Case Studies &
Governance Archive

In 2012, a trading firm lost $440 million in 45 minutes due to unintended reactivation of deprecated code.

AST scanning detects unauthorized execution path reactivation; the runtime sandbox (Diamond Cage) isolates and blocks anomalous behavior; the Decision Audit Chain logs approval history.

In 2024, Air Canada was held legally liable after its customer support chatbot drifted from official bereavement fare policy and fabricated a retroactive refund procedure (Moffatt v. Air Canada, 2024 BCCRT 149).

Anchor's semantic interceptor validates LLM output assertions against the active policy contract before client delivery. Drifted claims are coerced to pre-approved compliant responses and logged in the Decision Audit Chain.

Malicious or security-compromised embeddings introduced into a vector store lead to incorrect but policy-compliant agent decisions.

Canon ensures source material freshness and authenticity, while Anchor enforces runtime validation of LLM output against the current active policy manifest.

In 2018, TSB Bank's IT migration failure caused a £600M outage affecting 1.9 million customers, resulting in a joint FCA/PRA fine of £48.65M.

CI/CD defect limit gates (POL-DEPLOY-004) enforce active-active datacenter configuration drift detection before production cutover. The runtime sandbox blocks deployment when unresolved defect counts exceed constitutional thresholds.

In 2020, Citibank accidentally wired $893M to Revlon lenders due to an Oracle Flexcube UI checkbox failure, resulting in a $500M net loss and OCC Consent Order.

Structured Mode payment rules (POL-FIN-005) enforce multi-party approval gates and amount-threshold verification before high-value wire execution. The Decision Audit Chain captures the full authorization lineage.