Agents / Model Risk Management
Compliance Evidence Agent
Assembles the evidence bundle for any control on demand, for Internal Audit and for BNM examinations, from the records the pipeline and the workflows already produced: check reports, validation opinions with their signatories, entitlements, access events, change records and retirement notices.
Runs, last 30 days
17
Tools
5
Data scopes
3
Human checkpoints
1
About this agent
Assembles the evidence bundle for any control on demand, for Internal Audit and for BNM examinations, from the records the pipeline and the workflows already produced: check reports, validation opinions with their signatories, entitlements, access events, change records and retirement notices. Evidence is gathered, never generated.
Tools5
- Audit log query
- Check-report store
- Entitlement and access-event registry
- Control map (RMiT, PDPA, Model Risk policy)
- Evidence-pack exporter
Data access scope3
- Read-only: audit log, check reports, decisions, entitlements, change records
- Write: evidence packs marked with their generation time and scope
- Cannot alter or delete any record it reads
Guardrails3
- Every item in a pack links to the original record; nothing is summarised without a source
- A control with no evidence is reported as a gap, not omitted
- Packs are scoped to the requesting role's entitlements
Human-in-the-loop1
- The control owner reviews the pack before it goes to Internal Audit or the regulator
An agent executes the process end to end and logs what it did. No human is in the path, because there is no discretion to exercise and no consequence to carry.
- Acts for
- Model Risk & Governance
- Action class
- read-only
- Decisions / 30d
- 17
- Safe-state returns / 30d
- 0
Processes covered
- Audit and examination evidence assembly
- Model inventory and value reporting
- Retirement notice and evidence retention
Stages:Onboard & registerOperate & charge backSuspend & retire
Memory
No persistent memory; every pack is assembled fresh from the record.
Safe state
Reports the control as 'evidence unavailable' and alerts the control owner when any source store is unreachable.
Reviewer time per case: 0 min with this agent, 180 without.
Orchestration
Every tool call is scoped by the declared data access above; the orchestrator cannot reach systems outside it. Owning business unit: Group Data & AI.
Ownership and sensitivity
Who approves access
- Owner, Model Risk Management, Dr. Kavitha Subramaniam
Business-sensitive. Models and data products scoped to named business units.
Entitlement per business unit, approved by the owner; conditions attach.
- BNM reportable
- Feeds a regulatory return or a figure reported to Bank Negara Malaysia.
Community · 0 threads
Questions, findings and requests from the business units that use this asset. Owners reply here; threads with upvotes surface to the owning team's inbox.
Live demo run
Watch the agent execute a real scenario step by step, every tool call, validation, and human checkpoint is traced and auditable. Typical run: ~5.2s.
Used in workflows
Retiring this asset would require these chains to be re-pointed first.
Audit
Updated 2026-07-30. Run traces retained 24 months for audit under the platform governance policy.