Contract-grade AI governance

AI Compliance Command Center

Measured control plane for registered AI use cases, Material AI approval, agent registry linkage, model and agent cards, audit retention, training guardrails, kill switches, incidents, and change governance.

Open JSON payload Open asset register Open contract posture Open governed P2P surface

Runtime status

Status: action_required

Tenant / realm: bp / bp

Required action: Close failed readiness checks before production AI execution.

Failed readiness checks: approved_use_cases, material_ai_launchpad, no_open_incidents

Readiness

75.0%

9/12 checks

Use cases

15 approved

Material AI

2 missing LaunchPad

Audit events

336777

0 retained 7 years

Kill switches

active suspensions

Incidents

1 overdue notices

Evaluation runs

0 blocked

Training approvals

explicit bp approvals

Exit packages

machine-readable

Third parties

registered

Material gate events

4762

persisted

Human decisions

recorded

Portfolio Compliance Gap Closure

Read-only server-side audit of registered AI use cases against required contract evidence. The admin run endpoint remains OIDC-protected; this UI surface does not expose anonymous mutation.

Portfolio status

gaps_found

29 registered use cases

Open evidence gaps

agent cards, model cards, artefacts, evals, exits

Tenant / realm

bp/bp

server-side audited

Evidence domain	Status	Missing	Use cases
Agent Cards	action_required	2	AO-UC-01, AO-UC-02
Model Cards	action_required	14	AO-UC-01:approved-domain-models-only, AO-UC-02:approved-domain-models-only, uc_enterprise_decision_replay:governed-finance-runtime:2026.07, uc_fpa_forecast_variance_spend:governed-finance-runtime:2026.07, uc_o2c_cash_application_exception:governed-finance-runtime:2026.07, uc_o2c_strategic_receivable:governed-finance-runtime:2026.07 ...
Artefacts	action_required	2	AO-UC-01, AO-UC-02
Evaluations	action_required	2	AO-UC-01, AO-UC-02
Exit Packages	action_required	2	AO-UC-01, AO-UC-02
Audit Events	action_required	14	AO-UC-01, AO-UC-02, uc_enterprise_decision_replay, uc_fpa_forecast_variance_spend, uc_o2c_cash_application_exception, uc_o2c_strategic_receivable ...
Approval Records	action_required	14	AO-UC-01, AO-UC-02, uc_enterprise_decision_replay, uc_fpa_forecast_variance_spend, uc_o2c_cash_application_exception, uc_o2c_strategic_receivable ...
Human Oversight Records	action_required	2	AO-UC-01, AO-UC-02

Registered AI Use Cases

Use case	Mission	Risk	Approval	LaunchPad	Agent Registry	Audit	Training	Owner
Bank reconciliation break impacting close uc_r2r_reconciliation_break	r2r	financial_controlled	approved_for_demo	pending_bp_launchpad:uc_r2r_reconciliation_break	pending_bp_agent_registry:iaf-reconciliation-agent	pass 7 years	pass	r2r-finance-control-owner
Duplicate invoice risk before payment run uc_p2p_duplicate_invoice_risk	p2p	financial_controlled	approved_for_demo	pending_bp_launchpad:uc_p2p_duplicate_invoice_risk	pending_bp_agent_registry:iaf-duplicate-invoice-agent	pass 7 years	pass	p2p-finance-control-owner
Early payment discount window closing uc_p2p_discount_capture	p2p	financial_controlled	approved_for_demo	pending_bp_launchpad:uc_p2p_discount_capture	pending_bp_agent_registry:iaf-discount-capture-agent	pass 7 years	pass	p2p-finance-control-owner
End-to-end enterprise decision replay uc_enterprise_decision_replay	enterprise	financial_controlled	approved_for_demo	pending_bp_launchpad:uc_enterprise_decision_replay	pending_bp_agent_registry:iaf-enterprise-replay-agent	pass 7 years	pass	enterprise-finance-control-owner
Forecast variance driven by committed supplier spend uc_fpa_forecast_variance_spend	fpa	financial_controlled	approved_for_demo	pending_bp_launchpad:uc_fpa_forecast_variance_spend	pending_bp_agent_registry:iaf-forecast-variance-agent	pass 7 years	pass	fpa-finance-control-owner
Foreign exchange exposure outside hedge band uc_treasury_fx_exposure_exception	treasury	financial_controlled	approved_for_demo	pending_bp_launchpad:uc_treasury_fx_exposure_exception	pending_bp_agent_registry:iaf-liquidity-risk-agent	pass 7 years	pass	treasury-finance-control-owner
High-value supplier invoice missing receipt evidence uc_p2p_high_value_missing_gr	p2p	financial_controlled	approved_for_demo	pending_bp_launchpad:uc_p2p_high_value_missing_gr	pending_bp_agent_registry:iaf-invoice-decision-agent	pass 7 years	pass	p2p-finance-control-owner
Liquidity forecast adjusted from payment timing changes uc_treasury_liquidity_forecast_adjustment	treasury	financial_controlled	approved_for_demo	pending_bp_launchpad:uc_treasury_liquidity_forecast_adjustment	pending_bp_agent_registry:iaf-payment-timing-agent	pass 7 years	pass	treasury-finance-control-owner
Manual journal requiring control approval uc_r2r_manual_journal_approval	r2r	financial_controlled	approved_for_demo	pending_bp_launchpad:uc_r2r_manual_journal_approval	pending_bp_agent_registry:iaf-close-risk-agent	pass 7 years	pass	r2r-finance-control-owner
Strategic customer receivable overdue uc_o2c_strategic_receivable	o2c	financial_controlled	approved_for_demo	pending_bp_launchpad:uc_o2c_strategic_receivable	pending_bp_agent_registry:iaf-collection-priority-agent	pass 7 years	pass	o2c-finance-control-owner
Tax-sensitive supplier invoice requiring validation uc_tax_supplier_invoice_compliance	tax	financial_controlled	approved_for_demo	pending_bp_launchpad:uc_tax_supplier_invoice_compliance	pending_bp_agent_registry:iaf-tax-compliance-agent	pass 7 years	pass	tax-finance-control-owner
Unapplied cash with bank reconciliation impact uc_o2c_cash_application_exception	o2c	financial_controlled	approved_for_demo	pending_bp_launchpad:uc_o2c_cash_application_exception	pending_bp_agent_registry:iaf-cash-application-agent	pass 7 years	pass	o2c-finance-control-owner
Maintenance schedule and material conflict AO-UC-02	ASSET_OPERATIONS	high	implemented_local_recertification_required	missing	assetoperations-maintenance-planning-agent	pass 7 years	pass	maintenance_planning_manager
Early equipment-failure intervention AO-UC-01	ASSET_OPERATIONS	high	implemented_local_recertification_required	missing	assetoperations-signal-qualification-agent	pass 7 years	pass	asset_operations_manager
TREASURY Treasury Liquidity uc_treasury_liquidity	TREASURY	low	approved	BP-LP-WS-uc_treasury_liquidity	BP-AGT-agent_treasury_liquidity	pass 7 years	pass	treasury.control.owner
STS Sts Trade Settlement uc_sts_trade_settlement	STS	low	approved	BP-LP-WS-uc_sts_trade_settlement	BP-AGT-agent_sts_trade_settlement	pass 7 years	pass	sts.control.owner
STS Sts Cdd Sanctions uc_sts_counterparty_dd	STS	low	approved	BP-LP-WS-uc_sts_counterparty_dd	BP-AGT-agent_sts_cdd_sanctions	pass 7 years	pass	sts.control.owner
FIXED_ASSETS Fixed Assets Capitalization uc_r2r_fixed_assets	FIXED_ASSETS	low	approved	BP-LP-WS-uc_r2r_fixed_assets	BP-AGT-agent_fixed_assets_capitalization	pass 7 years	pass	fixed_assets.control.owner
R2R R2R Close Controller uc_r2r_close	R2R	low	approved	BP-LP-WS-uc_r2r_close	BP-AGT-agent_r2r_close_controller	pass 7 years	pass	r2r.control.owner
REPLAY Decision Replay Narrative uc_platform_replay	REPLAY	low	approved	BP-LP-WS-uc_platform_replay	BP-AGT-agent_decision_replay_narrative	pass 7 years	pass	replay.control.owner
FINOPS Finops Runtime Optimizer uc_platform_finops	FINOPS	low	approved	BP-LP-WS-uc_platform_finops	BP-AGT-agent_finops_runtime_optimizer	pass 7 years	pass	finops.control.owner
EVIDENCE Evidence Pack Builder uc_platform_evidence	EVIDENCE	low	approved	BP-LP-WS-uc_platform_evidence	BP-AGT-agent_evidence_pack_builder	pass 7 years	pass	evidence.control.owner
P2P Gr Ses Followup uc_p2p_gr_ses	P2P	low	approved	BP-LP-WS-uc_p2p_gr_ses	BP-AGT-agent_gr_ses_followup	pass 7 years	pass	p2p.control.owner
P2P Vendor Bank Change Control uc_p2p_bank_change	P2P	low	approved	BP-LP-WS-uc_p2p_bank_change	BP-AGT-agent_vendor_bank_change_control	pass 7 years	pass	p2p.control.owner
O2C Credit Risk Assessment uc_o2c_credit_risk	O2C	low	approved	BP-LP-WS-uc_o2c_credit_risk	BP-AGT-agent_credit_risk_assessment	pass 7 years	pass	o2c.control.owner

Recent AI Audit Ledger

Created	Event	Use case	Agent	Model	Correlation	Retention
2026-08-21 02:38:51.528965+00:00	ai_control_gate	UDP-REMEDIATION-014	iaf-udp-data-remediation-agent		fabric-5a6f6315787442d6a0686b27caf18baf	2033-08-19 02:38:51.528820+00:00
2026-08-21 02:38:50.774460+00:00	ai_control_gate	UDP-REMEDIATION-014	iaf-udp-data-remediation-agent		fabric-66bad7fff7264f95a2f5cd91c7ba00a5	2033-08-19 02:38:50.774308+00:00
2026-08-21 02:26:51.376750+00:00	ai_control_gate	UDP-REMEDIATION-014	iaf-udp-data-remediation-agent		fabric-5a601d1e692c47afabc9ab470d7a06ee	2033-08-19 02:26:51.376618+00:00
2026-08-21 02:25:11.722894+00:00	ai_control_gate	UDP-REMEDIATION-014	iaf-udp-data-remediation-agent		fabric-8477c65196894e9b9371df3dbe8996d5	2033-08-19 02:25:11.722749+00:00
2026-08-17 03:15:51.425991+00:00	ai_control_gate	agent:iaf-journal-validation-agent	iaf-journal-validation-agent	gpt-5-mini	fabric-1dd33a2891db4d589ed2667ceb494992	2033-08-15 03:15:51.425873+00:00
2026-08-17 03:15:45.700798+00:00	ai_control_gate	agent:iaf-journal-validation-agent	iaf-journal-validation-agent	gpt-5-mini	fabric-c4e8cf3feae64c239d370024e4524481	2033-08-15 03:15:45.700616+00:00
2026-08-17 03:15:39.901603+00:00	ai_execution_gate	agent:iaf-journal-validation-agent	iaf-journal-validation-agent	gpt-5-mini	82304b78-56df-408d-8d91-9d2fc230904a	2033-08-15 03:15:39.901419+00:00
2026-08-17 03:15:38.792527+00:00	ai_control_gate	agent:iaf-journal-validation-agent	iaf-journal-validation-agent	gpt-5-mini	fabric-1884a49b2e2141f7979321787cba1a03	2033-08-15 03:15:38.792402+00:00
2026-08-16 20:25:17.435493+00:00	ai_control_gate	agent:iaf-journal-validation-agent	iaf-journal-validation-agent	gpt-5-mini	fabric-19d18e9ff5c8498fa7aace207a21e9cc	2033-08-14 20:25:17.435300+00:00
2026-08-16 20:25:11.028269+00:00	ai_control_gate	agent:iaf-journal-validation-agent	iaf-journal-validation-agent	gpt-5-mini	fabric-fe121e5105514d6ebc076ea3cf9d4980	2033-08-14 20:25:11.028142+00:00
2026-08-16 20:25:05.336076+00:00	ai_execution_gate	agent:iaf-journal-validation-agent	iaf-journal-validation-agent	gpt-5-mini	5ba097d2-85d6-4fcd-a0f6-2d6839a045ba	2033-08-14 20:25:05.335890+00:00
2026-08-16 20:25:04.224260+00:00	ai_control_gate	agent:iaf-journal-validation-agent	iaf-journal-validation-agent	gpt-5-mini	fabric-90edfc12a00b49f0b753c882a346660d	2033-08-14 20:25:04.224138+00:00

Admin Kill Switches

No active kill switches. Admin suspension remains available through iaf_ai_kill_switch_controls.

Open AI Incidents

Due	Use case	Incident	Severity	Suspension	Status
2026-07-03 18:58:29.835738+00:00	BANK-CHANGE-dc8efa42fd644e79	supplier_bank_account_change	high	payment_hold_recommended	open
2026-08-08 02:33:54.338765+00:00	uc_enterprise_decision_replay	ai_risk_capability_test	low	suspension_control_available	closed_capability_test
2026-08-08 02:33:54.338765+00:00	uc_tax_supplier_invoice_compliance	ai_risk_capability_test	low	suspension_control_available	closed_capability_test
2026-08-08 02:33:54.338765+00:00	uc_fpa_forecast_variance_spend	ai_risk_capability_test	low	suspension_control_available	closed_capability_test
2026-08-08 02:33:54.338765+00:00	uc_treasury_liquidity_forecast_adjustment	ai_risk_capability_test	low	suspension_control_available	closed_capability_test
2026-08-08 02:33:54.338765+00:00	uc_treasury_fx_exposure_exception	ai_risk_capability_test	low	suspension_control_available	closed_capability_test
2026-08-08 02:33:54.338765+00:00	uc_r2r_reconciliation_break	ai_risk_capability_test	low	suspension_control_available	closed_capability_test
2026-08-08 02:33:54.338765+00:00	uc_r2r_manual_journal_approval	ai_risk_capability_test	low	suspension_control_available	closed_capability_test
2026-08-08 02:33:54.338765+00:00	uc_o2c_cash_application_exception	ai_risk_capability_test	low	suspension_control_available	closed_capability_test
2026-08-08 02:33:54.338765+00:00	uc_o2c_strategic_receivable	ai_risk_capability_test	low	suspension_control_available	closed_capability_test
2026-08-08 02:33:54.338765+00:00	uc_p2p_discount_capture	ai_risk_capability_test	low	suspension_control_available	closed_capability_test
2026-08-08 02:33:54.338765+00:00	uc_p2p_duplicate_invoice_risk	ai_risk_capability_test	low	suspension_control_available	closed_capability_test

Pending Material AI Changes

No pending material AI change requests.

Continuous Evaluation Runs

Evaluated	Use case	Type	Trigger	Status	Score	Required action
2026-08-07 02:36:54.480095	uc_p2p_duplicate_invoice_risk	golden_demo_readiness	seed_audit	passed	1.0 / 1.0	Run audit before demo deployment.
2026-08-07 02:36:54.480095	uc_p2p_discount_capture	golden_demo_readiness	seed_audit	passed	1.0 / 1.0	Run audit before demo deployment.
2026-08-07 02:36:54.480095	uc_o2c_strategic_receivable	golden_demo_readiness	seed_audit	passed	1.0 / 1.0	Run audit before demo deployment.
2026-08-07 02:36:54.480095	uc_o2c_cash_application_exception	golden_demo_readiness	seed_audit	passed	1.0 / 1.0	Run audit before demo deployment.
2026-08-07 02:36:54.480095	uc_r2r_manual_journal_approval	golden_demo_readiness	seed_audit	passed	1.0 / 1.0	Run audit before demo deployment.
2026-08-07 02:36:54.480095	uc_r2r_reconciliation_break	golden_demo_readiness	seed_audit	passed	1.0 / 1.0	Run audit before demo deployment.
2026-08-07 02:36:54.480095	uc_treasury_fx_exposure_exception	golden_demo_readiness	seed_audit	passed	1.0 / 1.0	Run audit before demo deployment.
2026-08-07 02:36:54.480095	uc_treasury_liquidity_forecast_adjustment	golden_demo_readiness	seed_audit	passed	1.0 / 1.0	Run audit before demo deployment.
2026-08-07 02:36:54.480095	uc_fpa_forecast_variance_spend	golden_demo_readiness	seed_audit	passed	1.0 / 1.0	Run audit before demo deployment.
2026-08-07 02:36:54.480095	uc_tax_supplier_invoice_compliance	golden_demo_readiness	seed_audit	passed	1.0 / 1.0	Run audit before demo deployment.
2026-08-07 02:36:54.480095	uc_enterprise_decision_replay	golden_demo_readiness	seed_audit	passed	1.0 / 1.0	Run audit before demo deployment.
2026-08-07 02:36:54.480095	uc_p2p_high_value_missing_gr	golden_demo_readiness	seed_audit	passed	1.0 / 1.0	Run audit before demo deployment.

Third-Party AI Register

Updated	Provider / service	Purpose	Data processed	Restrictions	Disclosure	Assignment	Owner
2026-08-07 02:36:54.480095	runtime_configured_model_provider governed-finance-runtime v2026.07	Governed inference and decision support through approved runtime tools only.	{ "context_access": "via_policy_gated_experience_api", "data_profile": "compact_demo", "direct_sor_access": false, "training_allowed": false }	{ "bp_approval_required_before_production": true, "no_direct_sap_ariba_database_access": true, "no_training_without_written_approval": true }	registered_for_demo_review	contract_review_required	finance-ai-governance
2026-06-30 11:57:59.613891	local_deterministic_runtime deterministic-finance-engine-v1 v2026.06.workshop	Duplicate payment deterministic scoring for the workshop P2P use case	{ "boundary": "local_sor", "data": [ "supplier", "invoice", "purchase_order", "payment_history" ] }	{ "bp_data_training": false, "external_model": false, "provider_retention": "not_applicable" }	internal_runtime	platform_ip_retained_bp_specific_artefacts_exportable_contract_review	ai.platform.owner

Operator Workflows

These workflows are backed by runtime APIs. They make the bp-required create, notify, suspend, restore, regression, and approval steps explicit for operators; state changes are not local UI toggles.

Create AI Incident

Open a 24-hour notification clock, optionally suspend the affected scope, and activate the documented workaround.

POST /api/ai-control/incidents

affected_use_case_id: uc_p2p_duplicate_payment
incident_type: AI Risk
suspend_scope_type: agent
suspend_scope_id: agent_duplicate_invoice_detector

Notify bp

Record the contractual notification event against the incident evidence trail.

POST /api/ai-control/incidents/{incident_id}/notify

notified_by: bp_admin
notification_note: bp notified within 24-hour SLA

Restore After RCA

Close the incident only after root cause, remediation, recurrence prevention, and restore approval are captured.

POST /api/ai-control/incidents/{incident_id}/restore

root_cause: required
remediation_plan: required
restore_approval_reference: required

Approve Material Change

Approve material AI changes only with regression, rollback, and passed golden-decision drift evidence.

POST /api/ai-control/changes/{change_id}/approve

golden_drift_report.status: passed
material_diff_count: 0
approval_status: approved

Record provider/model purpose, data processed, restrictions, disclosure, assignment, and owner before production use.

POST /api/ai-control/third-party-ai/register

provider: Azure OpenAI
model_or_service: gpt-4.1
disclosure_status: approved

Version prompts, configs, workflow definitions, API specs, and runbooks with content hashes for exit packaging.

POST /api/ai-control/artefacts/register

artefact_id: p2p-duplicate-prompt
artefact_type: prompt_template
version: 1.0

Run AI Risk Tests

Persist security, tool-misuse, robustness, bias/fairness, and policy test evidence as a lifecycle evaluation run.

POST /api/ai-control/risk-tests/run

category: prompt_injection | tool_misuse | bias_fairness
passed: true/false

Evaluate Release Gate

Block production promotion unless registry approval, lifecycle eval, golden drift, risk tests, material-change approval, rollback, and post-deploy evidence pass.

POST /api/ai-control/release-gates/evaluate

use_case_id: uc_p2p_duplicate_payment
release_id: rel-2026-07-08
require_post_deploy_verification: true