Policy engine

Control breach heatmap

Every control in scope is evaluated against every sampled audit decision. Dark cells are controls that would be met — i.e. the condition fires and contributes to a breach on that record.

Controls in scope

35

23 policies

Sampled decisions

18

from the decision ledger

Control breach density

26%

161 of 630 evaluations met

Hot controls

7

fire on 50%+ of the sample

Sort rows by

Breach frequency by control

Click a cell for the observed signal

control met (breach contribution) clear no simulator signal
Control918442918441918440918439918438918437918436918435918434918433918432918431918430918429918428918427918426918425Rate

new source registered

KBP-005 · Knowledge base ingestion requires owner approval
100%

decision record written

POL-018 · Evidence hash anchoring on every decision
100%

actor is agent

POL-002 · No account closure without approval
78%

initiated by agent

POL-005 · High-value transaction requires human approval
78%

citation coverage < 90%

KBP-001 · Retail credit knowledge base must cite approved policy manual
56%

approval record absent

KBP-005 · Knowledge base ingestion requires owner approval
56%

turns in session > 12

POL-017 · Max agent turns per session
56%

decision = decline

POL-003 · No loan rejection without explanation
44%

reason codes missing

POL-003 · No loan rejection without explanation
44%

source document age > 180 days

KBP-003 · Stale regulatory circulars cannot ground answers
33%

requester lacks adviser entitlement

KBP-004 · Wealth knowledge base restricted to licensed advisers
33%

citation coverage < 80%

POL-011 · Narrative grounding required
28%

provider version differs from approved pin

POL-015 · Model version pinning required
28%

ingested document contains PAN / Aadhaar / account number

KBP-002 · No customer documents in the general knowledge base
17%

payload matches PAN / Aadhaar / account recognisers

POL-001 · No customer PII outside India
17%

endpoint not in sanctioned registry

POL-004 · No customer data sent to public LLM
17%

recogniser hit on stored payload

POL-006 · PII masking required
17%

output contains product recommendation

POL-012 · Suitability disclosure on advice
17%

data class = Restricted

POL-014 · Restricted payloads stay in-region
17%

customer consent = withdrawn

POL-016 · Consent withdrawal must suppress outreach
17%

output contains recommendation

POL-016 · Consent withdrawal must suppress outreach
17%

destination region ≠ ap-south-1

POL-001 · No customer PII outside India
11%

endpoint region ≠ India

POL-014 · Restricted payloads stay in-region
11%

amount > ₹10,00,000

POL-005 · High-value transaction requires human approval
6%

retrieval collection = kb/retail-credit

KBP-001 · Retail credit knowledge base must cite approved policy manual
0%

collection ≠ kb/case-files

KBP-002 · No customer documents in the general knowledge base
0%

document type = circular

KBP-003 · Stale regulatory circulars cannot ground answers
0%

collection = kb/wealth-products

KBP-004 · Wealth knowledge base restricted to licensed advisers
0%

tool = accounts.close

POL-002 · No account closure without approval
0%

prompt classified restricted-topic

POL-007 · Sensitive prompts blocked
0%

injection classifier score > 0.72

POL-008 · Prompt injection protection
0%

toxicity > 0.4 on output

POL-009 · Toxicity detection
0%

known jailbreak signature

POL-010 · Jailbreak detection
0%

role-play override attempt

POL-010 · Jailbreak detection
0%

match probability > 0.75

POL-013 · Sanctions match cannot auto-clear
0%

Most-loaded decisions

records tripping the most controls

Cell detail

selected control

Select any cell in the heatmap to see the observed signal behind that evaluation. 2 control(s) currently have no simulator signal mapped.