepted": false,
"state": "WITHHELD_NO_EVIDENCE",
"code": "QUORUM_EVIDENCE_WITHHELD",
"reason": "the evidence did not clear the threshold for this exposure, so there is nothing to release. Signatures do not substitute for evidence, and this state is deliberately distinct from WITHHELD_PENDING_SIGNATURES: a reader must be able to tell \"the evidence is not there\" from \"the evidence is there and 0 of 2 people have signed\".",
"tier_floor_cents": 1000000000,
"exposure_usd_cents": 48000000,
"required_m": 2,
"declared_n": 3,
"floor_m": 2,
"distinct_signers": 0,
"superseded": 0,
"collapsed": 0,
"release_digest": "sha256:8f17a7ef2c168b2b7d3b8ef262cfa969a8086f47c9427fb5a5edf7e5d3143782",
"governance_digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
"governance_signed": true,
"counted_voices": [],
"signatures": [],
"ledger_seq": null
},
"acceptance": {
"state": "NONE",
"code": "ACCEPTANCE_NONE",
"reason": "no risk acceptance was presented for this decision. This is the ordinary case: a refusal is a refusal unless a named person has priced it.",
"permitted_basis": null,
"presented": 0,
"superseded": 0,
"expired": 0,
"gaps_not_covered": 0,
"coverage_gaps_in_force": [
"supplier:NORTHSTAR-ANALYTICS|dr_test_certification",
"supplier:NORTHSTAR-ANALYTICS|incident_response_plan_test",
"supplier:NORTHSTAR-ANALYTICS|subcontractor_inventory"
],
"evidentiary_digest": "sha256:8f17a7ef2c168b2b7d3b8ef262cfa969a8086f47c9427fb5a5edf7e5d3143782",
"margin_floor_bp": 100,
"authority_ceiling_cents": {
"SUPERVISOR": 1000000,
"MANAGER": 25000000,
"DIRECTOR": 500000000,
"OFFICER": 5000000000
},
"acceptances": [],
"escalated": false,
"live": false,
"ledger_seq": null
},
"regulatory": {
"spec": "corobate:regulatory:2",
"resolved": true,
"applied": [
{
"instrument_id": "ally-third-party-requirements",
"version": 5,
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"edition": "V.5.0",
"citation": "§ 8, 9, 11, 13 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
},
{
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"edition": "2023-06-06",
"citation": "Due diligence and ongoing monitoring [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"skipped": [],
"conflicts": [],
"bindings": [
{
"claim": "dr_test_certification",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "dr_test_certification",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "financial_condition_review",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — financial condition [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "incident_response_plan_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.7.2 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "never_waivable",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.5 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": [
{
"value": "SELLER-ASSERTED",
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — controls [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
}
}
],
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "subcontractor_inventory",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
}
],
"defaults": [
{
"claim": "dr_test_certification",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"dr_test_certification\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "financial_condition_review",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"financial_condition_review\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "incident_response_plan_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"incident_response_plan_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "penetration_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"penetration_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"privacy_breach_notification_24h\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "soc2_type2_report",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"soc2_type2_report\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "subcontractor_inventory",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"subcontractor_inventory\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
},
"reasons": [
"Coverage gap: no admissible memory for required claim(s) supplier:NORTHSTAR-ANALYTICS|dr_test_certification, supplier:NORTHSTAR-ANALYTICS|incident_response_plan_test, supplier:NORTHSTAR-ANALYTICS|subcontractor_inventory.",
"Confidence 0.00% is bound by \"supplier:NORTHSTAR-ANALYTICS|dr_test_certification\".",
"3 memories were withheld from the context block: supplier:NORTHSTAR-ANALYTICS|subcontractor_inventory (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands); supplier:NORTHSTAR-ANALYTICS|incident_response_plan_test (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands); supplier:NORTHSTAR-ANALYTICS|dr_test_certification (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands).",
"Thresholds for $480,000 exposure: approve 85%, caution 60%."
],
"inputs": [
{
"key": "supplier:NORTHSTAR-ANALYTICS::financial_condition_review",
"value": "stable",
"provenance": "VERIFIED",
"source": "dnb-financials:financial_condition_review",
"observed_at": "2026-07-08T14:00:00.000Z",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted",
"memory_kind": "test_report",
"memory_actor": "actor:sys:registry:dnb-financials",
"memory_age_days": 31
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::soc2_type2_report",
"value": "unqualified",
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:soc2_type2_report",
"observed_at": "2026-05-04T14:00:00.000Z",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:org:CERT-DELOITTE-SOC",
"memory_age_days": 96
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::penetration_test",
"value": "no-critical",
"provenance": "VERIFIED",
"source": "LAB-BISHOPFOX-PEN:penetration_test",
"observed_at": "2026-04-10T14:00:00.000Z",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted",
"memory_kind": "test_report",
"memory_actor": "actor:org:LAB-BISHOPFOX-PEN",
"memory_age_days": 120
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::privacy_breach_notification_24h",
"value": "contracted",
"provenance": "VERIFIED",
"source": "contract-repository:privacy_breach_notification_24h",
"observed_at": "2026-02-09T14:00:00.000Z",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:sys:registry:contract-repository",
"memory_age_days": 180
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory",
"value": null,
"provenance": "SELLER-ASSERTED",
"source": "NORTHSTAR-ANALYTICS:subcontractor_inventory",
"observed_at": "2026-08-05T14:00:00.000Z",
"reliability": 0.5,
"critical": false,
"memory_status": "withheld",
"memory_kind": "test_report",
"memory_actor": "actor:org:NORTHSTAR-ANALYTICS",
"memory_age_days": 3
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::incident_response_plan_test",
"value": null,
"provenance": "SELLER-ASSERTED",
"source": "NORTHSTAR-ANALYTICS:incident_response_plan_test",
"observed_at": "2026-06-09T14:00:00.000Z",
"reliability": 0.5,
"critical": false,
"memory_status": "withheld",
"memory_kind": "test_report",
"memory_actor": "actor:org:NORTHSTAR-ANALYTICS",
"memory_age_days": 60
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification",
"value": null,
"provenance": "SELLER-ASSERTED",
"source": "NORTHSTAR-ANALYTICS:dr_test_certification",
"observed_at": "2026-03-21T14:00:00.000Z",
"reliability": 0.5,
"critical": false,
"memory_status": "withheld",
"memory_kind": "test_report",
"memory_actor": "actor:org:NORTHSTAR-ANALYTICS",
"memory_age_days": 140
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification",
"value": null,
"provenance": "MISSING",
"source": null,
"observed_at": "2026-08-08T14:00:00.000Z",
"reliability": 0,
"critical": true,
"memory_status": "coverage_gap"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::incident_response_plan_test",
"value": null,
"provenance": "MISSING",
"source": null,
"observed_at": "2026-08-08T14:00:00.000Z",
"reliability": 0,
"critical": true,
"memory_status": "coverage_gap"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory",
"value": null,
"provenance": "MISSING",
"source": null,
"observed_at": "2026-08-08T14:00:00.000Z",
"reliability": 0,
"critical": true,
"memory_status": "coverage_gap"
}
],
"crypto_suite": {
"spec": "corobate:suite:1",
"id": "CB-1-ES256-SHA256",
"receipt_digest": "sha256",
"chain_digest": "sha256",
"content_digest": "sha256",
"envelope_signature": "ES256",
"signature_curve": "P-256",
"canonicalisation": "attest-canon/2",
"quantum_resistant": false
}
}
}Executive signer
A named signer on the release gate — the person whose signature is over the evidentiary state, not over the sentence.
What is at stake, what the evidence supports, what is missing, and the digest they are signing over.
You are being asked to sign
May Northstar Analytics be expanded to the enterprise marketing platform, with the same evidence on file?
At stake$480,000
Evidence saysWITHHELD
Release stateWITHHELD_NO_EVIDENCE
signing over evidentiary digest sha256:8f17a7ef2c168b2b7d3b8ef262cfa969a8086f47c9427fb5a5edf7e5d3143782
The signature is over the STATE OF THE EVIDENCE. Move one fact behind this decision and the digest moves and the signature stops counting — which is what makes it safe to collect signatures before everyone is in the room.
What is missing
- dr test certification
- incident response plan test
- subcontractor inventory
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:8149ead595984af468c63b6f7d56ff32fbc133c2a7b189406c032a6aee02d5f5 matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "EXECUTIVE",
"purpose": "A named signer on the release gate. Sees what is at stake, what the evidence supports, who else has signed and what they are being asked to sign over.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:3fe5f53b486468e78fab5212c7398edaebb380b10052745319070a1b35c6b575",
"entry_hash": "sha256:37a3a1388d3fffb67b2159e25e83797e270f8f8fe652b37743a35e3b1e0f29dd",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:8149ead595984af468c63b6f7d56ff32fbc133c2a7b189406c032a6aee02d5f5",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "tprm_NORTHSTAR_2026Q3_expansion",
"domain": "supply-chain",
"subject": "supplier:NORTHSTAR-ANALYTICS",
"question": "May Northstar Analytics be expanded to the enterprise marketing platform, with the same evidence on file?"
},
"memory": {
"state_digest": "sha256:7f997249df06dcd91ce8bb406695bd40b8b579a6b27477286d64f9b908f73144",
"ledger_head": "sha256:b51c29b9df0271d0099057f73642b9c50199fa6bba9c7f03343559c0c53eec67",
"coverage_gaps": [
"supplier:NORTHSTAR-ANALYTICS|dr_test_certification",
"supplier:NORTHSTAR-ANALYTICS|incident_response_plan_test",
"supplier:NORTHSTAR-ANALYTICS|subcontractor_inventory"
],
"exposure": {
"usd": 480000,
"declared_by": "actor:human:tprm-officer",
"ledger_seq": 9
}
},
"verdict": {
"value": "WITHHELD",
"threshold_approve": 0.85,
"threshold_caution": 0.6,
"rule": "confidence>=threshold"
},
"confidence": {
"value": 0,
"method": "min-over-critical-inputs",
"bound_by": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification"
},
"release": {
"required": false,
"required_by_tier": false,
"escalated_by_acceptance": false,
"risk_accepted": false,
"state": "WITHHELD_NO_EVIDENCE",
"code": "QUORUM_EVIDENCE_WITHHELD",
"reason": "the evidence did not clear the threshold for this exposure, so there is nothing to release. Signatures do not substitute for evidence, and this state is deliberately distinct from WITHHELD_PENDING_SIGNATURES: a reader must be able to tell \"the evidence is not there\" from \"the evidence is there and 0 of 2 people have signed\".",
"tier_floor_cents": 1000000000,
"exposure_usd_cents": 48000000,
"required_m": 2,
"declared_n": 3,
"floor_m": 2,
"distinct_signers": 0,
"superseded": 0,
"collapsed": 0,
"release_digest": "sha256:8f17a7ef2c168b2b7d3b8ef262cfa969a8086f47c9427fb5a5edf7e5d3143782",
"governance_digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
"governance_signed": true,
"counted_voices": [],
"signatures": [],
"ledger_seq": null
},
"acceptance": {
"state": "NONE",
"code": "ACCEPTANCE_NONE",
"reason": "no risk acceptance was presented for this decision. This is the ordinary case: a refusal is a refusal unless a named person has priced it.",
"permitted_basis": null,
"presented": 0,
"superseded": 0,
"expired": 0,
"gaps_not_covered": 0,
"coverage_gaps_in_force": [
"supplier:NORTHSTAR-ANALYTICS|dr_test_certification",
"supplier:NORTHSTAR-ANALYTICS|incident_response_plan_test",
"supplier:NORTHSTAR-ANALYTICS|subcontractor_inventory"
],
"evidentiary_digest": "sha256:8f17a7ef2c168b2b7d3b8ef262cfa969a8086f47c9427fb5a5edf7e5d3143782",
"margin_floor_bp": 100,
"authority_ceiling_cents": {
"SUPERVISOR": 1000000,
"MANAGER": 25000000,
"DIRECTOR": 500000000,
"OFFICER": 5000000000
},
"acceptances": [],
"escalated": false,
"live": false,
"ledger_seq": null
},
"reasons": [
"Coverage gap: no admissible memory for required claim(s) supplier:NORTHSTAR-ANALYTICS|dr_test_certification, supplier:NORTHSTAR-ANALYTICS|incident_response_plan_test, supplier:NORTHSTAR-ANALYTICS|subcontractor_inventory.",
"Confidence 0.00% is bound by \"supplier:NORTHSTAR-ANALYTICS|dr_test_certification\".",
"3 memories were withheld from the context block: supplier:NORTHSTAR-ANALYTICS|subcontractor_inventory (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands); supplier:NORTHSTAR-ANALYTICS|incident_response_plan_test (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands); supplier:NORTHSTAR-ANALYTICS|dr_test_certification (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands).",
"Thresholds for $480,000 exposure: approve 85%, caution 60%."
],
"regulatory": {
"applied": [
{
"instrument_id": "ally-third-party-requirements",
"version": 5,
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"edition": "V.5.0",
"citation": "§ 8, 9, 11, 13 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
},
{
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"edition": "2023-06-06",
"citation": "Due diligence and ongoing monitoring [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"conflicts": [],
"defaults": [
{
"claim": "dr_test_certification",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"dr_test_certification\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "financial_condition_review",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"financial_condition_review\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "incident_response_plan_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"incident_response_plan_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "penetration_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"penetration_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"privacy_breach_notification_24h\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "soc2_type2_report",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"soc2_type2_report\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "subcontractor_inventory",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"subcontractor_inventory\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
},
"inputs": [
{
"key": "supplier:NORTHSTAR-ANALYTICS::financial_condition_review",
"provenance": "VERIFIED",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::soc2_type2_report",
"provenance": "VERIFIED",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::penetration_test",
"provenance": "VERIFIED",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::privacy_breach_notification_24h",
"provenance": "VERIFIED",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory",
"provenance": "SELLER-ASSERTED",
"reliability": 0.5,
"critical": false,
"memory_status": "withheld"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::incident_response_plan_test",
"provenance": "SELLER-ASSERTED",
"reliability": 0.5,
"critical": false,
"memory_status": "withheld"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification",
"provenance": "SELLER-ASSERTED",
"reliability": 0.5,
"critical": false,
"memory_status": "withheld"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification",
"provenance": "MISSING",
"reliability": 0,
"critical": true,
"memory_status": "coverage_gap"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::incident_response_plan_test",
"provenance": "MISSING",
"reliability": 0,
"critical": true,
"memory_status": "coverage_gap"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory",
"provenance": "MISSING",
"reliability": 0,
"critical": true,
"memory_status": "coverage_gap"
}
]
}
}Internal / external audit
Internal audit, or the external auditor testing the third-party programme.
Everything, plus the verifier’s own findings over the sealed record.
This view withholds nothing. What it adds is the 22 checks the published verifier ran over the sealed record behind every other view of this decision — recomputed at build time, not asserted.
| # | Check | Detail | |
|---|---|---|---|
| 1 | Content reproduces (JCS + SHA-256) | PASS | matches sha256:3fe5f53b486468e78fab5212c7398edaebb380b10052745319070a1b35c6b575 |
| 2 | Hash chain links (entry = H(prev||content)) | PASS | head sha256:37a3a1388d3fffb67b2159e25e83797e270f8f8fe652b37743a35e3b1e0f29dd |
| 3 | Confidence gated by weakest critical input | PASS | min over critical = 0, bound_by supplier:NORTHSTAR-ANALYTICS::dr_test_certification (MISSING) |
| 3b | Verdict follows the threshold rule | PASS | 0 => WITHHELD; recorded WITHHELD |
| 4 | Point-in-time seal (no input past data_horizon) | PASS | all inputs <= 2026-08-08T14:00:00.000Z |
| 5 | Anchor covers the head, and the timestamp token re-reads | PASS | internally consistent; NO external anchor was requested — this is not a validated timestamp |
| 6 | Criteria travel with the receipt and reproduce | PASS | policy_body hashes to sha256:a6b69b7d20f7fb04d522364af1d92992058b04a5835fcec9d1c9f2261c7ef636 |
| 7 | Reliability re-derives from recorded evidence | PASS | all 10 inputs re-derive exactly |
| 8 | Outcome trials and lineage discounts re-derive | PASS | 7 input(s) re-derive: 0 credited outcome trial(s), 0 lineage-discounted corroboration(s); every reliability is at or under its class ceiling |
| 9 | Re-ingested receipts respect their weakest-input ceiling | PASS | no re-ingested receipts: every input rests on a primary observation |
| 10 | Release quorum re-derives | PASS | WITHHELD_NO_EVIDENCE - below the top exposure tier, no multi-party requirement applies |
| 11 | Risk acceptance re-derives | PASS | no risk acceptance: this decision stands or falls on its evidence |
| 12 | Observer credentials were not revoked as of observation time | PASS | revocation list 12 (0 entries, issued 2026-08-06T00:00:00.000Z, next update due 2026-08-13T00:00:00.000Z) reproduces; 4 observer signature(s) judged as of their own instant, none under a key revoked as compromised or retired by then |
| 13 | The cryptographic suite is named and is one this verifier implements | PASS | sealed under CB-1-ES256-SHA256 (ES256 / sha256, attest-canon/2); this verifier implements it; the suite states it is NOT quantum resistant |
| 14 | Regulatory bindings are attributed and were enforced | PASS | 13 binding(s) from 2 instrument(s) in force, each attributed to an authority, a citation and a document digest; 7 required claim(s) all reached the gate |
| 15 | Role-view commitments re-derive, and the customs view carries no money | PASS | 6 role-view commitment(s) re-derived from this receipt’s own body by this verifier’s independent projection; the REGULATOR view carries no commercial figure |
| 16 | AI-authored input was admitted only where an authority allowed it | PASS | 0 claim(s) carry a position on AI-authored evidence set by an authority and 7 carry a recorded default nobody set; 0 exclusion(s) and 0 corroboration-only rule(s) re-derived against this receipt's own admitted inputs; 0 admitted input(s) are AI-authored by their enrolled identity |
| 17 | State digest recomputes from the ledger alone | UNVERIFIABLE | NOT APPLICABLE — you supplied no ledger, so the state digest cannot be re-derived from anything. This receipt commits to the corpus the deciding system held at the instant it sealed, and that commitment is checked by recomputing it from the append-only ledger and comparing; with no ledger in hand there is no second artefact to recompute from. The receipt is not at fault and nothing here is missing from it. Obtain the ledger from the issuer and re-run with --ledger <file>, or verifyReceipt(r, {ledger}). Nothing here has failed and nothing here has passed. |
| 18 | Registry membership re-derives for every key relied on | PASS | all 4 key(s) relied on re-derive to the entries root registry v7 committed to and the trust root signed |
| 20 | Geometric support re-derives, and an unevaluated record is not a supported one | PASS | no authority bound a metric to any claim on this receipt, so no geometric test applied. A claim nobody bound a metric to is not a claim about geometry, and this is a stated absence rather than a silent one |
| 19 | The cause of every uncovered requirement re-derives | PASS | all 3 uncovered requirement(s) re-derive their cause from this receipt's own rows. What notice is ADEQUATE is not decided here: this check establishes what the record says and that the record agrees with itself. |
| 21 | The sealing party is the one you were told to expect | UNVERIFIABLE | NOT APPLICABLE — you supplied no trust bundle, so nothing here establishes who sealed this. Identities 1 to 20 prove that this document agrees with itself; not one of them asks whose trust root it was sealed under, and a document that agrees with itself about a decision nobody made agrees with itself perfectly. Obtain the issuer's corobate:trust-bundle:1 out of band, confirm its spoken fingerprint with them by voice, and re-run with --trust-bundle <file> --expect-fingerprint <what you heard>. Nothing here has failed and nothing here has passed. |
The scoped copy itself — complete for this role
FAITHFUL digest sha256:0c7c628ec0f85bf3041a2ba725dc6782e68c5d210b8f97b5a7d6adc6ffcfb1bc matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "AUDITOR",
"purpose": "An external assessor. Sees the complete sealed record: this view withholds nothing and exists so the identity case is a case rather than an exception.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:3fe5f53b486468e78fab5212c7398edaebb380b10052745319070a1b35c6b575",
"entry_hash": "sha256:37a3a1388d3fffb67b2159e25e83797e270f8f8fe652b37743a35e3b1e0f29dd",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:0c7c628ec0f85bf3041a2ba725dc6782e68c5d210b8f97b5a7d6adc6ffcfb1bc",
"withheld": {
"anything_withheld": false,
"note": "Nothing outside the seal was removed for this role."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"engine": {
"name": "corobate-memory",
"version": "1.0.0"
},
"decision": {
"id": "tprm_NORTHSTAR_2026Q3_expansion",
"domain": "supply-chain",
"subject": "supplier:NORTHSTAR-ANALYTICS",
"question": "May Northstar Analytics be expanded to the enterprise marketing platform, with the same evidence on file?"
},
"issued_at": "2026-08-08T14:00:00.000Z",
"data_horizon": "2026-08-08T14:00:00.000Z",
"inputs": [
{
"key": "supplier:NORTHSTAR-ANALYTICS::financial_condition_review",
"value": "stable",
"provenance": "VERIFIED",
"source": "dnb-financials:financial_condition_review",
"observed_at": "2026-07-08T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.95,
"critical": true,
"memory_id": "mem_a4238af53f4e",
"memory_status": "admitted",
"memory_kind": "test_report",
"memory_actor": "actor:sys:registry:dnb-financials",
"memory_age_days": 31,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:1bda32df7c47b9fe46a32e281617ce03eb37cd514bd347e7110328ef69093fb2",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": null,
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_cc91f681b6ae25fd",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 31,
"max_age_days": 180,
"house_max_age_days": 180,
"instrument_max_age_days": null,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[VERIFIED · r=95.0% · 31d · dnb-financials:financial_condition_review] supplier:NORTHSTAR-ANALYTICS / financial_condition_review: stable"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::soc2_type2_report",
"value": "unqualified",
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:soc2_type2_report",
"observed_at": "2026-05-04T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.95,
"critical": true,
"memory_id": "mem_23f774942083",
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:org:CERT-DELOITTE-SOC",
"memory_age_days": 96,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:190730b6169ae0f150c9781e96ce941150b290677c0108399596df713feb9fcc",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": "VERIFIED",
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_c3c95bc9795296cd",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 96,
"max_age_days": 365,
"house_max_age_days": 365,
"instrument_max_age_days": 365,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"min_class_floor": "VERIFIED",
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[VERIFIED · r=95.0% · 96d · CERT-DELOITTE-SOC:soc2_type2_report] supplier:NORTHSTAR-ANALYTICS / soc2_type2_report: unqualified"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::penetration_test",
"value": "no-critical",
"provenance": "VERIFIED",
"source": "LAB-BISHOPFOX-PEN:penetration_test",
"observed_at": "2026-04-10T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.95,
"critical": true,
"memory_id": "mem_4507819e76ea",
"memory_status": "admitted",
"memory_kind": "test_report",
"memory_actor": "actor:org:LAB-BISHOPFOX-PEN",
"memory_age_days": 120,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:8d7c23e02b253c59f2f037e7e68388eca30be2815afcd9f70a95807ff6fdecc0",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": "VERIFIED",
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_a6cacbd0fd83f53b",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 120,
"max_age_days": 180,
"house_max_age_days": 180,
"instrument_max_age_days": 365,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"min_class_floor": "VERIFIED",
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[VERIFIED · r=95.0% · 120d · LAB-BISHOPFOX-PEN:penetration_test] supplier:NORTHSTAR-ANALYTICS / penetration_test: no-critical"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::privacy_breach_notification_24h",
"value": "contracted",
"provenance": "VERIFIED",
"source": "contract-repository:privacy_breach_notification_24h",
"observed_at": "2026-02-09T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.95,
"critical": true,
"memory_id": "mem_07b1bcf4ecc6",
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:sys:registry:contract-repository",
"memory_age_days": 180,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:c3a793f4d568c91509554986256545c2f114213dbc5984beff99df6955d55fd7",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": null,
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_393d373ff1a0f1b4",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 180,
"max_age_days": 365,
"house_max_age_days": 365,
"instrument_max_age_days": null,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[VERIFIED · r=95.0% · 180d · contract-repository:privacy_breach_notification_24h] supplier:NORTHSTAR-ANALYTICS / privacy_breach_notification_24h: contracted"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory",
"value": null,
"provenance": "SELLER-ASSERTED",
"source": "NORTHSTAR-ANALYTICS:subcontractor_inventory",
"observed_at": "2026-08-05T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.5,
"critical": false,
"memory_id": "mem_29d8f7588fbf",
"memory_status": "withheld",
"memory_kind": "test_report",
"memory_actor": "actor:org:NORTHSTAR-ANALYTICS",
"memory_age_days": 3,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:4875c4de5149f13817ba1322154bc9c2406d1d6514d7f23a0783934bfb256352",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": null,
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": false,
"observer_auth_code": "NO_ENVELOPE",
"observer_key_id": null,
"attestation": null,
"derivation": {
"provenance": "SELLER-ASSERTED",
"ceiling_bp": 5000,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 3,
"max_age_days": 180,
"house_max_age_days": 180,
"instrument_max_age_days": null,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
]
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::incident_response_plan_test",
"value": null,
"provenance": "SELLER-ASSERTED",
"source": "NORTHSTAR-ANALYTICS:incident_response_plan_test",
"observed_at": "2026-06-09T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.5,
"critical": false,
"memory_id": "mem_4e28ba56ddfd",
"memory_status": "withheld",
"memory_kind": "test_report",
"memory_actor": "actor:org:NORTHSTAR-ANALYTICS",
"memory_age_days": 60,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:840aedb17ad0030307e6907737cdd677b7b82de442e0547a1645bcbe01fe47c2",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": null,
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": false,
"observer_auth_code": "NO_ENVELOPE",
"observer_key_id": null,
"attestation": null,
"derivation": {
"provenance": "SELLER-ASSERTED",
"ceiling_bp": 5000,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 60,
"max_age_days": 180,
"house_max_age_days": 180,
"instrument_max_age_days": null,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
]
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification",
"value": null,
"provenance": "SELLER-ASSERTED",
"source": "NORTHSTAR-ANALYTICS:dr_test_certification",
"observed_at": "2026-03-21T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.5,
"critical": false,
"memory_id": "mem_ed82848e18de",
"memory_status": "withheld",
"memory_kind": "test_report",
"memory_actor": "actor:org:NORTHSTAR-ANALYTICS",
"memory_age_days": 140,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:bbe38e53bce95f47e792ae19729c3f74619276d2c3be8e64ceb9a3f5a0d8227e",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": null,
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": false,
"observer_auth_code": "NO_ENVELOPE",
"observer_key_id": null,
"attestation": null,
"derivation": {
"provenance": "SELLER-ASSERTED",
"ceiling_bp": 5000,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 140,
"max_age_days": 180,
"house_max_age_days": 180,
"instrument_max_age_days": 365,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
]
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification",
"value": null,
"provenance": "MISSING",
"source": null,
"observed_at": "2026-08-08T14:00:00.000Z",
"reliability": 0,
"critical": true,
"memory_status": "coverage_gap",
"gap_cause": "EVIDENCE_PRESENTED_FAILED",
"gap_request": null,
"gap_origin": "BUSINESS_EVIDENCE",
"gap_conditions": []
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::incident_response_plan_test",
"value": null,
"provenance": "MISSING",
"source": null,
"observed_at": "2026-08-08T14:00:00.000Z",
"reliability": 0,
"critical": true,
"memory_status": "coverage_gap",
"gap_cause": "EVIDENCE_PRESENTED_FAILED",
"gap_request": null,
"gap_origin": "BUSINESS_EVIDENCE",
"gap_conditions": []
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory",
"value": null,
"provenance": "MISSING",
"source": null,
"observed_at": "2026-08-08T14:00:00.000Z",
"reliability": 0,
"critical": true,
"memory_status": "coverage_gap",
"gap_cause": "EVIDENCE_PRESENTED_FAILED",
"gap_request": null,
"gap_origin": "BUSINESS_EVIDENCE",
"gap_conditions": []
}
],
"serialization": {
"algorithm": "RFC8785-JCS",
"hash": "sha256"
},
"crypto_suite": {
"spec": "corobate:suite:1",
"id": "CB-1-ES256-SHA256",
"receipt_digest": "sha256",
"chain_digest": "sha256",
"content_digest": "sha256",
"envelope_signature": "ES256",
"signature_curve": "P-256",
"canonicalisation": "attest-canon/2",
"quantum_resistant": false
},
"confidence": {
"value": 0,
"method": "min-over-critical-inputs",
"bound_by": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification"
},
"verdict": {
"value": "WITHHELD",
"threshold_approve": 0.85,
"threshold_caution": 0.6,
"rule": "confidence>=threshold"
},
"release": {
"required": false,
"required_by_tier": false,
"escalated_by_acceptance": false,
"risk_accepted": false,
"state": "WITHHELD_NO_EVIDENCE",
"code": "QUORUM_EVIDENCE_WITHHELD",
"reason": "the evidence did not clear the threshold for this exposure, so there is nothing to release. Signatures do not substitute for evidence, and this state is deliberately distinct from WITHHELD_PENDING_SIGNATURES: a reader must be able to tell \"the evidence is not there\" from \"the evidence is there and 0 of 2 people have signed\".",
"tier_floor_cents": 1000000000,
"exposure_usd_cents": 48000000,
"required_m": 2,
"declared_n": 3,
"floor_m": 2,
"distinct_signers": 0,
"superseded": 0,
"collapsed": 0,
"release_digest": "sha256:8f17a7ef2c168b2b7d3b8ef262cfa969a8086f47c9427fb5a5edf7e5d3143782",
"governance_digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
"governance_signed": true,
"counted_voices": [],
"signatures": [],
"ledger_seq": null
},
"acceptance": {
"state": "NONE",
"code": "ACCEPTANCE_NONE",
"reason": "no risk acceptance was presented for this decision. This is the ordinary case: a refusal is a refusal unless a named person has priced it.",
"permitted_basis": null,
"presented": 0,
"superseded": 0,
"expired": 0,
"gaps_not_covered": 0,
"coverage_gaps_in_force": [
"supplier:NORTHSTAR-ANALYTICS|dr_test_certification",
"supplier:NORTHSTAR-ANALYTICS|incident_response_plan_test",
"supplier:NORTHSTAR-ANALYTICS|subcontractor_inventory"
],
"evidentiary_digest": "sha256:8f17a7ef2c168b2b7d3b8ef262cfa969a8086f47c9427fb5a5edf7e5d3143782",
"margin_floor_bp": 100,
"authority_ceiling_cents": {
"SUPERVISOR": 1000000,
"MANAGER": 25000000,
"DIRECTOR": 500000000,
"OFFICER": 5000000000
},
"acceptances": [],
"escalated": false,
"live": false,
"ledger_seq": null
},
"regulatory": {
"spec": "corobate:regulatory:2",
"resolved": true,
"applied": [
{
"instrument_id": "ally-third-party-requirements",
"version": 5,
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"edition": "V.5.0",
"citation": "§ 8, 9, 11, 13 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
},
{
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"edition": "2023-06-06",
"citation": "Due diligence and ongoing monitoring [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"skipped": [],
"conflicts": [],
"bindings": [
{
"claim": "dr_test_certification",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "dr_test_certification",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "financial_condition_review",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — financial condition [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "incident_response_plan_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.7.2 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "never_waivable",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.5 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": [
{
"value": "SELLER-ASSERTED",
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — controls [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
}
}
],
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "subcontractor_inventory",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
}
],
"defaults": [
{
"claim": "dr_test_certification",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"dr_test_certification\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "financial_condition_review",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"financial_condition_review\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "incident_response_plan_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"incident_response_plan_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "penetration_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"penetration_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"privacy_breach_notification_24h\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "soc2_type2_report",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"soc2_type2_report\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "subcontractor_inventory",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"subcontractor_inventory\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
},
"reasons": [
"Coverage gap: no admissible memory for required claim(s) supplier:NORTHSTAR-ANALYTICS|dr_test_certification, supplier:NORTHSTAR-ANALYTICS|incident_response_plan_test, supplier:NORTHSTAR-ANALYTICS|subcontractor_inventory.",
"Confidence 0.00% is bound by \"supplier:NORTHSTAR-ANALYTICS|dr_test_certification\".",
"3 memories were withheld from the context block: supplier:NORTHSTAR-ANALYTICS|subcontractor_inventory (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands); supplier:NORTHSTAR-ANALYTICS|incident_response_plan_test (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands); supplier:NORTHSTAR-ANALYTICS|dr_test_certification (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands).",
"Thresholds for $480,000 exposure: approve 85%, caution 60%."
],
"memory": {
"layer": "capture->store->recall->act",
"ledger_head": "sha256:b51c29b9df0271d0099057f73642b9c50199fa6bba9c7f03343559c0c53eec67",
"ledger_entries": 11,
"context_digest": null,
"context_memory_ids": [],
"state_digest": "sha256:7f997249df06dcd91ce8bb406695bd40b8b579a6b27477286d64f9b908f73144",
"retrieval_method": "idf-lexical",
"corpus_size": 7,
"considered": 7,
"admitted": 4,
"withheld": 3,
"not_considered": 0,
"coverage_gaps": [
"supplier:NORTHSTAR-ANALYTICS|dr_test_certification",
"supplier:NORTHSTAR-ANALYTICS|incident_response_plan_test",
"supplier:NORTHSTAR-ANALYTICS|subcontractor_inventory"
],
"exposure": {
"usd": 480000,
"declared_by": "actor:human:tprm-officer",
"ledger_seq": 9
},
"salience_policy": {
"half_life_days": 90,
"grace_days": 7,
"access_boost_bp": 500,
"access_boost_cap_bp": 2500,
"relevance_weight_bp": 6000,
"recency_weight_bp": 3000,
"usage_weight_bp": 1000,
"context_cap": 12,
"method": "idf-lexical",
"candidate_list_digest": "sha256:dfbefd123eb7b72f2fb42c15b26a4af3fb79e4a8d5be931a7fe49e87a36d8857",
"note": "salience orders retrieval only; it never contributes to reliability"
},
"policy_digest": "sha256:a6b69b7d20f7fb04d522364af1d92992058b04a5835fcec9d1c9f2261c7ef636",
"policy_body": {
"class_ceiling_bp": {
"VERIFIED": 9500,
"MODELED": 8000,
"SELLER-ASSERTED": 5000,
"MISSING": 0
},
"actor_class_ceiling": [
[
"^actor:ai:",
"MODELED"
],
[
"^actor:agent:",
"MODELED"
],
[
"^actor:human:",
"SELLER-ASSERTED"
],
[
"^actor:org:LAB-",
"VERIFIED"
],
[
"^actor:org:CERT-",
"VERIFIED"
],
[
"^actor:org:",
"SELLER-ASSERTED"
],
[
"^actor:sys:registry:",
"VERIFIED"
],
[
"^actor:sys:sensor:",
"VERIFIED"
],
[
"^actor:sys:",
"MODELED"
]
],
"freshness_cap_bp": 4000,
"max_age_days": {
"telemetry": 1,
"price": 7,
"status": 14,
"certificate": 365,
"test_report": 180,
"filing": 90,
"transcript": 120,
"highlight": 365,
"voice_note": 120,
"note": 365,
"preference": 540,
"decision": 1825,
"receipt": 365,
"default": 90
},
"wilson_z_milli": 1960,
"min_track_n": 5,
"exposure_tiers_bp": [
[
1000000000,
9500,
8000
],
[
100000000,
9000,
7000
],
[
1000000,
8500,
6000
],
[
0,
8000,
5000
]
],
"max_context_memories": 12,
"contradiction_resolve_margin": 2,
"salience": {
"half_life_days": 90,
"grace_days": 7,
"access_boost_bp": 500,
"access_boost_cap_bp": 2500,
"relevance_weight_bp": 6000,
"recency_weight_bp": 3000,
"usage_weight_bp": 1000
}
},
"observer_auth": {
"mode": "required",
"registry_version": 7,
"registry_digest": "sha256:bb1bffa0668fd3ddcc24d30288a62fe52c873bba1396a245c138765263ca68e4",
"entries_root": "sha256:052a44853cd278e4d33a14e709d108aadf2b2079177402c408b935a574b7b8b1",
"memberships": [
{
"key_id": "k_393d373ff1a0f1b4",
"index": 6,
"entry": {
"actor": "actor:sys:registry:contract-repository",
"class": "VERIFIED",
"kind": "system",
"key_id": "k_393d373ff1a0f1b4",
"jwk": {
"kty": "EC",
"crv": "P-256",
"x": "p7fbljJU3LbgvYVbDJvlFhvgeRtxIl6a7hcGn6gw37o",
"y": "QIz0r6fSv_fpuHexvW8T5BnxzQe8zqAC-_OW7UtNoa4"
},
"valid_from": "2025-01-01T00:00:00.000Z",
"valid_to": "2027-06-01T00:00:00.000Z"
},
"path": [
{
"side": "right",
"sibling": "sha256:770d3738b21df6728542e9a3d8d8313b5b83a4dc49819d40519ec9bcf9d6c93a"
},
{
"side": "left",
"sibling": "sha256:a7c0de2a235c1c26640b4db5b931ee69e09f4da9a2d96f07997c5f51f8e0ad4a"
},
{
"side": "left",
"sibling": "sha256:dcea5dab73759e138fad2cd13ff65c0a9fbd8172beab6f9eb480d802f741d0b6"
},
{
"side": "right",
"sibling": "sha256:b0d6d854c0fbace92cd9b0e1b8f05851c2a6f51da82f934b55f3391095b9e3c6"
}
]
},
{
"key_id": "k_a6cacbd0fd83f53b",
"index": 1,
"entry": {
"actor": "actor:org:LAB-BISHOPFOX-PEN",
"class": "VERIFIED",
"kind": "org",
"key_id": "k_a6cacbd0fd83f53b",
"jwk": {
"kty": "EC",
"crv": "P-256",
"x": "Ch_GAfrcwbNBD53nf8MhzRQv3dvkYrQwYaut1kmrQu4",
"y": "26e0at_OMmtDi7iOSK7RqjeyZomyasIEM20iF0cxfrA"
},
"valid_from": "2025-01-01T00:00:00.000Z",
"valid_to": "2027-06-01T00:00:00.000Z"
},
"path": [
{
"side": "left",
"sibling": "sha256:7676859944c464baf75a2d7d4be7ff2f1632b94921aff419d7908f5d0c15d2bc"
},
{
"side": "right",
"sibling": "sha256:97bc43a75580b998c635a55a452ec5e66fea912fbdb987a9c14e29d6311be924"
},
{
"side": "right",
"sibling": "sha256:4f3031707d2416b5567eb739ca5d25f2cc36acc2bd8d026bf221c367179718a0"
},
{
"side": "right",
"sibling": "sha256:b0d6d854c0fbace92cd9b0e1b8f05851c2a6f51da82f934b55f3391095b9e3c6"
}
]
},
{
"key_id": "k_c3c95bc9795296cd",
"index": 0,
"entry": {
"actor": "actor:org:CERT-DELOITTE-SOC",
"class": "VERIFIED",
"kind": "org",
"key_id": "k_c3c95bc9795296cd",
"jwk": {
"kty": "EC",
"crv": "P-256",
"x": "cO4w4AuCfc-hheIJnEzQj-z-MBcHIfl34mygv9kl3mI",
"y": "PDPYdxnb9V0d43GLjpNC2_xyHVBbarmHkHxa3EOXJxg"
},
"valid_from": "2025-01-01T00:00:00.000Z",
"valid_to": "2027-06-01T00:00:00.000Z"
},
"path": [
{
"side": "right",
"sibling": "sha256:aff188754372ce4622403f6cb8e4c7f2456137aa416b101109aad75f6e614acb"
},
{
"side": "right",
"sibling": "sha256:97bc43a75580b998c635a55a452ec5e66fea912fbdb987a9c14e29d6311be924"
},
{
"side": "right",
"sibling": "sha256:4f3031707d2416b5567eb739ca5d25f2cc36acc2bd8d026bf221c367179718a0"
},
{
"side": "right",
"sibling": "sha256:b0d6d854c0fbace92cd9b0e1b8f05851c2a6f51da82f934b55f3391095b9e3c6"
}
]
},
{
"key_id": "k_cc91f681b6ae25fd",
"index": 5,
"entry": {
"actor": "actor:sys:registry:dnb-financials",
"class": "VERIFIED",
"kind": "system",
"key_id": "k_cc91f681b6ae25fd",
"jwk": {
"kty": "EC",
"crv": "P-256",
"x": "DFXpGQ7rpQaaBpywUK8Pj8S2cxPbM88v8-bbykgRHv4",
"y": "H_xRwy6ppm8p99nST5CibdkIu7bk8hl_2DFuuV43zUU"
},
"valid_from": "2025-01-01T00:00:00.000Z",
"valid_to": "2027-06-01T00:00:00.000Z"
},
"path": [
{
"side": "left",
"sibling": "sha256:820b93ba17cff14537dccf9ad01952b78f5d18d8044ada2d11a8211bb6399dcb"
},
{
"side": "right",
"sibling": "sha256:36eb73c9aa8175028706fd11c7981df6bb6fd33dc0acc6d7a10e179c7bf5f295"
},
{
"side": "left",
"sibling": "sha256:dcea5dab73759e138fad2cd13ff65c0a9fbd8172beab6f9eb480d802f741d0b6"
},
{
"side": "right",
"sibling": "sha256:b0d6d854c0fbace92cd9b0e1b8f05851c2a6f51da82f934b55f3391095b9e3c6"
}
]
}
],
"memberships_unproven": [],
"revocation": {
"source": "SIGNED_LIST",
"digest": "sha256:739c516c92fbb8d46951fc274ec199896004081698b412180c096074bd59b884",
"sequence": 12,
"registry_version": 7,
"issued_at": "2026-08-06T00:00:00.000Z",
"next_update_due": "2026-08-13T00:00:00.000Z",
"entry_count": 0,
"body": {
"sequence": 12,
"registry_version": 7,
"issuer": {
"name": "Ally-shaped demonstration trust root",
"key_id": "k_d2a5a08e98bed6cd"
},
"issued_at": "2026-08-06T00:00:00.000Z",
"next_update_due": "2026-08-13T00:00:00.000Z",
"entries": [],
"spec": "corobate:revocation-list:1"
}
}
},
"governance": {
"digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
"signed": true,
"actor_trust": "FLOOR_TO_SELLER_ASSERTED",
"outcome_trial_weight": 1,
"max_reingest_depth": 3,
"release_quorum_m": 2,
"release_quorum_n": 3,
"risk_acceptance_margin_bp": 500,
"risk_acceptance_max_days": 30,
"risk_acceptance_authority_cents": {
"SUPERVISOR": 1000000,
"MANAGER": 25000000,
"DIRECTOR": 500000000,
"OFFICER": 5000000000
},
"template_author_roles": [
"MANAGER",
"DIRECTOR",
"OFFICER"
]
},
"observers_attested": 4,
"outcomes": {
"attestations_counted": 0,
"attestations_recorded": 0,
"records_with_outcomes": 0
},
"lineage": {
"corroborations_counted": 0,
"corroborations_discounted": 0,
"records_with_discounted_corroborations": 0
},
"reingest": {
"records": 0,
"max_depth": 0,
"weakest_class": null,
"chain_weakest_bp": 10000,
"chain": []
},
"template": null
}
}
}A repossessed vehicle about to be listed. The instrument here is an industry arbitration policy with hard day counts rather than a statute, and the interesting property is that the buyer’s recourse window is what makes each announcement expensive to get wrong.
- Subject
- vehicle:1G1ZD5ST7NF101234
- Question
- May this vehicle be listed on the auction lane with a clean announcement set?
- Exposure
- $31,400
- Instruments
- National Auto Auction Association
- Outcome
- WITHHELD — the action is not permitted; outstanding: odometer disclosure
- Receipt
- sha256:1467c3d75c407e079e57dc65710d5d14d479c5afde315160d564b42eb9c09885
The gate variables this decision ran under — a dial per question, read back off the sealed receipt
odometer disclosurerequired never waivable
necessityrequired never waivableNational Auto Auction Association — Appendix I [VERIFY]
staleness90 daysNo instrument set an age limit for this claim, so the deploying organisation's own freshness policy binds at 90 days. It is not unlimited.
reputation class—No class floor was set, so the seller's own assertion is admissible for this claim up to the ceiling that class carries. That is a setting, not an absence.
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "odometer_disclosure". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
structural damage announcementrequired
necessityrequiredNational Auto Auction Association — § VIII.3 [VERIFY]
staleness90 daysNo instrument set an age limit for this claim, so the deploying organisation's own freshness policy binds at 90 days. It is not unlimited.
reputation classverifiedNational Auto Auction Association — § VIII.3 [VERIFY]
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "structural_damage_announcement". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
title statusrequired
necessityrequiredNational Auto Auction Association — Appendix I [VERIFY]
staleness30 daysNational Auto Auction Association — Appendix I — 30 Days [VERIFY]
reputation classverifiedNational Auto Auction Association — § VI.2 [VERIFY]
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "title_status". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
Every bar above was re-derived from the regulatory bindings inside this receipt’s hashed body, not from the configuration that produced it. A bar in grey is a setting no instrument made — the deploying organisation’s own default, which still binds and is not an absence. A bar position renders an ordinal on a declared ladder: it is a way to draw a control and to compare two settings on the same axis, and it is not a measurement. The value printed beside each bar is the authoritative one.
Whoever must act now
The person with the next action in their hands: the sourcing manager who must renew or not, the lister who must publish the lane, the dispatcher who must send an agent.
Sees one instruction and the reason in words. No score, no money, no signatures — nothing that turns a decision into a negotiation with whoever is waiting.
DO NOT PROCEED
vehicle:1G1ZD5ST7NF101234
Missing or out of date: odometer disclosure
Seven or eight fields, and not one of them is a number somebody can argue with. This person is not being asked to re-judge the evidence; somebody already did, and it is on the record.
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:8a33b40a3b6f99d07b8b5ae0f0a63b9b2565b19d8d61bde5afbe1fe45e8165a6 matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "OPERATOR",
"purpose": "Whoever must act on this decision now — release the goods, fund the draw, dispatch the agent, ship the title. Sees one instruction and the reason in plain words, and nothing that could be argued about while somebody waits.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:1467c3d75c407e079e57dc65710d5d14d479c5afde315160d564b42eb9c09885",
"entry_hash": "sha256:44e6bd7897a87343653270d93d4f24827ed23f4ce8226bd07248fcc8b6e34444",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:8a33b40a3b6f99d07b8b5ae0f0a63b9b2565b19d8d61bde5afbe1fe45e8165a6",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "remkt_SA_88213904",
"subject": "vehicle:1G1ZD5ST7NF101234"
},
"memory": {
"state_digest": "sha256:c8d663b0746a4cc472d42ef59b2fc9a4943a9dc6f8b025601674940af01deb86",
"ledger_head": "sha256:0fb2460da1ded5d43e3b3ec95784eb3bbeb8e9b35cc7ac65eec958b0d18e0d24",
"coverage_gaps": [
"vehicle:1G1ZD5ST7NF101234|odometer_disclosure"
]
},
"verdict": {
"value": "WITHHELD"
},
"release": {
"state": "WITHHELD_NO_EVIDENCE"
}
}
}Vendor / selling dealer
The party whose evidence was judged — the vendor under review, or the dealer consigning the vehicle.
Sees which of their own claims were required and by whose clause. Does not see the bank’s exposure, how the bank priced any shortfall, or any other party’s evidence in the same file.
What is outstanding on your file
- odometer disclosure — required by National Auto Auction Association, Appendix I [VERIFY]
| Claim | Required | Evidence class | Who | Age | Outcome |
|---|---|---|---|---|---|
| structural_damage_announcement | yes | VERIFIED | — | 2026-08-06 | admitted |
| title_status | yes | VERIFIED | — | 2026-08-07 | admitted |
| odometer_disclosure | no | SELLER-ASSERTED | — | 2026-08-06 | withheld |
| odometer_disclosure | yes | MISSING | — | 2026-08-08 | coverage gap |
The clause is here because it turns an argument into an errand. What is not here: what the bank had at stake, and whether anyone priced the shortfall.
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:0ceefabb1ef25ccf39b6ca3b1f52cf6bffdb955866413665d10be202064a6a18 matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "SUPPLIER",
"purpose": "The party whose evidence was judged. Sees every claim the decision required, which fell short, and the clause that required it — and nothing about what the buyer had at stake or how the buyer priced any shortfall. NOTE, because an earlier draft of this sentence was untrue: this projection carries the WHOLE inputs array, so where several parties supplied evidence for one decision, each of them sees all of it. Per-party scoping cannot be expressed by a commitment scheme with one digest per role, and claiming it anyway would be the kind of promise this file exists to stop making.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:1467c3d75c407e079e57dc65710d5d14d479c5afde315160d564b42eb9c09885",
"entry_hash": "sha256:44e6bd7897a87343653270d93d4f24827ed23f4ce8226bd07248fcc8b6e34444",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:0ceefabb1ef25ccf39b6ca3b1f52cf6bffdb955866413665d10be202064a6a18",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "remkt_SA_88213904",
"subject": "vehicle:1G1ZD5ST7NF101234",
"question": "May this vehicle be listed on the auction lane with a clean announcement set?"
},
"memory": {
"state_digest": "sha256:c8d663b0746a4cc472d42ef59b2fc9a4943a9dc6f8b025601674940af01deb86",
"ledger_head": "sha256:0fb2460da1ded5d43e3b3ec95784eb3bbeb8e9b35cc7ac65eec958b0d18e0d24",
"coverage_gaps": [
"vehicle:1G1ZD5ST7NF101234|odometer_disclosure"
]
},
"verdict": {
"value": "WITHHELD"
},
"inputs": [
{
"key": "vehicle:1G1ZD5ST7NF101234::structural_damage_announcement",
"provenance": "VERIFIED",
"observed_at": "2026-08-06T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "vehicle:1G1ZD5ST7NF101234::title_status",
"provenance": "VERIFIED",
"observed_at": "2026-08-07T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "vehicle:1G1ZD5ST7NF101234::odometer_disclosure",
"provenance": "SELLER-ASSERTED",
"observed_at": "2026-08-06T14:00:00.000Z",
"memory_status": "withheld",
"critical": false
},
{
"key": "vehicle:1G1ZD5ST7NF101234::odometer_disclosure",
"provenance": "MISSING",
"observed_at": "2026-08-08T14:00:00.000Z",
"memory_status": "coverage_gap",
"critical": true
}
],
"regulatory": {
"bindings": [
{
"claim": "odometer_disclosure",
"requirement": "never_waivable",
"value": true,
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "Appendix I [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "odometer_disclosure",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "Appendix I [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "structural_damage_announcement",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "§ VIII.3 [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "structural_damage_announcement",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "§ VIII.3 [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "title_status",
"requirement": "max_age_days",
"value": 30,
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "Appendix I — 30 Days [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "title_status",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "§ VI.2 [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "title_status",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "Appendix I [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
}
],
"applied": [
{
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"edition": "2026-06-01",
"citation": "§ V, VI, VIII, Appendix I [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3",
"entered_by": "actor:human:remarketing-lead",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"defaults": [
{
"claim": "odometer_disclosure",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"odometer_disclosure\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "structural_damage_announcement",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"structural_damage_announcement\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "title_status",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"title_status\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
}
}
}Bank examiner
An examiner under the interagency third-party guidance, or a market-conduct supervisor. Same position as a customs officer: a public mandate over the record and no claim on the commercial position.
The regulatory record in full — every instrument by authority, clause, edition and document digest, and every required claim with who supplied it and when. No exposure, no risk pricing, no confidence score, no quorum.
National Auto Auction Association
NAAA Arbitration Policy (In-Lane and Online)
§ V, VI, VIII, Appendix I [VERIFY] · edition 2026-06-01
document sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3
entered by actor:human:remarketing-lead
What each authority bound
| Claim | Requirement | Level | Bound by |
|---|---|---|---|
| odometer_disclosure | never waivable | true | National Auto Auction Association Appendix I [VERIFY] · NAAA Arbitration Policy (In-Lane and Online) |
| odometer_disclosure | required | true | National Auto Auction Association Appendix I [VERIFY] · NAAA Arbitration Policy (In-Lane and Online) |
| structural_damage_announcement | min class | VERIFIED | National Auto Auction Association § VIII.3 [VERIFY] · NAAA Arbitration Policy (In-Lane and Online) |
| structural_damage_announcement | required | true | National Auto Auction Association § VIII.3 [VERIFY] · NAAA Arbitration Policy (In-Lane and Online) |
| title_status | max age days | 30 | National Auto Auction Association Appendix I — 30 Days [VERIFY] · NAAA Arbitration Policy (In-Lane and Online) |
| title_status | min class | VERIFIED | National Auto Auction Association § VI.2 [VERIFY] · NAAA Arbitration Policy (In-Lane and Online) |
| title_status | required | true | National Auto Auction Association Appendix I [VERIFY] · NAAA Arbitration Policy (In-Lane and Online) |
Every required claim, and what was actually held
| Claim | Required | Evidence class | Who | Age | Outcome |
|---|---|---|---|---|---|
| structural_damage_announcement | yes | VERIFIED | actor:org:LAB-AIMEXPERT-INSP | 2026-08-06 | admitted |
| title_status | yes | VERIFIED | actor:sys:registry:aamva-nmvtis | 2026-08-07 | admitted |
| odometer_disclosure | no | SELLER-ASSERTED | actor:org:DEALER-4471-PIEDMONT | 2026-08-06 | withheld |
| odometer_disclosure | yes | MISSING | — | 2026-08-08 | coverage gap |
Absent from this copy, deliberatelyNo exposure figure, no risk pricing, no confidence score, no release quorum. The examiner’s claim is on the record of what was required and what was held — answered here completely, down to the digest of the document each requirement was configured from. The institution’s commercial position is a different question and this document does not answer it. The published verifier checks that on the content of the copy, not on the intentions of whoever produced it.
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:7e33d57eb00f7caa6d0323d91544120fbc4410996897768d0922044208f6bc9d matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "REGULATOR",
"purpose": "An official holding a public mandate over this record — a customs officer, a bank examiner, a market conduct supervisor. Sees the regulatory record in full: their own instrument named, every required claim and whether it was met, by whom, how old. No commercial figure of any kind.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:1467c3d75c407e079e57dc65710d5d14d479c5afde315160d564b42eb9c09885",
"entry_hash": "sha256:44e6bd7897a87343653270d93d4f24827ed23f4ce8226bd07248fcc8b6e34444",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:7e33d57eb00f7caa6d0323d91544120fbc4410996897768d0922044208f6bc9d",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "remkt_SA_88213904",
"subject": "vehicle:1G1ZD5ST7NF101234",
"question": "May this vehicle be listed on the auction lane with a clean announcement set?"
},
"memory": {
"state_digest": "sha256:c8d663b0746a4cc472d42ef59b2fc9a4943a9dc6f8b025601674940af01deb86",
"ledger_head": "sha256:0fb2460da1ded5d43e3b3ec95784eb3bbeb8e9b35cc7ac65eec958b0d18e0d24",
"coverage_gaps": [
"vehicle:1G1ZD5ST7NF101234|odometer_disclosure"
]
},
"data_horizon": "2026-08-08T14:00:00.000Z",
"verdict": {
"value": "WITHHELD"
},
"regulatory": {
"spec": "corobate:regulatory:2",
"resolved": true,
"applied": [
{
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"edition": "2026-06-01",
"citation": "§ V, VI, VIII, Appendix I [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3",
"entered_by": "actor:human:remarketing-lead",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"skipped": [],
"conflicts": [],
"bindings": [
{
"claim": "odometer_disclosure",
"requirement": "never_waivable",
"value": true,
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "Appendix I [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "odometer_disclosure",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "Appendix I [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "structural_damage_announcement",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "§ VIII.3 [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "structural_damage_announcement",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "§ VIII.3 [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "title_status",
"requirement": "max_age_days",
"value": 30,
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "Appendix I — 30 Days [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "title_status",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "§ VI.2 [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "title_status",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "Appendix I [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
}
],
"defaults": [
{
"claim": "odometer_disclosure",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"odometer_disclosure\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "structural_damage_announcement",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"structural_damage_announcement\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "title_status",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"title_status\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
},
"inputs": [
{
"key": "vehicle:1G1ZD5ST7NF101234::structural_damage_announcement",
"provenance": "VERIFIED",
"source": "LAB-AIMEXPERT-INSP:structural_damage_announcement",
"observed_at": "2026-08-06T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:org:LAB-AIMEXPERT-INSP"
},
{
"key": "vehicle:1G1ZD5ST7NF101234::title_status",
"provenance": "VERIFIED",
"source": "aamva-nmvtis:title_status",
"observed_at": "2026-08-07T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:sys:registry:aamva-nmvtis"
},
{
"key": "vehicle:1G1ZD5ST7NF101234::odometer_disclosure",
"provenance": "SELLER-ASSERTED",
"source": "DEALER-4471-PIEDMONT:odometer_disclosure",
"observed_at": "2026-08-06T14:00:00.000Z",
"critical": false,
"memory_status": "withheld",
"memory_actor": "actor:org:DEALER-4471-PIEDMONT"
},
{
"key": "vehicle:1G1ZD5ST7NF101234::odometer_disclosure",
"provenance": "MISSING",
"source": null,
"observed_at": "2026-08-08T14:00:00.000Z",
"critical": true,
"memory_status": "coverage_gap"
}
],
"crypto_suite": {
"spec": "corobate:suite:1",
"id": "CB-1-ES256-SHA256",
"receipt_digest": "sha256",
"chain_digest": "sha256",
"content_digest": "sha256",
"envelope_signature": "ES256",
"signature_curve": "P-256",
"canonicalisation": "attest-canon/2",
"quantum_resistant": false
}
}
}Third-party risk officer
The third-party risk function that owns the file.
The fullest internal view: every input, its class, its age, its score, the exposure, and every instrument in force.
VerdictWITHHELD
Confidence0%
bound by odometer_disclosure
Exposure$31,400
ReleaseWITHHELD_NO_EVIDENCE
Risk acceptedNONE
Every input the gate saw
| Claim | Required | Evidence class | Who | Age | Score | Outcome |
|---|---|---|---|---|---|---|
| structural_damage_announcement | yes | VERIFIED | actor:org:LAB-AIMEXPERT-INSP | 2d | 95% | admitted |
| title_status | yes | VERIFIED | actor:sys:registry:aamva-nmvtis | 1d | 95% | admitted |
| odometer_disclosure | no | SELLER-ASSERTED | actor:org:DEALER-4471-PIEDMONT | 2d | 50% | withheld |
| odometer_disclosure | yes | MISSING | — | 2026-08-08 | 0% | coverage gap |
Instruments in force
National Auto Auction Association
NAAA Arbitration Policy (In-Lane and Online)
§ V, VI, VIII, Appendix I [VERIFY] · edition 2026-06-01
document sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3
entered by actor:human:remarketing-lead
Why
- Coverage gap: no admissible memory for required claim(s) vehicle:1G1ZD5ST7NF101234|odometer_disclosure.
- Confidence 0.00% is bound by "vehicle:1G1ZD5ST7NF101234|odometer_disclosure".
- 1 memory was withheld from the context block: vehicle:1G1ZD5ST7NF101234|odometer_disclosure (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands).
- Thresholds for $31,400 exposure: approve 85%, caution 60%.
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:690f223e0c00841c5fbfd81497d532dfd19b450639c72e70fcc438bc8177e485 matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "COMPLIANCE",
"purpose": "The operator’s own compliance function. The fullest internal view: every gap, every instrument in force, the waivability of each requirement and who accepted what.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:1467c3d75c407e079e57dc65710d5d14d479c5afde315160d564b42eb9c09885",
"entry_hash": "sha256:44e6bd7897a87343653270d93d4f24827ed23f4ce8226bd07248fcc8b6e34444",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:690f223e0c00841c5fbfd81497d532dfd19b450639c72e70fcc438bc8177e485",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "remkt_SA_88213904",
"domain": "supply-chain",
"subject": "vehicle:1G1ZD5ST7NF101234",
"question": "May this vehicle be listed on the auction lane with a clean announcement set?"
},
"memory": {
"state_digest": "sha256:c8d663b0746a4cc472d42ef59b2fc9a4943a9dc6f8b025601674940af01deb86",
"ledger_head": "sha256:0fb2460da1ded5d43e3b3ec95784eb3bbeb8e9b35cc7ac65eec958b0d18e0d24",
"coverage_gaps": [
"vehicle:1G1ZD5ST7NF101234|odometer_disclosure"
],
"exposure": {
"usd": 31400,
"declared_by": "actor:human:remarketing-lead",
"ledger_seq": 3
},
"policy_digest": "sha256:a6b69b7d20f7fb04d522364af1d92992058b04a5835fcec9d1c9f2261c7ef636"
},
"data_horizon": "2026-08-08T14:00:00.000Z",
"verdict": {
"value": "WITHHELD",
"threshold_approve": 0.85,
"threshold_caution": 0.6,
"rule": "confidence>=threshold"
},
"confidence": {
"value": 0,
"method": "min-over-critical-inputs",
"bound_by": "vehicle:1G1ZD5ST7NF101234::odometer_disclosure"
},
"release": {
"required": false,
"required_by_tier": false,
"escalated_by_acceptance": false,
"risk_accepted": false,
"state": "WITHHELD_NO_EVIDENCE",
"code": "QUORUM_EVIDENCE_WITHHELD",
"reason": "the evidence did not clear the threshold for this exposure, so there is nothing to release. Signatures do not substitute for evidence, and this state is deliberately distinct from WITHHELD_PENDING_SIGNATURES: a reader must be able to tell \"the evidence is not there\" from \"the evidence is there and 0 of 2 people have signed\".",
"tier_floor_cents": 1000000000,
"exposure_usd_cents": 3140000,
"required_m": 2,
"declared_n": 3,
"floor_m": 2,
"distinct_signers": 0,
"superseded": 0,
"collapsed": 0,
"release_digest": "sha256:63ed3000844a7771aa253c52895c7c50eabf6350daeb270b2bb28ee2cbf3ff04",
"governance_digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
"governance_signed": true,
"counted_voices": [],
"signatures": [],
"ledger_seq": null
},
"acceptance": {
"state": "NONE",
"code": "ACCEPTANCE_NONE",
"reason": "no risk acceptance was presented for this decision. This is the ordinary case: a refusal is a refusal unless a named person has priced it.",
"permitted_basis": null,
"presented": 0,
"superseded": 0,
"expired": 0,
"gaps_not_covered": 0,
"coverage_gaps_in_force": [
"vehicle:1G1ZD5ST7NF101234|odometer_disclosure"
],
"evidentiary_digest": "sha256:63ed3000844a7771aa253c52895c7c50eabf6350daeb270b2bb28ee2cbf3ff04",
"margin_floor_bp": 100,
"authority_ceiling_cents": {
"SUPERVISOR": 1000000,
"MANAGER": 25000000,
"DIRECTOR": 500000000,
"OFFICER": 5000000000
},
"acceptances": [],
"escalated": false,
"live": false,
"ledger_seq": null
},
"regulatory": {
"spec": "corobate:regulatory:2",
"resolved": true,
"applied": [
{
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"edition": "2026-06-01",
"citation": "§ V, VI, VIII, Appendix I [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3",
"entered_by": "actor:human:remarketing-lead",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"skipped": [],
"conflicts": [],
"bindings": [
{
"claim": "odometer_disclosure",
"requirement": "never_waivable",
"value": true,
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "Appendix I [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "odometer_disclosure",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "Appendix I [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "structural_damage_announcement",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "§ VIII.3 [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "structural_damage_announcement",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "§ VIII.3 [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "title_status",
"requirement": "max_age_days",
"value": 30,
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "Appendix I — 30 Days [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "title_status",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "§ VI.2 [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "title_status",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "Appendix I [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
}
],
"defaults": [
{
"claim": "odometer_disclosure",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"odometer_disclosure\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "structural_damage_announcement",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"structural_damage_announcement\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "title_status",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"title_status\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
},
"reasons": [
"Coverage gap: no admissible memory for required claim(s) vehicle:1G1ZD5ST7NF101234|odometer_disclosure.",
"Confidence 0.00% is bound by \"vehicle:1G1ZD5ST7NF101234|odometer_disclosure\".",
"1 memory was withheld from the context block: vehicle:1G1ZD5ST7NF101234|odometer_disclosure (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands).",
"Thresholds for $31,400 exposure: approve 85%, caution 60%."
],
"inputs": [
{
"key": "vehicle:1G1ZD5ST7NF101234::structural_damage_announcement",
"value": "none-detected",
"provenance": "VERIFIED",
"source": "LAB-AIMEXPERT-INSP:structural_damage_announcement",
"observed_at": "2026-08-06T14:00:00.000Z",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted",
"memory_kind": "test_report",
"memory_actor": "actor:org:LAB-AIMEXPERT-INSP",
"memory_age_days": 2
},
{
"key": "vehicle:1G1ZD5ST7NF101234::title_status",
"value": "clear",
"provenance": "VERIFIED",
"source": "aamva-nmvtis:title_status",
"observed_at": "2026-08-07T14:00:00.000Z",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted",
"memory_kind": "test_report",
"memory_actor": "actor:sys:registry:aamva-nmvtis",
"memory_age_days": 1
},
{
"key": "vehicle:1G1ZD5ST7NF101234::odometer_disclosure",
"value": null,
"provenance": "SELLER-ASSERTED",
"source": "DEALER-4471-PIEDMONT:odometer_disclosure",
"observed_at": "2026-08-06T14:00:00.000Z",
"reliability": 0.5,
"critical": false,
"memory_status": "withheld",
"memory_kind": "invoice",
"memory_actor": "actor:org:DEALER-4471-PIEDMONT",
"memory_age_days": 2
},
{
"key": "vehicle:1G1ZD5ST7NF101234::odometer_disclosure",
"value": null,
"provenance": "MISSING",
"source": null,
"observed_at": "2026-08-08T14:00:00.000Z",
"reliability": 0,
"critical": true,
"memory_status": "coverage_gap"
}
],
"crypto_suite": {
"spec": "corobate:suite:1",
"id": "CB-1-ES256-SHA256",
"receipt_digest": "sha256",
"chain_digest": "sha256",
"content_digest": "sha256",
"envelope_signature": "ES256",
"signature_curve": "P-256",
"canonicalisation": "attest-canon/2",
"quantum_resistant": false
}
}
}Executive signer
A named signer on the release gate — the person whose signature is over the evidentiary state, not over the sentence.
What is at stake, what the evidence supports, what is missing, and the digest they are signing over.
You are being asked to sign
May this vehicle be listed on the auction lane with a clean announcement set?
At stake$31,400
Evidence saysWITHHELD
Release stateWITHHELD_NO_EVIDENCE
signing over evidentiary digest sha256:63ed3000844a7771aa253c52895c7c50eabf6350daeb270b2bb28ee2cbf3ff04
The signature is over the STATE OF THE EVIDENCE. Move one fact behind this decision and the digest moves and the signature stops counting — which is what makes it safe to collect signatures before everyone is in the room.
What is missing
- odometer disclosure
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:f769e71a6452628a1e481d08ab68dbb27df1d05bf5fdd3b7633f10b2e7bbaea7 matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "EXECUTIVE",
"purpose": "A named signer on the release gate. Sees what is at stake, what the evidence supports, who else has signed and what they are being asked to sign over.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:1467c3d75c407e079e57dc65710d5d14d479c5afde315160d564b42eb9c09885",
"entry_hash": "sha256:44e6bd7897a87343653270d93d4f24827ed23f4ce8226bd07248fcc8b6e34444",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:f769e71a6452628a1e481d08ab68dbb27df1d05bf5fdd3b7633f10b2e7bbaea7",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "remkt_SA_88213904",
"domain": "supply-chain",
"subject": "vehicle:1G1ZD5ST7NF101234",
"question": "May this vehicle be listed on the auction lane with a clean announcement set?"
},
"memory": {
"state_digest": "sha256:c8d663b0746a4cc472d42ef59b2fc9a4943a9dc6f8b025601674940af01deb86",
"ledger_head": "sha256:0fb2460da1ded5d43e3b3ec95784eb3bbeb8e9b35cc7ac65eec958b0d18e0d24",
"coverage_gaps": [
"vehicle:1G1ZD5ST7NF101234|odometer_disclosure"
],
"exposure": {
"usd": 31400,
"declared_by": "actor:human:remarketing-lead",
"ledger_seq": 3
}
},
"verdict": {
"value": "WITHHELD",
"threshold_approve": 0.85,
"threshold_caution": 0.6,
"rule": "confidence>=threshold"
},
"confidence": {
"value": 0,
"method": "min-over-critical-inputs",
"bound_by": "vehicle:1G1ZD5ST7NF101234::odometer_disclosure"
},
"release": {
"required": false,
"required_by_tier": false,
"escalated_by_acceptance": false,
"risk_accepted": false,
"state": "WITHHELD_NO_EVIDENCE",
"code": "QUORUM_EVIDENCE_WITHHELD",
"reason": "the evidence did not clear the threshold for this exposure, so there is nothing to release. Signatures do not substitute for evidence, and this state is deliberately distinct from WITHHELD_PENDING_SIGNATURES: a reader must be able to tell \"the evidence is not there\" from \"the evidence is there and 0 of 2 people have signed\".",
"tier_floor_cents": 1000000000,
"exposure_usd_cents": 3140000,
"required_m": 2,
"declared_n": 3,
"floor_m": 2,
"distinct_signers": 0,
"superseded": 0,
"collapsed": 0,
"release_digest": "sha256:63ed3000844a7771aa253c52895c7c50eabf6350daeb270b2bb28ee2cbf3ff04",
"governance_digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
"governance_signed": true,
"counted_voices": [],
"signatures": [],
"ledger_seq": null
},
"acceptance": {
"state": "NONE",
"code": "ACCEPTANCE_NONE",
"reason": "no risk acceptance was presented for this decision. This is the ordinary case: a refusal is a refusal unless a named person has priced it.",
"permitted_basis": null,
"presented": 0,
"superseded": 0,
"expired": 0,
"gaps_not_covered": 0,
"coverage_gaps_in_force": [
"vehicle:1G1ZD5ST7NF101234|odometer_disclosure"
],
"evidentiary_digest": "sha256:63ed3000844a7771aa253c52895c7c50eabf6350daeb270b2bb28ee2cbf3ff04",
"margin_floor_bp": 100,
"authority_ceiling_cents": {
"SUPERVISOR": 1000000,
"MANAGER": 25000000,
"DIRECTOR": 500000000,
"OFFICER": 5000000000
},
"acceptances": [],
"escalated": false,
"live": false,
"ledger_seq": null
},
"reasons": [
"Coverage gap: no admissible memory for required claim(s) vehicle:1G1ZD5ST7NF101234|odometer_disclosure.",
"Confidence 0.00% is bound by \"vehicle:1G1ZD5ST7NF101234|odometer_disclosure\".",
"1 memory was withheld from the context block: vehicle:1G1ZD5ST7NF101234|odometer_disclosure (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands).",
"Thresholds for $31,400 exposure: approve 85%, caution 60%."
],
"regulatory": {
"applied": [
{
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"edition": "2026-06-01",
"citation": "§ V, VI, VIII, Appendix I [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3",
"entered_by": "actor:human:remarketing-lead",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"conflicts": [],
"defaults": [
{
"claim": "odometer_disclosure",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"odometer_disclosure\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "structural_damage_announcement",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"structural_damage_announcement\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "title_status",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"title_status\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
},
"inputs": [
{
"key": "vehicle:1G1ZD5ST7NF101234::structural_damage_announcement",
"provenance": "VERIFIED",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted"
},
{
"key": "vehicle:1G1ZD5ST7NF101234::title_status",
"provenance": "VERIFIED",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted"
},
{
"key": "vehicle:1G1ZD5ST7NF101234::odometer_disclosure",
"provenance": "SELLER-ASSERTED",
"reliability": 0.5,
"critical": false,
"memory_status": "withheld"
},
{
"key": "vehicle:1G1ZD5ST7NF101234::odometer_disclosure",
"provenance": "MISSING",
"reliability": 0,
"critical": true,
"memory_status": "coverage_gap"
}
]
}
}Internal / external audit
Internal audit, or the external auditor testing the third-party programme.
Everything, plus the verifier’s own findings over the sealed record.
This view withholds nothing. What it adds is the 22 checks the published verifier ran over the sealed record behind every other view of this decision — recomputed at build time, not asserted.
| # | Check | Detail | |
|---|---|---|---|
| 1 | Content reproduces (JCS + SHA-256) | PASS | matches sha256:1467c3d75c407e079e57dc65710d5d14d479c5afde315160d564b42eb9c09885 |
| 2 | Hash chain links (entry = H(prev||content)) | PASS | head sha256:44e6bd7897a87343653270d93d4f24827ed23f4ce8226bd07248fcc8b6e34444 |
| 3 | Confidence gated by weakest critical input | PASS | min over critical = 0, bound_by vehicle:1G1ZD5ST7NF101234::odometer_disclosure (MISSING) |
| 3b | Verdict follows the threshold rule | PASS | 0 => WITHHELD; recorded WITHHELD |
| 4 | Point-in-time seal (no input past data_horizon) | PASS | all inputs <= 2026-08-08T14:00:00.000Z |
| 5 | Anchor covers the head, and the timestamp token re-reads | PASS | internally consistent; NO external anchor was requested — this is not a validated timestamp |
| 6 | Criteria travel with the receipt and reproduce | PASS | policy_body hashes to sha256:a6b69b7d20f7fb04d522364af1d92992058b04a5835fcec9d1c9f2261c7ef636 |
| 7 | Reliability re-derives from recorded evidence | PASS | all 4 inputs re-derive exactly |
| 8 | Outcome trials and lineage discounts re-derive | PASS | 3 input(s) re-derive: 0 credited outcome trial(s), 0 lineage-discounted corroboration(s); every reliability is at or under its class ceiling |
| 9 | Re-ingested receipts respect their weakest-input ceiling | PASS | no re-ingested receipts: every input rests on a primary observation |
| 10 | Release quorum re-derives | PASS | WITHHELD_NO_EVIDENCE - below the top exposure tier, no multi-party requirement applies |
| 11 | Risk acceptance re-derives | PASS | no risk acceptance: this decision stands or falls on its evidence |
| 12 | Observer credentials were not revoked as of observation time | PASS | revocation list 12 (0 entries, issued 2026-08-06T00:00:00.000Z, next update due 2026-08-13T00:00:00.000Z) reproduces; 2 observer signature(s) judged as of their own instant, none under a key revoked as compromised or retired by then |
| 13 | The cryptographic suite is named and is one this verifier implements | PASS | sealed under CB-1-ES256-SHA256 (ES256 / sha256, attest-canon/2); this verifier implements it; the suite states it is NOT quantum resistant |
| 14 | Regulatory bindings are attributed and were enforced | PASS | 7 binding(s) from 1 instrument(s) in force, each attributed to an authority, a citation and a document digest; 3 required claim(s) all reached the gate |
| 15 | Role-view commitments re-derive, and the customs view carries no money | PASS | 6 role-view commitment(s) re-derived from this receipt’s own body by this verifier’s independent projection; the REGULATOR view carries no commercial figure |
| 16 | AI-authored input was admitted only where an authority allowed it | PASS | 0 claim(s) carry a position on AI-authored evidence set by an authority and 3 carry a recorded default nobody set; 0 exclusion(s) and 0 corroboration-only rule(s) re-derived against this receipt's own admitted inputs; 0 admitted input(s) are AI-authored by their enrolled identity |
| 17 | State digest recomputes from the ledger alone | UNVERIFIABLE | NOT APPLICABLE — you supplied no ledger, so the state digest cannot be re-derived from anything. This receipt commits to the corpus the deciding system held at the instant it sealed, and that commitment is checked by recomputing it from the append-only ledger and comparing; with no ledger in hand there is no second artefact to recompute from. The receipt is not at fault and nothing here is missing from it. Obtain the ledger from the issuer and re-run with --ledger <file>, or verifyReceipt(r, {ledger}). Nothing here has failed and nothing here has passed. |
| 18 | Registry membership re-derives for every key relied on | PASS | all 2 key(s) relied on re-derive to the entries root registry v7 committed to and the trust root signed |
| 20 | Geometric support re-derives, and an unevaluated record is not a supported one | PASS | no authority bound a metric to any claim on this receipt, so no geometric test applied. A claim nobody bound a metric to is not a claim about geometry, and this is a stated absence rather than a silent one |
| 19 | The cause of every uncovered requirement re-derives | PASS | all 1 uncovered requirement(s) re-derive their cause from this receipt's own rows. What notice is ADEQUATE is not decided here: this check establishes what the record says and that the record agrees with itself. |
| 21 | The sealing party is the one you were told to expect | UNVERIFIABLE | NOT APPLICABLE — you supplied no trust bundle, so nothing here establishes who sealed this. Identities 1 to 20 prove that this document agrees with itself; not one of them asks whose trust root it was sealed under, and a document that agrees with itself about a decision nobody made agrees with itself perfectly. Obtain the issuer's corobate:trust-bundle:1 out of band, confirm its spoken fingerprint with them by voice, and re-run with --trust-bundle <file> --expect-fingerprint <what you heard>. Nothing here has failed and nothing here has passed. |
The scoped copy itself — complete for this role
FAITHFUL digest sha256:aa00a403b7e24340d02ab5cd5abefd3b0986da6e7cd85bd72d912b40ea003e51 matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "AUDITOR",
"purpose": "An external assessor. Sees the complete sealed record: this view withholds nothing and exists so the identity case is a case rather than an exception.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:1467c3d75c407e079e57dc65710d5d14d479c5afde315160d564b42eb9c09885",
"entry_hash": "sha256:44e6bd7897a87343653270d93d4f24827ed23f4ce8226bd07248fcc8b6e34444",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:aa00a403b7e24340d02ab5cd5abefd3b0986da6e7cd85bd72d912b40ea003e51",
"withheld": {
"anything_withheld": false,
"note": "Nothing outside the seal was removed for this role."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"engine": {
"name": "corobate-memory",
"version": "1.0.0"
},
"decision": {
"id": "remkt_SA_88213904",
"domain": "supply-chain",
"subject": "vehicle:1G1ZD5ST7NF101234",
"question": "May this vehicle be listed on the auction lane with a clean announcement set?"
},
"issued_at": "2026-08-08T14:00:00.000Z",
"data_horizon": "2026-08-08T14:00:00.000Z",
"inputs": [
{
"key": "vehicle:1G1ZD5ST7NF101234::structural_damage_announcement",
"value": "none-detected",
"provenance": "VERIFIED",
"source": "LAB-AIMEXPERT-INSP:structural_damage_announcement",
"observed_at": "2026-08-06T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.95,
"critical": true,
"memory_id": "mem_8816a0f43cd6",
"memory_status": "admitted",
"memory_kind": "test_report",
"memory_actor": "actor:org:LAB-AIMEXPERT-INSP",
"memory_age_days": 2,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:08dd13e811d8421e01b1ca0ddea0e9faf5eb977ec5f0f4cdfea21f2f6603aadc",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": "VERIFIED",
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_ddddd0528f5552f4",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 2,
"max_age_days": 180,
"house_max_age_days": 180,
"instrument_max_age_days": null,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"min_class_floor": "VERIFIED",
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[VERIFIED · r=95.0% · 2d · LAB-AIMEXPERT-INSP:structural_damage_announcement] vehicle:1G1ZD5ST7NF101234 / structural_damage_announcement: none-detected"
},
{
"key": "vehicle:1G1ZD5ST7NF101234::title_status",
"value": "clear",
"provenance": "VERIFIED",
"source": "aamva-nmvtis:title_status",
"observed_at": "2026-08-07T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.95,
"critical": true,
"memory_id": "mem_3821eedaa2b0",
"memory_status": "admitted",
"memory_kind": "test_report",
"memory_actor": "actor:sys:registry:aamva-nmvtis",
"memory_age_days": 1,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:3b81ac5ccd05a5b726216c2e6b22ff1b1baad26fc06ce17033c69e0c0d02a5b8",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": "VERIFIED",
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_561bd130b61f1f01",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 1,
"max_age_days": 30,
"house_max_age_days": 180,
"instrument_max_age_days": 30,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"min_class_floor": "VERIFIED",
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[VERIFIED · r=95.0% · 1d · aamva-nmvtis:title_status] vehicle:1G1ZD5ST7NF101234 / title_status: clear"
},
{
"key": "vehicle:1G1ZD5ST7NF101234::odometer_disclosure",
"value": null,
"provenance": "SELLER-ASSERTED",
"source": "DEALER-4471-PIEDMONT:odometer_disclosure",
"observed_at": "2026-08-06T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.5,
"critical": false,
"memory_id": "mem_f0a3d82b79e9",
"memory_status": "withheld",
"memory_kind": "invoice",
"memory_actor": "actor:org:DEALER-4471-PIEDMONT",
"memory_age_days": 2,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:2d85054d411b73f35bc9a706fb8279c6071347ca3fef890ab500dfda0a68c873",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": null,
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": false,
"observer_auth_code": "NO_ENVELOPE",
"observer_key_id": null,
"attestation": null,
"derivation": {
"provenance": "SELLER-ASSERTED",
"ceiling_bp": 5000,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 2,
"max_age_days": 90,
"house_max_age_days": 90,
"instrument_max_age_days": null,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
]
},
{
"key": "vehicle:1G1ZD5ST7NF101234::odometer_disclosure",
"value": null,
"provenance": "MISSING",
"source": null,
"observed_at": "2026-08-08T14:00:00.000Z",
"reliability": 0,
"critical": true,
"memory_status": "coverage_gap",
"gap_cause": "EVIDENCE_PRESENTED_FAILED",
"gap_request": null,
"gap_origin": "BUSINESS_EVIDENCE",
"gap_conditions": []
}
],
"serialization": {
"algorithm": "RFC8785-JCS",
"hash": "sha256"
},
"crypto_suite": {
"spec": "corobate:suite:1",
"id": "CB-1-ES256-SHA256",
"receipt_digest": "sha256",
"chain_digest": "sha256",
"content_digest": "sha256",
"envelope_signature": "ES256",
"signature_curve": "P-256",
"canonicalisation": "attest-canon/2",
"quantum_resistant": false
},
"confidence": {
"value": 0,
"method": "min-over-critical-inputs",
"bound_by": "vehicle:1G1ZD5ST7NF101234::odometer_disclosure"
},
"verdict": {
"value": "WITHHELD",
"threshold_approve": 0.85,
"threshold_caution": 0.6,
"rule": "confidence>=threshold"
},
"release": {
"required": false,
"required_by_tier": false,
"escalated_by_acceptance": false,
"risk_accepted": false,
"state": "WITHHELD_NO_EVIDENCE",
"code": "QUORUM_EVIDENCE_WITHHELD",
"reason": "the evidence did not clear the threshold for this exposure, so there is nothing to release. Signatures do not substitute for evidence, and this state is deliberately distinct from WITHHELD_PENDING_SIGNATURES: a reader must be able to tell \"the evidence is not there\" from \"the evidence is there and 0 of 2 people have signed\".",
"tier_floor_cents": 1000000000,
"exposure_usd_cents": 3140000,
"required_m": 2,
"declared_n": 3,
"floor_m": 2,
"distinct_signers": 0,
"superseded": 0,
"collapsed": 0,
"release_digest": "sha256:63ed3000844a7771aa253c52895c7c50eabf6350daeb270b2bb28ee2cbf3ff04",
"governance_digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
"governance_signed": true,
"counted_voices": [],
"signatures": [],
"ledger_seq": null
},
"acceptance": {
"state": "NONE",
"code": "ACCEPTANCE_NONE",
"reason": "no risk acceptance was presented for this decision. This is the ordinary case: a refusal is a refusal unless a named person has priced it.",
"permitted_basis": null,
"presented": 0,
"superseded": 0,
"expired": 0,
"gaps_not_covered": 0,
"coverage_gaps_in_force": [
"vehicle:1G1ZD5ST7NF101234|odometer_disclosure"
],
"evidentiary_digest": "sha256:63ed3000844a7771aa253c52895c7c50eabf6350daeb270b2bb28ee2cbf3ff04",
"margin_floor_bp": 100,
"authority_ceiling_cents": {
"SUPERVISOR": 1000000,
"MANAGER": 25000000,
"DIRECTOR": 500000000,
"OFFICER": 5000000000
},
"acceptances": [],
"escalated": false,
"live": false,
"ledger_seq": null
},
"regulatory": {
"spec": "corobate:regulatory:2",
"resolved": true,
"applied": [
{
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"edition": "2026-06-01",
"citation": "§ V, VI, VIII, Appendix I [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3",
"entered_by": "actor:human:remarketing-lead",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"skipped": [],
"conflicts": [],
"bindings": [
{
"claim": "odometer_disclosure",
"requirement": "never_waivable",
"value": true,
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "Appendix I [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "odometer_disclosure",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "Appendix I [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "structural_damage_announcement",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "§ VIII.3 [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "structural_damage_announcement",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "§ VIII.3 [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "title_status",
"requirement": "max_age_days",
"value": 30,
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "Appendix I — 30 Days [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "title_status",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "§ VI.2 [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "title_status",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "National Auto Auction Association",
"instrument": "NAAA Arbitration Policy (In-Lane and Online)",
"instrument_id": "naaa-arbitration-policy",
"version": 1,
"edition": "2026-06-01",
"citation": "Appendix I [VERIFY]",
"source_digest": "sha256:c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3c3"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
}
],
"defaults": [
{
"claim": "odometer_disclosure",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"odometer_disclosure\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "structural_damage_announcement",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"structural_damage_announcement\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "title_status",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"title_status\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
},
"reasons": [
"Coverage gap: no admissible memory for required claim(s) vehicle:1G1ZD5ST7NF101234|odometer_disclosure.",
"Confidence 0.00% is bound by \"vehicle:1G1ZD5ST7NF101234|odometer_disclosure\".",
"1 memory was withheld from the context block: vehicle:1G1ZD5ST7NF101234|odometer_disclosure (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands).",
"Thresholds for $31,400 exposure: approve 85%, caution 60%."
],
"memory": {
"layer": "capture->store->recall->act",
"ledger_head": "sha256:0fb2460da1ded5d43e3b3ec95784eb3bbeb8e9b35cc7ac65eec958b0d18e0d24",
"ledger_entries": 5,
"context_digest": null,
"context_memory_ids": [],
"state_digest": "sha256:c8d663b0746a4cc472d42ef59b2fc9a4943a9dc6f8b025601674940af01deb86",
"retrieval_method": "idf-lexical",
"corpus_size": 3,
"considered": 3,
"admitted": 2,
"withheld": 1,
"not_considered": 0,
"coverage_gaps": [
"vehicle:1G1ZD5ST7NF101234|odometer_disclosure"
],
"exposure": {
"usd": 31400,
"declared_by": "actor:human:remarketing-lead",
"ledger_seq": 3
},
"salience_policy": {
"half_life_days": 90,
"grace_days": 7,
"access_boost_bp": 500,
"access_boost_cap_bp": 2500,
"relevance_weight_bp": 6000,
"recency_weight_bp": 3000,
"usage_weight_bp": 1000,
"context_cap": 12,
"method": "idf-lexical",
"candidate_list_digest": "sha256:a327ae1767e18428a207108f2d3b7428a3ca5851dc2be2adb40aae1997c6a2c9",
"note": "salience orders retrieval only; it never contributes to reliability"
},
"policy_digest": "sha256:a6b69b7d20f7fb04d522364af1d92992058b04a5835fcec9d1c9f2261c7ef636",
"policy_body": {
"class_ceiling_bp": {
"VERIFIED": 9500,
"MODELED": 8000,
"SELLER-ASSERTED": 5000,
"MISSING": 0
},
"actor_class_ceiling": [
[
"^actor:ai:",
"MODELED"
],
[
"^actor:agent:",
"MODELED"
],
[
"^actor:human:",
"SELLER-ASSERTED"
],
[
"^actor:org:LAB-",
"VERIFIED"
],
[
"^actor:org:CERT-",
"VERIFIED"
],
[
"^actor:org:",
"SELLER-ASSERTED"
],
[
"^actor:sys:registry:",
"VERIFIED"
],
[
"^actor:sys:sensor:",
"VERIFIED"
],
[
"^actor:sys:",
"MODELED"
]
],
"freshness_cap_bp": 4000,
"max_age_days": {
"telemetry": 1,
"price": 7,
"status": 14,
"certificate": 365,
"test_report": 180,
"filing": 90,
"transcript": 120,
"highlight": 365,
"voice_note": 120,
"note": 365,
"preference": 540,
"decision": 1825,
"receipt": 365,
"default": 90
},
"wilson_z_milli": 1960,
"min_track_n": 5,
"exposure_tiers_bp": [
[
1000000000,
9500,
8000
],
[
100000000,
9000,
7000
],
[
1000000,
8500,
6000
],
[
0,
8000,
5000
]
],
"max_context_memories": 12,
"contradiction_resolve_margin": 2,
"salience": {
"half_life_days": 90,
"grace_days": 7,
"access_boost_bp": 500,
"access_boost_cap_bp": 2500,
"relevance_weight_bp": 6000,
"recency_weight_bp": 3000,
"usage_weight_bp": 1000
}
},
"observer_auth": {
"mode": "required",
"registry_version": 7,
"registry_digest": "sha256:bb1bffa0668fd3ddcc24d30288a62fe52c873bba1396a245c138765263ca68e4",
"entries_root": "sha256:052a44853cd278e4d33a14e709d108aadf2b2079177402c408b935a574b7b8b1",
"memberships": [
{
"key_id": "k_561bd130b61f1f01",
"index": 4,
"entry": {
"actor": "actor:sys:registry:aamva-nmvtis",
"class": "VERIFIED",
"kind": "system",
"key_id": "k_561bd130b61f1f01",
"jwk": {
"kty": "EC",
"crv": "P-256",
"x": "ESFGD_W32cUgx_G36Vymmvt0m3S4F-UdDnv9nm-aIS0",
"y": "nDXpYxv0BE1LPFiZM_DRZ3QnlY5m2ZZIOVIB5PPIdZc"
},
"valid_from": "2025-01-01T00:00:00.000Z",
"valid_to": "2027-06-01T00:00:00.000Z"
},
"path": [
{
"side": "right",
"sibling": "sha256:70057dcf9a9c7216d23ea0095f0c3432e409a6e755aa496895fe355bcd747e86"
},
{
"side": "right",
"sibling": "sha256:36eb73c9aa8175028706fd11c7981df6bb6fd33dc0acc6d7a10e179c7bf5f295"
},
{
"side": "left",
"sibling": "sha256:dcea5dab73759e138fad2cd13ff65c0a9fbd8172beab6f9eb480d802f741d0b6"
},
{
"side": "right",
"sibling": "sha256:b0d6d854c0fbace92cd9b0e1b8f05851c2a6f51da82f934b55f3391095b9e3c6"
}
]
},
{
"key_id": "k_ddddd0528f5552f4",
"index": 3,
"entry": {
"actor": "actor:org:LAB-AIMEXPERT-INSP",
"class": "VERIFIED",
"kind": "org",
"key_id": "k_ddddd0528f5552f4",
"jwk": {
"kty": "EC",
"crv": "P-256",
"x": "hRSh-jMWTBTLQ-GpTDRj0u1dzSAmdFGKKU39r1UWMgg",
"y": "iX7oB2LZpVOTQYGMW316-52pKGxPOL5_n1OO2p9rxIw"
},
"valid_from": "2025-01-01T00:00:00.000Z",
"valid_to": "2027-06-01T00:00:00.000Z"
},
"path": [
{
"side": "left",
"sibling": "sha256:87c4ecef046b21524f9b038ab026e2469a7e6bb5e75a0fafbf6572865ff2185c"
},
{
"side": "left",
"sibling": "sha256:5602143d7c72d4e0e11de6cd2c93df30ff30c7dc7fe82f3b95cd38b2adda530b"
},
{
"side": "right",
"sibling": "sha256:4f3031707d2416b5567eb739ca5d25f2cc36acc2bd8d026bf221c367179718a0"
},
{
"side": "right",
"sibling": "sha256:b0d6d854c0fbace92cd9b0e1b8f05851c2a6f51da82f934b55f3391095b9e3c6"
}
]
}
],
"memberships_unproven": [],
"revocation": {
"source": "SIGNED_LIST",
"digest": "sha256:739c516c92fbb8d46951fc274ec199896004081698b412180c096074bd59b884",
"sequence": 12,
"registry_version": 7,
"issued_at": "2026-08-06T00:00:00.000Z",
"next_update_due": "2026-08-13T00:00:00.000Z",
"entry_count": 0,
"body": {
"sequence": 12,
"registry_version": 7,
"issuer": {
"name": "Ally-shaped demonstration trust root",
"key_id": "k_d2a5a08e98bed6cd"
},
"issued_at": "2026-08-06T00:00:00.000Z",
"next_update_due": "2026-08-13T00:00:00.000Z",
"entries": [],
"spec": "corobate:revocation-list:1"
}
}
},
"governance": {
"digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
"signed": true,
"actor_trust": "FLOOR_TO_SELLER_ASSERTED",
"outcome_trial_weight": 1,
"max_reingest_depth": 3,
"release_quorum_m": 2,
"release_quorum_n": 3,
"risk_acceptance_margin_bp": 500,
"risk_acceptance_max_days": 30,
"risk_acceptance_authority_cents": {
"SUPERVISOR": 1000000,
"MANAGER": 25000000,
"DIRECTOR": 500000000,
"OFFICER": 5000000000
},
"template_author_roles": [
"MANAGER",
"DIRECTOR",
"OFFICER"
]
},
"observers_attested": 2,
"outcomes": {
"attestations_counted": 0,
"attestations_recorded": 0,
"records_with_outcomes": 0
},
"lineage": {
"corroborations_counted": 0,
"corroborations_discounted": 0,
"records_with_discounted_corroborations": 0
},
"reingest": {
"records": 0,
"max_depth": 0,
"weakest_class": null,
"chain_weakest_bp": 10000,
"chain": []
},
"template": null
}
}
}Repossession, property inspection and door-knock collections. The controls that matter are a background check and a motor-vehicle record, not a certificate of origin — and this file is in the state most long-tail vendor files are actually in: everything current and independently attested except one report that has quietly gone out of date. The cell in the spreadsheet is filled in. The date on it is not.
- Subject
- supplier:MERIDIAN-FIELD-SVCS
- Question
- May Meridian Field Services be dispatched to consumer addresses this quarter?
- Exposure
- $95,000
- Instruments
- Ally — Supply Chain
- Outcome
- WITHHELD — the action is not permitted; outstanding: soc2 type2 report
- Receipt
- sha256:f88cd37636c8715070d28f59eaff875af8b09fa51c584d884849cf1d26e384a9
The gate variables this decision ran under — a dial per question, read back off the sealed receipt
dr test certificationrequired
necessityrequiredAlly — Supply Chain — § 11.6.1 [VERIFY]
staleness365 daysAlly — Supply Chain — § 11.6.1 [VERIFY]
reputation class—No class floor was set, so the seller's own assertion is admissible for this claim up to the ceiling that class carries. That is a setting, not an absence.
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "dr_test_certification". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
incident response plan testrequired
necessityrequiredAlly — Supply Chain — § 8.7.2 [VERIFY]
staleness90 daysNo instrument set an age limit for this claim, so the deploying organisation's own freshness policy binds at 90 days. It is not unlimited.
reputation class—No class floor was set, so the seller's own assertion is admissible for this claim up to the ceiling that class carries. That is a setting, not an absence.
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "incident_response_plan_test". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
penetration testrequired
necessityrequiredAlly — Supply Chain — § 8.9.1 [VERIFY]
staleness365 daysAlly — Supply Chain — § 8.9.1 [VERIFY]
reputation classverifiedAlly — Supply Chain — § 8.9.1 [VERIFY]
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "penetration_test". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
privacy breach notification 24hrequired never waivable
necessityrequired never waivableAlly — Supply Chain — § 9.7.1 [VERIFY]
staleness90 daysNo instrument set an age limit for this claim, so the deploying organisation's own freshness policy binds at 90 days. It is not unlimited.
reputation class—No class floor was set, so the seller's own assertion is admissible for this claim up to the ceiling that class carries. That is a setting, not an absence.
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "privacy_breach_notification_24h". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
soc2 type2 reportrequired
necessityrequiredAlly — Supply Chain — § 13.1.6 [VERIFY]
staleness365 daysAlly — Supply Chain — § 13.1.5 [VERIFY]
reputation classverifiedAlly — Supply Chain — § 13.1.6 [VERIFY]
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "soc2_type2_report". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
subcontractor inventoryrequired
necessityrequiredAlly — Supply Chain — § 13.1.1 [VERIFY]
staleness90 daysNo instrument set an age limit for this claim, so the deploying organisation's own freshness policy binds at 90 days. It is not unlimited.
reputation class—No class floor was set, so the seller's own assertion is admissible for this claim up to the ceiling that class carries. That is a setting, not an absence.
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "subcontractor_inventory". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
Every bar above was re-derived from the regulatory bindings inside this receipt’s hashed body, not from the configuration that produced it. A bar in grey is a setting no instrument made — the deploying organisation’s own default, which still binds and is not an absence. A bar position renders an ordinal on a declared ladder: it is a way to draw a control and to compare two settings on the same axis, and it is not a measurement. The value printed beside each bar is the authoritative one.
Whoever must act now
The person with the next action in their hands: the sourcing manager who must renew or not, the lister who must publish the lane, the dispatcher who must send an agent.
Sees one instruction and the reason in words. No score, no money, no signatures — nothing that turns a decision into a negotiation with whoever is waiting.
DO NOT PROCEED
supplier:MERIDIAN-FIELD-SVCS
Missing or out of date: soc2 type2 report
Seven or eight fields, and not one of them is a number somebody can argue with. This person is not being asked to re-judge the evidence; somebody already did, and it is on the record.
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:90db278611a367ed7d8a727c85b6ef1e0fba51ec9b89bf3cd47619902e2d1ce2 matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "OPERATOR",
"purpose": "Whoever must act on this decision now — release the goods, fund the draw, dispatch the agent, ship the title. Sees one instruction and the reason in plain words, and nothing that could be argued about while somebody waits.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:f88cd37636c8715070d28f59eaff875af8b09fa51c584d884849cf1d26e384a9",
"entry_hash": "sha256:8c350f1e9527843e5052f6894244f322398db4818ed08e6efd8910dd7a750800",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:90db278611a367ed7d8a727c85b6ef1e0fba51ec9b89bf3cd47619902e2d1ce2",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "tprm_MERIDIAN_2026Q3",
"subject": "supplier:MERIDIAN-FIELD-SVCS"
},
"memory": {
"state_digest": "sha256:b9e21f0d1dad1ca50001683b83b9a03d7a61286c22099d0cae1ccf0c905f9297",
"ledger_head": "sha256:2fe809a8769e3c0fe115196323cae859e6a2d3d55db59279eefd39143e655d4c",
"coverage_gaps": [
"supplier:MERIDIAN-FIELD-SVCS|soc2_type2_report"
]
},
"verdict": {
"value": "WITHHELD"
},
"release": {
"state": "WITHHELD_NO_EVIDENCE"
}
}
}Vendor / selling dealer
The party whose evidence was judged — the vendor under review, or the dealer consigning the vehicle.
Sees which of their own claims were required and by whose clause. Does not see the bank’s exposure, how the bank priced any shortfall, or any other party’s evidence in the same file.
What is outstanding on your file
- soc2 type2 report — required by Ally — Supply Chain, § 13.1.6 [VERIFY]
| Claim | Required | Evidence class | Who | Age | Outcome |
|---|---|---|---|---|---|
| penetration_test | yes | VERIFIED | — | 2026-05-30 | admitted |
| subcontractor_inventory | yes | VERIFIED | — | 2026-01-20 | admitted |
| privacy_breach_notification_24h | yes | VERIFIED | — | 2026-01-20 | admitted |
| dr_test_certification | yes | VERIFIED | — | 2026-01-10 | admitted |
| incident_response_plan_test | yes | VERIFIED | — | 2026-01-10 | admitted |
| background_check_type_c | no | VERIFIED | — | 2026-07-19 | admitted |
| soc2_type2_report | no | VERIFIED | — | 2025-06-03 | withheld |
| soc2_type2_report | yes | MISSING | — | 2026-08-08 | coverage gap |
The clause is here because it turns an argument into an errand. What is not here: what the bank had at stake, and whether anyone priced the shortfall.
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:dc4db23130ab20329c9d88a38d124b1b35fd4fe9287b112efd14cee808182390 matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "SUPPLIER",
"purpose": "The party whose evidence was judged. Sees every claim the decision required, which fell short, and the clause that required it — and nothing about what the buyer had at stake or how the buyer priced any shortfall. NOTE, because an earlier draft of this sentence was untrue: this projection carries the WHOLE inputs array, so where several parties supplied evidence for one decision, each of them sees all of it. Per-party scoping cannot be expressed by a commitment scheme with one digest per role, and claiming it anyway would be the kind of promise this file exists to stop making.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:f88cd37636c8715070d28f59eaff875af8b09fa51c584d884849cf1d26e384a9",
"entry_hash": "sha256:8c350f1e9527843e5052f6894244f322398db4818ed08e6efd8910dd7a750800",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:dc4db23130ab20329c9d88a38d124b1b35fd4fe9287b112efd14cee808182390",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "tprm_MERIDIAN_2026Q3",
"subject": "supplier:MERIDIAN-FIELD-SVCS",
"question": "May Meridian Field Services be dispatched to consumer addresses this quarter?"
},
"memory": {
"state_digest": "sha256:b9e21f0d1dad1ca50001683b83b9a03d7a61286c22099d0cae1ccf0c905f9297",
"ledger_head": "sha256:2fe809a8769e3c0fe115196323cae859e6a2d3d55db59279eefd39143e655d4c",
"coverage_gaps": [
"supplier:MERIDIAN-FIELD-SVCS|soc2_type2_report"
]
},
"verdict": {
"value": "WITHHELD"
},
"inputs": [
{
"key": "supplier:MERIDIAN-FIELD-SVCS::penetration_test",
"provenance": "VERIFIED",
"observed_at": "2026-05-30T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::subcontractor_inventory",
"provenance": "VERIFIED",
"observed_at": "2026-01-20T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::privacy_breach_notification_24h",
"provenance": "VERIFIED",
"observed_at": "2026-01-20T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::dr_test_certification",
"provenance": "VERIFIED",
"observed_at": "2026-01-10T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::incident_response_plan_test",
"provenance": "VERIFIED",
"observed_at": "2026-01-10T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::background_check_type_c",
"provenance": "VERIFIED",
"observed_at": "2026-07-19T14:00:00.000Z",
"memory_status": "admitted",
"critical": false
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::soc2_type2_report",
"provenance": "VERIFIED",
"observed_at": "2025-06-03T14:00:00.000Z",
"memory_status": "withheld",
"critical": false
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::soc2_type2_report",
"provenance": "MISSING",
"observed_at": "2026-08-08T14:00:00.000Z",
"memory_status": "coverage_gap",
"critical": true
}
],
"regulatory": {
"bindings": [
{
"claim": "dr_test_certification",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "dr_test_certification",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "incident_response_plan_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.7.2 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "never_waivable",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.5 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "subcontractor_inventory",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
}
],
"applied": [
{
"instrument_id": "ally-third-party-requirements",
"version": 5,
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"edition": "V.5.0",
"citation": "§ 8, 9, 11, 13 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"defaults": [
{
"claim": "dr_test_certification",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"dr_test_certification\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "incident_response_plan_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"incident_response_plan_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "penetration_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"penetration_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"privacy_breach_notification_24h\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "soc2_type2_report",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"soc2_type2_report\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "subcontractor_inventory",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"subcontractor_inventory\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
}
}
}Bank examiner
An examiner under the interagency third-party guidance, or a market-conduct supervisor. Same position as a customs officer: a public mandate over the record and no claim on the commercial position.
The regulatory record in full — every instrument by authority, clause, edition and document digest, and every required claim with who supplied it and when. No exposure, no risk pricing, no confidence score, no quorum.
Ally — Supply Chain
Third Party Requirements V.5.0
§ 8, 9, 11, 13 [VERIFY] · edition V.5.0
document sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1
entered by actor:human:tprm-officer
What each authority bound
| Claim | Requirement | Level | Bound by |
|---|---|---|---|
| dr_test_certification | max age days | 365 | Ally — Supply Chain § 11.6.1 [VERIFY] · Third Party Requirements V.5.0 |
| dr_test_certification | required | true | Ally — Supply Chain § 11.6.1 [VERIFY] · Third Party Requirements V.5.0 |
| incident_response_plan_test | required | true | Ally — Supply Chain § 8.7.2 [VERIFY] · Third Party Requirements V.5.0 |
| penetration_test | max age days | 365 | Ally — Supply Chain § 8.9.1 [VERIFY] · Third Party Requirements V.5.0 |
| penetration_test | min class | VERIFIED | Ally — Supply Chain § 8.9.1 [VERIFY] · Third Party Requirements V.5.0 |
| penetration_test | required | true | Ally — Supply Chain § 8.9.1 [VERIFY] · Third Party Requirements V.5.0 |
| privacy_breach_notification_24h | never waivable | true | Ally — Supply Chain § 9.7.1 [VERIFY] · Third Party Requirements V.5.0 |
| privacy_breach_notification_24h | required | true | Ally — Supply Chain § 9.7.1 [VERIFY] · Third Party Requirements V.5.0 |
| soc2_type2_report | max age days | 365 | Ally — Supply Chain § 13.1.5 [VERIFY] · Third Party Requirements V.5.0 |
| soc2_type2_report | min class | VERIFIED | Ally — Supply Chain § 13.1.6 [VERIFY] · Third Party Requirements V.5.0 |
| soc2_type2_report | required | true | Ally — Supply Chain § 13.1.6 [VERIFY] · Third Party Requirements V.5.0 |
| subcontractor_inventory | required | true | Ally — Supply Chain § 13.1.1 [VERIFY] · Third Party Requirements V.5.0 |
Every required claim, and what was actually held
| Claim | Required | Evidence class | Who | Age | Outcome |
|---|---|---|---|---|---|
| penetration_test | yes | VERIFIED | actor:org:LAB-BISHOPFOX-PEN | 2026-05-30 | admitted |
| subcontractor_inventory | yes | VERIFIED | actor:sys:registry:contract-repository | 2026-01-20 | admitted |
| privacy_breach_notification_24h | yes | VERIFIED | actor:sys:registry:contract-repository | 2026-01-20 | admitted |
| dr_test_certification | yes | VERIFIED | actor:org:CERT-DELOITTE-SOC | 2026-01-10 | admitted |
| incident_response_plan_test | yes | VERIFIED | actor:org:CERT-DELOITTE-SOC | 2026-01-10 | admitted |
| background_check_type_c | no | VERIFIED | actor:org:CERT-CHECKR-BGC | 2026-07-19 | admitted |
| soc2_type2_report | no | VERIFIED | actor:org:CERT-DELOITTE-SOC | 2025-06-03 | withheld |
| soc2_type2_report | yes | MISSING | — | 2026-08-08 | coverage gap |
Absent from this copy, deliberatelyNo exposure figure, no risk pricing, no confidence score, no release quorum. The examiner’s claim is on the record of what was required and what was held — answered here completely, down to the digest of the document each requirement was configured from. The institution’s commercial position is a different question and this document does not answer it. The published verifier checks that on the content of the copy, not on the intentions of whoever produced it.
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:b3a2cc70e0b0d2cf3f475bc54af8c6b9aa3313774a4daec081bababab8b4bd8c matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "REGULATOR",
"purpose": "An official holding a public mandate over this record — a customs officer, a bank examiner, a market conduct supervisor. Sees the regulatory record in full: their own instrument named, every required claim and whether it was met, by whom, how old. No commercial figure of any kind.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:f88cd37636c8715070d28f59eaff875af8b09fa51c584d884849cf1d26e384a9",
"entry_hash": "sha256:8c350f1e9527843e5052f6894244f322398db4818ed08e6efd8910dd7a750800",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:b3a2cc70e0b0d2cf3f475bc54af8c6b9aa3313774a4daec081bababab8b4bd8c",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "tprm_MERIDIAN_2026Q3",
"subject": "supplier:MERIDIAN-FIELD-SVCS",
"question": "May Meridian Field Services be dispatched to consumer addresses this quarter?"
},
"memory": {
"state_digest": "sha256:b9e21f0d1dad1ca50001683b83b9a03d7a61286c22099d0cae1ccf0c905f9297",
"ledger_head": "sha256:2fe809a8769e3c0fe115196323cae859e6a2d3d55db59279eefd39143e655d4c",
"coverage_gaps": [
"supplier:MERIDIAN-FIELD-SVCS|soc2_type2_report"
]
},
"data_horizon": "2026-08-08T14:00:00.000Z",
"verdict": {
"value": "WITHHELD"
},
"regulatory": {
"spec": "corobate:regulatory:2",
"resolved": true,
"applied": [
{
"instrument_id": "ally-third-party-requirements",
"version": 5,
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"edition": "V.5.0",
"citation": "§ 8, 9, 11, 13 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"skipped": [],
"conflicts": [],
"bindings": [
{
"claim": "dr_test_certification",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "dr_test_certification",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "incident_response_plan_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.7.2 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "never_waivable",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.5 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "subcontractor_inventory",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
}
],
"defaults": [
{
"claim": "dr_test_certification",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"dr_test_certification\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "incident_response_plan_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"incident_response_plan_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "penetration_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"penetration_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"privacy_breach_notification_24h\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "soc2_type2_report",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"soc2_type2_report\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "subcontractor_inventory",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"subcontractor_inventory\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
},
"inputs": [
{
"key": "supplier:MERIDIAN-FIELD-SVCS::penetration_test",
"provenance": "VERIFIED",
"source": "LAB-BISHOPFOX-PEN:penetration_test",
"observed_at": "2026-05-30T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:org:LAB-BISHOPFOX-PEN"
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::subcontractor_inventory",
"provenance": "VERIFIED",
"source": "contract-repository:subcontractor_inventory",
"observed_at": "2026-01-20T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:sys:registry:contract-repository"
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::privacy_breach_notification_24h",
"provenance": "VERIFIED",
"source": "contract-repository:privacy_breach_notification_24h",
"observed_at": "2026-01-20T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:sys:registry:contract-repository"
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::dr_test_certification",
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:dr_test_certification",
"observed_at": "2026-01-10T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:org:CERT-DELOITTE-SOC"
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::incident_response_plan_test",
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:incident_response_plan_test",
"observed_at": "2026-01-10T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:org:CERT-DELOITTE-SOC"
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::background_check_type_c",
"provenance": "VERIFIED",
"source": "CERT-CHECKR-BGC:background_check_type_c",
"observed_at": "2026-07-19T14:00:00.000Z",
"critical": false,
"memory_status": "admitted",
"memory_actor": "actor:org:CERT-CHECKR-BGC"
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::soc2_type2_report",
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:soc2_type2_report",
"observed_at": "2025-06-03T14:00:00.000Z",
"critical": false,
"memory_status": "withheld",
"memory_actor": "actor:org:CERT-DELOITTE-SOC"
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::soc2_type2_report",
"provenance": "MISSING",
"source": null,
"observed_at": "2026-08-08T14:00:00.000Z",
"critical": true,
"memory_status": "coverage_gap"
}
],
"crypto_suite": {
"spec": "corobate:suite:1",
"id": "CB-1-ES256-SHA256",
"receipt_digest": "sha256",
"chain_digest": "sha256",
"content_digest": "sha256",
"envelope_signature": "ES256",
"signature_curve": "P-256",
"canonicalisation": "attest-canon/2",
"quantum_resistant": false
}
}
}Third-party risk officer
The third-party risk function that owns the file.
The fullest internal view: every input, its class, its age, its score, the exposure, and every instrument in force.
VerdictWITHHELD
Confidence0%
bound by soc2_type2_report
Exposure$95,000
ReleaseWITHHELD_NO_EVIDENCE
Risk acceptedNONE
Every input the gate saw
| Claim | Required | Evidence class | Who | Age | Score | Outcome |
|---|---|---|---|---|---|---|
| penetration_test | yes | VERIFIED | actor:org:LAB-BISHOPFOX-PEN | 70d | 95% | admitted |
| subcontractor_inventory | yes | VERIFIED | actor:sys:registry:contract-repository | 200d | 95% | admitted |
| privacy_breach_notification_24h | yes | VERIFIED | actor:sys:registry:contract-repository | 200d | 95% | admitted |
| dr_test_certification | yes | VERIFIED | actor:org:CERT-DELOITTE-SOC | 210d | 95% | admitted |
| incident_response_plan_test | yes | VERIFIED | actor:org:CERT-DELOITTE-SOC | 210d | 95% | admitted |
| background_check_type_c | no | VERIFIED | actor:org:CERT-CHECKR-BGC | 20d | 95% | admitted |
| soc2_type2_report | no | VERIFIED | actor:org:CERT-DELOITTE-SOC | 431d | 40% | withheld |
| soc2_type2_report | yes | MISSING | — | 2026-08-08 | 0% | coverage gap |
Instruments in force
Ally — Supply Chain
Third Party Requirements V.5.0
§ 8, 9, 11, 13 [VERIFY] · edition V.5.0
document sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1
entered by actor:human:tprm-officer
Why
- Coverage gap: no admissible memory for required claim(s) supplier:MERIDIAN-FIELD-SVCS|soc2_type2_report.
- Confidence 0.00% is bound by "supplier:MERIDIAN-FIELD-SVCS|soc2_type2_report".
- 1 memory was withheld from the context block: supplier:MERIDIAN-FIELD-SVCS|soc2_type2_report (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands).
- Thresholds for $95,000 exposure: approve 85%, caution 60%.
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:af499d12bcd70e9d950109fb06e359cb932d6f2ccca10ac61bc32eba71d84767 matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "COMPLIANCE",
"purpose": "The operator’s own compliance function. The fullest internal view: every gap, every instrument in force, the waivability of each requirement and who accepted what.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:f88cd37636c8715070d28f59eaff875af8b09fa51c584d884849cf1d26e384a9",
"entry_hash": "sha256:8c350f1e9527843e5052f6894244f322398db4818ed08e6efd8910dd7a750800",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:af499d12bcd70e9d950109fb06e359cb932d6f2ccca10ac61bc32eba71d84767",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "tprm_MERIDIAN_2026Q3",
"domain": "supply-chain",
"subject": "supplier:MERIDIAN-FIELD-SVCS",
"question": "May Meridian Field Services be dispatched to consumer addresses this quarter?"
},
"memory": {
"state_digest": "sha256:b9e21f0d1dad1ca50001683b83b9a03d7a61286c22099d0cae1ccf0c905f9297",
"ledger_head": "sha256:2fe809a8769e3c0fe115196323cae859e6a2d3d55db59279eefd39143e655d4c",
"coverage_gaps": [
"supplier:MERIDIAN-FIELD-SVCS|soc2_type2_report"
],
"exposure": {
"usd": 95000,
"declared_by": "actor:human:tprm-officer",
"ledger_seq": 7
},
"policy_digest": "sha256:a6b69b7d20f7fb04d522364af1d92992058b04a5835fcec9d1c9f2261c7ef636"
},
"data_horizon": "2026-08-08T14:00:00.000Z",
"verdict": {
"value": "WITHHELD",
"threshold_approve": 0.85,
"threshold_caution": 0.6,
"rule": "confidence>=threshold"
},
"confidence": {
"value": 0,
"method": "min-over-critical-inputs",
"bound_by": "supplier:MERIDIAN-FIELD-SVCS::soc2_type2_report"
},
"release": {
"required": false,
"required_by_tier": false,
"escalated_by_acceptance": false,
"risk_accepted": false,
"state": "WITHHELD_NO_EVIDENCE",
"code": "QUORUM_EVIDENCE_WITHHELD",
"reason": "the evidence did not clear the threshold for this exposure, so there is nothing to release. Signatures do not substitute for evidence, and this state is deliberately distinct from WITHHELD_PENDING_SIGNATURES: a reader must be able to tell \"the evidence is not there\" from \"the evidence is there and 0 of 2 people have signed\".",
"tier_floor_cents": 1000000000,
"exposure_usd_cents": 9500000,
"required_m": 2,
"declared_n": 3,
"floor_m": 2,
"distinct_signers": 0,
"superseded": 0,
"collapsed": 0,
"release_digest": "sha256:cdd0195666a9ad9990979496a7838796f5d7ad52f69ee31f0bb3b9ca83b34913",
"governance_digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
"governance_signed": true,
"counted_voices": [],
"signatures": [],
"ledger_seq": null
},
"acceptance": {
"state": "NONE",
"code": "ACCEPTANCE_NONE",
"reason": "no risk acceptance was presented for this decision. This is the ordinary case: a refusal is a refusal unless a named person has priced it.",
"permitted_basis": null,
"presented": 0,
"superseded": 0,
"expired": 0,
"gaps_not_covered": 0,
"coverage_gaps_in_force": [
"supplier:MERIDIAN-FIELD-SVCS|soc2_type2_report"
],
"evidentiary_digest": "sha256:cdd0195666a9ad9990979496a7838796f5d7ad52f69ee31f0bb3b9ca83b34913",
"margin_floor_bp": 100,
"authority_ceiling_cents": {
"SUPERVISOR": 1000000,
"MANAGER": 25000000,
"DIRECTOR": 500000000,
"OFFICER": 5000000000
},
"acceptances": [],
"escalated": false,
"live": false,
"ledger_seq": null
},
"regulatory": {
"spec": "corobate:regulatory:2",
"resolved": true,
"applied": [
{
"instrument_id": "ally-third-party-requirements",
"version": 5,
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"edition": "V.5.0",
"citation": "§ 8, 9, 11, 13 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"skipped": [],
"conflicts": [],
"bindings": [
{
"claim": "dr_test_certification",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "dr_test_certification",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "incident_response_plan_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.7.2 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "never_waivable",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.5 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "subcontractor_inventory",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
}
],
"defaults": [
{
"claim": "dr_test_certification",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"dr_test_certification\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "incident_response_plan_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"incident_response_plan_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "penetration_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"penetration_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"privacy_breach_notification_24h\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "soc2_type2_report",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"soc2_type2_report\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "subcontractor_inventory",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"subcontractor_inventory\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
},
"reasons": [
"Coverage gap: no admissible memory for required claim(s) supplier:MERIDIAN-FIELD-SVCS|soc2_type2_report.",
"Confidence 0.00% is bound by \"supplier:MERIDIAN-FIELD-SVCS|soc2_type2_report\".",
"1 memory was withheld from the context block: supplier:MERIDIAN-FIELD-SVCS|soc2_type2_report (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands).",
"Thresholds for $95,000 exposure: approve 85%, caution 60%."
],
"inputs": [
{
"key": "supplier:MERIDIAN-FIELD-SVCS::penetration_test",
"value": "no-critical",
"provenance": "VERIFIED",
"source": "LAB-BISHOPFOX-PEN:penetration_test",
"observed_at": "2026-05-30T14:00:00.000Z",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted",
"memory_kind": "test_report",
"memory_actor": "actor:org:LAB-BISHOPFOX-PEN",
"memory_age_days": 70
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::subcontractor_inventory",
"value": "schedule-C",
"provenance": "VERIFIED",
"source": "contract-repository:subcontractor_inventory",
"observed_at": "2026-01-20T14:00:00.000Z",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:sys:registry:contract-repository",
"memory_age_days": 200
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::privacy_breach_notification_24h",
"value": "contracted",
"provenance": "VERIFIED",
"source": "contract-repository:privacy_breach_notification_24h",
"observed_at": "2026-01-20T14:00:00.000Z",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:sys:registry:contract-repository",
"memory_age_days": 200
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::dr_test_certification",
"value": "tested",
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:dr_test_certification",
"observed_at": "2026-01-10T14:00:00.000Z",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:org:CERT-DELOITTE-SOC",
"memory_age_days": 210
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::incident_response_plan_test",
"value": "tested",
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:incident_response_plan_test",
"observed_at": "2026-01-10T14:00:00.000Z",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:org:CERT-DELOITTE-SOC",
"memory_age_days": 210
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::background_check_type_c",
"value": "clear",
"provenance": "VERIFIED",
"source": "CERT-CHECKR-BGC:background_check_type_c",
"observed_at": "2026-07-19T14:00:00.000Z",
"reliability": 0.95,
"critical": false,
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:org:CERT-CHECKR-BGC",
"memory_age_days": 20
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::soc2_type2_report",
"value": null,
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:soc2_type2_report",
"observed_at": "2025-06-03T14:00:00.000Z",
"reliability": 0.4,
"critical": false,
"memory_status": "withheld",
"memory_kind": "certificate",
"memory_actor": "actor:org:CERT-DELOITTE-SOC",
"memory_age_days": 431
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::soc2_type2_report",
"value": null,
"provenance": "MISSING",
"source": null,
"observed_at": "2026-08-08T14:00:00.000Z",
"reliability": 0,
"critical": true,
"memory_status": "coverage_gap"
}
],
"crypto_suite": {
"spec": "corobate:suite:1",
"id": "CB-1-ES256-SHA256",
"receipt_digest": "sha256",
"chain_digest": "sha256",
"content_digest": "sha256",
"envelope_signature": "ES256",
"signature_curve": "P-256",
"canonicalisation": "attest-canon/2",
"quantum_resistant": false
}
}
}Executive signer
A named signer on the release gate — the person whose signature is over the evidentiary state, not over the sentence.
What is at stake, what the evidence supports, what is missing, and the digest they are signing over.
You are being asked to sign
May Meridian Field Services be dispatched to consumer addresses this quarter?
At stake$95,000
Evidence saysWITHHELD
Release stateWITHHELD_NO_EVIDENCE
signing over evidentiary digest sha256:cdd0195666a9ad9990979496a7838796f5d7ad52f69ee31f0bb3b9ca83b34913
The signature is over the STATE OF THE EVIDENCE. Move one fact behind this decision and the digest moves and the signature stops counting — which is what makes it safe to collect signatures before everyone is in the room.
What is missing
- soc2 type2 report
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:5210b32a3741d1b4612298b499dffefddcc5f53e732ecce7f2d0f897227583d2 matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "EXECUTIVE",
"purpose": "A named signer on the release gate. Sees what is at stake, what the evidence supports, who else has signed and what they are being asked to sign over.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:f88cd37636c8715070d28f59eaff875af8b09fa51c584d884849cf1d26e384a9",
"entry_hash": "sha256:8c350f1e9527843e5052f6894244f322398db4818ed08e6efd8910dd7a750800",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:5210b32a3741d1b4612298b499dffefddcc5f53e732ecce7f2d0f897227583d2",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "tprm_MERIDIAN_2026Q3",
"domain": "supply-chain",
"subject": "supplier:MERIDIAN-FIELD-SVCS",
"question": "May Meridian Field Services be dispatched to consumer addresses this quarter?"
},
"memory": {
"state_digest": "sha256:b9e21f0d1dad1ca50001683b83b9a03d7a61286c22099d0cae1ccf0c905f9297",
"ledger_head": "sha256:2fe809a8769e3c0fe115196323cae859e6a2d3d55db59279eefd39143e655d4c",
"coverage_gaps": [
"supplier:MERIDIAN-FIELD-SVCS|soc2_type2_report"
],
"exposure": {
"usd": 95000,
"declared_by": "actor:human:tprm-officer",
"ledger_seq": 7
}
},
"verdict": {
"value": "WITHHELD",
"threshold_approve": 0.85,
"threshold_caution": 0.6,
"rule": "confidence>=threshold"
},
"confidence": {
"value": 0,
"method": "min-over-critical-inputs",
"bound_by": "supplier:MERIDIAN-FIELD-SVCS::soc2_type2_report"
},
"release": {
"required": false,
"required_by_tier": false,
"escalated_by_acceptance": false,
"risk_accepted": false,
"state": "WITHHELD_NO_EVIDENCE",
"code": "QUORUM_EVIDENCE_WITHHELD",
"reason": "the evidence did not clear the threshold for this exposure, so there is nothing to release. Signatures do not substitute for evidence, and this state is deliberately distinct from WITHHELD_PENDING_SIGNATURES: a reader must be able to tell \"the evidence is not there\" from \"the evidence is there and 0 of 2 people have signed\".",
"tier_floor_cents": 1000000000,
"exposure_usd_cents": 9500000,
"required_m": 2,
"declared_n": 3,
"floor_m": 2,
"distinct_signers": 0,
"superseded": 0,
"collapsed": 0,
"release_digest": "sha256:cdd0195666a9ad9990979496a7838796f5d7ad52f69ee31f0bb3b9ca83b34913",
"governance_digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
"governance_signed": true,
"counted_voices": [],
"signatures": [],
"ledger_seq": null
},
"acceptance": {
"state": "NONE",
"code": "ACCEPTANCE_NONE",
"reason": "no risk acceptance was presented for this decision. This is the ordinary case: a refusal is a refusal unless a named person has priced it.",
"permitted_basis": null,
"presented": 0,
"superseded": 0,
"expired": 0,
"gaps_not_covered": 0,
"coverage_gaps_in_force": [
"supplier:MERIDIAN-FIELD-SVCS|soc2_type2_report"
],
"evidentiary_digest": "sha256:cdd0195666a9ad9990979496a7838796f5d7ad52f69ee31f0bb3b9ca83b34913",
"margin_floor_bp": 100,
"authority_ceiling_cents": {
"SUPERVISOR": 1000000,
"MANAGER": 25000000,
"DIRECTOR": 500000000,
"OFFICER": 5000000000
},
"acceptances": [],
"escalated": false,
"live": false,
"ledger_seq": null
},
"reasons": [
"Coverage gap: no admissible memory for required claim(s) supplier:MERIDIAN-FIELD-SVCS|soc2_type2_report.",
"Confidence 0.00% is bound by \"supplier:MERIDIAN-FIELD-SVCS|soc2_type2_report\".",
"1 memory was withheld from the context block: supplier:MERIDIAN-FIELD-SVCS|soc2_type2_report (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands).",
"Thresholds for $95,000 exposure: approve 85%, caution 60%."
],
"regulatory": {
"applied": [
{
"instrument_id": "ally-third-party-requirements",
"version": 5,
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"edition": "V.5.0",
"citation": "§ 8, 9, 11, 13 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"conflicts": [],
"defaults": [
{
"claim": "dr_test_certification",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"dr_test_certification\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "incident_response_plan_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"incident_response_plan_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "penetration_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"penetration_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"privacy_breach_notification_24h\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "soc2_type2_report",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"soc2_type2_report\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "subcontractor_inventory",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"subcontractor_inventory\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
},
"inputs": [
{
"key": "supplier:MERIDIAN-FIELD-SVCS::penetration_test",
"provenance": "VERIFIED",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted"
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::subcontractor_inventory",
"provenance": "VERIFIED",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted"
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::privacy_breach_notification_24h",
"provenance": "VERIFIED",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted"
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::dr_test_certification",
"provenance": "VERIFIED",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted"
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::incident_response_plan_test",
"provenance": "VERIFIED",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted"
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::background_check_type_c",
"provenance": "VERIFIED",
"reliability": 0.95,
"critical": false,
"memory_status": "admitted"
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::soc2_type2_report",
"provenance": "VERIFIED",
"reliability": 0.4,
"critical": false,
"memory_status": "withheld"
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::soc2_type2_report",
"provenance": "MISSING",
"reliability": 0,
"critical": true,
"memory_status": "coverage_gap"
}
]
}
}Internal / external audit
Internal audit, or the external auditor testing the third-party programme.
Everything, plus the verifier’s own findings over the sealed record.
This view withholds nothing. What it adds is the 22 checks the published verifier ran over the sealed record behind every other view of this decision — recomputed at build time, not asserted.
| # | Check | Detail | |
|---|---|---|---|
| 1 | Content reproduces (JCS + SHA-256) | PASS | matches sha256:f88cd37636c8715070d28f59eaff875af8b09fa51c584d884849cf1d26e384a9 |
| 2 | Hash chain links (entry = H(prev||content)) | PASS | head sha256:8c350f1e9527843e5052f6894244f322398db4818ed08e6efd8910dd7a750800 |
| 3 | Confidence gated by weakest critical input | PASS | min over critical = 0, bound_by supplier:MERIDIAN-FIELD-SVCS::soc2_type2_report (MISSING) |
| 3b | Verdict follows the threshold rule | PASS | 0 => WITHHELD; recorded WITHHELD |
| 4 | Point-in-time seal (no input past data_horizon) | PASS | all inputs <= 2026-08-08T14:00:00.000Z |
| 5 | Anchor covers the head, and the timestamp token re-reads | PASS | internally consistent; NO external anchor was requested — this is not a validated timestamp |
| 6 | Criteria travel with the receipt and reproduce | PASS | policy_body hashes to sha256:a6b69b7d20f7fb04d522364af1d92992058b04a5835fcec9d1c9f2261c7ef636 |
| 7 | Reliability re-derives from recorded evidence | PASS | all 8 inputs re-derive exactly |
| 8 | Outcome trials and lineage discounts re-derive | PASS | 7 input(s) re-derive: 0 credited outcome trial(s), 0 lineage-discounted corroboration(s); every reliability is at or under its class ceiling |
| 9 | Re-ingested receipts respect their weakest-input ceiling | PASS | no re-ingested receipts: every input rests on a primary observation |
| 10 | Release quorum re-derives | PASS | WITHHELD_NO_EVIDENCE - below the top exposure tier, no multi-party requirement applies |
| 11 | Risk acceptance re-derives | PASS | no risk acceptance: this decision stands or falls on its evidence |
| 12 | Observer credentials were not revoked as of observation time | PASS | revocation list 12 (0 entries, issued 2026-08-06T00:00:00.000Z, next update due 2026-08-13T00:00:00.000Z) reproduces; 7 observer signature(s) judged as of their own instant, none under a key revoked as compromised or retired by then |
| 13 | The cryptographic suite is named and is one this verifier implements | PASS | sealed under CB-1-ES256-SHA256 (ES256 / sha256, attest-canon/2); this verifier implements it; the suite states it is NOT quantum resistant |
| 14 | Regulatory bindings are attributed and were enforced | PASS | 12 binding(s) from 1 instrument(s) in force, each attributed to an authority, a citation and a document digest; 6 required claim(s) all reached the gate |
| 15 | Role-view commitments re-derive, and the customs view carries no money | PASS | 6 role-view commitment(s) re-derived from this receipt’s own body by this verifier’s independent projection; the REGULATOR view carries no commercial figure |
| 16 | AI-authored input was admitted only where an authority allowed it | PASS | 0 claim(s) carry a position on AI-authored evidence set by an authority and 6 carry a recorded default nobody set; 0 exclusion(s) and 0 corroboration-only rule(s) re-derived against this receipt's own admitted inputs; 0 admitted input(s) are AI-authored by their enrolled identity |
| 17 | State digest recomputes from the ledger alone | UNVERIFIABLE | NOT APPLICABLE — you supplied no ledger, so the state digest cannot be re-derived from anything. This receipt commits to the corpus the deciding system held at the instant it sealed, and that commitment is checked by recomputing it from the append-only ledger and comparing; with no ledger in hand there is no second artefact to recompute from. The receipt is not at fault and nothing here is missing from it. Obtain the ledger from the issuer and re-run with --ledger <file>, or verifyReceipt(r, {ledger}). Nothing here has failed and nothing here has passed. |
| 18 | Registry membership re-derives for every key relied on | PASS | all 4 key(s) relied on re-derive to the entries root registry v7 committed to and the trust root signed |
| 20 | Geometric support re-derives, and an unevaluated record is not a supported one | PASS | no authority bound a metric to any claim on this receipt, so no geometric test applied. A claim nobody bound a metric to is not a claim about geometry, and this is a stated absence rather than a silent one |
| 19 | The cause of every uncovered requirement re-derives | PASS | all 1 uncovered requirement(s) re-derive their cause from this receipt's own rows. What notice is ADEQUATE is not decided here: this check establishes what the record says and that the record agrees with itself. |
| 21 | The sealing party is the one you were told to expect | UNVERIFIABLE | NOT APPLICABLE — you supplied no trust bundle, so nothing here establishes who sealed this. Identities 1 to 20 prove that this document agrees with itself; not one of them asks whose trust root it was sealed under, and a document that agrees with itself about a decision nobody made agrees with itself perfectly. Obtain the issuer's corobate:trust-bundle:1 out of band, confirm its spoken fingerprint with them by voice, and re-run with --trust-bundle <file> --expect-fingerprint <what you heard>. Nothing here has failed and nothing here has passed. |
The scoped copy itself — complete for this role
FAITHFUL digest sha256:85be4f5c82e136f5e250bd869025cc68f809aad1c5af73093109813ecba0c67f matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "AUDITOR",
"purpose": "An external assessor. Sees the complete sealed record: this view withholds nothing and exists so the identity case is a case rather than an exception.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:f88cd37636c8715070d28f59eaff875af8b09fa51c584d884849cf1d26e384a9",
"entry_hash": "sha256:8c350f1e9527843e5052f6894244f322398db4818ed08e6efd8910dd7a750800",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:85be4f5c82e136f5e250bd869025cc68f809aad1c5af73093109813ecba0c67f",
"withheld": {
"anything_withheld": false,
"note": "Nothing outside the seal was removed for this role."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"engine": {
"name": "corobate-memory",
"version": "1.0.0"
},
"decision": {
"id": "tprm_MERIDIAN_2026Q3",
"domain": "supply-chain",
"subject": "supplier:MERIDIAN-FIELD-SVCS",
"question": "May Meridian Field Services be dispatched to consumer addresses this quarter?"
},
"issued_at": "2026-08-08T14:00:00.000Z",
"data_horizon": "2026-08-08T14:00:00.000Z",
"inputs": [
{
"key": "supplier:MERIDIAN-FIELD-SVCS::penetration_test",
"value": "no-critical",
"provenance": "VERIFIED",
"source": "LAB-BISHOPFOX-PEN:penetration_test",
"observed_at": "2026-05-30T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.95,
"critical": true,
"memory_id": "mem_d3dfcfd5893f",
"memory_status": "admitted",
"memory_kind": "test_report",
"memory_actor": "actor:org:LAB-BISHOPFOX-PEN",
"memory_age_days": 70,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:9456332107fcaac89f8217ef538f88eca8d1e7c949a02354d20f95aefa9e12d8",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": "VERIFIED",
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_a6cacbd0fd83f53b",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 70,
"max_age_days": 180,
"house_max_age_days": 180,
"instrument_max_age_days": 365,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"min_class_floor": "VERIFIED",
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[VERIFIED · r=95.0% · 70d · LAB-BISHOPFOX-PEN:penetration_test] supplier:MERIDIAN-FIELD-SVCS / penetration_test: no-critical"
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::subcontractor_inventory",
"value": "schedule-C",
"provenance": "VERIFIED",
"source": "contract-repository:subcontractor_inventory",
"observed_at": "2026-01-20T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.95,
"critical": true,
"memory_id": "mem_0ce5565d7c0b",
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:sys:registry:contract-repository",
"memory_age_days": 200,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:096d8f086189ad771e7d2b2ef1783c28bacf70e455bfd5650d2de8ebb137bb67",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": null,
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_393d373ff1a0f1b4",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 200,
"max_age_days": 365,
"house_max_age_days": 365,
"instrument_max_age_days": null,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[VERIFIED · r=95.0% · 200d · contract-repository:subcontractor_inventory] supplier:MERIDIAN-FIELD-SVCS / subcontractor_inventory: schedule-C"
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::privacy_breach_notification_24h",
"value": "contracted",
"provenance": "VERIFIED",
"source": "contract-repository:privacy_breach_notification_24h",
"observed_at": "2026-01-20T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.95,
"critical": true,
"memory_id": "mem_a90160808851",
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:sys:registry:contract-repository",
"memory_age_days": 200,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:d7516a982a282d34efdb18bd094118a667a89b2fa53e2af1c6a5b087f16fbfac",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": null,
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_393d373ff1a0f1b4",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 200,
"max_age_days": 365,
"house_max_age_days": 365,
"instrument_max_age_days": null,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[VERIFIED · r=95.0% · 200d · contract-repository:privacy_breach_notification_24h] supplier:MERIDIAN-FIELD-SVCS / privacy_breach_notification_24h: contracted"
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::dr_test_certification",
"value": "tested",
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:dr_test_certification",
"observed_at": "2026-01-10T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.95,
"critical": true,
"memory_id": "mem_96f28b2c53c6",
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:org:CERT-DELOITTE-SOC",
"memory_age_days": 210,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:2728bf19b1da2321f9be4e2b864857b58566de47a3601a6495747fd11dad0c22",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": null,
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_c3c95bc9795296cd",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 210,
"max_age_days": 365,
"house_max_age_days": 365,
"instrument_max_age_days": 365,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[VERIFIED · r=95.0% · 210d · CERT-DELOITTE-SOC:dr_test_certification] supplier:MERIDIAN-FIELD-SVCS / dr_test_certification: tested"
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::incident_response_plan_test",
"value": "tested",
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:incident_response_plan_test",
"observed_at": "2026-01-10T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.95,
"critical": true,
"memory_id": "mem_e3d20f32d3ea",
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:org:CERT-DELOITTE-SOC",
"memory_age_days": 210,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:35b2f712401e6c678d99b69b1d161f90b734edeeaeef1c12c3e0c02aae12dade",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": null,
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_c3c95bc9795296cd",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 210,
"max_age_days": 365,
"house_max_age_days": 365,
"instrument_max_age_days": null,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[VERIFIED · r=95.0% · 210d · CERT-DELOITTE-SOC:incident_response_plan_test] supplier:MERIDIAN-FIELD-SVCS / incident_response_plan_test: tested"
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::background_check_type_c",
"value": "clear",
"provenance": "VERIFIED",
"source": "CERT-CHECKR-BGC:background_check_type_c",
"observed_at": "2026-07-19T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.95,
"critical": false,
"memory_id": "mem_30c3407311be",
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:org:CERT-CHECKR-BGC",
"memory_age_days": 20,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:cb002526cbb0f6dbf5109a8e13ddd3c0431773a43f5817e94ec57fade219c289",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": null,
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": null,
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_3a87ef9d00237797",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 20,
"max_age_days": 365,
"house_max_age_days": 365,
"instrument_max_age_days": null,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": null
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[VERIFIED · r=95.0% · 20d · CERT-CHECKR-BGC:background_check_type_c] supplier:MERIDIAN-FIELD-SVCS / background_check_type_c: clear"
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::soc2_type2_report",
"value": null,
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:soc2_type2_report",
"observed_at": "2025-06-03T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.4,
"critical": false,
"memory_id": "mem_2a7940146f13",
"memory_status": "withheld",
"memory_kind": "certificate",
"memory_actor": "actor:org:CERT-DELOITTE-SOC",
"memory_age_days": 431,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:f9d3bedd1b2849102e0704e6cd8410ed21543236fc3aa36fc85db6a80d8945e1",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands",
"stale field: observed 431d ago, limit 365d for kind \"certificate\"; reliability capped at 40%"
],
"memory_class_floor": "VERIFIED",
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_c3c95bc9795296cd",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 431,
"max_age_days": 365,
"house_max_age_days": 365,
"instrument_max_age_days": 365,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"min_class_floor": "VERIFIED",
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
},
{
"code": "STALE_FIELD",
"observed": 431,
"limit": 365,
"cap_bp": 4000,
"resulting_bp": 4000,
"binding": true
}
]
},
{
"key": "supplier:MERIDIAN-FIELD-SVCS::soc2_type2_report",
"value": null,
"provenance": "MISSING",
"source": null,
"observed_at": "2026-08-08T14:00:00.000Z",
"reliability": 0,
"critical": true,
"memory_status": "coverage_gap",
"gap_cause": "EVIDENCE_PRESENTED_FAILED",
"gap_request": null,
"gap_origin": "BUSINESS_EVIDENCE",
"gap_conditions": []
}
],
"serialization": {
"algorithm": "RFC8785-JCS",
"hash": "sha256"
},
"crypto_suite": {
"spec": "corobate:suite:1",
"id": "CB-1-ES256-SHA256",
"receipt_digest": "sha256",
"chain_digest": "sha256",
"content_digest": "sha256",
"envelope_signature": "ES256",
"signature_curve": "P-256",
"canonicalisation": "attest-canon/2",
"quantum_resistant": false
},
"confidence": {
"value": 0,
"method": "min-over-critical-inputs",
"bound_by": "supplier:MERIDIAN-FIELD-SVCS::soc2_type2_report"
},
"verdict": {
"value": "WITHHELD",
"threshold_approve": 0.85,
"threshold_caution": 0.6,
"rule": "confidence>=threshold"
},
"release": {
"required": false,
"required_by_tier": false,
"escalated_by_acceptance": false,
"risk_accepted": false,
"state": "WITHHELD_NO_EVIDENCE",
"code": "QUORUM_EVIDENCE_WITHHELD",
"reason": "the evidence did not clear the threshold for this exposure, so there is nothing to release. Signatures do not substitute for evidence, and this state is deliberately distinct from WITHHELD_PENDING_SIGNATURES: a reader must be able to tell \"the evidence is not there\" from \"the evidence is there and 0 of 2 people have signed\".",
"tier_floor_cents": 1000000000,
"exposure_usd_cents": 9500000,
"required_m": 2,
"declared_n": 3,
"floor_m": 2,
"distinct_signers": 0,
"superseded": 0,
"collapsed": 0,
"release_digest": "sha256:cdd0195666a9ad9990979496a7838796f5d7ad52f69ee31f0bb3b9ca83b34913",
"governance_digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
"governance_signed": true,
"counted_voices": [],
"signatures": [],
"ledger_seq": null
},
"acceptance": {
"state": "NONE",
"code": "ACCEPTANCE_NONE",
"reason": "no risk acceptance was presented for this decision. This is the ordinary case: a refusal is a refusal unless a named person has priced it.",
"permitted_basis": null,
"presented": 0,
"superseded": 0,
"expired": 0,
"gaps_not_covered": 0,
"coverage_gaps_in_force": [
"supplier:MERIDIAN-FIELD-SVCS|soc2_type2_report"
],
"evidentiary_digest": "sha256:cdd0195666a9ad9990979496a7838796f5d7ad52f69ee31f0bb3b9ca83b34913",
"margin_floor_bp": 100,
"authority_ceiling_cents": {
"SUPERVISOR": 1000000,
"MANAGER": 25000000,
"DIRECTOR": 500000000,
"OFFICER": 5000000000
},
"acceptances": [],
"escalated": false,
"live": false,
"ledger_seq": null
},
"regulatory": {
"spec": "corobate:regulatory:2",
"resolved": true,
"applied": [
{
"instrument_id": "ally-third-party-requirements",
"version": 5,
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"edition": "V.5.0",
"citation": "§ 8, 9, 11, 13 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"skipped": [],
"conflicts": [],
"bindings": [
{
"claim": "dr_test_certification",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "dr_test_certification",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "incident_response_plan_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.7.2 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "never_waivable",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.5 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "subcontractor_inventory",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
}
],
"defaults": [
{
"claim": "dr_test_certification",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"dr_test_certification\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "incident_response_plan_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"incident_response_plan_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "penetration_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"penetration_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"privacy_breach_notification_24h\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "soc2_type2_report",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"soc2_type2_report\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "subcontractor_inventory",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"subcontractor_inventory\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
},
"reasons": [
"Coverage gap: no admissible memory for required claim(s) supplier:MERIDIAN-FIELD-SVCS|soc2_type2_report.",
"Confidence 0.00% is bound by \"supplier:MERIDIAN-FIELD-SVCS|soc2_type2_report\".",
"1 memory was withheld from the context block: supplier:MERIDIAN-FIELD-SVCS|soc2_type2_report (sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands).",
"Thresholds for $95,000 exposure: approve 85%, caution 60%."
],
"memory": {
"layer": "capture->store->recall->act",
"ledger_head": "sha256:2fe809a8769e3c0fe115196323cae859e6a2d3d55db59279eefd39143e655d4c",
"ledger_entries": 9,
"context_digest": null,
"context_memory_ids": [],
"state_digest": "sha256:b9e21f0d1dad1ca50001683b83b9a03d7a61286c22099d0cae1ccf0c905f9297",
"retrieval_method": "idf-lexical",
"corpus_size": 7,
"considered": 7,
"admitted": 6,
"withheld": 1,
"not_considered": 0,
"coverage_gaps": [
"supplier:MERIDIAN-FIELD-SVCS|soc2_type2_report"
],
"exposure": {
"usd": 95000,
"declared_by": "actor:human:tprm-officer",
"ledger_seq": 7
},
"salience_policy": {
"half_life_days": 90,
"grace_days": 7,
"access_boost_bp": 500,
"access_boost_cap_bp": 2500,
"relevance_weight_bp": 6000,
"recency_weight_bp": 3000,
"usage_weight_bp": 1000,
"context_cap": 12,
"method": "idf-lexical",
"candidate_list_digest": "sha256:9304b4a414ce1e35b6b834e11eef5aeefe8f668e968228ec9bb9d4e118c8b417",
"note": "salience orders retrieval only; it never contributes to reliability"
},
"policy_digest": "sha256:a6b69b7d20f7fb04d522364af1d92992058b04a5835fcec9d1c9f2261c7ef636",
"policy_body": {
"class_ceiling_bp": {
"VERIFIED": 9500,
"MODELED": 8000,
"SELLER-ASSERTED": 5000,
"MISSING": 0
},
"actor_class_ceiling": [
[
"^actor:ai:",
"MODELED"
],
[
"^actor:agent:",
"MODELED"
],
[
"^actor:human:",
"SELLER-ASSERTED"
],
[
"^actor:org:LAB-",
"VERIFIED"
],
[
"^actor:org:CERT-",
"VERIFIED"
],
[
"^actor:org:",
"SELLER-ASSERTED"
],
[
"^actor:sys:registry:",
"VERIFIED"
],
[
"^actor:sys:sensor:",
"VERIFIED"
],
[
"^actor:sys:",
"MODELED"
]
],
"freshness_cap_bp": 4000,
"max_age_days": {
"telemetry": 1,
"price": 7,
"status": 14,
"certificate": 365,
"test_report": 180,
"filing": 90,
"transcript": 120,
"highlight": 365,
"voice_note": 120,
"note": 365,
"preference": 540,
"decision": 1825,
"receipt": 365,
"default": 90
},
"wilson_z_milli": 1960,
"min_track_n": 5,
"exposure_tiers_bp": [
[
1000000000,
9500,
8000
],
[
100000000,
9000,
7000
],
[
1000000,
8500,
6000
],
[
0,
8000,
5000
]
],
"max_context_memories": 12,
"contradiction_resolve_margin": 2,
"salience": {
"half_life_days": 90,
"grace_days": 7,
"access_boost_bp": 500,
"access_boost_cap_bp": 2500,
"relevance_weight_bp": 6000,
"recency_weight_bp": 3000,
"usage_weight_bp": 1000
}
},
"observer_auth": {
"mode": "required",
"registry_version": 7,
"registry_digest": "sha256:bb1bffa0668fd3ddcc24d30288a62fe52c873bba1396a245c138765263ca68e4",
"entries_root": "sha256:052a44853cd278e4d33a14e709d108aadf2b2079177402c408b935a574b7b8b1",
"memberships": [
{
"key_id": "k_393d373ff1a0f1b4",
"index": 6,
"entry": {
"actor": "actor:sys:registry:contract-repository",
"class": "VERIFIED",
"kind": "system",
"key_id": "k_393d373ff1a0f1b4",
"jwk": {
"kty": "EC",
"crv": "P-256",
"x": "p7fbljJU3LbgvYVbDJvlFhvgeRtxIl6a7hcGn6gw37o",
"y": "QIz0r6fSv_fpuHexvW8T5BnxzQe8zqAC-_OW7UtNoa4"
},
"valid_from": "2025-01-01T00:00:00.000Z",
"valid_to": "2027-06-01T00:00:00.000Z"
},
"path": [
{
"side": "right",
"sibling": "sha256:770d3738b21df6728542e9a3d8d8313b5b83a4dc49819d40519ec9bcf9d6c93a"
},
{
"side": "left",
"sibling": "sha256:a7c0de2a235c1c26640b4db5b931ee69e09f4da9a2d96f07997c5f51f8e0ad4a"
},
{
"side": "left",
"sibling": "sha256:dcea5dab73759e138fad2cd13ff65c0a9fbd8172beab6f9eb480d802f741d0b6"
},
{
"side": "right",
"sibling": "sha256:b0d6d854c0fbace92cd9b0e1b8f05851c2a6f51da82f934b55f3391095b9e3c6"
}
]
},
{
"key_id": "k_3a87ef9d00237797",
"index": 2,
"entry": {
"actor": "actor:org:CERT-CHECKR-BGC",
"class": "VERIFIED",
"kind": "org",
"key_id": "k_3a87ef9d00237797",
"jwk": {
"kty": "EC",
"crv": "P-256",
"x": "ev1vMT3BxWUCVRIkQxpdorjaUOKh4vFhkkduSjzpSYw",
"y": "hk7xVJbBvkVM-wPYt7ote3oE9Y55gQ0fBooWoGNHWak"
},
"valid_from": "2025-01-01T00:00:00.000Z",
"valid_to": "2027-06-01T00:00:00.000Z"
},
"path": [
{
"side": "right",
"sibling": "sha256:87c1756a895dc6de8e1558ae0125614c90c2fa5fb499e6d70a01d22f151f0b32"
},
{
"side": "left",
"sibling": "sha256:5602143d7c72d4e0e11de6cd2c93df30ff30c7dc7fe82f3b95cd38b2adda530b"
},
{
"side": "right",
"sibling": "sha256:4f3031707d2416b5567eb739ca5d25f2cc36acc2bd8d026bf221c367179718a0"
},
{
"side": "right",
"sibling": "sha256:b0d6d854c0fbace92cd9b0e1b8f05851c2a6f51da82f934b55f3391095b9e3c6"
}
]
},
{
"key_id": "k_a6cacbd0fd83f53b",
"index": 1,
"entry": {
"actor": "actor:org:LAB-BISHOPFOX-PEN",
"class": "VERIFIED",
"kind": "org",
"key_id": "k_a6cacbd0fd83f53b",
"jwk": {
"kty": "EC",
"crv": "P-256",
"x": "Ch_GAfrcwbNBD53nf8MhzRQv3dvkYrQwYaut1kmrQu4",
"y": "26e0at_OMmtDi7iOSK7RqjeyZomyasIEM20iF0cxfrA"
},
"valid_from": "2025-01-01T00:00:00.000Z",
"valid_to": "2027-06-01T00:00:00.000Z"
},
"path": [
{
"side": "left",
"sibling": "sha256:7676859944c464baf75a2d7d4be7ff2f1632b94921aff419d7908f5d0c15d2bc"
},
{
"side": "right",
"sibling": "sha256:97bc43a75580b998c635a55a452ec5e66fea912fbdb987a9c14e29d6311be924"
},
{
"side": "right",
"sibling": "sha256:4f3031707d2416b5567eb739ca5d25f2cc36acc2bd8d026bf221c367179718a0"
},
{
"side": "right",
"sibling": "sha256:b0d6d854c0fbace92cd9b0e1b8f05851c2a6f51da82f934b55f3391095b9e3c6"
}
]
},
{
"key_id": "k_c3c95bc9795296cd",
"index": 0,
"entry": {
"actor": "actor:org:CERT-DELOITTE-SOC",
"class": "VERIFIED",
"kind": "org",
"key_id": "k_c3c95bc9795296cd",
"jwk": {
"kty": "EC",
"crv": "P-256",
"x": "cO4w4AuCfc-hheIJnEzQj-z-MBcHIfl34mygv9kl3mI",
"y": "PDPYdxnb9V0d43GLjpNC2_xyHVBbarmHkHxa3EOXJxg"
},
"valid_from": "2025-01-01T00:00:00.000Z",
"valid_to": "2027-06-01T00:00:00.000Z"
},
"path": [
{
"side": "right",
"sibling": "sha256:aff188754372ce4622403f6cb8e4c7f2456137aa416b101109aad75f6e614acb"
},
{
"side": "right",
"sibling": "sha256:97bc43a75580b998c635a55a452ec5e66fea912fbdb987a9c14e29d6311be924"
},
{
"side": "right",
"sibling": "sha256:4f3031707d2416b5567eb739ca5d25f2cc36acc2bd8d026bf221c367179718a0"
},
{
"side": "right",
"sibling": "sha256:b0d6d854c0fbace92cd9b0e1b8f05851c2a6f51da82f934b55f3391095b9e3c6"
}
]
}
],
"memberships_unproven": [],
"revocation": {
"source": "SIGNED_LIST",
"digest": "sha256:739c516c92fbb8d46951fc274ec199896004081698b412180c096074bd59b884",
"sequence": 12,
"registry_version": 7,
"issued_at": "2026-08-06T00:00:00.000Z",
"next_update_due": "2026-08-13T00:00:00.000Z",
"entry_count": 0,
"body": {
"sequence": 12,
"registry_version": 7,
"issuer": {
"name": "Ally-shaped demonstration trust root",
"key_id": "k_d2a5a08e98bed6cd"
},
"issued_at": "2026-08-06T00:00:00.000Z",
"next_update_due": "2026-08-13T00:00:00.000Z",
"entries": [],
"spec": "corobate:revocation-list:1"
}
}
},
"governance": {
"digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
"signed": true,
"actor_trust": "FLOOR_TO_SELLER_ASSERTED",
"outcome_trial_weight": 1,
"max_reingest_depth": 3,
"release_quorum_m": 2,
"release_quorum_n": 3,
"risk_acceptance_margin_bp": 500,
"risk_acceptance_max_days": 30,
"risk_acceptance_authority_cents": {
"SUPERVISOR": 1000000,
"MANAGER": 25000000,
"DIRECTOR": 500000000,
"OFFICER": 5000000000
},
"template_author_roles": [
"MANAGER",
"DIRECTOR",
"OFFICER"
]
},
"observers_attested": 6,
"outcomes": {
"attestations_counted": 0,
"attestations_recorded": 0,
"records_with_outcomes": 0
},
"lineage": {
"corroborations_counted": 0,
"corroborations_discounted": 0,
"records_with_discounted_corroborations": 0
},
"reingest": {
"records": 0,
"max_depth": 0,
"weakest_class": null,
"chain_weakest_bp": 10000,
"chain": []
},
"template": null
}
}
}Every control on this file is satisfied and independently attested except one: the vendor has not committed to notifying a privacy breach within 24 hours, and Ally’s own standard makes that commitment never waivable. A director with genuine authority then accepts the risk in good faith — valid signature, entitled role, a real actuarial basis, a figure well inside their limit. The acceptance is recorded and it does not count. Not a warning, not a lower score: the price an authority forbade anyone to pay is refused by name, and the release stays shut.
- Subject
- supplier:NORTHSTAR-ANALYTICS
- Question
- May Northstar Analytics be renewed while its 24-hour breach notification commitment is outstanding?
- Exposure
- $8,400
- Instruments
- Ally — Supply Chain · Board of Governors of the Federal Reserve System
- Outcome
- WITHHELD — the action is not permitted; outstanding: privacy breach notification 24h
- Receipt
- sha256:098614f2a6ec766f620d1bd997be8c6c9de280f21f46b50abf7bddce4d9b8dad
The gate variables this decision ran under — a dial per question, read back off the sealed receipt
dr test certificationrequired
necessityrequiredAlly — Supply Chain — § 11.6.1 [VERIFY]
staleness365 daysAlly — Supply Chain — § 11.6.1 [VERIFY]
reputation class—No class floor was set, so the seller's own assertion is admissible for this claim up to the ceiling that class carries. That is a setting, not an absence.
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "dr_test_certification". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
financial condition reviewrequired
necessityrequiredBoard of Governors of the Federal Reserve System — Due diligence — financial condition [VERIFY]
staleness90 daysNo instrument set an age limit for this claim, so the deploying organisation's own freshness policy binds at 90 days. It is not unlimited.
reputation class—No class floor was set, so the seller's own assertion is admissible for this claim up to the ceiling that class carries. That is a setting, not an absence.
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "financial_condition_review". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
incident response plan testrequired
necessityrequiredAlly — Supply Chain — § 8.7.2 [VERIFY]
staleness90 daysNo instrument set an age limit for this claim, so the deploying organisation's own freshness policy binds at 90 days. It is not unlimited.
reputation class—No class floor was set, so the seller's own assertion is admissible for this claim up to the ceiling that class carries. That is a setting, not an absence.
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "incident_response_plan_test". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
penetration testrequired
necessityrequiredAlly — Supply Chain — § 8.9.1 [VERIFY]
staleness365 daysAlly — Supply Chain — § 8.9.1 [VERIFY]
reputation classverifiedAlly — Supply Chain — § 8.9.1 [VERIFY]
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "penetration_test". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
privacy breach notification 24hrequired never waivable
necessityrequired never waivableAlly — Supply Chain — § 9.7.1 [VERIFY]
staleness90 daysNo instrument set an age limit for this claim, so the deploying organisation's own freshness policy binds at 90 days. It is not unlimited.
reputation class—No class floor was set, so the seller's own assertion is admissible for this claim up to the ceiling that class carries. That is a setting, not an absence.
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "privacy_breach_notification_24h". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
soc2 type2 reportrequired
necessityrequiredAlly — Supply Chain — § 13.1.6 [VERIFY]
staleness365 daysAlly — Supply Chain — § 13.1.5 [VERIFY]
reputation classverifiedAlly — Supply Chain — § 13.1.6 [VERIFY]
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "soc2_type2_report". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
1 displaced ask. Another authority asked for less on this claim and was displaced by a stricter one. The lesser ask travels on the receipt rather than vanishing, so a supplier can show a regulator that a different regulation would have been satisfied.
subcontractor inventoryrequired
necessityrequiredAlly — Supply Chain — § 13.1.1 [VERIFY]
staleness90 daysNo instrument set an age limit for this claim, so the deploying organisation's own freshness policy binds at 90 days. It is not unlimited.
reputation class—No class floor was set, so the seller's own assertion is admissible for this claim up to the ceiling that class carries. That is a setting, not an absence.
reputation record—No reliability floor beyond the exposure tier's own threshold, which still binds.
completion—No satisfaction window was set. The requirement is due now: there is no period in which it may be outstanding, and nothing proceeds without it.
ai provenanceadmitNo instrument in force stated a position on AI-authored evidence for "subcontractor_inventory". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway.
Every bar above was re-derived from the regulatory bindings inside this receipt’s hashed body, not from the configuration that produced it. A bar in grey is a setting no instrument made — the deploying organisation’s own default, which still binds and is not an absence. A bar position renders an ordinal on a declared ladder: it is a way to draw a control and to compare two settings on the same axis, and it is not a measurement. The value printed beside each bar is the authoritative one.
Whoever must act now
The person with the next action in their hands: the sourcing manager who must renew or not, the lister who must publish the lane, the dispatcher who must send an agent.
Sees one instruction and the reason in words. No score, no money, no signatures — nothing that turns a decision into a negotiation with whoever is waiting.
DO NOT PROCEED
supplier:NORTHSTAR-ANALYTICS
Missing or out of date: privacy breach notification 24h
Seven or eight fields, and not one of them is a number somebody can argue with. This person is not being asked to re-judge the evidence; somebody already did, and it is on the record.
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:c4a3dabd6674a2f38d8d5ade9ec50ed5ef51985a4df22abc71206a1295623fe3 matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "OPERATOR",
"purpose": "Whoever must act on this decision now — release the goods, fund the draw, dispatch the agent, ship the title. Sees one instruction and the reason in plain words, and nothing that could be argued about while somebody waits.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:098614f2a6ec766f620d1bd997be8c6c9de280f21f46b50abf7bddce4d9b8dad",
"entry_hash": "sha256:f779b303104836d4d4fffb85b456c1f4a36c78e858b5d2baca2a19cda63cf4e5",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:c4a3dabd6674a2f38d8d5ade9ec50ed5ef51985a4df22abc71206a1295623fe3",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "tprm_NORTHSTAR_BREACH_CLAUSE",
"subject": "supplier:NORTHSTAR-ANALYTICS"
},
"memory": {
"state_digest": "sha256:abc8b64dea1c219b99a006d072f0f39a09424dfd7ecfb5921932d0022f8095d1",
"ledger_head": "sha256:3c274ca228fe2ca93d29b969a36ae43d9fb357fbac98e033b2d21e051262341f",
"coverage_gaps": [
"supplier:NORTHSTAR-ANALYTICS|privacy_breach_notification_24h"
]
},
"verdict": {
"value": "WITHHELD"
},
"release": {
"state": "WITHHELD_NO_EVIDENCE"
}
}
}Vendor / selling dealer
The party whose evidence was judged — the vendor under review, or the dealer consigning the vehicle.
Sees which of their own claims were required and by whose clause. Does not see the bank’s exposure, how the bank priced any shortfall, or any other party’s evidence in the same file.
What is outstanding on your file
- privacy breach notification 24h — required by Ally — Supply Chain, § 9.7.1 [VERIFY]
| Claim | Required | Evidence class | Who | Age | Outcome |
|---|---|---|---|---|---|
| subcontractor_inventory | yes | VERIFIED | — | 2026-08-03 | admitted |
| financial_condition_review | yes | VERIFIED | — | 2026-08-03 | admitted |
| penetration_test | yes | VERIFIED | — | 2026-05-10 | admitted |
| soc2_type2_report | yes | VERIFIED | — | 2026-04-10 | admitted |
| dr_test_certification | yes | VERIFIED | — | 2026-03-11 | admitted |
| incident_response_plan_test | yes | VERIFIED | — | 2026-03-01 | admitted |
| privacy_breach_notification_24h | yes | MISSING | — | 2026-08-08 | coverage gap |
The clause is here because it turns an argument into an errand. What is not here: what the bank had at stake, and whether anyone priced the shortfall.
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:d8501da086d282f56d0504ff43a19b0d2e86cf27ece63970410802a0a6ea57f8 matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "SUPPLIER",
"purpose": "The party whose evidence was judged. Sees every claim the decision required, which fell short, and the clause that required it — and nothing about what the buyer had at stake or how the buyer priced any shortfall. NOTE, because an earlier draft of this sentence was untrue: this projection carries the WHOLE inputs array, so where several parties supplied evidence for one decision, each of them sees all of it. Per-party scoping cannot be expressed by a commitment scheme with one digest per role, and claiming it anyway would be the kind of promise this file exists to stop making.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:098614f2a6ec766f620d1bd997be8c6c9de280f21f46b50abf7bddce4d9b8dad",
"entry_hash": "sha256:f779b303104836d4d4fffb85b456c1f4a36c78e858b5d2baca2a19cda63cf4e5",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:d8501da086d282f56d0504ff43a19b0d2e86cf27ece63970410802a0a6ea57f8",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "tprm_NORTHSTAR_BREACH_CLAUSE",
"subject": "supplier:NORTHSTAR-ANALYTICS",
"question": "May Northstar Analytics be renewed while its 24-hour breach notification commitment is outstanding?"
},
"memory": {
"state_digest": "sha256:abc8b64dea1c219b99a006d072f0f39a09424dfd7ecfb5921932d0022f8095d1",
"ledger_head": "sha256:3c274ca228fe2ca93d29b969a36ae43d9fb357fbac98e033b2d21e051262341f",
"coverage_gaps": [
"supplier:NORTHSTAR-ANALYTICS|privacy_breach_notification_24h"
]
},
"verdict": {
"value": "WITHHELD"
},
"inputs": [
{
"key": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory",
"provenance": "VERIFIED",
"observed_at": "2026-08-03T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::financial_condition_review",
"provenance": "VERIFIED",
"observed_at": "2026-08-03T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::penetration_test",
"provenance": "VERIFIED",
"observed_at": "2026-05-10T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::soc2_type2_report",
"provenance": "VERIFIED",
"observed_at": "2026-04-10T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification",
"provenance": "VERIFIED",
"observed_at": "2026-03-11T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::incident_response_plan_test",
"provenance": "VERIFIED",
"observed_at": "2026-03-01T14:00:00.000Z",
"memory_status": "admitted",
"critical": true
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::privacy_breach_notification_24h",
"provenance": "MISSING",
"observed_at": "2026-08-08T14:00:00.000Z",
"memory_status": "coverage_gap",
"critical": true
}
],
"regulatory": {
"bindings": [
{
"claim": "dr_test_certification",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "dr_test_certification",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "financial_condition_review",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — financial condition [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "incident_response_plan_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.7.2 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "never_waivable",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.5 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": [
{
"value": "SELLER-ASSERTED",
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — controls [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
}
}
],
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "subcontractor_inventory",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
}
],
"applied": [
{
"instrument_id": "ally-third-party-requirements",
"version": 5,
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"edition": "V.5.0",
"citation": "§ 8, 9, 11, 13 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
},
{
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"edition": "2023-06-06",
"citation": "Due diligence and ongoing monitoring [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"defaults": [
{
"claim": "dr_test_certification",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"dr_test_certification\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "financial_condition_review",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"financial_condition_review\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "incident_response_plan_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"incident_response_plan_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "penetration_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"penetration_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"privacy_breach_notification_24h\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "soc2_type2_report",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"soc2_type2_report\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "subcontractor_inventory",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"subcontractor_inventory\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
}
}
}Bank examiner
An examiner under the interagency third-party guidance, or a market-conduct supervisor. Same position as a customs officer: a public mandate over the record and no claim on the commercial position.
The regulatory record in full — every instrument by authority, clause, edition and document digest, and every required claim with who supplied it and when. No exposure, no risk pricing, no confidence score, no quorum.
Ally — Supply Chain
Third Party Requirements V.5.0
§ 8, 9, 11, 13 [VERIFY] · edition V.5.0
document sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1
entered by actor:human:tprm-officer
Board of Governors of the Federal Reserve System
Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)
Due diligence and ongoing monitoring [VERIFY] · edition 2023-06-06
document sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2
entered by actor:human:tprm-officer
What each authority bound
| Claim | Requirement | Level | Bound by |
|---|---|---|---|
| dr_test_certification | max age days | 365 | Ally — Supply Chain § 11.6.1 [VERIFY] · Third Party Requirements V.5.0 |
| dr_test_certification | required | true | Ally — Supply Chain § 11.6.1 [VERIFY] · Third Party Requirements V.5.0 |
| financial_condition_review | required | true | Board of Governors of the Federal Reserve System Due diligence — financial condition [VERIFY] · Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4) |
| incident_response_plan_test | required | true | Ally — Supply Chain § 8.7.2 [VERIFY] · Third Party Requirements V.5.0 |
| penetration_test | max age days | 365 | Ally — Supply Chain § 8.9.1 [VERIFY] · Third Party Requirements V.5.0 |
| penetration_test | min class | VERIFIED | Ally — Supply Chain § 8.9.1 [VERIFY] · Third Party Requirements V.5.0 |
| penetration_test | required | true | Ally — Supply Chain § 8.9.1 [VERIFY] · Third Party Requirements V.5.0 |
| privacy_breach_notification_24h | never waivable | true | Ally — Supply Chain § 9.7.1 [VERIFY] · Third Party Requirements V.5.0 |
| privacy_breach_notification_24h | required | true | Ally — Supply Chain § 9.7.1 [VERIFY] · Third Party Requirements V.5.0 |
| soc2_type2_report | max age days | 365 | Ally — Supply Chain § 13.1.5 [VERIFY] · Third Party Requirements V.5.0 |
| soc2_type2_report | min class | VERIFIED | Ally — Supply Chain § 13.1.6 [VERIFY] · Third Party Requirements V.5.0 Board of Governors of the Federal Reserve System asked only for SELLER-ASSERTED (Due diligence — controls [VERIFY]) |
| soc2_type2_report | required | true | Ally — Supply Chain § 13.1.6 [VERIFY] · Third Party Requirements V.5.0 |
| subcontractor_inventory | required | true | Ally — Supply Chain § 13.1.1 [VERIFY] · Third Party Requirements V.5.0 |
Every required claim, and what was actually held
| Claim | Required | Evidence class | Who | Age | Outcome |
|---|---|---|---|---|---|
| subcontractor_inventory | yes | VERIFIED | actor:sys:registry:contract-repository | 2026-08-03 | admitted |
| financial_condition_review | yes | VERIFIED | actor:sys:registry:dnb-financials | 2026-08-03 | admitted |
| penetration_test | yes | VERIFIED | actor:org:LAB-BISHOPFOX-PEN | 2026-05-10 | admitted |
| soc2_type2_report | yes | VERIFIED | actor:org:CERT-DELOITTE-SOC | 2026-04-10 | admitted |
| dr_test_certification | yes | VERIFIED | actor:org:CERT-DELOITTE-SOC | 2026-03-11 | admitted |
| incident_response_plan_test | yes | VERIFIED | actor:org:CERT-DELOITTE-SOC | 2026-03-01 | admitted |
| privacy_breach_notification_24h | yes | MISSING | — | 2026-08-08 | coverage gap |
Absent from this copy, deliberatelyNo exposure figure, no risk pricing, no confidence score, no release quorum. The examiner’s claim is on the record of what was required and what was held — answered here completely, down to the digest of the document each requirement was configured from. The institution’s commercial position is a different question and this document does not answer it. The published verifier checks that on the content of the copy, not on the intentions of whoever produced it.
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:2e4a12edce500dbba65436629a3803a0b466cd7dabf7539dd60b6c803017f529 matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "REGULATOR",
"purpose": "An official holding a public mandate over this record — a customs officer, a bank examiner, a market conduct supervisor. Sees the regulatory record in full: their own instrument named, every required claim and whether it was met, by whom, how old. No commercial figure of any kind.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:098614f2a6ec766f620d1bd997be8c6c9de280f21f46b50abf7bddce4d9b8dad",
"entry_hash": "sha256:f779b303104836d4d4fffb85b456c1f4a36c78e858b5d2baca2a19cda63cf4e5",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:2e4a12edce500dbba65436629a3803a0b466cd7dabf7539dd60b6c803017f529",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "tprm_NORTHSTAR_BREACH_CLAUSE",
"subject": "supplier:NORTHSTAR-ANALYTICS",
"question": "May Northstar Analytics be renewed while its 24-hour breach notification commitment is outstanding?"
},
"memory": {
"state_digest": "sha256:abc8b64dea1c219b99a006d072f0f39a09424dfd7ecfb5921932d0022f8095d1",
"ledger_head": "sha256:3c274ca228fe2ca93d29b969a36ae43d9fb357fbac98e033b2d21e051262341f",
"coverage_gaps": [
"supplier:NORTHSTAR-ANALYTICS|privacy_breach_notification_24h"
]
},
"data_horizon": "2026-08-08T14:00:00.000Z",
"verdict": {
"value": "WITHHELD"
},
"regulatory": {
"spec": "corobate:regulatory:2",
"resolved": true,
"applied": [
{
"instrument_id": "ally-third-party-requirements",
"version": 5,
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"edition": "V.5.0",
"citation": "§ 8, 9, 11, 13 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
},
{
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"edition": "2023-06-06",
"citation": "Due diligence and ongoing monitoring [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"skipped": [],
"conflicts": [],
"bindings": [
{
"claim": "dr_test_certification",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "dr_test_certification",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "financial_condition_review",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — financial condition [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "incident_response_plan_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.7.2 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "never_waivable",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.5 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": [
{
"value": "SELLER-ASSERTED",
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — controls [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
}
}
],
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "subcontractor_inventory",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
}
],
"defaults": [
{
"claim": "dr_test_certification",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"dr_test_certification\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "financial_condition_review",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"financial_condition_review\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "incident_response_plan_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"incident_response_plan_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "penetration_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"penetration_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"privacy_breach_notification_24h\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "soc2_type2_report",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"soc2_type2_report\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "subcontractor_inventory",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"subcontractor_inventory\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
},
"inputs": [
{
"key": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory",
"provenance": "VERIFIED",
"source": "contract-repository:subcontractor_inventory",
"observed_at": "2026-08-03T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:sys:registry:contract-repository"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::financial_condition_review",
"provenance": "VERIFIED",
"source": "dnb-financials:financial_condition_review",
"observed_at": "2026-08-03T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:sys:registry:dnb-financials"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::penetration_test",
"provenance": "VERIFIED",
"source": "LAB-BISHOPFOX-PEN:penetration_test",
"observed_at": "2026-05-10T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:org:LAB-BISHOPFOX-PEN"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::soc2_type2_report",
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:soc2_type2_report",
"observed_at": "2026-04-10T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:org:CERT-DELOITTE-SOC"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification",
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:dr_test_certification",
"observed_at": "2026-03-11T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:org:CERT-DELOITTE-SOC"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::incident_response_plan_test",
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:incident_response_plan_test",
"observed_at": "2026-03-01T14:00:00.000Z",
"critical": true,
"memory_status": "admitted",
"memory_actor": "actor:org:CERT-DELOITTE-SOC"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::privacy_breach_notification_24h",
"provenance": "MISSING",
"source": null,
"observed_at": "2026-08-08T14:00:00.000Z",
"critical": true,
"memory_status": "coverage_gap"
}
],
"crypto_suite": {
"spec": "corobate:suite:1",
"id": "CB-1-ES256-SHA256",
"receipt_digest": "sha256",
"chain_digest": "sha256",
"content_digest": "sha256",
"envelope_signature": "ES256",
"signature_curve": "P-256",
"canonicalisation": "attest-canon/2",
"quantum_resistant": false
}
}
}Third-party risk officer
The third-party risk function that owns the file.
The fullest internal view: every input, its class, its age, its score, the exposure, and every instrument in force.
VerdictWITHHELD
Confidence0%
bound by privacy_breach_notification_24h
Exposure$8,400
ReleaseWITHHELD_NO_EVIDENCE
Risk acceptedNONE
Every input the gate saw
| Claim | Required | Evidence class | Who | Age | Score | Outcome |
|---|---|---|---|---|---|---|
| subcontractor_inventory | yes | VERIFIED | actor:sys:registry:contract-repository | 5d | 95% | admitted |
| financial_condition_review | yes | VERIFIED | actor:sys:registry:dnb-financials | 5d | 95% | admitted |
| penetration_test | yes | VERIFIED | actor:org:LAB-BISHOPFOX-PEN | 90d | 95% | admitted |
| soc2_type2_report | yes | VERIFIED | actor:org:CERT-DELOITTE-SOC | 120d | 95% | admitted |
| dr_test_certification | yes | VERIFIED | actor:org:CERT-DELOITTE-SOC | 150d | 95% | admitted |
| incident_response_plan_test | yes | VERIFIED | actor:org:CERT-DELOITTE-SOC | 160d | 95% | admitted |
| privacy_breach_notification_24h | yes | MISSING | — | 2026-08-08 | 0% | coverage gap |
Instruments in force
Ally — Supply Chain
Third Party Requirements V.5.0
§ 8, 9, 11, 13 [VERIFY] · edition V.5.0
document sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1
entered by actor:human:tprm-officer
Board of Governors of the Federal Reserve System
Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)
Due diligence and ongoing monitoring [VERIFY] · edition 2023-06-06
document sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2
entered by actor:human:tprm-officer
Why
- Coverage gap: no admissible memory for required claim(s) supplier:NORTHSTAR-ANALYTICS|privacy_breach_notification_24h.
- Confidence 0.00% is bound by "supplier:NORTHSTAR-ANALYTICS|privacy_breach_notification_24h".
- Thresholds for $8,400 exposure: approve 80%, caution 50%.
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:95f57898f6d70d1227a8b5b32509c7665f0b6a100be54152229b483ff893c0fd matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "COMPLIANCE",
"purpose": "The operator’s own compliance function. The fullest internal view: every gap, every instrument in force, the waivability of each requirement and who accepted what.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:098614f2a6ec766f620d1bd997be8c6c9de280f21f46b50abf7bddce4d9b8dad",
"entry_hash": "sha256:f779b303104836d4d4fffb85b456c1f4a36c78e858b5d2baca2a19cda63cf4e5",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:95f57898f6d70d1227a8b5b32509c7665f0b6a100be54152229b483ff893c0fd",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "tprm_NORTHSTAR_BREACH_CLAUSE",
"domain": "supply-chain",
"subject": "supplier:NORTHSTAR-ANALYTICS",
"question": "May Northstar Analytics be renewed while its 24-hour breach notification commitment is outstanding?"
},
"memory": {
"state_digest": "sha256:abc8b64dea1c219b99a006d072f0f39a09424dfd7ecfb5921932d0022f8095d1",
"ledger_head": "sha256:3c274ca228fe2ca93d29b969a36ae43d9fb357fbac98e033b2d21e051262341f",
"coverage_gaps": [
"supplier:NORTHSTAR-ANALYTICS|privacy_breach_notification_24h"
],
"exposure": {
"usd": 8400,
"declared_by": "actor:human:tprm-officer",
"ledger_seq": 10
},
"policy_digest": "sha256:a6b69b7d20f7fb04d522364af1d92992058b04a5835fcec9d1c9f2261c7ef636"
},
"data_horizon": "2026-08-08T14:00:00.000Z",
"verdict": {
"value": "WITHHELD",
"threshold_approve": 0.8,
"threshold_caution": 0.5,
"rule": "confidence>=threshold"
},
"confidence": {
"value": 0,
"method": "min-over-critical-inputs",
"bound_by": "supplier:NORTHSTAR-ANALYTICS::privacy_breach_notification_24h"
},
"release": {
"required": false,
"required_by_tier": false,
"escalated_by_acceptance": false,
"risk_accepted": false,
"state": "WITHHELD_NO_EVIDENCE",
"code": "QUORUM_EVIDENCE_WITHHELD",
"reason": "the evidence did not clear the threshold for this exposure, so there is nothing to release. Signatures do not substitute for evidence, and this state is deliberately distinct from WITHHELD_PENDING_SIGNATURES: a reader must be able to tell \"the evidence is not there\" from \"the evidence is there and 0 of 2 people have signed\".",
"tier_floor_cents": 1000000000,
"exposure_usd_cents": 840000,
"required_m": 2,
"declared_n": 3,
"floor_m": 2,
"distinct_signers": 0,
"superseded": 0,
"collapsed": 0,
"release_digest": "sha256:f7845bc0cf16ba8f935b12eaf0d33a1f32a5d39fa5cb7434f8b401379c38991e",
"governance_digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
"governance_signed": true,
"counted_voices": [],
"signatures": [],
"ledger_seq": null
},
"acceptance": {
"state": "NONE",
"code": "ACCEPTANCE_NONE",
"reason": "no risk acceptance was presented for this decision. This is the ordinary case: a refusal is a refusal unless a named person has priced it.",
"permitted_basis": null,
"presented": 1,
"superseded": 0,
"expired": 0,
"gaps_not_covered": 0,
"coverage_gaps_in_force": [
"supplier:NORTHSTAR-ANALYTICS|privacy_breach_notification_24h"
],
"evidentiary_digest": "sha256:f7845bc0cf16ba8f935b12eaf0d33a1f32a5d39fa5cb7434f8b401379c38991e",
"margin_floor_bp": 100,
"authority_ceiling_cents": {
"SUPERVISOR": 1000000,
"MANAGER": 25000000,
"DIRECTOR": 500000000,
"OFFICER": 5000000000
},
"acceptances": [
{
"acceptance_id": "sha256:9f652b8cdf7ef21c39e0242a47f89877457f25f114b35a6f5099a44cff8aa8ce",
"acceptor": "actor:human:svp-operations",
"role": "DIRECTOR",
"loss_cents": 250000000,
"gain_cents": 900000000,
"p_star_bp": 7826,
"p_asserted_bp": 140,
"margin_bp": 500,
"escalated": false,
"accepted_at": "2026-08-08T14:00:00.000Z",
"expires_at": "2026-09-02T14:00:00.000Z",
"evidentiary_digest": "sha256:f7845bc0cf16ba8f935b12eaf0d33a1f32a5d39fa5cb7434f8b401379c38991e",
"counted": false,
"disposition": "forbidden-never-waivable",
"ledger_seq": 9
}
],
"escalated": false,
"live": false,
"ledger_seq": null
},
"regulatory": {
"spec": "corobate:regulatory:2",
"resolved": true,
"applied": [
{
"instrument_id": "ally-third-party-requirements",
"version": 5,
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"edition": "V.5.0",
"citation": "§ 8, 9, 11, 13 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
},
{
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"edition": "2023-06-06",
"citation": "Due diligence and ongoing monitoring [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"skipped": [],
"conflicts": [],
"bindings": [
{
"claim": "dr_test_certification",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "dr_test_certification",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "financial_condition_review",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — financial condition [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "incident_response_plan_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.7.2 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "never_waivable",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.5 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": [
{
"value": "SELLER-ASSERTED",
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — controls [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
}
}
],
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "subcontractor_inventory",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
}
],
"defaults": [
{
"claim": "dr_test_certification",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"dr_test_certification\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "financial_condition_review",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"financial_condition_review\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "incident_response_plan_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"incident_response_plan_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "penetration_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"penetration_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"privacy_breach_notification_24h\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "soc2_type2_report",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"soc2_type2_report\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "subcontractor_inventory",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"subcontractor_inventory\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
},
"reasons": [
"Coverage gap: no admissible memory for required claim(s) supplier:NORTHSTAR-ANALYTICS|privacy_breach_notification_24h.",
"Confidence 0.00% is bound by \"supplier:NORTHSTAR-ANALYTICS|privacy_breach_notification_24h\".",
"Thresholds for $8,400 exposure: approve 80%, caution 50%."
],
"inputs": [
{
"key": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory",
"value": "current",
"provenance": "VERIFIED",
"source": "contract-repository:subcontractor_inventory",
"observed_at": "2026-08-03T14:00:00.000Z",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted",
"memory_kind": "status",
"memory_actor": "actor:sys:registry:contract-repository",
"memory_age_days": 5
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::financial_condition_review",
"value": "reviewed",
"provenance": "VERIFIED",
"source": "dnb-financials:financial_condition_review",
"observed_at": "2026-08-03T14:00:00.000Z",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted",
"memory_kind": "status",
"memory_actor": "actor:sys:registry:dnb-financials",
"memory_age_days": 5
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::penetration_test",
"value": "no-critical",
"provenance": "VERIFIED",
"source": "LAB-BISHOPFOX-PEN:penetration_test",
"observed_at": "2026-05-10T14:00:00.000Z",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted",
"memory_kind": "test_report",
"memory_actor": "actor:org:LAB-BISHOPFOX-PEN",
"memory_age_days": 90
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::soc2_type2_report",
"value": "unqualified",
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:soc2_type2_report",
"observed_at": "2026-04-10T14:00:00.000Z",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:org:CERT-DELOITTE-SOC",
"memory_age_days": 120
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification",
"value": "passed",
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:dr_test_certification",
"observed_at": "2026-03-11T14:00:00.000Z",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:org:CERT-DELOITTE-SOC",
"memory_age_days": 150
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::incident_response_plan_test",
"value": "passed",
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:incident_response_plan_test",
"observed_at": "2026-03-01T14:00:00.000Z",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:org:CERT-DELOITTE-SOC",
"memory_age_days": 160
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::privacy_breach_notification_24h",
"value": null,
"provenance": "MISSING",
"source": null,
"observed_at": "2026-08-08T14:00:00.000Z",
"reliability": 0,
"critical": true,
"memory_status": "coverage_gap"
}
],
"crypto_suite": {
"spec": "corobate:suite:1",
"id": "CB-1-ES256-SHA256",
"receipt_digest": "sha256",
"chain_digest": "sha256",
"content_digest": "sha256",
"envelope_signature": "ES256",
"signature_curve": "P-256",
"canonicalisation": "attest-canon/2",
"quantum_resistant": false
}
}
}Executive signer
A named signer on the release gate — the person whose signature is over the evidentiary state, not over the sentence.
What is at stake, what the evidence supports, what is missing, and the digest they are signing over.
You are being asked to sign
May Northstar Analytics be renewed while its 24-hour breach notification commitment is outstanding?
At stake$8,400
Evidence saysWITHHELD
Release stateWITHHELD_NO_EVIDENCE
signing over evidentiary digest sha256:f7845bc0cf16ba8f935b12eaf0d33a1f32a5d39fa5cb7434f8b401379c38991e
The signature is over the STATE OF THE EVIDENCE. Move one fact behind this decision and the digest moves and the signature stops counting — which is what makes it safe to collect signatures before everyone is in the room.
What is missing
- privacy breach notification 24h
The scoped copy itself — partial — something outside this role’s remit was removed
FAITHFUL digest sha256:84519241ba375634f1ee1ceedfe2191c283949f14811f6b61f7406a133c19420 matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "EXECUTIVE",
"purpose": "A named signer on the release gate. Sees what is at stake, what the evidence supports, who else has signed and what they are being asked to sign over.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:098614f2a6ec766f620d1bd997be8c6c9de280f21f46b50abf7bddce4d9b8dad",
"entry_hash": "sha256:f779b303104836d4d4fffb85b456c1f4a36c78e858b5d2baca2a19cda63cf4e5",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:84519241ba375634f1ee1ceedfe2191c283949f14811f6b61f7406a133c19420",
"withheld": {
"anything_withheld": true,
"note": "Facts outside this role’s remit were removed. That something was removed is stated so a partial record is never mistaken for a complete one. How much, and what, is not stated — a count is an inference about the part you are not entitled to see."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"issued_at": "2026-08-08T14:00:00.000Z",
"decision": {
"id": "tprm_NORTHSTAR_BREACH_CLAUSE",
"domain": "supply-chain",
"subject": "supplier:NORTHSTAR-ANALYTICS",
"question": "May Northstar Analytics be renewed while its 24-hour breach notification commitment is outstanding?"
},
"memory": {
"state_digest": "sha256:abc8b64dea1c219b99a006d072f0f39a09424dfd7ecfb5921932d0022f8095d1",
"ledger_head": "sha256:3c274ca228fe2ca93d29b969a36ae43d9fb357fbac98e033b2d21e051262341f",
"coverage_gaps": [
"supplier:NORTHSTAR-ANALYTICS|privacy_breach_notification_24h"
],
"exposure": {
"usd": 8400,
"declared_by": "actor:human:tprm-officer",
"ledger_seq": 10
}
},
"verdict": {
"value": "WITHHELD",
"threshold_approve": 0.8,
"threshold_caution": 0.5,
"rule": "confidence>=threshold"
},
"confidence": {
"value": 0,
"method": "min-over-critical-inputs",
"bound_by": "supplier:NORTHSTAR-ANALYTICS::privacy_breach_notification_24h"
},
"release": {
"required": false,
"required_by_tier": false,
"escalated_by_acceptance": false,
"risk_accepted": false,
"state": "WITHHELD_NO_EVIDENCE",
"code": "QUORUM_EVIDENCE_WITHHELD",
"reason": "the evidence did not clear the threshold for this exposure, so there is nothing to release. Signatures do not substitute for evidence, and this state is deliberately distinct from WITHHELD_PENDING_SIGNATURES: a reader must be able to tell \"the evidence is not there\" from \"the evidence is there and 0 of 2 people have signed\".",
"tier_floor_cents": 1000000000,
"exposure_usd_cents": 840000,
"required_m": 2,
"declared_n": 3,
"floor_m": 2,
"distinct_signers": 0,
"superseded": 0,
"collapsed": 0,
"release_digest": "sha256:f7845bc0cf16ba8f935b12eaf0d33a1f32a5d39fa5cb7434f8b401379c38991e",
"governance_digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
"governance_signed": true,
"counted_voices": [],
"signatures": [],
"ledger_seq": null
},
"acceptance": {
"state": "NONE",
"code": "ACCEPTANCE_NONE",
"reason": "no risk acceptance was presented for this decision. This is the ordinary case: a refusal is a refusal unless a named person has priced it.",
"permitted_basis": null,
"presented": 1,
"superseded": 0,
"expired": 0,
"gaps_not_covered": 0,
"coverage_gaps_in_force": [
"supplier:NORTHSTAR-ANALYTICS|privacy_breach_notification_24h"
],
"evidentiary_digest": "sha256:f7845bc0cf16ba8f935b12eaf0d33a1f32a5d39fa5cb7434f8b401379c38991e",
"margin_floor_bp": 100,
"authority_ceiling_cents": {
"SUPERVISOR": 1000000,
"MANAGER": 25000000,
"DIRECTOR": 500000000,
"OFFICER": 5000000000
},
"acceptances": [
{
"acceptance_id": "sha256:9f652b8cdf7ef21c39e0242a47f89877457f25f114b35a6f5099a44cff8aa8ce",
"acceptor": "actor:human:svp-operations",
"role": "DIRECTOR",
"loss_cents": 250000000,
"gain_cents": 900000000,
"p_star_bp": 7826,
"p_asserted_bp": 140,
"margin_bp": 500,
"escalated": false,
"accepted_at": "2026-08-08T14:00:00.000Z",
"expires_at": "2026-09-02T14:00:00.000Z",
"evidentiary_digest": "sha256:f7845bc0cf16ba8f935b12eaf0d33a1f32a5d39fa5cb7434f8b401379c38991e",
"counted": false,
"disposition": "forbidden-never-waivable",
"ledger_seq": 9
}
],
"escalated": false,
"live": false,
"ledger_seq": null
},
"reasons": [
"Coverage gap: no admissible memory for required claim(s) supplier:NORTHSTAR-ANALYTICS|privacy_breach_notification_24h.",
"Confidence 0.00% is bound by \"supplier:NORTHSTAR-ANALYTICS|privacy_breach_notification_24h\".",
"Thresholds for $8,400 exposure: approve 80%, caution 50%."
],
"regulatory": {
"applied": [
{
"instrument_id": "ally-third-party-requirements",
"version": 5,
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"edition": "V.5.0",
"citation": "§ 8, 9, 11, 13 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
},
{
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"edition": "2023-06-06",
"citation": "Due diligence and ongoing monitoring [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"conflicts": [],
"defaults": [
{
"claim": "dr_test_certification",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"dr_test_certification\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "financial_condition_review",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"financial_condition_review\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "incident_response_plan_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"incident_response_plan_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "penetration_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"penetration_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"privacy_breach_notification_24h\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "soc2_type2_report",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"soc2_type2_report\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "subcontractor_inventory",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"subcontractor_inventory\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
},
"inputs": [
{
"key": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory",
"provenance": "VERIFIED",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::financial_condition_review",
"provenance": "VERIFIED",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::penetration_test",
"provenance": "VERIFIED",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::soc2_type2_report",
"provenance": "VERIFIED",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification",
"provenance": "VERIFIED",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::incident_response_plan_test",
"provenance": "VERIFIED",
"reliability": 0.95,
"critical": true,
"memory_status": "admitted"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::privacy_breach_notification_24h",
"provenance": "MISSING",
"reliability": 0,
"critical": true,
"memory_status": "coverage_gap"
}
]
}
}Internal / external audit
Internal audit, or the external auditor testing the third-party programme.
Everything, plus the verifier’s own findings over the sealed record.
This view withholds nothing. What it adds is the 22 checks the published verifier ran over the sealed record behind every other view of this decision — recomputed at build time, not asserted.
| # | Check | Detail | |
|---|---|---|---|
| 1 | Content reproduces (JCS + SHA-256) | PASS | matches sha256:098614f2a6ec766f620d1bd997be8c6c9de280f21f46b50abf7bddce4d9b8dad |
| 2 | Hash chain links (entry = H(prev||content)) | PASS | head sha256:f779b303104836d4d4fffb85b456c1f4a36c78e858b5d2baca2a19cda63cf4e5 |
| 3 | Confidence gated by weakest critical input | PASS | min over critical = 0, bound_by supplier:NORTHSTAR-ANALYTICS::privacy_breach_notification_24h (MISSING) |
| 3b | Verdict follows the threshold rule | PASS | 0 => WITHHELD; recorded WITHHELD |
| 4 | Point-in-time seal (no input past data_horizon) | PASS | all inputs <= 2026-08-08T14:00:00.000Z |
| 5 | Anchor covers the head, and the timestamp token re-reads | PASS | internally consistent; NO external anchor was requested — this is not a validated timestamp |
| 6 | Criteria travel with the receipt and reproduce | PASS | policy_body hashes to sha256:a6b69b7d20f7fb04d522364af1d92992058b04a5835fcec9d1c9f2261c7ef636 |
| 7 | Reliability re-derives from recorded evidence | PASS | all 7 inputs re-derive exactly |
| 8 | Outcome trials and lineage discounts re-derive | PASS | 6 input(s) re-derive: 0 credited outcome trial(s), 0 lineage-discounted corroboration(s); every reliability is at or under its class ceiling |
| 9 | Re-ingested receipts respect their weakest-input ceiling | PASS | no re-ingested receipts: every input rests on a primary observation |
| 10 | Release quorum re-derives | PASS | WITHHELD_NO_EVIDENCE - below the top exposure tier, no multi-party requirement applies |
| 11 | Risk acceptance re-derives | PASS | no risk acceptance: this decision stands or falls on its evidence |
| 12 | Observer credentials were not revoked as of observation time | PASS | revocation list 12 (0 entries, issued 2026-08-06T00:00:00.000Z, next update due 2026-08-13T00:00:00.000Z) reproduces; 6 observer signature(s) judged as of their own instant, none under a key revoked as compromised or retired by then |
| 13 | The cryptographic suite is named and is one this verifier implements | PASS | sealed under CB-1-ES256-SHA256 (ES256 / sha256, attest-canon/2); this verifier implements it; the suite states it is NOT quantum resistant |
| 14 | Regulatory bindings are attributed and were enforced | PASS | 13 binding(s) from 2 instrument(s) in force, each attributed to an authority, a citation and a document digest; 7 required claim(s) all reached the gate |
| 15 | Role-view commitments re-derive, and the customs view carries no money | PASS | 6 role-view commitment(s) re-derived from this receipt’s own body by this verifier’s independent projection; the REGULATOR view carries no commercial figure |
| 16 | AI-authored input was admitted only where an authority allowed it | PASS | 0 claim(s) carry a position on AI-authored evidence set by an authority and 7 carry a recorded default nobody set; 0 exclusion(s) and 0 corroboration-only rule(s) re-derived against this receipt's own admitted inputs; 0 admitted input(s) are AI-authored by their enrolled identity |
| 17 | State digest recomputes from the ledger alone | UNVERIFIABLE | NOT APPLICABLE — you supplied no ledger, so the state digest cannot be re-derived from anything. This receipt commits to the corpus the deciding system held at the instant it sealed, and that commitment is checked by recomputing it from the append-only ledger and comparing; with no ledger in hand there is no second artefact to recompute from. The receipt is not at fault and nothing here is missing from it. Obtain the ledger from the issuer and re-run with --ledger <file>, or verifyReceipt(r, {ledger}). Nothing here has failed and nothing here has passed. |
| 18 | Registry membership re-derives for every key relied on | PASS | all 4 key(s) relied on re-derive to the entries root registry v7 committed to and the trust root signed |
| 20 | Geometric support re-derives, and an unevaluated record is not a supported one | PASS | no authority bound a metric to any claim on this receipt, so no geometric test applied. A claim nobody bound a metric to is not a claim about geometry, and this is a stated absence rather than a silent one |
| 19 | The cause of every uncovered requirement re-derives | PASS | all 1 uncovered requirement(s) re-derive their cause from this receipt's own rows. What notice is ADEQUATE is not decided here: this check establishes what the record says and that the record agrees with itself. |
| 21 | The sealing party is the one you were told to expect | UNVERIFIABLE | NOT APPLICABLE — you supplied no trust bundle, so nothing here establishes who sealed this. Identities 1 to 20 prove that this document agrees with itself; not one of them asks whose trust root it was sealed under, and a document that agrees with itself about a decision nobody made agrees with itself perfectly. Obtain the issuer's corobate:trust-bundle:1 out of band, confirm its spoken fingerprint with them by voice, and re-run with --trust-bundle <file> --expect-fingerprint <what you heard>. Nothing here has failed and nothing here has passed. |
The scoped copy itself — complete for this role
FAITHFUL digest sha256:0e009f6d68655bfff93f16af759935ab6faa551f6c6db9d4c448a6d11199cb00 matches the commitment sealed in the receipt.
{
"spec": "corobate:role-view:2",
"role": "AUDITOR",
"purpose": "An external assessor. Sees the complete sealed record: this view withholds nothing and exists so the identity case is a case rather than an exception.",
"is_a_receipt": false,
"warning": "This is a SCOPED COPY of a sealed decision, not the decision record itself. It will not verify as a receipt and must not be presented as one. To confirm it is faithful, recompute its `view` digest under the same canonicalisation that produces receipt_hash and compare it with the entry for this role in the source receipt’s `views` block.",
"derived_from": {
"receipt_hash": "sha256:098614f2a6ec766f620d1bd997be8c6c9de280f21f46b50abf7bddce4d9b8dad",
"entry_hash": "sha256:f779b303104836d4d4fffb85b456c1f4a36c78e858b5d2baca2a19cda63cf4e5",
"issued_at": "2026-08-08T14:00:00.000Z"
},
"view_digest": "sha256:0e009f6d68655bfff93f16af759935ab6faa551f6c6db9d4c448a6d11199cb00",
"withheld": {
"anything_withheld": false,
"note": "Nothing outside the seal was removed for this role."
},
"view": {
"spec": "urn:ietf:params:corobate:receipt:1",
"receipt_version": "1.8",
"engine": {
"name": "corobate-memory",
"version": "1.0.0"
},
"decision": {
"id": "tprm_NORTHSTAR_BREACH_CLAUSE",
"domain": "supply-chain",
"subject": "supplier:NORTHSTAR-ANALYTICS",
"question": "May Northstar Analytics be renewed while its 24-hour breach notification commitment is outstanding?"
},
"issued_at": "2026-08-08T14:00:00.000Z",
"data_horizon": "2026-08-08T14:00:00.000Z",
"inputs": [
{
"key": "supplier:NORTHSTAR-ANALYTICS::subcontractor_inventory",
"value": "current",
"provenance": "VERIFIED",
"source": "contract-repository:subcontractor_inventory",
"observed_at": "2026-08-03T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.95,
"critical": true,
"memory_id": "mem_685c7b294bed",
"memory_status": "admitted",
"memory_kind": "status",
"memory_actor": "actor:sys:registry:contract-repository",
"memory_age_days": 5,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:14ce95c48346261ae10752527d5ef434f4190afa9ee0e888f5341733fd3c7b5c",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": null,
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_393d373ff1a0f1b4",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 5,
"max_age_days": 14,
"house_max_age_days": 14,
"instrument_max_age_days": null,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[VERIFIED · r=95.0% · 5d · contract-repository:subcontractor_inventory] supplier:NORTHSTAR-ANALYTICS / subcontractor_inventory: current"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::financial_condition_review",
"value": "reviewed",
"provenance": "VERIFIED",
"source": "dnb-financials:financial_condition_review",
"observed_at": "2026-08-03T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.95,
"critical": true,
"memory_id": "mem_b16b1450d2c9",
"memory_status": "admitted",
"memory_kind": "status",
"memory_actor": "actor:sys:registry:dnb-financials",
"memory_age_days": 5,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:3c21bcae2db27c5d56b4c76d774c1280b005dfc2b96c5895a2b552ce28f6f253",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": null,
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_cc91f681b6ae25fd",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 5,
"max_age_days": 14,
"house_max_age_days": 14,
"instrument_max_age_days": null,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[VERIFIED · r=95.0% · 5d · dnb-financials:financial_condition_review] supplier:NORTHSTAR-ANALYTICS / financial_condition_review: reviewed"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::penetration_test",
"value": "no-critical",
"provenance": "VERIFIED",
"source": "LAB-BISHOPFOX-PEN:penetration_test",
"observed_at": "2026-05-10T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.95,
"critical": true,
"memory_id": "mem_36a1834b8a8a",
"memory_status": "admitted",
"memory_kind": "test_report",
"memory_actor": "actor:org:LAB-BISHOPFOX-PEN",
"memory_age_days": 90,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:0b0f01e5157e0a3912f0161e1a9770ddbaf5872f174fbe2f643d0e2b15c5b16f",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": "VERIFIED",
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_a6cacbd0fd83f53b",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 90,
"max_age_days": 180,
"house_max_age_days": 180,
"instrument_max_age_days": 365,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"min_class_floor": "VERIFIED",
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[VERIFIED · r=95.0% · 90d · LAB-BISHOPFOX-PEN:penetration_test] supplier:NORTHSTAR-ANALYTICS / penetration_test: no-critical"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::soc2_type2_report",
"value": "unqualified",
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:soc2_type2_report",
"observed_at": "2026-04-10T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.95,
"critical": true,
"memory_id": "mem_2888b1ab8da4",
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:org:CERT-DELOITTE-SOC",
"memory_age_days": 120,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:df0f17428d286befb0de68335c1e320b1486ed3c6660ce667b64ce613fed1ead",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": "VERIFIED",
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_c3c95bc9795296cd",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 120,
"max_age_days": 365,
"house_max_age_days": 365,
"instrument_max_age_days": 365,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"min_class_floor": "VERIFIED",
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[VERIFIED · r=95.0% · 120d · CERT-DELOITTE-SOC:soc2_type2_report] supplier:NORTHSTAR-ANALYTICS / soc2_type2_report: unqualified"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::dr_test_certification",
"value": "passed",
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:dr_test_certification",
"observed_at": "2026-03-11T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.95,
"critical": true,
"memory_id": "mem_51dcb16f4134",
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:org:CERT-DELOITTE-SOC",
"memory_age_days": 150,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:4b8265ad81c99af96e6a72386c775c575a7c4640eb864bb4ea68fe929870cbca",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": null,
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_c3c95bc9795296cd",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 150,
"max_age_days": 365,
"house_max_age_days": 365,
"instrument_max_age_days": 365,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[VERIFIED · r=95.0% · 150d · CERT-DELOITTE-SOC:dr_test_certification] supplier:NORTHSTAR-ANALYTICS / dr_test_certification: passed"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::incident_response_plan_test",
"value": "passed",
"provenance": "VERIFIED",
"source": "CERT-DELOITTE-SOC:incident_response_plan_test",
"observed_at": "2026-03-01T14:00:00.000Z",
"last_corroborated_at": null,
"memory_refreshed_by": [],
"reliability": 0.95,
"critical": true,
"memory_id": "mem_e78c5fa06064",
"memory_status": "admitted",
"memory_kind": "certificate",
"memory_actor": "actor:org:CERT-DELOITTE-SOC",
"memory_age_days": 160,
"memory_track": {
"n": 1,
"successes": 1
},
"memory_promoted_by": [],
"memory_content_digest": "sha256:82175d2f7741395a6a5f2957013701c668c5b112166e9a927d27450cab5c1d47",
"memory_outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"memory_outcome_attestations": [],
"memory_observer_lineage": null,
"memory_corroborations": [],
"memory_reingest": null,
"memory_reasons": [
"sparse track record: 1 independent observation(s); no failure recorded, so the class ceiling stands"
],
"memory_class_floor": null,
"memory_below_class_floor": false,
"memory_not_attested": false,
"memory_below_claim_reliability_floor": false,
"memory_not_competent_authority": false,
"memory_out_of_specification": false,
"memory_ai_authored": false,
"memory_ai_in_lineage": false,
"memory_ai_position": "ADMIT",
"memory_ai_inadmissible": false,
"memory_geo_inadmissible": false,
"memory_geo_rung": null,
"memory_geo_metric": null,
"memory_geo_required_metric": null,
"observer_attested": true,
"observer_auth_code": "VERIFIED",
"observer_key_id": "k_c3c95bc9795296cd",
"attestation": null,
"derivation": {
"provenance": "VERIFIED",
"ceiling_bp": 9500,
"track": {
"n": 1,
"successes": 1
},
"wilson_bp": null,
"age_days": 160,
"max_age_days": 365,
"house_max_age_days": 365,
"instrument_max_age_days": null,
"freshness_cap_bp": 4000,
"min_track_n": 5,
"wilson_z_milli": 1960,
"source_present": true,
"seller_asserted_cap_bp": 5000,
"retracted": false,
"contradicted": false,
"outcome_trials": 0,
"outcomes": {
"verified": 0,
"falsified": 0,
"modified": 0,
"counted": 0,
"recorded": 0
},
"corroborations_counted": 0,
"corroborations_discounted": 0,
"reingest_ceiling_bp": null,
"reingest_depth": null,
"reingest_weakest_class": null,
"reingest_source_confidence_bp": null,
"ai_authored": false,
"ai_authored_because": null,
"ai_in_lineage": false,
"ai_position": "ADMIT"
},
"memory_reason_codes": [
{
"code": "SPARSE_TRACK_RECORD",
"observed": 1,
"limit": 5,
"binding": false
}
],
"context_line": "[VERIFIED · r=95.0% · 160d · CERT-DELOITTE-SOC:incident_response_plan_test] supplier:NORTHSTAR-ANALYTICS / incident_response_plan_test: passed"
},
{
"key": "supplier:NORTHSTAR-ANALYTICS::privacy_breach_notification_24h",
"value": null,
"provenance": "MISSING",
"source": null,
"observed_at": "2026-08-08T14:00:00.000Z",
"reliability": 0,
"critical": true,
"memory_status": "coverage_gap",
"gap_cause": "NOTHING_SUBMITTED",
"gap_request": null,
"gap_origin": null,
"gap_conditions": []
}
],
"serialization": {
"algorithm": "RFC8785-JCS",
"hash": "sha256"
},
"crypto_suite": {
"spec": "corobate:suite:1",
"id": "CB-1-ES256-SHA256",
"receipt_digest": "sha256",
"chain_digest": "sha256",
"content_digest": "sha256",
"envelope_signature": "ES256",
"signature_curve": "P-256",
"canonicalisation": "attest-canon/2",
"quantum_resistant": false
},
"confidence": {
"value": 0,
"method": "min-over-critical-inputs",
"bound_by": "supplier:NORTHSTAR-ANALYTICS::privacy_breach_notification_24h"
},
"verdict": {
"value": "WITHHELD",
"threshold_approve": 0.8,
"threshold_caution": 0.5,
"rule": "confidence>=threshold"
},
"release": {
"required": false,
"required_by_tier": false,
"escalated_by_acceptance": false,
"risk_accepted": false,
"state": "WITHHELD_NO_EVIDENCE",
"code": "QUORUM_EVIDENCE_WITHHELD",
"reason": "the evidence did not clear the threshold for this exposure, so there is nothing to release. Signatures do not substitute for evidence, and this state is deliberately distinct from WITHHELD_PENDING_SIGNATURES: a reader must be able to tell \"the evidence is not there\" from \"the evidence is there and 0 of 2 people have signed\".",
"tier_floor_cents": 1000000000,
"exposure_usd_cents": 840000,
"required_m": 2,
"declared_n": 3,
"floor_m": 2,
"distinct_signers": 0,
"superseded": 0,
"collapsed": 0,
"release_digest": "sha256:f7845bc0cf16ba8f935b12eaf0d33a1f32a5d39fa5cb7434f8b401379c38991e",
"governance_digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
"governance_signed": true,
"counted_voices": [],
"signatures": [],
"ledger_seq": null
},
"acceptance": {
"state": "NONE",
"code": "ACCEPTANCE_NONE",
"reason": "no risk acceptance was presented for this decision. This is the ordinary case: a refusal is a refusal unless a named person has priced it.",
"permitted_basis": null,
"presented": 1,
"superseded": 0,
"expired": 0,
"gaps_not_covered": 0,
"coverage_gaps_in_force": [
"supplier:NORTHSTAR-ANALYTICS|privacy_breach_notification_24h"
],
"evidentiary_digest": "sha256:f7845bc0cf16ba8f935b12eaf0d33a1f32a5d39fa5cb7434f8b401379c38991e",
"margin_floor_bp": 100,
"authority_ceiling_cents": {
"SUPERVISOR": 1000000,
"MANAGER": 25000000,
"DIRECTOR": 500000000,
"OFFICER": 5000000000
},
"acceptances": [
{
"acceptance_id": "sha256:9f652b8cdf7ef21c39e0242a47f89877457f25f114b35a6f5099a44cff8aa8ce",
"acceptor": "actor:human:svp-operations",
"role": "DIRECTOR",
"loss_cents": 250000000,
"gain_cents": 900000000,
"p_star_bp": 7826,
"p_asserted_bp": 140,
"margin_bp": 500,
"escalated": false,
"accepted_at": "2026-08-08T14:00:00.000Z",
"expires_at": "2026-09-02T14:00:00.000Z",
"evidentiary_digest": "sha256:f7845bc0cf16ba8f935b12eaf0d33a1f32a5d39fa5cb7434f8b401379c38991e",
"counted": false,
"disposition": "forbidden-never-waivable",
"ledger_seq": 9
}
],
"escalated": false,
"live": false,
"ledger_seq": null
},
"regulatory": {
"spec": "corobate:regulatory:2",
"resolved": true,
"applied": [
{
"instrument_id": "ally-third-party-requirements",
"version": 5,
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"edition": "V.5.0",
"citation": "§ 8, 9, 11, 13 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
},
{
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"edition": "2023-06-06",
"citation": "Due diligence and ongoing monitoring [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2",
"entered_by": "actor:human:tprm-officer",
"entered_at": "2026-08-08T14:00:00.000Z"
}
],
"skipped": [],
"conflicts": [],
"bindings": [
{
"claim": "dr_test_certification",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "dr_test_certification",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 11.6.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "financial_condition_review",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — financial condition [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "incident_response_plan_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.7.2 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "penetration_test",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 8.9.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "never_waivable",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 9.7.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "max_age_days",
"value": 365,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.5 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "min_class",
"value": "VERIFIED",
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": [
{
"value": "SELLER-ASSERTED",
"bound_by": {
"authority": "Board of Governors of the Federal Reserve System",
"instrument": "Interagency Guidance on Third-Party Relationships: Risk Management (SR 23-4)",
"instrument_id": "frb-sr-23-4-interagency-third-party",
"version": 1,
"edition": "2023-06-06",
"citation": "Due diligence — controls [VERIFY]",
"source_digest": "sha256:b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2b2"
}
}
],
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "soc2_type2_report",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.6 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
},
{
"claim": "subcontractor_inventory",
"requirement": "required",
"value": true,
"bound_by": {
"authority": "Ally — Supply Chain",
"instrument": "Third Party Requirements V.5.0",
"instrument_id": "ally-third-party-requirements",
"version": 5,
"edition": "V.5.0",
"citation": "§ 13.1.1 [VERIFY]",
"source_digest": "sha256:a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1"
},
"also_bound_by": null,
"weaker_asks": null,
"downgraded_from": null,
"downgrade_reason": null
}
],
"defaults": [
{
"claim": "dr_test_certification",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"dr_test_certification\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "financial_condition_review",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"financial_condition_review\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "incident_response_plan_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"incident_response_plan_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "penetration_test",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"penetration_test\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "privacy_breach_notification_24h",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"privacy_breach_notification_24h\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "soc2_type2_report",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"soc2_type2_report\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
},
{
"claim": "subcontractor_inventory",
"requirement": "ai_position",
"value": "ADMIT",
"because": "No instrument in force stated a position on AI-authored evidence for \"subcontractor_inventory\". The deploying organisation's own default admitted it, capped at MODELED by the class table as any model output is. This is a setting, not an absence: nobody with authority over this claim was asked, and the action proceeded anyway."
}
]
},
"reasons": [
"Coverage gap: no admissible memory for required claim(s) supplier:NORTHSTAR-ANALYTICS|privacy_breach_notification_24h.",
"Confidence 0.00% is bound by \"supplier:NORTHSTAR-ANALYTICS|privacy_breach_notification_24h\".",
"Thresholds for $8,400 exposure: approve 80%, caution 50%."
],
"memory": {
"layer": "capture->store->recall->act",
"ledger_head": "sha256:3c274ca228fe2ca93d29b969a36ae43d9fb357fbac98e033b2d21e051262341f",
"ledger_entries": 12,
"context_digest": null,
"context_memory_ids": [],
"state_digest": "sha256:abc8b64dea1c219b99a006d072f0f39a09424dfd7ecfb5921932d0022f8095d1",
"retrieval_method": "idf-lexical",
"corpus_size": 6,
"considered": 6,
"admitted": 6,
"withheld": 0,
"not_considered": 0,
"coverage_gaps": [
"supplier:NORTHSTAR-ANALYTICS|privacy_breach_notification_24h"
],
"exposure": {
"usd": 8400,
"declared_by": "actor:human:tprm-officer",
"ledger_seq": 10
},
"salience_policy": {
"half_life_days": 90,
"grace_days": 7,
"access_boost_bp": 500,
"access_boost_cap_bp": 2500,
"relevance_weight_bp": 6000,
"recency_weight_bp": 3000,
"usage_weight_bp": 1000,
"context_cap": 12,
"method": "idf-lexical",
"candidate_list_digest": "sha256:f91bbc1d3b4178d5915b6c6393c9856bf10d1cf53276bbef4793e2c400336878",
"note": "salience orders retrieval only; it never contributes to reliability"
},
"policy_digest": "sha256:a6b69b7d20f7fb04d522364af1d92992058b04a5835fcec9d1c9f2261c7ef636",
"policy_body": {
"class_ceiling_bp": {
"VERIFIED": 9500,
"MODELED": 8000,
"SELLER-ASSERTED": 5000,
"MISSING": 0
},
"actor_class_ceiling": [
[
"^actor:ai:",
"MODELED"
],
[
"^actor:agent:",
"MODELED"
],
[
"^actor:human:",
"SELLER-ASSERTED"
],
[
"^actor:org:LAB-",
"VERIFIED"
],
[
"^actor:org:CERT-",
"VERIFIED"
],
[
"^actor:org:",
"SELLER-ASSERTED"
],
[
"^actor:sys:registry:",
"VERIFIED"
],
[
"^actor:sys:sensor:",
"VERIFIED"
],
[
"^actor:sys:",
"MODELED"
]
],
"freshness_cap_bp": 4000,
"max_age_days": {
"telemetry": 1,
"price": 7,
"status": 14,
"certificate": 365,
"test_report": 180,
"filing": 90,
"transcript": 120,
"highlight": 365,
"voice_note": 120,
"note": 365,
"preference": 540,
"decision": 1825,
"receipt": 365,
"default": 90
},
"wilson_z_milli": 1960,
"min_track_n": 5,
"exposure_tiers_bp": [
[
1000000000,
9500,
8000
],
[
100000000,
9000,
7000
],
[
1000000,
8500,
6000
],
[
0,
8000,
5000
]
],
"max_context_memories": 12,
"contradiction_resolve_margin": 2,
"salience": {
"half_life_days": 90,
"grace_days": 7,
"access_boost_bp": 500,
"access_boost_cap_bp": 2500,
"relevance_weight_bp": 6000,
"recency_weight_bp": 3000,
"usage_weight_bp": 1000
}
},
"observer_auth": {
"mode": "required",
"registry_version": 7,
"registry_digest": "sha256:bb1bffa0668fd3ddcc24d30288a62fe52c873bba1396a245c138765263ca68e4",
"entries_root": "sha256:052a44853cd278e4d33a14e709d108aadf2b2079177402c408b935a574b7b8b1",
"memberships": [
{
"key_id": "k_393d373ff1a0f1b4",
"index": 6,
"entry": {
"actor": "actor:sys:registry:contract-repository",
"class": "VERIFIED",
"kind": "system",
"key_id": "k_393d373ff1a0f1b4",
"jwk": {
"kty": "EC",
"crv": "P-256",
"x": "p7fbljJU3LbgvYVbDJvlFhvgeRtxIl6a7hcGn6gw37o",
"y": "QIz0r6fSv_fpuHexvW8T5BnxzQe8zqAC-_OW7UtNoa4"
},
"valid_from": "2025-01-01T00:00:00.000Z",
"valid_to": "2027-06-01T00:00:00.000Z"
},
"path": [
{
"side": "right",
"sibling": "sha256:770d3738b21df6728542e9a3d8d8313b5b83a4dc49819d40519ec9bcf9d6c93a"
},
{
"side": "left",
"sibling": "sha256:a7c0de2a235c1c26640b4db5b931ee69e09f4da9a2d96f07997c5f51f8e0ad4a"
},
{
"side": "left",
"sibling": "sha256:dcea5dab73759e138fad2cd13ff65c0a9fbd8172beab6f9eb480d802f741d0b6"
},
{
"side": "right",
"sibling": "sha256:b0d6d854c0fbace92cd9b0e1b8f05851c2a6f51da82f934b55f3391095b9e3c6"
}
]
},
{
"key_id": "k_a6cacbd0fd83f53b",
"index": 1,
"entry": {
"actor": "actor:org:LAB-BISHOPFOX-PEN",
"class": "VERIFIED",
"kind": "org",
"key_id": "k_a6cacbd0fd83f53b",
"jwk": {
"kty": "EC",
"crv": "P-256",
"x": "Ch_GAfrcwbNBD53nf8MhzRQv3dvkYrQwYaut1kmrQu4",
"y": "26e0at_OMmtDi7iOSK7RqjeyZomyasIEM20iF0cxfrA"
},
"valid_from": "2025-01-01T00:00:00.000Z",
"valid_to": "2027-06-01T00:00:00.000Z"
},
"path": [
{
"side": "left",
"sibling": "sha256:7676859944c464baf75a2d7d4be7ff2f1632b94921aff419d7908f5d0c15d2bc"
},
{
"side": "right",
"sibling": "sha256:97bc43a75580b998c635a55a452ec5e66fea912fbdb987a9c14e29d6311be924"
},
{
"side": "right",
"sibling": "sha256:4f3031707d2416b5567eb739ca5d25f2cc36acc2bd8d026bf221c367179718a0"
},
{
"side": "right",
"sibling": "sha256:b0d6d854c0fbace92cd9b0e1b8f05851c2a6f51da82f934b55f3391095b9e3c6"
}
]
},
{
"key_id": "k_c3c95bc9795296cd",
"index": 0,
"entry": {
"actor": "actor:org:CERT-DELOITTE-SOC",
"class": "VERIFIED",
"kind": "org",
"key_id": "k_c3c95bc9795296cd",
"jwk": {
"kty": "EC",
"crv": "P-256",
"x": "cO4w4AuCfc-hheIJnEzQj-z-MBcHIfl34mygv9kl3mI",
"y": "PDPYdxnb9V0d43GLjpNC2_xyHVBbarmHkHxa3EOXJxg"
},
"valid_from": "2025-01-01T00:00:00.000Z",
"valid_to": "2027-06-01T00:00:00.000Z"
},
"path": [
{
"side": "right",
"sibling": "sha256:aff188754372ce4622403f6cb8e4c7f2456137aa416b101109aad75f6e614acb"
},
{
"side": "right",
"sibling": "sha256:97bc43a75580b998c635a55a452ec5e66fea912fbdb987a9c14e29d6311be924"
},
{
"side": "right",
"sibling": "sha256:4f3031707d2416b5567eb739ca5d25f2cc36acc2bd8d026bf221c367179718a0"
},
{
"side": "right",
"sibling": "sha256:b0d6d854c0fbace92cd9b0e1b8f05851c2a6f51da82f934b55f3391095b9e3c6"
}
]
},
{
"key_id": "k_cc91f681b6ae25fd",
"index": 5,
"entry": {
"actor": "actor:sys:registry:dnb-financials",
"class": "VERIFIED",
"kind": "system",
"key_id": "k_cc91f681b6ae25fd",
"jwk": {
"kty": "EC",
"crv": "P-256",
"x": "DFXpGQ7rpQaaBpywUK8Pj8S2cxPbM88v8-bbykgRHv4",
"y": "H_xRwy6ppm8p99nST5CibdkIu7bk8hl_2DFuuV43zUU"
},
"valid_from": "2025-01-01T00:00:00.000Z",
"valid_to": "2027-06-01T00:00:00.000Z"
},
"path": [
{
"side": "left",
"sibling": "sha256:820b93ba17cff14537dccf9ad01952b78f5d18d8044ada2d11a8211bb6399dcb"
},
{
"side": "right",
"sibling": "sha256:36eb73c9aa8175028706fd11c7981df6bb6fd33dc0acc6d7a10e179c7bf5f295"
},
{
"side": "left",
"sibling": "sha256:dcea5dab73759e138fad2cd13ff65c0a9fbd8172beab6f9eb480d802f741d0b6"
},
{
"side": "right",
"sibling": "sha256:b0d6d854c0fbace92cd9b0e1b8f05851c2a6f51da82f934b55f3391095b9e3c6"
}
]
}
],
"memberships_unproven": [],
"revocation": {
"source": "SIGNED_LIST",
"digest": "sha256:739c516c92fbb8d46951fc274ec199896004081698b412180c096074bd59b884",
"sequence": 12,
"registry_version": 7,
"issued_at": "2026-08-06T00:00:00.000Z",
"next_update_due": "2026-08-13T00:00:00.000Z",
"entry_count": 0,
"body": {
"sequence": 12,
"registry_version": 7,
"issuer": {
"name": "Ally-shaped demonstration trust root",
"key_id": "k_d2a5a08e98bed6cd"
},
"issued_at": "2026-08-06T00:00:00.000Z",
"next_update_due": "2026-08-13T00:00:00.000Z",
"entries": [],
"spec": "corobate:revocation-list:1"
}
}
},
"governance": {
"digest": "sha256:8b0a45a27fcce9c1c243c764e855e67c6fe6dfd7f02a563bd90809b419731905",
"signed": true,
"actor_trust": "FLOOR_TO_SELLER_ASSERTED",
"outcome_trial_weight": 1,
"max_reingest_depth": 3,
"release_quorum_m": 2,
"release_quorum_n": 3,
"risk_acceptance_margin_bp": 500,
"risk_acceptance_max_days": 30,
"risk_acceptance_authority_cents": {
"SUPERVISOR": 1000000,
"MANAGER": 25000000,
"DIRECTOR": 500000000,
"OFFICER": 5000000000
},
"template_author_roles": [
"MANAGER",
"DIRECTOR",
"OFFICER"
]
},
"observers_attested": 6,
"outcomes": {
"attestations_counted": 0,
"attestations_recorded": 0,
"records_with_outcomes": 0
},
"lineage": {
"corroborations_counted": 0,
"corroborations_discounted": 0,
"records_with_discounted_corroborations": 0
},
"reingest": {
"records": 0,
"max_depth": 0,
"weakest_class": null,
"chain_weakest_bp": 10000,
"chain": []
},
"template": null
}
}
}What this exercise changed in the product
Two of the six role names did not survive contact with a bank. They were DOCK and CUSTOMS, because the first chain anybody modelled was a physical shipment. The person who must act now is a funding desk or a title clerk, not a dock worker; the official with a claim on the record is an examiner, not a customs officer. Nothing about the projections was wrong — the same facts belonged in the same places — but two names had quietly encoded one industry into a mechanism that is not about that industry. They are now OPERATOR and REGULATOR, named by position rather than by setting.
The other thing this exercise proved is that the instrument registry does not only read government instruments. The strictest requirement in three of these decisions comes from a company's own published supplier standard, not from a regulator — and the receipt has to be able to say which of the two bound each line, because "we exceed the guidance here" is a claim worth being able to demonstrate.
Generated by
The three instruments are real published documents and the clause numbers were read off their published text. Every one is flagged [VERIFY]: a compliance professional must confirm each reading, and the source digests are placeholders for documents this build never fetched. The STRUCTURE is the claim; the readings are not.
Instruments were modelled from: Ally Third Party Requirements V.5.0 · Ally Supply Chain — supplier program · NAAA Arbitration Policy, effective 1 June 2026 · Ally SmartAuction overview. Party names other than the publishing bodies are invented; no real vendor, dealer, assessor or vehicle is described here.
This page makes no network request and stores nothing in your browser.
Patent pending — U.S. Patent Application No. 19/747,068.
node 03-source/make-ally-data.js --write and
node 16-site/build-ally.js. The build refuses to write a page if any receipt
fails to verify, if any scoped copy fails its commitment check, or if the examiner's copy
contains a commercial figure.The three instruments are real published documents and the clause numbers were read off their published text. Every one is flagged [VERIFY]: a compliance professional must confirm each reading, and the source digests are placeholders for documents this build never fetched. The STRUCTURE is the claim; the readings are not.
Instruments were modelled from: Ally Third Party Requirements V.5.0 · Ally Supply Chain — supplier program · NAAA Arbitration Policy, effective 1 June 2026 · Ally SmartAuction overview. Party names other than the publishing bodies are invented; no real vendor, dealer, assessor or vehicle is described here.
This page makes no network request and stores nothing in your browser.
Patent pending — U.S. Patent Application No. 19/747,068.