Practitioner notes from the firm.
Reference notes we at RegCore.AI have written against the regulatory ground, OSFI E-23, FIFAI II, FINTRAC, CIRO, SR 11-7, NIST AI RMF, EU AI Act and the operating practice around them. For the current editorial track, see our insights page; for the canonical framework index, see frameworks.
Five AI governance artifacts a regulated deployer has to produce
The artifact set that answers OSFI E-23, SR 11-7, NIST AI RMF and EU AI Act reviewers, model cards, agent cards, HITL architecture, inventory, governance operating model.
Read the note →/fintrac-ciro-ai-2026FINTRAC 2026 and CIRO consolidation, AI in Canadian financial services
What the 2026 FINTRAC amendments and CIRO consolidation mean for AI-driven transaction monitoring and investment-dealer supervision.
Read the note →/intervenabilityThe intervenability turn, why monitoring alone stops working
Observability became table stakes. The 2026 maturity step is intervenability, how fast you can stop the system and who is on the gate when you do.
Read the note →/osfi-e23-vendor-cascadeWhat OSFI E-23 asks of AI vendors selling into Canadian banks
The practical flow-down effect of E-23 on AI vendors, read clause-by-clause against the supervisory perimeter the bank client operates under.
Read the note →/osfi-e23-vendor-playbookOSFI E-23 vendor questionnaire playbook
The questions Canadian FRFI procurement teams are sending on AI, the artifacts that answer them, and the failure modes that show up repeatedly.
Read the note →/osfi-fifai-agileWhat OSFI is signalling through its AI governance workshops
FIFAI is a channel, not a rulebook. How OSFI's supervisory themes cascade through E-23, B-10 and E-21 to shape AI governance programmes in Canadian FRFIs.
Read the note →/platform-vs-consultancyAI governance, platform, consultancy, or something else
A structured comparison of AI governance platforms and consultancy-led delivery for Canadian and North American FSI. Where each fits, where each breaks.
Read the note →/sr-11-7-e-23-crosswalkSR 11-7 meets OSFI E-23, a cross-border model risk crosswalk
The Fed/OCC/FDIC refresh and the OSFI E-23 enforcement date have made the two frameworks asymmetric on GenAI and agentic AI. Here is the crosswalk.
Read the note →/three-governance-gapsThree AI governance gaps existing tools cannot close
Observability without traceability, policy buried in prompts, and a commit-semantics gap, three structural failures dashboards and GRC tools cannot address alone.
Read the note →