Line of business · Reinsurers
You price a cedant’s book on their own account of their own controls. What arrives is a slide, not a record.
Their models, their validation, their overrides, their change history: you are told about all of it and shown almost none of it. At renewal you end up pricing the uncertainty in the account itself, and both sides know that is what is happening.
What breaks at renewal today
The pack is a narrative
Assembled for you, by the party it describes, after the year it describes. Every number in it is an output; the runs behind them stay on the other side of the wall. (UC066)
You cannot re-execute anything
A back-test you cannot re-run is a claim about a back-test. Often the cedant cannot re-run it either, because the seed and the inputs were never kept together. (UC062)
Override behaviour is invisible
How often a chair overrode the model, on what grounds, and whether the overrides cluster in one class of risk is the most predictive material in the file and the least likely to be in it. (UC098)
Scope is granted by trust, not proved
An extract emailed to you is a copy in your control, with no record of what you were entitled to see. A seat scoped by the same predicate that scopes their own staff is provable in both directions. (UC009)
What a scoped seat can rest on today
Which pillars answer it
P6 · for the Model Risk Lead
Validation-Evidence Autopilot
The annual validation dossier compiles itself, out of runs that were reproducible on the day they happened — rather than being reconstructed once a year from memory and spreadsheets.
The ledger you read is the one the cedant keeps for their own validation — seeded runs, logged judgements, champion–challenger records — not a document written for a renewal.
shipped(shipped)P5 · for the Chief Compliance Officer
One-Log, Many-Regulator Evidence Fabric
One governed event stream compiles into every regulator’s artefact, instead of four teams reconstructing four different stories from the same week.
The read-seat is a scoped projection of one governed event stream, so what you see and what their supervisor sees are the same thread, cut differently.
shipped(shipped)P3 · for the Chief Risk Officer
Cross-Model Computed Gate → Sealed Certificate
Two or more heterogeneous models re-derive the answer. A computed — not learned — agreement predicate must pass before anything is released, and the inputs and model versions are sealed into the record.
Decisions in that book carry the verdict of a cross-model gate, with predicate inputs and model versions sealed alongside them.
shipped(shipped)P9 · for the Chief Operating Officer
Governed Change Control + the A2A Corridor
Changing a rule, a threshold, a persona or a model version is itself a governed decision that carries a certificate — and the same discipline extends to actions between companies.
Threshold, rule and model-version changes inside the treaty period are themselves governed events, so the book you priced is the book you can still recognise.
designed, not built(designed, not built)What this does not do yet, for a confidence pack
WHAT THIS DOES NOT DO YET
- Drift-detection logic. The alert taxonomy and stores exist; the detection does not.
- The jurisdiction-pack emitters.
- A2A migration from the spec version our endpoint conforms to (v0.3.0) to the current one (v1.0.0), plus the party model, claim-state synchronisation and conflict surfacing.
Read plainly: a seat onto the ledger is a stronger artefact than a pack, and it is still not a substitute for your own view of the book. The drift detection that would tell either party a model has moved since validation is not built, and neither are the per-regime renderings — the material behind them is one stream, today.
REFUSED
SCOPE_PREDICATE_MISSING
A read-seat that cannot express whose data it is reading refuses to read at all — no placeholder identifier, no silent portfolio-wide read.
A seat that quietly widened would be worthless to you and dangerous to the cedant. Because it refuses instead, both sides can prove the same thing: you can show what you were entitled to see, and they can show what you were not.
Start with one cedant, one treaty year
A read-seat is provisioned by the cedant, scoped to what they agree to show, and revocable by them. Nothing moves out of their tenant. What changes at the next renewal is that the conversation starts from a ledger you both read rather than a document one of you wrote.