Loading officer dashboard…

Credit model governance

Live model validation · PSI drift · override monitoring · governance evidence · promotion gate

Risk overview unavailable

Model validation read unavailable

fail closed

Model validation read is unavailable. No representative PSI, override, or governance rows are shown.

Promotion gate

blocked

model change control

Evidence

incomplete

projection completeness

Max PSI

—

▼12-month validation window

Override rate

—

▼manual movement / applications

Overdue governance

▲validation events

Breach tickets

▼1 blocking

Model attestations

▼3 challenger packs

Lifecycle controls

▼33 action packs

Model-risk control summary

blocked

Model-risk controls are unavailable until the validation projection returns governance metadata.

Production model validation attestations

b32df36d90b5...49327b84

Production models

inventory rows

Approved

▲deployment gate

Restricted

▲committee review

Blocked

▼promotion hold

Challenger packs

champion comparisons

Custody hashes

attestations + challengers

Production model	Business use	Validation sign-off

Model lifecycle and fair-lending governance

51d7f5f116c5...a863b2a3

Kenya loan-application model decisions tracked through lifecycle, development data, independent validation, champion-challenger, demographic parity, adverse impact, drift, override, notice, retirement, and board evidence custody.

Lifecycle ready

0/3

▼production models

Datasets ready

3/3

▲development lineage

Fair-lending ready

0/3

▼AIR, reasons, notices

Workflows ready

3/8

▼approvals, minutes, attestation

Receipts ready

3/8

▼tickets, signatures, provider refs

Automated model-risk breach tickets

promotion blocked

Open tickets

Critical

▼

High

Medium

Blocking

▼

Trigger	Severity	Control	Threshold	Observed	Owner	Action
Model validation read unavailable risk/models/validation / due immediate	critical	Fail-closed model-risk monitoring	live validation read required	Model validation read is unavailable.	model risk	Block model promotion and notice dispatch until the validation projection is readable.

Adverse-action notice readiness

dispatch blocked

Regulation B specific principal reasons, CFPB complex-algorithm adverse action, and model validation gate evidence for officer review.

Preview scenarios

Principal reason codes

Evidence fields

Gates needing review

Scenario	Decision channel	Specific reasons	Evidence fields	Notice text	Officer action
Thin-file supplier decline / last 90 days	SME scorecard v2026.07 Regulation B specific principal reasons, CFPB complex-algorithm adverse action	INSUFFICIENT_HISTORY We could not verify enough recent repayment or trading history to support the requested credit amount. LIMITED_BUREAU We did not receive enough recent credit bureau evidence to independently validate repayment performance.	bid_count + lpo_count, bureau_pull_count	We could not verify enough recent repayment or trading history to support the requested credit amount. We did not receive enough recent credit bureau evidence to independently validate repayment performance.

Notice quality gates

blocked

Gate	Standard	Status	Evidence	Owner
Specific principal reasons	Regulation B specific principal reasons	pass	Each preview resolves backend reason codes into applicant-facing principal reason language.	fair lending
Complex-model explainability	CFPB complex-algorithm adverse action	pass	Notice reasons expose the underwriting signal and source evidence field behind each scorecard code.	model risk
Model validation gate	SR 11-7 model risk management	blocked	Notice dispatch blocked because the model validation read is unavailable: Model validation read is unavailable.	credit risk
Manual review custody	Examiner-grade auditability	watch	Officer actions define what must be reconciled before notice dispatch or counteroffer issue.	credit operations

Live adverse-action archive, QA, appeals, and board attestations

Recorded officer reject and counter-offer packets, borrower notice dispatch custody, QA sampling, applicant appeals, archive hashes, and fair-lending committee package hashes.

Archived decisions0governed outcomes

Queued notices0dispatch-ready

Manual review0restricted gate

Dispatched0borrower notice

Export ready0fair-lending rows

QA samples0notice control tests

Reviewed0sample outcomes

Failed QA0control breaks

Open appeals0complaint challenges

Board ready0attestable rows

Board packages0attested packets

Signed minutes0board custody

Examiner packs0request-ready

SLA breaches0complaint posture

Examiner ready0complete evidence

Routed packs0supervisory + audit

Workqueue0regulatory response

Audit exports0workpaper custody

Exceptions closed0model lifecycle

Handoff done0all controls

Tasks assigned0named owner

Evidence files0audit vault

Attested0closure control

Board follow-up0model risk

Closeout done0governance complete

Calendar0committee slot

Reg packages0submission pack

Audit issues0issue tracking

Escalations0overdue alerts

External done0all handoffs

Calendar receipt0provider event

Portal receipts0regulator ack

Audit closed0remediation

SLA notices0delivered

Receipts done0closure proof

Application	Reason	Notice	Evidence	Governance hash	Export hash	Archive hash	Action
No recorded adverse-action governance packets are available.

QA sample	Notice custody	QA status	Appeal	Board package	Control action
No adverse-action archive rows are available for QA sampling.

Board package	Complaint SLA	Signed minutes	Examiner pack	Response route	Operational handoff	Governance closeout	External workflow	Receipts	Evidence hash	Action
No board attestation packages are available for signed minutes or examiner evidence packs.

Required remediation actions

0 actions

No remediation actions are available because model governance metadata is missing.

Population stability

PSI drift: stable <0.10, minor 0.10-0.25, major >0.25

Month	PSI	Status
No live PSI validation snapshots are available.

Score-band override monitoring

Automated approvals and officer movements by score band

Band	Applications	Auto approve	Override up	Override down	Override rate
No live score override snapshots are available.

Governance evidence calendar

Independent validation, monitoring, and sign-off events

Date	Event	Status	Owner
No live model governance events are available.

Champion	Challenger	Back-test window	Champion / challenger	Fairness and override evidence	Promotion decision
sme-credit-scorecard-v4	SME-XGB-CHALLENGER-2026Q2 gradient boosted challenger	2025-07 to 2026-06	0.742 / 0.751 (90 bps)	FAIR-2026-Q2-SME-014 POL-MODEL-OVERRIDE-2026-03	hold challenger promotion until validation gate opens cc8e6bc0670e...9a6de475
collections-propensity-v3	COLL-CALIBRATED-LOGIT-2026Q2 calibrated logistic challenger	2025-10 to 2026-06	0.681 / 0.679 (-20 bps)	FAIR-2026-Q2-COLL-006 POL-COLLECTIONS-MODEL-2026-02	hold challenger promotion until validation gate opens 202caf9caaa7...bed4dde8
early-warning-liquidity-v2	TREAS-SURVIVAL-CHALLENGER-2026Q2 survival-analysis challenger	2025-07 to 2026-06	0.714 / 0.718 (40 bps)	FAIR-2026-Q2-TREAS-003 POL-TREASURY-MODEL-2026-01	hold challenger promotion until validation gate opens 754254103f72...1806841d

Production lifecycle

Model	Evidence chain	Gate	Status	Custody
SME credit scorecard v4.8.2 / credit risk	MVAL-2026-Q2-SME-001 sme-scorecard-training-v2026q2 / SME-XGB-CHALLENGER-2026Q2 FAIR-2026-Q2-SME-014 / POL-MODEL-OVERRIDE-2026-03	blocked production promotion blocked because the validation read is unavailable	breach	40ae310b5888...0aa5a04f
Collections propensity model v3.3.1 / collections strategy	MVAL-2026-Q2-COLL-004 collections-propensity-training-v2026q2 / COLL-CALIBRATED-LOGIT-2026Q2 FAIR-2026-Q2-COLL-006 / POL-COLLECTIONS-MODEL-2026-02	blocked production promotion blocked because the validation read is unavailable	breach	08d0ade76319...b9b2db1b
Early-warning liquidity stress model v2.6.0 / treasury risk	MVAL-2026-Q2-TREAS-009 treasury-liquidity-stress-training-v2026q2 / TREAS-SURVIVAL-CHALLENGER-2026Q2 FAIR-2026-Q2-TREAS-003 / POL-TREASURY-MODEL-2026-01	blocked production promotion blocked because the validation read is unavailable	breach	dcb9cbf574a9...338e989f

Development data

Dataset	Window	Quality	Status
SME scorecard development and back-test sample DLIN-SME-2026-Q2-001	2024-07 to 2026-06	24 months / 0.60% missing lineage ready	within
Collections propensity development and monitoring sample DLIN-COLL-2026-Q2-004	2024-10 to 2026-06	21 months / 0.80% missing lineage ready	within
Treasury liquidity stress development and back-test sample DLIN-TREAS-2026-Q2-009	2024-07 to 2026-06	24 months / 0.40% missing lineage ready	within

Webhook transcript persistence

5 transcript actions

Event	Payload	Replay	Validation	Retention	Status	Custody
ServiceNow CHG-2026-07-08-approval-rollback-ready	stored / persisted 2026-07-08T16:12:05Z immut://model-lifecycle/webhooks/servicenow-change/2026-07-08/CHG-2026-07-08-approval-rollback-ready.payload	accepted / 300s servicenow-change:CHG-2026-07-08-approval-rollback-ready	signature ready / schema ready platform-security-webhook-verifier	ack 202 / retention 2033-07-08 7 hashes	breach	ba7af0840f4f...de89b00c
Microsoft Graph GRAPH-CAL-2026-07-08-committee-response	stored / persisted 2026-07-08T13:30:04Z immut://model-lifecycle/webhooks/graph-calendar/2026-07-08/GRAPH-CAL-2026-07-08-committee-response.payload	accepted / 300s graph-calendar:GRAPH-CAL-2026-07-08-committee-response	signature ready / schema ready platform-security-graph-subscription-verifier	ack 202 / retention 2033-07-08 7 hashes	breach	48f0d88fcd27...6b029d6b
DocuSign Connect DS-CONNECT-2026-07-08-board-minutes-completed	stored / persisted 2026-07-08T19:30:04Z immut://model-lifecycle/webhooks/docusign-connect/2026-07-08/DS-CONNECT-2026-07-08-board-minutes-completed.payload	accepted / 300s docusign-connect:DS-CONNECT-2026-07-08-board-minutes-completed	signature ready / schema ready platform-security-docusign-connect-verifier	ack 202 / retention 2033-07-08 7 hashes	breach	d6d804ebc52e...b72566a5
Fair-lending QA archive FL-QA-2026-07-08-sample-closed	stored / persisted 2026-07-08T17:20:03Z immut://model-lifecycle/webhooks/fair-lending-qa/2026-07-08/FL-QA-2026-07-08-sample-closed.payload	accepted / 300s fair-lending-qa:FL-QA-2026-07-08-sample-closed	signature ready / schema ready platform-security-fair-lending-qa-verifier	ack 202 / retention 2033-07-08 7 hashes	breach	a2b9e2a9642f...016d1231
Model registry REGISTRY-2026-07-08-challenger-promotion	stored / persisted 2026-07-08T15:45:02Z immut://model-lifecycle/webhooks/model-registry/2026-07-08/REGISTRY-2026-07-08-challenger-promotion.payload	accepted / 300s model-registry:REGISTRY-2026-07-08-challenger-promotion	signature ready / schema ready platform-security-model-registry-verifier	ack 202 / retention 2033-07-08 6 hashes	within	0788f4f21df3...50a318bd
ServiceNow and runbook archive INC-RUNBOOK-2026-07-08-retirement-ready	stored / persisted 2026-07-08T18:10:02Z immut://model-lifecycle/webhooks/incident-runbook/2026-07-08/INC-RUNBOOK-2026-07-08-retirement-ready.payload	accepted / 300s incident-runbook:INC-RUNBOOK-2026-07-08-retirement-ready	signature ready / schema ready platform-security-incident-runbook-verifier	ack 202 / retention 2033-07-08 7 hashes	breach	cd13f358a887...111cd213

Live ingestion telemetry

jsonl / 0 actions

Webhook records

0 accepted

Success ack

100%

▲within

Durable stored

100%

▲append-only JSONL

Duplicate rate

▲0 duplicate

Rejected

▲0 stale

Replay keys

300s window

SLO	Current	Target	Status
Accepted or duplicate-acknowledged webhook deliveries	100%	99%	within
Webhook transcripts persisted to append-only JSONL	100%	100%	within
Duplicate webhook delivery rate	0%	5%	within
Stale webhook delivery rate	0%	1%	within
Rejected webhook delivery rate	0%	1%	within

Provider	Outcomes	Durable
ServiceNow servicenow-change	0 accepted / 0 duplicate 0 stale / 0 rejected	0 / 100%
Microsoft Graph graph-calendar	0 accepted / 0 duplicate 0 stale / 0 rejected	0 / 100%
DocuSign Connect docusign-connect	0 accepted / 0 duplicate 0 stale / 0 rejected	0 / 100%
Fair-lending QA archive fair-lending-qa	0 accepted / 0 duplicate 0 stale / 0 rejected	0 / 100%
Model registry model-registry	0 accepted / 0 duplicate 0 stale / 0 rejected	0 / 100%
ServiceNow and runbook archive incident-runbook	0 accepted / 0 duplicate 0 stale / 0 rejected	0 / 100%

Action	Generated	Store
No ingestion SLO actions are open.	2026-08-17T01:43:39.091Z	MODEL_LIFECYCLE_WEBHOOK_LEDGER_PATH

Replay SLO alert execution

6772ca82cda8...bcf9db2f

Policies

dry-run execution

Firing

▲critical incidents

Watch

▲operator review

Quiet

within thresholds

Incidents

▲model-lifecycle-alert-runner

Replay job

none

plan evidence

Policy	Signal	Current	Status	Action
model-lifecycle-webhook-success-ack-slo model operations, platform security, and records management	Accepted or duplicate-acknowledged webhook deliveries 300s replay window / append-only ledger	100% / >= 99%	quiet info	Open a model-lifecycle webhook ingestion incident and reconcile rejected evidence before workflow completion is trusted. runbook://model-lifecycle/webhook-replay-slo-alerts / /api/provider-webhooks/model-lifecycle/[provider]/replay
model-lifecycle-webhook-durable-storage-slo model operations, platform security, and records management	Webhook transcripts persisted to append-only JSONL 300s replay window / append-only ledger	100% / >= 100%	quiet info	Repair append-only transcript storage, verify MODEL_LIFECYCLE_WEBHOOK_LEDGER_PATH, and rerun replay planning for affected evidence. runbook://model-lifecycle/webhook-replay-slo-alerts / /api/provider-webhooks/model-lifecycle/[provider]/replay
model-lifecycle-webhook-duplicate-rate-slo model operations, platform security, and records management	Duplicate webhook delivery rate 300s replay window / append-only ledger	0% / <= 5%	quiet info	Review provider retry behavior, replay cache keys, and idempotency controls before accepting additional duplicate workflow evidence. runbook://model-lifecycle/webhook-replay-slo-alerts / /api/provider-webhooks/model-lifecycle/[provider]/replay
model-lifecycle-webhook-stale-rate-slo model operations, platform security, and records management	Stale webhook delivery rate 300s replay window / append-only ledger	0% / <= 1%	quiet

Incident	Observed	Evidence	Action	Custody
No replay SLO alert incidents are firing or on watch.

WORM and KMS custody vault

9e4538c23d98...b7aebcd7

Objects

aws_s3_object_lock

Locked

2/2

▲2555d retention

KMS ready

2/2

▲key refs and versions

Secrets

6/6

▲rotation attestations

Controls

▲0 watch

Artifact	Object lock	KMS	Audit	Status	Hash
transcript ledger worm+s3-object-lock://situ-model-lifecycle-evidence/all-providers/all-providers/transcript_ledger/transcript_ledger-2a5d6f1e4486df830a.json append-only-jsonl://model-lifecycle/webhooks	compliance / until 2033-08-15 versioning on / locked yes / model-lifecycle-all-providers-transcript_ledger	kms://model-lifecycle/webhooks/all-providers/evidence-custody-key key-version-2a88eb20b19b0629 / due 2026-11-15	audit-log://model-lifecycle/webhook-custody/all-providers/transcript_ledger replication://model-lifecycle/webhook-custody/all-providers/transcript_ledger/secondary-region	within	cfceec340b5c...bc069fb8
alert execution receipt worm+s3-object-lock://situ-model-lifecycle-evidence/all-providers/all-providers/alert_execution_receipt/alert_execution_receipt-bfce14e0380cee232c.json alert-execution://model-lifecycle-webhook-alert-execution-e1355829c3e02b4f592be245	compliance / until 2033-08-15 versioning on / locked yes / model-lifecycle-all-providers-alert_execution_receipt	kms://model-lifecycle/webhooks/all-providers/evidence-custody-key key-version-2a88eb20b19b0629 / due 2026-11-15	audit-log://model-lifecycle/webhook-custody/all-providers/alert_execution_receipt replication://model-lifecycle/webhook-custody/all-providers/alert_execution_receipt/secondary-region	within	cf5d7fa31688...844b8678

Provider	Secret	Rotation	Status
ServiceNow servicenow-change	MODEL_LIFECYCLE_SERVICENOW_CHANGE_WEBHOOK_SECRET kms://model-lifecycle/webhooks/servicenow-change/provider-signing-secret	90d / due 2026-10-01 dual-control://model-lifecycle/webhooks/servicenow-change/secret-rotation	within d2f23f4733b7...70a74473
Microsoft Graph graph-calendar	MODEL_LIFECYCLE_GRAPH_CLIENT_STATE kms://model-lifecycle/webhooks/graph-calendar/provider-signing-secret	90d / due 2026-10-01 dual-control://model-lifecycle/webhooks/graph-calendar/secret-rotation	within b834f189f756...9c665458
DocuSign Connect docusign-connect	MODEL_LIFECYCLE_DOCUSIGN_CONNECT_WEBHOOK_SECRET kms://model-lifecycle/webhooks/docusign-connect/provider-signing-secret	90d / due 2026-10-01 dual-control://model-lifecycle/webhooks/docusign-connect/secret-rotation	within c9a750fe3aca...17906a2a
Fair-lending QA archive fair-lending-qa	MODEL_LIFECYCLE_FAIR_LENDING_QA_WEBHOOK_SECRET kms://model-lifecycle/webhooks/fair-lending-qa/provider-signing-secret	90d / due 2026-10-01 dual-control://model-lifecycle/webhooks/fair-lending-qa/secret-rotation	within 8771aaf84d4f...3049eb3f
Model registry model-registry

Custody operations verification

496c93a185a6...b0c2ce84

Object locks

2/2

▲worm+s3-object-lock://situ-model-lifecycle-evidence/all-providers

KMS jobs

8/8

▲object keys + provider secrets

Dual control

8/8

▲model-lifecycle-custody-operations-runner

Controls

▲0 watch

Object	Retention	API receipt	Evidence	Status	Hash
transcript ledger transcript_ledger-2a5d6f1e4486df830a / aws s3 object lock	compliance until 2033-08-15 model-lifecycle-all-providers-transcript_ledger	cloud-object-lock-confir...98e4e6915476 version 580d9630055326adc3aa98e4e6915476	audit-log://model-lifecy...cript_ledger 5 refs / replication ready	confirmed versioning + lock	19545105dace...2be9f55c
alert execution receipt alert_execution_receipt-bfce14e0380cee232c / aws s3 object lock	compliance until 2033-08-15 model-lifecycle-all-providers-alert_execution_receipt	cloud-object-lock-confir...9465efea4aa9 version 6f809cdcdb107956401a9465efea4aa9	audit-log://model-lifecy...tion_receipt 5 refs / replication ready	confirmed versioning + lock	c9a3d662790b...9885138b

Source	Key	Rotation	Verification	Status	Hash
custody object key transcript_ledger-2a5d6f1e4486df830a	kms://model-lifecycle/we...-custody-key key-version-2a88eb20b19b0629	90d / due 2026-11-15 kms-rotation-job://model...4840f1c72729	kms-rotation-verificatio...eb20b19b0629 dual-control://model-lifecycle/webhooks/all-providers/custody-object-key-rotation/transcript_ledger-2a5d6f1e4486df830a	scheduled 4 refs	9eb75b6b7643...8a0ec5fb
custody object key alert_execution_receipt-bfce14e0380cee232c	kms://model-lifecycle/we...-custody-key key-version-2a88eb20b19b0629	90d / due 2026-11-15 kms-rotation-job://model...4840f1c72729	kms-rotation-verificatio...eb20b19b0629 dual-control://model-lifecycle/webhooks/all-providers/custody-object-key-rotation/alert_execution_receipt-bfce14e0380cee232c	scheduled 4 refs	ef8596a21f2f...279ccd52
provider secret MODEL_LIFECYCLE_SERVICENOW_CHANGE_WEBHOOK_SECRET	kms://model-lifecycle/we...gning-secret key-version-a6f38e9be5bcb878	90d / due 2026-10-01 kms-rotation-job://model...e5bcb878f5a0	kms-rotation-verificatio...8e9be5bcb878 dual-control://model-lifecycle/webhooks/servicenow-change/secret-rotation

Control	Metric	Status
Cloud object-lock API confirmation coverage cloud-object-lock-confirmation://model-lifecycle/webhooks/aws_s3_object_lock/580d9630055326adc3aa98e4e6915476, cloud-object-lock-confirmation://model-lifecycle/webhooks/aws_s3_object_lock/6f809cdcdb107956401a9465efea4aa9	100% / 100%	within Confirm every custody object through cloud object-lock or immutable blob policy APIs.
Minimum immutable retention horizon transcript_ledger-2a5d6f1e4486df830a:2033-08-15T01:43:39.100Z, alert_execution_receipt-bfce14e0380cee232c:2033-08-15T01:43:39.100Z	2555d / 365d	within Extend immutable retention on custody objects whose remaining retention falls below the policy floor.
KMS rotation job schedule coverage kms-rotation-job://model-lifecycle/webhooks/all-providers/a7db3ceb4840f1c72729, kms-rotation-job://model-lifecycle/webhooks/all-providers/a7db3ceb4840f1c72729, kms-rotation-job://model-lifecycle/webhooks/servicenow-change/a6f38e9be5bcb878f5a0, kms-rotation-job://model-lifecycle/webhooks/graph-calendar/f34c4bcbe39de501ce60, kms-rotation-job://model-lifecycle/webhooks/docusign-connect/30103a1a4f7c027d99cd, kms-rotation-job://model-lifecycle/webhooks/fair-lending-qa/52765e51ea6063b5a8cd, kms-rotation-job://model-lifecycle/webhooks/model-registry/de446a4bec119ab7a268, kms-rotation-job://model-lifecycle/webhooks/incident-runbook/f9d9942f7e2ae9e93139	100% / 100%	within Schedule KMS rotation jobs for every custody object key and provider signing secret.
Dual-control readiness for KMS operations dual-control://model-lifecycle/webhooks/all-providers/custody-object-key-rotation/transcript_ledger-2a5d6f1e4486df830a, dual-control://model-lifecycle/webhooks/all-providers/custody-object-key-rotation/alert_execution_receipt-bfce14e0380cee232c, dual-control://model-lifecycle/webhooks/servicenow-change/secret-rotation, dual-control://model-lifecycle/webhooks/graph-calendar/secret-rotation, dual-control://model-lifecycle/webhooks/docusign-connect/secret-rotation, dual-control://model-lifecycle/webhooks/fair-lending-qa/secret-rotation, dual-control://model-lifecycle/webhooks/model-registry/secret-rotation, dual-control://model-lifecycle/webhooks/incident-runbook/secret-rotation

Regulator export delivery receipts

612a93a9dce4...56ab2044

Artifacts

manifest + custody evidence

Encrypted

14/14

▲export package entries

Destinations

model-lifecycle-regulator-export-runner

Acknowledged

3/3

▲delivery receipts

Controls

▲0 watch

Recipient	Channel	Receipt	Release	Package	Status	Hash
CBK supervisory evidence portal model risk supervisory information request	regulator portal cbk-supervisory-portal	regulator_portal://model-lifecycle/regulator-exports/cbk-supervisory-portal/a3ccdb7a188598ca ack 2026-08-17T03:43:39.109Z / target 24h	dual-control://model-lifecycle/regulator-export/cbk-supervisory-portal/a3ccdb7a188598ca recipient-key://cbk-supervisory-portal/model-lifecycle	14 artifacts a3ccdb7a1885...c464711c / 9e4538c23d98...b7aebcd7	acknowledged	de8438c4cf8f...d97490a0
Internal audit model-risk workpapers internal audit reliance and issue-validation evidence	audit workpaper vault internal-audit-workpapers	audit_workpaper_vault://model-lifecycle/regulator-exports/internal-audit-workpapers/a3ccdb7a188598ca ack 2026-08-17T03:43:39.109Z / target 12h	dual-control://model-lifecycle/regulator-export/internal-audit-workpapers/a3ccdb7a188598ca recipient-key://internal-audit/model-lifecycle-workpapers	14 artifacts a3ccdb7a1885...c464711c / 9e4538c23d98...b7aebcd7	acknowledged	097adc4030a6...5ac7e073
Board Risk Committee portal archive board model-risk attestation and signed-minute archive	board portal board-risk-committee-portal	board_portal://model-lifecycle/regulator-exports/board-risk-committee-portal/a3ccdb7a188598ca ack 2026-08-17T03:43:39.109Z / target 8h	dual-control://model-lifecycle/regulator-export/board-risk-committee-portal/a3ccdb7a188598ca recipient-key://board-risk-committee/model-lifecycle	14 artifacts a3ccdb7a1885...c464711c / 9e4538c23d98...b7aebcd7	acknowledged	136586d846ee...b0c425bc

Artifact	Export	Retention	Status
custody manifest custody-vault-package://model-lifecycle-webhook-custody-vault-ef5be7fdb9b319dfbc5b0498	encrypted-export://model-lifecycle/regulator-exports/all-providers/custody_manifest/model-lifecycle-regulator-export-artifact-7370e37d4f54bbc609e7.json.enc sha256 / 22ebc18eb956...8f2f07f8	2033-08-15	encrypted af9f2e4c26b3...9ea2b658
transcript ledger append-only-jsonl://model-lifecycle/webhooks	encrypted-export://model-lifecycle/regulator-exports/all-providers/transcript_ledger/model-lifecycle-regulator-export-artifact-04054a7c052b6c108c0c.json.enc sha256 / 4fd3474a8bba...6745e472	2033-08-15	encrypted 83d8cbadc1d0...1d140d88
alert execution receipt alert-execution://model-lifecycle-webhook-alert-execution-e1355829c3e02b4f592be245	encrypted-export://model-lifecycle/regulator-exports/all-providers/alert_execution_receipt/model-lifecycle-regulator-export-artifact-feca7d5455e3d3373bc0.json.enc sha256 / 9156ee3368b7...84cbf7b9	2033-08-15	encrypted 8035e34f5c41...d3ea3367
secret rotation attestation attestation://model-lifecycle/webhooks/servicenow-change/kms-secret-rotation/2026-08-17	encrypted-export://model-lifecycle/regulator-exports/all-providers/secret_rotation_attestation/model-lifecycle-regulator-export-artifact-2e9a5b7a0acab8a58bc5.json.enc sha256 / 63d18ac0eec7...b8486085	2026-10-01	encrypted 8beaa4f559b6...65008cc3

Export delivery reconciliation

e0658ea4cca6...84116b35

Checks

18/18

▲manifest, custody, SLA

Exceptions

▲0 critical

Max ack lag

2.0h

▲delivery receipt SLA

Controls

▲0 watch

Destination	Check	Expected	Observed	Status	Hash
cbk-supervisory-portal model-lifecycle-regulator-delivery-receipt-5aa77716324c89148e83	manifest hash match export-manifest://model-lifecycle/regulator-exports/all-providers/a3ccdb7a188598ca91ed354b18a48149aa068d64404e1b312b6eca57c464711c.json	a3ccdb7a188598ca91ed354b...ca57c464711c	a3ccdb7a188598ca91ed354b...ca57c464711c	within	9bb210ed2fb0...12e98b5e
cbk-supervisory-portal model-lifecycle-regulator-delivery-receipt-5aa77716324c89148e83	custody hash match custody-vault-package://model-lifecycle-webhook-custody-vault-ef5be7fdb9b319dfbc5b0498	9e4538c23d98e29def4a2513...96dbb7aebcd7	9e4538c23d98e29def4a2513...96dbb7aebcd7	within	a55f7df54cf4...3ec1b289
cbk-supervisory-portal model-lifecycle-regulator-delivery-receipt-5aa77716324c89148e83	ack sla regulator_portal://model-lifecycle/regulator-exports/cbk-supervisory-portal/a3ccdb7a188598ca	24h	2.00h	within	c60b56014e40...bcf411fc
cbk-supervisory-portal model-lifecycle-regulator-delivery-receipt-5aa77716324c89148e83	release approval dual-control://model-lifecycle/regulator-export/cbk-supervisory-portal/a3ccdb7a188598ca	dual-control release approval	dual-control://model-lif...db7a188598ca	within	8165c67e9b1a...bc461021
cbk-supervisory-portal model-lifecycle-regulator-delivery-receipt-5aa77716324c89148e83	recipient key recipient-key://cbk-supervisory-portal/model-lifecycle	recipient key reference	recipient-key://cbk-supe...el-lifecycle	within	af24a2a5b81c...0f0a40ee
cbk-supervisory-portal model-lifecycle-regulator-delivery-receipt-5aa77716324c89148e83	encrypted delivery encrypted-delivery://cbk-supervisory-portal/model-lifecycle/a3ccdb7a188598ca91ed354b18a48149aa068d64404e1b312b6eca57c464711c.zip.enc	encrypted delivery artifact	encrypted-delivery://cbk...711c.zip.enc	within	bc9081eda49e...48318a9f
internal-audit-workpapers model-lifecycle-regulator-delivery-receipt-b49b5f98ac1355eb34a6	manifest hash match export-manifest://model-lifecycle/regulator-exports/all-providers/a3ccdb7a188598ca91ed354b18a48149aa068d64404e1b312b6eca57c464711c.json	a3ccdb7a188598ca91ed354b...ca57c464711c	a3ccdb7a188598ca91ed354b...ca57c464711c	within	c2ce0e6fc102...5f876b2d
internal-audit-workpapers model-lifecycle-regulator-delivery-receipt-b49b5f98ac1355eb34a6	custody hash match custody-vault-package://model-lifecycle-webhook-custody-vault-ef5be7fdb9b319dfbc5b0498	9e4538c23d98e29def4a2513...96dbb7aebcd7	9e4538c23d98e29def4a2513...96dbb7aebcd7	within	3618be388ca8...e7a6dca9
internal-audit-workpapers model-lifecycle-regulator-delivery-receipt-b49b5f98ac1355eb34a6	ack sla audit_workpaper_vault://model-lifecycle/regulator-exports/internal-audit-workpapers/a3ccdb7a188598ca	12h	2.00h	within	74f11723f86e...1624824d
internal-audit-workpapers model-lifecycle-regulator-delivery-receipt-b49b5f98ac1355eb34a6	release approval dual-control://model-lifecycle/regulator-export/internal-audit-workpapers/a3ccdb7a188598ca	dual-control release approval	dual-control://model-lif...db7a188598ca	within	b6b6e5015efc...74be41eb
internal-audit-workpapers model-lifecycle-regulator-delivery-receipt-b49b5f98ac1355eb34a6	recipient key recipient-key://internal-audit/model-lifecycle-workpapers	recipient key reference	recipient-key://internal...e-workpapers	within	a93f6b75b7aa...f64adb1f
internal-audit-workpapers model-lifecycle-regulator-delivery-receipt-b49b5f98ac1355eb34a6	encrypted delivery encrypted-delivery://internal-audit-workpapers/model-lifecycle/a3ccdb7a188598ca91ed354b18a48149aa068d64404e1b312b6eca57c464711c.zip.enc	encrypted delivery artifact	encrypted-delivery://int...711c.zip.enc	within	74d04fe0fc58...3e92df36
board-risk-committee-portal model-lifecycle-regulator-delivery-receipt-cd7f8253760b829466df	manifest hash match export-manifest://model-lifecycle/regulator-exports/all-providers/a3ccdb7a188598ca91ed354b18a48149aa068d64404e1b312b6eca57c464711c.json	a3ccdb7a188598ca91ed354b...ca57c464711c	a3ccdb7a188598ca91ed354b...ca57c464711c	within	e0e4ccb48a30...034c76fb
board-risk-committee-portal model-lifecycle-regulator-delivery-receipt-cd7f8253760b829466df	custody hash match custody-vault-package://model-lifecycle-webhook-custody-vault-ef5be7fdb9b319dfbc5b0498	9e4538c23d98e29def4a2513...96dbb7aebcd7	9e4538c23d98e29def4a2513...96dbb7aebcd7	within	709bf4f89ba6...9a273d27
board-risk-committee-portal model-lifecycle-regulator-delivery-receipt-cd7f8253760b829466df	ack sla board_portal://model-lifecycle/regulator-exports/board-risk-committee-portal/a3ccdb7a188598ca	8h	2.00h	within	426580442e1b...8c69a653
board-risk-committee-portal model-lifecycle-regulator-delivery-receipt-cd7f8253760b829466df	release approval dual-control://model-lifecycle/regulator-export/board-risk-committee-portal/a3ccdb7a188598ca	dual-control release approval	dual-control://model-lif...db7a188598ca	within	af277b8d8b7d...494ec1cd
board-risk-committee-portal model-lifecycle-regulator-delivery-receipt-cd7f8253760b829466df	recipient key recipient-key://board-risk-committee/model-lifecycle	recipient key reference	recipient-key://board-ri...el-lifecycle	within	146ca15aa711...3fa57427
board-risk-committee-portal model-lifecycle-regulator-delivery-receipt-cd7f8253760b829466df	encrypted delivery encrypted-delivery://board-risk-committee-portal/model-lifecycle/a3ccdb7a188598ca91ed354b18a48149aa068d64404e1b312b6eca57c464711c.zip.enc	encrypted delivery artifact	encrypted-delivery://boa...711c.zip.enc	within	5da7839e866b...e3ada15d

Exception	Owner	Due	Status
No regulator export reconciliation exceptions are open.

Control	Metric	Status
Delivery receipt to manifest hash reconciliation a3ccdb7a188598ca91ed354b18a48149aa068d64404e1b312b6eca57c464711c	100% / 100%	within Reconcile every delivery receipt to the export manifest hash before supervisory reliance.
Delivery receipt to custody vault hash reconciliation 9e4538c23d98e29def4a251347b1b79a179e6ffdf42ebdc0742c96dbb7aebcd7	100% / 100%	within Reconcile every delivery receipt to the source custody vault package hash.
Acknowledgement SLA reconciliation cbk-supervisory-portal:2026-08-17T03:43:39.109Z, internal-audit-workpapers:2026-08-17T03:43:39.109Z, board-risk-committee-portal:2026-08-17T03:43:39.109Z	100% / 100%	within Escalate late or missing regulator, audit, or board acknowledgement receipts.
Release approval, recipient key, and encrypted delivery reconciliation dual-control://model-lifecycle/regulator-export/cbk-supervisory-portal/a3ccdb7a188598ca, recipient-key://cbk-supervisory-portal/model-lifecycle, encrypted-delivery://cbk-supervisory-portal/model-lifecycle/a3ccdb7a188598ca91ed354b18a48149aa068d64404e1b312b6eca57c464711c.zip.enc, dual-control://model-lifecycle/regulator-export/internal-audit-workpapers/a3ccdb7a188598ca, recipient-key://internal-audit/model-lifecycle-workpapers, encrypted-delivery://internal-audit-workpapers/model-lifecycle/a3ccdb7a188598ca91ed354b18a48149aa068d64404e1b312b6eca57c464711c.zip.enc, dual-control://model-lifecycle/regulator-export/board-risk-committee-portal/a3ccdb7a188598ca, recipient-key://board-risk-committee/model-lifecycle, encrypted-delivery://board-risk-committee-portal/model-lifecycle/a3ccdb7a188598ca91ed354b18a48149aa068d64404e1b312b6eca57c464711c.zip.enc

Reconciliation work queue

3dfae38f10ea...dcaf5708

Items

work-queue://model-lifecycle/regulator-export-reconciliation/all-providers/e0658ea4cca69c4f98332753d0465c21829e0e9956bf588be74c33bf84116b35

Open

▲0 critical

Attestations

▲clean reconciliation evidence

Closure evidence

1/1

▲0 overdue

Controls

▲0 watch

Item	Owner	Action	Evidence	Status	Hash
no exception attestation no open exception	model risk and regulatory operations model risk	Record no open regulator export reconciliation exceptions for model-risk, audit, and board reliance. due 2026-08-17T02:43:39.115Z / model-risk-committee://no-open-export-reconciliation-exceptions	attestation://model-lifecycle/regulator-export-reconciliation/no-exceptions/e0658ea4cca69c4f98332753d0465c21829e0e9956bf588be74c33bf84116b35 18 checks / 3 refs	closed info	27e8afc2a9b7...6138dd9b

Control	Metric	Status
Reconciliation exception owner assignment model-lifecycle-reconciliation-no-exception-e0658ea4cca69c4f9833:model_risk	100% / 100%	within Assign every regulator export reconciliation exception to an accountable owner lane.
Reconciliation remediation milestone coverage model-lifecycle-reconciliation-no-exception-e0658ea4cca69c4f9833:2026-08-17T02:43:39.115Z	100% / 100%	within Attach due dates to every reconciliation remediation item.
Closure evidence for completed reconciliation work model-lifecycle-reconciliation-no-exception-e0658ea4cca69c4f9833:attestation://model-lifecycle/regulator-export-reconciliation/no-exceptions/e0658ea4cca69c4f98332753d0465c21829e0e9956bf588be74c33bf84116b35	100% / 100%	within Attach closure evidence before marking reconciliation work items closed.
Overdue reconciliation item prevention work-queue://model-lifecycle/regulator-export-reconciliation/no-open-items	0 / 0	within Escalate overdue reconciliation work items to regulatory operations and model risk leadership.
Reconciliation work queue package integrity e0658ea4cca69c4f98332753d0465c21829e0e9956bf588be74c33bf84116b35\|reconciliation-ledger://model-lifecycle/regulator-exports/all-providers/a3ccdb7a188598ca91ed354b18a48149aa068d64404e1b312b6eca57c464711c	1 / 1	within Bind work queue exports to the source reconciliation package hash and ledger reference.

Supervisory submission monitoring

02cb0e310468...652bdf31

Submissions

supervisory-monitor://model-lifecycle/regulator-export-reconciliation/all-providers/3dfae38f10eaf5ebdbd072f7e0b450640af20e12c12c5e07e240d7f6dcaf5708

Acknowledged

▲0 blocked

Monitored

▲destination checks

Closure receipts

1/1

▲owner workflow evidence

Controls

▲0 watch

Destination	Acknowledgement	Evidence	Closure	Status	Hash
CBK supervisory evidence portal cbk-supervisory-portal / regulator portal	regulator_portal://model-lifecycle/regulator-exports/cbk-supervisory-portal/a3ccdb7a188598ca 2.0h / target 24h	reconciliation-ledger://...ca57c464711c 6 refs / a3ccdb7a1885...c464711c	1 receipts 0 blockers	acknowledged Retain acknowledged supervisory submission evidence and closure receipts for cbk-supervisory-portal.	320bb60d4ef8...cf5229f8
Internal audit model-risk workpapers internal-audit-workpapers / audit workpaper vault	audit_workpaper_vault://model-lifecycle/regulator-exports/internal-audit-workpapers/a3ccdb7a188598ca 2.0h / target 12h	reconciliation-ledger://...ca57c464711c 6 refs / a3ccdb7a1885...c464711c	1 receipts 0 blockers	acknowledged Retain acknowledged supervisory submission evidence and closure receipts for internal-audit-workpapers.	06233159b6ab...b304ed88
Board Risk Committee portal archive board-risk-committee-portal / board portal	board_portal://model-lifecycle/regulator-exports/board-risk-committee-portal/a3ccdb7a188598ca 2.0h / target 8h	reconciliation-ledger://...ca57c464711c 6 refs / a3ccdb7a1885...c464711c	1 receipts 0 blockers	acknowledged Retain acknowledged supervisory submission evidence and closure receipts for board-risk-committee-portal.	239e16953ef6...93993ed3

Receipt	Owner	Workflow	Status	Hash
no exception attestation model-lifecycle-reconciliation-no-exception-e0658ea4cca69c4f9833	model risk and regulatory operations model risk	workflow-closure://model...cca69c4f9833 6 refs	received 2026-08-17T01:43:39.116Z	add8a6521352...b5c1a288

Control	Metric	Status
Supervisory submission acknowledgement monitoring cbk-supervisory-portal:acknowledged:regulator_portal://model-lifecycle/regulator-exports/cbk-supervisory-portal/a3ccdb7a188598ca, internal-audit-workpapers:acknowledged:audit_workpaper_vault://model-lifecycle/regulator-exports/internal-audit-workpapers/a3ccdb7a188598ca, board-risk-committee-portal:acknowledged:board_portal://model-lifecycle/regulator-exports/board-risk-committee-portal/a3ccdb7a188598ca	100% / 100%	within Poll supervisory, audit, and board destinations until acknowledgements are recorded.
Owner workflow closure receipt coverage model-lifecycle-reconciliation-no-exception-e0658ea4cca69c4f9833:received	100% / 100%	within Require signed closure receipts for closed reconciliation work items and no-exception attestations.
Critical supervisory submission blocker prevention work-queue://model-lifecycle/regulator-export-reconciliation/no-critical-open-items	0 / 0	within Escalate critical reconciliation blockers before claiming supervisory submission readiness.
Supervisory destination monitoring cadence cbk-supervisory-portal:2026-08-17T01:43:39.116Z, internal-audit-workpapers:2026-08-17T01:43:39.116Z, board-risk-committee-portal:2026-08-17T01:43:39.116Z	100% / 100%	within Refresh destination submission monitors during every regulator export reconciliation run.
Supervisory monitoring package integrity a3ccdb7a188598ca91ed354b18a48149aa068d64404e1b312b6eca57c464711c\|e0658ea4cca69c4f98332753d0465c21829e0e9956bf588be74c33bf84116b35\|3dfae38f10eaf5ebdbd072f7e0b450640af20e12c12c5e07e240d7f6dcaf5708	100% / 100%

External receipt intake

7ba4d2d9c945...10a7e57d

Receipts

external-receipt-ledger://model-lifecycle/all-providers/02cb0e310468310748d2ef12efbc434d1a89c3f6668573d820da4c99652bdf31

Verified

14/14

▲0 pending

Metadata

14/14

▲0 duplicate ids

Controls

▲0 watch

Receipt	Event	Package	Evidence	Status	Hash
cloud object lock aws_s3_object_lock	com.situ.model_lifecycle...lock.receipt model-lifecycle-object-lock-confirmation-70b483b3fa3d7a6a4533	custody operations 496c93a185a6...b0c2ce84	cloud-object-lock-confir...98e4e6915476 5 refs / transcript_ledger-2a5d6f1e4486df830a	verified 2026-08-17T01:43:39.147Z	8f8777e3a066...31dbe741
cloud object lock aws_s3_object_lock	com.situ.model_lifecycle...lock.receipt model-lifecycle-object-lock-confirmation-262ed01ba4956ac0ca17	custody operations 496c93a185a6...b0c2ce84	cloud-object-lock-confir...9465efea4aa9 5 refs / alert_execution_receipt-bfce14e0380cee232c	verified 2026-08-17T01:43:39.147Z	601cc76ca6a4...6269494f
kms rotation enterprise-kms	com.situ.model_lifecycle...tion.receipt model-lifecycle-kms-rotation-job-504125564790973132cb	custody operations 496c93a185a6...b0c2ce84	kms-rotation-verificatio...eb20b19b0629 4 refs / transcript_ledger-2a5d6f1e4486df830a	verified 2026-08-17T01:43:39.147Z	85dec288e794...3760587f
kms rotation enterprise-kms	com.situ.model_lifecycle...tion.receipt model-lifecycle-kms-rotation-job-76e109e929c9c51ae8fa	custody operations 496c93a185a6...b0c2ce84	kms-rotation-verificatio...eb20b19b0629 4 refs / alert_execution_receipt-bfce14e0380cee232c	verified 2026-08-17T01:43:39.147Z	c81641941790...c3735ddc
kms rotation enterprise-kms	com.situ.model_lifecycle...tion.receipt model-lifecycle-kms-rotation-job-3b778bac90c248542156	custody operations 496c93a185a6...b0c2ce84	kms-rotation-verificatio...8e9be5bcb878 4 refs / MODEL_LIFECYCLE_SERVICENOW_CHANGE_WEBHOOK_SECRET	verified 2026-08-17T01:43:39.147Z	e00acf3c26d3...153d839d
kms rotation enterprise-kms	com.situ.model_lifecycle...tion.receipt model-lifecycle-kms-rotation-job-18e72b8b5cf398d577f3	custody operations 496c93a185a6...b0c2ce84	kms-rotation-verificatio...4bcbe39de501 4 refs / MODEL_LIFECYCLE_GRAPH_CLIENT_STATE	verified 2026-08-17T01:43:39.147Z	fac05364ab58...d42ba275
kms rotation enterprise-kms	com.situ.model_lifecycle...tion.receipt model-lifecycle-kms-rotation-job-e83b01dc1caa51abc249	custody operations 496c93a185a6...b0c2ce84	kms-rotation-verificatio...3a1a4f7c027d 4 refs / MODEL_LIFECYCLE_DOCUSIGN_CONNECT_WEBHOOK_SECRET	verified 2026-08-17T01:43:39.147Z	128ff6f0dd22...3483fe24
kms rotation enterprise-kms	com.situ.model_lifecycle...tion.receipt model-lifecycle-kms-rotation-job-24a494965b368155fb5b	custody operations 496c93a185a6...b0c2ce84	kms-rotation-verificatio...5e51ea6063b5 4 refs / MODEL_LIFECYCLE_FAIR_LENDING_QA_WEBHOOK_SECRET	verified 2026-08-17T01:43:39.147Z	15edb28cd1aa...c31dfed3
kms rotation enterprise-kms	com.situ.model_lifecycle...tion.receipt model-lifecycle-kms-rotation-job-30b9ea6f088a9a2ae334	custody operations 496c93a185a6...b0c2ce84	kms-rotation-verificatio...6a4bec119ab7 4 refs / MODEL_LIFECYCLE_MODEL_REGISTRY_WEBHOOK_SECRET	verified 2026-08-17T01:43:39.147Z	54b5e6995f35...e4cc18be
kms rotation enterprise-kms	com.situ.model_lifecycle...tion.receipt model-lifecycle-kms-rotation-job-c153718417b8d583746f	custody operations 496c93a185a6...b0c2ce84	kms-rotation-verificatio...942f7e2ae9e9 4 refs / MODEL_LIFECYCLE_INCIDENT_RUNBOOK_WEBHOOK_SECRET	verified 2026-08-17T01:43:39.147Z	7d885ee94674...ad62e5d8
supervisory acknowledgement regulator_portal	com.situ.model_lifecycle...ment.receipt model-lifecycle-supervisory-submission-de1355ca784b179e822e	supervisory submission 02cb0e310468...652bdf31	regulator_portal://model...db7a188598ca 6 refs / cbk-supervisory-portal	verified 2026-08-17T01:43:39.147Z	87bbf73d46d0...65b83361
supervisory acknowledgement audit_workpaper_vault	com.situ.model_lifecycle...ment.receipt model-lifecycle-supervisory-submission-f1a751809bdf1ccd321e	supervisory submission 02cb0e310468...652bdf31	audit_workpaper_vault://...db7a188598ca 6 refs / internal-audit-workpapers	verified 2026-08-17T01:43:39.147Z	728d65249f06...d9a5fe93
supervisory acknowledgement board_portal	com.situ.model_lifecycle...ment.receipt model-lifecycle-supervisory-submission-b5407caa0bc1b9507659	supervisory submission 02cb0e310468...652bdf31	board_portal://model-lif...db7a188598ca 6 refs / board-risk-committee-portal	verified 2026-08-17T01:43:39.147Z	fb2178b0091c...f279b4e7
owner workflow closure model_risk	com.situ.model_lifecycle...sure.receipt model-lifecycle-supervisory-closure-receipt-54635bf56ecd09436f01	reconciliation work queue 3dfae38f10ea...dcaf5708	workflow-closure://model...cca69c4f9833 6 refs / model-lifecycle-reconciliation-no-exception-e0658ea4cca69c4f9833	verified 2026-08-17T01:43:39.147Z	09de158268f3...7b6f34be

Control	Metric	Status
External receipt event metadata coverage model-lifecycle-external-receipt-5db436f3227cbaf7647afd6a:com.situ.model_lifecycle.cloud_object_lock.receipt, model-lifecycle-external-receipt-0cf13bea5cc07caadc2d2911:com.situ.model_lifecycle.cloud_object_lock.receipt, model-lifecycle-external-receipt-4795bb6bbe95654668612999:com.situ.model_lifecycle.kms_rotation.receipt, model-lifecycle-external-receipt-e32d92828c338f2d80a319d2:com.situ.model_lifecycle.kms_rotation.receipt, model-lifecycle-external-receipt-fd9a5cf48a1a683bfa5385d7:com.situ.model_lifecycle.kms_rotation.receipt, model-lifecycle-external-receipt-be295b4a4f0590acba1b2eed:com.situ.model_lifecycle.kms_rotation.receipt, model-lifecycle-external-receipt-90c5d88701f6f7bfaa165484:com.situ.model_lifecycle.kms_rotation.receipt, model-lifecycle-external-receipt-26cceb231ba76e04bc656467:com.situ.model_lifecycle.kms_rotation.receipt, model-lifecycle-external-receipt-2a38b4b0e7f7d44774e6869a:com.situ.model_lifecycle.kms_rotation.receipt, model-lifecycle-external-receipt-b7f5595ec787cfae1e378b48:com.situ.model_lifecycle.kms_rotation.receipt, model-lifecycle-external-receipt-4dca5986c7c34dba36555510:com.situ.model_lifecycle.supervisory_acknowledgement.receipt, model-lifecycle-external-receipt-56af4a838767d680faa868ac:com.situ.model_lifecycle.supervisory_acknowledgement.receipt, model-lifecycle-external-receipt-59804cdcd0c630234e4cb617:com.situ.model_lifecycle.supervisory_acknowledgement.receipt, model-lifecycle-external-receipt-3670879d40898cf701d0b8e7:com.situ.model_lifecycle.owner_workflow_closure.receipt	100% / 100%	within Normalize all external receipt payloads into the model lifecycle receipt event contract.
External receipt package hash binding model-lifecycle-external-receipt-5db436f3227cbaf7647afd6a:496c93a185a697f161fd28d6cf2b702b13560100513f2975ffc43652b0c2ce84, model-lifecycle-external-receipt-0cf13bea5cc07caadc2d2911:496c93a185a697f161fd28d6cf2b702b13560100513f2975ffc43652b0c2ce84, model-lifecycle-external-receipt-4795bb6bbe95654668612999:496c93a185a697f161fd28d6cf2b702b13560100513f2975ffc43652b0c2ce84, model-lifecycle-external-receipt-e32d92828c338f2d80a319d2:496c93a185a697f161fd28d6cf2b702b13560100513f2975ffc43652b0c2ce84, model-lifecycle-external-receipt-fd9a5cf48a1a683bfa5385d7:496c93a185a697f161fd28d6cf2b702b13560100513f2975ffc43652b0c2ce84, model-lifecycle-external-receipt-be295b4a4f0590acba1b2eed:496c93a185a697f161fd28d6cf2b702b13560100513f2975ffc43652b0c2ce84, model-lifecycle-external-receipt-90c5d88701f6f7bfaa165484:496c93a185a697f161fd28d6cf2b702b13560100513f2975ffc43652b0c2ce84, model-lifecycle-external-receipt-26cceb231ba76e04bc656467:496c93a185a697f161fd28d6cf2b702b13560100513f2975ffc43652b0c2ce84, model-lifecycle-external-receipt-2a38b4b0e7f7d44774e6869a:496c93a185a697f161fd28d6cf2b702b13560100513f2975ffc43652b0c2ce84, model-lifecycle-external-receipt-b7f5595ec787cfae1e378b48:496c93a185a697f161fd28d6cf2b702b13560100513f2975ffc43652b0c2ce84, model-lifecycle-external-receipt-4dca5986c7c34dba36555510:02cb0e310468310748d2ef12efbc434d1a89c3f6668573d820da4c99652bdf31, model-lifecycle-external-receipt-56af4a838767d680faa868ac:02cb0e310468310748d2ef12efbc434d1a89c3f6668573d820da4c99652bdf31, model-lifecycle-external-receipt-59804cdcd0c630234e4cb617:02cb0e310468310748d2ef12efbc434d1a89c3f6668573d820da4c99652bdf31, model-lifecycle-external-receipt-3670879d40898cf701d0b8e7:3dfae38f10eaf5ebdbd072f7e0b450640af20e12c12c5e07e240d7f6dcaf5708

Signed external receipt ledger

5efa64c26746...4b8841a4

Records

signed-external-receipt-ledger://model-lifecycle/all-providers/02cb0e310468310748d2ef12efbc434d1a89c3f6668573d820da4c99652bdf31

Stored

0/14

▼jsonl

Signatures

14/14

▲kms://model-lifecycle/external-receipts/ledger-signing-key

Hash chain

14/14

▲0 duplicate receipts

Controls

▲0 watch

Seq	Receipt	Source	Storage	Signature	Record hash
1	cloud object lock model-lifecycle-external-receipt-5db436f3227cbaf7647afd6a	custody operations aws_s3_object_lock / model-lifecycle-object-lock-confirmation-70b483b3fa3d7a6a4533	jsonl append-only-jsonl://model-lifecycle/external-receipts#1	899fcfbf344b...bf28b8a5 kms://model-lifecycle/ex...-signing-key	4780edaaf9bc...a7b0c64e 000000000000...00000000
2	cloud object lock model-lifecycle-external-receipt-0cf13bea5cc07caadc2d2911	custody operations aws_s3_object_lock / model-lifecycle-object-lock-confirmation-262ed01ba4956ac0ca17	jsonl append-only-jsonl://model-lifecycle/external-receipts#2	a772c4de740e...c52be654 kms://model-lifecycle/ex...-signing-key	46f40b775af3...b41fdb32 4780edaaf9bc...a7b0c64e
3	kms rotation model-lifecycle-external-receipt-4795bb6bbe95654668612999	custody operations enterprise-kms / model-lifecycle-kms-rotation-job-504125564790973132cb	jsonl append-only-jsonl://model-lifecycle/external-receipts#3	02c298f122ed...93a074e1 kms://model-lifecycle/ex...-signing-key	79f9424212cc...f13646b7 46f40b775af3...b41fdb32

Control	Metric	Status
Durable signed external receipt ledger destination /srv/situ/apps/lms/.next/standalone/apps/lms/.situ/runtime/model-lifecycle-external-receipts.jsonl	100% / 100%	within Configure MODEL_LIFECYCLE_EXTERNAL_RECEIPT_LEDGER_PATH before relying on external receipt evidence in production.
External receipt ledger signature verification model-lifecycle-external-receipt-ledger-39aebe74160ce390cbe9c378:899fcfbf344b, model-lifecycle-external-receipt-ledger-93f01bba0769e616430b722f:a772c4de740e, model-lifecycle-external-receipt-ledger-61faf4874a046bbe89258953:02c298f122ed, model-lifecycle-external-receipt-ledger-7f540daaa220826dc5780b90:c87277357845, model-lifecycle-external-receipt-ledger-3f2efe96352b3cca49d7ca09:7e48913766d6, model-lifecycle-external-receipt-ledger-9676119d171eb14b91e691a9:d9fd11924afc, model-lifecycle-external-receipt-ledger-d1d3b6c3e4974253aee087af:5d97da123cac, model-lifecycle-external-receipt-ledger-3329cf432e5456aa444aa4ef:1734864f7a1a, model-lifecycle-external-receipt-ledger-8cc2238bff6d3815fb9c8ea6:a93b2169c3fc, model-lifecycle-external-receipt-ledger-e44c81ce94a353f5c5cb3047:45fad7d99975, model-lifecycle-external-receipt-ledger-d4dc7d35e7a38ea0bd6fecb8:a30b5803ed29, model-lifecycle-external-receipt-ledger-f06844569e6eeb17b70fdd2d:5eaadde7ada1, model-lifecycle-external-receipt-ledger-d864b8bfee2320b1bb9a0ea7:2b70e62e8e1d, model-lifecycle-external-receipt-ledger-09c314325f1a3d040eb187ff:3c63eb8e744f	100% / 100%	within Block evidence export until every external receipt ledger record signature verifies.
External receipt ledger hash-chain continuity 1:4780edaaf9bc:000000000000, 2:46f40b775af3:4780edaaf9bc, 3:79f9424212cc:46f40b775af3, 4:19680f58eae5:79f9424212cc, 5:ff3fc5545ef2:19680f58eae5, 6:ec290ed3b060:ff3fc5545ef2, 7:0868c215fccc:ec290ed3b060, 8:fde9bf7f20b3:0868c215fccc, 9:984bb8e16f5d:fde9bf7f20b3, 10:f5c2e4b625fa:984bb8e16f5d, 11:e6d9ef11d4bd:f5c2e4b625fa, 12:1a90b58a22fe:e6d9ef11d4bd, 13:1577be285588:1a90b58a22fe, 14:242cf5a6df83:1577be285588	100% / 100%	within Rebuild the external receipt ledger from trusted source receipts before examiner export.

Receipt ledger integrity audit

111a67af7973...aee183ba

Audited records

signed package

Signatures

14/14

▲audit verified

Hash chain

14/14

▲0 sequence gaps

Findings

▲0 critical / 0 warning

Controls

▲0 watch

Finding	Record	Evidence	Severity
No receipt ledger integrity findings.

Control	Metric	Status
Signed receipt ledger signature audit 14/14	100% / 100%	within Quarantine records with invalid receipt ledger signatures.
Signed receipt ledger hash-chain audit 14/14	100% / 100%	within Recover missing records or rebuild broken hash-chain links from trusted receipts.
Signed receipt ledger sequence continuity signed-external-receipt-ledger://model-lifecycle/no-sequence-gaps	0 / 0	within Investigate missing JSONL lines or out-of-band durable ledger deletion.
Signed receipt ledger duplicate prevention audit 0 duplicate receipts / 0 duplicate source events	0 / 0	within Deduplicate replayed receipt evidence before relying on the ledger.
Signed receipt ledger critical finding closure 0 critical findings	0 / 0	within Block examiner export until critical signed receipt ledger findings are remediated.

Receipt ledger remediation queue

f0126950e962...740d03e6

Items

remediation-queue://model-lifecycle/external-receipt-ledger/all-providers/111a67af797339cf79551498ab369f7d94f26fa8bfd94c95f9c79133aee183ba

Open

▲0 critical

Assigned

1/1

▲1 with due dates

Closure criteria

1/1

▲evidence gates

Controls

▲0 watch

Finding	Owner	Due	Status	Custody
no exception attestation attestation://model-life...9133aee183ba	model risk model risk evidence operations	2026-08-18T01:43:39.198Z 2 criteria	closed info	7bc3e5f49f84...1922a2be

Control	Metric	Status
Receipt ledger finding owner assignment model-lifecycle-external-receipt-ledger-remediation-b91b8d01933f20a70a747161:model_risk	100% / 100%	within Assign every receipt ledger remediation item to an accountable owner lane.
Receipt ledger finding due-date coverage model-lifecycle-external-receipt-ledger-remediation-b91b8d01933f20a70a747161:2026-08-18T01:43:39.198Z	100% / 100%	within Set due dates for all receipt ledger remediation work items.
Receipt ledger finding closure evidence model-lifecycle-external-receipt-ledger-remediation-b91b8d01933f20a70a747161:2	100% / 100%	within Attach closure criteria before remediation work can be closed.
Receipt ledger critical finding closure remediation-queue://model-lifecycle/external-receipt-ledger/no-critical-open	0 / 0	within Close critical receipt ledger remediation items before examiner export.

Receipt remediation closure monitor

b38672d1c6c8...a9197b88

Receipts

closure-monitor://model-lifecycle/external-receipt-ledger-remediation/all-providers/f0126950e96206bffd0da85339ebcc70ca30935c5d9a92fa7b7a92b5740d03e6

Received

▲0 pending

Pending

▲closure evidence

Escalations

▲0 queued

Controls

▲0 watch

Receipt	Owner lane	Status	Evidence	Custody
no exception attestation model-lifecycle-external...20a70a747161	model risk	received 2026-08-17T01:43:39.200Z	closure-receipt://model-...36e11922a2be	1f2f3c9a5881...2e7e6341

Escalation	Target	Due	Status	Custody
No critical open receipt remediation escalations.

Control	Metric	Status
Receipt ledger remediation closure monitor coverage model-lifecycle-external-receipt-ledger-remediation-b91b8d01933f20a70a747161:received	100% / 100%	within Create closure monitor receipts for every receipt ledger remediation item.
Receipt ledger remediation closure receipt finality closure-receipt://model-lifecycle/external-receipt-ledger-remediation/model_risk/model-lifecycle-external-receipt-ledger-remediation-b91b8d01933f20a70a747161/7bc3e5f49f844a808b69ed2bbed070080651996b757d52a3f69b36e11922a2be	100% / 100%	within Require received closure receipts before closed remediation work can support examiner evidence.
Critical receipt ledger remediation escalation coverage incident-queue://model-lifecycle/external-receipt-ledger/no-critical-open	100% / 100%	within Queue incident escalations for every critical open receipt ledger remediation item.
Critical receipt ledger remediation blocker prevention remediation-queue://model-lifecycle/external-receipt-ledger/no-critical-open	0 / 0	within Close critical receipt ledger remediation items before examiner or board reliance.
Receipt ledger remediation closure package integrity model-lifecycle-external-receipt-ledger-remediation-a4e3f62df1fd7b07a93d931c:f0126950e96206bffd0da85339ebcc70ca30935c5d9a92fa7b7a92b5740d03e6:remediation-queue://model-lifecycle/external-receipt-ledger/all-providers/111a67af797339cf79551498ab369f7d94f26fa8bfd94c95f9c79133aee183ba	100% / 100%	within

Receipt ledger assurance verdict

ready / 814fdb2546d0...9a621444

Status

ready

▲assurance://model-lifecycle/external-receipt-ledger/all-providers/b38672d1c6c8a7177b8cd4c5e1e3d1f4c2f28c671d41c3a70b59e83aa9197b88

Score

100%

▲weighted evidence

Links

4 ready

Blocked

▲0 watch

Controls

▲0 watch

Evidence	Source package	Status	Reference	Custody
signed external receipt ledger 14/14 signatures, 14/14 hash-chain links verified	model-lifecycle-signed-e...d6abaf4e2f9a	ready	signed-external-receipt-...4c99652bdf31	ae1b7ae72ae4...9e170d37
ledger integrity audit 0 findings, 0 critical, 0 warning	model-lifecycle-external...fb5390b4f883	ready	audit://model-lifecycle/...9133aee183ba	92d4b304adbd...5127aee6
remediation queue 0 open remediation items, 0 critical	model-lifecycle-external...7b07a93d931c	ready	remediation-queue://mode...9133aee183ba	dffc964b5572...a3547e36
closure monitor 1/1 closure receipts received, 0 critical escalations	model-lifecycle-external...4eb6f961c7e8	ready	closure-monitor://model-...92b5740d03e6	95ccdb890cfb...05d6d583

Control	Metric	Status
Receipt ledger assurance source hash coverage signed_external_receipt_ledger:5efa64c26746e0d38dfa3cf99cdd036fe479d5478821d0a2bee88fac4b8841a4, ledger_integrity_audit:111a67af797339cf79551498ab369f7d94f26fa8bfd94c95f9c79133aee183ba, remediation_queue:f0126950e96206bffd0da85339ebcc70ca30935c5d9a92fa7b7a92b5740d03e6, closure_monitor:b38672d1c6c8a7177b8cd4c5e1e3d1f4c2f28c671d41c3a70b59e83aa9197b88	100% / 100%	within Bind every receipt ledger assurance evidence link to package and custody hashes.
Receipt ledger assurance readiness score signed_external_receipt_ledger:ready, ledger_integrity_audit:ready, remediation_queue:ready, closure_monitor:ready	100% / 100%	within Resolve watch or blocked evidence links before claiming full assurance readiness.
Receipt ledger assurance blocked evidence prevention assurance://model-lifecycle/external-receipt-ledger/no-blocked-links	0 / 0	within Clear blocked receipt ledger assurance links before examiner reliance.
Receipt ledger assurance package binding 111a67af797339cf79551498ab369f7d94f26fa8bfd94c95f9c79133aee183ba\|111a67af797339cf79551498ab369f7d94f26fa8bfd94c95f9c79133aee183ba\|f0126950e96206bffd0da85339ebcc70ca30935c5d9a92fa7b7a92b5740d03e6\|f0126950e96206bffd0da85339ebcc70ca30935c5d9a92fa7b7a92b5740d03e6	100% / 100%	within Bind remediation and closure assurance evidence to the source audit package hashes.
Receipt ledger assurance examiner verdict assurance-status:ready	100% / 100%	within Do not present receipt ledger evidence as examiner-ready until assurance status is ready.

Receipt ledger assurance export bundle

55ced1e5ce56...30a3e4e3

Artifacts

evidence-export://model-lifecycle/external-receipt-ledger-assurance/all-providers/814fdb2546d0d4072c9561c0d9781eba995c1dd4b386e4dc5395b9789a621444

Encrypted

5/5

▲5 retained

Deliveries

3/3

▲0 blocked

Assurance

ready

▲814fdb2546d0...9a621444

Controls

▲0 watch

Artifact	Manifest	Retention	Status	Custody
assurance manifest evidence-export://model-...1389ae5bdd02	0a7ee0580b42...ae5bdd02	worm+s3-object-lock://si...1389ae5bdd02	encrypted	2cdacbcfce17...1646c9e0
evidence links json evidence-export://model-...4c3ad71ce649	2619d83ebbc1...d71ce649	worm+s3-object-lock://si...4c3ad71ce649	encrypted	b286f5a846e5...c96916c3
control results json evidence-export://model-...9107f413d5e4	80a9a1be981e...f413d5e4	worm+s3-object-lock://si...9107f413d5e4	encrypted	8980d47f9e07...1d7fc6da
action required json evidence-export://model-...4cca5e7c512c	5804d0485a90...5e7c512c	worm+s3-object-lock://si...4cca5e7c512c	encrypted	3a069be0ce98...b4274c35
examiner attestation evidence-export://model-...cf45b01ec5f1	0fc2fef47bf3...b01ec5f1	worm+s3-object-lock://si...cf45b01ec5f1	encrypted	80b28c998baf...96800289

Destination	Channel	Status	Acknowledgement	Custody
cbk-supervisory-portal CBK supervisory evidence portal	regulator_portal	ready 5 artifacts	acknowledgement://model-...1:43:39.241Z	27bfccbd9c06...3d29b883
internal-audit-workpapers Internal audit model-risk workpapers	audit_workpaper_vault	ready 5 artifacts	acknowledgement://model-...1:43:39.241Z	9a00c2e10b97...f4723f9d
board-risk-committee-portal Board Risk Committee portal archive	board_portal	ready 5 artifacts	acknowledgement://model-...1:43:39.241Z	057a91406f65...2b04b6cf

Control	Metric	Status
Receipt ledger assurance export artifact coverage assurance_manifest, evidence_links_json, control_results_json, action_required_json, examiner_attestation	5 / 5	within Generate assurance manifest, evidence links, controls, actions, and examiner attestation artifacts.
Receipt ledger assurance export encryption assurance_manifest:true, evidence_links_json:true, control_results_json:true, action_required_json:true, examiner_attestation:true	100% / 100%	within Encrypt every receipt ledger assurance export artifact before release.
Receipt ledger assurance export retention lock worm+s3-object-lock://situ-model-lifecycle-evidence/external-receipt-ledger-assurance/assurance_manifest/0a7ee0580b4202596569b3c1d7b7849b1c062f3c87e178800e1d1389ae5bdd02, worm+s3-object-lock://situ-model-lifecycle-evidence/external-receipt-ledger-assurance/evidence_links_json/2619d83ebbc104a1474153f2e5a208c120f1832888a2bf8e954c4c3ad71ce649, worm+s3-object-lock://situ-model-lifecycle-evidence/external-receipt-ledger-assurance/control_results_json/80a9a1be981e25c306a8df0dcdb9a95a262f7c4ad9b28b6f95ee9107f413d5e4, worm+s3-object-lock://situ-model-lifecycle-evidence/external-receipt-ledger-assurance/action_required_json/5804d0485a908e849b4a94893aa6d6330b56b4ccc00d5b2902024cca5e7c512c, worm+s3-object-lock://situ-model-lifecycle-evidence/external-receipt-ledger-assurance/examiner_attestation/0fc2fef47bf33daedce44116220e1ce963634a39ca683e128b60cf45b01ec5f1	100% / 100%	within Attach immutable retention references to every assurance export artifact.
Receipt ledger assurance export delivery readiness cbk-supervisory-portal:ready, internal-audit-workpapers:ready, board-risk-committee-portal:ready	100% / 100%	within Release assurance exports only after every destination delivery is ready.

Receipt assurance export reconciliation

da77a2f49929...20e05d81

Checks

21/21

▲reconciliation-ledger://model-lifecycle/external-receipt-ledger-assurance-export/all-providers/55ced1e5ce56e021ef404f7f5c6779388ff18ed98c0484d222c10fdb30a3e4e3

Exceptions

▲0 critical

Manifests

matched hashes

Retention

immutable refs

Acknowledged

▲6 controls

Check	Expected	Actual	Status	Custody
assurance package binding evidence-export://model-...1389ae5bdd02	814fdb2546d0d4072c9561c0...b9789a621444	814fdb2546d0d4072c9561c0...b9789a621444	matched Bind every exported artifact to the source receipt ledger assurance package hash.	1ebfa892ca4c...7fcb8a24
assurance package binding evidence-export://model-...4c3ad71ce649	814fdb2546d0d4072c9561c0...b9789a621444	814fdb2546d0d4072c9561c0...b9789a621444	matched Bind every exported artifact to the source receipt ledger assurance package hash.	b96d4bcfeec9...b098b2e7
assurance package binding evidence-export://model-...9107f413d5e4	814fdb2546d0d4072c9561c0...b9789a621444	814fdb2546d0d4072c9561c0...b9789a621444	matched Bind every exported artifact to the source receipt ledger assurance package hash.	efaa2f8adf82...2b6ce0a7
assurance package binding evidence-export://model-...4cca5e7c512c	814fdb2546d0d4072c9561c0...b9789a621444	814fdb2546d0d4072c9561c0...b9789a621444	matched Bind every exported artifact to the source receipt ledger assurance package hash.

Exception	Owner	Due	Severity	Custody
No assurance export reconciliation exceptions.

Control	Metric	Status
Receipt ledger assurance export source binding reconciliation 814fdb2546d0d4072c9561c0d9781eba995c1dd4b386e4dc5395b9789a621444:55ced1e5ce56e021ef404f7f5c6779388ff18ed98c0484d222c10fdb30a3e4e3	100% / 100%	within Reconcile every export artifact source hash to the assurance package hash.
Receipt ledger assurance export manifest reconciliation evidence-export://model-lifecycle/external-receipt-ledger-assurance/all-providers/assurance_manifest/0a7ee0580b4202596569b3c1d7b7849b1c062f3c87e178800e1d1389ae5bdd02, evidence-export://model-lifecycle/external-receipt-ledger-assurance/all-providers/evidence_links_json/2619d83ebbc104a1474153f2e5a208c120f1832888a2bf8e954c4c3ad71ce649, evidence-export://model-lifecycle/external-receipt-ledger-assurance/all-providers/control_results_json/80a9a1be981e25c306a8df0dcdb9a95a262f7c4ad9b28b6f95ee9107f413d5e4, evidence-export://model-lifecycle/external-receipt-ledger-assurance/all-providers/action_required_json/5804d0485a908e849b4a94893aa6d6330b56b4ccc00d5b2902024cca5e7c512c, evidence-export://model-lifecycle/external-receipt-ledger-assurance/all-providers/examiner_attestation/0fc2fef47bf33daedce44116220e1ce963634a39ca683e128b60cf45b01ec5f1	100% / 100%	within Regenerate assurance export artifacts until manifest and custody hashes reconcile.
Receipt ledger assurance export retention reconciliation worm+s3-object-lock://situ-model-lifecycle-evidence/external-receipt-ledger-assurance/assurance_manifest/0a7ee0580b4202596569b3c1d7b7849b1c062f3c87e178800e1d1389ae5bdd02, worm+s3-object-lock://situ-model-lifecycle-evidence/external-receipt-ledger-assurance/evidence_links_json/2619d83ebbc104a1474153f2e5a208c120f1832888a2bf8e954c4c3ad71ce649, worm+s3-object-lock://situ-model-lifecycle-evidence/external-receipt-ledger-assurance/control_results_json/80a9a1be981e25c306a8df0dcdb9a95a262f7c4ad9b28b6f95ee9107f413d5e4, worm+s3-object-lock://situ-model-lifecycle-evidence/external-receipt-ledger-assurance/action_required_json/5804d0485a908e849b4a94893aa6d6330b56b4ccc00d5b2902024cca5e7c512c, worm+s3-object-lock://situ-model-lifecycle-evidence/external-receipt-ledger-assurance/examiner_attestation/0fc2fef47bf33daedce44116220e1ce963634a39ca683e128b60cf45b01ec5f1

Receipt assurance export work queue

c5fc259c6d3c...cbc59b88

Items

work-queue://model-lifecycle/external-receipt-ledger-assurance-export/all-providers/da77a2f499292f3087dad6aa53a1f2bca4536ddcca8fa0f42872104620e05d81

Open

▲1 closed

Critical

▲1 attestations

Closure evidence

1/1

▲1 criteria ready

Controls

▲0 watch

Item	Owner	Action	Evidence	Status	Hash
no exception attestation no open export exception	model risk evidence operations model risk	File no-exception attestation for receipt ledger assurance export reconciliation. due 2026-08-18T01:43:39.246Z / model-risk-evidence-operations	attestation://model-lifecycle/external-receipt-ledger-assurance-export-reconciliation/no-exceptions/da77a2f499292f3087dad6aa53a1f2bca4536ddcca8fa0f42872104620e05d81 21 checks / 2 refs / 3 criteria	closed info	ba0ca6da2c0b...6a865656

Control	Metric	Status
Receipt assurance export work item owner assignment model-lifecycle-external-receipt-ledger-assurance-export-work-item-8e66278b4ad1d1743bcf2fe3:model_risk	100% / 100%	within Assign every receipt assurance export reconciliation work item to an accountable owner lane.
Receipt assurance export work item due-date coverage model-lifecycle-external-receipt-ledger-assurance-export-work-item-8e66278b4ad1d1743bcf2fe3:2026-08-18T01:43:39.246Z	100% / 100%	within Set due dates for all receipt assurance export reconciliation work items.
Receipt assurance export work item closure criteria model-lifecycle-external-receipt-ledger-assurance-export-work-item-8e66278b4ad1d1743bcf2fe3:3	100% / 100%	within Attach closure criteria and closure evidence refs to every export reconciliation work item.
Receipt assurance export critical exception closure work-queue://model-lifecycle/external-receipt-ledger-assurance-export/no-critical-open	0 / 0	within Close critical receipt assurance export reconciliation work items before examiner release.
Receipt assurance export work queue package binding da77a2f499292f3087dad6aa53a1f2bca4536ddcca8fa0f42872104620e05d81:55ced1e5ce56e021ef404f7f5c6779388ff18ed98c0484d222c10fdb30a3e4e3	100% / 100%	within Bind export reconciliation work queue evidence to source package hashes.

Receipt assurance export closure monitor

aa27a95e8cdb...9ee2d902

Closure receipts

closure-monitor://model-lifecycle/external-receipt-ledger-assurance-export-work-queue/all-providers/c5fc259c6d3c63435015c6b50384c5b396c86da0f0350599e76302d3cbc59b88

Received

▲0 pending

Escalations

▲0 queued

Controls

▲0 watch

Receipt	Owner	Workflow	Status	Hash
no exception attestation model-lifecycle-external-receipt-ledger-assurance-export-work-item-8e66278b4ad1d1743bcf2fe3	model risk evidence operations model risk	workflow-closure://model...d1743bcf2fe3 5 refs	received 2026-08-17T01:43:39.249Z	29b4095e494a...d9c39aee

Escalation	Target	Due	Status	Hash
No critical export closure escalations are queued.

Control	Metric	Status
Receipt assurance export closure monitor coverage model-lifecycle-external-receipt-ledger-assurance-export-work-item-8e66278b4ad1d1743bcf2fe3:received	100% / 100%	within Create closure monitor receipts for every receipt assurance export work queue item.
Receipt assurance export closure receipt finality attestation://model-lifecycle/external-receipt-ledger-assurance-export-reconciliation/no-exceptions/da77a2f499292f3087dad6aa53a1f2bca4536ddcca8fa0f42872104620e05d81	100% / 100%	within Require received closure receipts before closed export reconciliation work supports examiner evidence.
Critical receipt assurance export escalation coverage incident-queue://model-lifecycle/external-receipt-ledger-assurance-export/no-critical-open	100% / 100%	within Queue incident escalations for every critical open receipt assurance export work item.
Critical receipt assurance export blocker prevention work-queue://model-lifecycle/external-receipt-ledger-assurance-export/no-critical-open	0 / 0	within Close critical receipt assurance export work items before examiner or board reliance.
Receipt assurance export closure package integrity c5fc259c6d3c63435015c6b50384c5b396c86da0f0350599e76302d3cbc59b88:da77a2f499292f3087dad6aa53a1f2bca4536ddcca8fa0f42872104620e05d81:55ced1e5ce56e021ef404f7f5c6779388ff18ed98c0484d222c10fdb30a3e4e3	100% / 100%	within Bind closure monitor evidence to work queue, reconciliation, and export package hashes.

Fair-lending reviews

4 notice quality gates / 1 blocked

Review	Protected-class method	Demographic parity	Adverse impact	Reason / notice coverage	Override disparity	Status
FAIR-2026-Q2-SME-014 fair lending	proxy-segment adverse impact and reason-code review	94% parity	0.94 / min 0.80	100% / 0%	8 bps / max 25 bps	breach
FAIR-2026-Q2-COLL-006 fair lending	proxy-segment adverse impact and reason-code review	91% parity	0.91 / min 0.80	100% / 0%	12 bps / max 25 bps	breach
FAIR-2026-Q2-TREAS-003 fair lending	use-context materiality review with no individual credit decisioning	94% parity	0.94 / min 0.80	100% / 0%	8 bps / max 25 bps	breach

Workflow evidence

5 workflow actions

Workflow	Stage	Decision	Committee	Evidence	Status	Custody
Model change approval and production use-limit workflow CHG-MRM-2026-Q2-014 change management and model risk	change approval	approved due 2026-06-24 / closed 2026-06-24	Model Risk Committee	3/3 controls / 8 hashes CAB-MRM-2026-06-24, MRC-DEC-2026-06-25, USE-LIMIT-SME-V4-2026Q2 actions: model-lifecycle-production-readiness-action, model-lifecycle-independent-validation-control-action	breach	5543903c9814...2bbeb9b6
Independent validation committee minutes workflow MRC-MIN-2026-06-25 independent model validation	validation committee	recorded due 2026-06-25 / closed 2026-06-25	Model Risk Committee	3/3 controls / 7 hashes VAL-SIGNOFF-SME-V4-Q2, VAL-MINUTES-2026-06-25, MODEL-LIMIT-EXCEPTIONS-2026Q2 actions: model-lifecycle-independent-validation-control-action	breach	9b737eb8ad93...b37978f6
Adverse-action reason-code and notice QA workflow AA-QA-MODEL-2026-Q2 fair lending and conduct risk	adverse action qa	closed due 2026-06-28 / closed 2026-06-28	Fair Lending Committee	3/3 controls / 8 hashes AA-REASON-QA-2026-06-28, CFPB-COMPLEX-ALGO-TRACE-2026Q2, NOTICE-PREVIEW-SME-V4-Q2 actions: model-lifecycle-fair-lending-specific-reasons-control-action, model-lifecycle-notice-quality-control-action	breach	66dd7df05335...979890a1
Champion-challenger promotion evidence workflow CHAL-PROMO-2026-Q2 credit risk analytics	challenger promotion	promoted due 2026-07-15 / closed 2026-07-15	Credit Risk Committee	3/3 controls / 6 hashes CHAL-SME-XGB-2026Q2, BACKTEST-SME-2026Q2, PROMOTION-CRITERIA-2026Q2	within	e598f5761b09...ca84d6f7
Override monitoring remediation workflow OVR-REM-2026-Q2 credit operations and fair lending	override remediation	closed due 2026-07-05 / closed 2026-07-03	Credit Risk Committee	3/3 controls / 7 hashes OVERRIDE-SEGMENT-REVIEW-2026Q2, OFFICER-TRAINING-ATTEST-2026Q2, OVERRIDE-DISPARITY-CLOSURE-2026Q2 actions: model-lifecycle-fair-lending-specific-reasons-control-action	breach	33102c33525f...5081a8e0
Model incident and fallback closure workflow INC-MODEL-2026-Q2 model operations and operational risk	model incident	closed due 2026-07-08 / closed 2026-07-08	Operational Risk Committee	3/3 controls / 8 hashes INC-MODEL-POSTMORTEM-2026Q2, FALLBACK-OWNER-ATTEST-2026Q2, CUSTOMER-HARM-REVIEW-MODEL-2026Q2 actions: model-lifecycle-breach-ticket-control-action, model-lifecycle-live-read-fail-closed-control-action	breach	3e63a8945a5e...30ef6729
Model retirement, rollback, and archive workflow RET-MODEL-2026-Q2 model operations and records management	retirement	approved due 2026-07-31 / closed 2026-07-18	Model Risk Committee	3/3 controls / 6 hashes MODEL-RETIREMENT-PLAN-2026Q2, ROLLBACK-READINESS-2026Q2, RETENTION-ARCHIVE-MODEL-2026Q2	within	a6fbeac81a5e...04f491da
Board model-risk attestation and signed-minute workflow BRC-MODEL-ATTEST-2026Q2 model risk and board secretariat	board attestation	attested due 2026-07-31 / closed 2026-07-31	Board Risk Committee	3/3 controls / 6 hashes BRC-MIN-2026-Q2-MODEL, MODEL-RISK-ATTEST-2026Q2, SUPERVISORY-PACK-HASH-2026Q2	within	3bb855f78ca2...3cb3d22d

Workflow receipts

5 receipt actions

Receipt	Provider	External ref	Linked workflows	Evidence	Status	Custody
change ticket change management and model risk	ServiceNow Change Management API change-management	CHG0032481 verified	1/1 workflows model-lifecycle-model-change-approval-workflow actions: model-lifecycle-model-change-approval-workflow-action	6 hashes / received 2026-06-24T16:12:00Z CHG0032481.approval_history, CHG0032481.implementation_plan, CHG0032481.rollback_plan	breach	18b0d28c9662...4c030185
committee calendar model risk committee secretary	Microsoft Graph Calendar API committee-calendar	AAMk-MRC-20260625-validation received	1/1 workflows model-lifecycle-validation-committee-minutes-workflow actions: model-lifecycle-validation-committee-minutes-workflow-action	6 hashes / received 2026-06-25T13:30:00Z graph.event.id, graph.event.attendees, graph.event.responseStatus	breach	5a9e79c3b6f9...0aaeed95
signed minutes model risk committee secretary	DocuSign eSignature API signed-minutes	ENV-MRC-MIN-2026-06-25 verified	1/1 workflows model-lifecycle-validation-committee-minutes-workflow actions: model-lifecycle-validation-committee-minutes-workflow-action	6 hashes / received 2026-06-26T09:05:00Z docusign.envelope.status.completed, certificate-of-completion, minutes-pdf-hash	breach	1941c0e1bc83...9fd9bcde
adverse action qa sample fair lending and conduct risk	Fair-lending QA archive notice-quality-assurance	AA-QA-SAMPLE-2026-Q2-042 matched	1/1 workflows model-lifecycle-adverse-action-qa-workflow actions: model-lifecycle-adverse-action-qa-workflow-action	6 hashes / received 2026-06-28T17:20:00Z notice-preview-sample, specific-reason-code-map, qa-reviewer-attestation	breach	7be347a9348f...78e4c60d
challenger registry credit risk analytics	Model registry promotion API model-registry	MR-PROMO-SME-V4-2026-Q2 verified	1/1 workflows model-lifecycle-challenger-promotion-workflow	5 hashes / received 2026-07-15T15:45:00Z champion-challenger-comparison, promotion-criteria, fallback-decision	within	86e4b56a002f...be71aa6c
incident case model operations and operational risk	ServiceNow Incident Table API model-incident-management	INC0098124 verified	2/2 workflows model-lifecycle-model-incident-workflow, model-lifecycle-override-remediation-workflow actions: model-lifecycle-override-remediation-workflow-action, model-lifecycle-model-incident-workflow-action	8 hashes / received 2026-07-08T18:10:00Z incident.postmortem, fallback-owner-attestation, customer-harm-review	breach	504c2169cef4...767d77be
retirement runbook model operations and records management	Runbook approval archive model-retirement	RUNBOOK-RET-SME-V3-2026-Q2 received	1/1 workflows model-lifecycle-retirement-workflow	5 hashes / received 2026-07-18T10:00:00Z retirement-plan-approval, rollback-test-evidence, records-retention-archive	within	0b883666c935...eb64f063
board portal signature model risk and board secretariat	Board portal e-signature export board-portal	BRC-SIGN-MODEL-2026-Q2 verified	1/1 workflows model-lifecycle-board-model-risk-attestation-workflow	5 hashes / received 2026-07-31T19:30:00Z board-minute-signature, model-risk-attestation, supervisory-export-package-hash	within	9fa4377b7164...47d11254

Provider webhook verification

5 webhook actions

Provider	Endpoint	Algorithm	Controls	Receipts	Status	Custody
ServiceNow change-management	/api/provider-webhooks/model-lifecycle/servicenow-change 3 events / verified 2026-07-08T16:12:00Z	hmac sha256 x-sn-hmac-signature-256 / x-sn-timestamp	replay ready / signature ready idempotency ready / schema ready secret rotation ready / 90 days	1/1 receipts / 7 hashes model-lifecycle-change-ticket-receipt	breach	034c43ead455...d2c5532c
Microsoft Graph committee-calendar	/api/provider-webhooks/model-lifecycle/graph-calendar 2 events / verified 2026-07-08T13:30:00Z	graph client state clientState / subscriptionExpirationDateTime	replay ready / signature ready idempotency ready / schema ready secret rotation ready / 45 days	1/1 receipts / 6 hashes model-lifecycle-committee-calendar-receipt	breach	ccf76e5a3eb3...69da1d3f
DocuSign Connect signed-minutes	/api/provider-webhooks/model-lifecycle/docusign-connect 3 events / verified 2026-07-08T19:30:00Z	hmac sha256 x-docusign-signature-1 / x-docusign-timestamp	replay ready / signature ready idempotency ready / schema ready secret rotation ready / 90 days	2/2 receipts / 8 hashes model-lifecycle-signed-minutes-receipt, model-lifecycle-board-signature-receipt	breach	bea5d707a135...ad5cf0e7
Fair-lending QA archive notice-quality-assurance	/api/provider-webhooks/model-lifecycle/fair-lending-qa 3 events / verified 2026-07-08T17:20:00Z	hmac sha256 x-situ-provider-signature / x-situ-provider-timestamp	replay ready / signature ready idempotency ready / schema ready secret rotation ready / 90 days	1/1 receipts / 7 hashes model-lifecycle-adverse-action-qa-sample-receipt	breach	21ca2f1ccf45...83ebfaf8
Model registry challenger-registry	/api/provider-webhooks/model-lifecycle/model-registry 3 events / verified 2026-07-08T15:45:00Z	provider signed envelope x-model-registry-signature / x-model-registry-timestamp	replay ready / signature ready idempotency ready / schema ready secret rotation ready / 90 days	1/1 receipts / 6 hashes model-lifecycle-challenger-registry-receipt	within	2d49d4b77f5f...17968975
ServiceNow and runbook archive incident-retirement	/api/provider-webhooks/model-lifecycle/incident-runbook 3 events / verified 2026-07-08T18:10:00Z	hmac sha256 x-situ-provider-signature / x-situ-provider-timestamp	replay ready / signature ready idempotency ready / schema ready secret rotation ready / 90 days	2/2 receipts / 8 hashes model-lifecycle-incident-case-receipt, model-lifecycle-retirement-runbook-receipt	breach	50f2f63bf50d...e4b426be

Lifecycle controls

7/7 domain controls mapped

Control	Metric	Observed	Expectation	Status	Escalation
Production model lifecycle readiness	Production models with inventory, data, validation, challenger, fairness, monitoring, and custody evidence inside tolerance	0.0% / 100.0%	Production models should have complete lifecycle evidence before continued automated use is represented as controlled.	breach	Lifecycle-readiness gaps require model-risk committee review.
Development data lineage and representativeness	Development datasets meeting lineage, sample-window, missingness, privacy, retention, and reconciliation gates	100.0% / 100.0%	Model development and use should be based on controlled, representative, documented, and reconciled data.	within	Data lineage gaps enter risk-data and model-risk reporting.
Independent validation and deployment approval gate	Production model attestations with approved deployment gates	0.0% / 100.0%	Independent validation should challenge model design, implementation, performance, use, and limitations before production use.	breach	Blocked or restricted validation gates require committee minutes.
Champion-challenger and back-testing evidence	Production models with challenger evidence attached	100.0% / 100.0%	Ongoing performance monitoring should include back-testing, challenger review, and documented promotion criteria.	within	Missing challenger evidence enters model-risk committee reporting.
Fair-lending and adverse-action reason traceability	Fair-lending reviews with adverse-impact, reason-code, override-disparity, notice, and customer-harm coverage	0.0% / 100.0%	Credit models should support fair-lending review and specific principal reasons for adverse action, including complex model outputs.	breach	Fair-lending gaps require conduct and model-risk committee escalation.
Population stability drift monitoring	Maximum PSI observed in the validation window	0.0% / 10.0%	Ongoing monitoring should detect population drift and trigger remediation before model performance or customer outcomes degrade.	within	Major PSI shift requires same-day model-risk escalation.
Override monitoring and human decision review	Manual score movement rate across validation population	0.0% / 5.0%	Manual overrides should be monitored for policy discipline, disparate impact, training needs, and unexplained model weakness.	within	Override breaches enter model-risk and fair-lending committee packs.
Governance calendar and overdue evidence control	Overdue independent validation or governance events	0 / 0	Validation, monitoring, governance, and fair-lending reviews should occur on schedule or carry approved exceptions.	within	Overdue events require owner and committee deadline evidence.
Automated model-risk breach ticket control	Open PSI, override, evidence, governance, approval, or read-availability breach tickets	1 / 0	Material model-risk breaches should create owned tickets and prevent unsupported promotion.	breach	Blocking model-risk tickets require same-day committee reporting.
Adverse-action notice quality gate	Blocked adverse-action notice quality gates	1 / 0	Adverse-action notices should use specific, accurate, evidence-backed principal reasons before dispatch.	breach	Notice gate failures require fair-lending and conduct escalation.
Enterprise manifest and board-route coverage	Lifecycle domain controls mapped to enterprise evidence manifest	100.0% / 100.0%	Model lifecycle controls should map to enterprise risk, data, conduct, privacy, change, assurance, and board evidence routes.	within	Unmapped controls block board-ready model lifecycle claims.
Live-read availability and fail-closed use	Model validation read availability before promotion or notice dispatch	0.0% / 100.0%	Model-risk controls should fail closed when live validation evidence is unavailable.	breach	Unavailable model validation evidence requires immediate model-risk escalation.
Evidence custody and reproducibility	Lifecycle, control, manifest, action, and source evidence with SHA-256 custody hashes	100.0% / 100.0%	Model lifecycle evidence should be reproducible for model-risk committee, internal audit, board, and supervisory review.	within	Evidence custody gaps require control assurance review.

Action packs

Trigger	Status	Evidence	Owner	Action	Deadline
Production model lifecycle readiness	breach	Production models with inventory, data, validation, challenger, fairness, monitoring, and custody evidence inside tolerance: 0.0% vs limit 100.0%	model risk	Hold model promotion or continued automated use when lifecycle evidence is incomplete.	same business day
Independent validation and deployment approval gate	breach	Production model attestations with approved deployment gates: 0.0% vs limit 100.0%	model risk	Close validation evidence issues, blocked gates, or restricted approvals before unattended promotion.	same business day
Fair-lending and adverse-action reason traceability	breach	Fair-lending reviews with adverse-impact, reason-code, override-disparity, notice, and customer-harm coverage: 0.0% vs limit 100.0%	model risk	Block notice dispatch or automated model expansion when fairness and specific-reason evidence is incomplete.	same business day
Automated model-risk breach ticket control	breach	Open PSI, override, evidence, governance, approval, or read-availability breach tickets: 1 vs limit 0	model risk	Resolve breach tickets before promotion, notice dispatch, or board attestation.	same business day
Adverse-action notice quality gate	breach	Blocked adverse-action notice quality gates: 1 vs limit 0	model risk	Fix notice reason, evidence, or validation-gate failures before dispatch.	same business day
Live-read availability and fail-closed use	breach	Model validation read availability before promotion or notice dispatch: 0.0% vs limit 100.0%	model risk	Suppress production promotion, adverse-action dispatch, and board attestation when validation reads are unavailable.	same business day
SME credit scorecard lifecycle evidence gap	breach	blocked deployment / breach fair-lending / sme-scorecard-training-v2026q2	credit risk	Block model promotion or continued automated expansion until lifecycle evidence is complete.	same business day
Collections propensity model lifecycle evidence gap	breach	blocked deployment / breach fair-lending / collections-propensity-training-v2026q2	collections strategy	Block model promotion or continued automated expansion until lifecycle evidence is complete.	same business day
Early-warning liquidity stress model lifecycle evidence gap	breach	blocked deployment / breach fair-lending / treasury-liquidity-stress-training-v2026q2	treasury risk	Block model promotion or continued automated expansion until lifecycle evidence is complete.	same business day
FAIR-2026-Q2-SME-014 fair-lending evidence gap	breach	AIR 0.94, reason coverage 100%, override disparity 8 bps	fair lending	Refresh adverse-impact, reason-code, override disparity, notice, and customer-harm evidence before production use.	same business day
FAIR-2026-Q2-COLL-006 fair-lending evidence gap	breach	AIR 0.91, reason coverage 100%, override disparity 12 bps	fair lending	Refresh adverse-impact, reason-code, override disparity, notice, and customer-harm evidence before production use.	same business day
FAIR-2026-Q2-TREAS-003 fair-lending evidence gap	breach	AIR 0.94, reason coverage 100%, override disparity 8 bps	fair lending	Refresh adverse-impact, reason-code, override disparity, notice, and customer-harm evidence before production use.	same business day
Model validation read unavailable	breach	Fail-closed model-risk monitoring: Model validation read is unavailable.; threshold live validation read required	model risk	Block model promotion and notice dispatch until the validation projection is readable.	same business day
Model change approval and production use-limit workflow workflow evidence gap	breach	approved decision / 3/3 controls / 8 evidence hashes	change management and model risk	Route model changes through controlled approval, use-limit, rollback, and segregation-of-duties evidence before production expansion.	same business day
Independent validation committee minutes workflow workflow evidence gap	breach	recorded decision / 3/3 controls / 7 evidence hashes	independent model validation	Capture validation challenge, limitations, approvals, restrictions, and owner follow-ups in committee minutes.	same business day
Adverse-action reason-code and notice QA workflow workflow evidence gap	breach	closed decision / 3/3 controls / 8 evidence hashes	fair lending and conduct risk	Hold adverse-action dispatch when specific reasons, notice scenarios, or fair-lending QA evidence is incomplete.	same business day
Override monitoring remediation workflow workflow evidence gap	breach	closed decision / 3/3 controls / 7 evidence hashes	credit operations and fair lending	Close score-band override remediation with segment review, fair-lending impact, training, and policy updates.	same business day
Model incident and fallback closure workflow workflow evidence gap	breach	closed decision / 3/3 controls / 8 evidence hashes	model operations and operational risk	Close model incidents with fallback ownership, breach-ticket linkage, customer-harm review, and recurrence monitoring.	same business day
ServiceNow Change Management API change_ticket receipt evidence gap	breach	CHG0032481 / verified / 1/1 workflows / 6 evidence hashes	change management and model risk	Attach a verified change-ticket receipt before production model expansion or use-limit changes proceed.	same business day
Microsoft Graph Calendar API committee_calendar receipt evidence gap	breach	AAMk-MRC-20260625-validation / received / 1/1 workflows / 6 evidence hashes	model risk committee secretary	Attach calendar event receipt, attendee response status, and agenda evidence before committee evidence is considered complete.	same business day
DocuSign eSignature API signed_minutes receipt evidence gap	breach	ENV-MRC-MIN-2026-06-25 / verified / 1/1 workflows / 6 evidence hashes	model risk committee secretary	Attach signed-minute envelope status and completion certificate before validation committee decisions are final.	same business day
Fair-lending QA archive adverse_action_qa_sample receipt evidence gap	breach	AA-QA-SAMPLE-2026-Q2-042 / matched / 1/1 workflows / 6 evidence hashes	fair lending and conduct risk	Match adverse-action QA samples to model reason-code evidence before notice dispatch readiness is attested.	same business day
ServiceNow Incident Table API incident_case receipt evidence gap	breach	INC0098124 / verified / 2/2 workflows / 8 evidence hashes	model operations and operational risk	Attach incident closure receipt and customer-harm review before model incident or override remediation closure.	same business day
ServiceNow webhook verification evidence gap	breach	verified verification / replay ready / signature ready / idempotency ready / schema ready	change management and platform security	Reject unsigned or replayed ServiceNow change webhooks before updating model change receipt evidence.	same business day
Microsoft Graph webhook verification evidence gap	breach	verified verification / replay ready / signature ready / idempotency ready / schema ready	model risk committee secretary and platform security	Validate Microsoft Graph clientState, subscription freshness, and resource idempotency before accepting committee calendar receipts.	same business day
DocuSign Connect webhook verification evidence gap	breach	verified verification / replay ready / signature ready / idempotency ready / schema ready	board secretariat and platform security	Verify DocuSign Connect HMAC signatures and envelope idempotency before accepting signed minutes or board attestation receipts.	same business day
Fair-lending QA archive webhook verification evidence gap	breach	verified verification / replay ready / signature ready / idempotency ready / schema ready	fair lending and platform security	Verify QA archive signatures and idempotency before accepting adverse-action QA sample receipts.	same business day
ServiceNow and runbook archive webhook verification evidence gap	breach	verified verification / replay ready / signature ready / idempotency ready / schema ready	model operations, records management, and platform security	Verify incident and runbook webhook signatures before accepting closure, retirement, or rollback receipts.	same business day
ServiceNow webhook transcript evidence gap	breach	accepted replay / payload ready / signature transcript ready / schema ready / retention ready	change management and platform security	Persist ServiceNow raw payload, replay ledger, and signature-validation transcript before closing the model change receipt.	same business day
Microsoft Graph webhook transcript evidence gap	breach	accepted replay / payload ready / signature transcript ready / schema ready / retention ready	model risk committee secretary and platform security	Persist Microsoft Graph payload hash, clientState validation transcript, and lifecycle replay decision before accepting committee calendar receipts.	same business day
DocuSign Connect webhook transcript evidence gap	breach	accepted replay / payload ready / signature transcript ready / schema ready / retention ready	board secretariat and platform security	Persist DocuSign Connect payload and HMAC validation transcript before accepting signed minutes or board signature receipts.	same business day
Fair-lending QA archive webhook transcript evidence gap	breach	accepted replay / payload ready / signature transcript ready / schema ready / retention ready	fair lending and platform security	Persist QA archive payload hash, replay decision, and signature-validation transcript before accepting adverse-action QA sample receipts.	same business day
ServiceNow and runbook archive webhook transcript evidence gap	breach	accepted replay / payload ready / signature transcript ready / schema ready / retention ready	model operations, records management, and platform security	Persist incident and runbook payload hash, replay decision, and HMAC validation transcript before accepting retirement or rollback receipts.	same business day

Control	Metric	Status
Managed WORM object-lock retention for webhook evidence receipts worm+s3-object-lock://situ-model-lifecycle-evidence/all-providers/all-providers/transcript_ledger/transcript_ledger-2a5d6f1e4486df830a.json, worm+s3-object-lock://situ-model-lifecycle-evidence/all-providers/all-providers/alert_execution_receipt/alert_execution_receipt-bfce14e0380cee232c.json	100% / 100%	within Move all webhook evidence receipts into a managed WORM bucket or immutable blob container with locked retention before production reliance.
KMS-backed envelope encryption for custody objects kms://model-lifecycle/webhooks/all-providers/evidence-custody-key, kms://model-lifecycle/webhooks/all-providers/evidence-custody-key	100% / 100%	within Attach every transcript, replay job, and alert execution receipt to a managed KMS key with rotation evidence.
Provider webhook secret rotation custody attestation://model-lifecycle/webhooks/servicenow-change/kms-secret-rotation/2026-08-17, attestation://model-lifecycle/webhooks/graph-calendar/kms-secret-rotation/2026-08-17, attestation://model-lifecycle/webhooks/docusign-connect/kms-secret-rotation/2026-08-17, attestation://model-lifecycle/webhooks/fair-lending-qa/kms-secret-rotation/2026-08-17, attestation://model-lifecycle/webhooks/model-registry/kms-secret-rotation/2026-08-17, attestation://model-lifecycle/webhooks/incident-runbook/kms-secret-rotation/2026-08-17	100% / 100%	within Rotate provider webhook secrets through dual-control KMS workflow and attach attestation receipts.
Transcript, replay, and alert receipt coverage append-only-jsonl://model-lifecycle/webhooks, replay-job://not-requested, alert-execution://model-lifecycle-webhook-alert-execution-e1355829c3e02b4f592be245	100% / 100%	within Register transcript ledger, replay job, and alert execution receipts in the custody vault before board or examiner export.
Access logging and secondary-region replication for custody objects audit-log://model-lifecycle/webhook-custody/all-providers/transcript_ledger\|replication://model-lifecycle/webhook-custody/all-providers/transcript_ledger/secondary-region, audit-log://model-lifecycle/webhook-custody/all-providers/alert_execution_receipt\|replication://model-lifecycle/webhook-custody/all-providers/alert_execution_receipt/secondary-region	100% / 100%	within Enable immutable access logs and secondary-region replication for every webhook custody object.

Control	Metric	Status
Regulator export artifact coverage encrypted-export://model-lifecycle/regulator-exports/all-providers/custody_manifest/model-lifecycle-regulator-export-artifact-7370e37d4f54bbc609e7.json.enc, encrypted-export://model-lifecycle/regulator-exports/all-providers/transcript_ledger/model-lifecycle-regulator-export-artifact-04054a7c052b6c108c0c.json.enc, encrypted-export://model-lifecycle/regulator-exports/all-providers/alert_execution_receipt/model-lifecycle-regulator-export-artifact-feca7d5455e3d3373bc0.json.enc, encrypted-export://model-lifecycle/regulator-exports/all-providers/secret_rotation_attestation/model-lifecycle-regulator-export-artifact-2e9a5b7a0acab8a58bc5.json.enc, encrypted-export://model-lifecycle/regulator-exports/all-providers/secret_rotation_attestation/model-lifecycle-regulator-export-artifact-9a1bd1781c378caaf4ee.json.enc, encrypted-export://model-lifecycle/regulator-exports/all-providers/secret_rotation_attestation/model-lifecycle-regulator-export-artifact-ad8da6f537ec6ad62b1e.json.enc, encrypted-export://model-lifecycle/regulator-exports/all-providers/secret_rotation_attestation/model-lifecycle-regulator-export-artifact-a5455d2a8437889e0e07.json.enc, encrypted-export://model-lifecycle/regulator-exports/all-providers/secret_rotation_attestation/model-lifecycle-regulator-export-artifact-3e20563854619e18f3e9.json.enc, encrypted-export://model-lifecycle/regulator-exports/all-providers/secret_rotation_attestation/model-lifecycle-regulator-export-artifact-6d698aafe99a94a1022f.json.enc, encrypted-export://model-lifecycle/regulator-exports/all-providers/control_attestation/model-lifecycle-regulator-export-artifact-de7526c2d8b1111e2c26.json.enc, encrypted-export://model-lifecycle/regulator-exports/all-providers/control_attestation/model-lifecycle-regulator-export-artifact-64c2a3dd449970836906.json.enc, encrypted-export://model-lifecycle/regulator-exports/all-providers/control_attestation/model-lifecycle-regulator-export-artifact-542b39c3cda472379e85.json.enc, encrypted-export://model-lifecycle/regulator-exports/all-providers/control_attestation/model-lifecycle-regulator-export-artifact-ee3048955f9cfeeaed08.json.enc, encrypted-export://model-lifecycle/regulator-exports/all-providers/control_attestation/model-lifecycle-regulator-export-artifact-c9b903099e3909c5bd7b.json.enc	100% / 100%	within Export every custody manifest, WORM object receipt, secret rotation attestation, and custody control before releasing model lifecycle evidence.
Encrypted export artifact delivery 22ebc18eb9569d8d76a0e6b3d3bcf9c5e401b5afedc810e3e27916c08f2f07f8, 4fd3474a8bba8444f9ea0f44cdd2fca221dbd5efffe9c8bbe6b291f76745e472, 9156ee3368b71a7a40755018928c4846e6504e608fe0c14da11629d884cbf7b9, 63d18ac0eec7bd38b543b087497185dc28d479cfbde3955ad24810d2b8486085, 6261e7c914b3d27a9775bf32d89155332ff34098b11fb8fb4b12fc91d4275e1f, d57aea103772af028abd304d7ecab07daf12bbf777b2d541de3ca460994ca745, 177a20f1d12bda40e8d7bba6aa63ec9b1158aacd644a13f66abe91d0bed842b0, 80451707b45dd6c2609d5fa3d14eab9328d5d00bc9dd5702d4bd4eafb758423b, f3fedf18a2a3c17aedd73694b3f2e6f16bf0dcb4e6822d5de5a0cadda6547ffd, 969d0ff15840a5ddf2064a3e42830667524fe9f7eccc1a353889fc7109b59def, 8cb43c26376c95538b161f27a43a814e6597c25c0c0bfa2808a1202cc2264504, 256dc6db5cc91730cabdb846dcb9091a617e9451925eaf04099469892a38b0e2, 5c95a5bfb4b85635a8940bcf1cd3d7b745dad1a8e5b00c089679d6a6d4343fd1, 74e4bf45961cc70defff7c8dbf9f8620e9e75599a286301c0089bd3332e1ac9a	100% / 100%	within Encrypt every exported model lifecycle artifact and bind the encrypted path into the manifest.
Receipt-bearing delivery acknowledgement regulator_portal://model-lifecycle/regulator-exports/cbk-supervisory-portal/a3ccdb7a188598ca, audit_workpaper_vault://model-lifecycle/regulator-exports/internal-audit-workpapers/a3ccdb7a188598ca, board_portal://model-lifecycle/regulator-exports/board-risk-committee-portal/a3ccdb7a188598ca	100% / 100%	within Collect acknowledgement receipts from every regulator, audit, and board delivery channel.
Dual-control release and recipient-key non-repudiation dual-control://model-lifecycle/regulator-export/cbk-supervisory-portal/a3ccdb7a188598ca\|recipient-key://cbk-supervisory-portal/model-lifecycle, dual-control://model-lifecycle/regulator-export/internal-audit-workpapers/a3ccdb7a188598ca\|recipient-key://internal-audit/model-lifecycle-workpapers, dual-control://model-lifecycle/regulator-export/board-risk-committee-portal/a3ccdb7a188598ca\|recipient-key://board-risk-committee/model-lifecycle	100% / 100%	within Bind every export delivery to dual-control release approval and recipient key evidence.
Manifest hash and entry integrity a3ccdb7a188598ca91ed354b18a48149aa068d64404e1b312b6eca57c464711c	1 / 1	within Generate a stable export manifest hash and per-artifact manifest entry hashes before delivery.

SME credit scorecard v4.8.2 / credit risk	Origination PD, limit assignment, and adverse-action reason routing	MVAL-2026-Q2-SME-001 independent model validation / 2026-06-30	0 pass / 0 issue unavailable evidence / blocked approval	blocked production promotion blocked because the validation read is unavailable	f8b52bd9d4b7...41044278
Collections propensity model v3.3.1 / collections strategy	Collections queue prioritisation and hardship outreach ordering	MVAL-2026-Q2-COLL-004 independent model validation / 2026-06-27	0 pass / 0 issue unavailable evidence / blocked approval	blocked production promotion blocked because the validation read is unavailable	575e4271ee04...129b314f
Early-warning liquidity stress model v2.6.0 / treasury risk	Treasury stress alerts and branch liquidity intervention sequencing	MVAL-2026-Q2-TREAS-009 independent model validation / 2026-06-25	0 pass / 0 issue unavailable evidence / blocked approval	blocked production promotion blocked because the validation read is unavailable	2ce1cdfc4a4a...21164e81