What ThetaZero Produces
for Every Governed Run
A CCO can review this in 10 minutes. Every agent execution generates this package automatically — signed, hashed, and ready for audit.
No login required · ~28 KB · Contains 5 signed files
Review KYC submission KYC-2026-047821 for customer Finova Capital LLC. The submission has been flagged for an income discrepancy exception (declared annual revenue: $4.2M, bank statement average: $3.1M). Determine whether to approve, conditionally approve, or reject. Apply EU AI Act Article 14 human-oversight requirements and log the full audit trail.
APPROVED WITH CONDITIONS — Customer identity verified against submitted documentation. Sanctions screening cleared (0 matches across OFAC, EU consolidated list, and UN Security Council sanctions). Risk score 42/100 classified as LOW-MEDIUM.
Income discrepancy of 26% (declared $4.2M vs. verified $3.1M average) falls within the 30% acceptable threshold under Section 4.3 of the KYC Policy Framework. Discrepancy attributable to seasonal revenue concentration (Q4 billing cycle documented in supporting attachment).
Conditions applied: (1) Enhanced transaction monitoring for 90 days, (2) Human compliance officer review required before account activation (Art. 14 flag), (3) Repeat verification at 12-month interval.
The following compliance controls are satisfied by this execution. ThetaZero maps each run to the relevant framework articles automatically.
| Framework | Control Reference | Description | Status |
|---|---|---|---|
| EU AI Act | Art. 9 | Risk management system — risks identified, evaluated, and mitigated before deployment | ✓ MAPPED |
| EU AI Act | Art. 10 | Data governance — training/validation data quality measures documented | ✓ DOCUMENTED |
| EU AI Act | Art. 13 | Transparency — system capabilities, limitations, and logic accessible to deployers | ✓ EVIDENCE |
| EU AI Act | Art. 14 | Human oversight — mechanisms for humans to monitor, understand, and intervene | ✓ EVIDENCE |
| EU AI Act | Art. 17 | Quality management — processes for ongoing monitoring and incident management | ✓ MAPPED |
| EU AI Act | Art. 26(1) | Deployer obligations — verification that system is used as intended by provider | ✓ DOCUMENTED |
| SOC 2 | CC6.6 | Logical access security measures — controls to restrict access to information assets | ✓ EVIDENCE |
| SOC 2 | CC7.1 | System monitoring — detection of threats, anomalies, and policy violations | ✓ EVIDENCE |
| SOC 2 | CC7.2 | Security event monitoring — logging, alerting, and incident response | ✓ EVIDENCE |
| GDPR | Art. 22 | Automated decision-making — human review available; decision explained and challengeable | ✓ EVIDENCE |
| GDPR | Art. 5(1)(f) | Integrity & confidentiality — appropriate security of personal data | ✓ MAPPED |
input_hash: a3f8c2d9e1047b6f2c58a0d3f7e91cc4b2a8e5d7f3041c8b9d2e6a0f1b4c7e3
output_hash: 7e91b4fa3c620d8e1f4a9b5c2d7e0f3a8b1c6d2e9f4a7b0c3d8e1f6a2b5c8d1
output_hash: 2b4d8f0e6c1a9b3d7e5f2a0c4b8d6e1f3a7b9c0d2e4f6a8b0c2d4e6f8a0b2c4
output_hash: f1e3b5d7a9c0e2f4b6d8a0c2e4f6b8d0a2c4e6f8a0b2c4e6f8a0b2c4e6f8a011
entry_hash: c8d0e2f4a6b8c0d2e4f6a8b0c2d4e6f8a0b2c4e6f8a0b2c4e6f8a0b2c4e6f8a0
output_hash: e7f9a1b3c5d7e9f1a3b5c7d9e1f3a5b7c9d1e3f5a7b9c1d3e5f7a9b1c3d5e7f9
control_mapping.json · sha256: 3b7d1f5a9c4e2b8f6d0a3e7b5c9d1f4a... · 3,118 bytes
audit_trail.json · sha256: f2e8a4c6b0d9e3f7a1b5c9d2e6f0a4b8... · 11,652 bytes
tee_attestation.json · sha256: a5c7e9b1d3f5a7c9e1b3d5f7a9c1e3b5... · 4,087 bytes
README.txt · sha256: b8d0f2a4c6e8b0d2f4a6c8e0b2d4f6a8... · 1,024 bytes
Download the Full Evidence ZIP
All 5 files in one package. Open it, read through the JSON, and share with your auditors. This is what every governed run produces.
Ready to generate real evidence?
Every agent execution on ThetaZero produces this package automatically. No extra work required.