{"txn_id":"SR-UW-0632","assessment_id":"ra_5193692677c6442f","occurred_at":"2026-10-27T14:33:11+00:00","state":"CO","line_of_business":"life","stage":"underwriting","program_area":"Underwriting/Eligibility","ai_system":{"system_id":"rx-score","model_version":"3","vendor":"third_party","vendor_name":"RxData Labs (fictional)","high_risk_class":"underwriting"},"inputs":{"feature_classes":["rx_history","credit","consumer_report","application_data"],"protected_factors_used":[],"ecdis_present":true,"consumer_report_used":true,"credit_used":true,"data_source_refs":["vendor://rxdata/score","cra://demo-bureau/attributes"],"consumer_token":"tok_a92b96158d"},"output":{"decision":"approve","score":0.096,"reason_codes":[],"premium_delta_pct":null},"human_involvement":{"reviewed":true,"reviewer_role":"underwriter","overridden":false},"adverse_action":{"is_adverse":false,"notice_sent_at":null,"reasons_provided":false,"specific_reasons":false,"ecdis_disclosed":false,"appeal_channel":null},"carrier_note":null,"input":{"revision":1,"current_revision":1,"input_digest":"14c6d072e313240f1c1332165743d6246888cc535cda6da255af7c8f6b00783e","digest_ok":true,"note":"input_digest is SHA-256 over the canonical JSON of the transaction revision assessed; it is inside the assessment the ledger hashes."},"assessment":{"disposition":"FLAG","coverage":{"status":"supported","state_rules_applied":4,"general_rules_applied":2,"advisory_rules_applied":4,"rules_considered":30,"rules_applied":["co.sb169.ecdis-adverse-untested","co.reg-10-1-1.governance-framework-amended","co.reg-10-1-1.vendor-ecdis-documentation","co.reg-10-1-1.monitoring-undocumented","doctrine.co.vendor-rx-score-is-ecdis","doctrine.unreviewed-adverse-high-risk","doctrine.zip-credit-interaction-proxy","us.fcra.adverse-action-notice","us.fcra.permissible-purpose-undocumented","precedent.ai-flagged-cancellation-without-notice"],"statement":"4 state-specific and 2 general black-letter rule(s) applied to this CO life underwriting transaction. Only the configured checks were run; a result is not a legal opinion on compliance."},"evidence":{"status":"missing","asserted":["inputs.data_source_refs"],"missing":["ai_system.governance_attested","ai_system.model_doc_ref","ai_system.testing_report_ref"],"statement":"Missing evidence: ai_system.governance_attested, ai_system.model_doc_ref, ai_system.testing_report_ref. Supplied but unverified: inputs.data_source_refs."},"summary":"FLAG: 3 finding(s) under rules 2026.10+c4982313, corpus 2026-10-30-9c5dad5a. Routed to the carrier's compliance reviewer with cited findings.","narrative":"On 2026-10-27, rx-score v3 (a third-party system from RxData Labs (fictional)) produced 'approve' in a CO life underwriting transaction. Inputs included rx history, credit, consumer report, application data. External consumer data and information sources were present. A consumer report was used. A human reviewed the output by a underwriter. The outcome was not adverse to the consumer. RegBench applied 10 rule(s) in force on 2026-10-27 and recorded 3 finding(s); the most serious is 'ECDIS used outside an attested governance and risk management framework (amended Regulation 10-1-1)' (medium, L3).","findings":[{"rule_id":"co.reg-10-1-1.governance-framework-amended","layer":"L3","judgment_basis":"black_letter","advisory":false,"severity":"medium","title":"ECDIS used outside an attested governance and risk management framework (amended Regulation 10-1-1)","required_action":"Add the system to the Regulation 10-1-1 inventory, attest framework coverage, and include it in the next annual report filed through SERFF.","exhibits":["A","B"],"content_status":"verified","citations":[{"provision_id":"co-reg-10-1-1-s5","label":"3 CCR 702-10, Regulation 10-1-1 (amended, effective 15 Oct 2025), § 5.A — governance and risk management framework (life, private passenger auto, health benefit plans)","source_url":"https://www.sos.state.co.us/CCR/GenerateRulePdf.do?ruleVersionId=12182","verified":true},{"provision_id":"co-reg-10-1-1-s6","label":"3 CCR 702-10, Regulation 10-1-1 (amended), § 6 — reporting requirements and officer attestation","source_url":"https://www.sos.state.co.us/CCR/GenerateRulePdf.do?ruleVersionId=12182","verified":true}]},{"rule_id":"co.reg-10-1-1.vendor-ecdis-documentation","layer":"L3","judgment_basis":"black_letter","advisory":false,"severity":"medium","title":"Third-party ECDIS model without documentation of purpose, inputs and vendor oversight","required_action":"Record the vendor model's documentation reference in the inventory and the vendor oversight record.","exhibits":["A","D"],"content_status":"verified","citations":[{"provision_id":"co-reg-10-1-1-s5","label":"3 CCR 702-10, Regulation 10-1-1 (amended, effective 15 Oct 2025), § 5.A — governance and risk management framework (life, private passenger auto, health benefit plans)","source_url":"https://www.sos.state.co.us/CCR/GenerateRulePdf.do?ruleVersionId=12182","verified":true},{"provision_id":"co-reg-10-1-1-s5-b-vendors","label":"3 CCR 702-10, Regulation 10-1-1 (amended), § 5.B — responsibility for vendors and external resources","source_url":"https://www.sos.state.co.us/CCR/GenerateRulePdf.do?ruleVersionId=12182","verified":true}]},{"rule_id":"co.reg-10-1-1.monitoring-undocumented","layer":"L3","judgment_basis":"black_letter","advisory":false,"severity":"low","title":"ECDIS model with no documented testing or performance monitoring reference","required_action":"Record the testing and monitoring documentation reference for the model.","exhibits":["C"],"content_status":"verified","citations":[{"provision_id":"co-reg-10-1-1-s5","label":"3 CCR 702-10, Regulation 10-1-1 (amended, effective 15 Oct 2025), § 5.A — governance and risk management framework (life, private passenger auto, health benefit plans)","source_url":"https://www.sos.state.co.us/CCR/GenerateRulePdf.do?ruleVersionId=12182","verified":true}]}],"point_in_time":{"as_of":"2026-10-27","basis":"transaction_date","rules_version":"2026.10+c4982313","corpus_snapshot":"2026-10-30-9c5dad5a","engine_version":"regbench-engine/0.5.0","model_version":"deterministic-1"},"evaluated_at":"2026-10-31T05:42:54.478400+00:00","fingerprint":"c6c90ab99aa11b0de879c63f"},"review":{"status":"open","outcome":null,"hours_to_resolve":null,"reviewer_role":null,"resolved_at":null},"ledger":{"seq":6135,"hash":"d8fff0e195e6e7ac14688e82a791bbdd11c682f16458fa8f4624aea4c92d12b4","prev_hash":"db793cf207a69575be3ad6a9dff7b0c22d057c6f5ac70fc83ea21ce99e4de94d","recorded_at":"2026-10-27T14:33:56+00:00"}}