VELARU MANDATE EXHIBIT PACK — MINOR SAFETY / PLATFORM CHILD PROTECTION Jurisdiction: Canada (ca) Modality: Text / Chat Program: Velaru Minor Safety / Platform Child Protection · Canada (galactic_minor_safety_ca) Product ID: minor_safety:ca:bundle:text Vertical: minor_safety Generated: 2026-08-22T12:13:42.539664Z Authority: Canada OSFI E-23 Pack — Platform Child Safety + NCMEC Audit Pack Deadline: KOSA + EU AI Act prohibited practices enforcement Velaru verify: https://velaru.xyz/verify EXHIBIT A — AI INVENTORY [ { "named_entity": "Velari", "slug": "velari", "ai_use_case": "AI-assisted Minor Safety / Platform Child Protection decisions", "vertical": "minor_safety", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/4c58eac890bfd031ce2189de5a1ca9ea292a0c837f5f535daf164aef34f31e53", "compliance_state": "non_compliant", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/d8fb129c0c0c78d05256/export.txt", "diligence_url": "https://velaru.xyz/diligence/velari" }, { "named_entity": "LinkAudit Test", "slug": "linkaudit-test", "ai_use_case": "AI-assisted Minor Safety / Platform Child Protection decisions", "vertical": "minor_safety", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/58ddedd1974156453bc55daef6a9857d8570d56388becbb2a80bf5bac76b771b", "compliance_state": "non_compliant", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/78aa6e3f3a84cf1a88c0/export.txt", "diligence_url": "https://velaru.xyz/diligence/linkaudit-test" }, { "named_entity": "Link Audit Co", "slug": "link-audit-co", "ai_use_case": "AI-assisted Minor Safety / Platform Child Protection decisions", "vertical": "minor_safety", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/d00533b7b6c0495802b4250abd5c29f60bd9f2ad3fb141bba2d9a5afee5f5542", "compliance_state": "non_compliant", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/fea572f3996c4b963779/export.txt", "diligence_url": "https://velaru.xyz/diligence/link-audit-co" } ] EXHIBIT B — GOVERNANCE FRAMEWORK { "framework": "Velaru Mandate Registry \u2014 Minor Safety / Platform Child Protection", "exhibit_authority": "Canada OSFI E-23 Pack \u2014 Platform Child Safety + NCMEC Audit Pack", "regulatory_frameworks": [ "KOSA", "COPPA", "18 USC 2258A", "EU AI Act Article 5", "AIDA proposal", "OSFI E-23", "PIPEDA", "Quebec Law 25" ], "standards_alignment": [ "POSS-2", "DRP-1", "TCB", "FRE 707 pre-compliance", "ISO 42001" ], "human_oversight": "serve content to minor account", "third_party_verification": "https://velaru.xyz/verify (operator-independent)", "data_lineage": "Hash-chained Ed25519 receipts; optional RFC3161 + external anchor", "mirror_trap": "Platforms prove moderation in policy docs \u2014 regulators want proof of what AI refused to show minors. \u00b7 Quebec Law 25 already strict on automated decisions \u2014 ROC catching up with AIDA.", "chain_integrity": { "depth": 475, "invariant_holds": true } } EXHIBIT D — DATA INPUTS & VALIDATION { "data_validation_method": "Cryptographic receipt per AI decision; public verify without trusting deployer, vendor, or Velaru operator", "bias_testing_proxy": "Asymmetry score from live chain signals", "model_change_control": "Policy lock registry \u2014 criteria hash frozen pre-dispute", "logging_retention": "90-day pre-dispute window minimum; permanent verify permalinks", "external_validator": "Nisaba LLC / Velaru", "validator_independence": "Client-side Ed25519 verify; BYOK tri-receipt optional", "headline_stat": "18 USC 2258A federal reporting \u2014 proof of detection AND proof of escalation", "global_leaders_addressed": [ "Meta", "Snap", "Discord", "NCMEC", "Ofcom", "OSFI", "RBC", "OPC" ] } MIRROR TRAP (regulatory insight) Platforms prove moderation in policy docs — regulators want proof of what AI refused to show minors. · Quebec Law 25 already strict on automated decisions — ROC catching up with AIDA. NERVE CARDS — WHY GLOBAL LEADERS CARE [ { "title": "KOSA liability", "body": "Duty of care for minors \u2014 recommendation AI logs are discovery gold.", "source": "vertical" }, { "title": "EU Art 5 ban", "body": "Prohibited practices for minors \u2014 receipt of refusal is compliance artifact.", "source": "vertical" }, { "title": "D&O personal", "body": "Section 230 narrowing \u2014 executives personally named in state AG suits.", "source": "vertical" }, { "title": "[Canada] OSFI banks", "body": "Canadian bank AI \u2014 E-23 model risk parallels SR 11-7.", "source": "jurisdiction" }, { "title": "[Canada] Bill C-27", "body": "AIDA when passed \u2014 early receipt infrastructure = compliance head start.", "source": "jurisdiction" }, { "title": "[Text / Chat] Modality hook", "body": "Baseline \u2014 all frameworks apply to text decisions.", "source": "modality" } ] BOOK SUMMARY: { "total_insureds": 3, "compliant": 0, "grace_period": 0, "non_compliant": 3, "expired": 0, "not_enrolled": 0, "compliant_pct": 0.0 } TAM / EXPOSURE: $200B+ social platform revenue · child safety = existential regulatory risk INSURANCE LINES: Platform liability, D&O, Cyber DISCLAIMER: External validation evidence pack — not legal advice, not filed rate approval.