VELARU MANDATE EXHIBIT PACK — AI CREDIT SCORING / LENDING Jurisdiction: France (fr) Modality: Text / Chat Program: Velaru AI Credit Scoring / Lending · France (galactic_mortgage_fr) Product ID: mortgage:fr:bundle:text Vertical: mortgage Generated: 2026-08-19T06:51:55.909243Z Authority: France CNIL AI Pack — GSE AI Governance QC Audit Pack Deadline: EU AI Act + CNIL AI action plan Velaru verify: https://velaru.xyz/verify EXHIBIT A — AI INVENTORY [ { "named_entity": "Velari", "slug": "velari", "ai_use_case": "AI-assisted AI Credit Scoring / Lending decisions", "vertical": "mortgage", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/4c58eac890bfd031ce2189de5a1ca9ea292a0c837f5f535daf164aef34f31e53", "compliance_state": "grace_period", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/d8fb129c0c0c78d05256/export.txt", "diligence_url": "https://velaru.xyz/diligence/velari" }, { "named_entity": "LinkAudit Test", "slug": "linkaudit-test", "ai_use_case": "AI-assisted AI Credit Scoring / Lending decisions", "vertical": "mortgage", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/58ddedd1974156453bc55daef6a9857d8570d56388becbb2a80bf5bac76b771b", "compliance_state": "grace_period", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/78aa6e3f3a84cf1a88c0/export.txt", "diligence_url": "https://velaru.xyz/diligence/linkaudit-test" }, { "named_entity": "Link Audit Co", "slug": "link-audit-co", "ai_use_case": "AI-assisted AI Credit Scoring / Lending decisions", "vertical": "mortgage", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/d00533b7b6c0495802b4250abd5c29f60bd9f2ad3fb141bba2d9a5afee5f5542", "compliance_state": "grace_period", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/fea572f3996c4b963779/export.txt", "diligence_url": "https://velaru.xyz/diligence/link-audit-co" }, { "named_entity": "Mortgage Audit", "slug": "mortgage-audit", "ai_use_case": "AI-assisted AI Credit Scoring / Lending decisions", "vertical": "mortgage", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/9725a051f7e70090483d8fc67548ffa6f6554f039031a890435e9d64a70c35f0", "compliance_state": "grace_period", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/552d176e70d1100eaf33/export.txt", "diligence_url": "https://velaru.xyz/diligence/mortgage-audit" } ] EXHIBIT B — GOVERNANCE FRAMEWORK { "framework": "Velaru Mandate Registry \u2014 AI Credit Scoring / Lending", "exhibit_authority": "France CNIL AI Pack \u2014 GSE AI Governance QC Audit Pack", "regulatory_frameworks": [ "ECOA", "Fair Housing Act", "Fannie Mae LL-2026-04", "Freddie Mac Section 1302.8", "EU AI Act", "CNIL AI recommendations", "GDPR", "French AI Act" ], "standards_alignment": [ "POSS-2", "DRP-1", "TCB", "FRE 707 pre-compliance", "ISO 42001" ], "human_oversight": "sell loan to GSE", "third_party_verification": "https://velaru.xyz/verify (operator-independent)", "data_lineage": "Hash-chained Ed25519 receipts; optional RFC3161 + external anchor", "mirror_trap": "Freddie requires segregation of duties + audit trails Fannie omits \u2014 lenders selling to both must build to the stricter standard. Velaru is that standard. \u00b7 CNIL among most aggressive EU DPAs on AI \u2014 French language audit trail required.", "chain_integrity": { "depth": 571, "invariant_holds": true } } EXHIBIT D — DATA INPUTS & VALIDATION { "data_validation_method": "Cryptographic receipt per AI decision; public verify without trusting deployer, vendor, or Velaru operator", "bias_testing_proxy": "Asymmetry score from live chain signals", "model_change_control": "Policy lock registry \u2014 criteria hash frozen pre-dispute", "logging_retention": "90-day pre-dispute window minimum; permanent verify permalinks", "external_validator": "Nisaba LLC / Velaru", "validator_independence": "Client-side Ed25519 verify; BYOK tri-receipt optional", "headline_stat": "First US sector-specific AI mandate \u2014 QC must query which AI influenced which loan", "global_leaders_addressed": [ "Fannie Mae", "Freddie Mac", "Rocket Mortgage", "Wells Fargo", "CFPB", "CNIL", "Mistral AI", "AMF" ] } MIRROR TRAP (regulatory insight) Freddie requires segregation of duties + audit trails Fannie omits — lenders selling to both must build to the stricter standard. Velaru is that standard. · CNIL among most aggressive EU DPAs on AI — French language audit trail required. NERVE CARDS — WHY GLOBAL LEADERS CARE [ { "title": "50 days to compliance", "body": "Inventory all AI in origination/servicing \u2014 embedded SaaS counts. Per-loan decision record or fail QC.", "source": "vertical" }, { "title": "Fair lending discovery", "body": "ECOA adverse action requires specific reasons \u2014 AI black box without receipt = automatic CFPB referral pattern.", "source": "vertical" }, { "title": "Vendor illusion", "body": "Lender owns GSE indemnity for vendor AI \u2014 same Mobley logic as hiring, different regulator.", "source": "vertical" }, { "title": "[France] Sovereign AI", "body": "France pushing Mistral/sovereign stack \u2014 receipts prove which model decided.", "source": "jurisdiction" }, { "title": "[France] AMF scrutiny", "body": "French financial markets AI \u2014 AMF expects algorithm documentation.", "source": "jurisdiction" }, { "title": "[Text / Chat] Modality hook", "body": "Baseline \u2014 all frameworks apply to text decisions.", "source": "modality" } ] BOOK SUMMARY: { "total_insureds": 4, "compliant": 0, "grace_period": 4, "non_compliant": 0, "expired": 0, "not_enrolled": 0, "compliant_pct": 0.0 } TAM / EXPOSURE: $12T+ US residential origination · every GSE seller/servicer INSURANCE LINES: E&O, Rep & warranty, Cyber DISCLAIMER: External validation evidence pack — not legal advice, not filed rate approval.