Blog

Notes from themessy middle.

Enterprise AI architecture, agent governance, RFP workflows, and the stuff nobody writes about until they have shipped it in production.

Agent prompt

"Summarize contract #4821 and update the risk register…"

Prompt Inspection

PII redacted · injection blocked

Pass

Retrieval Sanitization

3 chunks filtered · 12 retained

Pass

RBAC Tool Gate

write_db blocked · read allowed

Warn

Response Validation

policy v2.4 · schema valid

Pass

Audit record emitted

policy

v2.4

actions

4 logged

export

SOC 2 ready

The SR 11-7 rewrite proposal and what it means for LLMs in banking

Agent prompt

"Summarize contract #4821 and update the risk register…"

Prompt Inspection

PII redacted · injection blocked

Pass

Retrieval Sanitization

3 chunks filtered · 12 retained

Pass

RBAC Tool Gate

write_db blocked · read allowed

Warn

Response Validation

policy v2.4 · schema valid

Pass

Audit record emitted

policy

v2.4

actions

4 logged

export

SOC 2 ready

Nuviax Team · Aug 28, 2026

The SR 11-7 rewrite proposal and what it means for LLMs in banking

284

Requirements

84%

Coverage

~6 hrs

Time saved

Requirement ledger · ranked by coverage

R-001

FedRAMP Moderate authorization

Met

92%

R-002

99.9% SLA with penalty clause

Partial

78%

R-003

On-prem deployment option

Met

100%

R-004

FIPS 140-2 encryption at rest

Gap

45%

R-005

24/7 dedicated support tier

Met

85%

First-response draft ready

Export

Nuviax Team · Aug 21, 2026

The 300-page RFP nobody wants to read. What actually needs parsing.

Orchestration Hub

Coordinating 4 agents · pipeline depth 3 · 468ms total

Retrieval

RAG · 98ms

active

Reasoning

CoT · 340ms

Validator

Policy · 22ms

Dispatcher

Routing · 8ms

Observability

Full trace · 100% coverage

Policy boundary

Enforced per agent hop

Deployment

SaaS · Cloud · Sovereign VPC

Nuviax Team · Aug 16, 2026

The seven-step trace. What a defensible agent execution looks like.

Contract review · Procurement

AI active

Document · Contract #4821

AI findings · 3 issues

Clause 8.3 conflicts with preferred indemnity cap

Risk

Master Services Agreement · §8.3

Payment terms exceed 45-day procurement policy

Policy

Procurement Policy v3 · §4.1

Renewal auto-triggers without board approval gate

Governance

Governance Framework · §11

Nuviax Team · Aug 15, 2026

Where vertical AI actually lives. Salesforce, ServiceNow, SAP.

Matrix · Duplex.rvt / UAE

Running

Clause §5.1.4.2 · Cited

"Every escape door shall have a clear width of not less than 850 mm when measured between door faces."

Findings · 3 cited

Escape door clear width 850 mm

Pass

UAE FLSC §5.1.4.2

Travel distance 32 m, sprinklered

Pass

UAE FLSC §7.2.1

Door leaf FR rating not stated

Abstain

UAE FLSC §8.4.3

Nuviax Team · Aug 12, 2026

One BIM model, six authorities. How a compliance matrix ships.

Deliverable · Contract Review Memo

Drafting

Section §04 · Every claim linked

The Contractor's liability shall be unlimited [CL a20b35] and uncapped, surviving termination [CL 9a0887]…

Trace · 3 statements

Liability shall be unlimited and uncapped

Contract

Master Services Agreement · §12.3

Termination for convenience with 30-day notice

Contract

MSA · §18.1

Termination notice period not stated in source

Gap

Requires reviewer input

Nuviax Team · Aug 12, 2026

Notes from themessy middle.

The SR 11-7 rewrite proposal and what it means for LLMs in banking

The SR 11-7 rewrite proposal and what it means for LLMs in banking

The 300-page RFP nobody wants to read. What actually needs parsing.

The seven-step trace. What a defensible agent execution looks like.

Where vertical AI actually lives. Salesforce, ServiceNow, SAP.

One BIM model, six authorities. How a compliance matrix ships.

The 20-section project management plan you can stamp