@connexum/ai-governance 1.0.0-beta.11

package/dist/esm/packs/au-aiethics-framework.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"au-aiethics-framework.js","sourceRoot":"","sources":["../../../src/packs/au-aiethics-framework.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AAKH,MAAM,CAAC,MAAM,gCAAgC,GAAwB;IACnE,wBAAwB,EAAE;QACxB,UAAU,EAAE,CAAC,oFAAoF,CAAC;QAClG,UAAU,EAAE,CAAC,KAAa,EAAW,EAAE;YACrC,IAAI,iOAAiO,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC/P,OAAO,KAAK,CAAC;QACf,CAAC;KACF;IACD,qBAAqB,EAAE;QACrB,UAAU,EAAE,CAAC,6EAA6E,CAAC;QAC3F,UAAU,EAAE,CAAC,KAAa,EAAW,EAAE;YACrC,IAAI,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC9D,IAAI,4DAA4D,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1F,6DAA6D;YAC7D,0EAA0E;YAC1E,+EAA+E;YAC/E,yEAAyE;YACzE,wDAAwD;YACxD,sEAAsE;YACtE,yEAAyE;YACzE,uEAAuE;YACvE,0EAA0E;YAC1E,IACE,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC;gBAC5C,6EAA6E,CAAC,IAAI,CAAC,KAAK,CAAC;gBACzF,OAAO,IAAI,CAAC;YACd,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzC,IAAI,iMAAiM,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC/N,OAAO,KAAK,CAAC;QACf,CAAC;KACF;IACD,oBAAoB,EAAE;QACpB,UAAU,EAAE,CAAC,mGAAmG,CAAC;QACjH,UAAU,EAAE,CAAC,KAAa,EAAW,EAAE;YACrC,IAAI,yJAAyJ,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACvL,OAAO,KAAK,CAAC;QACf,CAAC;KACF;IACD,iBAAiB,EAAE;QACjB,UAAU,EAAE,CAAC,iFAAiF,CAAC;QAC/F,UAAU,EAAE,CAAC,KAAa,EAAW,EAAE;YACrC,IAAI,2LAA2L,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzN,OAAO,KAAK,CAAC;QACf,CAAC;KACF;IACD,oBAAoB,EAAE;QACpB,UAAU,EAAE,CAAC,sEAAsE,CAAC;QACpF,UAAU,EAAE,CAAC,KAAa,EAAW,EAAE;YACrC,IAAI,yLAAyL,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACvN,OAAO,KAAK,CAAC;QACf,CAAC;KACF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAGzB;IACF,mBAAmB,EAAE,gCAAgC;IACrD;;;;OAIG;IACH,sBAAsB,EAAE;QACtB,uBAAuB;KACxB;IAED,EAAE,EAAE,uBAAuB;IAC3B,IAAI,EAAE,8DAA8D;IACpE,OAAO,EAAE,OAAO;IAChB,WAAW,EACT,qbAAqb;IACvb,SAAS,EAAE,sDAAsD;IACjE,UAAU,EAAE;QACV,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS;QAC/C,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,yBAAyB;KACxD;IAED,eAAe,EAAE;QACf;YACE,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,iIAAiI;YACzI,SAAS,EAAE,oDAAoD;SAChE;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,+FAA+F;YACvG,SAAS,EAAE,wCAAwC;SACpD;QACD;YACE,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,iHAAiH;YACzH,SAAS,EAAE,wCAAwC;SACpD;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,+LAA+L;YACvM,SAAS,EAAE,wDAAwD;SACpE;QACD,wDAAwD;QACxD,+EAA+E;QAC/E,0EAA0E;QAC1E,6EAA6E;QAC7E,6EAA6E;QAC7E,uEAAuE;QACvE,wEAAwE;QACxE;YACE,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,kLAAkL;YAC1L,SAAS,EAAE,2IAA2I;SACvJ;KACF;IAED,YAAY,EAAE;QACZ,iBAAiB,EAAE;YACjB,iBAAiB,EAAE;gBACjB,0BAA0B;gBAC1B,uBAAuB;gBACvB,sBAAsB;gBACtB,mBAAmB;gBACnB,sBAAsB;aACvB;YACD,wBAAwB,EAAE,IAAI;YAC9B,mBAAmB,EAAE,IAAI;YACzB,wBAAwB,EAAE,IAAI;YAC9B,qBAAqB,EAAE,IAAI;YAC3B,sBAAsB,EAAE,IAAI;YAC5B,6BAA6B,EAAE,IAAI;YACnC,6BAA6B,EAAE,IAAI;SACpC;QACD,oBAAoB,EAAE;YACpB,wBAAwB,EAAE,IAAI;YAC9B,mBAAmB,EAAE,IAAI;YACzB,wBAAwB,EAAE,IAAI;YAC9B,qBAAqB,EAAE,IAAI;YAC3B,sBAAsB,EAAE,IAAI;YAC5B,6BAA6B,EAAE,IAAI;YACnC,6BAA6B,EAAE,IAAI;SACpC;QACD,uBAAuB,EAAE;YACvB,oBAAoB,EAAE,IAAI;YAC1B,sBAAsB,EAAE,IAAI;SAC7B;QACD,wEAAwE;QACxE,cAAc,EAAE;YACd,mCAAmC,EAAE,IAAI;YACzC,mCAAmC,EAAE,IAAI;SAC1C;KACF;IAED,cAAc,EAAE;QACd,gBAAgB,EAAE,EAAE;QACpB,oBAAoB,EAAE;YACpB,0BAA0B;YAC1B,2BAA2B;YAC3B,0BAA0B;SAC3B;QACD,YAAY,EAAE,EAAE;KACjB;IAED,UAAU,EAAE;QACV,cAAc,EAAE;YACd,0BAA0B;YAC1B,uBAAuB;YACvB,sBAAsB;YACtB,mBAAmB;YACnB,sBAAsB;SACvB;QACD,eAAe,EAAE;YACf;;;;;;;;eAQG;YACH,wBAAwB,EAAE,kBAAkB;YAC5C;;;;;;;eAOG;YACH,qBAAqB,EAAE,OAAO;YAC9B;;;;eAIG;YACH,oBAAoB,EAAE,kBAAkB;YACxC;;;;eAIG;YACH,iBAAiB,EAAE,MAAM;YACzB;;;;;eAKG;YACH,oBAAoB,EAAE,MAAM;SAC7B;QACD,kBAAkB,EAAE,KAAK;QACzB,kBAAkB,EAAE,SAAS;QAC7B,qBAAqB,EAAE,UAAU;KAClC;IAED,eAAe,EAAE;QACf,WAAW,EAAE,CAAC,IAAI,CAAC;QACnB,qBAAqB,EAAE,IAAI,EAAE,mEAAmE;QAChG,oBAAoB,EAAE,IAAI;QAC1B,qBAAqB,EAAE,IAAI;QAC3B,SAAS,EAAE,wHAAwH;KACpI;IAED,cAAc,EAAE;QACd,yBAAyB,EAAE,CAAC,EAAE,iDAAiD;QAC/E,SAAS,EAAE,4KAA4K;QACvL,kBAAkB,EAAE,EAAE;QACtB,0BAA0B,EAAE,KAAK;KAClC;IAED,UAAU,EAAE;QACV;YACE,EAAE,EAAE,oCAAoC;YACxC,WAAW,EAAE,iDAAiD;YAC9D,SAAS,EAAE,oCAAoC;YAC/C,KAAK,EAAE,2CAA2C;YAClD,YAAY,EAAE,MAAM;SACrB;QACD;YACE,EAAE,EAAE,2BAA2B;YAC/B,WAAW,EAAE,+EAA+E;YAC5F,SAAS,EAAE,oCAAoC;YAC/C,KAAK,EAAE,kCAAkC;YACzC,YAAY,EAAE,MAAM;SACrB;QACD;YACE,EAAE,EAAE,4BAA4B;YAChC,WAAW,EAAE,0FAA0F;YACvG,SAAS,EAAE,oCAAoC;YAC/C,KAAK,EAAE,mCAAmC;YAC1C,YAAY,EAAE,MAAM;SACrB;QACD;YACE,EAAE,EAAE,6BAA6B;YACjC,WAAW,EAAE,2FAA2F;YACxG,SAAS,EAAE,oCAAoC;YAC/C,KAAK,EAAE,oCAAoC;YAC3C,YAAY,EAAE,MAAM;SACrB;QACD;YACE,EAAE,EAAE,+BAA+B;YACnC,WAAW,EAAE,mEAAmE;YAChF,SAAS,EAAE,oCAAoC;YAC/C,KAAK,EAAE,sCAAsC;YAC7C,YAAY,EAAE,QAAQ;SACvB;QACD;YACE,EAAE,EAAE,6BAA6B;YACjC,WAAW,EAAE,gGAAgG;YAC7G,SAAS,EAAE,oCAAoC;YAC/C,KAAK,EAAE,oCAAoC;YAC3C,YAAY,EAAE,QAAQ;SACvB;QACD;YACE,EAAE,EAAE,4BAA4B;YAChC,WAAW,EAAE,wEAAwE;YACrF,SAAS,EAAE,oCAAoC;YAC/C,KAAK,EAAE,mCAAmC;YAC1C,YAAY,EAAE,QAAQ;SACvB;KACF;CACF,CAAC"}

package/dist/esm/packs/au-aml-ctf.js

@@ -0,0 +1,346 @@
+/**
+ * AU AML/CTF Act 2006 — AUSTRAC + 2024 DNFBP Amendments
+ *
+ * Primary statute: Anti-Money Laundering and Counter-Terrorism Financing Act
+ * 2006 (Cth) (AML/CTF Act); AML/CTF Rules 2007; Anti-Money Laundering and
+ * Counter-Terrorism Financing and Other Legislation Amendment Act 2024 (royal
+ * assent November 2024, phased commencement 2025-2026).
+ *
+ * Reporting entities (existing): "Designated services" Tables 1+2: banking,
+ * lending, remittance, currency exchange, financial advice, brokerage, bullion
+ * dealing, safe deposit services, digital currency exchange.
+ *
+ * 2024 amendments — DNFBP expansion (phased): Real estate agents, solicitors
+ * and barristers, accountants and auditors, trust and company service providers,
+ * dealers in precious metals and stones. DNFBP enrolment deadline: 31 March 2026.
+ *
+ * AI relevance: AI for transaction monitoring, customer risk scoring, KYC/identity
+ * verification, fraud detection, sanctions screening. AUSTRAC issued explicit
+ * AI/AML guidance. AI false negatives in transaction monitoring = direct compliance
+ * failure. AI-based identity verification must meet CDD standards.
+ *
+ * Key AI obligations:
+ *   - AML/CTF Programme: AI used in AML documented in Part A; programme reviewed
+ *     when AI model or thresholds change.
+ *   - CDD: Standard CDD before designated service; Enhanced CDD for PEPs, high-
+ *     risk countries, complex structures.
+ *   - SMR: 3 business days after forming suspicion; 24 hours for CTF suspicion.
+ *   - Tipping off (s.123): Cannot disclose SMR existence or subject to customer.
+ *     AI customer communications must not reference suspicious activity reviews.
+ *   - TTR/IFTI: Physical currency/digital currency at/above AUD 10,000 and
+ *     international funds transfers reported within 10 business days.
+ *   - Note: AU 24-hour CTF SMR clock is the strictest AML SMR obligation globally,
+ *     stricter than US BSA/FinCEN 30-day SAR window.
+ *
+ * Cross-pack interactions:
+ *   - au-aml-ctf + au-privacy-act: CDD records contain sensitive PI; APP 11
+ *     security + APP 12 access rights apply. Tipping-off restriction may override
+ *     APP 12 access during active investigation.
+ *   - au-aml-ctf + au-cdr: CDR data cannot be used for AML CDD without CDR consent
+ *     covering that purpose. PS 6 use limitation applies.
+ *   - au-aml-ctf + au-cps230: APRA banks/insurers face AML programme failures as
+ *     operational risk events under CPS 230. Major AML breach may trigger CPS 230
+ *     APRA notification in parallel with AUSTRAC obligations.
+ *   - au-aml-ctf + au-soci-act: Financial services sector = designated CI sector.
+ *     AML system compromise (AI monitoring offline by cyberattack) may simultaneously
+ *     trigger SOCI cyber incident notification to ASD.
+ *   - au-aml-ctf + bsa-aml (US): Parallel AUSTRAC + FinCEN obligations for entities
+ *     with AU and US reporting relationships. AU 24-hour CTF SMR clock is strictest.
+ *
+ * [CITATION TO VERIFY]: DNFBP enrolment deadline of 31 March 2026 is based on the
+ * Anti-Money Laundering and Counter-Terrorism Financing Amendment Act 2024 (royal
+ * assent November 2024). Verify final commencement dates against AUSTRAC
+ * implementation schedule before relying on this deadline.
+ *
+ * Authority: Australian Transaction Reports and Analysis Centre (AUSTRAC)
+ * Sovereignty: Australian Federal
+ *
+ * @connexum/ai-governance
+ */
+export const AU_AML_CTF_CATEGORY_CLASSIFIERS = {
+    AU_AML_CUSTOMER: {
+        references: ['AML/CTF Act Part 2 — customer due diligence obligation'],
+        classifier: (input) => {
+            if (/\b(?:aml\s+customer|cdd\s+customer|kyc\s+(?:record|profile|status)|aml[_\-\s]ctf\s+(?:customer|client))/i.test(input))
+                return true;
+            return false;
+        },
+    },
+    AU_AML_PEP: {
+        references: ['AML/CTF Rules — politically exposed person; enhanced CDD mandatory'],
+        classifier: (input) => {
+            if (/\b(?:politically\s+exposed\s+person|PEP\b|pep\s+(?:customer|client|screening|enhanced\s+cdd))/i.test(input))
+                return true;
+            return false;
+        },
+    },
+    AU_AML_HIGH_RISK_COUNTRY: {
+        references: ['AML/CTF Rules — high-risk jurisdiction enhanced CDD'],
+        classifier: (input) => {
+            if (/\b(?:high[_\-\s]?risk\s+(?:country|jurisdiction|location)|fatf\s+(?:grey|black)\s+list|high[_\-\s]?risk.*(?:aml|cdd|transaction))/i.test(input))
+                return true;
+            return false;
+        },
+    },
+    AU_AML_SUSPICIOUS_MATTER: {
+        references: ['AML/CTF Act s.41 — SMR 3 business days; s.41A — CTF SMR 24 hours'],
+        classifier: (input) => {
+            if (/\b(?:suspicious\s+matter\s+(?:report|SMR)|SMR\b|transaction\s+(?:monitoring\s+)?(?:flag|alert|suspicious)|austrac\s+report(?:ing)?)/i.test(input))
+                return true;
+            return false;
+        },
+    },
+    AU_AML_THRESHOLD_TRANSACTION: {
+        references: ['AML/CTF Act s.43 — TTR within 10 business days; AUD 10,000 threshold'],
+        classifier: (input) => {
+            if (/\b(?:threshold\s+transaction\s+report|TTR\b|AUD\s*10[,.]?000.*(?:cash|currency)|cash\s+(?:at|above|exceeding)\s+(?:AUD\s*)?10[,.]?000)/i.test(input))
+                return true;
+            return false;
+        },
+    },
+    AU_AML_IFTI: {
+        references: ['AML/CTF Act s.45 — IFTI within 10 business days'],
+        classifier: (input) => {
+            if (/\b(?:international\s+funds\s+transfer\s+instruction|IFTI\b|cross[_\-\s]?border\s+funds\s+transfer.*austrac)/i.test(input))
+                return true;
+            return false;
+        },
+    },
+    AU_AML_TIPPING_OFF_RISK: {
+        references: ['AML/CTF Act s.123 — tipping off criminal offence; 2024 digital communications update'],
+        classifier: (input) => {
+            // Customer communication that may disclose SMR context
+            if (/\b(?:tipping[_\-\s]?off|SMR\b.*(?:customer\s+communication|notify\s+customer|tell.*customer)|suspicious\s+matter.*(?:customer\s+message|email\s+customer|notify))/i.test(input))
+                return true;
+            // AI-generated communication referencing the investigation
+            if (/\b(?:your\s+(?:account|transaction)\s+(?:has\s+been\s+)?(?:flagged|reviewed)\s+(?:for\s+)?(?:suspicious|money\s+laundering|aml|austrac))/i.test(input))
+                return true;
+            return false;
+        },
+    },
+    AU_AML_DNFBP_SCOPE: {
+        references: ['AML/CTF Amendment Act 2024 — DNFBP expansion; [CITATION TO VERIFY] enrolment 31 March 2026'],
+        classifier: (input) => {
+            if (/\b(?:dnfbp|designated\s+non[_\-\s]?financial\s+business|real\s+estate\s+(?:agent|agency).*aml|solicitor.*austrac|accountant.*aml[_\-\s]ctf)/i.test(input))
+                return true;
+            return false;
+        },
+    },
+};
+export const AU_AML_CTF_PACK = {
+    categoryClassifiers: AU_AML_CTF_CATEGORY_CLASSIFIERS,
+    /**
+     * P3.5: AML customer records, PEP/high-risk assessments, SMR flags, and
+     * tipping-off risks are subject-keyed by customer to maintain the 7-year
+     * CDD record integrity and audit trail per AML/CTF Rules.
+     * TTR and IFTI are transaction-level (non-subject-keyed).
+     * DNFBP scope flag is entity-level (non-subject-keyed).
+     */
+    subjectKeyedCategories: [
+        'AU_AML_CUSTOMER',
+        'AU_AML_PEP',
+        'AU_AML_HIGH_RISK_COUNTRY',
+        'AU_AML_SUSPICIOUS_MATTER',
+        'AU_AML_TIPPING_OFF_RISK',
+    ],
+    id: 'au-aml-ctf',
+    name: 'AU AML/CTF Act 2006 — AUSTRAC + 2024 DNFBP Amendments',
+    version: '1.0.0',
+    description: 'AUSTRAC AML/CTF Act compliance for AI systems performing transaction monitoring, KYC/CDD, risk scoring, and sanctions screening. Enforces 3-business-day SMR (24-hour for CTF), tipping-off block (s.123), PEP/high-risk-country enhanced CDD gates, 10-BD TTR/IFTI reporting, AI programme documentation requirement, and DNFBP enrolment alert for 2024-amendment entities. [CITATION TO VERIFY: DNFBP 31 March 2026 deadline per 2024 Act implementation schedule.]',
+    authority: 'Australian Transaction Reports and Analysis Centre (AUSTRAC)',
+    industries: [
+        'banking', 'fintech', 'payments', 'crypto', 'gambling',
+        'real-estate', 'legal', 'accounting', 'jewellery', 'insurance', 'open-banking',
+    ],
+    requiredModules: [
+        {
+            name: 'governance-runtime',
+            required: true,
+            reason: 'AML/CTF programme enforcement; SMR 3-BD/24-h clocks; tipping-off block; CDD gates; TTR/IFTI auto-generation',
+            reference: 'AML/CTF Act Part 2 (programme); s.41 (SMR); s.41A (CTF); s.43 (TTR); s.45 (IFTI); s.123 (tipping off)',
+        },
+        {
+            name: 'audit-integrity',
+            required: true,
+            reason: '7-year retention for CDD, transaction, SMR, TTR, IFTI, programme records',
+            reference: 'AML/CTF Act record-keeping provisions',
+        },
+        {
+            name: 'data-classifier',
+            required: true,
+            reason: 'Classify customers, PEPs, high-risk jurisdictions, suspicious matters, threshold transactions, IFTIs, tipping-off risks',
+            reference: 'AML/CTF Act s.41; s.41A; s.43; s.45; s.123',
+        },
+        {
+            name: 'approval-queue',
+            required: true,
+            reason: 'PEP/high-risk enhanced CDD approval; SMR human-in-the-loop mandatory review before filing; DNFBP enrolment approval',
+            reference: 'AML/CTF Act s.41; AML/CTF Rules (enhanced CDD)',
+        },
+        {
+            name: 'session-persistence',
+            required: true,
+            reason: 'SMR deadline tracking (3-BD/24-h); TTR/IFTI 10-BD countdown; CDD lifecycle per customer',
+            reference: 'AML/CTF Act s.41; s.43; s.45',
+        },
+        {
+            name: 'event-bus',
+            required: true,
+            reason: 'Suspicious matter event stream with human-escalation; threshold transaction events; tipping-off risk events',
+            reference: 'AML/CTF Act s.41; s.123',
+        },
+    ],
+    moduleConfig: {
+        'data-classifier': {
+            enabledCategories: [
+                'AU_AML_CUSTOMER',
+                'AU_AML_PEP',
+                'AU_AML_HIGH_RISK_COUNTRY',
+                'AU_AML_SUSPICIOUS_MATTER',
+                'AU_AML_THRESHOLD_TRANSACTION',
+                'AU_AML_IFTI',
+                'AU_AML_TIPPING_OFF_RISK',
+                'AU_AML_DNFBP_SCOPE',
+            ],
+            smrSlaBusinessDays: 3,
+            smrCtfSlaHours: 24,
+            tippingOffBlockEnabled: true,
+            pepEnhancedCddRequired: true,
+            highRiskCountryApprovalRequired: true,
+            ttrSlaBusinessDays: 10,
+            iftiSlaBusinessDays: 10,
+            amlProgrammeAiDocumentationRequired: true,
+            dnfbpRegistrationDeadline: '2026-03-31',
+        },
+        'governance-runtime': {
+            smrSlaBusinessDays: 3,
+            smrCtfSlaHours: 24,
+            tippingOffBlockEnabled: true,
+            pepEnhancedCddRequired: true,
+            highRiskCountryApprovalRequired: true,
+            ttrSlaBusinessDays: 10,
+            iftiSlaBusinessDays: 10,
+            amlProgrammeAiDocumentationRequired: true,
+            dnfbpRegistrationDeadline: '2026-03-31',
+        },
+        'approval-queue': {
+            pepCddApprovalRequired: true,
+            highRiskCddApprovalRequired: true,
+            smrHumanReviewRequired: true,
+        },
+    },
+    providerPolicy: {
+        blockedProviders: [],
+        requiredCapabilities: [
+            'AML-PROGRAMME-DOCUMENTED',
+            'TIPPING-OFF-CONTROLS',
+            'AUSTRAC-REPORTING-CAPABLE',
+            'CDD-DIGITAL-ID-VERIFICATION',
+        ],
+        blockReasons: {},
+    },
+    dataPolicy: {
+        scanCategories: [
+            'AU_AML_CUSTOMER',
+            'AU_AML_PEP',
+            'AU_AML_HIGH_RISK_COUNTRY',
+            'AU_AML_SUSPICIOUS_MATTER',
+            'AU_AML_THRESHOLD_TRANSACTION',
+            'AU_AML_IFTI',
+            'AU_AML_TIPPING_OFF_RISK',
+            'AU_AML_DNFBP_SCOPE',
+        ],
+        categoryActions: {
+            AU_AML_CUSTOMER: 'LOG',
+            AU_AML_PEP: 'REQUIRE_APPROVAL',
+            AU_AML_HIGH_RISK_COUNTRY: 'REQUIRE_APPROVAL',
+            AU_AML_SUSPICIOUS_MATTER: 'REQUIRE_APPROVAL',
+            AU_AML_THRESHOLD_TRANSACTION: 'LOG',
+            AU_AML_IFTI: 'LOG',
+            AU_AML_TIPPING_OFF_RISK: 'BLOCK',
+            AU_AML_DNFBP_SCOPE: 'WARN',
+        },
+        encryptionRequired: true,
+        encryptionStandard: 'AES-256',
+        minimumClassification: 'CONFIDENTIAL',
+    },
+    retentionPolicy: {
+        sovereignty: ['AU'],
+        auditLogRetentionDays: 2555, // 7 years (CDD, transactions, SMRs, programme versions)
+        sessionRetentionDays: 2555,
+        incidentRetentionDays: 2555,
+        reference: 'AML/CTF Act record-keeping: CDD 7y from end of relationship; transactions 7y; SMR copies 7y; programme versions 7y',
+    },
+    incidentPolicy: {
+        notificationDeadlineHours: 24, // CTF suspicion: 24-hour SMR (hardest constraint)
+        reference: 'AML/CTF Act s.41A — CTF suspicion SMR within 24 hours (hardest constraint); s.41 — other suspicion SMR within 3 BD',
+        requiredRecipients: ['austrac', 'compliance-officer', 'aml-officer'],
+        formalNotificationRequired: true,
+    },
+    validators: [
+        {
+            id: 'au-aml-smr-3bd',
+            description: 'Suspicious matter report filed within 3 business days of suspicion formation',
+            reference: 'AML/CTF Act s.41',
+            check: 'au_aml_smr_3bd_active',
+            failSeverity: 'CRITICAL',
+        },
+        {
+            id: 'au-aml-smr-ctf-24hr',
+            description: 'Terrorism financing SMR filed within 24 hours of suspicion formation',
+            reference: 'AML/CTF Act s.41A',
+            check: 'au_aml_smr_ctf_24hr_active',
+            failSeverity: 'CRITICAL',
+        },
+        {
+            id: 'au-aml-tipping-off-block',
+            description: 'Customer communications blocked if referencing or disclosing SMR context',
+            reference: 'AML/CTF Act s.123',
+            check: 'au_aml_tipping_off_block_active',
+            failSeverity: 'CRITICAL',
+        },
+        {
+            id: 'au-aml-pep-approval',
+            description: 'Politically exposed persons require enhanced CDD with approval',
+            reference: 'AML/CTF Rules (PEP enhanced CDD)',
+            check: 'au_aml_pep_approval_active',
+            failSeverity: 'HIGH',
+        },
+        {
+            id: 'au-aml-high-risk-country',
+            description: 'High-risk jurisdiction transactions and customers require enhanced CDD approval',
+            reference: 'AML/CTF Rules',
+            check: 'au_aml_high_risk_country_active',
+            failSeverity: 'HIGH',
+        },
+        {
+            id: 'au-aml-ttr-10bd',
+            description: 'Threshold transaction report filed within 10 business days',
+            reference: 'AML/CTF Act s.43',
+            check: 'au_aml_ttr_10bd_active',
+            failSeverity: 'HIGH',
+        },
+        {
+            id: 'au-aml-ifti-10bd',
+            description: 'International funds transfer instruction report filed within 10 business days',
+            reference: 'AML/CTF Act s.45',
+            check: 'au_aml_ifti_10bd_active',
+            failSeverity: 'HIGH',
+        },
+        {
+            id: 'au-aml-programme-ai-docs',
+            description: 'AI changes in transaction monitoring or CDD documented in AML/CTF programme',
+            reference: 'AML/CTF Act Part 2',
+            check: 'au_aml_programme_ai_docs_active',
+            failSeverity: 'MEDIUM',
+        },
+        {
+            id: 'au-aml-dnfbp-registration',
+            description: 'DNFBP entities registered with AUSTRAC by 31 March 2026 [CITATION TO VERIFY]',
+            reference: 'AML/CTF Amendment Act 2024 [CITATION TO VERIFY — verify final commencement date]',
+            check: 'au_aml_dnfbp_registration_active',
+            failSeverity: 'HIGH',
+        },
+    ],
+};
+//# sourceMappingURL=au-aml-ctf.js.map

package/dist/esm/packs/au-aml-ctf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"au-aml-ctf.js","sourceRoot":"","sources":["../../../src/packs/au-aml-ctf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AAKH,MAAM,CAAC,MAAM,+BAA+B,GAAwB;IAClE,eAAe,EAAE;QACf,UAAU,EAAE,CAAC,wDAAwD,CAAC;QACtE,UAAU,EAAE,CAAC,KAAa,EAAW,EAAE;YACrC,IAAI,0GAA0G,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACxI,OAAO,KAAK,CAAC;QACf,CAAC;KACF;IACD,UAAU,EAAE;QACV,UAAU,EAAE,CAAC,oEAAoE,CAAC;QAClF,UAAU,EAAE,CAAC,KAAa,EAAW,EAAE;YACrC,IAAI,gGAAgG,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC9H,OAAO,KAAK,CAAC;QACf,CAAC;KACF;IACD,wBAAwB,EAAE;QACxB,UAAU,EAAE,CAAC,qDAAqD,CAAC;QACnE,UAAU,EAAE,CAAC,KAAa,EAAW,EAAE;YACrC,IAAI,oIAAoI,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAClK,OAAO,KAAK,CAAC;QACf,CAAC;KACF;IACD,wBAAwB,EAAE;QACxB,UAAU,EAAE,CAAC,kEAAkE,CAAC;QAChF,UAAU,EAAE,CAAC,KAAa,EAAW,EAAE;YACrC,IAAI,sIAAsI,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpK,OAAO,KAAK,CAAC;QACf,CAAC;KACF;IACD,4BAA4B,EAAE;QAC5B,UAAU,EAAE,CAAC,sEAAsE,CAAC;QACpF,UAAU,EAAE,CAAC,KAAa,EAAW,EAAE;YACrC,IAAI,yIAAyI,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACvK,OAAO,KAAK,CAAC;QACf,CAAC;KACF;IACD,WAAW,EAAE;QACX,UAAU,EAAE,CAAC,iDAAiD,CAAC;QAC/D,UAAU,EAAE,CAAC,KAAa,EAAW,EAAE;YACrC,IAAI,8GAA8G,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC5I,OAAO,KAAK,CAAC;QACf,CAAC;KACF;IACD,uBAAuB,EAAE;QACvB,UAAU,EAAE,CAAC,sFAAsF,CAAC;QACpG,UAAU,EAAE,CAAC,KAAa,EAAW,EAAE;YACrC,uDAAuD;YACvD,IAAI,oKAAoK,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAClM,2DAA2D;YAC3D,IAAI,2IAA2I,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzK,OAAO,KAAK,CAAC;QACf,CAAC;KACF;IACD,kBAAkB,EAAE;QAClB,UAAU,EAAE,CAAC,4FAA4F,CAAC;QAC1G,UAAU,EAAE,CAAC,KAAa,EAAW,EAAE;YACrC,IAAI,8IAA8I,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC5K,OAAO,KAAK,CAAC;QACf,CAAC;KACF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAGxB;IACF,mBAAmB,EAAE,+BAA+B;IACpD;;;;;;OAMG;IACH,sBAAsB,EAAE;QACtB,iBAAiB;QACjB,YAAY;QACZ,0BAA0B;QAC1B,0BAA0B;QAC1B,yBAAyB;KAC1B;IAED,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,uDAAuD;IAC7D,OAAO,EAAE,OAAO;IAChB,WAAW,EACT,wcAAwc;IAC1c,SAAS,EAAE,8DAA8D;IACzE,UAAU,EAAE;QACV,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU;QACtD,aAAa,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc;KAC/E;IAED,eAAe,EAAE;QACf;YACE,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,6GAA6G;YACrH,SAAS,EAAE,uGAAuG;SACnH;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,0EAA0E;YAClF,SAAS,EAAE,uCAAuC;SACnD;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,yHAAyH;YACjI,SAAS,EAAE,4CAA4C;SACxD;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,qHAAqH;YAC7H,SAAS,EAAE,gDAAgD;SAC5D;QACD;YACE,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,yFAAyF;YACjG,SAAS,EAAE,8BAA8B;SAC1C;QACD;YACE,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,6GAA6G;YACrH,SAAS,EAAE,yBAAyB;SACrC;KACF;IAED,YAAY,EAAE;QACZ,iBAAiB,EAAE;YACjB,iBAAiB,EAAE;gBACjB,iBAAiB;gBACjB,YAAY;gBACZ,0BAA0B;gBAC1B,0BAA0B;gBAC1B,8BAA8B;gBAC9B,aAAa;gBACb,yBAAyB;gBACzB,oBAAoB;aACrB;YACD,kBAAkB,EAAE,CAAC;YACrB,cAAc,EAAE,EAAE;YAClB,sBAAsB,EAAE,IAAI;YAC5B,sBAAsB,EAAE,IAAI;YAC5B,+BAA+B,EAAE,IAAI;YACrC,kBAAkB,EAAE,EAAE;YACtB,mBAAmB,EAAE,EAAE;YACvB,mCAAmC,EAAE,IAAI;YACzC,yBAAyB,EAAE,YAAY;SACxC;QACD,oBAAoB,EAAE;YACpB,kBAAkB,EAAE,CAAC;YACrB,cAAc,EAAE,EAAE;YAClB,sBAAsB,EAAE,IAAI;YAC5B,sBAAsB,EAAE,IAAI;YAC5B,+BAA+B,EAAE,IAAI;YACrC,kBAAkB,EAAE,EAAE;YACtB,mBAAmB,EAAE,EAAE;YACvB,mCAAmC,EAAE,IAAI;YACzC,yBAAyB,EAAE,YAAY;SACxC;QACD,gBAAgB,EAAE;YAChB,sBAAsB,EAAE,IAAI;YAC5B,2BAA2B,EAAE,IAAI;YACjC,sBAAsB,EAAE,IAAI;SAC7B;KACF;IAED,cAAc,EAAE;QACd,gBAAgB,EAAE,EAAE;QACpB,oBAAoB,EAAE;YACpB,0BAA0B;YAC1B,sBAAsB;YACtB,2BAA2B;YAC3B,6BAA6B;SAC9B;QACD,YAAY,EAAE,EAAE;KACjB;IAED,UAAU,EAAE;QACV,cAAc,EAAE;YACd,iBAAiB;YACjB,YAAY;YACZ,0BAA0B;YAC1B,0BAA0B;YAC1B,8BAA8B;YAC9B,aAAa;YACb,yBAAyB;YACzB,oBAAoB;SACrB;QACD,eAAe,EAAE;YACf,eAAe,EAAE,KAAK;YACtB,UAAU,EAAE,kBAAkB;YAC9B,wBAAwB,EAAE,kBAAkB;YAC5C,wBAAwB,EAAE,kBAAkB;YAC5C,4BAA4B,EAAE,KAAK;YACnC,WAAW,EAAE,KAAK;YAClB,uBAAuB,EAAE,OAAO;YAChC,kBAAkB,EAAE,MAAM;SAC3B;QACD,kBAAkB,EAAE,IAAI;QACxB,kBAAkB,EAAE,SAAS;QAC7B,qBAAqB,EAAE,cAAc;KACtC;IAED,eAAe,EAAE;QACf,WAAW,EAAE,CAAC,IAAI,CAAC;QACnB,qBAAqB,EAAE,IAAI,EAAE,wDAAwD;QACrF,oBAAoB,EAAE,IAAI;QAC1B,qBAAqB,EAAE,IAAI;QAC3B,SAAS,EAAE,oHAAoH;KAChI;IAED,cAAc,EAAE;QACd,yBAAyB,EAAE,EAAE,EAAE,kDAAkD;QACjF,SAAS,EAAE,oHAAoH;QAC/H,kBAAkB,EAAE,CAAC,SAAS,EAAE,oBAAoB,EAAE,aAAa,CAAC;QACpE,0BAA0B,EAAE,IAAI;KACjC;IAED,UAAU,EAAE;QACV;YACE,EAAE,EAAE,gBAAgB;YACpB,WAAW,EAAE,8EAA8E;YAC3F,SAAS,EAAE,kBAAkB;YAC7B,KAAK,EAAE,uBAAuB;YAC9B,YAAY,EAAE,UAAU;SACzB;QACD;YACE,EAAE,EAAE,qBAAqB;YACzB,WAAW,EAAE,sEAAsE;YACnF,SAAS,EAAE,mBAAmB;YAC9B,KAAK,EAAE,4BAA4B;YACnC,YAAY,EAAE,UAAU;SACzB;QACD;YACE,EAAE,EAAE,0BAA0B;YAC9B,WAAW,EAAE,0EAA0E;YACvF,SAAS,EAAE,mBAAmB;YAC9B,KAAK,EAAE,iCAAiC;YACxC,YAAY,EAAE,UAAU;SACzB;QACD;YACE,EAAE,EAAE,qBAAqB;YACzB,WAAW,EAAE,gEAAgE;YAC7E,SAAS,EAAE,kCAAkC;YAC7C,KAAK,EAAE,4BAA4B;YACnC,YAAY,EAAE,MAAM;SACrB;QACD;YACE,EAAE,EAAE,0BAA0B;YAC9B,WAAW,EAAE,iFAAiF;YAC9F,SAAS,EAAE,eAAe;YAC1B,KAAK,EAAE,iCAAiC;YACxC,YAAY,EAAE,MAAM;SACrB;QACD;YACE,EAAE,EAAE,iBAAiB;YACrB,WAAW,EAAE,4DAA4D;YACzE,SAAS,EAAE,kBAAkB;YAC7B,KAAK,EAAE,wBAAwB;YAC/B,YAAY,EAAE,MAAM;SACrB;QACD;YACE,EAAE,EAAE,kBAAkB;YACtB,WAAW,EAAE,+EAA+E;YAC5F,SAAS,EAAE,kBAAkB;YAC7B,KAAK,EAAE,yBAAyB;YAChC,YAAY,EAAE,MAAM;SACrB;QACD;YACE,EAAE,EAAE,0BAA0B;YAC9B,WAAW,EAAE,6EAA6E;YAC1F,SAAS,EAAE,oBAAoB;YAC/B,KAAK,EAAE,iCAAiC;YACxC,YAAY,EAAE,QAAQ;SACvB;QACD;YACE,EAAE,EAAE,2BAA2B;YAC/B,WAAW,EAAE,8EAA8E;YAC3F,SAAS,EAAE,kFAAkF;YAC7F,KAAK,EAAE,kCAAkC;YACzC,YAAY,EAAE,MAAM;SACrB;KACF;CACF,CAAC"}

package/dist/esm/packs/au-asic-rg-271.js

@@ -0,0 +1,268 @@
+/**
+ * AU ASIC RG 271 — Internal Dispute Resolution
+ *
+ * Primary instrument: ASIC RG 271: Internal Dispute Resolution (effective
+ * 5 October 2021; replaces RG 165). Backed by ASIC Act s.912A (AFSLs),
+ * s.47 (credit licensees); Corporations Act 2001; National Consumer Credit
+ * Protection Act 2009.
+ *
+ * Entities covered: Australian Financial Services Licensees (AFSLs); Australian
+ * Credit Licensees (ACLs); unlicensed exempt product providers.
+ *
+ * AI relevance: AI-decision systems (loan approvals, insurance underwriting,
+ * claims, robo-advice) generate complaints that pass through IDR. AI decisions
+ * without adequate reasons or unable to be reviewed/explained = RG 271 failure.
+ * ASIC 2024-2025 priorities focus on AI-assisted financial decisions.
+ *
+ * Key AI obligations:
+ *   - RG 271.18-27: Any expression of dissatisfaction where response reasonably
+ *     expected = complaint. AI-generated complaints cannot be filtered out of IDR.
+ *   - Timeframes: Standard 30 days; super 45 days; credit hardship 21 days.
+ *   - RG 271.96-107: IDR responses require meaningful reasons — "our model
+ *     decided" is insufficient; explanation of AI decision factors required.
+ *   - Root cause analysis: Systemic AI failure patterns escalated internally.
+ *   - ASIC data reporting: Annual IDR complaint data reported to ASIC.
+ *   - Record-keeping: All complaint records retained 7 years.
+ *
+ * Cross-pack interactions:
+ *   - au-asic-rg-271 + au-asic-rg-274: DDO generates IDR feedback loop; out-of-
+ *     target distributions + complaints feed through IDR. IDR data is a DDO
+ *     outcome monitoring signal for TMD review triggers.
+ *   - au-asic-rg-271 + au-privacy-act: Complaint records contain PI. APP 11 +
+ *     APP 12 apply with privilege exceptions. Complainant PI cannot be disclosed
+ *     to ASIC reporting without de-identification or authorised basis.
+ *   - au-asic-rg-271 + au-cps230: APRA-regulated licensees with systemic IDR
+ *     failures from AI decisions face operational risk events under CPS 230.
+ *     Root cause + APRA notification may run in parallel with ASIC obligations.
+ *
+ * Authority: Australian Securities and Investments Commission (ASIC)
+ * Sovereignty: Australian Federal
+ *
+ * @connexum/ai-governance
+ */
+export const AU_ASIC_RG271_CATEGORY_CLASSIFIERS = {
+    AU_RG271_COMPLAINANT: {
+        references: ['RG 271.18-27 — complaint definition; any expression of dissatisfaction'],
+        classifier: (input) => {
+            if (/\b(?:idr\s+complaint|financial\s+(?:complaint|dispute)|rg\s*271\s+complaint|expression\s+of\s+dissatisfaction.*(?:financial|afsl|acl))/i.test(input))
+                return true;
+            return false;
+        },
+    },
+    AU_RG271_AI_DECISION: {
+        references: ['RG 271.96-107 — IDR response with meaningful reasons for AI decisions'],
+        classifier: (input) => {
+            if (/\bRG\s*271\b.*\bAI\s+decision\b/i.test(input))
+                return true;
+            if (/\bAI\s+decision\b.*\b(?:RG\s*271|IDR)\b/i.test(input))
+                return true;
+            if (/\b(?:(?:ai|automated|algorithm(?:ic)?)\s+(?:decision|credit\s+refusal|claim\s+denial|advice)\s+(?:complaint|challenged|dispute)|idr.*ai\s+(?:decision|recommendation|assessment))\b/i.test(input))
+                return true;
+            return false;
+        },
+    },
+    AU_RG271_IDR_DEADLINE: {
+        references: ['RG 271.67 — 30-day (standard), 45-day (super), 21-day (credit hardship)'],
+        classifier: (input) => {
+            if (/\b(?:idr\s+(?:deadline|timeframe|response\s+(?:due|overdue))|rg\s*271\s+(?:30|21|45)\s*day|complaint\s+response\s+(?:deadline|overdue|approaching))/i.test(input))
+                return true;
+            return false;
+        },
+    },
+    AU_RG271_SYSTEMIC_ISSUE: {
+        references: ['RG 271 + AFSL conditions — root cause analysis for systemic AI failures'],
+        classifier: (input) => {
+            if (/\b(?:systemic\s+(?:ai\s+)?(?:failure|issue|pattern).*idr|root\s+cause\s+analysis.*(?:complaint|ai\s+decision)|multiple\s+(?:ai\s+)?complaints.*same\s+(?:issue|pattern))/i.test(input))
+                return true;
+            return false;
+        },
+    },
+    AU_RG271_AFCA_REFERRAL: {
+        references: ['RG 271 — AFCA referral as IDR failure indicator'],
+        classifier: (input) => {
+            if (/\b(?:afca\s+(?:referral|escalation|complaint)|escalated\s+to\s+afca|complaint.*afca.*(?:idr\s+failed|not\s+resolved))/i.test(input))
+                return true;
+            return false;
+        },
+    },
+};
+export const AU_ASIC_RG271_PACK = {
+    categoryClassifiers: AU_ASIC_RG271_CATEGORY_CLASSIFIERS,
+    /**
+     * P3.5: Complaints are subject-keyed — each complaint record carries a
+     * complainant identifier to satisfy 7-year record-keeping and ASIC data-
+     * reporting obligations. Systemic issue category is non-subject-keyed
+     * (aggregate pattern analysis).
+     */
+    subjectKeyedCategories: [
+        'AU_RG271_COMPLAINANT',
+        'AU_RG271_AI_DECISION',
+        'AU_RG271_IDR_DEADLINE',
+        'AU_RG271_AFCA_REFERRAL',
+    ],
+    id: 'au-asic-rg-271',
+    name: 'AU ASIC RG 271 — Internal Dispute Resolution',
+    version: '1.0.0',
+    description: 'ASIC RG 271 compliance for AI systems generating or processing complaints at AFSL/ACL-licensed financial services firms. Enforces IDR response timeframes (30-day standard, 45-day superannuation, 21-day credit hardship), meaningful-reasons requirement for AI decisions (RG 271.96-107), systemic-issue escalation, 7-year complaint record retention, and annual ASIC IDR data reporting.',
+    authority: 'Australian Securities and Investments Commission (ASIC)',
+    industries: [
+        'banking', 'insurance', 'superannuation', 'fintech',
+        'financial-advice', 'credit', 'investment-management', 'payments',
+    ],
+    requiredModules: [
+        {
+            name: 'governance-runtime',
+            required: true,
+            reason: 'IDR timeframe enforcement (30/45/21-day clocks); AI decision reasons validation; systemic-issue escalation gate',
+            reference: 'RG 271.67 (timeframes); RG 271.96-107 (reasons); RG 271 root cause',
+        },
+        {
+            name: 'audit-integrity',
+            required: true,
+            reason: '7-year retention for all complaint records, IDR responses, root cause analyses, ASIC data reports',
+            reference: 'RG 271.132 (record-keeping 7 years)',
+        },
+        {
+            name: 'transparency-injector',
+            required: true,
+            reason: 'AI decision explanation capture; IDR response with meaningful reasons for AI-driven financial decisions',
+            reference: 'RG 271.96-107',
+        },
+        {
+            name: 'approval-queue',
+            required: true,
+            reason: 'Systemic-issue escalation gate; AI-decision IDR approval before response; ASIC annual report approval',
+            reference: 'RG 271 + AFSL s.912D',
+        },
+        {
+            name: 'event-bus',
+            required: true,
+            reason: 'IDR deadline approaching events; AFCA referral events; systemic pattern detection events',
+            reference: 'RG 271.67',
+        },
+        {
+            name: 'data-classifier',
+            required: true,
+            reason: 'Classify AU_RG271_COMPLAINANT, AU_RG271_AI_DECISION, AU_RG271_IDR_DEADLINE, AU_RG271_SYSTEMIC_ISSUE, AU_RG271_AFCA_REFERRAL categories; detect IDR and AI-decision compliance issues in financial services outputs',
+            reference: 'RG 271.96-107 (AI decision meaningful reasons); RG 271.67 (timeframes); RG 271.132 (systemic issues)',
+        },
+    ],
+    moduleConfig: {
+        'data-classifier': {
+            enabledCategories: [
+                'AU_RG271_COMPLAINANT',
+                'AU_RG271_AI_DECISION',
+                'AU_RG271_IDR_DEADLINE',
+                'AU_RG271_SYSTEMIC_ISSUE',
+                'AU_RG271_AFCA_REFERRAL',
+            ],
+            idrStandardSlaDays: 30,
+            aiDecisionReasonsRequired: true,
+            complaintLoggingActive: true,
+            systemicIssueEscalationEnabled: true,
+            asicAnnualReportingEnabled: true,
+            complaintRetentionYears: 7,
+        },
+        'governance-runtime': {
+            idrStandardSlaDays: 30,
+            aiDecisionReasonsRequired: true,
+            complaintLoggingActive: true,
+            systemicIssueEscalationEnabled: true,
+            asicAnnualReportingEnabled: true,
+            complaintRetentionYears: 7,
+        },
+        'transparency-injector': {
+            aiDecisionExplanationRequired: true,
+        },
+        'approval-queue': {
+            systemicIssueApprovalRequired: true,
+            aiDecisionIdrReviewRequired: true,
+        },
+    },
+    providerPolicy: {
+        blockedProviders: [],
+        requiredCapabilities: [
+            'AI-DECISION-EXPLANATION-CAPABLE',
+            'COMPLAINT-RECORD-RETENTION-7Y',
+            'IDR-TIMEFRAME-TRACKING',
+        ],
+        blockReasons: {},
+    },
+    dataPolicy: {
+        scanCategories: [
+            'AU_RG271_COMPLAINANT',
+            'AU_RG271_AI_DECISION',
+            'AU_RG271_IDR_DEADLINE',
+            'AU_RG271_SYSTEMIC_ISSUE',
+            'AU_RG271_AFCA_REFERRAL',
+        ],
+        categoryActions: {
+            AU_RG271_COMPLAINANT: 'LOG',
+            AU_RG271_AI_DECISION: 'REQUIRE_APPROVAL',
+            AU_RG271_IDR_DEADLINE: 'WARN',
+            AU_RG271_SYSTEMIC_ISSUE: 'REQUIRE_APPROVAL',
+            AU_RG271_AFCA_REFERRAL: 'LOG',
+        },
+        encryptionRequired: true,
+        encryptionStandard: 'AES-256',
+        minimumClassification: 'CONFIDENTIAL',
+    },
+    retentionPolicy: {
+        sovereignty: ['AU'],
+        auditLogRetentionDays: 2555, // 7 years
+        sessionRetentionDays: 2555,
+        incidentRetentionDays: 2555,
+        reference: 'RG 271.132 (all complaint records 7y); IDR responses 7y; ASIC data reports 7y',
+    },
+    incidentPolicy: {
+        notificationDeadlineHours: 0, // No mandatory breach notification under RG 271 alone
+        reference: 'Corporations Act s.912D — significant breach notification to ASIC; AFCA referral pattern = ASIC surveillance trigger',
+        requiredRecipients: ['asic-breach-notification', 'board', 'compliance-officer'],
+        formalNotificationRequired: false,
+    },
+    validators: [
+        {
+            id: 'au-rg271-idr-30day-sla',
+            description: 'IDR response delivered within 30 calendar days (standard complaints)',
+            reference: 'RG 271.67',
+            check: 'au_rg271_idr_30day_sla_active',
+            failSeverity: 'CRITICAL',
+        },
+        {
+            id: 'au-rg271-ai-decision-reasons',
+            description: 'AI-driven complaints receive IDR responses with sufficient reasons enabling complainant understanding',
+            reference: 'RG 271.96-107',
+            check: 'au_rg271_ai_decision_reasons_active',
+            failSeverity: 'HIGH',
+        },
+        {
+            id: 'au-rg271-complaint-log',
+            description: 'Every complaint logged from receipt with complainant identifier',
+            reference: 'RG 271.18-27',
+            check: 'au_rg271_complaint_log_active',
+            failSeverity: 'HIGH',
+        },
+        {
+            id: 'au-rg271-systemic-escalation',
+            description: 'Systemic AI decision failure patterns escalated to Board or senior management',
+            reference: 'RG 271 root cause analysis + AFSL conditions',
+            check: 'au_rg271_systemic_escalation_active',
+            failSeverity: 'HIGH',
+        },
+        {
+            id: 'au-rg271-asic-reporting',
+            description: 'Annual ASIC IDR complaint data report submitted on time',
+            reference: 'RG 271 + ASIC data reporting requirements',
+            check: 'au_rg271_asic_reporting_active',
+            failSeverity: 'MEDIUM',
+        },
+        {
+            id: 'au-rg271-retention-7yr',
+            description: 'Complaint records retained 7 years',
+            reference: 'RG 271.132',
+            check: 'au_rg271_retention_7yr_active',
+            failSeverity: 'MEDIUM',
+        },
+    ],
+};
+//# sourceMappingURL=au-asic-rg-271.js.map

package/dist/esm/packs/au-asic-rg-271.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"au-asic-rg-271.js","sourceRoot":"","sources":["../../../src/packs/au-asic-rg-271.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAKH,MAAM,CAAC,MAAM,kCAAkC,GAAwB;IACrE,oBAAoB,EAAE;QACpB,UAAU,EAAE,CAAC,wEAAwE,CAAC;QACtF,UAAU,EAAE,CAAC,KAAa,EAAW,EAAE;YACrC,IAAI,yIAAyI,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACvK,OAAO,KAAK,CAAC;QACf,CAAC;KACF;IACD,oBAAoB,EAAE;QACpB,UAAU,EAAE,CAAC,uEAAuE,CAAC;QACrF,UAAU,EAAE,CAAC,KAAa,EAAW,EAAE;YACrC,IAAI,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAChE,IAAI,0CAA0C,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACxE,IAAI,sLAAsL,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpN,OAAO,KAAK,CAAC;QACf,CAAC;KACF;IACD,qBAAqB,EAAE;QACrB,UAAU,EAAE,CAAC,yEAAyE,CAAC;QACvF,UAAU,EAAE,CAAC,KAAa,EAAW,EAAE;YACrC,IAAI,sJAAsJ,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpL,OAAO,KAAK,CAAC;QACf,CAAC;KACF;IACD,uBAAuB,EAAE;QACvB,UAAU,EAAE,CAAC,yEAAyE,CAAC;QACvF,UAAU,EAAE,CAAC,KAAa,EAAW,EAAE;YACrC,IAAI,2KAA2K,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzM,OAAO,KAAK,CAAC;QACf,CAAC;KACF;IACD,sBAAsB,EAAE;QACtB,UAAU,EAAE,CAAC,iDAAiD,CAAC;QAC/D,UAAU,EAAE,CAAC,KAAa,EAAW,EAAE;YACrC,IAAI,wHAAwH,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACtJ,OAAO,KAAK,CAAC;QACf,CAAC;KACF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAG3B;IACF,mBAAmB,EAAE,kCAAkC;IACvD;;;;;OAKG;IACH,sBAAsB,EAAE;QACtB,sBAAsB;QACtB,sBAAsB;QACtB,uBAAuB;QACvB,wBAAwB;KACzB;IAED,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,8CAA8C;IACpD,OAAO,EAAE,OAAO;IAChB,WAAW,EACT,gYAAgY;IAClY,SAAS,EAAE,yDAAyD;IACpE,UAAU,EAAE;QACV,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS;QACnD,kBAAkB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,UAAU;KAClE;IAED,eAAe,EAAE;QACf;YACE,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,iHAAiH;YACzH,SAAS,EAAE,oEAAoE;SAChF;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,mGAAmG;YAC3G,SAAS,EAAE,qCAAqC;SACjD;QACD;YACE,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,yGAAyG;YACjH,SAAS,EAAE,eAAe;SAC3B;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,uGAAuG;YAC/G,SAAS,EAAE,sBAAsB;SAClC;QACD;YACE,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,0FAA0F;YAClG,SAAS,EAAE,WAAW;SACvB;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,oNAAoN;YAC5N,SAAS,EAAE,sGAAsG;SAClH;KACF;IAED,YAAY,EAAE;QACZ,iBAAiB,EAAE;YACjB,iBAAiB,EAAE;gBACjB,sBAAsB;gBACtB,sBAAsB;gBACtB,uBAAuB;gBACvB,yBAAyB;gBACzB,wBAAwB;aACzB;YACD,kBAAkB,EAAE,EAAE;YACtB,yBAAyB,EAAE,IAAI;YAC/B,sBAAsB,EAAE,IAAI;YAC5B,8BAA8B,EAAE,IAAI;YACpC,0BAA0B,EAAE,IAAI;YAChC,uBAAuB,EAAE,CAAC;SAC3B;QACD,oBAAoB,EAAE;YACpB,kBAAkB,EAAE,EAAE;YACtB,yBAAyB,EAAE,IAAI;YAC/B,sBAAsB,EAAE,IAAI;YAC5B,8BAA8B,EAAE,IAAI;YACpC,0BAA0B,EAAE,IAAI;YAChC,uBAAuB,EAAE,CAAC;SAC3B;QACD,uBAAuB,EAAE;YACvB,6BAA6B,EAAE,IAAI;SACpC;QACD,gBAAgB,EAAE;YAChB,6BAA6B,EAAE,IAAI;YACnC,2BAA2B,EAAE,IAAI;SAClC;KACF;IAED,cAAc,EAAE;QACd,gBAAgB,EAAE,EAAE;QACpB,oBAAoB,EAAE;YACpB,iCAAiC;YACjC,+BAA+B;YAC/B,wBAAwB;SACzB;QACD,YAAY,EAAE,EAAE;KACjB;IAED,UAAU,EAAE;QACV,cAAc,EAAE;YACd,sBAAsB;YACtB,sBAAsB;YACtB,uBAAuB;YACvB,yBAAyB;YACzB,wBAAwB;SACzB;QACD,eAAe,EAAE;YACf,oBAAoB,EAAE,KAAK;YAC3B,oBAAoB,EAAE,kBAAkB;YACxC,qBAAqB,EAAE,MAAM;YAC7B,uBAAuB,EAAE,kBAAkB;YAC3C,sBAAsB,EAAE,KAAK;SAC9B;QACD,kBAAkB,EAAE,IAAI;QACxB,kBAAkB,EAAE,SAAS;QAC7B,qBAAqB,EAAE,cAAc;KACtC;IAED,eAAe,EAAE;QACf,WAAW,EAAE,CAAC,IAAI,CAAC;QACnB,qBAAqB,EAAE,IAAI,EAAE,UAAU;QACvC,oBAAoB,EAAE,IAAI;QAC1B,qBAAqB,EAAE,IAAI;QAC3B,SAAS,EAAE,+EAA+E;KAC3F;IAED,cAAc,EAAE;QACd,yBAAyB,EAAE,CAAC,EAAE,sDAAsD;QACpF,SAAS,EAAE,sHAAsH;QACjI,kBAAkB,EAAE,CAAC,0BAA0B,EAAE,OAAO,EAAE,oBAAoB,CAAC;QAC/E,0BAA0B,EAAE,KAAK;KAClC;IAED,UAAU,EAAE;QACV;YACE,EAAE,EAAE,wBAAwB;YAC5B,WAAW,EAAE,sEAAsE;YACnF,SAAS,EAAE,WAAW;YACtB,KAAK,EAAE,+BAA+B;YACtC,YAAY,EAAE,UAAU;SACzB;QACD;YACE,EAAE,EAAE,8BAA8B;YAClC,WAAW,EAAE,uGAAuG;YACpH,SAAS,EAAE,eAAe;YAC1B,KAAK,EAAE,qCAAqC;YAC5C,YAAY,EAAE,MAAM;SACrB;QACD;YACE,EAAE,EAAE,wBAAwB;YAC5B,WAAW,EAAE,iEAAiE;YAC9E,SAAS,EAAE,cAAc;YACzB,KAAK,EAAE,+BAA+B;YACtC,YAAY,EAAE,MAAM;SACrB;QACD;YACE,EAAE,EAAE,8BAA8B;YAClC,WAAW,EAAE,+EAA+E;YAC5F,SAAS,EAAE,8CAA8C;YACzD,KAAK,EAAE,qCAAqC;YAC5C,YAAY,EAAE,MAAM;SACrB;QACD;YACE,EAAE,EAAE,yBAAyB;YAC7B,WAAW,EAAE,yDAAyD;YACtE,SAAS,EAAE,2CAA2C;YACtD,KAAK,EAAE,gCAAgC;YACvC,YAAY,EAAE,QAAQ;SACvB;QACD;YACE,EAAE,EAAE,wBAAwB;YAC5B,WAAW,EAAE,oCAAoC;YACjD,SAAS,EAAE,YAAY;YACvB,KAAK,EAAE,+BAA+B;YACtC,YAAY,EAAE,QAAQ;SACvB;KACF;CACF,CAAC"}