Skip to main content
    CALCULATORiQ™

    CALCULATORiQ Research / Assurance Lab

    BANK PERIMETER & AGENT DISPOSITIONS

    Authority at the transaction boundary. Identity, consent and evidence determine whether an agent request can proceed.

    Companion research

    Illustrative CALCULATORiQ scenario model informed by Dax Philbert’s CABIER Consulting research. Numerical assumptions are ours, not CABIER scoring, legal advice, a loss forecast or regulatory certification.

    REQUEST & MANDATE

    PERMIT

    Verified identity, valid consent and execution inside the mandate.

    Requested flow / sec

    $20,000

    Eligible value ceiling

    $10,000

    Not an executed payment

    Eligible speed ceiling

    2 / sec

    TRANSACTION BOUNDARY REVIEW

    01

    Agent identity

    02

    Customer consent

    03

    Counterparty jurisdiction

    04

    Purpose and mandate

    05

    Velocity envelope

    06

    Liquidity boundary

    07

    Evidence integrity

    08

    Named authority

    09

    Outcome verification

    DECISION RULES & LIMITATIONS

    Priority is terminate for revoked credentials or prohibited jurisdiction; pause for expired identity, missing consent or missing evidence; intervene for illiquidity or an unreviewed cross-border request; restrict for value, speed or liquidity constraints; otherwise permit. These are editorial rules, not statutory thresholds. A human approval does not override a revoked credential or absent consent. Outcome verification is a simulated review state, not proof of a real settlement.

    EIGHTEEN PROBLEM & REMEDY PANELS

    INSTITUTIONAL READINESS AUDIT

    Self-assessed resilience index

    0 / 100

    0 of 18 controls evidenced

    Equal weighting: absent = 0, partial = 1, evidenced = 2. Self-reported evidence is not independently verified. Every incomplete item remains a remediation priority.

    01. CAPABILITY MISTAKEN FOR SAFETY

    Evaluate the deployed capability in context, including data, tools, authority, dependencies and consequence.

    Evidence: Documented scenario coverage and residual-risk acceptance.

    02. FRAGMENTED IDENTITY

    Maintain governed identity mappings with provenance, conflict handling and accountable ownership.

    Evidence: Material identity relationships carry source and verification status.

    03. SEMANTIC MISMATCH

    Use versioned data contracts and explicit authoritative-source rules.

    Evidence: Critical fields have owners, definitions, freshness requirements and validation.

    04. UNBOUNDED AGENT AUTHORITY

    Enforce least privilege and purpose-specific authority at the point of action.

    Evidence: Permission tests, refusal records and timely revocation evidence.

    05. COMPOUNDING TRANSACTION LOOPS

    Apply sequence, velocity, concentration and aggregate limits.

    Evidence: Loop tests and aggregate exposure monitoring.

    06. WEAK PROVENANCE

    Preserve source, timestamp, version, transformation and uncertainty.

    Evidence: Material conclusions are reproducible from retained evidence.

    07. EVIDENCE MISTAKEN FOR TRUTH

    Separate integrity, authenticity, accuracy, relevance and legal sufficiency.

    Evidence: Evidence records identify what they prove and what they do not prove.

    08. UNVERIFIED EXECUTION

    Verify the result in the authoritative system and reconcile partial completion.

    Evidence: Outcome verification for every material action.

    09. UNCLEAR DECISION RIGHTS

    Separate roles and define explicit approval thresholds.

    Evidence: Named decision owners and tested segregation of duties.

    10. INADEQUATE INTERRUPTION

    Revoke, terminate, inspect downstream work and produce termination evidence.

    Evidence: Measured interruption results and verified post-termination state.

    11. UNSAFE DEPENDENCY LOSS

    Map critical dependencies and rehearse provider loss.

    Evidence: Tested continuity arrangements and known recovery conditions.

    12. REGULATORY MAPPING DRIFT

    Version sources, monitor change and reassess affected controls.

    Evidence: Current mappings, owners and remediation status.

    13. CORRELATED MODEL RISK

    Map common dependencies and introduce independent corroboration where warranted.

    Evidence: Concentration view and tested alternatives for critical functions.

    14. SOVEREIGNTY WITHOUT CONTROL

    Assess control over models, updates, compute, credentials, evidence and fallback.

    Evidence: Workload-specific dependency and exit plans.

    15. ASSURANCE OVERCLAIM

    Label capabilities as implemented, configuration-dependent, proposed or independently tested.

    Evidence: Claims register tied to code, configuration and evaluation evidence.

    16. BENEFITS WITHOUT ACCOUNTABILITY

    Preserve explanations, human escalation and effective redress.

    Evidence: Measured outcomes, review routes and resolved complaints.

    17. VIBE-CODED APPLICATIONS WITHOUT SECURITY OWNERSHIP

    classify risk by data, privilege and consequence; register the application and name its owner; use safe defaults and least privilege; protect secrets; test authentication, authorization, database policies, APIs and dependencies; require independent review for high-risk use; and preserve evidence of release approval, findings, remediation and retesting.

    Evidence: every production application has an accountable owner, a recorded risk classification, a current dependency and permission inventory, passing security checks proportionate to risk, a tested recovery path and a documented review date.

    18. DATA WITHOUT GOVERNANCE, SECURITY OR PROVENANCE

    inventory and classify data; assign accountable owners; record permitted purposes, provenance and lineage; enforce least privilege and approved destinations; validate quality; govern model and third-party handling; apply retention and deletion controls; and preserve evidence of access decisions, transformations, exceptions and remediation.

    Evidence: critical data assets have an owner, classification, lineage, approved uses, access policy, retention rule, quality thresholds and reviewable evidence that controls are tested and exceptions resolved.