{"$id":"https://movahedi.ca/schema/e23-living-file/v0.2.0.json","$schema":"https://json-schema.org/draft/2020-12/schema","description":"Schema v0.2.0 for the living evidence file covering the OSFI E-23 / B-10 / B-13 triad and AMF AI guideline (2026-PDG-0016) AI system coverage. human_signoff records the accountable role, never a person's name: stamps carry roles, not names. Every legal claim in an instance carries a source id from the cited_authority block. This is an evidence format, not legal advice and not a compliance certification.","properties":{"change_log":{"items":{"properties":{"change":{"type":"string"},"date":{"format":"date","type":"string"}},"required":["date","change"],"type":"object"},"type":"array"},"cited_authority":{"description":"Every legal claim in the instance maps to a source id here.","items":{"properties":{"block":{"enum":["inventory","risk_rating","independent_review","pre_deployment","monitoring","third_party","amf_ais"]},"provision":{"type":"string"},"source_ids":{"items":{"type":"string"},"minItems":1,"type":"array"}},"required":["block","provision","source_ids"],"type":"object"},"type":"array"},"file_metadata":{"properties":{"corpus_version":{"type":"string"},"effective_date_note":{"description":"OSFI Guideline E-23 and the AMF Guideline for the Use of Artificial Intelligence take effect on May 1, 2027.","type":"string"},"file_name":{"type":"string"},"institution_name":{"description":"Free text. Instances are produced client-side; this schema never collects it.","type":"string"},"prepared_by_role":{"type":"string"},"prepared_date":{"format":"date","type":"string"}},"required":["institution_name","prepared_date"],"type":"object"},"human_signoff":{"description":"The accountable role signs, not a named person. The file never signs itself. Roles, not names: a portable approval record is no place for a person's identity.","properties":{"decision":{"type":"string"},"role":{"type":"string"},"signed_date":{"format":"date","type":"string"},"statement":{"type":"string"}},"type":"object"},"models":{"items":{"properties":{"amf_ais":{"description":"AMF Guideline for the Use of Artificial Intelligence (2026-PDG-0016), in force May 1, 2027: centralized AI inventory, risk rating, validation and controls matched to the rating. Covers any AI use, including client chatbots that never touch client records. Source: AMF-2026-PDG-0016.","properties":{"applies":{"type":["boolean","null"]},"controls":{"type":"string"},"institution_type":{"type":"string"},"use_without_client_records":{"type":["boolean","null"]},"validations":{"type":"string"}},"type":"object"},"continuous_monitoring":{"description":"E-23 Principle 3.6: defined standards for model monitoring, including drift detection with thresholds and escalation. Source: OSFI-E23-2027.","properties":{"drift_detection":{"type":"string"},"exceptions":{"type":"string"},"frequency":{"type":"string"},"last_check":{"format":"date","type":"string"}},"type":"object"},"description":{"type":"string"},"evidence_refs":{"description":"Pointers to the documents or systems where each claim lives.","type":"string"},"independent_review":{"description":"E-23 Principle 3.4: process independent from model development to assess conceptual soundness and performance. Source: OSFI-E23-2027.","properties":{"approver":{"type":"string"},"last_review_date":{"format":"date","type":"string"},"next_review_date":{"format":"date","type":"string"},"outcome":{"type":"string"},"review_scope":{"items":{"type":"string"},"type":"array"},"reviewer":{"type":"string"},"reviewer_independent_from_development":{"type":["boolean","null"]}},"type":"object"},"inherent_risk_rating":{"description":"E-23 Principle 2.2: model risk rating approach assessing key dimensions of model risk, from measurable quantitative and qualitative criteria. Source: OSFI-E23-2027.","properties":{"criteria":{"type":"string"},"rating":{"description":"The institution's own categorical tier label.","type":"string"},"rating_date":{"format":"date","type":"string"},"rationale":{"type":"string"}},"type":"object"},"inventory":{"description":"E-23 Principle 2.1: institutions should identify and track all models in use or recently decommissioned. Source: OSFI-E23-2027.","properties":{"deployment_date":{"format":"date","type":"string"},"developer":{"type":"string"},"lifecycle_status":{"enum":["in_production","in_development","decommissioned"]},"origin":{"enum":["internal","vendor"]},"owner":{"type":"string"},"version":{"type":"string"}},"type":"object"},"model_name":{"type":"string"},"pre_deployment_assurance":{"description":"E-23 Principle 3.5 (pre-deployment risk assessments including cybersecurity, referencing B-13) and OSFI B-13 s. 3.1.2 (intelligence-led testing including penetration testing and red teaming). Sources: OSFI-E23-2027, OSFI-B13.","properties":{"cyber_risk_assessment_date":{"format":"date","type":"string"},"penetration_testing":{"properties":{"frequency_note":{"description":"B-13 s. 3.1.2 sets no fixed cadence; the institution sets triggers and minimum frequencies and defends them.","type":"string"},"last_conducted":{"format":"date","type":"string"},"next_scheduled":{"format":"date","type":"string"},"provider":{"type":"string"},"scope":{"type":"string"}},"type":"object"}},"type":"object"},"third_party":{"description":"B-10 Principle 8 (s. 2.3.3) (right to conduct or commission an independent audit of a third party) and B-10 s. 4.2 (third parties comply with the FRFI's technology and cyber standards). Source: OSFI-B10.","properties":{"audit_clause_reference":{"type":"string"},"contractual_audit_rights":{"type":["boolean","null"]},"cyber_standards_applied":{"type":["boolean","null"]},"last_vendor_audit":{"format":"date","type":"string"},"vendor_name":{"type":"string"}},"type":"object"}},"required":["model_name"],"type":"object"},"minItems":1,"type":"array"},"non_certification_disclaimer":{"const":"This living file is an evidence format. It is not legal advice, not a regulatory filing, and not a certification of compliance by movahedi.ca. The institution's accountable officers sign the file and stand behind its contents."},"schema_url":{"format":"uri","type":"string"},"schema_version":{"const":"0.2.0"}},"required":["schema_version","file_metadata","models","cited_authority","non_certification_disclaimer"],"title":"E-23 / AMF AI guideline living evidence file","type":"object","version":"0.2.0"}