Regulatory assurance / GB
Ledgerproof Regulatory Assurance Report
SAMPLE / SYNTHETIC DATA
Illustrative synthetic example — no real operator/customer data
Independent regulatory assurance analysis — not a regulator certificate or legal opinion.
Executive Assurance Summary
Controls evaluated3
PASS subject results2
FAIL subject results2
NOT TESTABLE subject results2
NOT APPLICABLE subject results1
Exceptions5
Overall presentation state (not a regulatory verdict): FAIL_PRESENT
Subject-level R1 verdict counts are listed above. Control-level summary_state counts below are a presentation state only and MUST NOT be read as a control verdict. The label "controls tested" is not used as PASS/FAIL shorthand. Controls evaluated means distinct governed control_id values with at least one R1 result; controls with applicable subjects: 3.
Control summary_state counts (presentation only)
| summary_state | Controls |
|---|---|
| FAIL_PRESENT | 2 |
| NO_RESULTS | 0 |
| NOT_APPLICABLE_ONLY | 0 |
| NOT_TESTABLE_PRESENT | 1 |
| PASS_ONLY_FOR_APPLICABLE_POPULATION | 0 |
Per-control evidence coverage (M1 minimum)
| Control | Coverage minimum |
|---|---|
| GB-CI-05 | 0 |
| GB-CI-06 | 0 |
| GB-CI-07 | 0 |
Unresolved applicability subject results: 0. Unresolved applicability or policy inputs remain the underlying R1 NOT_TESTABLE result and reason code.
Authority freshness and applicability
Copied from the persisted R1 authority snapshots bound to this run. Missing interval or applicability facts are shown as not present on snapshot; freshness is not inferred against the assessment period.
| Authority ID | Status | Valid from | Valid to | Retrieved at | Applicability |
|---|---|---|---|---|---|
| UKGC-CI-FG-R11-SYNTHETIC-SNAPSHOT | RESOLVED | 2022-09-12T00:00:00.000Z | not present on snapshot | 2026-08-21T00:00:00.000Z | Synthetic remote customer-interaction test scope |
| UKGC-CI-FG-R12-SYNTHETIC-SNAPSHOT | RESOLVED | 2022-09-12T00:00:00.000Z | not present on snapshot | 2026-08-21T00:00:00.000Z | Synthetic remote customer-interaction test scope |
| UKGC-LCCP-SR-3.4.3-P11-SYNTHETIC-SNAPSHOT | RESOLVED | 2022-09-12T00:00:00.000Z | not present on snapshot | 2026-08-21T00:00:00.000Z | Synthetic remote customer-interaction test scope |
| UKGC-LCCP-SR-3.4.3-P12-SYNTHETIC-SNAPSHOT | RESOLVED | 2022-09-12T00:00:00.000Z | not present on snapshot | 2026-08-21T00:00:00.000Z | Synthetic remote customer-interaction test scope |
Run and Evidence Pack Identity
- Report ID
- R2-SYNTHETIC-GB-CI-001
- Operator identifier
- SYNTHETIC-NORTHSTAR
- Run ID
- R2-SYNTHETIC-RUN-001
- Generated at
- 2026-08-22T00:00:00.000Z
- Jurisdiction
- GB
- Assessed domain
- Remote customer interaction / SR Code 3.4.3
- Assessment period
- 2026-04-01T00:00:00.000Z -> 2026-06-30T23:59:59.999Z
- Methodology version
- R2-report-v1; R2-renderer-v1
- Methodology identity
- 02a225a153e2e04d827b38d50d3fa0d3f2e9cb6cbc0ff3e760b109c3cd649c71
- Dataset fingerprint
- 77362999cff3da251e734cb183827cbc7304ce8e961222d867d20fdc7e2bb5c1
- Evidence Pack hash
- a0e16c49e8aea3ca5d38e72908c20e3d657bd335205943b4b539496df26dd2a6
- Report hash
- 6ab62955e82cc40b02b84021cc1385c5c3ee7d8f8bad3ce56b9b3bd74baa68a0
Authority snapshots
| Authority ID | Canonical text hash | Source clause | Source version | Status | Valid from | Valid to | Retrieved at | Applicability |
|---|---|---|---|---|---|---|---|---|
| UKGC-CI-FG-R11-SYNTHETIC-SNAPSHOT | 3c2f9478ecc4ddad13adeb1c75de7b0889ab7b772432be98392c121756990bb2 | Requirement 11 | SYNTHETIC-SNAPSHOT-FOR-TEST | RESOLVED | 2022-09-12T00:00:00.000Z | not present on snapshot | 2026-08-21T00:00:00.000Z | Synthetic remote customer-interaction test scope |
| UKGC-CI-FG-R12-SYNTHETIC-SNAPSHOT | 128c7a71211426464ab8b9786f10dde87970fd3cd5f7390052aee77fc1d2e4e9 | Requirement 12 | SYNTHETIC-SNAPSHOT-FOR-TEST | RESOLVED | 2022-09-12T00:00:00.000Z | not present on snapshot | 2026-08-21T00:00:00.000Z | Synthetic remote customer-interaction test scope |
| UKGC-LCCP-SR-3.4.3-P11-SYNTHETIC-SNAPSHOT | bbc6926be499f44266314118139cdce525931ee8b177849a4e2cfb202f847288 | SR Code Provision 3.4.3 paragraph 11 | SYNTHETIC-SNAPSHOT-FOR-TEST | RESOLVED | 2022-09-12T00:00:00.000Z | not present on snapshot | 2026-08-21T00:00:00.000Z | Synthetic remote customer-interaction test scope |
| UKGC-LCCP-SR-3.4.3-P12-SYNTHETIC-SNAPSHOT | 99fecbaf3c1a81aaa2311abe1214850734f40b07f395e4a2b5cc68b073884c9a | SR Code Provision 3.4.3 paragraph 12 | SYNTHETIC-SNAPSHOT-FOR-TEST | RESOLVED | 2022-09-12T00:00:00.000Z | not present on snapshot | 2026-08-21T00:00:00.000Z | Synthetic remote customer-interaction test scope |
Control Assurance Matrix
| Control | Name | Control class | Binding code paragraph | Supporting guidance hashes | Operator parameter/policy | Summary state (presentation, not a regulatory verdict) | Subjects | PASS | FAIL | NOT TESTABLE | NOT APPLICABLE | Applicability distribution | Evidence sufficiency distribution | Reason-code distribution | Exceptions | Coverage | Evidence trace |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| GB-CI-05 | Automated protective action monitoring | PARAMETERISED | 11 | 3c2f9478ecc4ddad13adeb1c75de7b0889ab7b772432be98392c121756990bb2 | SYNTHETIC-SG-POLICY 1.0 | FAIL_PRESENT | 4 | 1 | 1 | 1 | 1 | APPLICABLE: 3; NOT_APPLICABLE: 1 | INSUFFICIENT: 1; SUFFICIENT: 2; UNRESOLVED: 1 | AUTOMATED_ACTION_ABSENT: 1; AUTOMATED_ACTION_EVIDENCED: 1; NOT_APPLICABLE: 1; SOURCE_INCOMPLETE: 1 | HAS_EXCEPTIONS | 0 | GB-CI-05 reconstruction |
| GB-CI-06 | Manual review and escalation evidence | PARAMETERISED | 11 | 3c2f9478ecc4ddad13adeb1c75de7b0889ab7b772432be98392c121756990bb2 | SYNTHETIC-SG-POLICY 1.0 | FAIL_PRESENT | 2 | 1 | 1 | 0 | 0 | APPLICABLE: 2 | SUFFICIENT: 2 | MANUAL_REVIEW_ABSENT: 1; MANUAL_REVIEW_EVIDENCED: 1 | HAS_EXCEPTIONS | 0 | GB-CI-06 reconstruction |
| GB-CI-07 | Outcome evaluation and closure review | ASSURANCE | 12 | 128c7a71211426464ab8b9786f10dde87970fd3cd5f7390052aee77fc1d2e4e9 | SYNTHETIC-SG-POLICY 1.0 | NOT_TESTABLE_PRESENT | 1 | 0 | 0 | 1 | 0 | APPLICABLE: 1 | INSUFFICIENT: 1 | OUTCOME_SOURCE_INCOMPLETE: 1 | HAS_EXCEPTIONS | 0 | GB-CI-07 reconstruction |
Detailed Control Findings and Reconstruction
GB-CI-05: Automated protective action monitoring
- Requirement tested
- AUTOMATED_PROTECTIVE_ACTION
- Binding authority
- UKGC-LCCP-SR-3.4.3-P11-SYNTHETIC-SNAPSHOT (SR Code Provision 3.4.3 paragraph 11); Licence Conditions and Codes of Practice; SYNTHETIC-SNAPSHOT-FOR-TEST; https://www.gamblingcommission.gov.uk/licensees-and-businesses/lccp/condition/3-4-3-remote-customer-interaction; status RESOLVED; valid 2022-09-12T00:00:00.000Z → not present on snapshot; retrieved 2026-08-21T00:00:00.000Z; applicability Synthetic remote customer-interaction test scope
- Supporting guidance
- UKGC-CI-FG-R11-SYNTHETIC-SNAPSHOT (Requirement 11); Customer interaction guidance - for remote gambling licensees; SYNTHETIC-SNAPSHOT-FOR-TEST; https://www.gamblingcommission.gov.uk/guidance/customer-interaction-guidance-for-remote-gambling-licensees-formal-guidance/requirement-11-customer-interaction-guidance-for-remote-gambling-licensees; status RESOLVED; valid 2022-09-12T00:00:00.000Z → not present on snapshot; retrieved 2026-08-21T00:00:00.000Z; applicability Synthetic remote customer-interaction test scope
- Operator policy / parameters
- SYNTHETIC-SG-POLICY 1.0
- Required evidence
- Governed coverage-vector fields required for this control, copied from persisted R1 coverage (not inferred from observed evidence IDs): subject_id, trigger, trigger_time, policy, classification, required_source_completeness, evidence_fingerprints, evidence_times, upstream_chain_validity, observed_action
- Observed evidence
- 2 of 4 subject result(s) have every required coverage field fully populated. Coverage-vector fields fully populated on at least one subject: subject_id, trigger, trigger_time, policy, classification, required_source_completeness, evidence_fingerprints, evidence_times, upstream_chain_validity, observed_action. Evaluated evidence IDs: ER-2972d117c10fbcb2, ER-04ad60ebdcb5b32a, ER-6afcc6ad980f8125, ER-fc63e54c04c40165; observed events: none recorded, action-001
- Missing required evidence
- 1 subject result(s) (FAIL/AUTOMATED_ACTION_ABSENT): observed_action. Examples: SYN-CUSTOMER-FAIL-05
1 subject result(s) (NOT_TESTABLE/SOURCE_INCOMPLETE): required_source_completeness, observed_action. Examples: SYN-CUSTOMER-GAP-05 - How coverage was calculated
- M1 minimum of the control's required-field coverage vector: 0
- Deterministic methodology
- 02a225a153e2e04d827b38d50d3fa0d3f2e9cb6cbc0ff3e760b109c3cd649c71; controls b0c75869add4b24a1b3ec6806f425013911f40592bdd94b1aafc050c2bd41336
- Subject-level aggregation
- summary_state FAIL_PRESENT is a presentation state, not an R1 verdict. Subject results: SYN-CUSTOMER-FAIL-05: APPLICABLE/SUFFICIENT/FAILED/FAIL (AUTOMATED_ACTION_ABSENT); SYN-CUSTOMER-GAP-05: APPLICABLE/INSUFFICIENT/UNKNOWN/NOT_TESTABLE (SOURCE_INCOMPLETE); SYN-CUSTOMER-NA-001: NOT_APPLICABLE/UNRESOLVED/UNKNOWN/NOT_APPLICABLE (NOT_APPLICABLE); SYN-CUSTOMER-PASS-05: APPLICABLE/SUFFICIENT/PASSED/PASS (AUTOMATED_ACTION_EVIDENCED)
- Exceptions and limitations
- F-GB-CI-05-SYN-CUSTOMER-FAIL-05-AUTOMATED_ACTION_ABSENT (AUTOMATED_ACTION_ABSENT), F-GB-CI-05-SYN-CUSTOMER-GAP-05-SOURCE_INCOMPLETE (SOURCE_INCOMPLETE), F-GB-CI-05-SYN-CUSTOMER-NA-001-NOT_APPLICABLE (NOT_APPLICABLE)
- Reconstruction reference
- F-GB-CI-05-SYN-CUSTOMER-FAIL-05-AUTOMATED_ACTION_ABSENT -> GB-CI-05 -> 3c2f9478ecc4ddad13adeb1c75de7b0889ab7b772432be98392c121756990bb2, bbc6926be499f44266314118139cdce525931ee8b177849a4e2cfb202f847288 -> 9b6ac41e9977c85ee5f8736a13d2a203c7baf9708de5876e5b0f15d5aff69f7f -> ER-2972d117c10fbcb2, ER-04ad60ebdcb5b32a, ER-6afcc6ad980f8125 -> R1-9719d5ce7912a57a -> 02a225a153e2e04d827b38d50d3fa0d3f2e9cb6cbc0ff3e760b109c3cd649c71 -> FAIL/AUTOMATED_ACTION_ABSENT; F-GB-CI-05-SYN-CUSTOMER-GAP-05-SOURCE_INCOMPLETE -> GB-CI-05 -> 3c2f9478ecc4ddad13adeb1c75de7b0889ab7b772432be98392c121756990bb2, bbc6926be499f44266314118139cdce525931ee8b177849a4e2cfb202f847288 -> 9b6ac41e9977c85ee5f8736a13d2a203c7baf9708de5876e5b0f15d5aff69f7f -> ER-2972d117c10fbcb2, ER-04ad60ebdcb5b32a, ER-6afcc6ad980f8125 -> R1-6818dd839cbef5ad -> 02a225a153e2e04d827b38d50d3fa0d3f2e9cb6cbc0ff3e760b109c3cd649c71 -> NOT_TESTABLE/SOURCE_INCOMPLETE; F-GB-CI-05-SYN-CUSTOMER-NA-001-NOT_APPLICABLE -> GB-CI-05 -> 3c2f9478ecc4ddad13adeb1c75de7b0889ab7b772432be98392c121756990bb2, bbc6926be499f44266314118139cdce525931ee8b177849a4e2cfb202f847288 -> 9b6ac41e9977c85ee5f8736a13d2a203c7baf9708de5876e5b0f15d5aff69f7f -> ER-fc63e54c04c40165, ER-2972d117c10fbcb2, ER-04ad60ebdcb5b32a, ER-6afcc6ad980f8125 -> R1-3dac2bcd7923ca8a -> 02a225a153e2e04d827b38d50d3fa0d3f2e9cb6cbc0ff3e760b109c3cd649c71 -> NOT_APPLICABLE/NOT_APPLICABLE; F-GB-CI-05-SYN-CUSTOMER-PASS-05-AUTOMATED_ACTION_EVIDENCED -> GB-CI-05 -> 3c2f9478ecc4ddad13adeb1c75de7b0889ab7b772432be98392c121756990bb2, bbc6926be499f44266314118139cdce525931ee8b177849a4e2cfb202f847288 -> 9b6ac41e9977c85ee5f8736a13d2a203c7baf9708de5876e5b0f15d5aff69f7f -> ER-fc63e54c04c40165, ER-2972d117c10fbcb2, ER-04ad60ebdcb5b32a, ER-6afcc6ad980f8125 -> R1-eed1b08b2ac7d452 -> 02a225a153e2e04d827b38d50d3fa0d3f2e9cb6cbc0ff3e760b109c3cd649c71 -> PASS/AUTOMATED_ACTION_EVIDENCED
GB-CI-06: Manual review and escalation evidence
- Requirement tested
- INDIVIDUAL_MANUAL_REVIEW
- Binding authority
- UKGC-LCCP-SR-3.4.3-P11-SYNTHETIC-SNAPSHOT (SR Code Provision 3.4.3 paragraph 11); Licence Conditions and Codes of Practice; SYNTHETIC-SNAPSHOT-FOR-TEST; https://www.gamblingcommission.gov.uk/licensees-and-businesses/lccp/condition/3-4-3-remote-customer-interaction; status RESOLVED; valid 2022-09-12T00:00:00.000Z → not present on snapshot; retrieved 2026-08-21T00:00:00.000Z; applicability Synthetic remote customer-interaction test scope
- Supporting guidance
- UKGC-CI-FG-R11-SYNTHETIC-SNAPSHOT (Requirement 11); Customer interaction guidance - for remote gambling licensees; SYNTHETIC-SNAPSHOT-FOR-TEST; https://www.gamblingcommission.gov.uk/guidance/customer-interaction-guidance-for-remote-gambling-licensees-formal-guidance/requirement-11-customer-interaction-guidance-for-remote-gambling-licensees; status RESOLVED; valid 2022-09-12T00:00:00.000Z → not present on snapshot; retrieved 2026-08-21T00:00:00.000Z; applicability Synthetic remote customer-interaction test scope
- Operator policy / parameters
- SYNTHETIC-SG-POLICY 1.0
- Required evidence
- Governed coverage-vector fields required for this control, copied from persisted R1 coverage (not inferred from observed evidence IDs): subject_id, trigger, trigger_time, policy, classification, required_source_completeness, evidence_fingerprints, evidence_times, upstream_chain_validity, observed_review
- Observed evidence
- 1 of 2 subject result(s) have every required coverage field fully populated. Coverage-vector fields fully populated on at least one subject: subject_id, trigger, trigger_time, policy, classification, required_source_completeness, evidence_fingerprints, evidence_times, upstream_chain_validity, observed_review. Evaluated evidence IDs: ER-fc63e54c04c40165, ER-2972d117c10fbcb2, ER-6afcc6ad980f8125, ER-04ad60ebdcb5b32a; observed events: none recorded, review-001
- Missing required evidence
- 1 subject result(s) (FAIL/MANUAL_REVIEW_ABSENT): observed_review. Examples: SYN-CUSTOMER-FAIL-06
- How coverage was calculated
- M1 minimum of the control's required-field coverage vector: 0
- Deterministic methodology
- 02a225a153e2e04d827b38d50d3fa0d3f2e9cb6cbc0ff3e760b109c3cd649c71; controls 2074e5bd06d3daefae8af57b4e1873e1e70d2ce5ec7dedace15b025977186f61
- Subject-level aggregation
- summary_state FAIL_PRESENT is a presentation state, not an R1 verdict. Subject results: SYN-CUSTOMER-FAIL-06: APPLICABLE/SUFFICIENT/FAILED/FAIL (MANUAL_REVIEW_ABSENT); SYN-CUSTOMER-PASS-06: APPLICABLE/SUFFICIENT/PASSED/PASS (MANUAL_REVIEW_EVIDENCED)
- Exceptions and limitations
- F-GB-CI-06-SYN-CUSTOMER-FAIL-06-MANUAL_REVIEW_ABSENT (MANUAL_REVIEW_ABSENT)
- Reconstruction reference
- F-GB-CI-06-SYN-CUSTOMER-FAIL-06-MANUAL_REVIEW_ABSENT -> GB-CI-06 -> 3c2f9478ecc4ddad13adeb1c75de7b0889ab7b772432be98392c121756990bb2, bbc6926be499f44266314118139cdce525931ee8b177849a4e2cfb202f847288 -> 9b6ac41e9977c85ee5f8736a13d2a203c7baf9708de5876e5b0f15d5aff69f7f -> ER-fc63e54c04c40165, ER-2972d117c10fbcb2, ER-6afcc6ad980f8125 -> R1-5cb40077dcee318b -> 02a225a153e2e04d827b38d50d3fa0d3f2e9cb6cbc0ff3e760b109c3cd649c71 -> FAIL/MANUAL_REVIEW_ABSENT; F-GB-CI-06-SYN-CUSTOMER-PASS-06-MANUAL_REVIEW_EVIDENCED -> GB-CI-06 -> 3c2f9478ecc4ddad13adeb1c75de7b0889ab7b772432be98392c121756990bb2, bbc6926be499f44266314118139cdce525931ee8b177849a4e2cfb202f847288 -> 9b6ac41e9977c85ee5f8736a13d2a203c7baf9708de5876e5b0f15d5aff69f7f -> ER-fc63e54c04c40165, ER-2972d117c10fbcb2, ER-04ad60ebdcb5b32a, ER-6afcc6ad980f8125 -> R1-daac0371c4af864a -> 02a225a153e2e04d827b38d50d3fa0d3f2e9cb6cbc0ff3e760b109c3cd649c71 -> PASS/MANUAL_REVIEW_EVIDENCED
GB-CI-07: Outcome evaluation and closure review
- Requirement tested
- OUTCOME_EVALUATION
- Binding authority
- UKGC-LCCP-SR-3.4.3-P12-SYNTHETIC-SNAPSHOT (SR Code Provision 3.4.3 paragraph 12); Licence Conditions and Codes of Practice; SYNTHETIC-SNAPSHOT-FOR-TEST; https://www.gamblingcommission.gov.uk/licensees-and-businesses/lccp/condition/3-4-3-remote-customer-interaction; status RESOLVED; valid 2022-09-12T00:00:00.000Z → not present on snapshot; retrieved 2026-08-21T00:00:00.000Z; applicability Synthetic remote customer-interaction test scope
- Supporting guidance
- UKGC-CI-FG-R12-SYNTHETIC-SNAPSHOT (Requirement 12); Customer interaction guidance - for remote gambling licensees; SYNTHETIC-SNAPSHOT-FOR-TEST; https://www.gamblingcommission.gov.uk/guidance/customer-interaction-guidance-for-remote-gambling-licensees-formal-guidance/requirement-12-customer-interaction-guidance-for-remote-gambling-licensees; status RESOLVED; valid 2022-09-12T00:00:00.000Z → not present on snapshot; retrieved 2026-08-21T00:00:00.000Z; applicability Synthetic remote customer-interaction test scope
- Operator policy / parameters
- SYNTHETIC-SG-POLICY 1.0
- Required evidence
- Governed coverage-vector fields required for this control, copied from persisted R1 coverage (not inferred from observed evidence IDs): subject_id, trigger, trigger_time, policy, classification, required_source_completeness, evidence_fingerprints, evidence_times, upstream_chain_validity, outcome_record
- Observed evidence
- 0 of 1 subject result(s) have every required coverage field fully populated. Coverage-vector fields fully populated on at least one subject: subject_id, trigger, trigger_time, policy, classification, evidence_fingerprints, evidence_times, upstream_chain_validity. Evaluated evidence IDs: ER-fc63e54c04c40165, ER-04ad60ebdcb5b32a, ER-6afcc6ad980f8125; observed events: none recorded
- Missing required evidence
- 1 subject result(s) (NOT_TESTABLE/OUTCOME_SOURCE_INCOMPLETE): required_source_completeness, outcome_record. Examples: SYN-CUSTOMER-GAP-07
- How coverage was calculated
- M1 minimum of the control's required-field coverage vector: 0
- Deterministic methodology
- 02a225a153e2e04d827b38d50d3fa0d3f2e9cb6cbc0ff3e760b109c3cd649c71; controls 32219bb9dbeded3bdcc54d37fa8bb773c48a69c54bcbe4975cc4dfb9ad55a459
- Subject-level aggregation
- summary_state NOT_TESTABLE_PRESENT is a presentation state, not an R1 verdict. Subject results: SYN-CUSTOMER-GAP-07: APPLICABLE/INSUFFICIENT/UNKNOWN/NOT_TESTABLE (OUTCOME_SOURCE_INCOMPLETE)
- Exceptions and limitations
- F-GB-CI-07-SYN-CUSTOMER-GAP-07-OUTCOME_SOURCE_INCOMPLETE (OUTCOME_SOURCE_INCOMPLETE)
- Reconstruction reference
- F-GB-CI-07-SYN-CUSTOMER-GAP-07-OUTCOME_SOURCE_INCOMPLETE -> GB-CI-07 -> 128c7a71211426464ab8b9786f10dde87970fd3cd5f7390052aee77fc1d2e4e9, 99fecbaf3c1a81aaa2311abe1214850734f40b07f395e4a2b5cc68b073884c9a -> 9b6ac41e9977c85ee5f8736a13d2a203c7baf9708de5876e5b0f15d5aff69f7f -> ER-fc63e54c04c40165, ER-04ad60ebdcb5b32a, ER-6afcc6ad980f8125 -> R1-78c643af88c2f5df -> 02a225a153e2e04d827b38d50d3fa0d3f2e9cb6cbc0ff3e760b109c3cd649c71 -> NOT_TESTABLE/OUTCOME_SOURCE_INCOMPLETE
Finding register
| Finding | Control | Subject | Public verdict | Reason | Evidence | Authority hashes | Policy hashes | Evaluator / methodology |
|---|---|---|---|---|---|---|---|---|
| F-GB-CI-05-SYN-CUSTOMER-FAIL-05-AUTOMATED_ACTION_ABSENT | GB-CI-05 | SYN-CUSTOMER-FAIL-05 | FAIL | AUTOMATED_ACTION_ABSENT | ER-2972d117c10fbcb2, ER-04ad60ebdcb5b32a, ER-6afcc6ad980f8125 | 3c2f9478ecc4ddad13adeb1c75de7b0889ab7b772432be98392c121756990bb2, bbc6926be499f44266314118139cdce525931ee8b177849a4e2cfb202f847288 | 9b6ac41e9977c85ee5f8736a13d2a203c7baf9708de5876e5b0f15d5aff69f7f | 02a225a153e2e04d827b38d50d3fa0d3f2e9cb6cbc0ff3e760b109c3cd649c71 |
| F-GB-CI-05-SYN-CUSTOMER-GAP-05-SOURCE_INCOMPLETE | GB-CI-05 | SYN-CUSTOMER-GAP-05 | NOT_TESTABLE | SOURCE_INCOMPLETE | ER-2972d117c10fbcb2, ER-04ad60ebdcb5b32a, ER-6afcc6ad980f8125 | 3c2f9478ecc4ddad13adeb1c75de7b0889ab7b772432be98392c121756990bb2, bbc6926be499f44266314118139cdce525931ee8b177849a4e2cfb202f847288 | 9b6ac41e9977c85ee5f8736a13d2a203c7baf9708de5876e5b0f15d5aff69f7f | 02a225a153e2e04d827b38d50d3fa0d3f2e9cb6cbc0ff3e760b109c3cd649c71 |
| F-GB-CI-05-SYN-CUSTOMER-NA-001-NOT_APPLICABLE | GB-CI-05 | SYN-CUSTOMER-NA-001 | NOT_APPLICABLE | NOT_APPLICABLE | ER-fc63e54c04c40165, ER-2972d117c10fbcb2, ER-04ad60ebdcb5b32a, ER-6afcc6ad980f8125 | 3c2f9478ecc4ddad13adeb1c75de7b0889ab7b772432be98392c121756990bb2, bbc6926be499f44266314118139cdce525931ee8b177849a4e2cfb202f847288 | 9b6ac41e9977c85ee5f8736a13d2a203c7baf9708de5876e5b0f15d5aff69f7f | 02a225a153e2e04d827b38d50d3fa0d3f2e9cb6cbc0ff3e760b109c3cd649c71 |
| F-GB-CI-05-SYN-CUSTOMER-PASS-05-AUTOMATED_ACTION_EVIDENCED | GB-CI-05 | SYN-CUSTOMER-PASS-05 | PASS | AUTOMATED_ACTION_EVIDENCED | ER-fc63e54c04c40165, ER-2972d117c10fbcb2, ER-04ad60ebdcb5b32a, ER-6afcc6ad980f8125 | 3c2f9478ecc4ddad13adeb1c75de7b0889ab7b772432be98392c121756990bb2, bbc6926be499f44266314118139cdce525931ee8b177849a4e2cfb202f847288 | 9b6ac41e9977c85ee5f8736a13d2a203c7baf9708de5876e5b0f15d5aff69f7f | 02a225a153e2e04d827b38d50d3fa0d3f2e9cb6cbc0ff3e760b109c3cd649c71 |
| F-GB-CI-06-SYN-CUSTOMER-FAIL-06-MANUAL_REVIEW_ABSENT | GB-CI-06 | SYN-CUSTOMER-FAIL-06 | FAIL | MANUAL_REVIEW_ABSENT | ER-fc63e54c04c40165, ER-2972d117c10fbcb2, ER-6afcc6ad980f8125 | 3c2f9478ecc4ddad13adeb1c75de7b0889ab7b772432be98392c121756990bb2, bbc6926be499f44266314118139cdce525931ee8b177849a4e2cfb202f847288 | 9b6ac41e9977c85ee5f8736a13d2a203c7baf9708de5876e5b0f15d5aff69f7f | 02a225a153e2e04d827b38d50d3fa0d3f2e9cb6cbc0ff3e760b109c3cd649c71 |
| F-GB-CI-06-SYN-CUSTOMER-PASS-06-MANUAL_REVIEW_EVIDENCED | GB-CI-06 | SYN-CUSTOMER-PASS-06 | PASS | MANUAL_REVIEW_EVIDENCED | ER-fc63e54c04c40165, ER-2972d117c10fbcb2, ER-04ad60ebdcb5b32a, ER-6afcc6ad980f8125 | 3c2f9478ecc4ddad13adeb1c75de7b0889ab7b772432be98392c121756990bb2, bbc6926be499f44266314118139cdce525931ee8b177849a4e2cfb202f847288 | 9b6ac41e9977c85ee5f8736a13d2a203c7baf9708de5876e5b0f15d5aff69f7f | 02a225a153e2e04d827b38d50d3fa0d3f2e9cb6cbc0ff3e760b109c3cd649c71 |
| F-GB-CI-07-SYN-CUSTOMER-GAP-07-OUTCOME_SOURCE_INCOMPLETE | GB-CI-07 | SYN-CUSTOMER-GAP-07 | NOT_TESTABLE | OUTCOME_SOURCE_INCOMPLETE | ER-fc63e54c04c40165, ER-04ad60ebdcb5b32a, ER-6afcc6ad980f8125 | 128c7a71211426464ab8b9786f10dde87970fd3cd5f7390052aee77fc1d2e4e9, 99fecbaf3c1a81aaa2311abe1214850734f40b07f395e4a2b5cc68b073884c9a | 9b6ac41e9977c85ee5f8736a13d2a203c7baf9708de5876e5b0f15d5aff69f7f | 02a225a153e2e04d827b38d50d3fa0d3f2e9cb6cbc0ff3e760b109c3cd649c71 |
Exception register
| Exception | Finding | Control | Subject | Public verdict | Reason | Event/time interval | Expected event | Observed event | Evidence | Missing/contradicted evidence | Authority/control version |
|---|---|---|---|---|---|---|---|---|---|---|---|
| E-F-GB-CI-05-SYN-CUSTOMER-FAIL-05-AUTOMATED_ACTION_ABSENT | F-GB-CI-05-SYN-CUSTOMER-FAIL-05-AUTOMATED_ACTION_ABSENT | GB-CI-05 | SYN-CUSTOMER-FAIL-05 | FAIL | AUTOMATED_ACTION_ABSENT | not present in persisted findings | AUTOMATED_PROTECTIVE_ACTION | not present in persisted findings | ER-2972d117c10fbcb2, ER-04ad60ebdcb5b32a, ER-6afcc6ad980f8125 | not indicated | b0c75869add4b24a1b3ec6806f425013911f40592bdd94b1aafc050c2bd41336; 3c2f9478ecc4ddad13adeb1c75de7b0889ab7b772432be98392c121756990bb2, bbc6926be499f44266314118139cdce525931ee8b177849a4e2cfb202f847288 |
| E-F-GB-CI-05-SYN-CUSTOMER-GAP-05-SOURCE_INCOMPLETE | F-GB-CI-05-SYN-CUSTOMER-GAP-05-SOURCE_INCOMPLETE | GB-CI-05 | SYN-CUSTOMER-GAP-05 | NOT_TESTABLE | SOURCE_INCOMPLETE | not present in persisted findings | AUTOMATED_PROTECTIVE_ACTION | not present in persisted findings | ER-2972d117c10fbcb2, ER-04ad60ebdcb5b32a, ER-6afcc6ad980f8125 | INSUFFICIENT | b0c75869add4b24a1b3ec6806f425013911f40592bdd94b1aafc050c2bd41336; 3c2f9478ecc4ddad13adeb1c75de7b0889ab7b772432be98392c121756990bb2, bbc6926be499f44266314118139cdce525931ee8b177849a4e2cfb202f847288 |
| E-F-GB-CI-05-SYN-CUSTOMER-NA-001-NOT_APPLICABLE | F-GB-CI-05-SYN-CUSTOMER-NA-001-NOT_APPLICABLE | GB-CI-05 | SYN-CUSTOMER-NA-001 | NOT_APPLICABLE | NOT_APPLICABLE | not present in persisted findings | AUTOMATED_PROTECTIVE_ACTION | action-001 | ER-fc63e54c04c40165, ER-2972d117c10fbcb2, ER-04ad60ebdcb5b32a, ER-6afcc6ad980f8125 | UNRESOLVED | b0c75869add4b24a1b3ec6806f425013911f40592bdd94b1aafc050c2bd41336; 3c2f9478ecc4ddad13adeb1c75de7b0889ab7b772432be98392c121756990bb2, bbc6926be499f44266314118139cdce525931ee8b177849a4e2cfb202f847288 |
| E-F-GB-CI-06-SYN-CUSTOMER-FAIL-06-MANUAL_REVIEW_ABSENT | F-GB-CI-06-SYN-CUSTOMER-FAIL-06-MANUAL_REVIEW_ABSENT | GB-CI-06 | SYN-CUSTOMER-FAIL-06 | FAIL | MANUAL_REVIEW_ABSENT | not present in persisted findings | INDIVIDUAL_MANUAL_REVIEW | not present in persisted findings | ER-fc63e54c04c40165, ER-2972d117c10fbcb2, ER-6afcc6ad980f8125 | not indicated | 2074e5bd06d3daefae8af57b4e1873e1e70d2ce5ec7dedace15b025977186f61; 3c2f9478ecc4ddad13adeb1c75de7b0889ab7b772432be98392c121756990bb2, bbc6926be499f44266314118139cdce525931ee8b177849a4e2cfb202f847288 |
| E-F-GB-CI-07-SYN-CUSTOMER-GAP-07-OUTCOME_SOURCE_INCOMPLETE | F-GB-CI-07-SYN-CUSTOMER-GAP-07-OUTCOME_SOURCE_INCOMPLETE | GB-CI-07 | SYN-CUSTOMER-GAP-07 | NOT_TESTABLE | OUTCOME_SOURCE_INCOMPLETE | not present in persisted findings | OUTCOME_EVALUATION | not present in persisted findings | ER-fc63e54c04c40165, ER-04ad60ebdcb5b32a, ER-6afcc6ad980f8125 | INSUFFICIENT | 32219bb9dbeded3bdcc54d37fa8bb773c48a69c54bcbe4975cc4dfb9ad55a459; 128c7a71211426464ab8b9786f10dde87970fd3cd5f7390052aee77fc1d2e4e9, 99fecbaf3c1a81aaa2311abe1214850734f40b07f395e4a2b5cc68b073884c9a |
Methodology & limitations
Deterministic verdict engine version: R2-report-v1; R2-renderer-v1.
This assessment is limited to the controls actually implemented and tested on this run. The report does not infer compliance outside the tested scope.
Source data quality and coverage limit conclusions. The operator remains responsible for regulatory compliance and submissions.
Authority version, date and applicability are part of the run provenance. Any AI-generated explanation is explanatory only and cannot change verdicts.
Ingestion accounting
Ingestion accounting was not bound to this report model.
Source completeness declarations
| Source system | Status | Assessed window | Reason codes |
|---|---|---|---|
| action-log | PARTIAL | 2026-04-01T00:00:00.000Z → 2026-06-30T23:59:59.999Z | SYNTHETIC_INCOMPLETE_SOURCE |
| action-log | COMPLETE | 2026-04-01T00:00:00.000Z → 2026-06-30T23:59:59.999Z | none |
| outcome-log | PARTIAL | 2026-04-01T00:00:00.000Z → 2026-06-30T23:59:59.999Z | SYNTHETIC_INCOMPLETE_SOURCE |
| outcome-log | COMPLETE | 2026-04-01T00:00:00.000Z → 2026-06-30T23:59:59.999Z | none |
| review-log | COMPLETE | 2026-04-01T00:00:00.000Z → 2026-06-30T23:59:59.999Z | none |
| risk-engine | COMPLETE | 2026-04-01T00:00:00.000Z → 2026-06-30T23:59:59.999Z | none |
Material limitations on this run
- Source system action-log is declared PARTIAL for 2026-04-01T00:00:00.000Z → 2026-06-30T23:59:59.999Z. reason codes: SYNTHETIC_INCOMPLETE_SOURCE
- Source system outcome-log is declared PARTIAL for 2026-04-01T00:00:00.000Z → 2026-06-30T23:59:59.999Z. reason codes: SYNTHETIC_INCOMPLETE_SOURCE
Independent regulatory assurance analysis — not a regulator certificate or legal opinion.
Evidence and provenance appendix
Stable mapping for every finding: finding_id → control_id → authority_id/hash → policy/parameter provenance → evidence IDs/hashes → evaluator/methodology version → verdict/reason code. Reconstruct from the Evidence Pack index and the immutable R1 results. Absence of evidence is not evidence of absence. Report conclusions are limited to implemented controls and governed evidence.