VELARU MANDATE EXHIBIT PACK — PRIVATE EQUITY PORTFOLIO AI Jurisdiction: Colorado (us_co) Modality: Text / Chat Program: Velaru Private Equity Portfolio AI · Colorado (galactic_private_equity_portfolio_us_co) Product ID: private_equity_portfolio:us_co:bundle:text Vertical: private_equity_portfolio Generated: 2026-08-25T21:52:39.335581Z Authority: Colorado AI Act Pack — Private Equity Portfolio AI External Validation Pack Deadline: Colorado AI Act high-risk deployment Velaru verify: https://velaru-erra.onrender.com/verify EXHIBIT A — AI INVENTORY [] EXHIBIT B — GOVERNANCE FRAMEWORK { "framework": "Velaru Mandate Registry \u2014 Private Equity Portfolio AI", "exhibit_authority": "Colorado AI Act Pack \u2014 Private Equity Portfolio AI External Validation Pack", "regulatory_frameworks": [ "SEC Reg BI", "Investment Advisers Act", "FINRA Rule 3110", "Colorado AI Act SB 24-205", "Algorithmic accountability" ], "standards_alignment": [ "POSS-2", "DRP-1", "TCB", "FRE 707 pre-compliance", "ISO 42001" ], "human_oversight": "execute Private Equity Portfolio AI AI decision", "third_party_verification": "https://velaru-erra.onrender.com/verify (operator-independent)", "data_lineage": "Hash-chained Ed25519 receipts; optional RFC3161 + external anchor", "mirror_trap": "Niche Private Equity Portfolio AI deployer owns AI harm \u2014 vertical SaaS vendor owns liability cap. \u00b7 First comprehensive US state AI law \u2014 impact assessments require documentation Velaru generates.", "chain_integrity": { "depth": 6, "invariant_holds": true } } EXHIBIT D — DATA INPUTS & VALIDATION { "data_validation_method": "Cryptographic receipt per AI decision; public verify without trusting deployer, vendor, or Velaru operator", "bias_testing_proxy": "Asymmetry score from live chain signals", "model_change_control": "Policy lock registry \u2014 criteria hash frozen pre-dispute", "logging_retention": "90-day pre-dispute window minimum; permanent verify permalinks", "external_validator": "Nisaba LLC / Velaru", "validator_independence": "Client-side Ed25519 verify; BYOK tri-receipt optional", "headline_stat": "Private Equity Portfolio AI \u2014 AI decision audit trail required for liability defense", "global_leaders_addressed": [ "Sector regulators", "Vertical SaaS platforms", "CO AG", "Counterpart", "Colorado Division of Insurance" ] } MIRROR TRAP (regulatory insight) Niche Private Equity Portfolio AI deployer owns AI harm — vertical SaaS vendor owns liability cap. · First comprehensive US state AI law — impact assessments require documentation Velaru generates. NERVE CARDS — WHY GLOBAL LEADERS CARE [ { "title": "Niche litigation", "body": "Private Equity Portfolio AI plaintiffs challenge AI decision without independent verify.", "source": "vertical" }, { "title": "Insurance bind", "body": "Sector insurers asking AI governance questions on Private Equity Portfolio AI accounts.", "source": "vertical" }, { "title": "[Colorado] Developer vs deployer", "body": "Colorado splits obligations \u2014 receipt chain clarifies who documented what when.", "source": "jurisdiction" }, { "title": "[Colorado] Insurance nexus", "body": "Colorado insurers using AI in underwriting must comply while selling AI EPL.", "source": "jurisdiction" }, { "title": "[Text / Chat] Modality hook", "body": "Baseline \u2014 all frameworks apply to text decisions.", "source": "modality" } ] BOOK SUMMARY: { "total_insureds": 0, "compliant": 0, "grace_period": 0, "non_compliant": 0, "expired": 0, "not_enrolled": 0, "compliant_pct": 0.0 } TAM / EXPOSURE: Global Private Equity Portfolio AI market INSURANCE LINES: E&O, Cyber, Sector liability DISCLAIMER: External validation evidence pack — not legal advice, not filed rate approval.