VELARU MANDATE EXHIBIT PACK — HEALTHCARE AI / MEDICAL MALPRACTICE Jurisdiction: Germany (de) Modality: Text / Chat Program: Velaru Healthcare AI / Medical Malpractice · Germany (galactic_healthcare_de) Product ID: healthcare:de:bundle:text Vertical: healthcare Generated: 2026-08-19T00:26:32.412636Z Authority: Germany BaFin AI Pack — Clinical AI SaMD + Med Mal Evidence Pack Deadline: EU AI Act + BaFin AI supervisory expectations Velaru verify: https://velaru.xyz/verify EXHIBIT A — AI INVENTORY [ { "named_entity": "Velari", "slug": "velari", "ai_use_case": "AI-assisted Healthcare AI / Medical Malpractice decisions", "vertical": "healthcare", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/4c58eac890bfd031ce2189de5a1ca9ea292a0c837f5f535daf164aef34f31e53", "compliance_state": "grace_period", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/d8fb129c0c0c78d05256/export.txt", "diligence_url": "https://velaru.xyz/diligence/velari" }, { "named_entity": "LinkAudit Test", "slug": "linkaudit-test", "ai_use_case": "AI-assisted Healthcare AI / Medical Malpractice decisions", "vertical": "healthcare", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/58ddedd1974156453bc55daef6a9857d8570d56388becbb2a80bf5bac76b771b", "compliance_state": "grace_period", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/78aa6e3f3a84cf1a88c0/export.txt", "diligence_url": "https://velaru.xyz/diligence/linkaudit-test" }, { "named_entity": "Link Audit Co", "slug": "link-audit-co", "ai_use_case": "AI-assisted Healthcare AI / Medical Malpractice decisions", "vertical": "healthcare", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/d00533b7b6c0495802b4250abd5c29f60bd9f2ad3fb141bba2d9a5afee5f5542", "compliance_state": "grace_period", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/fea572f3996c4b963779/export.txt", "diligence_url": "https://velaru.xyz/diligence/link-audit-co" } ] EXHIBIT B — GOVERNANCE FRAMEWORK { "framework": "Velaru Mandate Registry \u2014 Healthcare AI / Medical Malpractice", "exhibit_authority": "Germany BaFin AI Pack \u2014 Clinical AI SaMD + Med Mal Evidence Pack", "regulatory_frameworks": [ "HIPAA", "FDA SaMD guidance", "EU AI Act Annex III", "EU AI Act", "BaFin AI guidance", "GDPR", "German AI Strategy" ], "standards_alignment": [ "POSS-2", "DRP-1", "TCB", "FRE 707 pre-compliance", "ISO 42001" ], "human_oversight": "credential AI clinical tool", "third_party_verification": "https://velaru.xyz/verify (operator-independent)", "data_lineage": "Hash-chained Ed25519 receipts; optional RFC3161 + external anchor", "mirror_trap": "Insurers underwriting health AI exclusions while using AI in claims \u2014 same governance gap NAIC flags for carriers. \u00b7 BaFin expects bank AI documentation in German exam language \u2014 receipt metadata supports localization.", "chain_integrity": { "depth": 495, "invariant_holds": true } } EXHIBIT D — DATA INPUTS & VALIDATION { "data_validation_method": "Cryptographic receipt per AI decision; public verify without trusting deployer, vendor, or Velaru operator", "bias_testing_proxy": "Asymmetry score from live chain signals", "model_change_control": "Policy lock registry \u2014 criteria hash frozen pre-dispute", "logging_retention": "90-day pre-dispute window minimum; permanent verify permalinks", "external_validator": "Nisaba LLC / Velaru", "validator_independence": "Client-side Ed25519 verify; BYOK tri-receipt optional", "headline_stat": "Deployer owns AI failure \u2014 vendor caps liability; hospital pays claim then subrogates nothing", "global_leaders_addressed": [ "FDA", "Joint Commission", "Gallagher Re", "Epic", "UnitedHealth", "BaFin", "Volkswagen", "SAP" ] } MIRROR TRAP (regulatory insight) Insurers underwriting health AI exclusions while using AI in claims — same governance gap NAIC flags for carriers. · BaFin expects bank AI documentation in German exam language — receipt metadata supports localization. NERVE CARDS — WHY GLOBAL LEADERS CARE [ { "title": "Coverage denial litigation", "body": "Algorithms denying care are in discovery now \u2014 reconstructability beats internal EHR logs.", "source": "vertical" }, { "title": "PCCP gap", "body": "FDA change control plans don't cover vendor foundation model updates \u2014 undocumented drift = liability.", "source": "vertical" }, { "title": "Board accountability", "body": "Public health systems: AI governance is SEC-disclosable material risk in 2026.", "source": "vertical" }, { "title": "[Germany] Automotive", "body": "German OEM AV and industrial AI \u2014 strict liability culture demands proof.", "source": "jurisdiction" }, { "title": "[Germany] Works council", "body": "Betriebsrat co-determination on workplace AI \u2014 receipt proves consultation occurred.", "source": "jurisdiction" }, { "title": "[Text / Chat] Modality hook", "body": "Baseline \u2014 all frameworks apply to text decisions.", "source": "modality" } ] BOOK SUMMARY: { "total_insureds": 3, "compliant": 0, "grace_period": 3, "non_compliant": 0, "expired": 0, "not_enrolled": 0, "compliant_pct": 0.0 } TAM / EXPOSURE: $4B+ US med mal · coverage-denial AI in active litigation INSURANCE LINES: Med mal, Hospital liability, Health cyber DISCLAIMER: External validation evidence pack — not legal advice, not filed rate approval.