VELARU MANDATE EXHIBIT PACK — NURSE SCHEDULING AI Jurisdiction: Germany (de) Modality: Text / Chat Program: Velaru Nurse Scheduling AI · Germany (galactic_nursing_scheduling_de) Product ID: nursing_scheduling:de:bundle:text Vertical: nursing_scheduling Generated: 2026-08-23T21:01:11.855202Z Authority: Germany BaFin AI Pack — Nurse Scheduling AI External Validation Pack Deadline: EU AI Act + sector regulator Velaru verify: https://velaru-erra.onrender.com/verify EXHIBIT A — AI INVENTORY [] EXHIBIT B — GOVERNANCE FRAMEWORK { "framework": "Velaru Mandate Registry \u2014 Nurse Scheduling AI", "exhibit_authority": "Germany BaFin AI Pack \u2014 Nurse Scheduling AI External Validation Pack", "regulatory_frameworks": [ "HIPAA", "FDA SaMD guidance", "EU AI Act Annex III", "EU AI Act", "BaFin AI guidance", "GDPR", "German AI Strategy" ], "standards_alignment": [ "POSS-2", "DRP-1", "TCB", "FRE 707 pre-compliance", "ISO 42001" ], "human_oversight": "execute Nurse Scheduling AI AI decision", "third_party_verification": "https://velaru-erra.onrender.com/verify (operator-independent)", "data_lineage": "Hash-chained Ed25519 receipts; optional RFC3161 + external anchor", "mirror_trap": "Niche Nurse Scheduling AI deployer owns AI harm \u2014 vertical SaaS vendor owns liability cap. \u00b7 BaFin expects bank AI documentation in German exam language \u2014 receipt metadata supports localization.", "chain_integrity": { "depth": 6, "invariant_holds": true } } EXHIBIT D — DATA INPUTS & VALIDATION { "data_validation_method": "Cryptographic receipt per AI decision; public verify without trusting deployer, vendor, or Velaru operator", "bias_testing_proxy": "Asymmetry score from live chain signals", "model_change_control": "Policy lock registry \u2014 criteria hash frozen pre-dispute", "logging_retention": "90-day pre-dispute window minimum; permanent verify permalinks", "external_validator": "Nisaba LLC / Velaru", "validator_independence": "Client-side Ed25519 verify; BYOK tri-receipt optional", "headline_stat": "Nurse Scheduling AI \u2014 AI decision audit trail required for liability defense", "global_leaders_addressed": [ "Sector regulators", "Vertical SaaS platforms", "BaFin", "Volkswagen", "SAP", "Siemens" ] } MIRROR TRAP (regulatory insight) Niche Nurse Scheduling AI deployer owns AI harm — vertical SaaS vendor owns liability cap. · BaFin expects bank AI documentation in German exam language — receipt metadata supports localization. NERVE CARDS — WHY GLOBAL LEADERS CARE [ { "title": "Niche litigation", "body": "Nurse Scheduling AI plaintiffs challenge AI decision without independent verify.", "source": "vertical" }, { "title": "Insurance bind", "body": "Sector insurers asking AI governance questions on Nurse Scheduling AI accounts.", "source": "vertical" }, { "title": "[Germany] Automotive", "body": "German OEM AV and industrial AI \u2014 strict liability culture demands proof.", "source": "jurisdiction" }, { "title": "[Germany] Works council", "body": "Betriebsrat co-determination on workplace AI \u2014 receipt proves consultation occurred.", "source": "jurisdiction" }, { "title": "[Text / Chat] Modality hook", "body": "Baseline \u2014 all frameworks apply to text decisions.", "source": "modality" } ] BOOK SUMMARY: { "total_insureds": 0, "compliant": 0, "grace_period": 0, "non_compliant": 0, "expired": 0, "not_enrolled": 0, "compliant_pct": 0.0 } TAM / EXPOSURE: Global Nurse Scheduling AI market INSURANCE LINES: E&O, Cyber, Sector liability DISCLAIMER: External validation evidence pack — not legal advice, not filed rate approval.