Asymmetric Intelligence · P-ASSUR-1 (FR-1434)
Institutional Assurance Pack (v1.0)
Generated from canonical repository state on 2026-11-03 (last verified 2026-11-03T20:28:48Z). Every claim cites its canonical source file, 8-character SHA256, executable witness, and verification timestamp.
1. Architecture, Scope & Release-Gate Assurance Matrix
| ID | Category | Assurance Claim & Scope Boundary | Measured Status / Metric | Canonical Source & SHA256 | Witness | Last Verified |
|---|---|---|---|---|---|---|
ASSUR-01 | Canonical Scope & Jurisdiction Registry | 173 canonical jurisdictions governed by a single schema-validated registry across all six Union consumers. | count=173 | ops/canonical/jurisdiction-registry.json @ affcb0e1 | python3 tools/check_cpr_schema.py | 2026-11-03T16:10:00Z |
ASSUR-02 | Union Store & Consumer Publish Freshness | 7 Union consumer vertical pipelines tracked with store-derived collection dates and consumer publish timestamps (no build-clock fabrication). | consumers=7 schema=union-freshness-ledger-v1.1 | ops/canonical/union-freshness-ledger.json @ 9fa5cbd1 | python3 -c "import json; d=json.load(open('ops/canonical/union-freshness-ledger.json')); assert len(d['consumers'])>=6 and d['portfolio_summary']['canonical_jurisdictions_count']==173" | 2026-11-03T16:10:00Z |
ASSUR-03 | Entitlement & Access Control Architecture | Edge-enforced Cloudflare Worker session verification (/app/* 302-redirects unauthenticated visitors; D1 entitlement lookup across 6 vertical monitors + All-Access + Enterprise). | model=Up to 3 Individual Monitor Licences (one harmonised standard tier) + 4th-Licence All-Access (all 6 specialist monitors + Asymmetric Investor professional tier at 4x standard licence; Signal unpriced and included; output rights separate) | commercial/SIGNAL-RUNBOOK.md @ f7d41ded | python3 fe-fleet/kits/entitlement-kit/signal_worker_gate.py --self-test | 2026-11-03T16:10:00Z |
ASSUR-04 | Tenant Isolation & Scenario Retention | Draft contract parameters specify 0h default scenario input retention (opt-in 24h/7d/30d purge), row-level isolation for Band B, and dedicated KMS key for Band C; live paid retention/KMS enforcement awaits deployment. | approved_draft_parameters (0h default retention, Band B/C isolation specs verified; live paid controls pending deployment) | policy/contracts/product-archetype-library-fr1051.json @ d48aaef1 | python3 -c "import json; d=json.load(open('policy/contracts/product-archetype-library-fr1051.json')); assert d" | 2026-11-03T16:10:00Z |
ASSUR-05 | Institutional Reuse & Reliance Boundary | Structured regulatory intelligence only (no legal advice, no solicitor-client relationship, no model training on subscriber inputs); claim-level reliance boundary governed by schema. | schema_enforced_draft_terms (reliance-boundary-schema.json verified; legal-review draft) | policy/contracts/reliance-boundary-schema.json @ ad7135a3 | python3 -c "import json; d=json.load(open('policy/contracts/reliance-boundary-schema.json')); assert d.get('type') == 'object'" | 2026-11-03T16:10:00Z |
ASSUR-06 | Source-Link Warranty & Citation Grounding | Every published regulatory claim links to a primary statutory or supervisory instrument; enforced by automated claim-challenger and source-grounding gates. | 48h remediation SLA on broken primary citations | ops/canonical/pricing-ssot.json @ 22ee4563 | python3 tools/check_no_tier_derived_source_confidence.py | 2026-11-03T16:10:00Z |
ASSUR-07 | Disaster Recovery & Renderer Parity Rehearsal (FR-1435) | PARTIAL FINDING-D1-01 (status=PARTIAL): 23/24 tables (364,399/365,252 rows, 99.77%) in agg-batch-state, 18/19 tables (572/629 rows, 90.94%) in advennt-users, and Cloudflare KV namespace signal-workspace-state (e78998fb7c6b4cb1b7692c72c1361685, status=uncovered, inventory update 2026-11-04, not drilled, FR-1456: subscriber saved state in Cloudflare KV) have no documented off-store backup export schedule or restore runbook and remain unrecoverable outside the live store itself (pending; PASS requires every in-scope store to have a documented off-store backup that was restored). Restored from documented off-store backup artefacts at 2026-11-03T20:28:48Z into 3 isolated Cloudflare scratch resources (advennt-users-dr, agg-batch-state-dr, advennt-paid-artefacts-dr; all deleted post-drill, scratch_remaining=0): Git persistent-state at pinned past SHA HEAD~1 across 6 consumers + internal (RPO=24743s), R2 objects from Git HEAD~1 (RPO=23966s), and the 2 documented D1 single-table Git snapshots ops/canonical/seam-outcomes.json (RPO=69734s) & ops/canonical/firm-attribution.json (RPO=1176132s) plus in-place D1 Time Travel bookmark restore, with 6-consumer renderer conformance (mismatches=0, measured RTO=71.462s on covered subset; RPO = age of newest restorable backup at drill time). | PARTIALstatus=PARTIAL; pending: FINDING-D1-01 (23/24 agg-batch-state tables [364,399/365,252 rows], 18/19 advennt-users tables [572/629 rows], and KV signal-workspace-state [e78998fb7c6b4cb1b7692c72c1361685, status=uncovered, inventory update 2026-11-04, not drilled] have no off-store backup); measured on covered subset at 2026-11-03T20:28:48Z: RTO=71.462s (restore=37.84s render=25.152s) RPO_git=24743s RPO_r2=23966s RPO_d1_seam=69734s RPO_d1_firm=1176132s renderer_mismatches=0 scratch_remaining=0 | ops/canonical/dr-rehearsal-latest.json @ 8dbdf6f8 | python3 tools/dr_rehearsal.py --check | 2026-11-03T20:28:48Z |
ASSUR-08 | ASSURANCE-DR Release Gate | Fleet release gate ASSURANCE-DR (DR rehearsal & assurance pack): requires timed live restore rehearsal into an isolated scratch target with zero renderer mismatches and published assurance + status pages. | gate_status=scheduled dr_verdict=PARTIAL (FINDING-D1-01: >99% of D1 rows lack off-D1 backup; covered subset restore & 6-consumer renderer parity measured at 2026-11-03T20:28:48Z) | ops/canonical/fleet-gates.json @ 8c1f5933 | python3 tools/render_status_page.py --self-test | 2026-11-03T20:28:48Z |
ASSUR-09 | BENCH-EXT External Counsel Benchmark Gate (FR-1437) | Fleet release gate BENCH-EXT (external answer keys): requires external non-ARRF answer keys across 6 consumers x 3 JIDs scored with F>=0.85, D=1.00, Q>=0.95 (templates & scorer ready; authored keys not yet sealed). | scorer_and_templates_verified (gate_status=scheduled; external keys pending return) | ops/canonical/fleet-gates.json @ 8c1f5933 | python3 tools/score_fr1437_external_key.py --self-test | 2026-11-03T16:10:00Z |
ASSUR-10 | RRIE Offline Ruling (RRIE-GATE) | Regulatory Risk & Impact Engine (RRIE) cures (fail-closed validation, multi-regime correlation, provenance) are merged and tested offline, but RRIE remains OFFLINE on all reader-facing consumer surfaces until independent counsel calibration signs off. | offline_by_operator_ruling (gate_status=scheduled; cures unit-tested offline) | ops/canonical/fleet-gates.json @ 8c1f5933 | python3 -c "import json; g={x['gate_id']:x for x in json.load(open('ops/canonical/fleet-gates.json'))['gates']}['COUNSEL']; assert g['status'] in ('scheduled','held')" | 2026-11-03T16:10:00Z |
ASSUR-11 | Sentinel Offline Ruling (SENTINEL-GATE) | Sentinel regulatory change alerting remains OFFLINE for external subscriber dispatch until 14-day live precision >=95% and recall >=85% with zero duplicate alerts are proven on production feeds. | offline_by_operator_ruling (gate_status=scheduled; 14d window required) | commercial/SENTINEL-RUNBOOK.md @ 94cdb7c3 | python3 -c "import json; g={x['gate_id']:x for x in json.load(open('ops/canonical/fleet-gates.json'))['gates']}['SENTINEL-RC']; assert g['status'] in ('scheduled','held')" | 2026-11-03T16:10:00Z |
ASSUR-12 | Fleet Control Plane & Gate Discipline | 22 release gates tracked in ops/canonical/fleet-gates.json with zero self-certification; gate transitions are Fleet-owned. | total_gates=22 | commercial/FLEET-RUNBOOK.md @ 3fdafb62 | python3 -c "import json; d=json.load(open('ops/canonical/fleet-gates.json')); assert len(d.get('gates',[]))>=1" | 2026-11-03T16:10:00Z |
2. Union Store & Consumer Publish Freshness Baseline
| Consumer Vertical | Site Last Published | Latest Research Banked | Tracked JIDs | Canonical Source & SHA256 |
|---|---|---|---|---|
advennt | 2026-11-01 | 2026-10-27 | 170 | ops/canonical/union-freshness-ledger.json#advennt @ 9fa5cbd1 |
aic | 2026-10-25 | 2026-11-01 | 23 | ops/canonical/union-freshness-ledger.json#aic @ 9fa5cbd1 |
asymmetric-investor | 2026-11-01 | 2026-11-01 | 173 | ops/canonical/union-freshness-ledger.json#asymmetric-investor @ 9fa5cbd1 |
crypto | 2026-11-01 | 2026-10-26 | 170 | ops/canonical/union-freshness-ledger.json#crypto @ 9fa5cbd1 |
data-protection | 2026-11-01 | 2026-10-27 | 170 | ops/canonical/union-freshness-ledger.json#data-protection @ 9fa5cbd1 |
financial-integrity | 2026-11-01 | 2026-10-27 | 170 | ops/canonical/union-freshness-ledger.json#financial-integrity @ 9fa5cbd1 |
world-payments | 2026-11-01 | 2026-10-26 | 170 | ops/canonical/union-freshness-ledger.json#world-payments @ 9fa5cbd1 |
Explicit Offline & Pending Rulings: Production DR restore rehearsal (
ASSUR-07 / FR-1435): status=PARTIAL; pending: FINDING-D1-01 (23/24 agg-batch-state tables [364,399/365,252 rows], 18/19 advennt-users tables [572/629 rows], and KV signal-workspace-state [e78998fb7c6b4cb1b7692c72c1361685, status=uncovered, inventory update 2026-11-04, not drilled] have no off-store backup); measured on covered subset at 2026-11-03T20:28:48Z: RTO=71.462s (restore=37.84s render=25.152s) RPO_git=24743s RPO_r2=23966s RPO_d1_seam=69734s RPO_d1_firm=1176132s renderer_mismatches=0 scratch_remaining=0. RRIE (RRIE-GATE) and Sentinel (SENTINEL-GATE) remain offline on all reader-facing surfaces until independent counsel calibration and the 14-day live alerting window close. External counsel benchmark gate (BENCH-EXT / FR-1437) remains RED until external answer keys return.