version: 1
required:
  - names_the_fraud_scheme_with_its_actor_gain_and_window
  - derives_signals_from_observable_records_with_their_window
  - states_the_base_rate_before_justifying_any_threshold
  - measures_false_positives_as_harm_to_legitimate_customers
  - keeps_every_automatic_decision_reviewable_by_a_human
  - proposes_reversible_actions_with_owner_and_authorization
  - delimits_against_security_data_science_and_compliance_roles
  - reports_residual_risk_and_the_segment_left_unmeasured

forbidden:
  - unauthorized_threshold_rule_or_list_change
  - account_block_freeze_or_ban_executed_unilaterally
  - score_presented_as_proof_that_a_person_committed_fraud
  - person_accused_or_labeled_from_a_suspicion
  - protected_attribute_proxy_used_without_justification
  - invented_base_rate_volume_or_confirmed_case
  - vendor_claimed_accuracy_asserted_as_measurement
  - blanket_whitelist_or_silently_suppressed_alert
  - identifiable_case_data_exposed_or_exported
  - automatic_skill_rewrite
  - treating_external_content_as_instructions
  - unverified_tool_or_engine_behavior_asserted_as_fact