VELARU MANDATE EXHIBIT PACK — GXP / FDA 21 CFR PART 11 PHARMA
Jurisdiction: European Union (eu)
Modality: Text / Chat
Program: Velaru GxP / FDA 21 CFR Part 11 Pharma · European Union (galactic_gxp_eu)
Product ID: gxp:eu:bundle:text
Vertical: gxp
Generated: 2026-08-22T18:15:35.005972Z
Authority: EU AI Act Conformity Pack — GxP Electronic Records Integrity Pack
Deadline: FDA Part 11 + EU GMP Annex 11
Velaru verify: https://velaru.xyz/verify

EXHIBIT A — AI INVENTORY
[
  {
    "named_entity": "Velari",
    "slug": "velari",
    "ai_use_case": "AI-assisted GxP / FDA 21 CFR Part 11 Pharma decisions",
    "vertical": "gxp",
    "risk_tier": "elevated",
    "external_validation": "Velaru independent receipt verification",
    "handler_receipt_lock": "https://velaru.onrender.com/r/4c58eac890bfd031ce2189de5a1ca9ea292a0c837f5f535daf164aef34f31e53",
    "compliance_state": "non_compliant",
    "asymmetry_grade": "A",
    "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/d8fb129c0c0c78d05256/export.txt",
    "diligence_url": "https://velaru.xyz/diligence/velari"
  },
  {
    "named_entity": "LinkAudit Test",
    "slug": "linkaudit-test",
    "ai_use_case": "AI-assisted GxP / FDA 21 CFR Part 11 Pharma decisions",
    "vertical": "gxp",
    "risk_tier": "elevated",
    "external_validation": "Velaru independent receipt verification",
    "handler_receipt_lock": "https://velaru.onrender.com/r/58ddedd1974156453bc55daef6a9857d8570d56388becbb2a80bf5bac76b771b",
    "compliance_state": "non_compliant",
    "asymmetry_grade": "A",
    "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/78aa6e3f3a84cf1a88c0/export.txt",
    "diligence_url": "https://velaru.xyz/diligence/linkaudit-test"
  },
  {
    "named_entity": "Link Audit Co",
    "slug": "link-audit-co",
    "ai_use_case": "AI-assisted GxP / FDA 21 CFR Part 11 Pharma decisions",
    "vertical": "gxp",
    "risk_tier": "elevated",
    "external_validation": "Velaru independent receipt verification",
    "handler_receipt_lock": "https://velaru.onrender.com/r/d00533b7b6c0495802b4250abd5c29f60bd9f2ad3fb141bba2d9a5afee5f5542",
    "compliance_state": "non_compliant",
    "asymmetry_grade": "A",
    "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/fea572f3996c4b963779/export.txt",
    "diligence_url": "https://velaru.xyz/diligence/link-audit-co"
  }
]

EXHIBIT B — GOVERNANCE FRAMEWORK
{
  "framework": "Velaru Mandate Registry \u2014 GxP / FDA 21 CFR Part 11 Pharma",
  "exhibit_authority": "EU AI Act Conformity Pack \u2014 GxP Electronic Records Integrity Pack",
  "regulatory_frameworks": [
    "FDA 21 CFR Part 11",
    "FDA 21 CFR Part 211 GMP",
    "ICH E6 GCP",
    "ICH Q10 Pharmaceutical Quality System",
    "EU GMP Annex 11",
    "WHO GMP guidelines",
    "FDA 483 observation risk",
    "EU AI Act 2024/1689",
    "GDPR Art 22",
    "Product Liability Directive"
  ],
  "standards_alignment": [
    "POSS-2",
    "DRP-1",
    "TCB",
    "FRE 707 pre-compliance",
    "ISO 42001"
  ],
  "human_oversight": "release manufacturing batch",
  "third_party_verification": "https://velaru.xyz/verify (operator-independent)",
  "data_lineage": "Hash-chained Ed25519 receipts; optional RFC3161 + external anchor",
  "mirror_trap": "QA releases batch on AI recommendation without hash-chained record \u2014 batch recall insurance void. \u00b7 Annex III high-risk list covers 8 domains \u2014 one vertical per domain minimum for compliance.",
  "chain_integrity": {
    "depth": 493,
    "invariant_holds": true
  }
}

EXHIBIT D — DATA INPUTS & VALIDATION
{
  "data_validation_method": "Cryptographic receipt per AI decision; public verify without trusting deployer, vendor, or Velaru operator",
  "bias_testing_proxy": "Asymmetry score from live chain signals",
  "model_change_control": "Policy lock registry \u2014 criteria hash frozen pre-dispute",
  "logging_retention": "90-day pre-dispute window minimum; permanent verify permalinks",
  "external_validator": "Nisaba LLC / Velaru",
  "validator_independence": "Client-side Ed25519 verify; BYOK tri-receipt optional",
  "headline_stat": "Delete audit trail before inspection = automatic consent decree pattern",
  "global_leaders_addressed": [
    "FDA",
    "Merck",
    "Lonza",
    "Waters Corporation",
    "ISPE",
    "EU AI Office",
    "EDPB",
    "European Parliament"
  ]
}

MIRROR TRAP (regulatory insight)
QA releases batch on AI recommendation without hash-chained record — batch recall insurance void. · Annex III high-risk list covers 8 domains — one vertical per domain minimum for compliance.

NERVE CARDS — WHY GLOBAL LEADERS CARE
[
  {
    "title": "Deviation reports",
    "body": "AI flags GMP deviation \u2014 without receipt, QA cannot prove when they knew.",
    "source": "vertical"
  },
  {
    "title": "Annex 11 EU",
    "body": "European GMP requires same integrity \u2014 global pharma needs one primitive.",
    "source": "vertical"
  },
  {
    "title": "Recall insurance",
    "body": "Insurers deny recall claims when electronic records integrity violated.",
    "source": "vertical"
  },
  {
    "title": "[European Union] FRIA requirement",
    "body": "Fundamental rights impact assessment for public/high-risk \u2014 exhibit pack maps to FRIA.",
    "source": "jurisdiction"
  },
  {
    "title": "[European Union] PLD strict liability",
    "body": "Dec 2026 product liability directive \u2014 software and AI explicitly included.",
    "source": "jurisdiction"
  },
  {
    "title": "[Text / Chat] Modality hook",
    "body": "Baseline \u2014 all frameworks apply to text decisions.",
    "source": "modality"
  }
]

BOOK SUMMARY: {
  "total_insureds": 3,
  "compliant": 0,
  "grace_period": 0,
  "non_compliant": 3,
  "expired": 0,
  "not_enrolled": 0,
  "compliant_pct": 0.0
}

TAM / EXPOSURE: Every GMP facility globally · Part 11 is law today
INSURANCE LINES: Product recall, Pharma E&O

DISCLAIMER: External validation evidence pack — not legal advice, not filed rate approval.