Contract-grade AI governance

AI Compliance Command Center

Measured control plane for registered AI use cases, Material AI approval, agent registry linkage, model and agent cards, audit retention, training guardrails, kill switches, incidents, and change governance.

Open JSON payload Open asset register Open contract posture Open governed P2P surface

Runtime status

Status: ready

Tenant / realm: bp / bp

Required action: No action required.

Failed readiness checks: no_open_incidents

Readiness

91.7%

11/12 checks

Use cases

15 approved

Material AI

0 missing LaunchPad

Audit events

330958

8851 retained 7 years

Kill switches

active suspensions

Incidents

1 overdue notices

Evaluation runs

0 blocked

Training approvals

explicit bp approvals

Exit packages

machine-readable

Third parties

registered

Material gate events

2968

persisted

Human decisions

recorded

Portfolio Compliance Gap Closure

Read-only server-side audit of registered AI use cases against required contract evidence. The admin run endpoint remains OIDC-protected; this UI surface does not expose anonymous mutation.

Portfolio status

ready

15 registered use cases

Open evidence gaps

agent cards, model cards, artefacts, evals, exits

Tenant / realm

bp/bp

server-side audited

Evidence domain	Status	Missing	Use cases
Agent Cards	ready	0
Model Cards	ready	0
Artefacts	ready	0
Evaluations	ready	0
Exit Packages	ready	0
Audit Events	ready	0
Approval Records	ready	0
Human Oversight Records	ready	0

Registered AI Use Cases

Use case	Mission	Risk	Approval	LaunchPad	Agent Registry	Audit	Training	Owner
TREASURY Treasury Liquidity uc_treasury_liquidity	TREASURY	low	approved	BP-LP-WS-uc_treasury_liquidity	BP-AGT-agent_treasury_liquidity	pass 7 years	pass	treasury.control.owner
STS Sts Trade Settlement uc_sts_trade_settlement	STS	low	approved	BP-LP-WS-uc_sts_trade_settlement	BP-AGT-agent_sts_trade_settlement	pass 7 years	pass	sts.control.owner
STS Sts Cdd Sanctions uc_sts_counterparty_dd	STS	low	approved	BP-LP-WS-uc_sts_counterparty_dd	BP-AGT-agent_sts_cdd_sanctions	pass 7 years	pass	sts.control.owner
FIXED_ASSETS Fixed Assets Capitalization uc_r2r_fixed_assets	FIXED_ASSETS	low	approved	BP-LP-WS-uc_r2r_fixed_assets	BP-AGT-agent_fixed_assets_capitalization	pass 7 years	pass	fixed_assets.control.owner
R2R R2R Close Controller uc_r2r_close	R2R	low	approved	BP-LP-WS-uc_r2r_close	BP-AGT-agent_r2r_close_controller	pass 7 years	pass	r2r.control.owner
REPLAY Decision Replay Narrative uc_platform_replay	REPLAY	low	approved	BP-LP-WS-uc_platform_replay	BP-AGT-agent_decision_replay_narrative	pass 7 years	pass	replay.control.owner
FINOPS Finops Runtime Optimizer uc_platform_finops	FINOPS	low	approved	BP-LP-WS-uc_platform_finops	BP-AGT-agent_finops_runtime_optimizer	pass 7 years	pass	finops.control.owner
EVIDENCE Evidence Pack Builder uc_platform_evidence	EVIDENCE	low	approved	BP-LP-WS-uc_platform_evidence	BP-AGT-agent_evidence_pack_builder	pass 7 years	pass	evidence.control.owner
P2P Gr Ses Followup uc_p2p_gr_ses	P2P	low	approved	BP-LP-WS-uc_p2p_gr_ses	BP-AGT-agent_gr_ses_followup	pass 7 years	pass	p2p.control.owner
P2P Vendor Bank Change Control uc_p2p_bank_change	P2P	low	approved	BP-LP-WS-uc_p2p_bank_change	BP-AGT-agent_vendor_bank_change_control	pass 7 years	pass	p2p.control.owner
O2C Credit Risk Assessment uc_o2c_credit_risk	O2C	low	approved	BP-LP-WS-uc_o2c_credit_risk	BP-AGT-agent_credit_risk_assessment	pass 7 years	pass	o2c.control.owner
O2C Collections Prioritisation uc_o2c_collections	O2C	low	approved	BP-LP-WS-uc_o2c_collections	BP-AGT-agent_collections_prioritisation	pass 7 years	pass	o2c.control.owner
O2C Cash Application Matching uc_o2c_cash_application	O2C	low	approved	BP-LP-WS-uc_o2c_cash_application	BP-AGT-agent_cash_application_matching	pass 7 years	pass	o2c.control.owner
FPA Fpa Variance Narrator uc_fpa_variance	FPA	low	approved	BP-LP-WS-uc_fpa_variance	BP-AGT-agent_fpa_variance_narrator	pass 7 years	pass	fpa.control.owner
Duplicate Payment Risk Agent uc_p2p_duplicate_payment	P2P	financial_decision_support	approved	BP-LP-2026-0142	BP-AGT-P2P-009	pass 7 years	pass	p2p.control.owner

Recent AI Audit Ledger

Created	Event	Use case	Agent	Model	Correlation	Retention
2026-07-14 04:48:53.985753+00:00	ai_control_gate	agent:iaf-duplicate-leakage-agent	iaf-duplicate-leakage-agent	gpt-4.1-mini	fabric-e8f94877790348e7b017e7e6771c2368	2033-07-12 04:48:53.985561+00:00
2026-07-14 04:48:53.463211+00:00	ai_execution_gate	agent:iaf-duplicate-leakage-agent	iaf-duplicate-leakage-agent	gpt-4.1-mini	3fa87f2c-6da6-4db6-9e1a-e90009d56afb	2033-07-12 04:48:53.463041+00:00
2026-07-14 04:48:53.099049+00:00	ai_control_gate	agent:iaf-duplicate-leakage-agent	iaf-duplicate-leakage-agent	gpt-4.1-mini	fabric-6732127f84a14dae9956e762c22b8c04	2033-07-12 04:48:53.098881+00:00
2026-07-14 04:48:51.199390+00:00	ai_control_gate	agent:iaf-duplicate-leakage-agent	iaf-duplicate-leakage-agent	gpt-4.1-mini	fabric-926531cbf56c44e28473b940bed87a84	2033-07-12 04:48:51.199227+00:00
2026-07-14 04:48:50.582677+00:00	ai_execution_gate	agent:iaf-duplicate-leakage-agent	iaf-duplicate-leakage-agent	gpt-4.1-mini	e0767a37-9635-473d-aa18-38a3961bfa2e	2033-07-12 04:48:50.582503+00:00
2026-07-14 04:48:50.282141+00:00	ai_control_gate	agent:iaf-duplicate-leakage-agent	iaf-duplicate-leakage-agent	gpt-4.1-mini	fabric-de052c2d61734c8b886404fb5e33fc62	2033-07-12 04:48:50.281973+00:00
2026-07-14 04:48:48.275465+00:00	ai_control_gate	agent:iaf-duplicate-leakage-agent	iaf-duplicate-leakage-agent	gpt-4.1-mini	fabric-ef3caa129c474bd78d152d7208b70500	2033-07-12 04:48:48.275290+00:00
2026-07-14 04:48:47.573993+00:00	ai_execution_gate	agent:iaf-duplicate-leakage-agent	iaf-duplicate-leakage-agent	gpt-4.1-mini	93fe855d-934f-4eb0-b7e0-46370d1f684f	2033-07-12 04:48:47.573822+00:00
2026-07-14 04:48:47.182778+00:00	ai_control_gate	agent:iaf-duplicate-leakage-agent	iaf-duplicate-leakage-agent	gpt-4.1-mini	fabric-c0adcb0dcd9c45d6a126d999cb49d2a7	2033-07-12 04:48:47.182607+00:00
2026-07-14 04:44:08.373292+00:00	ai_control_gate	agent:iaf-duplicate-leakage-agent	iaf-duplicate-leakage-agent	gpt-4.1-mini	fabric-c07b4d2567b0422fb297b8c0fb937c4b	2033-07-12 04:44:08.373134+00:00
2026-07-14 04:44:07.867396+00:00	ai_execution_gate	agent:iaf-duplicate-leakage-agent	iaf-duplicate-leakage-agent	gpt-4.1-mini	e94f1ce9-489e-4120-b1d5-4ed4b15a2936	2033-07-12 04:44:07.867227+00:00
2026-07-14 04:44:07.499728+00:00	ai_control_gate	agent:iaf-duplicate-leakage-agent	iaf-duplicate-leakage-agent	gpt-4.1-mini	fabric-0df0929850cb44d6817c22c74772c6f2	2033-07-12 04:44:07.499505+00:00

Admin Kill Switches

No active kill switches. Admin suspension remains available through iaf_ai_kill_switch_controls.

Open AI Incidents

Due	Use case	Incident	Severity	Suspension	Status
2026-07-03 18:58:29.835738+00:00	BANK-CHANGE-dc8efa42fd644e79	supplier_bank_account_change	high	payment_hold_recommended	open

Pending Material AI Changes

No pending material AI change requests.

Continuous Evaluation Runs

Evaluated	Use case	Type	Trigger	Status	Score	Required action
2026-07-01 15:06:23.212004	uc_treasury_liquidity	portfolio_compliance_gap_closure	gap_closure	passed	1.0 / 1.0	none
2026-07-01 15:06:17.973063	uc_sts_trade_settlement	portfolio_compliance_gap_closure	gap_closure	passed	1.0 / 1.0	none
2026-07-01 15:06:12.712536	uc_sts_counterparty_dd	portfolio_compliance_gap_closure	gap_closure	passed	1.0 / 1.0	none
2026-07-01 15:06:07.476355	uc_r2r_fixed_assets	portfolio_compliance_gap_closure	gap_closure	passed	1.0 / 1.0	none
2026-07-01 15:06:02.238862	uc_r2r_close	portfolio_compliance_gap_closure	gap_closure	passed	1.0 / 1.0	none
2026-07-01 15:05:56.997449	uc_platform_replay	portfolio_compliance_gap_closure	gap_closure	passed	1.0 / 1.0	none
2026-07-01 15:05:51.780823	uc_platform_finops	portfolio_compliance_gap_closure	gap_closure	passed	1.0 / 1.0	none
2026-07-01 15:05:46.556852	uc_platform_evidence	portfolio_compliance_gap_closure	gap_closure	passed	1.0 / 1.0	none
2026-07-01 15:05:41.281332	uc_p2p_gr_ses	portfolio_compliance_gap_closure	gap_closure	passed	1.0 / 1.0	none
2026-07-01 15:05:36.042175	uc_p2p_duplicate_payment	portfolio_compliance_gap_closure	gap_closure	passed	1.0 / 1.0	none
2026-07-01 15:05:30.803362	uc_p2p_bank_change	portfolio_compliance_gap_closure	gap_closure	passed	1.0 / 1.0	none
2026-07-01 15:05:25.590407	uc_o2c_credit_risk	portfolio_compliance_gap_closure	gap_closure	passed	1.0 / 1.0	none

Third-Party AI Register

Updated	Provider / service	Purpose	Data processed	Restrictions	Disclosure	Assignment	Owner
2026-06-30 11:57:59.613891	local_deterministic_runtime deterministic-finance-engine-v1 v2026.06.workshop	Duplicate payment deterministic scoring for the workshop P2P use case	{ "boundary": "local_sor", "data": [ "supplier", "invoice", "purchase_order", "payment_history" ] }	{ "bp_data_training": false, "external_model": false, "provider_retention": "not_applicable" }	internal_runtime	platform_ip_retained_bp_specific_artefacts_exportable_contract_review	ai.platform.owner

Operator Workflows

These workflows are backed by runtime APIs. They make the bp-required create, notify, suspend, restore, regression, and approval steps explicit for operators; state changes are not local UI toggles.

Create AI Incident

Open a 24-hour notification clock, optionally suspend the affected scope, and activate the documented workaround.

POST /api/ai-control/incidents

affected_use_case_id: uc_p2p_duplicate_payment
incident_type: AI Risk
suspend_scope_type: agent
suspend_scope_id: agent_duplicate_invoice_detector

Notify bp

Record the contractual notification event against the incident evidence trail.

POST /api/ai-control/incidents/{incident_id}/notify

notified_by: bp_admin
notification_note: bp notified within 24-hour SLA

Restore After RCA

Close the incident only after root cause, remediation, recurrence prevention, and restore approval are captured.

POST /api/ai-control/incidents/{incident_id}/restore

root_cause: required
remediation_plan: required
restore_approval_reference: required

Approve Material Change

Approve material AI changes only with regression, rollback, and passed golden-decision drift evidence.

POST /api/ai-control/changes/{change_id}/approve

golden_drift_report.status: passed
material_diff_count: 0
approval_status: approved

Record provider/model purpose, data processed, restrictions, disclosure, assignment, and owner before production use.

POST /api/ai-control/third-party-ai/register

provider: Azure OpenAI
model_or_service: gpt-4.1
disclosure_status: approved

Version prompts, configs, workflow definitions, API specs, and runbooks with content hashes for exit packaging.

POST /api/ai-control/artefacts/register

artefact_id: p2p-duplicate-prompt
artefact_type: prompt_template
version: 1.0

Run AI Risk Tests

Persist security, tool-misuse, robustness, bias/fairness, and policy test evidence as a lifecycle evaluation run.

POST /api/ai-control/risk-tests/run

category: prompt_injection | tool_misuse | bias_fairness
passed: true/false

Evaluate Release Gate

Block production promotion unless registry approval, lifecycle eval, golden drift, risk tests, material-change approval, rollback, and post-deploy evidence pass.

POST /api/ai-control/release-gates/evaluate

use_case_id: uc_p2p_duplicate_payment
release_id: rel-2026-07-08
require_post_deploy_verification: true