VELARU GALACTIC EXHIBIT PACK — DEFENSE / WEAPONS SYSTEMS Jurisdiction: Global / Multi-jurisdiction (global) Modality: Text / Chat Program: Velaru Mandate Registry — Defense / Weapons Systems (galactic_defense) Product ID: defense:global:bundle:text Vertical: defense Generated: 2026-08-11T00:23:42.037737Z Authority: Global External Validation — Lethal Autonomous Systems Human Control Pack Deadline: DoD Directive 3000.09 autonomous weapons review Velaru verify: https://velaru.onrender.com/verify EXHIBIT A — AI INVENTORY [] EXHIBIT B — GOVERNANCE FRAMEWORK { "framework": "Velaru Mandate Registry \u2014 Defense / Weapons Systems", "exhibit_authority": "Global External Validation \u2014 Lethal Autonomous Systems Human Control Pack", "regulatory_frameworks": [ "DoD Directive 3000.09", "ITAR", "Geneva Conventions Article 36", "ISO 42001", "NIST AI RMF 1.0", "OECD AI Principles" ], "standards_alignment": [ "POSS-2", "DRP-1", "TCB", "FRE 707 pre-compliance", "ISO 42001" ], "human_oversight": "authorize kinetic effect", "third_party_verification": "https://velaru.onrender.com/verify (operator-independent)", "data_lineage": "Hash-chained Ed25519 receipts; optional RFC3161 + external anchor", "mirror_trap": "Prime contractor integrates vendor AI \u2014 prime owns LOAC violation, vendor owns ITAR technical data rights. \u00b7 Multinationals built for one jurisdiction fail exams in another \u2014 one receipt architecture, many filing packs.", "chain_integrity": { "depth": 39, "invariant_holds": true } } EXHIBIT D — DATA INPUTS & VALIDATION { "data_validation_method": "Cryptographic receipt per AI decision; public verify without trusting deployer, vendor, or Velaru operator", "bias_testing_proxy": "Asymmetry score from live chain signals", "model_change_control": "Policy lock registry \u2014 criteria hash frozen pre-dispute", "logging_retention": "90-day pre-dispute window minimum; permanent verify permalinks", "external_validator": "Nisaba LLC / Velaru", "validator_independence": "Client-side Ed25519 verify; BYOK tri-receipt optional", "headline_stat": "Article 36 IHL review requires human judgment documentation \u2014 receipt or war crime inference", "global_leaders_addressed": [ "DoD", "Anduril", "Palantir", "NATO", "UN CCW", "ISO", "NIST", "OECD" ] } MIRROR TRAP (regulatory insight) Prime contractor integrates vendor AI — prime owns LOAC violation, vendor owns ITAR technical data rights. · Multinationals built for one jurisdiction fail exams in another — one receipt architecture, many filing packs. NERVE CARDS — WHY GLOBAL LEADERS CARE [ { "title": "Meaningful human control", "body": "DoD 3000.09 requires human 'in the loop' \u2014 receipt proves loop existed at decision time.", "source": "vertical" }, { "title": "ITAR exposure", "body": "AI targeting assistance to foreign nationals \u2014 receipt chain for export control audit.", "source": "vertical" }, { "title": "Contractor insurance", "body": "Defense E&O excludes autonomous decision without documented oversight.", "source": "vertical" }, { "title": "[Global / Multi-jurisdiction] Jurisdiction shopping ends", "body": "Regulators share examination findings via IAIS, IOSCO, Basel \u2014 governance gap in one market triggers another.", "source": "jurisdiction" }, { "title": "[Global / Multi-jurisdiction] Vendor contract forum", "body": "AI vendor chooses Delaware law \u2014 deployer owns EU, UK, and US state fines simultaneously.", "source": "jurisdiction" }, { "title": "[Text / Chat] Modality hook", "body": "Baseline \u2014 all frameworks apply to text decisions.", "source": "modality" } ] BOOK SUMMARY: { "total_insureds": 0, "compliant": 0, "grace_period": 0, "non_compliant": 0, "expired": 0, "not_enrolled": 0, "compliant_pct": 0.0 } TAM / EXPOSURE: DoD AI budget $1.8B+ · LAWS accountability INSURANCE LINES: Defense contractor E&O, Political risk DISCLAIMER: External validation evidence pack — not legal advice, not filed rate approval.