Audit & Traceability Report

1. Audit objective

Audit evidence supports reconstruction of how an assessment was produced and which versions/evidence were associated with it.

2. Traceability register

Transaction	Model	Policy	Audit ref	Recommendation
BANKA-HIGH_VELOCITY-003	TRUST-BASELINE-0.1.0	1.0.0-DEMO	AUDIT-BANKA-HIGH-VELOCITY-003	APPROVE
BANKA-INSUFFICIENT_METADATA-005	TRUST-BASELINE-0.1.0	1.0.0-DEMO	AUDIT-BANKA-INSUFFICIENT-METADATA-005	REJECT
BANKA-NEW_DEVICE-002	TRUST-BASELINE-0.1.0	1.0.0-DEMO	AUDIT-BANKA-NEW-DEVICE-002	APPROVE
BANKA-NORMAL-001	TRUST-BASELINE-0.1.0	1.0.0-DEMO	AUDIT-BANKA-NORMAL-001	APPROVE
BANKA-UNUSUAL_CORRIDOR-004	TRUST-BASELINE-0.1.0	1.0.0-DEMO	AUDIT-BANKA-UNUSUAL-CORRIDOR-004	APPROVE
FINC-HIGH_VELOCITY-003	TRUST-BASELINE-0.1.0	1.0.0-DEMO	AUDIT-FINC-HIGH-VELOCITY-003	APPROVE
FINC-INSUFFICIENT_METADATA-005	TRUST-BASELINE-0.1.0	1.0.0-DEMO	AUDIT-FINC-INSUFFICIENT-METADATA-005	REJECT
FINC-NEW_DEVICE-002	TRUST-BASELINE-0.1.0	1.0.0-DEMO	AUDIT-FINC-NEW-DEVICE-002	APPROVE
FINC-NORMAL-001	TRUST-BASELINE-0.1.0	1.0.0-DEMO	AUDIT-FINC-NORMAL-001	APPROVE
FINC-UNUSUAL_CORRIDOR-004	TRUST-BASELINE-0.1.0	1.0.0-DEMO	AUDIT-FINC-UNUSUAL-CORRIDOR-004	STEP_UP_AUTHENTICATION
MNOB-HIGH_VELOCITY-003	TRUST-BASELINE-0.1.0	1.0.0-DEMO	AUDIT-MNOB-HIGH-VELOCITY-003	APPROVE
MNOB-INSUFFICIENT_METADATA-005	TRUST-BASELINE-0.1.0	1.0.0-DEMO	AUDIT-MNOB-INSUFFICIENT-METADATA-005	REJECT
MNOB-NEW_DEVICE-002	TRUST-BASELINE-0.1.0	1.0.0-DEMO	AUDIT-MNOB-NEW-DEVICE-002	APPROVE
MNOB-NORMAL-001	TRUST-BASELINE-0.1.0	1.0.0-DEMO	AUDIT-MNOB-NORMAL-001	APPROVE
MNOB-UNUSUAL_CORRIDOR-004	TRUST-BASELINE-0.1.0	1.0.0-DEMO	AUDIT-MNOB-UNUSUAL-CORRIDOR-004	APPROVE

3. Runtime audit evidence

Parsed audit records15

[
  {
    "event_type": "TRUST_POLICY_RECOMMENDATION",
    "policy_version": "1.0.0-DEMO",
    "recommendation": "APPROVE",
    "record_hash": "bb61b5376883731c8bd1b6e0be1f84fa1bbd49ffb08fbcab2f256da02586d6d9",
    "timestamp": "2026-09-15T14:54:10.438775+00:00",
    "transaction_id": "BANKA-HIGH_VELOCITY-003"
  },
  {
    "event_type": "TRUST_POLICY_RECOMMENDATION",
    "policy_version": "1.0.0-DEMO",
    "recommendation": "REJECT",
    "record_hash": "1e62cb61f4483d1546da3444ec0dd29f4fa7583a7995226c15316ca642bf1fe8",
    "timestamp": "2026-09-15T14:54:10.438858+00:00",
    "transaction_id": "BANKA-INSUFFICIENT_METADATA-005"
  },
  {
    "event_type": "TRUST_POLICY_RECOMMENDATION",
    "policy_version": "1.0.0-DEMO",
    "recommendation": "APPROVE",
    "record_hash": "cecf4d1c51ede2ff15b52ebabed7b3a57bc27bb7dc8c06e6fab90a9440b79498",
    "timestamp": "2026-09-15T14:54:10.438909+00:00",
    "transaction_id": "BANKA-NEW_DEVICE-002"
  },
  {
    "event_type": "TRUST_POLICY_RECOMMENDATION",
    "policy_version": "1.0.0-DEMO",
    "recommendation": "APPROVE",
    "record_hash": "fc0f644a8dd20dd979ade779946781a421beaad8e42ef45ad50fce9d6e1da7a1",
    "timestamp": "2026-09-15T14:54:10.438964+00:00",
    "transaction_id": "BANKA-NORMAL-001"
  },
  {
    "event_type": "TRUST_POLICY_RECOMMENDATION",
    "policy_version": "1.0.0-DEMO",
    "recommendation": "APPROVE",
    "record_hash": "2de24b5b6d93b306e3518baabba2c4595cd1fbdf661d7cff3e70b01d1847f7cb",
    "timestamp": "2026-09-15T14:54:10.438986+00:00",
    "transaction_id": "BANKA-UNUSUAL_CORRIDOR-004"
  },
  {
    "event_type": "TRUST_POLICY_RECOMMENDATION",
    "policy_version": "1.0.0-DEMO",
    "recommendation": "APPROVE",
    "record_hash": "aae814bff2217226b61df4bb8b58aefcc5f35a0c64c48d6720f4ad46043ff808",
    "timestamp": "2026-09-15T14:54:10.439003+00:00",
    "transaction_id": "FINC-HIGH_VELOCITY-003"
  },
  {
    "event_type": "TRUST_POLICY_RECOMMENDATION",
    "policy_version": "1.0.0-DEMO",
    "recommendation": "REJECT",
    "record_hash": "baaa3db98b90950963dbf8aeeffad849a6fb669dfa96fb676676bea04a40a733",
    "timestamp": "2026-09-15T14:54:10.439019+00:00",
    "transaction_id": "FINC-INSUFFICIENT_METADATA-005"
  },
  {
    "event_type": "TRUST_POLICY_RECOMMENDATION",
    "policy_version": "1.0.0-DEMO",
    "recommendation": "APPROVE",
    "record_hash": "226eb09afc519fd828f3e47094af69a515bcf843b30408a04fb68c3cf5cecb3c",
    "timestamp": "2026-09-15T14:54:10.439035+00:00",
    "transaction_id": "FINC-NEW_DEVICE-002"
  },
  {
    "event_type": "TRUST_POLICY_RECOMMENDATION",
    "policy_version": "1.0.0-DEMO",
    "recommendation": "APPROVE",
    "record_hash": "b09d6f93d002fcf698c0981c1d2a5f1aa1932f86bfeceec5907ea3bfab41eb78",
    "timestamp": "2026-09-15T14:54:10.439051+00:00",
    "transaction_id": "FINC-NORMAL-001"
  },
  {
    "event_type": "TRUST_POLICY_RECOMMENDATION",
    "policy_version": "1.0.0-DEMO",
    "recommendation": "STEP_UP_AUTHENTICATION",
    "record_hash": "3ca1d931c03c628ce751e83fbf48492f6bf1cd6590bff86dd7eb43e1dff79598",
    "timestamp": "2026-09-15T14:54:10.439066+00:00",
    "transaction_id": "FINC-UNUSUAL_CORRIDOR-004"
  },
  {
    "event_type": "TRUST_POLICY_RECOMMENDATION",
    "policy_version": "1.0.0-DEMO",
    "recommendation": "APPROVE",
    "record_hash": "1ff8abc1470df68eb3a49dd0bcc51a64520bc853430e2f6a5745f55e244dc009",
    "timestamp": "2026-09-15T14:54:10.439081+00:00",
    "transaction_id": "MNOB-HIGH_VELOCITY-003"
  },
  {
    "event_type": "TRUST_POLICY_RECOMMENDATION",
    "policy_version": "1.0.0-DEMO",
    "recommendation": "REJECT",
    "record_hash": "0091ba174f86aa1eed562c2680440283c70758ae679456a4ce40329f7285c71e",
    "timestamp": "2026-09-15T14:54:10.439096+00:00",
    "transaction_id": "MNOB-INSUFFICIENT_METADATA-005"
  },
  {
    "event_type": "TRUST_POLICY_RECOMMENDATION",
    "policy_version": "1.0.0-DEMO",
    "recommendation": "APPROVE",
    "record_hash": "4a61a7ad63df5f4afd23a3006025cf0d8d794d6f92b7aaadeea5bf6a6cbad994",
    "timestamp": "2026-09-15T14:54:10.439114+00:00",
    "transaction_id": "MNOB-NEW_DEVICE-002"
  },
  {
    "event_type": "TRUST_POLICY_RECOMMENDATION",
    "policy_version": "1.0.0-DEMO",
    "recommendation": "APPROVE",
    "record_hash": "58c5985bd026a4e3ab1b44245d52856587a5520f520193342521963d17e9c813",
    "timestamp": "2026-09-15T14:54:10.439129+00:00",
    "transaction_id": "MNOB-NORMAL-001"
  },
  {
    "event_type": "TRUST_POLICY_RECOMMENDATION",
    "policy_version": "1.0.0-DEMO",
    "recommendation": "APPROVE",
    "record_hash": "8e76828883e346e1ce2b901e1508f40b1a96f959563ffc877546f93a17980bd4",
    "timestamp": "2026-09-15T14:54:10.439144+00:00",
    "transaction_id": "MNOB-UNUSUAL_CORRIDOR-004"
  }
]

4. Reconstruction model

Transaction ID

→

Feature evidence

→

Model version

→

Explanation

→

Policy version

→

Audit trace

Evaluator question

Expected evidence

Is the capability clearly bounded?

The page and manual should state what the component does and what it explicitly does not do.

Is source evidence visible?

The capability should identify or link to the evidence used to produce the displayed result.

Is version information available?

Model, SDK, policy, adapter or implementation version should be available where relevant.

Can the result be reconstructed?

Identifiers and upstream/downstream evidence should make replay or reconstruction possible.

Does the component fail safely?

Missing or unsupported evidence must not be converted into invented facts.

Is institutional authority preserved?

TRUST may advise, but final transaction authority remains with the institution.