{"txn_id":"SR-UW-0691","assessment_id":"ra_fcbabedf4ccc4d3a","occurred_at":"2026-09-03T10:14:57+00:00","state":"CT","line_of_business":"life","stage":"underwriting","program_area":"Underwriting/Eligibility","ai_system":{"system_id":"rx-score","model_version":"3","vendor":"third_party","vendor_name":"RxData Labs (fictional)","high_risk_class":"underwriting"},"inputs":{"feature_classes":["rx_history","credit","consumer_report","application_data"],"protected_factors_used":[],"ecdis_present":false,"consumer_report_used":true,"credit_used":true,"data_source_refs":["vendor://rxdata/score","cra://demo-bureau/attributes"],"consumer_token":"tok_b977be31d9"},"output":{"decision":"decline","score":0.886,"reason_codes":["RX4","CR2"],"premium_delta_pct":null},"human_involvement":{"reviewed":false,"reviewer_role":"underwriter","overridden":false},"adverse_action":{"is_adverse":true,"notice_sent_at":"2026-09-09T10:14:57+00:00","reasons_provided":true,"specific_reasons":true,"ecdis_disclosed":false,"appeal_channel":null},"carrier_note":null,"input":{"revision":1,"current_revision":1,"input_digest":"d2adc5ac2a2db0a1bdbbc87b6ad9fa6787c94120d9b3e9cf4a2bf209b1b4a8e5","digest_ok":true,"note":"input_digest is SHA-256 over the canonical JSON of the transaction revision assessed; it is inside the assessment the ledger hashes."},"assessment":{"disposition":"FLAG","coverage":{"status":"supported","state_rules_applied":3,"general_rules_applied":2,"advisory_rules_applied":3,"rules_considered":30,"rules_applied":["doctrine.unreviewed-adverse-high-risk","doctrine.zip-credit-interaction-proxy","us.fcra.adverse-action-notice","us.fcra.permissible-purpose-undocumented","naic.ais-program.third-party-diligence","naic.ais-program.documentation","naic.adverse-outcome-testing","precedent.ai-flagged-cancellation-without-notice"],"statement":"3 state-specific and 2 general black-letter rule(s) applied to this CT life underwriting transaction. Only the configured checks were run; a result is not a legal opinion on compliance."},"evidence":{"status":"missing","asserted":["inputs.data_source_refs"],"missing":["ai_system.governance_attested","ai_system.model_doc_ref","ai_system.testing_report_ref"],"statement":"Missing evidence: ai_system.governance_attested, ai_system.model_doc_ref, ai_system.testing_report_ref. Supplied but unverified: inputs.data_source_refs."},"summary":"FLAG: 4 finding(s) under rules 2026.10+c4982313, corpus 2026-10-30-9c5dad5a. Routed to the carrier's compliance reviewer with cited findings.","narrative":"On 2026-09-03, rx-score v3 (a third-party system from RxData Labs (fictional)) produced 'decline' in a CT life underwriting transaction. Inputs included rx history, credit, consumer report, application data. A consumer report was used. No human reviewed the output before it took effect. The outcome was adverse to the consumer; a notice was sent on 2026-09-09 with specific reasons. RegBench applied 8 rule(s) in force on 2026-09-03 and recorded 4 finding(s); the most serious is 'Adverse high-risk decision from a system with no adverse-outcome testing on record' (medium, L1).","findings":[{"rule_id":"naic.adverse-outcome-testing","layer":"L1","judgment_basis":"guidance","advisory":false,"severity":"medium","title":"Adverse high-risk decision from a system with no adverse-outcome testing on record","required_action":"Attach the system's latest testing report reference (errors, bias, unfair discrimination, drift).","exhibits":["C"],"content_status":"verified","citations":[{"provision_id":"naic-ai-bulletin-s3-1-ais-program","label":"NAIC Model Bulletin on the Use of AI Systems by Insurers (adopted 4 Dec 2023), Section 3, 1.0 General Guidelines — the written AIS Program","source_url":"https://content.naic.org/sites/default/files/inline-files/2023-12-4%20Model%20Bulletin_Adopted_0.pdf","verified":true},{"provision_id":"naic-ai-bulletin-s4-oversight","label":"NAIC Model Bulletin (2023), Section 4 — Regulatory Oversight and Examination Considerations","source_url":"https://content.naic.org/sites/default/files/inline-files/2023-12-4%20Model%20Bulletin_Adopted_0.pdf","verified":true}]},{"rule_id":"naic.ais-program.third-party-diligence","layer":"L1","judgment_basis":"guidance","advisory":false,"severity":"medium","title":"Third-party AI system without an attested due-diligence and contract record","required_action":"Attach the vendor due-diligence record and contract terms (audit rights, regulatory cooperation) to the system's inventory entry and attest governance coverage.","exhibits":["A","C"],"content_status":"verified","citations":[{"provision_id":"naic-ai-bulletin-s3-4-third-party","label":"NAIC Model Bulletin (2023), Section 3, 4.0 Third-Party AI Systems and Data","source_url":"https://content.naic.org/sites/default/files/inline-files/2023-12-4%20Model%20Bulletin_Adopted_0.pdf","verified":true},{"provision_id":"naic-ai-bulletin-s4-oversight","label":"NAIC Model Bulletin (2023), Section 4 — Regulatory Oversight and Examination Considerations","source_url":"https://content.naic.org/sites/default/files/inline-files/2023-12-4%20Model%20Bulletin_Adopted_0.pdf","verified":true}]},{"rule_id":"doctrine.unreviewed-adverse-high-risk","layer":"L6","judgment_basis":"doctrine","advisory":true,"severity":"medium","title":"Adverse outcome from a high-risk AI system with no human review","required_action":"Route to the carrier's reviewer; record the review and any override on the transaction.","exhibits":["B","C"],"content_status":"verified","citations":[{"provision_id":"naic-ai-bulletin-s3-1-ais-program","label":"NAIC Model Bulletin on the Use of AI Systems by Insurers (adopted 4 Dec 2023), Section 3, 1.0 General Guidelines — the written AIS Program","source_url":"https://content.naic.org/sites/default/files/inline-files/2023-12-4%20Model%20Bulletin_Adopted_0.pdf","verified":true}]},{"rule_id":"naic.ais-program.documentation","layer":"L1","judgment_basis":"guidance","advisory":false,"severity":"low","title":"High-risk AI system with no model documentation reference","required_action":"Link the system to its model documentation (purpose, inputs, validation, monitoring) in the inventory.","exhibits":["A","C"],"content_status":"verified","citations":[{"provision_id":"naic-ai-bulletin-s4-oversight","label":"NAIC Model Bulletin (2023), Section 4 — Regulatory Oversight and Examination Considerations","source_url":"https://content.naic.org/sites/default/files/inline-files/2023-12-4%20Model%20Bulletin_Adopted_0.pdf","verified":true},{"provision_id":"naic-ai-bulletin-s3-1-ais-program","label":"NAIC Model Bulletin on the Use of AI Systems by Insurers (adopted 4 Dec 2023), Section 3, 1.0 General Guidelines — the written AIS Program","source_url":"https://content.naic.org/sites/default/files/inline-files/2023-12-4%20Model%20Bulletin_Adopted_0.pdf","verified":true}]}],"point_in_time":{"as_of":"2026-09-03","basis":"transaction_date","rules_version":"2026.10+c4982313","corpus_snapshot":"2026-10-30-9c5dad5a","engine_version":"regbench-engine/0.5.0","model_version":"deterministic-1"},"evaluated_at":"2026-10-31T05:42:54.685136+00:00","fingerprint":"e9728f4ab491fbb01bea8d5e"},"review":{"status":"resolved","outcome":"confirmed-no-change","hours_to_resolve":27.6,"reviewer_role":"underwriter","resolved_at":"2026-09-04T13:55:40.811109+00:00"},"ledger":{"seq":6194,"hash":"1e7c699d4c4dc44ac71ca04f0acf1c08d4ca6a79e4a1f03e3a5ec3626f23b033","prev_hash":"f7eb972f6f6bf4df1cc7bd0f997ca1c60889125fe9e718d7d23638126514db3e","recorded_at":"2026-09-03T10:18:00+00:00"}}