VELARU MANDATE EXHIBIT PACK — PRIVATE EQUITY PORTFOLIO AI Jurisdiction: Germany (de) Modality: Text / Chat Program: Velaru Private Equity Portfolio AI · Germany (galactic_private_equity_portfolio_de) Product ID: private_equity_portfolio:de:bundle:text Vertical: private_equity_portfolio Generated: 2026-08-25T21:59:28.606988Z Authority: Germany BaFin AI Pack — Private Equity Portfolio AI External Validation Pack Deadline: EU AI Act + sector regulator Velaru verify: https://velaru-erra.onrender.com/verify EXHIBIT A — AI INVENTORY [] EXHIBIT B — GOVERNANCE FRAMEWORK { "framework": "Velaru Mandate Registry \u2014 Private Equity Portfolio AI", "exhibit_authority": "Germany BaFin AI Pack \u2014 Private Equity Portfolio AI External Validation Pack", "regulatory_frameworks": [ "SEC Reg BI", "Investment Advisers Act", "FINRA Rule 3110", "EU AI Act", "BaFin AI guidance", "GDPR", "German AI Strategy" ], "standards_alignment": [ "POSS-2", "DRP-1", "TCB", "FRE 707 pre-compliance", "ISO 42001" ], "human_oversight": "execute Private Equity Portfolio AI AI decision", "third_party_verification": "https://velaru-erra.onrender.com/verify (operator-independent)", "data_lineage": "Hash-chained Ed25519 receipts; optional RFC3161 + external anchor", "mirror_trap": "Niche Private Equity Portfolio AI deployer owns AI harm \u2014 vertical SaaS vendor owns liability cap. \u00b7 BaFin expects bank AI documentation in German exam language \u2014 receipt metadata supports localization.", "chain_integrity": { "depth": 6, "invariant_holds": true } } EXHIBIT D — DATA INPUTS & VALIDATION { "data_validation_method": "Cryptographic receipt per AI decision; public verify without trusting deployer, vendor, or Velaru operator", "bias_testing_proxy": "Asymmetry score from live chain signals", "model_change_control": "Policy lock registry \u2014 criteria hash frozen pre-dispute", "logging_retention": "90-day pre-dispute window minimum; permanent verify permalinks", "external_validator": "Nisaba LLC / Velaru", "validator_independence": "Client-side Ed25519 verify; BYOK tri-receipt optional", "headline_stat": "Private Equity Portfolio AI \u2014 AI decision audit trail required for liability defense", "global_leaders_addressed": [ "Sector regulators", "Vertical SaaS platforms", "BaFin", "Volkswagen", "SAP", "Siemens" ] } MIRROR TRAP (regulatory insight) Niche Private Equity Portfolio AI deployer owns AI harm — vertical SaaS vendor owns liability cap. · BaFin expects bank AI documentation in German exam language — receipt metadata supports localization. NERVE CARDS — WHY GLOBAL LEADERS CARE [ { "title": "Niche litigation", "body": "Private Equity Portfolio AI plaintiffs challenge AI decision without independent verify.", "source": "vertical" }, { "title": "Insurance bind", "body": "Sector insurers asking AI governance questions on Private Equity Portfolio AI accounts.", "source": "vertical" }, { "title": "[Germany] Automotive", "body": "German OEM AV and industrial AI \u2014 strict liability culture demands proof.", "source": "jurisdiction" }, { "title": "[Germany] Works council", "body": "Betriebsrat co-determination on workplace AI \u2014 receipt proves consultation occurred.", "source": "jurisdiction" }, { "title": "[Text / Chat] Modality hook", "body": "Baseline \u2014 all frameworks apply to text decisions.", "source": "modality" } ] BOOK SUMMARY: { "total_insureds": 0, "compliant": 0, "grace_period": 0, "non_compliant": 0, "expired": 0, "not_enrolled": 0, "compliant_pct": 0.0 } TAM / EXPOSURE: Global Private Equity Portfolio AI market INSURANCE LINES: E&O, Cyber, Sector liability DISCLAIMER: External validation evidence pack — not legal advice, not filed rate approval.