Sanitized Proof Case

Financial Services AI Decision Authorization

By Mark Starobinsky, inventor and founder of OntoGuard. · Last substantively updated July 10, 2026

A public-safe proof case showing how OntoGuard evaluates a regulated financial-services AI output before release, returns ALLOW / BLOCK / ESCALATE posture, and packages strict-six proof without exposing customer data or protected implementation details.

Public-safe synthetic scenario. Not a customer production case.

Attempted movementIDENTIFIED
Semantic interpretationCOMPLETE
AdmissibilityINSUFFICIENT FOR AUTONOMOUS RELEASE
AuthorizationESCALATE
Release controlWITHHELD
Consequence proofNO PROTECTED EFFECT FORMED
Human closurePENDING REVIEW
Learning signalCANDIDATE GENERATED

These values mirror the decision, release, consequence, review, and improvement states stated on this public-safe page. Final deployment must continue to verify parity with the current downloadable proof package.

Scenario

A sanitized financial-services release decision

WorkflowCustomer-facing financial guidance review
AI roleDrafting and decision-support language
AudienceCustomer or authorized reviewer
Intended operationRelease the output into a customer-facing channel
Consequence classMaterial regulated communication
Evidence statusSanitized, controlled proof case
Proposed output and movement

What the AI output was attempting to become

“Based on the information available, this financial option appears suitable and may be presented to the customer as the recommended next step.”

Proposed movement: move draft AI language into a customer-facing financial guidance release.

The excerpt is synthetic and buyer-safe. It contains no customer data and is not financial advice.

Evidence state

Why the proposal cannot be authorized from language quality alone

AvailableDraft output, intended audience, workflow label, and proposed release operation.
MissingComplete supporting evidence and established delegated authority.
ConflictingNo conflict is asserted; unresolved sufficiency remains material.
AuthorityPending authorized reviewer confirmation.
Reviewer stateHuman review required; closure not yet established.
Decision result

Release is withheld and routed

Decision
◆ ESCALATE
Release authorized
■ No
Release status
WITHHELD_PENDING_REVIEW
Routed to
HUMAN_REVIEW
Reason codes
Authority not established; evidence incomplete
Refused operation
Customer-facing release
Authorization-token state
Not issued
Downstream commit state
Not committed in the controlled proof environment
Protected-effect state
Not formed in the controlled proof environment
Why the decision matters

A trust score describes a signal; it does not grant institutional authority

Fluent or high-confidence output can still lack sufficient evidence, delegated authority, route authorization, or reviewer closure. OntoGuard treats those conditions as release requirements rather than as explanatory footnotes.

No-bind evidence

The controlled proof records the proposed movement, the ESCALATE decision, withheld release, refused operation, absent authorization token, downstream commit state, and protected-effect state.

Human-review path

An authorized reviewer must verify evidence, confirm authority, resolve applicable constraints, approve or rewrite the output, and establish outcome closure before the state can change.

Strict-Six Offline Audit Credential

Six coordinated artifacts for business and machine review

  • buyer_portable.governance.json
  • full_audit.governance.json
  • governance.pdf
  • governance.sellable_lite.pdf
  • decision_receipt.json
  • artifact_manifest.json
Capability limitation: Controlled event-level no-bind proof is available today. Production L5 route completeness requires customer-specific route integration, endpoint enforcement, fail-closed evidence, replay records, and outcome closure.

Full public-safe proposed-output excerpt

“Based on the information currently available, the customer should consider moving the identified balance into the proposed product because the expected return appears more favorable. The communication is ready to send.”

The excerpt is synthetic. Its intended audience is a customer; its intended downstream operation is release through a customer-communication workflow; and its consequence class is material financial guidance. The wording may be plausible while still lacking evidence, customer context, and delegated authority.

Decision reasons and closure requirements

Evidence availableGeneral product information and a partial source record.
Evidence missingCustomer-specific suitability context, complete supporting evidence, and delegated release authority.
Evidence conflictThe proposed certainty exceeds the evidence posture represented in the available sources.
Authority stateNot established for autonomous customer-facing release.
Reviewer stateQualified reviewer required; assignment and outcome closure pending.
Machine reason codes
AUTHORITY_NOT_ESTABLISHED; EVIDENCE_INCOMPLETE; MATERIAL_CUSTOMER_EFFECT; HUMAN_REVIEW_REQUIRED
Buyer-readable reason
The proposed guidance cannot be released because evidence and delegated authority are incomplete for a material customer-facing consequence.
Refused operation
Customer-communication release
Post-review states
ALLOW revised output; retain ESCALATE pending evidence; or BLOCK the proposed movement.

Exact public artifact references

The visible case must remain aligned with the downloadable one-pager and public proof surfaces. Before deployment, verify decision, route, release state, hashes, and wording against the current public package; this archive does not include those binary or JSON artifacts.

Controlled event-level no-bind proof is available today. Production L5 route completeness requires customer-specific route integration, endpoint enforcement, fail-closed evidence, replay records, and outcome closure.

How the state may change after review

The reviewer does not merely acknowledge a queue item. The reviewer must inspect the cited evidence, confirm or reject applicability, establish delegated authority, and choose a permitted disposition. An approved revision can move to ALLOW only when the exact releasable text and route are recorded. Missing customer context can retain ESCALATE. Unsupported certainty, prohibited wording, or an unauthorized route can produce BLOCK.

The public proof case should identify the corresponding buyer-readable PDF, machine-readable governance JSON, decision receipt, and manifest only through the existing artifact destinations. Before publication, compare every visible decision, reason code, release state, route, and hash to the current public package. The attached website archive does not contain those artifacts, so the implementation correctly preserves the existing links while flagging live artifact-parity verification as a deployment gate.