Governance Architecture
Who decides, who can change how decisions are made, and how those changes are controlled and recorded.
Keeps final authority over approval, decline, step-up and review. QUORUM returns a verdict and its evidence; the institution's systems act on it.
Produces the real-time verdict from the institution's own rules combined with a behavioural score. Deterministic for a given rule set and input.
Analyse cases asynchronously and propose rules. Their output is evidence for analysts; they cannot issue a verdict or change a rule.
When transaction facts are supplied, the score is 60% behavioural and 40% rules; if either part alone reaches 70, the verdict is at least ELEVATED_RISK.
New and AI-proposed rules run in shadow mode and record how they would have performed. They do not affect verdicts.
An operator approves or rejects the shadow rule after reviewing its record.
Promotion needs the security_admin role, WebAuthn step-up and a FROST threshold approval naming that rule, usable once.
The change is written to the signed audit ledger.
Requires a FROST threshold approval.
Per-institution blocks and unblocks are written to the ledger.
A security_admin can route a flagged console account to decoys for 1–168 hours. Changes are audited; API traffic and decisions are never affected.