Risk & Compliance Guide
This guide describes how PTI v1.0 supports risk and compliance lenses — screening dimensions, compliance intelligence payloads, and explainability for regulated workflows.
Personas & lookup profiles
| Persona | Profile | Contexts |
|---|---|---|
| Bank / digital lender | lending | lending, risk_compliance |
| Insurer | risk_assessment | insurance, risk_compliance |
| Fintech / payments | merchant_onboarding | merchant, digital_platform |
| Government / civic | risk_assessment | civic, employment |
Screening dimensions
When a risk-assessment workflow is selected, implementations MAY integrate:
- Sanctions lists (e.g. OpenSanctions-backed where configured)
- PEP — potential match → manual review
- Identity — document and registry checks
- Business registry — where contract enables
- UNSCR packs when contracted
Statuses: clear · match_review · not_run · unavailable (fail closed)
External subjects (not yet in registry)
When a subject is not found in the trust registry but strong identifiers are supplied, implementations MAY route to external screening providers. Screening SHOULD be metered separately from standard lookup tiers where billing applies.
Compliance intelligence JSON
Additive compliance_intelligence block:
confidence,risk_indicators,coverage_gapsscreening_summarywith provenancetrust_timeline,compliance_lens
Explainability & AML
Institutions use drivers and screening_summary for committee packs — not black-box clearance. Adverse media may return not_run until a dedicated provider is enabled.
Typical institution workflow
- Select risk-assessment profile and entitled contexts
- Resolve subject (
pti_idor identity hints) - Generate trust lookup with screening dimensions
- Review explainability and screening summary
- Export verifiable report artifact for audit (implementation-specific format)
Reference implementation
TumiTrust documents production screening integration and institution hub workflows. See Risk & compliance intelligence and Trust platform API — external screening.