VELARU MANDATE EXHIBIT PACK — HEALTHCARE AI / MEDICAL MALPRACTICE Jurisdiction: Canada (ca) Modality: Text / Chat Program: Velaru Healthcare AI / Medical Malpractice · Canada (galactic_healthcare_ca) Product ID: healthcare:ca:bundle:text Vertical: healthcare Generated: 2026-08-19T02:03:40.629828Z Authority: Canada OSFI E-23 Pack — Clinical AI SaMD + Med Mal Evidence Pack Deadline: AIDA (pending) + OSFI E-23 model risk Velaru verify: https://velaru.xyz/verify EXHIBIT A — AI INVENTORY [ { "named_entity": "Velari", "slug": "velari", "ai_use_case": "AI-assisted Healthcare AI / Medical Malpractice decisions", "vertical": "healthcare", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/4c58eac890bfd031ce2189de5a1ca9ea292a0c837f5f535daf164aef34f31e53", "compliance_state": "grace_period", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/d8fb129c0c0c78d05256/export.txt", "diligence_url": "https://velaru.xyz/diligence/velari" }, { "named_entity": "LinkAudit Test", "slug": "linkaudit-test", "ai_use_case": "AI-assisted Healthcare AI / Medical Malpractice decisions", "vertical": "healthcare", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/58ddedd1974156453bc55daef6a9857d8570d56388becbb2a80bf5bac76b771b", "compliance_state": "grace_period", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/78aa6e3f3a84cf1a88c0/export.txt", "diligence_url": "https://velaru.xyz/diligence/linkaudit-test" }, { "named_entity": "Link Audit Co", "slug": "link-audit-co", "ai_use_case": "AI-assisted Healthcare AI / Medical Malpractice decisions", "vertical": "healthcare", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/d00533b7b6c0495802b4250abd5c29f60bd9f2ad3fb141bba2d9a5afee5f5542", "compliance_state": "grace_period", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/fea572f3996c4b963779/export.txt", "diligence_url": "https://velaru.xyz/diligence/link-audit-co" } ] EXHIBIT B — GOVERNANCE FRAMEWORK { "framework": "Velaru Mandate Registry \u2014 Healthcare AI / Medical Malpractice", "exhibit_authority": "Canada OSFI E-23 Pack \u2014 Clinical AI SaMD + Med Mal Evidence Pack", "regulatory_frameworks": [ "HIPAA", "FDA SaMD guidance", "EU AI Act Annex III", "AIDA proposal", "OSFI E-23", "PIPEDA", "Quebec Law 25" ], "standards_alignment": [ "POSS-2", "DRP-1", "TCB", "FRE 707 pre-compliance", "ISO 42001" ], "human_oversight": "credential AI clinical tool", "third_party_verification": "https://velaru.xyz/verify (operator-independent)", "data_lineage": "Hash-chained Ed25519 receipts; optional RFC3161 + external anchor", "mirror_trap": "Insurers underwriting health AI exclusions while using AI in claims \u2014 same governance gap NAIC flags for carriers. \u00b7 Quebec Law 25 already strict on automated decisions \u2014 ROC catching up with AIDA.", "chain_integrity": { "depth": 500, "invariant_holds": true } } EXHIBIT D — DATA INPUTS & VALIDATION { "data_validation_method": "Cryptographic receipt per AI decision; public verify without trusting deployer, vendor, or Velaru operator", "bias_testing_proxy": "Asymmetry score from live chain signals", "model_change_control": "Policy lock registry \u2014 criteria hash frozen pre-dispute", "logging_retention": "90-day pre-dispute window minimum; permanent verify permalinks", "external_validator": "Nisaba LLC / Velaru", "validator_independence": "Client-side Ed25519 verify; BYOK tri-receipt optional", "headline_stat": "Deployer owns AI failure \u2014 vendor caps liability; hospital pays claim then subrogates nothing", "global_leaders_addressed": [ "FDA", "Joint Commission", "Gallagher Re", "Epic", "UnitedHealth", "OSFI", "RBC", "OPC" ] } MIRROR TRAP (regulatory insight) Insurers underwriting health AI exclusions while using AI in claims — same governance gap NAIC flags for carriers. · Quebec Law 25 already strict on automated decisions — ROC catching up with AIDA. NERVE CARDS — WHY GLOBAL LEADERS CARE [ { "title": "Coverage denial litigation", "body": "Algorithms denying care are in discovery now \u2014 reconstructability beats internal EHR logs.", "source": "vertical" }, { "title": "PCCP gap", "body": "FDA change control plans don't cover vendor foundation model updates \u2014 undocumented drift = liability.", "source": "vertical" }, { "title": "Board accountability", "body": "Public health systems: AI governance is SEC-disclosable material risk in 2026.", "source": "vertical" }, { "title": "[Canada] OSFI banks", "body": "Canadian bank AI \u2014 E-23 model risk parallels SR 11-7.", "source": "jurisdiction" }, { "title": "[Canada] Bill C-27", "body": "AIDA when passed \u2014 early receipt infrastructure = compliance head start.", "source": "jurisdiction" }, { "title": "[Text / Chat] Modality hook", "body": "Baseline \u2014 all frameworks apply to text decisions.", "source": "modality" } ] BOOK SUMMARY: { "total_insureds": 3, "compliant": 0, "grace_period": 3, "non_compliant": 0, "expired": 0, "not_enrolled": 0, "compliant_pct": 0.0 } TAM / EXPOSURE: $4B+ US med mal · coverage-denial AI in active litigation INSURANCE LINES: Med mal, Hospital liability, Health cyber DISCLAIMER: External validation evidence pack — not legal advice, not filed rate approval.