Members and roles

Prototype states

Only the CISO, as administrator, invites members and assigns roles.

Role	Gate authority	Duty	Sign-in	Status
CRO	G3 and G4	Accountable executive; approves G3 and G4; decides containment	Microsoft Entra	active
Data lead	G1	Register owner; triages intake requests; approves G1; sets re-assertion intervals	Microsoft Entra	active
Validator	G2	Independent validation; approves G2; records findings and dissent	Microsoft Entra	active
Actuary	G5	Model owner; submits systems and evidence; re-asserts entries; approves G5	Microsoft Entra	active
Compliance lead	none	Regime profile; evidence packs; examiner keys	Microsoft Entra	active
CISO	none	Administrator; boundary decisions, agent keys, suspension, settings	Microsoft Entra	active
Internal audit	none	Reads every record and the audit log; receives escalated dissent and reports on it to the audit committee; signs its own review and conclusion records; signs no gate	Microsoft Entra	invitation pending since 2026-10-15
Business line head	none	Requests AI use before G1: the purpose, the data and the proposed owner; signs nothing at a gate	Microsoft Entra	active
Procurement lead	none	Vendor records: class, questionnaires, contract terms, exit tests; approves contracts within its delegated authority	Microsoft Entra	active

Learn more about approver rules

One named approver per gate. The Validator must be a different person from the G3 approver; the conformance self-test checks it nightly.

Examiner keys

Read-only, time-boxed, every read logged.

The CISO or the Compliance lead issues and revokes examiner keys.

Insurance profile: Claude and ChatGPT allowed for read and draft. Microsoft Copilot and Claude Code not allowed.

Changed only on Settings, assistant allow-list, as a boundary decision by the CISO. Last change 2026-10-02.