VELARU MANDATE EXHIBIT PACK — ACCOUNTING / PCAOB / CPA Jurisdiction: Colorado (us_co) Modality: Text / Chat Program: Velaru Accounting / PCAOB / CPA · Colorado (galactic_accounting_us_co) Product ID: accounting:us_co:bundle:text Vertical: accounting Generated: 2026-08-22T02:59:49.614877Z Authority: Colorado AI Act Pack — Audit Workpaper AI Integrity Pack Deadline: Colorado AI Act high-risk deployment Velaru verify: https://velaru.xyz/verify EXHIBIT A — AI INVENTORY [ { "named_entity": "Velari", "slug": "velari", "ai_use_case": "AI-assisted Accounting / PCAOB / CPA decisions", "vertical": "accounting", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/4c58eac890bfd031ce2189de5a1ca9ea292a0c837f5f535daf164aef34f31e53", "compliance_state": "grace_period", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/d8fb129c0c0c78d05256/export.txt", "diligence_url": "https://velaru.xyz/diligence/velari" }, { "named_entity": "LinkAudit Test", "slug": "linkaudit-test", "ai_use_case": "AI-assisted Accounting / PCAOB / CPA decisions", "vertical": "accounting", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/58ddedd1974156453bc55daef6a9857d8570d56388becbb2a80bf5bac76b771b", "compliance_state": "grace_period", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/78aa6e3f3a84cf1a88c0/export.txt", "diligence_url": "https://velaru.xyz/diligence/linkaudit-test" }, { "named_entity": "Link Audit Co", "slug": "link-audit-co", "ai_use_case": "AI-assisted Accounting / PCAOB / CPA decisions", "vertical": "accounting", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/d00533b7b6c0495802b4250abd5c29f60bd9f2ad3fb141bba2d9a5afee5f5542", "compliance_state": "grace_period", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/fea572f3996c4b963779/export.txt", "diligence_url": "https://velaru.xyz/diligence/link-audit-co" } ] EXHIBIT B — GOVERNANCE FRAMEWORK { "framework": "Velaru Mandate Registry \u2014 Accounting / PCAOB / CPA", "exhibit_authority": "Colorado AI Act Pack \u2014 Audit Workpaper AI Integrity Pack", "regulatory_frameworks": [ "PCAOB AS 1215", "AICPA ET Section 1.300", "IRS Circular 230", "Colorado AI Act SB 24-205", "Algorithmic accountability" ], "standards_alignment": [ "POSS-2", "DRP-1", "TCB", "FRE 707 pre-compliance", "ISO 42001" ], "human_oversight": "issue audit opinion", "third_party_verification": "https://velaru.xyz/verify (operator-independent)", "data_lineage": "Hash-chained Ed25519 receipts; optional RFC3161 + external anchor", "mirror_trap": "CPA firm uses AI for substantive testing \u2014 firm owns malpractice, AI vendor owns beta disclaimer. \u00b7 First comprehensive US state AI law \u2014 impact assessments require documentation Velaru generates.", "chain_integrity": { "depth": 436, "invariant_holds": true } } EXHIBIT D — DATA INPUTS & VALIDATION { "data_validation_method": "Cryptographic receipt per AI decision; public verify without trusting deployer, vendor, or Velaru operator", "bias_testing_proxy": "Asymmetry score from live chain signals", "model_change_control": "Policy lock registry \u2014 criteria hash frozen pre-dispute", "logging_retention": "90-day pre-dispute window minimum; permanent verify permalinks", "external_validator": "Nisaba LLC / Velaru", "validator_independence": "Client-side Ed25519 verify; BYOK tri-receipt optional", "headline_stat": "AS 1215 requires sufficient audit evidence \u2014 AI-generated workpaper without receipt insufficient", "global_leaders_addressed": [ "PCAOB", "Deloitte", "KPMG", "AICPA", "IRS", "CO AG", "Counterpart", "Colorado Division of Insurance" ] } MIRROR TRAP (regulatory insight) CPA firm uses AI for substantive testing — firm owns malpractice, AI vendor owns beta disclaimer. · First comprehensive US state AI law — impact assessments require documentation Velaru generates. NERVE CARDS — WHY GLOBAL LEADERS CARE [ { "title": "Circular 230", "body": "Tax AI advice \u2014 IRS preparer penalty on firm, not vendor.", "source": "vertical" }, { "title": "Workpaper integrity", "body": "Hash-chained receipt satisfies AS 1215 documentation requirements.", "source": "vertical" }, { "title": "Malpractice insurers", "body": "CPAs adding AI exclusions \u2014 proof infrastructure unlocks coverage.", "source": "vertical" }, { "title": "[Colorado] Developer vs deployer", "body": "Colorado splits obligations \u2014 receipt chain clarifies who documented what when.", "source": "jurisdiction" }, { "title": "[Colorado] Insurance nexus", "body": "Colorado insurers using AI in underwriting must comply while selling AI EPL.", "source": "jurisdiction" }, { "title": "[Text / Chat] Modality hook", "body": "Baseline \u2014 all frameworks apply to text decisions.", "source": "modality" } ] BOOK SUMMARY: { "total_insureds": 3, "compliant": 0, "grace_period": 3, "non_compliant": 0, "expired": 0, "not_enrolled": 0, "compliant_pct": 0.0 } TAM / EXPOSURE: CPA firms · AI in audit exploding INSURANCE LINES: Accountant malpractice, E&O DISCLAIMER: External validation evidence pack — not legal advice, not filed rate approval.