VELARU MANDATE EXHIBIT PACK — HEALTHCARE AI / MEDICAL MALPRACTICE Jurisdiction: Ireland (ie) Modality: Text / Chat Program: Velaru Healthcare AI / Medical Malpractice · Ireland (galactic_healthcare_ie) Product ID: healthcare:ie:bundle:text Vertical: healthcare Generated: 2026-08-19T18:12:21.970425Z Authority: Ireland DPC AI Pack — Clinical AI SaMD + Med Mal Evidence Pack Deadline: EU AI Act + DPC cross-border enforcement Velaru verify: https://velaru-erra.onrender.com/verify EXHIBIT A — AI INVENTORY [] EXHIBIT B — GOVERNANCE FRAMEWORK { "framework": "Velaru Mandate Registry \u2014 Healthcare AI / Medical Malpractice", "exhibit_authority": "Ireland DPC AI Pack \u2014 Clinical AI SaMD + Med Mal Evidence Pack", "regulatory_frameworks": [ "HIPAA", "FDA SaMD guidance", "EU AI Act Annex III", "EU AI Act", "GDPR (lead DPA for Meta/Google)", "CBI AI guidance" ], "standards_alignment": [ "POSS-2", "DRP-1", "TCB", "FRE 707 pre-compliance", "ISO 42001" ], "human_oversight": "credential AI clinical tool", "third_party_verification": "https://velaru-erra.onrender.com/verify (operator-independent)", "data_lineage": "Hash-chained Ed25519 receipts; optional RFC3161 + external anchor", "mirror_trap": "Insurers underwriting health AI exclusions while using AI in claims \u2014 same governance gap NAIC flags for carriers. \u00b7 Ireland DPC leads EU enforcement against US tech \u2014 AI decisions in Ireland = DPC jurisdiction.", "chain_integrity": { "depth": 4, "invariant_holds": true } } EXHIBIT D — DATA INPUTS & VALIDATION { "data_validation_method": "Cryptographic receipt per AI decision; public verify without trusting deployer, vendor, or Velaru operator", "bias_testing_proxy": "Asymmetry score from live chain signals", "model_change_control": "Policy lock registry \u2014 criteria hash frozen pre-dispute", "logging_retention": "90-day pre-dispute window minimum; permanent verify permalinks", "external_validator": "Nisaba LLC / Velaru", "validator_independence": "Client-side Ed25519 verify; BYOK tri-receipt optional", "headline_stat": "Deployer owns AI failure \u2014 vendor caps liability; hospital pays claim then subrogates nothing", "global_leaders_addressed": [ "FDA", "Joint Commission", "Gallagher Re", "Epic", "UnitedHealth", "DPC", "Central Bank of Ireland", "Stripe EU" ] } MIRROR TRAP (regulatory insight) Insurers underwriting health AI exclusions while using AI in claims — same governance gap NAIC flags for carriers. · Ireland DPC leads EU enforcement against US tech — AI decisions in Ireland = DPC jurisdiction. NERVE CARDS — WHY GLOBAL LEADERS CARE [ { "title": "Coverage denial litigation", "body": "Algorithms denying care are in discovery now \u2014 reconstructability beats internal EHR logs.", "source": "vertical" }, { "title": "PCCP gap", "body": "FDA change control plans don't cover vendor foundation model updates \u2014 undocumented drift = liability.", "source": "vertical" }, { "title": "Board accountability", "body": "Public health systems: AI governance is SEC-disclosable material risk in 2026.", "source": "vertical" }, { "title": "[Ireland] Tech HQ density", "body": "Meta, Google, Apple EU HQ \u2014 AI governance tested in Irish courts first.", "source": "jurisdiction" }, { "title": "[Ireland] CBI insurance", "body": "Irish insurance undertakings \u2014 Solvency II + AI governance overlap.", "source": "jurisdiction" }, { "title": "[Text / Chat] Modality hook", "body": "Baseline \u2014 all frameworks apply to text decisions.", "source": "modality" } ] BOOK SUMMARY: { "total_insureds": 0, "compliant": 0, "grace_period": 0, "non_compliant": 0, "expired": 0, "not_enrolled": 0, "compliant_pct": 0.0 } TAM / EXPOSURE: $4B+ US med mal · coverage-denial AI in active litigation INSURANCE LINES: Med mal, Hospital liability, Health cyber DISCLAIMER: External validation evidence pack — not legal advice, not filed rate approval.