VELARU MANDATE EXHIBIT PACK — DEFENSE PROCUREMENT / CMMC
Jurisdiction: Florida (us_fl)
Modality: Text / Chat
Program: Velaru Defense Procurement / CMMC · Florida (galactic_defense_procurement_us_fl)
Product ID: defense_procurement:us_fl:bundle:text
Vertical: defense_procurement
Generated: 2026-08-22T19:41:37.509354Z
Authority: Florida OIR AI Pack — CMMC AI Supply Chain Pack
Deadline: CMMC 2.0 + FAR AI clause rollout
Velaru verify: https://velaru-erra.onrender.com/verify

EXHIBIT A — AI INVENTORY
[]

EXHIBIT B — GOVERNANCE FRAMEWORK
{
  "framework": "Velaru Mandate Registry \u2014 Defense Procurement / CMMC",
  "exhibit_authority": "Florida OIR AI Pack \u2014 CMMC AI Supply Chain Pack",
  "regulatory_frameworks": [
    "CMMC",
    "FISMA",
    "FAR 52.204-21",
    "ITAR",
    "FL HB 919",
    "Florida Information Protection Act",
    "Citizens Property Insurance"
  ],
  "standards_alignment": [
    "POSS-2",
    "DRP-1",
    "TCB",
    "FRE 707 pre-compliance",
    "ISO 42001"
  ],
  "human_oversight": "process CUI with AI",
  "third_party_verification": "https://velaru-erra.onrender.com/verify (operator-independent)",
  "data_lineage": "Hash-chained Ed25519 receipts; optional RFC3161 + external anchor",
  "mirror_trap": "Subcontractor uses AI on CUI \u2014 prime owns CMMC finding, sub owns contract termination. \u00b7 Florida property insurers using AI for claims while Citizens backs up market \u2014 AI claim denial = political lightning rod.",
  "chain_integrity": {
    "depth": 6,
    "invariant_holds": true
  }
}

EXHIBIT D — DATA INPUTS & VALIDATION
{
  "data_validation_method": "Cryptographic receipt per AI decision; public verify without trusting deployer, vendor, or Velaru operator",
  "bias_testing_proxy": "Asymmetry score from live chain signals",
  "model_change_control": "Policy lock registry \u2014 criteria hash frozen pre-dispute",
  "logging_retention": "90-day pre-dispute window minimum; permanent verify permalinks",
  "external_validator": "Nisaba LLC / Velaru",
  "validator_independence": "Client-side Ed25519 verify; BYOK tri-receipt optional",
  "headline_stat": "CMMC Level 2 required for CUI \u2014 AI processing CUI without audit = certification loss",
  "global_leaders_addressed": [
    "DoD",
    "Lockheed",
    "Raytheon",
    "CMMC AB",
    "NIST",
    "Florida OIR",
    "Citizens Property",
    "Universal Property"
  ]
}

MIRROR TRAP (regulatory insight)
Subcontractor uses AI on CUI — prime owns CMMC finding, sub owns contract termination. · Florida property insurers using AI for claims while Citizens backs up market — AI claim denial = political lightning rod.

NERVE CARDS — WHY GLOBAL LEADERS CARE
[
  {
    "title": "FAR 52.204-21",
    "body": "Basic safeguarding \u2014 AI agent on CUI network triggers enhanced controls.",
    "source": "vertical"
  },
  {
    "title": "Supply chain",
    "body": "AI vendor on CMMC boundary \u2014 flow-down requirements to receipt layer.",
    "source": "vertical"
  },
  {
    "title": "False Claims Act",
    "body": "Certifying CMMC compliance without AI controls = treble damages.",
    "source": "vertical"
  },
  {
    "title": "[Florida] Hurricane claims AI",
    "body": "Post-Idalia/Ian claims AI scrutiny \u2014 bad faith with AI lowball estimate.",
    "source": "jurisdiction"
  },
  {
    "title": "[Florida] Surplus lines",
    "body": "Florida largest homeowners market collapse \u2014 AI underwriting receipt mandatory for OIR exam.",
    "source": "jurisdiction"
  },
  {
    "title": "[Text / Chat] Modality hook",
    "body": "Baseline \u2014 all frameworks apply to text decisions.",
    "source": "modality"
  }
]

BOOK SUMMARY: {
  "total_insureds": 0,
  "compliant": 0,
  "grace_period": 0,
  "non_compliant": 0,
  "expired": 0,
  "not_enrolled": 0,
  "compliant_pct": 0.0
}

TAM / EXPOSURE: 300K+ defense industrial base companies
INSURANCE LINES: Defense E&O, Cyber, Fidelity

DISCLAIMER: External validation evidence pack — not legal advice, not filed rate approval.