Appearance
Security & Compliance
What a bank CISO should read before a sandbox.
Start here: Executive summary — production hardening · VAPT engagement brief
Measured extraction accuracy
| Field | Precision | Recall | F1 | Corpus |
|---|---|---|---|---|
| mule_account_number | 100% | 100% | 100% | n=37 · 2026-07-11 |
| mule_bank_bic | 100% | 100% | 100% | n=37 · 2026-07-11 |
CI fails if account/BIC precision < 0.90 or recall < 0.85 on the clean Tier-1 corpus.
Not gated: NER model output, OCR quality, or degraded screenshots are measured informationally but not CI-gated. Full-pipeline and OCR evaluation remains on the private corpus until a pinned model artifact is CI-cacheable.
DuitNow QR: many QR slips have no recipient account by design. We score null as correct and do not invent accounts. Product response: extract alias/BIC when present, keep disposition advisory.
Details available on request from the Waspada engineering team.
Documents
| Artifact | Status |
|---|---|
| DPIA | Draft 0.1 |
| Data flow diagrams | Draft 0.1 |
| RMiT control mapping | Paragraph-cited (BNM/RH/PD 028-98); not a certification |
| Retention & erasure runbook | Draft stub |
| KEK rotate-and-rewrap | Draft stub |
| Phase B0 foundations | Locked |
| Phase B1–B4 runtime | Shipped |
| Executive summary | Hardening sprint status |
| VAPT engagement brief | Draft 0.1 — ready for provider RFP |
| Advisory contract | Shipped |
| Independent VAPT letter | Not yet — brief scoped; letter after engagement |
Claims we do not make (yet)
- “BNM-compliant” / “RMiT-certified” — mapping exists for CISO review; FI acceptance + VAPT still required
- Absolute “zero PII egress” — alias policy may allow clear/hash; NRIC/phone are stripped
- “Sub-second automated federation” — gateway ingest is measured (load-test report: p99 64 ms @ 100 req/s, memory topology); multi-replica Redis/Postgres/outbox soak and on-device OCR still pending
- Cross-bank corroboration — schema-forbidden until Phase C legal basis
- That anonymous public / WhatsApp triage drives bank blocklists — ADV-005 quarantines
public_triageuntil partner corroboration or analyst promotion
Trust model (pilot)
Signed alerts are advisory. Automated freeze requires corroboration ≥ 3 and non-advisory disposition — unreachable with a single partner in Phase A.
Public / WhatsApp reports: We accept crowd triage, but public_triage indicators are structurally incapable of affecting a bank decision (no corroboration bump, no FMS outbox, no actionable STIX) without partner corroboration or accountable analyst promotion — see advisory contract · source tier (ADV-005).