A compliance officer at a $4 billion community bank opens an OCC exam letter. It asks about her AI model risk management framework.
She has 30 days.
She has no dedicated AI team.
The regulators who wrote that letter have been studying AI governance for three years.
This is not a hypothetical. It is the Tuesday morning of a real person at a real institution. The Compact exists because she shouldn\u2019t have to figure it out alone.
The people responsible for governing AI are structurally outmatched by the people examining them.
Most AI governance products aim at risk officers and engineers — roughly 5% of headcount at a mid-market bank. The other 67% — loan officers, tellers, claims adjusters, intake nurses — touch AI-visible workflows every day. They make the decisions the examiner reads first.
The frameworks they were given — SR 11-7, OCC 2011-12 — were written for a different era. The gap between what regulators expect and what institutions can deliver is widening every quarter. And it\u2019s not their fault.
If you can\u2019t answer those four questions with evidence, you don\u2019t have a governance gap. You have an examination finding waiting to happen.
AI governance methodology should not be a proprietary secret sold by consultants at $500 an hour. It should be shared infrastructure — held in common.
That\u2019s the founding conviction of The Compact. Not because open methodology is charitable — because it\u2019s the only way to build an actual standard instead of a hundred competing vendor frameworks that fragment the industry and leave the compliance officer worse off than before.
The methodology is Apache 2.0. Open. Forkable. Auditable. The tooling, the coaching, the evidence engine — that\u2019s the business. But the knowledge of how to govern AI belongs to the profession, not to a vendor.
We call them Postures, not Levels.
A level implies a hierarchy you climb and leave behind. A posture is a stance you hold. A Keeper doesn\u2019t stop being a Witness. The awareness doesn\u2019t go away — it deepens.
The AGRS — AI Governance Readiness Score — is the through-line. Not a one-time assessment but a living metric across six dimensions. Everything The Compact does moves your AGRS.
You see AI is here. You touch it every day — in the lending queue, the claims triage, the teller screen. You don’t need to understand the model. You need to know it’s there.
You can open a model risk management policy and follow its logic. You can read a validation report and know what it’s claiming. The documentation speaks to you now.
You manage governance day to day. Intake forms, evidence collection, escalation paths — the operational rhythm is yours.
You design frameworks. Not just follow them — build the governance architecture your institution runs on.
You maintain, evolve, and defend the framework under examination. When the OCC walks in, you’re the one in the room.
You set the standard others follow. 0.2% of the profession. The methodology moves because you move it.
Most people settle at one Posture and become extraordinary there. A teller at Witness who can clearly describe the AI in her workflow is more valuable to the examiner than an engineer at Architect who can\u2019t explain what the model does in plain language.
Learn the posture. Test under pressure. Deploy the evidence.
Three pillars — not three products. They\u2019re three phases of the same journey. The Academy teaches what to do. The Simulator shows where you\u2019d fail. The OS produces the evidence that you didn\u2019t.
The Academy
Learn the posture.
The curriculum takes your entire workforce — not just the 5% in risk — from Witness to Keeper. Sentinel, the AI coach, meets each learner where they are. It doesn\u2019t dump L4 material on an L0 person. It asks Socratic questions, supplies templates, and guides the learner through evidence production.
The credential is AGRS — AI Governance Readiness Score — measured across six dimensions: Governance Framework, Risk Management, Technical Controls, Compliance Monitoring, Organizational Culture, and Third-Party Risk. Evidence-based, never attendance-based.
Explore the AcademyThe Simulator
Test under pressure.
Before the real exam, you run your institution\u2019s profile through a six-stage enforcement cascade: Trigger, Detection, Response, Cascade, Resolution, Learning. You see exactly where your governance would fail and what it would cost — in dollars, in reputation, in consent orders.
Think of it as the flight simulator for compliance. You crash here so you don\u2019t crash in front of an OCC examiner. Sector-aware: the cascade looks different at a credit union (NCUA) than at a Tier 1 bank (OCC) or a health system (HHS).
Try the SimulatorThe OS
Deploy the evidence.
105 governance plugins. 526 operational skills. Evidence generation, policy drafting, risk scoring, audit trails, third-party vendor assessments — the tools that produce the artifacts your examiner expects to see. Hash-chained for tamper evidence. Your tenant, your data.
The Academy taught you what to do. The Simulator showed you where you\u2019d fail. The OS does it at scale — and produces the evidence binder that proves you did.
Explore the OSAcademy improves your AGRS.
Simulator stress-tests it.
OS operationalizes it.
One score. One journey. Three instruments.
“Welcome. I see your role doesn\u2019t require you to design or validate models — only to recognize them, describe them honestly, and stay within your approved tool set. That\u2019s the whole work at this stage. Let\u2019s start.”
Sentinel is the AI coach that walks with each learner through the AGRS credential ladder. A warm Socratic guide — it asks questions, supplies templates, and generates sector-specific vignettes. Never adversarial. The learner is still learning what to ask.
For a teller at a community bank, Sentinel surfaces scenarios about AI-assisted check deposit scoring. For a claims adjuster at an insurance carrier, it walks through automated severity triage. Same framework, different reality. That\u2019s the point.
That compliance officer has 30 days.
Here\u2019s what those 30 days look like with The Compact.
Your examiner isn\u2019t waiting. Neither should you.
thecompact.academy · Apache 2.0 methodology · Where AI governance is held in common