---
artifact_kind: system-card
artifact_name: <e.g., "concordia-workbench-prod-eu-west">
version: <semver>
owner: <named team>
last_reviewed: <YYYY-MM-DD>
next_review: <YYYY-MM-DD>
deployment_region: <e.g., "eu-west-1", "us-east-1">
tenant_scope: <single-tenant / multi-tenant / per-tenant>
related_phase_179_tasks: [<...>]
related_cards:
  models: [<list of model card paths>]
  evaluators: [<list of evaluator card paths>]
  optimizers: [<list of optimizer card paths>]
  policy_bundles: [<list of policy-bundle card paths>]
---

# System Card — <artifact_name> v<version>

## 1. System identity

- **System name:** <name>
- **Deployment region and data-residency posture:** <region, cloud, legal
  residency commitment>
- **Operator organization:** <Oshun / tenant / managed service>
- **Intended deployers:** <who runs this system on behalf of whom>

## 2. Scope and non-scope

- **Use-case classes served:** <subset of the 14 `ConcordiaUseCaseClass` values>
- **Operational modes enabled:** <subset of the 6 `ConcordiaOperationalMode`
  values; which jurisdictions opt which in>
- **Explicitly-refused use cases:** <reference hard boundaries at §179.1.2.2>
- **Tenant configuration highlights:** <model routing, review thresholds, legal
  disclaimers, execution adapters, retention policy>

## 3. Architecture

- **High-level diagram:** <link to architecture doc>
- **Key components:** <workbench, orchestrator, preference-inference service,
  search kernels, evidence pipeline, consent ledger, audit store>
- **Models in use:** <link each to its model card>
- **Optimizers in use:** <link each to its optimizer card>
- **Evaluators hooked into release gate:** <link each to its evaluator card>
- **Policy bundles:** <link each to its policy-bundle card>
- **Third-party dependencies:** <GPAI providers, storage, telemetry, identity —
  each with AI Act / NIST posture notes>

## 4. Data flow

- **Inputs:** <what data the system ingests; what is party-private vs shared>
- **Storage:** <how private data is sealed per §179.5.1.2>
- **Outputs:** <candidate agreements, settlement drafts, audit events,
  analytics>
- **Retention policy:** <per
  `USE_CASE_CLASS_PROFILES[*].minimumAuditRetentionDays` and tenant overrides>
- **Cross-border transfers:** <if any, name the lawful basis and transfer
  mechanism>

## 5. Identity and access

- **RBAC / ABAC model:** <brief description; cite §179.2.5.2>
- **Roles served:** <party, mediator, reviewer, counsel, procurement officer,
  DAO steward, safety reviewer, auditor>
- **Authentication provider:** <IdP; MFA requirements>
- **Conflict-of-interest handling:** <cite §179.2.5.3>
- **Rate limits and abuse controls:** <cite §179.2.5.5>

## 6. Privacy posture

- **Party-isolation guarantees:** <physical prompt separation, per-party keys,
  auditable reads — cite §179.5.1.\*>
- **Consent surface:** <how §179.1.2.4 consent purposes are captured, revoked,
  audited>
- **Data subject rights:** <export, deletion, legal-hold, portability — cite
  §179.5.4.5>
- **Incident disclosure cadence:** <who is notified, how fast, through what
  channel>

## 7. Safety posture

- **Hard boundaries active by default:** <subset of `HardBoundaryKind`>
- **Kill-switch surface:** <cite §179.5.5.3; identify who holds the switch>
- **Reviewer-queue staffing:** <SLA, dual-control policy, unstaffed-gate block —
  cite §179.5.5.1>
- **Cooling-off durations per class:** <table of value / sensitivity thresholds
  to cool-off time>

## 8. Reliability posture

- **Availability target (SLO):** <e.g., 99.9% monthly>
- **Latency targets:** <p50, p95, p99 for each key surface>
- **Disaster recovery:** <RPO, RTO, failover>
- **Observability:** <what dashboards and alerts; cite §179.6.3.4>

## 9. Change management

- **Deployment cadence:** <how often the system ships>
- **Release gate passage:** <cite §179.10.\* gates this system satisfies>
- **Model / optimizer version pinning:**
  <how each accepted agreement pins the exact card versions used>
- **Rollback procedure:** <how fast; tested how recently>

## 10. Regulatory posture

- **EU AI Act high-risk classification:** <applies / does not apply; basis>
- **GDPR basis:** <lawful basis, controller / processor, DPIA status>
- **UNCITRAL ODR alignment:** <link to relevant principle mappings>
- **Sector-specific regulation:** <AAA, JAMS, finance, healthcare as applicable>
- **Certifications:** <SOC 2, ISO 27001, ISO 42001, others>

## 11. Incident response

- **On-call rotation:** <link or description>
- **Incident severity taxonomy:** <cite §179.5.3.4>
- **Communication plan:** <who notifies whom when an incident occurs; include
  tenant, regulator, and party communications>

## 12. Sunset and decommissioning

- **End-of-life plan:** <how the system is deprecated, data migrated, consent
  re-obtained, retention obligations honored>

## 13. References

- <links to architecture docs, runbooks, DPIA, SBOM, related cards>