Certanum  /  Financial services

Every consequential figure should survive scrutiny.

Model-risk frameworks were built for models. AI agents now select the inputs to calculations and carry the results into decisions, reports and client communications.

Certanum is being built so that every consequential figure is computed from authoritative source data, with evidence a validator, auditor or examiner can re-run.

01The problem

A figure can be correct, the tool call can be logged and the action can be permitted — while the number rests on an input the model supplied.

An AI agent decides whether to run a calculation, chooses which balances, rates, prices or periods go into it, and reports the result. Three of those four steps rest on model judgement. A wrong share class, a stale rate or a skipped calculation still produces a figure that looks right.

Output review and aggregate accuracy testing cannot establish how a particular released figure was produced. Execution controls establish whether an action was permitted, not what supports the number it produced.

02Where it applies

Where consequential figures arise.

A figure is consequential when it is acted upon, recorded, submitted or defended.

Credit & lending
Affordability, pricing and exposure figures used in credit decisions.
Payments & agentic commerce
Amounts, currency conversions, fees and refunds calculated by agents acting for customers.
Risk & capital
Risk figures and aggregations that feed limits, reporting and management decisions.
Client & regulatory reporting
Performance, fees and disclosures in reports, factsheets and filings.
Asset & wealth management
Figures in RFPs, due-diligence questionnaires and AI-drafted commentary.
Insurance
Pricing, reserving and claims figures where a calculation must be defended.
03Existing requirements

Existing frameworks already expect consequential figures to be evidenced.

Revised US interagency model-risk guidance superseding SR 11-7. Footnote 3 places generative and agentic AI outside its scope; banks are expected to govern those tools under their broader risk-management and governance practices.
EU AI Act  ·  Annex III
Creditworthiness assessment of natural persons, and risk assessment and pricing for life and health insurance, are high-risk uses. Under the May 2026 Digital Omnibus agreement, stand-alone high-risk obligations apply from 2 December 2027.
“A useful answer is not enough if the basis for it cannot be reconstructed.” Firms remain accountable for outcomes under the Consumer Duty and the Senior Managers Regime.
PRA SS1/23  ·  UK
Model risk management principles for banks, including independent validation.
SEC Marketing Rule  ·  FY2026 examination priorities
Advisers must be able to substantiate material statements of fact on demand. Examiners are assessing whether firms’ actual use of AI matches their representations.

Descriptions of regulatory and policy instruments are indicative, are not legal advice, and should be confirmed with qualified counsel. Certanum confers compliance with nothing. It produces evidence an existing assurance, validation or audit process may require.

04What Certanum establishes

For every consequential figure: computed, traceable, reproducible — or withheld.

Computed. The figure is produced by declared, deterministic software — not generated by the model.

Traceable. Every operand entering the computation resolves to an authoritative source value, or to a declared, immutable artifact bound by digest.

Reproducible. A third party can re-execute the declared computation over the recorded operands and obtain the released figure.

Withheld when unsupported. An operand that cannot be resolved does not degrade the answer. It withholds it.

The architecture is model-agnostic and designed to run inside the institution’s own environment. It produces evidence for existing model-risk, validation and audit processes; it does not replace them.

05Questions
Is agentic AI covered by US model-risk guidance?
The April 2026 revised guidance (SR 26-2, OCC Bulletin 2026-13, FDIC FIL-15-2026) excludes generative and agentic AI from its scope in footnote 3, and expects banks to govern those tools under broader risk-management and governance practices. Evidence of how an AI-produced figure was derived supports that governance.
Does Certanum replace model validation?
No. Validation assesses a model. Certanum is built to evidence a particular released figure: which operands entered the computation, from which source, through which operation, and whether it reproduces.
Does it depend on a particular AI model or vendor?
No. The architecture is model-agnostic. The generative component interprets; deterministic software computes the figure.
Founding pilots
Two founding pilots — one may be in financial services.

One workflow. One class of consequential figure. Success criteria agreed before we begin. Certanum funds the initial pilot work.

Other industries  ·  Pharmaceuticals  ·  Defense  ·  AP-1 standard ↗