VELARU GALACTIC EXHIBIT PACK — M&A DUE DILIGENCE AI
Jurisdiction: Global / Multi-jurisdiction (global)
Modality: Text / Chat
Program: Velaru Mandate Registry — M&A Due Diligence AI (galactic_m_and_a_due_diligence)
Product ID: m_and_a_due_diligence:global:bundle:text
Vertical: m_and_a_due_diligence
Generated: 2026-08-11T02:36:29.125255Z
Authority: Global External Validation — M&A Due Diligence AI External Validation Pack
Deadline: EU AI Act + sector regulator
Velaru verify: https://velaru.onrender.com/verify

EXHIBIT A — AI INVENTORY
[]

EXHIBIT B — GOVERNANCE FRAMEWORK
{
  "framework": "Velaru Mandate Registry \u2014 M&A Due Diligence AI",
  "exhibit_authority": "Global External Validation \u2014 M&A Due Diligence AI External Validation Pack",
  "regulatory_frameworks": [
    "ABA Model Rule 1.6",
    "ABA Model Rule 5.5",
    "Fed R Evid 502",
    "ISO 42001",
    "NIST AI RMF 1.0",
    "OECD AI Principles"
  ],
  "standards_alignment": [
    "POSS-2",
    "DRP-1",
    "TCB",
    "FRE 707 pre-compliance",
    "ISO 42001"
  ],
  "human_oversight": "execute M&A Due Diligence AI AI decision",
  "third_party_verification": "https://velaru.onrender.com/verify (operator-independent)",
  "data_lineage": "Hash-chained Ed25519 receipts; optional RFC3161 + external anchor",
  "mirror_trap": "Niche M&A Due Diligence AI deployer owns AI harm \u2014 vertical SaaS vendor owns liability cap. \u00b7 Multinationals built for one jurisdiction fail exams in another \u2014 one receipt architecture, many filing packs.",
  "chain_integrity": {
    "depth": 39,
    "invariant_holds": true
  }
}

EXHIBIT D — DATA INPUTS & VALIDATION
{
  "data_validation_method": "Cryptographic receipt per AI decision; public verify without trusting deployer, vendor, or Velaru operator",
  "bias_testing_proxy": "Asymmetry score from live chain signals",
  "model_change_control": "Policy lock registry \u2014 criteria hash frozen pre-dispute",
  "logging_retention": "90-day pre-dispute window minimum; permanent verify permalinks",
  "external_validator": "Nisaba LLC / Velaru",
  "validator_independence": "Client-side Ed25519 verify; BYOK tri-receipt optional",
  "headline_stat": "M&A Due Diligence AI \u2014 AI decision audit trail required for liability defense",
  "global_leaders_addressed": [
    "Sector regulators",
    "Vertical SaaS platforms",
    "ISO",
    "NIST",
    "OECD",
    "UNESCO"
  ]
}

MIRROR TRAP (regulatory insight)
Niche M&A Due Diligence AI deployer owns AI harm — vertical SaaS vendor owns liability cap. · Multinationals built for one jurisdiction fail exams in another — one receipt architecture, many filing packs.

NERVE CARDS — WHY GLOBAL LEADERS CARE
[
  {
    "title": "Niche litigation",
    "body": "M&A Due Diligence AI plaintiffs challenge AI decision without independent verify.",
    "source": "vertical"
  },
  {
    "title": "Insurance bind",
    "body": "Sector insurers asking AI governance questions on M&A Due Diligence AI accounts.",
    "source": "vertical"
  },
  {
    "title": "[Global / Multi-jurisdiction] Jurisdiction shopping ends",
    "body": "Regulators share examination findings via IAIS, IOSCO, Basel \u2014 governance gap in one market triggers another.",
    "source": "jurisdiction"
  },
  {
    "title": "[Global / Multi-jurisdiction] Vendor contract forum",
    "body": "AI vendor chooses Delaware law \u2014 deployer owns EU, UK, and US state fines simultaneously.",
    "source": "jurisdiction"
  },
  {
    "title": "[Text / Chat] Modality hook",
    "body": "Baseline \u2014 all frameworks apply to text decisions.",
    "source": "modality"
  }
]

BOOK SUMMARY: {
  "total_insureds": 0,
  "compliant": 0,
  "grace_period": 0,
  "non_compliant": 0,
  "expired": 0,
  "not_enrolled": 0,
  "compliant_pct": 0.0
}

TAM / EXPOSURE: Global M&A Due Diligence AI market
INSURANCE LINES: E&O, Cyber, Sector liability

DISCLAIMER: External validation evidence pack — not legal advice, not filed rate approval.