One register
Every governed object in one typed map
Regulators, obligations, policies, controls, applications, data, models, agents, third parties, entities, evidence and services — held once, referenced everywhere.
Trust and Control OS
The Trust Graph
Institutions do not fail because a control is missing. They fail because nobody could see what the failure was attached to. The Trust Graph is the connective layer beneath every Cabier module: one typed map of obligations, controls, systems, models, third parties, evidence and services, with the relationships between them treated as governed records.
Pick an object below. The graph walks outward and tells you what moves, in what order, and who owns the answer.
Loading the trust graph
The map shown publicly is a demonstration institution. Client graphs are held in the engagement environment and are visible only to that organisation.
How it is built
One map, not twelve registers
Regulators, obligations, policies, controls, applications, data, models, agents, third parties, entities, evidence and services sit in a single typed register. A control is not re-keyed for every framework it answers to.
Relationships are evidence, and they are graded
Every link carries a weight and a confidence, and it records whether it was asserted by an owner, derived from a system adapter, or suggested by a model. The three are never presented as equivalent.
The traversal is the audit trail
The path from a regulatory clause to the reported figure is computed in the database, not assembled in a slide. The same walk that produces the executive view produces the supervisory pack.
What the graph carries
Blast radius
What moves when something breaks
A traversal from the failed object outward, ranked by exposure, with the owner attached to every hop.
Provenance
Asserted, derived, or suggested
Each relationship records how it came to exist and how far it can be relied upon. The three are never presented as equivalent.
Supervisory pack
The traversal is the audit trail
The walk that produces the executive view produces the supervisory pack. There is no second reconciliation step.
Questions it is meant to answer
A supervisor amends a resilience clause. Which controls, owners and business services move, and who has to re-attest?
The primary infrastructure provider degrades. Which important business services lose cover, and is the exit plan tested or nominal?
A credit model drifts past threshold. Which obligation is breached first, and which evidence is already stale?
An incident is classified as major. Which reporting clock starts, in which jurisdiction, for which legal entity?