# Where Mirror sits in a financial-crime programme

A generic map to the usual parts of an AML/CFT programme. A bank maps it onto its own programme; that per-bank mapping is the bank's work. This page says, for each part, what Mirror contributes and what it deliberately does not.

| Programme part | What Mirror contributes | What it does not do |
|---|---|---|
| **Enterprise risk assessment** | Corridor-level facts: divergence and undetermined rates per corridor, with denominators, released above a k floor (`/macro`); the geometry certificate stating what each agreed table cannot see | It produces no risk rating and no score, of a customer, a corridor or a member |
| **Customer due diligence / KYC** | Perpetual-KYC triggers as commitments, and corroboration when two institutions independently flag one entity; blind related-party checks | It holds no customer identity and makes no CDD decision |
| **Transaction monitoring (trade)** | A cross-institution three-state verdict per shipment: reconciled (with an independent witness), divergent, or undetermined with its reason | It is not a monitoring system for anything else, and not a rule engine |
| **Alert investigation** | The case chain (custody of a verdict inside the case system), party-to-party disclosure with a signed request and grant, recall notices when a witness falls | It holds no case content and no investigator notes |
| **Suspicious-activity reporting** | Nothing. A filing decision is refused at the door and in the verifier | It never holds, carries or infers a filing decision (the tipping-off wall) |
| **Record keeping** | Every verdict signed and held by the parties; the ten-year verification escrow; offline verification | It stores no raw record |
| **Governance and oversight** | Quorum-ratified corridors and witnesses; the change-controlled refusal list; a signed roadmap; the supervisor seat | It holds no committee's decisions beyond ratifications |
| **Model risk / validation** | Deterministic kernels, the verdict certificate (every configuration checked), the model-validation dossier (`/dossier`), conformance vectors | It contains no model to validate: no training, no weights, no score |
| **Independent testing** | The synthetic autopsy (planted cases), known-answer canaries, a public filing-term corpus | It is not an independent test of itself. External testing is the bank's or an auditor's. |
| **Training** | Plain-language pages and the console | No certification of people. A self-issued credential is on the roadmap's Refused list. |

See also:

- [the typology map](/typologies.md): what Mirror catches, and what it is blind to;
- [the supervisor pack](/supervisor-pack.md).