01 · Authority
Can each material agent action be traced to a grant from an accountable human or governing body?
For Gulf financial institutions
Turn central-bank AI expectations into an evidence-ready control programme.
CBUAE consumer protection, model management and cross-border delivery. Start with the diagnostic: no email, no organisation name, and a forwardable result.
02 · Enforcement
Can policy refuse the action before it lands, or does monitoring discover the problem afterward?
03 · Evidence
Can a reviewer reconstruct the authority, policy, inputs and versions months later?