VELARU MANDATE EXHIBIT PACK — AI CREDIT SCORING / LENDING
Jurisdiction: United States (Federal) (us_federal)
Modality: Text / Chat
Program: Velaru AI Credit Scoring / Lending · United States (Federal) (galactic_mortgage_us_federal)
Product ID: mortgage:us_federal:bundle:text
Vertical: mortgage
Generated: 2026-08-19T23:26:32.181784Z
Authority: US Federal Exhibit — GSE AI Governance QC Audit Pack
Deadline: Fannie Mae LL-2026-04 effective
Velaru verify: https://velaru-erra.onrender.com/verify

EXHIBIT A — AI INVENTORY
[]

EXHIBIT B — GOVERNANCE FRAMEWORK
{
  "framework": "Velaru Mandate Registry \u2014 AI Credit Scoring / Lending",
  "exhibit_authority": "US Federal Exhibit \u2014 GSE AI Governance QC Audit Pack",
  "regulatory_frameworks": [
    "ECOA",
    "Fair Housing Act",
    "Fannie Mae LL-2026-04",
    "Freddie Mac Section 1302.8",
    "FTC Act \u00a75",
    "EEOC Title VII",
    "NAIC Model Bulletin",
    "EO 14179 AI policy"
  ],
  "standards_alignment": [
    "POSS-2",
    "DRP-1",
    "TCB",
    "FRE 707 pre-compliance",
    "ISO 42001"
  ],
  "human_oversight": "sell loan to GSE",
  "third_party_verification": "https://velaru-erra.onrender.com/verify (operator-independent)",
  "data_lineage": "Hash-chained Ed25519 receipts; optional RFC3161 + external anchor",
  "mirror_trap": "Freddie requires segregation of duties + audit trails Fannie omits \u2014 lenders selling to both must build to the stricter standard. Velaru is that standard. \u00b7 Federal agencies disagree on AI approach \u2014 but examiners agree internal logs are insufficient.",
  "chain_integrity": {
    "depth": 4,
    "invariant_holds": true
  }
}

EXHIBIT D — DATA INPUTS & VALIDATION
{
  "data_validation_method": "Cryptographic receipt per AI decision; public verify without trusting deployer, vendor, or Velaru operator",
  "bias_testing_proxy": "Asymmetry score from live chain signals",
  "model_change_control": "Policy lock registry \u2014 criteria hash frozen pre-dispute",
  "logging_retention": "90-day pre-dispute window minimum; permanent verify permalinks",
  "external_validator": "Nisaba LLC / Velaru",
  "validator_independence": "Client-side Ed25519 verify; BYOK tri-receipt optional",
  "headline_stat": "First US sector-specific AI mandate \u2014 QC must query which AI influenced which loan",
  "global_leaders_addressed": [
    "Fannie Mae",
    "Freddie Mac",
    "Rocket Mortgage",
    "Wells Fargo",
    "CFPB",
    "NAIC",
    "FTC",
    "EEOC"
  ]
}

MIRROR TRAP (regulatory insight)
Freddie requires segregation of duties + audit trails Fannie omits — lenders selling to both must build to the stricter standard. Velaru is that standard. · Federal agencies disagree on AI approach — but examiners agree internal logs are insufficient.

NERVE CARDS — WHY GLOBAL LEADERS CARE
[
  {
    "title": "50 days to compliance",
    "body": "Inventory all AI in origination/servicing \u2014 embedded SaaS counts. Per-loan decision record or fail QC.",
    "source": "vertical"
  },
  {
    "title": "Fair lending discovery",
    "body": "ECOA adverse action requires specific reasons \u2014 AI black box without receipt = automatic CFPB referral pattern.",
    "source": "vertical"
  },
  {
    "title": "Vendor illusion",
    "body": "Lender owns GSE indemnity for vendor AI \u2014 same Mobley logic as hiring, different regulator.",
    "source": "vertical"
  },
  {
    "title": "[United States (Federal)] Agency pincer",
    "body": "FTC, CFPB, EEOC, and DOJ all active on AI \u2014 one receipt chain satisfies cross-agency discovery.",
    "source": "jurisdiction"
  },
  {
    "title": "[United States (Federal)] Federal preemption fight",
    "body": "State laws filling void \u2014 multistate operators need jurisdiction-tagged receipts.",
    "source": "jurisdiction"
  },
  {
    "title": "[Text / Chat] Modality hook",
    "body": "Baseline \u2014 all frameworks apply to text decisions.",
    "source": "modality"
  }
]

BOOK SUMMARY: {
  "total_insureds": 0,
  "compliant": 0,
  "grace_period": 0,
  "non_compliant": 0,
  "expired": 0,
  "not_enrolled": 0,
  "compliant_pct": 0.0
}

TAM / EXPOSURE: $12T+ US residential origination · every GSE seller/servicer
INSURANCE LINES: E&O, Rep & warranty, Cyber

DISCLAIMER: External validation evidence pack — not legal advice, not filed rate approval.