Compliance Framework

// Every executeFromSignals() call produces this
const attestation = await executeFromSignals(
  {
    policyId:      "personal-loan",
    policyVersion: "1.0.0",
    signals: {
      monthly_income:  82000,
      loan_amount:     500000,
      employed:        true,
      emi_obligations: 12000,
      blacklisted:     false,
    },
  },
  signer,
  verifier,
  store
);

// attestation.decision.action       "approve" or "reject"
// attestation.decision.reason       which rule matched
// attestation.execution_fingerprint sha256 of inputs + policy
// attestation.policyId              which policy
// attestation.policyVersion         which version
// attestation.signature             Ed25519 — independently verifiable

GET /audit/decisions?policyId=personal-loan&from=2026-01-01
GET /audit/decisions/:executionId
GET /audit/stats
GET /audit/security

const result = verifyAttestation(
  attestation,
  new LocalVerifier(publicKey),
  getRuntimeManifest(),
  provenanceInput
);

// result.checks.signature_verified   true/false
// result.checks.bundle_verified      policy bundle intact
// result.checks.evaluator_verified   evaluator unchanged
// result.checks.trust_root_verified  trust chain valid
// result.valid                       all checks passed

POL-001 through POL-022 — compilation errors block
deployment of invalid policies before they reach production.

VAL-003  Signal not declared in schema — execution stops
VAL-004  Required signal missing — execution stops
VAL-006  Boolean signal invalid — execution stops
VAL-007  Integer signal invalid — execution stops
VAL-008  String signal invalid — execution stops
VAL-009  Enum value not in declared set — execution stops

{
  "outcome": {
    "action": "reject",
    "requires_override": true,
    "reason": "Profile requires underwriter review."
  }
}

Evaluate        — test hypothetical, no commitment
Simulate        — dry-run full pipeline, no signing
Execute         — governed decision, signed attestation
ConfirmExecution — verify execution matched authorization

# Inspector needs only the public key and the attestation
parmana-verify \
  --attestation attestation.json \
  --public-key trust/root.pub \
  --policy-dir policies/insurance-claim/1.0.0

attestation.runtimeHash       — runtime version
attestation.evaluatorHash     — evaluation engine version
attestation.releaseManifestHash — release manifest version

result.checks.runtime_verified    runtime matches manifest
result.checks.evaluator_verified  evaluator unchanged
result.checks.release_verified    release manifest valid
result.checks.trust_root_verified trust chain intact

attestation has: execution_fingerprint (hash)
attestation does NOT have: the raw signal values

attestation.decision.reason   — which rule matched and why
attestation.decision.action   — "approve" or "reject"

{
  "policyId": "aml-transaction-screen",
  "policyVersion": "1.0.0",
  "schemaVersion": "1.0.0",
  "signalsSchema": {
    "risk_score":         { "type": "integer" },
    "is_sanctioned":      { "type": "boolean" },
    "transaction_amount": { "type": "integer" },
    "is_foreign":         { "type": "boolean" }
  },
  "rules": [
    {
      "id": "block-sanctioned",
      "condition": { "signal": "is_sanctioned", "equals": true },
      "outcome": {
        "action": "reject",
        "requires_override": false,
        "reason": "Entity is on sanctions list."
      }
    },
    {
      "id": "review-high-risk-foreign",
      "condition": {
        "all": [
          { "signal": "risk_score", "greater_than": 75 },
          { "signal": "is_foreign", "equals": true },
          { "signal": "transaction_amount", "greater_than": 100000 }
        ]
      },
      "outcome": {
        "action": "reject",
        "requires_override": true,
        "reason": "High-risk foreign transaction requires MLRO review."
      }
    },
    {
      "id": "catch-all",
      "condition": { "all": [] },
      "outcome": {
        "action": "approve",
        "requires_override": false,
        "reason": "Transaction cleared screening."
      }
    }
  ]
}

1. ExecutionAttestation
   GET /audit/decisions/:executionId

2. Public key (not secret — publish it)

3. Policy version from your git repository

4. Optional: release manifest + bundle manifest

5. Optional: signal provenance records
   (AA consent IDs, CIBIL references, document hashes)

✅ Decision was "approve" or "reject"
✅ Decision made by the stated policy version
✅ Inputs fingerprint matches claimed inputs
✅ Signature is valid — decision not altered
✅ Policy bundle intact — rules not changed
✅ Evaluation engine is claimed version
✅ Release manifest is authentic
✅ Trust root is the claimed trust root

parmana-verify \
  --attestation attestation.json \
  --public-key trust/root.pub \
  --policy-dir policies/personal-loan/1.0.0

☐ executeFromSignals() for every governed decision
☐ audit-db (PostgreSQL) storing every attestation
☐ RedisReplayStore in production (not MemoryReplayStore)
☐ Signing private key in secrets manager
☐ Public key published
☐ Policies versioned with semver
☐ requires_override: true on manual review rules
☐ GET /audit/* routes accessible to compliance team

☐ Signal provenance for AA and CIBIL signals
☐ accountAggregatorProvenance() for income signals
☐ confirmExecution() after each disbursement
☐ ExecutionIntegrityProof stored with attestation
☐ verifyAttestation() run daily in separate process
☐ Alert on release_verified === false
☐ Alert on evaluator_verified === false
☐ Alert on any INV-013

☐ Trust root public key at well-known URL
☐ Raw evidence hashes in provenance records
☐ Regulator portal using GET /audit/* routes
☐ Quarterly verifyAttestation() test from clean environment
☐ Policy git history preserved as change evidence
☐ Annual signing key rotation
☐ Offline encrypted trust root backup