View as
Back to REPAIR-001 case
Governance trace · REPAIR-001Agent-readable
Every decision on this payment, traced to source.
What VECTOR proposed, what the control plane decided, where a human was required, and where an injection was contained — the complete, independent record for case REPAIR-001.
REPAIR-001 · Cross-Border Repair
Receipt chain
10 receipts
SHA-256 chained
Ed25519 signed
Chain intact · verified
Debtor
Thames Logistics Ltd
Creditor
Sundar Components Pvt Ltd
Amount
£48,500 → INR
Corridor
London → Mumbai
Message
pacs.008
Overall verdict
WARN
Receipt chainREPAIR-001 · 10 receipts · in flight
01
Exception · sealed SENTINEL
Pass
Surfaced and ranked REPAIR-001 from the exceptions queue; stage sealed and handed to REPAIR.
queue-triagesig ✓07e9…47f2
02
Repair · invoke VECTOR
Pass
Agent invoked under a scoped principal — propose-only capability. No write path to the payment hub. Prior receipts verified — chain integrity intact.
ADR-001 · principalsig ✓b08b…9595
03
Repair · propose VECTOR
Pass
Diagnosed missing creditor-agent BIC. Proposed CdtrAgt.BICFIHDFCINBBXXX.
iso20022-cbprconf 0.97sig ✓bf81…afcb
04
Repair · apply CONTROL PLANE
Auto-apply
BIC fix sits inside the mutable-field allowlist → applied by the policy engine. The agent never wrote; the control plane did.
swift-sr-2026allow: BICFIsig ✓bf81…afcb
05
Repair · propose VECTOR
Pass
Free-text creditor address parsed and normalised. Proposed Cdtr.PstlAdrstructured (Mumbai, IN).
swift-sr-2026conf 0.94sig ✓dc0c…b9af
06
Repair · apply CONTROL PLANE
Auto-apply
Structured-address normalisation applied. stp_eligible_after_repair recomputed → trending true.
iso20022-cbprsig ✓dc0c…b9af
07
Repair · propose VECTOR
Warn
Inferred missing regulatory purpose code. Proposed Purp.CdP0102 — confidence below the auto-apply threshold.
fema-rbiconf 0.78 < 0.80sig ✓ccf4…f048
08
Repair · gate CONTROL PLANE
Pending
Purpose-code proposal below threshold → escalated, not applied. Held for human disposition.
ASAwaiting sign-off · A. Shah (L1 Payments Investigator)
fema-rbithreshold-gatesig ✓ccf4…f048
09
Security · contain CONTROL PLANE
Block
Instruction-like text in RmtInf.Ustrd attempting to redirect the beneficiary. Treated strictly as data, never executed → HALT_AND_LOG.
Injection contained · no action taken · sealed as a security event
least-privilegeINJECTION_SUSPECTEDsig ✓c71d…c4b6
10
Screen → Release ATLAS · THEMIS
Queued
Re-screen of the repaired payment (OFAC/OFSI) and controller release gate for restricted fields — queued, awaiting the L1 disposition above.
ofac-ofsiwolfsberg-cbpchain tip · open
Human sign-offs to date
AS
Aarav Shah
L1 Payments Investigator
Owes: P0102 purpose-code disposition
LF
Lena Fischer
L2 Repair Lead
Signed: VECTOR diagnosis reviewed
JW
James Whitfield
Payments Controller · Release Authority
Queued: restricted-field release gate
Policy weights applied
ALLOW · BICFIALLOW · PstlAdrGATE · Purp.CdGATE · AmountGATE · CdtrAcct
Framework parity
ISO 20022 CBPR+SWIFT SR 2026FATF Recommendation 16FEMA / RBIOFAC / UK OFSI
Policy weights
6
Pass
2
Warn
1
Block
What this proves

The agent proposes; only the control plane writes. Safe fixes auto-apply, a low-confidence call is held for a named human, and an injection is contained — each step signed and chained. A compromised agent still can’t exceed its mandate.