VELARU GALACTIC EXHIBIT PACK — POST-QUANTUM CRYPTOGRAPHY Jurisdiction: Global / Multi-jurisdiction (global) Modality: Text / Chat Program: Velaru Mandate Registry — Post-Quantum Cryptography (galactic_post_quantum) Product ID: post_quantum:global:bundle:text Vertical: post_quantum Generated: 2026-08-11T00:22:56.526990Z Authority: Global External Validation — PQC Migration Decision Audit Pack Deadline: EU AI Act high-risk + global AI governance wave Velaru verify: https://velaru.onrender.com/verify EXHIBIT A — AI INVENTORY [] EXHIBIT B — GOVERNANCE FRAMEWORK { "framework": "Velaru Mandate Registry \u2014 Post-Quantum Cryptography", "exhibit_authority": "Global External Validation \u2014 PQC Migration Decision Audit Pack", "regulatory_frameworks": [ "NIST FIPS 203/204/205", "NSM-10", "EU eIDAS 2.0", "ISO 42001", "NIST AI RMF 1.0", "OECD AI Principles" ], "standards_alignment": [ "POSS-2", "DRP-1", "TCB", "FRE 707 pre-compliance", "ISO 42001" ], "human_oversight": "sign cryptographic record", "third_party_verification": "https://velaru.onrender.com/verify (operator-independent)", "data_lineage": "Hash-chained Ed25519 receipts; optional RFC3161 + external anchor", "mirror_trap": "Ed25519 receipts valid today \u2014 quantum threat requires algorithm agility documented in receipt metadata. \u00b7 Multinationals built for one jurisdiction fail exams in another \u2014 one receipt architecture, many filing packs.", "chain_integrity": { "depth": 39, "invariant_holds": true } } EXHIBIT D — DATA INPUTS & VALIDATION { "data_validation_method": "Cryptographic receipt per AI decision; public verify without trusting deployer, vendor, or Velaru operator", "bias_testing_proxy": "Asymmetry score from live chain signals", "model_change_control": "Policy lock registry \u2014 criteria hash frozen pre-dispute", "logging_retention": "90-day pre-dispute window minimum; permanent verify permalinks", "external_validator": "Nisaba LLC / Velaru", "validator_independence": "Client-side Ed25519 verify; BYOK tri-receipt optional", "headline_stat": "Harvest now decrypt later \u2014 receipts signed today must plan ML-DSA migration", "global_leaders_addressed": [ "NIST", "NSA", "Cloudflare", "Google", "CISA", "ISO", "OECD", "UNESCO" ] } MIRROR TRAP (regulatory insight) Ed25519 receipts valid today — quantum threat requires algorithm agility documented in receipt metadata. · Multinationals built for one jurisdiction fail exams in another — one receipt architecture, many filing packs. NERVE CARDS — WHY GLOBAL LEADERS CARE [ { "title": "FIPS 203/204/205", "body": "NIST PQC standards finalized \u2014 migration receipt proves compliance timeline.", "source": "vertical" }, { "title": "eIDAS 2.0", "body": "EU qualified signatures moving to PQC \u2014 cross-border receipt compatibility.", "source": "vertical" }, { "title": "Long retention", "body": "7-year financial records \u2014 receipts must survive quantum timeline.", "source": "vertical" }, { "title": "[Global / Multi-jurisdiction] Jurisdiction shopping ends", "body": "Regulators share examination findings via IAIS, IOSCO, Basel \u2014 governance gap in one market triggers another.", "source": "jurisdiction" }, { "title": "[Global / Multi-jurisdiction] Vendor contract forum", "body": "AI vendor chooses Delaware law \u2014 deployer owns EU, UK, and US state fines simultaneously.", "source": "jurisdiction" }, { "title": "[Text / Chat] Modality hook", "body": "Baseline \u2014 all frameworks apply to text decisions.", "source": "modality" } ] BOOK SUMMARY: { "total_insureds": 0, "compliant": 0, "grace_period": 0, "non_compliant": 0, "expired": 0, "not_enrolled": 0, "compliant_pct": 0.0 } TAM / EXPOSURE: Global crypto migration · every signed receipt must plan PQC upgrade INSURANCE LINES: Cyber, E&O DISCLAIMER: External validation evidence pack — not legal advice, not filed rate approval.