“Governed AI” means nothing until you can point at the Tuesday it changes.

Results

• UC001

  Tenant stand-up with jurisdiction packs

  Org onboarded; Art-12 GDR schema live log-or-refuse from the first decision

  P5

• UC002

  Marketing trial to live tenant

  Demo CTA → sandboxed trial tenant → first governed decision the same session

  P5P6

• UC003

  Wording and binder ingestion

  Sandbox-first, 3-tier-OCR intake into the encoded-rule substrate, clause-anchored

  P4

• UC004

  Core-system decision-interception seam

  Per-core seam wired; any surface without the tenant predicate REFUSES

  P1✕

• UC005

  Model-inventory registration

  Every licensed cat/pricing model into the run ledger with validation calendar

  P6

• UC006

  Exposure import on OED rails

  Portfolio intake on the industry's neutral schema, geocoded onto the living map

  P7

• UC007

  Roles, chairs and seats provisioning

  Named chairs, seats and autonomy tiers granted via gated bindings

  P2P9

• UC008

  Guided first governed decision

  Wizard walks one real decision through to its first sealed GDR

  P1P3

• UC009

  Read-seat invitations issued

  Regulator/reinsurer scoped read-seats provisioned; the scope itself provable

  P5P6

• UC010

  ⚠ Predicate-less surface refuses

  Missing tenant predicate → machine-coded refusal; never a silent org-wide read

  ✕

• UC011

  Submission intake confidence routing

  Per-field confidence routes each submission to the matched reviewer on the ladder

  P1

• UC012

  Claims triage meta-decision

  Coverage/liability/litigation scores choose automation depth and room; routing logged

  P1

• UC013

  Quote-time hazard in the moment

  Per-location hazard scored inside the decision; run logged into its GDR

  P7

• UC014

  Visual damage calibrated certainty

  Certainty score routes touchless vs human review; factor decomposition attached

  P1P3

• UC015

  Governed OSINT for SIU

  Recorded authorisation, scoped collection, automatic retention limits (*Vukota-Bojić*-proof)

  P1P5

• UC016

  Appetite-in-the-loop constraint

  Live portfolio accumulation state injected as a hard constraint per individual risk

  P7P2

• UC017

  Omnichannel FNOL capture

  FNOL from any channel lands as one routed, logged intake event

  P1

• UC018

  Autonomy-tier assignment logged

  The T1–T5 tier chosen per decision; the choice itself a GDR event

  P1

• UC019

  Straight-through lane still gated

  No room convened; P3 gates + GDR remain mandatory for every effect

  P1P3

• UC020

  ⚠ Queue saturation honest escalation

  SLA breach risk surfaces loudly; triage degrades to human lanes, never silently drops

  P1

• UC021

  Chaired underwriting committee

  Accept/decline/refer argued by heterogeneous persona seats; the named chair rules

  P2

• UC022

  Claims committee Red-Queen seat

  Adversarial seat punctures consensus before the chair ever sees it

  P2

• UC023

  Out-of-authority referral room

  The referral is a waitpointed carrier approval, not an email thread

  P2P9

• UC024

  Appeal room re-deliberation

  Dispute re-argued with a customer-advocate persona; re-certify or overturn, both logged

  P2P5

• UC025

  Filing-grade MCP evidence tools

  Every external tool call logged into the deliberation trace with provenance

  P2P5

• UC026

  Dissent map exploration

  The chair navigates the structure of disagreement before ruling

  P2

• UC027

  Enforced heterogeneous evidence slices

  Each seat argues from its assigned slice; overlapping slices refused

  P2

• UC028

  Chair ruling with reasons

  Override + reasons captured at a durable waitpoint; the ruling seals the thread

  P2P5

• UC029

  Live room relay spectating

  Authorised stakeholder watches the deliberation stream read-only, live

  P2

• UC030

  ⚠ Deadlocked room, chair timeout

  No verdict → fails closed to escalation; nothing releases without a ruling

  P2

• UC031

  Gated bind dual-control arming

  A second named human arms the bind capability before any agent can invoke it

  P9

• UC032

  Pen-boundary-verified bind

  "Outside the pen?" answered before the bind button arms; fails closed

  P4P8

• UC033

  Parametric adjudication with certificate

  Feeds treated as observations, never settlement indexes; adjudication gated and sealed

  P7P3

• UC034

  Governed config change

  Thresholds, checklists, autonomy modes change only via gated, rollback-able GDR events

  P9

• UC035

  Verifier: open the decision

  The maths, predicate inputs and rule trace rendered readable per decision

  P3P4

• UC036

  One-click re-verify: valid

  Re-derivation reproduces the sealed verdict bit-for-bit; verdict VALID

  P3

• UC037

  Re-verify: version mismatch

  Model/rule version drift detected; the mismatch named precisely, never hidden

  P3P6

• UC038

  Invalid certificate quarantine

  Failed re-verify flags the decision; downstream effects held pending review

  P3P5

• UC039

  "Why was this denied?"

  Chat answers grounded ONLY in the GDR derivation, never post-hoc rationalisation

  P5

• UC040

  ⚠ Cross-model disagreement fails closed

  Agreement predicate fails → no effect released; T5 fail-closed [P] proven visible

  P3

• UC041

  Bible authoring and calibration gym

  A bible is drilled against decided cases and must beat the champion before sitting live

  P2P6

• UC042

  Bible CRUD with clause anchors

  Create/edit/retire persona bibles anchored to wording clauses and lines of business

  P2

• UC043

  Bible version diff review

  Side-by-side semantic diff of bible versions before any promotion

  P2P9

• UC044

  Evolution timeline and memory audit

  How the bible learned over time; every mutation attributable and replayable

  P2

• UC045

  Calibration drill against decided cases

  Closed decisions replayed; per-seat calibration curves scored and ranked

  P2P6

• UC046

  Red-Queen seat authoring

  The adversarial persona designed and drilled specifically to puncture consensus

  P2

• UC047

  Bible promotion gate to rooms

  Promotion into live rooms is itself a gated, certificate-bearing change

  P2P9

• UC048

  Bible licensing across units

  A calibrated bible + its performance ledger licensed across business units (exchange = year-3)

  P2

• UC049

  Performance ledger review

  Per-bible calibration, override and outcome history as a first-class record

  P2P6

• UC050

  ⚠ Miscalibrated bible auto-benched

  Calibration decay detected → bible pulled from live rooms; the benching logged

  P2P6

• UC051

  Live-event book impact

  The actual unfolding storm re-simulated against the actual portfolio, per tick

  P7

• UC052

  Event room gated response

  Moratorium / surge staffing / cede notice proposed from live sim, cross-model checked, gated

  P7P2

• UC053

  Event-signal to armed FNOL

  A storm signal may *propose* an FNOL burst; a named human arms the passage

  P7P1

• UC054

  Conversational what-if overlay

  "Shift the track 40 km north" steers a reversible sim; every scenario logged

  P7

• UC055

  Overlay compare A/B

  Two scenario overlays diffed side by side; live state untouched

  P7

• UC056

  GDELT news sentinel

  The news watcher raises governed signals, evidence-grade at birth

  P7P1

• UC057

  Weather watcher config and arming

  Per-peril watcher thresholds configured and armed via gated bindings

  P7P9

• UC058

  Book-drift sentinel

  Loss-experience vs filed-model back-test warnings, surprisal-ranked

  P6

• UC059

  Quote/sim isolation proof

  Every what-if runs `props.sim=true`, scrubable, reversible; live mutation impossible

  P7

• UC060

  ⚠ Feed outage staleness quarantine

  A dead feed declares its staleness; dependent decisions flagged, never silently fresh

  P7P5

• UC061

  Lloyd's dossier auto-compiled

  The validation dossier compiled per external model per year — the wedge sale

  P6

• UC062

  Independent-evidence replay mode

  Seeded, replayable back-test ledgers any auditor or acquirer re-runs bit-for-bit

  P6

• UC063

  Model Change Board

  Adopting a new vendor-model version deliberated as a capital-grade event

  P6P9

• UC064

  Model promotion to serving

  Eval-gate + cross-model sentinel + named-owner sign-off; unregistrable models cannot deploy

  P6P3

• UC065

  ORSA/stress governed cycle

  Capital statements as governed, reversible overlay runs with chair sign-off

  P7P2

• UC066

  Reinsurer confidence pack

  Scoped read-seat onto the tenant's adherence + validation ledger

  P6P5

• UC067

  Dataset registration and lineage

  Datasets registered with provenance before any training may touch them

  P6

• UC068

  Training run with eval gates

  The prep→tune→eval-gate chain runs governed, every step PCC-streamed

  P6

• UC069

  Drift alert to governed retrain

  A drift signal proposes retraining; the Model Change Board disposes

  P6P9

• UC070

  ⚠ Irreproducible run refuses dossier

  Seed mismatch → the run is inadmissible; the dossier refuses to compile

  P6

• UC071

  Counterparty registry and vetting

  Agent-Card exchange + legal-entity and regulatory vetting before any corridor opens

  P9

• UC072

  Subrogation corridor demand

  `subrogation.demand` over A2A with BiPRO/ACORD payloads, end to end

  P9

• UC073

  Input-required interrupt to chamber

  A corridor interrupt pulls evidence through the P2 gates, never around them

  P9P2

• UC074

  Dually-signed settlement artefact

  The terminal artefact signed by both parties, independently verifiable

  P9P3

• UC075

  Corridor monitor operations

  Live task states, interrupts and ageing across all open corridors

  P9

• UC076

  Paired-baseline corridor metrics

  Corridor recoveries measured against the baseline lane — the mesh's admission test

  P9

• UC077

  Agent-card v1.0 migration

  The v0.3.0→v1.0.0 Signed-Agent-Card migration operated as governed change [P]

  P9

• UC078

  Corridor evidence into the GDR

  Every corridor exchange lands in the decision thread it belongs to

  P9P5

• UC079

  Bordereaux corridor preview

  Placement/bordereaux corridors staged once subrogation liquidity proves

  P9

• UC080

  ⚠ Counterparty outage fails safe

  A dead counterparty parks the task with honest deadlines; nothing is lost

  P9

• UC081

  Folded docket triage

  One-hand folded posture; today's decisions ranked, swipeable, actionable

  P8

• UC082

  Unfolded thread and dissent map

  The full room thread + dissent map opens across the unfolded display

  P8P2

• UC083

  Chair-on-the-move approval

  Docket triage, dissent review and gated approval with reasons capture, chat-first

  P8P2

• UC084

  Field capture with provenance

  Witnessed, provenance-stamped photo/document capture at the risk address

  P8

• UC085

  Show-the-insured tabletop capture

  Dual-screen viewfinder mirroring — contestability at the moment evidence is made

  P8

• UC086

  Doorstep claim settlement

  The decision sealed on site where the authority matrix lawfully allows

  P8P3

• UC087

  Doorstep certificate verification

  The insured scans and verifies the handed certificate on the spot

  P8P3

• UC088

  Offline sync proof obligation

  A completed sync emits a verifiable receipt — sync is a proof, not a hope

  P8

• UC089

  Field degraded-status screen

  Per-service health on device: what is stale, what is off, since when

  P8P5

• UC090

  ⚠ Sync failure loud quarantine

  A failed sync is loud and logged; evidence quarantined, never silently lost

  P8

• UC091

  Regulator conversational replay

  A scoped token lets a supervisor interrogate one decision's full thread

  P5

• UC092

  Jurisdiction-pack expansion

  NAIC / Colorado / E-23 emitters switched on from the same event log

  P5

• UC093

  Status feed is the audit trail

  The policyholder claim timeline as a projection of the tamper-evident log

  P5

• UC094

  Named human on adverse decisions

  The gate's sign-off record surfaced as the #1 demanded consumer feature

  P2P5

• UC095

  Hash-chained submission receipts

  Receipts the carrier's own systems cannot contradict

  P5

• UC096

  Appeal-as-workflow embed

  A dispute in the carrier's app instantiates UC024's governed room

  P2P5

• UC097

  Inference-boundary certified absence

  Lineage tags + context gates [P]; the GDR certifies no psychometric ever touched the decision

  ✕

• UC098

  Rubber-stamp telemetry

  Chair override rates, reasons quality and decision-time distributions as a compliance metric

  P2P5

• UC099

  Erasure versus evidence continuity

  GDPR erasure honoured by crypto-shredding; chain continuity preserved and provable

  P5

• UC100

  ⚠ Degraded-mode honesty

  Per-service health surfaced in-app; the evidence chain records what was unavailable, when

  P5P8