{"api":{"name":"api.sb","description":"Business-as-Code surface for Startups.Studio","home":"https://api.sb","docs":"https://api.sb/docs","version":"1.0.0"},"$context":"https://api.sb/$context","$type":"FoundingHypothesis","$id":"https://api.sb/founding-hypotheses/fh%3Aw2-compliance-audit-risk-analyst-risk-register%3At-hsa%3Av1","links":{"self":"https://api.sb/v1/founding-hypotheses/fh%3Aw2-compliance-audit-risk-analyst-risk-register%3At-hsa%3Av1","canonical":"https://api.sb/founding-hypotheses/fh%3Aw2-compliance-audit-risk-analyst-risk-register%3At-hsa%3Av1","pool":"https://api.sb/v1/founding-hypotheses"},"foundingHypothesis":{"id":"fh:w2-compliance-audit-risk-analyst-risk-register:t-hsa:v1","lens":"ManagedWorkflow","type":"founding-hypothesis","click":{"rubricScores":{"C8_lensFit":0,"C7_magicLensFit":0,"C4_competitorHonesty":1,"C6_crossSlotCoherence":1,"C1_customerSpecificity":1,"C2_problemFrictionRealism":1,"C9_killCriteriaAttestability":1,"C3_approachEngineCoverability":1,"C5_differentiationLoservilleEscape":1},"upperRightLoserville":true},"cellRef":{"id":"work-contexts.org.ai/w2-compliance-audit-risk-analyst-risk-register","stableHash":"wcc:risk-analyst:compliance-audit:risk-register:v1"},"problem":{"slotStatement":"Risk analysts spend 3–5 days per quarter re-walking control owners for evidence, reconciling register entries against SOX testing and internal-audit findings, and hand-pasting residual-risk justifications that examiners then challenge because the rationale isn't traceable back to the source control test or incident ticket."},"approach":{"oneSentence":"A risk-register reconciliation workbench that attests each inherent/residual rating against its underlying control-test result, incident ticket, and policy clause, then exports a review-ready delta pack with primary-source citations linked inline to the Archer/OpenPages row."},"customer":{"icpShape":"Chief Risk Officer or Head of Enterprise Risk at US regional banks and mid-size insurers ($5B–$50B assets) maintaining a SOX/OCC/NAIC-regulated risk register, where the buyer is the CRO (signs the GRC tooling PO) and the daily user is the Risk Analyst II/III owning quarterly register refresh cycles","beachheadShape":"EarlyMajorityWorkflow — US regional banks running Archer or OpenPages risk registers preparing for annual OCC heightened-standards exams"},"archetype":"startup-archetypes.org.ai/ManagedWorkflow-MarketplaceClearing","beachhead":"EarlyMajorityWorkflow — US regional banks running Archer or OpenPages risk registers preparing for annual OCC heightened-standards exams","competitors":{"substitutes":[{"name":"RSA Archer risk-register module","category":"incumbent"},{"name":"IBM OpenPages with Watson","category":"incumbent"},{"name":"MetricStream AI-assisted GRC","category":"incumbent"},{"name":"ChatGPT Enterprise + analyst-maintained Excel tracker","category":"AI-native horizontal"},{"name":"Big-4 co-sourced risk-assessment engagement","category":"human alternative"}]},"studioThesis":"T-HSA","killThreshold":{"K":8,"M":30,"N":7,"rubricItemSet":["C1_customerSpecificity","C2_problemFrictionRealism","C3_approachEngineCoverability","C4_competitorHonesty","C5_differentiationLoservilleEscape","C6_crossSlotCoherence","C7_magicLensFit","C8_lensFit","C9_killCriteriaAttestability"],"verdictPolicy":"all-load-bearing-pass-and-overall-ge-X","loadBearingItemSet":["C1_customerSpecificity","C2_problemFrictionRealism","C3_approachEngineCoverability","C4_competitorHonesty","C5_differentiationLoservilleEscape","C6_crossSlotCoherence","C9_killCriteriaAttestability"],"verdictPolicyVerbatim":"KILL unless every load-bearing rubric item passes per workbook AND overall pass-rate ≥ 7/9 (CASCADE.md §4 Stage 9 commit threshold)."},"lifecycleState":"Active","differentiation":{"twoByTwo":{"xAxis":"Evidence trace per register row (analyst-typed justification ↔ every rating linked to the specific control-test ID, incident ticket, or policy clause that produced it)","yAxis":"System-of-record embedding (external sidecar that exports CSVs ↔ writes directly into the Archer/OpenPages row the examiner opens)","winningQuadrant":"every residual-risk rating carries an inline citation to its control-test result and incident ticket, written back into the native Archer/OpenPages register row the OCC examiner reviews","loservilleEscape":true,"loservilleQuadrant":"ChatGPT Enterprise drafting register narratives in a separate chat window that the analyst copy-pastes back in, with no linkage to the control-test ID or ticket that justified the rating"}},"unmetRequirements":[],"pricingArchitecture":"usage-meter"},"actions":{},"options":{},"relationships":{"runtimeUnit":"https://api.sb/v1/runtime-units?startupRef=startup%3Afh%3Aw2-compliance-audit-risk-analyst-risk-register%3At-hsa%3Av1","brand":"https://api.sb/v1/brands?startupId=startup%3Afh%3Aw2-compliance-audit-risk-analyst-risk-register%3At-hsa%3Av1","listing":"https://api.services/listings?foundingHypothesisRef=fh%3Aw2-compliance-audit-risk-analyst-risk-register%3At-hsa%3Av1","cell":"https://api.sb/v1/cells/work-contexts.org.ai/w2-compliance-audit-risk-analyst-risk-register","thesis":"https://api.sb/v1/theses/T-HSA"},"meta":{"level":"L0","scopes":[]},"user":{"requestId":"a0575ad9fa4c90ce","edgeLocation":"a0575ad9fa4c90ce","geo":{"country":"US"},"ua":{"browser":"Claude"}},"references":{"total":0,"limit":25,"page":1,"links":{"self":"https://api.sb/v1/founding-hypotheses/fh%3Aw2-compliance-audit-risk-analyst-risk-register%3At-hsa%3Av1/references"},"items":[]}}