Provenance
Every line, sourced.
Every claim in every output ties back to the record, the control and the named owner behind it — on an audit chain that survives the inspection.
Board summary · §2 AI risk posture
Cited
The bank operates 42 AI systems, of which nine are high-risk under EU AI Act Annex III. All nine carry a current Annex IV file except FRD-021, which is held open on a residual-risk attestation.
42 AI systems↳ Registry · count · today
nine are high-risk↳ Classification · Annex III(5)(b)
held open on residual-risk↳ REQ-04812 · Risk Operations
Every claim ties to a sourceSealed
The problem
'Trust me, it's in a deck somewhere.'
Most governance outputs read well and source poorly. A regulator points at a sentence; three teams scramble to remember where it came from.
The right answer was probably true. No one can prove when.
Today · prose without source
Unverifiable
"The bank operates approximately 40 AI systems, the majority of which are low-risk; we maintain comprehensive governance documentation aligned with applicable regulatory frameworks."
↳ Source · author opinion · undated
How it works
A citation for every claim.
01
Tied to the record
Every statement points to the registry field, control or attestation it was drawn from. Nothing is composed from inference.
9 high-risk systems
↳ Registry · risk tier filter · today
02
Named owner
Each citation carries the human accountable for it. There is no anonymous governance.
Accountable
S. Iqbal · CDO
Signed · 12 Jun 10:42
03
Tamper-evident chain
Records, citations and approvals are sealed on a hash chain. Re-issued documents reference the prior seal.
h: 0x9c…a41f
prev: 0x4b…81c2
Registry
field
Control
mapped
Owner
signed
Seal
hashed
chain: 0x4b…81c2 → 0x9c…a41f → 0xd2…3e07
Through-line
The chain that connects everything else.
Provenance is not a feature — it is the spine. Registry, Documents, Monitoring, Counsel and Trust Centre all read and write the same chain.
Pull any sentence; the chain shows the source, the owner and the seal.
Proof
A claim, traced to its source.
One sentence in a board summary, traced down to the registry field, the control, the owner and the seal.
Claim · "9 high-risk systems" · traced
Sealed
OutputBoard summary · §29 high-risk systems12 Jun
SourceRegistry · querytier=High · count=912 Jun 10:41
ControlClassification · CTL-014Annex III(5)(b) verdict10 Jun
OwnerM. Okafor · AI GovernanceApproved11 Jun 09:02
SealAudit chain0x9c…a41f12 Jun 10:42