VELARU GALACTIC EXHIBIT PACK — AI CREDIT SCORING / LENDING
Jurisdiction: Global / Multi-jurisdiction (global)
Modality: Text / Chat
Program: Velaru Mandate Registry — AI Credit Scoring / Lending (galactic_mortgage)
Product ID: mortgage:global:bundle:text
Vertical: mortgage
Generated: 2026-08-11T00:24:28.408957Z
Authority: Global External Validation — GSE AI Governance QC Audit Pack
Deadline: EU AI Act high-risk + global AI governance wave
Velaru verify: https://velaru.onrender.com/verify

EXHIBIT A — AI INVENTORY
[]

EXHIBIT B — GOVERNANCE FRAMEWORK
{
  "framework": "Velaru Mandate Registry \u2014 AI Credit Scoring / Lending",
  "exhibit_authority": "Global External Validation \u2014 GSE AI Governance QC Audit Pack",
  "regulatory_frameworks": [
    "ECOA",
    "Fair Housing Act",
    "Fannie Mae LL-2026-04",
    "Freddie Mac Section 1302.8",
    "ISO 42001",
    "NIST AI RMF 1.0",
    "OECD AI Principles"
  ],
  "standards_alignment": [
    "POSS-2",
    "DRP-1",
    "TCB",
    "FRE 707 pre-compliance",
    "ISO 42001"
  ],
  "human_oversight": "sell loan to GSE",
  "third_party_verification": "https://velaru.onrender.com/verify (operator-independent)",
  "data_lineage": "Hash-chained Ed25519 receipts; optional RFC3161 + external anchor",
  "mirror_trap": "Freddie requires segregation of duties + audit trails Fannie omits \u2014 lenders selling to both must build to the stricter standard. Velaru is that standard. \u00b7 Multinationals built for one jurisdiction fail exams in another \u2014 one receipt architecture, many filing packs.",
  "chain_integrity": {
    "depth": 39,
    "invariant_holds": true
  }
}

EXHIBIT D — DATA INPUTS & VALIDATION
{
  "data_validation_method": "Cryptographic receipt per AI decision; public verify without trusting deployer, vendor, or Velaru operator",
  "bias_testing_proxy": "Asymmetry score from live chain signals",
  "model_change_control": "Policy lock registry \u2014 criteria hash frozen pre-dispute",
  "logging_retention": "90-day pre-dispute window minimum; permanent verify permalinks",
  "external_validator": "Nisaba LLC / Velaru",
  "validator_independence": "Client-side Ed25519 verify; BYOK tri-receipt optional",
  "headline_stat": "First US sector-specific AI mandate \u2014 QC must query which AI influenced which loan",
  "global_leaders_addressed": [
    "Fannie Mae",
    "Freddie Mac",
    "Rocket Mortgage",
    "Wells Fargo",
    "CFPB",
    "ISO",
    "NIST",
    "OECD"
  ]
}

MIRROR TRAP (regulatory insight)
Freddie requires segregation of duties + audit trails Fannie omits — lenders selling to both must build to the stricter standard. Velaru is that standard. · Multinationals built for one jurisdiction fail exams in another — one receipt architecture, many filing packs.

NERVE CARDS — WHY GLOBAL LEADERS CARE
[
  {
    "title": "50 days to compliance",
    "body": "Inventory all AI in origination/servicing \u2014 embedded SaaS counts. Per-loan decision record or fail QC.",
    "source": "vertical"
  },
  {
    "title": "Fair lending discovery",
    "body": "ECOA adverse action requires specific reasons \u2014 AI black box without receipt = automatic CFPB referral pattern.",
    "source": "vertical"
  },
  {
    "title": "Vendor illusion",
    "body": "Lender owns GSE indemnity for vendor AI \u2014 same Mobley logic as hiring, different regulator.",
    "source": "vertical"
  },
  {
    "title": "[Global / Multi-jurisdiction] Jurisdiction shopping ends",
    "body": "Regulators share examination findings via IAIS, IOSCO, Basel \u2014 governance gap in one market triggers another.",
    "source": "jurisdiction"
  },
  {
    "title": "[Global / Multi-jurisdiction] Vendor contract forum",
    "body": "AI vendor chooses Delaware law \u2014 deployer owns EU, UK, and US state fines simultaneously.",
    "source": "jurisdiction"
  },
  {
    "title": "[Text / Chat] Modality hook",
    "body": "Baseline \u2014 all frameworks apply to text decisions.",
    "source": "modality"
  }
]

BOOK SUMMARY: {
  "total_insureds": 0,
  "compliant": 0,
  "grace_period": 0,
  "non_compliant": 0,
  "expired": 0,
  "not_enrolled": 0,
  "compliant_pct": 0.0
}

TAM / EXPOSURE: $12T+ US residential origination · every GSE seller/servicer
INSURANCE LINES: E&O, Rep & warranty, Cyber

DISCLAIMER: External validation evidence pack — not legal advice, not filed rate approval.