{"version":"1.0","issued_at":"2026-09-17T00:00:00Z","owner":"Founder / CEO / Principal Architect · SAA Alliance","status_vocabulary":["PUBLICLY_DISCLOSED","AVAILABLE_UNDER_NDA","UNDER_RECRUIT","NOT_YET_CONSTITUTED","SUBSTRATE_SHIPPED","INTERIM_HELD"],"sections":[{"section_id":"1_executive_officers","title":"Executive officers","rows":[{"field":"founder_ceo","value":"Founder / CEO / Principal Architect (single-principal-interim per ADR-ARIN22-004)","status":"PUBLICLY_DISCLOSED"},{"field":"cto","status":"UNDER_RECRUIT","note":"responsibilities held on interim basis by Principal Architect"},{"field":"ciso","status":"UNDER_RECRUIT","note":"responsibilities held on interim basis by Principal Architect · SIG-LITE C.1 blocker for Tier-1 vendor onboarding"},{"field":"cfo","status":"AVAILABLE_UNDER_NDA","note":"named or interim per engagement"},{"field":"cco_chief_compliance_officer","status":"UNDER_RECRUIT","note":"responsibilities held on interim basis by Principal Architect · SR 26-2 P1 governance-pillar blocker for scale"},{"field":"cdo_chief_data_officer","status":"UNDER_RECRUIT","note":"responsibilities held on interim basis by Principal Architect · required at financial-services scale"},{"field":"dpo_data_protection_officer","value":"dpo@saa-alliance.com","status":"PUBLICLY_DISCLOSED","note":"Wave 8 · C7 · GDPR Art. 41 satisfied"},{"field":"model_risk_officer","status":"NOT_YET_CONSTITUTED","note":"MUST be separate from CTO once SAA scales · KOKON self-recursively detects same conflict in customer entities (phase 541.19 SoD detector B12.4). Currently held interim by Principal Architect."}]},{"section_id":"2_board_and_governance","title":"Board + governance bodies","rows":[{"field":"board_composition_current","value":"Founder-led · single principal per ADR-ARIN22-004","status":"PUBLICLY_DISCLOSED"},{"field":"independent_directors","status":"NOT_YET_CONSTITUTED","note":"targeted 2+ independent directors at Series A · not yet reached"},{"field":"advisory_board","status":"NOT_YET_CONSTITUTED","note":"targeted 3-5 members — ex-regulator + ex-CRO + ex-CFO of large FI · outreach in flight (not disclosed)"},{"field":"audit_committee","status":"NOT_YET_CONSTITUTED","note":"requires independent directors first · targeted 2027"},{"field":"compensation_committee","status":"NOT_YET_CONSTITUTED","note":"same dependency as audit committee"},{"field":"risk_committee","status":"INTERIM_HELD","note":"risk oversight held on interim basis by Principal Architect + weekly gov-ledger review"}]},{"section_id":"3_substrate_governance_shipped","title":"Governance substrate (shipped)","rows":[{"field":"governance_ledger_hash_chained","value":"Wave 4 · G1-G5 · hash-chained tamper-evident WORM ledger","status":"SUBSTRATE_SHIPPED"},{"field":"tamper_verify_endpoint","value":"GET /api/control/audit/gov-verify","status":"SUBSTRATE_SHIPPED"},{"field":"tamper_timeline_ui","value":"/ui/gov-ledger-timeline","status":"SUBSTRATE_SHIPPED"},{"field":"evidence_bundle_ed25519_signed","value":"Wave 7 · X4 · GET /api/control/audit/evidence-bundle","status":"SUBSTRATE_SHIPPED"},{"field":"incident_response_runbook","value":"docs/runbook/incident-response.md · Wave 8 · C6 · S1 15min · S2 1h · S3 24h","status":"SUBSTRATE_SHIPPED"},{"field":"chaos_posture_endpoint","value":"GET /api/control/audit/chaos-posture · phase 477 tenant-isolation probe","status":"SUBSTRATE_SHIPPED"},{"field":"sr_26_2_six_pillar_assessor","value":"phase 71 per-agent SR 26-2 assessor","status":"SUBSTRATE_SHIPPED"}]},{"section_id":"4_governance_maturity_roadmap","title":"Governance maturity roadmap","rows":[{"field":"priority_1_ciso_named","value":"highest priority · blocks Tier-1 vendor onboarding","status":"UNDER_RECRUIT","note":"targeted 2027Q1 based on funding trajectory"},{"field":"priority_2_advisory_board_seated","value":"3-5 named members from FSI regulator + risk community","status":"NOT_YET_CONSTITUTED","note":"outreach in flight"},{"field":"priority_3_model_risk_officer_separated","value":"MRO seat separated from CTO per KOKON's own detector logic","status":"NOT_YET_CONSTITUTED"},{"field":"priority_4_independent_directors_seated","value":"2+ independent directors for audit-committee formation","status":"NOT_YET_CONSTITUTED"},{"field":"priority_5_audit_committee_constituted","status":"NOT_YET_CONSTITUTED","note":"depends on priority 4"}]},{"section_id":"5_self_recursive_audit","title":"Self-recursive audit (KOKON auditing SAA)","rows":[{"field":"sod_gap_ciso_and_cto_same_person","value":"KOKON detector B12.4 would fire on SAA's own org-chart under strict mode","status":"PUBLICLY_DISCLOSED","note":"acknowledged limitation · single-principal-interim per ADR-ARIN22-004 · resolves as roles are filled"},{"field":"sod_gap_mro_and_cto_same_person","value":"same detector · KOKON explicitly detects this in customer entities under phase 541.19","status":"PUBLICLY_DISCLOSED","note":"resolved by priority 3 above"},{"field":"governance_ledger_self_seals","value":"SAA's own operational events written to the same WORM chain customers see","status":"SUBSTRATE_SHIPPED"}]}],"request_channel":"procurement@saa-alliance.com · countersigned NDA required for the NDA-only rows","source_document":"docs/GOVERNANCE-DISCLOSURE.md · v1.0 · 2026-07-21","boundary":"self-declaration by SAA · not audited · not a substitute for the customer's own vendor-viability review · UNDER_RECRUIT means role has not been filled — Tier-1 due-dil treats this as gap · single-principal-interim regime per ADR-ARIN22-004 · not decision-grade authorization","non_claims":["no fabricated org-chart / headcount","UNDER_RECRUIT means the role has NOT been filled","NOT_YET_CONSTITUTED means the body has NOT been formed","INTERIM_HELD means one person carries multiple senior responsibilities until roles are filled","nothing here confers decision-grade authorization"],"sha256":"83ef98539e16112c21d759c3c931d1a3ae41678fa0205316b3231ccb6c08766a"}