{"txn_id":"BB-RNW-0275","assessment_id":"ra_7849dcce9c424055","occurred_at":"2026-10-24T05:59:30+00:00","state":"CO","line_of_business":"auto","stage":"renewal","program_area":"Ratemaking/Rate Classification/Schedule Rating/Premium Audits","ai_system":{"system_id":"price-opt","model_version":"7.2","vendor":"internal","vendor_name":null,"high_risk_class":"pricing"},"inputs":{"feature_classes":["telematics","credit","geography","vehicle","claims_history"],"protected_factors_used":[],"ecdis_present":true,"consumer_report_used":false,"credit_used":true,"data_source_refs":["cra://demo-bureau/score","telematics://bluebonnet/program"],"consumer_token":"tok_7ba819f7ac"},"output":{"decision":"rate","score":0.597,"reason_codes":[],"premium_delta_pct":10.5},"human_involvement":{"reviewed":true,"reviewer_role":"underwriter","overridden":false},"adverse_action":{"is_adverse":true,"notice_sent_at":"2026-10-27T05:59:30+00:00","reasons_provided":true,"specific_reasons":false,"ecdis_disclosed":true,"appeal_channel":null},"carrier_note":null,"input":{"revision":1,"current_revision":1,"input_digest":"586e547cb17b4cbb920dbab963506a7541693b1d4d9b9b9ed42fbe077615a929","digest_ok":true,"note":"input_digest is SHA-256 over the canonical JSON of the transaction revision assessed; it is inside the assessment the ledger hashes."},"assessment":{"disposition":"FLAG","coverage":{"status":"supported","state_rules_applied":4,"general_rules_applied":2,"advisory_rules_applied":4,"rules_considered":30,"rules_applied":["co.sb169.ecdis-adverse-untested","co.reg-10-1-1.governance-framework-amended","co.reg-10-1-1.vendor-ecdis-documentation","co.reg-10-1-1.monitoring-undocumented","doctrine.co.vendor-rx-score-is-ecdis","doctrine.unreviewed-adverse-high-risk","doctrine.zip-credit-interaction-proxy","us.fcra.adverse-action-notice","us.fcra.permissible-purpose-undocumented","precedent.ai-flagged-cancellation-without-notice"],"statement":"4 state-specific and 2 general black-letter rule(s) applied to this CO auto renewal transaction. Only the configured checks were run; a result is not a legal opinion on compliance."},"evidence":{"status":"missing","asserted":["ai_system.model_doc_ref","ai_system.testing_report_ref","inputs.data_source_refs"],"missing":["ai_system.governance_attested"],"statement":"Missing evidence: ai_system.governance_attested. Supplied but unverified: ai_system.model_doc_ref, ai_system.testing_report_ref, inputs.data_source_refs."},"summary":"FLAG: 2 finding(s) under rules 2026.10+c4982313, corpus 2026-10-30-9c5dad5a. Routed to the carrier's compliance reviewer with cited findings.","narrative":"On 2026-10-24, price-opt v7.2 (an internally developed system) produced 'rate' in a CO auto renewal transaction. Inputs included telematics, credit, geography, vehicle, claims history. External consumer data and information sources were present. A human reviewed the output by a underwriter. The outcome was adverse to the consumer; a notice was sent on 2026-10-27 with reasons stated. RegBench applied 10 rule(s) in force on 2026-10-24 and recorded 2 finding(s); the most serious is 'ECDIS used outside an attested governance and risk management framework (amended Regulation 10-1-1)' (medium, L3).","findings":[{"rule_id":"co.reg-10-1-1.governance-framework-amended","layer":"L3","judgment_basis":"black_letter","advisory":false,"severity":"medium","title":"ECDIS used outside an attested governance and risk management framework (amended Regulation 10-1-1)","required_action":"Add the system to the Regulation 10-1-1 inventory, attest framework coverage, and include it in the next annual report filed through SERFF.","exhibits":["A","B"],"content_status":"verified","citations":[{"provision_id":"co-reg-10-1-1-s5","label":"3 CCR 702-10, Regulation 10-1-1 (amended, effective 15 Oct 2025), § 5.A — governance and risk management framework (life, private passenger auto, health benefit plans)","source_url":"https://www.sos.state.co.us/CCR/GenerateRulePdf.do?ruleVersionId=12182","verified":true},{"provision_id":"co-reg-10-1-1-s6","label":"3 CCR 702-10, Regulation 10-1-1 (amended), § 6 — reporting requirements and officer attestation","source_url":"https://www.sos.state.co.us/CCR/GenerateRulePdf.do?ruleVersionId=12182","verified":true}]},{"rule_id":"doctrine.zip-credit-interaction-proxy","layer":"L6","judgment_basis":"doctrine","advisory":true,"severity":"medium","title":"Geography and credit used together in an adverse decision (proxy pattern to test at portfolio level)","required_action":"Confirm the system's portfolio outcome testing covers the geography-credit interaction; link the result.","exhibits":["C"],"content_status":"verified","citations":[{"provision_id":"naic-ai-bulletin-s3-1-ais-program","label":"NAIC Model Bulletin on the Use of AI Systems by Insurers (adopted 4 Dec 2023), Section 3, 1.0 General Guidelines — the written AIS Program","source_url":"https://content.naic.org/sites/default/files/inline-files/2023-12-4%20Model%20Bulletin_Adopted_0.pdf","verified":true}]}],"point_in_time":{"as_of":"2026-10-24","basis":"transaction_date","rules_version":"2026.10+c4982313","corpus_snapshot":"2026-10-30-9c5dad5a","engine_version":"regbench-engine/0.5.0","model_version":"deterministic-1"},"evaluated_at":"2026-10-31T05:42:53.400860+00:00","fingerprint":"b78597c2ad50f33d71eb38a0"},"review":{"status":"resolved","outcome":"confirmed-no-change","hours_to_resolve":11.5,"reviewer_role":"compliance","resolved_at":"2026-10-24T17:33:48.555228+00:00"},"ledger":{"seq":5778,"hash":"77138e2e3dda20142036c9177d689448c22d90779154890f4c5e394ab386d006","prev_hash":"fe46125505f91e1fef0210b7c19376326aa1b54ca57b52e2d5e616e5a64a0f1f","recorded_at":"2026-10-24T06:02:25+00:00"}}