VELARU MANDATE EXHIBIT PACK — INVESTMENT ADVISORY / WEALTH MANAGEMENT Jurisdiction: Colorado (us_co) Modality: Text / Chat Program: Velaru Investment Advisory / Wealth Management · Colorado (galactic_investment_advisory_us_co) Product ID: investment_advisory:us_co:bundle:text Vertical: investment_advisory Generated: 2026-08-22T04:45:24.413054Z Authority: Colorado AI Act Pack — Reg BI Best Interest AI Pack Deadline: Colorado AI Act high-risk deployment Velaru verify: https://velaru.xyz/verify EXHIBIT A — AI INVENTORY [ { "named_entity": "Velari", "slug": "velari", "ai_use_case": "AI-assisted Investment Advisory / Wealth Management decisions", "vertical": "investment_advisory", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/4c58eac890bfd031ce2189de5a1ca9ea292a0c837f5f535daf164aef34f31e53", "compliance_state": "grace_period", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/d8fb129c0c0c78d05256/export.txt", "diligence_url": "https://velaru.xyz/diligence/velari" }, { "named_entity": "LinkAudit Test", "slug": "linkaudit-test", "ai_use_case": "AI-assisted Investment Advisory / Wealth Management decisions", "vertical": "investment_advisory", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/58ddedd1974156453bc55daef6a9857d8570d56388becbb2a80bf5bac76b771b", "compliance_state": "grace_period", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/78aa6e3f3a84cf1a88c0/export.txt", "diligence_url": "https://velaru.xyz/diligence/linkaudit-test" }, { "named_entity": "Link Audit Co", "slug": "link-audit-co", "ai_use_case": "AI-assisted Investment Advisory / Wealth Management decisions", "vertical": "investment_advisory", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/d00533b7b6c0495802b4250abd5c29f60bd9f2ad3fb141bba2d9a5afee5f5542", "compliance_state": "grace_period", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/fea572f3996c4b963779/export.txt", "diligence_url": "https://velaru.xyz/diligence/link-audit-co" } ] EXHIBIT B — GOVERNANCE FRAMEWORK { "framework": "Velaru Mandate Registry \u2014 Investment Advisory / Wealth Management", "exhibit_authority": "Colorado AI Act Pack \u2014 Reg BI Best Interest AI Pack", "regulatory_frameworks": [ "SEC Reg BI", "Investment Advisers Act", "FINRA Rule 3110", "Colorado AI Act SB 24-205", "Algorithmic accountability" ], "standards_alignment": [ "POSS-2", "DRP-1", "TCB", "FRE 707 pre-compliance", "ISO 42001" ], "human_oversight": "recommend investment", "third_party_verification": "https://velaru.xyz/verify (operator-independent)", "data_lineage": "Hash-chained Ed25519 receipts; optional RFC3161 + external anchor", "mirror_trap": "Robo-advisor updates model \u2014 firm owns Reg BI violation for all clients, vendor owns model update changelog. \u00b7 First comprehensive US state AI law \u2014 impact assessments require documentation Velaru generates.", "chain_integrity": { "depth": 443, "invariant_holds": true } } EXHIBIT D — DATA INPUTS & VALIDATION { "data_validation_method": "Cryptographic receipt per AI decision; public verify without trusting deployer, vendor, or Velaru operator", "bias_testing_proxy": "Asymmetry score from live chain signals", "model_change_control": "Policy lock registry \u2014 criteria hash frozen pre-dispute", "logging_retention": "90-day pre-dispute window minimum; permanent verify permalinks", "external_validator": "Nisaba LLC / Velaru", "validator_independence": "Client-side Ed25519 verify; BYOK tri-receipt optional", "headline_stat": "Reg BI: AI recommendation must document best interest analysis \u2014 receipt or enforcement", "global_leaders_addressed": [ "SEC", "FINRA", "Betterment", "Wealthfront", "BlackRock", "CO AG", "Counterpart", "Colorado Division of Insurance" ] } MIRROR TRAP (regulatory insight) Robo-advisor updates model — firm owns Reg BI violation for all clients, vendor owns model update changelog. · First comprehensive US state AI law — impact assessments require documentation Velaru generates. NERVE CARDS — WHY GLOBAL LEADERS CARE [ { "title": "FINRA 3110", "body": "Supervisory system must review AI recommendations \u2014 sample testing requires receipts.", "source": "vertical" }, { "title": "Conflicts of interest", "body": "AI recommending proprietary products \u2014 disclosure receipt required.", "source": "vertical" }, { "title": "Crypto advisory", "body": "AI crypto recommendations \u2014 SEC enforcement priority 2026.", "source": "vertical" }, { "title": "[Colorado] Developer vs deployer", "body": "Colorado splits obligations \u2014 receipt chain clarifies who documented what when.", "source": "jurisdiction" }, { "title": "[Colorado] Insurance nexus", "body": "Colorado insurers using AI in underwriting must comply while selling AI EPL.", "source": "jurisdiction" }, { "title": "[Text / Chat] Modality hook", "body": "Baseline \u2014 all frameworks apply to text decisions.", "source": "modality" } ] BOOK SUMMARY: { "total_insureds": 3, "compliant": 0, "grace_period": 3, "non_compliant": 0, "expired": 0, "not_enrolled": 0, "compliant_pct": 0.0 } TAM / EXPOSURE: $100T+ AUM · robo-advisors mainstream INSURANCE LINES: E&O, Fidelity, D&O DISCLAIMER: External validation evidence pack — not legal advice, not filed rate approval.