Operations

Reports and attestation language

v0.1 lock. The five-framework strip and the framing phrasing on this page are sentinel-wrapped and locked. Reframing or paraphrasing is a Lothar-sign-off change and does not happen in a docs commit.

Every diagnosis and validation PDF carries a fixed five-framework attestation strip and a fixed Lothar disclaimer.

The five-framework attestation

The strip below renders verbatim on every diagnosis and validation PDF masthead. The wording is sentinel-wrapped and exempt from the writing-rules lint. Reframing or paraphrasing the strip is a Lothar-sign-off change and does not happen in a docs commit.

[LEGAL-COPY-BEGIN]
Structured for review under SR 11-7, PRA SS1/23 Principle 3.4,
EU AI Act Article 9 (high-risk per Annex III, applicable from
August 2026), the ECB IM Guide, and APRA CPG 220.
[LEGAL-COPY-END]

Per framework

SR 11-7. The United States Federal Reserve supervisory guidance on model risk management. Covers the lifecycle of model development, implementation, use, and validation at supervised banking organisations. The IADTX artefact is structured for review under SR 11-7 as a structural-soundness input to the validation stage.

PRA SS1/23 Principle 3.4. The Prudential Regulation Authority supervisory statement on model risk management principles for banks. Principle 3.4 addresses model validation independence and rigour. The IADTX artefact is structured for review under Principle 3.4 as a third-party structural-soundness reading the validation function can ingest.

EU AI Act Article 9. The risk-management-system requirement for high-risk AI systems under the EU AI Act, applicable from August 2026 for systems in scope per Annex III. The IADTX artefact is structured for review under Article 9 as a structural-soundness input to the risk-management documentation required from the provider.

ECB IM Guide. The European Central Bank guide on internal models. Covers internal-model governance, validation, and ongoing monitoring at significant institutions. The IADTX artefact is structured for review under the IM Guide as a structural-soundness reading the internal validation unit can cite.

APRA CPG 220. The Australian Prudential Regulation Authority prudential practice guide on risk management. Covers model risk as part of the broader risk-management framework at APRA-regulated entities. The IADTX artefact is structured for review under CPG 220 as a structural-soundness input to the model-risk-management programme.

The Lothar disclaimer

Every diagnosis and validation PDF carries a locked disclaimer paragraph signed off by Lothar (Mehrhoff Digital OU). The disclaimer is reproduced verbatim on the PDF and is exempt from the writing-rules lint via legal-copy sentinels. This docs page does not reproduce the disclaimer copy; the disclaimer lives on the artefact. A reader looking for the exact wording opens a diagnosis or validation PDF on the result page.

Validation document version

The validation document is at v1.1. The version bumps when attestation language materially changes. The next bump is reserved for the EU AI Act Article 9 effective date in August 2026; the framing changes from applicable from August 2026 to in force.

Where you see this in the product

Every diagnosis PDF masthead and every validation PDF masthead renders the attestation strip and the document-type chip. The result page links to both artefacts after a verdict is in. The validation PDF additionally renders the document version on the cover.