VELARU MANDATE EXHIBIT PACK — AI CREDIT SCORING / LENDING Jurisdiction: Colorado (us_co) Modality: Text / Chat Program: Velaru AI Credit Scoring / Lending · Colorado (galactic_mortgage_us_co) Product ID: mortgage:us_co:bundle:text Vertical: mortgage Generated: 2026-08-19T06:08:26.324885Z Authority: Colorado AI Act Pack — GSE AI Governance QC Audit Pack Deadline: Colorado AI Act high-risk deployment Velaru verify: https://velaru.xyz/verify EXHIBIT A — AI INVENTORY [ { "named_entity": "Velari", "slug": "velari", "ai_use_case": "AI-assisted AI Credit Scoring / Lending decisions", "vertical": "mortgage", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/4c58eac890bfd031ce2189de5a1ca9ea292a0c837f5f535daf164aef34f31e53", "compliance_state": "grace_period", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/d8fb129c0c0c78d05256/export.txt", "diligence_url": "https://velaru.xyz/diligence/velari" }, { "named_entity": "LinkAudit Test", "slug": "linkaudit-test", "ai_use_case": "AI-assisted AI Credit Scoring / Lending decisions", "vertical": "mortgage", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/58ddedd1974156453bc55daef6a9857d8570d56388becbb2a80bf5bac76b771b", "compliance_state": "grace_period", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/78aa6e3f3a84cf1a88c0/export.txt", "diligence_url": "https://velaru.xyz/diligence/linkaudit-test" }, { "named_entity": "Link Audit Co", "slug": "link-audit-co", "ai_use_case": "AI-assisted AI Credit Scoring / Lending decisions", "vertical": "mortgage", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/d00533b7b6c0495802b4250abd5c29f60bd9f2ad3fb141bba2d9a5afee5f5542", "compliance_state": "grace_period", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/fea572f3996c4b963779/export.txt", "diligence_url": "https://velaru.xyz/diligence/link-audit-co" }, { "named_entity": "Mortgage Audit", "slug": "mortgage-audit", "ai_use_case": "AI-assisted AI Credit Scoring / Lending decisions", "vertical": "mortgage", "risk_tier": "elevated", "external_validation": "Velaru independent receipt verification", "handler_receipt_lock": "https://velaru.onrender.com/r/9725a051f7e70090483d8fc67548ffa6f6554f039031a890435e9d64a70c35f0", "compliance_state": "grace_period", "asymmetry_grade": "A", "found_scripture_export": "https://velaru.xyz/bundle/pre-dispute/552d176e70d1100eaf33/export.txt", "diligence_url": "https://velaru.xyz/diligence/mortgage-audit" } ] EXHIBIT B — GOVERNANCE FRAMEWORK { "framework": "Velaru Mandate Registry \u2014 AI Credit Scoring / Lending", "exhibit_authority": "Colorado AI Act Pack \u2014 GSE AI Governance QC Audit Pack", "regulatory_frameworks": [ "ECOA", "Fair Housing Act", "Fannie Mae LL-2026-04", "Freddie Mac Section 1302.8", "Colorado AI Act SB 24-205", "Algorithmic accountability" ], "standards_alignment": [ "POSS-2", "DRP-1", "TCB", "FRE 707 pre-compliance", "ISO 42001" ], "human_oversight": "sell loan to GSE", "third_party_verification": "https://velaru.xyz/verify (operator-independent)", "data_lineage": "Hash-chained Ed25519 receipts; optional RFC3161 + external anchor", "mirror_trap": "Freddie requires segregation of duties + audit trails Fannie omits \u2014 lenders selling to both must build to the stricter standard. Velaru is that standard. \u00b7 First comprehensive US state AI law \u2014 impact assessments require documentation Velaru generates.", "chain_integrity": { "depth": 568, "invariant_holds": true } } EXHIBIT D — DATA INPUTS & VALIDATION { "data_validation_method": "Cryptographic receipt per AI decision; public verify without trusting deployer, vendor, or Velaru operator", "bias_testing_proxy": "Asymmetry score from live chain signals", "model_change_control": "Policy lock registry \u2014 criteria hash frozen pre-dispute", "logging_retention": "90-day pre-dispute window minimum; permanent verify permalinks", "external_validator": "Nisaba LLC / Velaru", "validator_independence": "Client-side Ed25519 verify; BYOK tri-receipt optional", "headline_stat": "First US sector-specific AI mandate \u2014 QC must query which AI influenced which loan", "global_leaders_addressed": [ "Fannie Mae", "Freddie Mac", "Rocket Mortgage", "Wells Fargo", "CFPB", "CO AG", "Counterpart", "Colorado Division of Insurance" ] } MIRROR TRAP (regulatory insight) Freddie requires segregation of duties + audit trails Fannie omits — lenders selling to both must build to the stricter standard. Velaru is that standard. · First comprehensive US state AI law — impact assessments require documentation Velaru generates. NERVE CARDS — WHY GLOBAL LEADERS CARE [ { "title": "50 days to compliance", "body": "Inventory all AI in origination/servicing \u2014 embedded SaaS counts. Per-loan decision record or fail QC.", "source": "vertical" }, { "title": "Fair lending discovery", "body": "ECOA adverse action requires specific reasons \u2014 AI black box without receipt = automatic CFPB referral pattern.", "source": "vertical" }, { "title": "Vendor illusion", "body": "Lender owns GSE indemnity for vendor AI \u2014 same Mobley logic as hiring, different regulator.", "source": "vertical" }, { "title": "[Colorado] Developer vs deployer", "body": "Colorado splits obligations \u2014 receipt chain clarifies who documented what when.", "source": "jurisdiction" }, { "title": "[Colorado] Insurance nexus", "body": "Colorado insurers using AI in underwriting must comply while selling AI EPL.", "source": "jurisdiction" }, { "title": "[Text / Chat] Modality hook", "body": "Baseline \u2014 all frameworks apply to text decisions.", "source": "modality" } ] BOOK SUMMARY: { "total_insureds": 4, "compliant": 0, "grace_period": 4, "non_compliant": 0, "expired": 0, "not_enrolled": 0, "compliant_pct": 0.0 } TAM / EXPOSURE: $12T+ US residential origination · every GSE seller/servicer INSURANCE LINES: E&O, Rep & warranty, Cyber DISCLAIMER: External validation evidence pack — not legal advice, not filed rate approval.