{
  "name": "Financial Ops Pack",
  "version": "1.0.0",
  "spec": "constitution.schema.json v0.1.0",
  "license": "Apache-2.0",
  "tagline": "Govern operational risk where work and agents actually execute.",
  "boundary_line": "EcoCloud clears governed work; your bank settles money.",
  "description": "A control preset for bank OpRisk, fintech ops, and payments-operations teams. It is a deterministic EcoCloud Agent Constitution (the eight schema-valid action-gate keys) PLUS a map of the operational-risk controls to the LIVE governance kernels that already enforce them. It is a preset wiring shipped primitives — not a new product, a certification program, or a money rail.",
  "constitution": {
    "max_priority": "high",
    "forbidden_terms": [
      "wire transfer", "move funds", "disburse", "payout", "release escrow",
      "issue credit", "custody transfer", "settle funds", "drop table",
      "delete production", "rotate prod secret"
    ],
    "forbidden_assignees": ["external-counterparty", "unverified-agent"],
    "forbidden_tags": ["funds-movement", "settlement", "kyc-exempt", "prod-secret"],
    "objective_tags": [
      "reconciliation", "control-test", "attestation", "preflight",
      "dispute-evidence", "counterparty-screening"
    ],
    "quiet_hours_utc": { "start": 22, "end": 6 },
    "max_creates_per_day": 200,
    "require_approval_below_confidence": 0.8
  },
  "controls": [
    { "n": 1, "control": "Risk & control register (RCSA): each control IS a constitution rule; a control-test IS a dry-run.", "pillar": "Identify & assess",
      "enforced_by": [ { "name": "Constitution gate", "path": "/constitution-kernel/" }, { "name": "Scenario simulation", "path": "/simulate-kernel/" }, { "name": "Dry-run preflight", "path": "/preflight-kernel/" } ] },
    { "n": 2, "control": "Four-eyes (maker–checker) + signing-limit escrow before high-impact writes execute.", "pillar": "Mitigate & enforce",
      "enforced_by": [ { "name": "Four-eyes", "path": "/foureyes-kernel/" }, { "name": "Signing-limit escrow", "path": "/escrow-kernel/" } ] },
    { "n": 3, "control": "Authority subsetting — an agent's powers are a strict subset of its sponsoring human's.", "pillar": "Mitigate & enforce",
      "enforced_by": [ { "name": "Authority subsetting", "path": "/authority-kernel/" } ] },
    { "n": 4, "control": "Counterparty gate — KYA passport status + LEI / IBAN / BIC validation + revocation hotlist before any action touches a counterparty.", "pillar": "Third-party & fraud",
      "enforced_by": [ { "name": "Know-Your-Agent", "path": "/kya-kernel/" }, { "name": "Financial identifiers", "path": "/finid-kernel/" } ] },
    { "n": 5, "control": "Egress allowlist — no governed action to a destination outside the approved set.", "pillar": "Third-party & fraud",
      "enforced_by": [ { "name": "Route guard", "path": "/route-kernel/" } ] },
    { "n": 6, "control": "Message preflight — ISO-8583 envelope shape, mandatory fields, currency and limit checks before a payload leaves the boundary.", "pillar": "Execution & process",
      "enforced_by": [ { "name": "Switch envelope (ISO-8583)", "path": "/switch-kernel/" } ] },
    { "n": 7, "control": "Dispute arbitration — reason-code taxonomy, SLA clocks, and an N-role review quorum.", "pillar": "Monitor & report",
      "enforced_by": [ { "name": "Operating regulations", "path": "/rules-kernel/" }, { "name": "Review jury", "path": "/jury-kernel/" } ] },
    { "n": 8, "control": "Reconciliation — invoice / obligation vs contract → exceptions queue + signed dispute evidence.", "pillar": "Monitor & report",
      "enforced_by": [ { "name": "Revenue reconciliation", "path": "/reconcile-kernel/" } ] },
    { "n": 9, "control": "Regulator mode — read·check·approve·mutate lineage + causal trajectory replay for investigations.", "pillar": "Monitor & report",
      "enforced_by": [ { "name": "Regulator lineage", "path": "/lineage-kernel/" }, { "name": "Trajectory replay", "path": "/trajectory-kernel/" } ] },
    { "n": 10, "control": "Compliance evidence — the tamper-evident audit graph exported as a SOC 2 / regulatory evidence pack.", "pillar": "Monitor & report",
      "enforced_by": [ { "name": "Compliance export", "path": "/compliance-kernel/" } ] },
    { "n": 11, "control": "Signed Outcome Receipt — offline-verifiable, zero-trust proof that a controlled action actually closed.", "pillar": "Monitor & report",
      "enforced_by": [ { "name": "Verify a receipt", "path": "/verify-receipt/" } ] },
    { "n": 12, "control": "Fleet integrity — behavioral-drift canary + flash-crash breaker on the agent fleet.", "pillar": "Monitor & report",
      "enforced_by": [ { "name": "Behavioral drift", "path": "/drift-kernel/" }, { "name": "Flash-crash breaker", "path": "/breaker-kernel/" } ] }
  ],
  "boundary": {
    "operant_does": ["govern", "validate", "authorize", "attest", "dispute", "reconcile", "net", "prove"],
    "operant_does_not": ["hold balances", "move or settle money", "issue credit", "act as an escrow bank or custodian", "execute payments", "replace a core banking or payment switch"]
  },
  "not_included": "This pack does NOT ship a certification/badge program, settlement-bank partner integrations, network fee schedules, or multi-region active-active. Those are scheme-operator concerns, not capabilities EcoCloud claims today. The pack packages what is live: deterministic kernels you can run right now."
}