Aegis
AEGIS · CRDB BANK · TANZANIA
DR
Aegis · Compliance Evidence Console

Posture & Seal Status

Every event · captured, structured, and sealed as audit-ready proof

Tenant: CRDB BANK · TANZANIA
Last seal: Thu, 09 Jul 2026 09:14:22 GMT
Seals: verified
Demo data · illustrative only
Compliance Posture
BOT Dormant Accounts
continuous · 32s ago
88%
37/42
Ready to submit
19
On hold
1
Exceptions 24h
2
Sealed records
1,481
Tamper-evident seals
Authorization checks
Customer-held keys
STARS · every event, structured
8 standard record fields
tamper-sealed
Who
actor / identity
42
What
asset / object
1,481
When
timestamps
1,481
Where
location
6
Why
rule satisfied
86
How
method / procedure
1,481
How Many
measurements
5,920
Meta
seal + version
24
Every event is captured once and structured into these 8 fields — then sealed as tamper-proof, inspector-ready proof.
Sealed Record Ledger · last 24h
Sealed records
Record ID (SHA-256)RecordTypeSite / RefRule refsStatus
c19a·7f42·b038·5e61ACCT ····3391 · segregation.recordPII · Segregated
Dar es Salaam · Branch 07
DORM-2026-0714
BOT DormancyPOL-DORM-001
sealed
8d20·1abe·4c77·f902ACCT ····6620 · ageing-flag.recordPII · Ageing
Coastal · Branch 02
DORM-2026-0713
BOT DormancyPOL-DORM-002
sealed
f0b7·3352·9ad1·6c48ACCT ····1174 · bot-eligibility.recordPII · BOT-Eligible · 10yr
Lake · Branch 06
DORM-2026-0712
BOT DormancyPOL-DORM-002POL-DORM-004
sealed
2a54·c9f0·71bd·e330BOT-UNCLAIMED-2026-Q2 · submission.recordPII · Submitted to BOT
Lake · Branch 06
DORM-2026-0711
BOT DormancyPOL-DORM-004
sealed
9e13·6d80·04af·b271ACCT ····8842 · segregation.recordPII · Segregated · exception
Zone ? · Branch ?
DORM-2026-0710
BOT Dormancymissing zone data
exception
4c77·a2e9·f018·3b56ACCT ····3391 · restoration-hold.recordPII · Restoration held
Dar es Salaam · Branch 07
DORM-2026-0709
BOT DormancyPOL-DORM-003KYC hold
hold
Rules Engine
Live policy decisions
  • 09:14:22
    PII.block.when(geo-metadata + balance on segregated account)
    ACCT ····3391 · device geolocation + balance read together
    fields: What · Whereblock
  • 09:11:48
    PII.block.when(bulk read across dormant pool)
    Script pulling balances for 500+ dormant accounts in 90s
    fields: How · How Manyblock
  • 09:07:12
    PII.redact.when(balance + last-known-address on segregated account)
    ACCT ····6620 · balance + last-known-address read together
    fields: What · Whereredact
  • 09:02:58
    Read.allow.when(basic account status on dormant account)
    ACCT ····6620 · dormancy status queried by branch officer
    fields: Who · Whyallow
  • 08:47:31
    Restore.block.when(kyc_status != verified)
    ACCT ····3391 · restoration requested, KYC re-verification pending
    fields: Who · Whyblock
  • 08:22:47
    Age.flag.when(inactivity_days >= 3650)
    ACCT ····1174 · crossed 10-year submission threshold, BOT-eligible
    fields: When · How Manyblock
  • 07:58:15
    Submit.allow.when(bundle complete + eligibility verified)
    BOT-UNCLAIMED-2026-Q2 · submission bundle complete, sealed
    fields: How · Metaallow
Requirement coverage
Coverage by area
Proactive Segregation (2yr)5/6 · 83%
Ageing & Pool Tracking5/5 · 100%
BOT Eligibility (10yr)4/4 · 100%
Restoration & KYC Re-verification5/6 · 83%
Unclaimed Balance Submission4/5 · 80%
PII Access Control6/7 · 86%
Audit Trail5/5 · 100%
Records Retention3/4 · 75%
Exceptions & Holds
Open exceptions
2 open
  • Segregation event missing zone data · ACCT ····8842
    high

    A proactive-segregation event sealed without a resolvable zone/branch identifier. The record is held as an exception until the branch mapping is corrected, so it cannot roll up into the zone dashboard or a BOT submission bundle.

    Wed, 08 Jul 2026 16:40:09 GMT
  • Restoration held pending KYC re-verification · ACCT ····3391
    medium

    A customer requested restoration of a segregated account. KYC re-verification has not yet passed, so restoration is blocked and the account stays in the segregated pool until manual review clears.

    Wed, 08 Jul 2026 15:12:33 GMT
Rule: on a restoration request that fails KYC re-verification, restoration=blocked is written and the account stays in the segregated pool until re-verification passes or manual review clears.