VELARU MANDATE EXHIBIT PACK — DEFENSE PROCUREMENT / CMMC
Jurisdiction: Switzerland (ch)
Modality: Text / Chat
Program: Velaru Defense Procurement / CMMC · Switzerland (galactic_defense_procurement_ch)
Product ID: defense_procurement:ch:bundle:text
Vertical: defense_procurement
Generated: 2026-08-22T09:55:30.146136Z
Authority: Switzerland FINMA AI Pack — CMMC AI Supply Chain Pack
Deadline: CMMC 2.0 + FAR AI clause rollout
Velaru verify: https://velaru.xyz/verify

EXHIBIT A — AI INVENTORY
[
  {
    "named_entity": "Velari",
    "slug": "velari",
    "ai_use_case": "AI-assisted Defense Procurement / CMMC decisions",
    "vertical": "defense_procurement",
    "risk_tier": "elevated",
    "external_validation": "Velaru independent receipt verification",
    "handler_receipt_lock": "https://velaru.onrender.com/r/4c58eac890bfd031ce2189de5a1ca9ea292a0c837f5f535daf164aef34f31e53",
    "compliance_state": "grace_period",
    "asymmetry_grade": "A",
    "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/d8fb129c0c0c78d05256/export.txt",
    "diligence_url": "https://velaru.xyz/diligence/velari"
  },
  {
    "named_entity": "LinkAudit Test",
    "slug": "linkaudit-test",
    "ai_use_case": "AI-assisted Defense Procurement / CMMC decisions",
    "vertical": "defense_procurement",
    "risk_tier": "elevated",
    "external_validation": "Velaru independent receipt verification",
    "handler_receipt_lock": "https://velaru.onrender.com/r/58ddedd1974156453bc55daef6a9857d8570d56388becbb2a80bf5bac76b771b",
    "compliance_state": "grace_period",
    "asymmetry_grade": "A",
    "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/78aa6e3f3a84cf1a88c0/export.txt",
    "diligence_url": "https://velaru.xyz/diligence/linkaudit-test"
  },
  {
    "named_entity": "Link Audit Co",
    "slug": "link-audit-co",
    "ai_use_case": "AI-assisted Defense Procurement / CMMC decisions",
    "vertical": "defense_procurement",
    "risk_tier": "elevated",
    "external_validation": "Velaru independent receipt verification",
    "handler_receipt_lock": "https://velaru.onrender.com/r/d00533b7b6c0495802b4250abd5c29f60bd9f2ad3fb141bba2d9a5afee5f5542",
    "compliance_state": "grace_period",
    "asymmetry_grade": "A",
    "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/fea572f3996c4b963779/export.txt",
    "diligence_url": "https://velaru.xyz/diligence/link-audit-co"
  }
]

EXHIBIT B — GOVERNANCE FRAMEWORK
{
  "framework": "Velaru Mandate Registry \u2014 Defense Procurement / CMMC",
  "exhibit_authority": "Switzerland FINMA AI Pack \u2014 CMMC AI Supply Chain Pack",
  "regulatory_frameworks": [
    "CMMC",
    "FISMA",
    "FAR 52.204-21",
    "ITAR",
    "Revised FADP",
    "FINMA AI guidance",
    "Swiss AI policy"
  ],
  "standards_alignment": [
    "POSS-2",
    "DRP-1",
    "TCB",
    "FRE 707 pre-compliance",
    "ISO 42001"
  ],
  "human_oversight": "process CUI with AI",
  "third_party_verification": "https://velaru.xyz/verify (operator-independent)",
  "data_lineage": "Hash-chained Ed25519 receipts; optional RFC3161 + external anchor",
  "mirror_trap": "Subcontractor uses AI on CUI \u2014 prime owns CMMC finding, sub owns contract termination. \u00b7 Swiss reinsurance hub \u2014 Munich Re, Swiss Re need asymmetry data with Swiss privacy compliance.",
  "chain_integrity": {
    "depth": 468,
    "invariant_holds": true
  }
}

EXHIBIT D — DATA INPUTS & VALIDATION
{
  "data_validation_method": "Cryptographic receipt per AI decision; public verify without trusting deployer, vendor, or Velaru operator",
  "bias_testing_proxy": "Asymmetry score from live chain signals",
  "model_change_control": "Policy lock registry \u2014 criteria hash frozen pre-dispute",
  "logging_retention": "90-day pre-dispute window minimum; permanent verify permalinks",
  "external_validator": "Nisaba LLC / Velaru",
  "validator_independence": "Client-side Ed25519 verify; BYOK tri-receipt optional",
  "headline_stat": "CMMC Level 2 required for CUI \u2014 AI processing CUI without audit = certification loss",
  "global_leaders_addressed": [
    "DoD",
    "Lockheed",
    "Raytheon",
    "CMMC AB",
    "NIST",
    "FINMA",
    "Swiss Re",
    "Munich Re"
  ]
}

MIRROR TRAP (regulatory insight)
Subcontractor uses AI on CUI — prime owns CMMC finding, sub owns contract termination. · Swiss reinsurance hub — Munich Re, Swiss Re need asymmetry data with Swiss privacy compliance.

NERVE CARDS — WHY GLOBAL LEADERS CARE
[
  {
    "title": "FAR 52.204-21",
    "body": "Basic safeguarding \u2014 AI agent on CUI network triggers enhanced controls.",
    "source": "vertical"
  },
  {
    "title": "Supply chain",
    "body": "AI vendor on CMMC boundary \u2014 flow-down requirements to receipt layer.",
    "source": "vertical"
  },
  {
    "title": "False Claims Act",
    "body": "Certifying CMMC compliance without AI controls = treble damages.",
    "source": "vertical"
  },
  {
    "title": "[Switzerland] Reinsurance capital",
    "body": "Geneva/Zurich reinsurers price AI risk \u2014 actuarial feed jurisdiction-scoped.",
    "source": "jurisdiction"
  },
  {
    "title": "[Switzerland] Banking secrecy",
    "body": "Swiss bank AI \u2014 FINMA documentation expectations exceed EU for trading AI.",
    "source": "jurisdiction"
  },
  {
    "title": "[Text / Chat] Modality hook",
    "body": "Baseline \u2014 all frameworks apply to text decisions.",
    "source": "modality"
  }
]

BOOK SUMMARY: {
  "total_insureds": 3,
  "compliant": 0,
  "grace_period": 3,
  "non_compliant": 0,
  "expired": 0,
  "not_enrolled": 0,
  "compliant_pct": 0.0
}

TAM / EXPOSURE: 300K+ defense industrial base companies
INSURANCE LINES: Defense E&O, Cyber, Fidelity

DISCLAIMER: External validation evidence pack — not legal advice, not filed rate approval.