Case studies & the governance archive.

Summary

In 2012, a trading firm lost $440 million in 45 minutes due to unintended reactivation of deprecated code.

How Anchor Responds

AST scanning detects unauthorized execution path reactivation; the runtime sandbox (Diamond Cage) isolates and blocks anomalous behavior; the Decision Audit Chain logs approval history.

Summary

In 2024, Air Canada was held legally liable after its customer support chatbot drifted from official bereavement fare policy and fabricated a retroactive refund procedure (Moffatt v. Air Canada, 2024 BCCRT 149).

How Anchor Responds

Anchor's semantic interceptor validates LLM output assertions against the active policy contract before client delivery. Drifted claims are coerced to pre-approved compliant responses and logged in the Decision Audit Chain.

Summary

Malicious or security-compromised embeddings introduced into a vector store lead to incorrect but policy-compliant agent decisions.

Combined Solution

Canon ensures source material freshness and authenticity, while Anchor enforces runtime validation of LLM output against the current active policy manifest.

Summary

In 2018, TSB Bank's IT migration failure caused a £600M outage affecting 1.9 million customers, resulting in a joint FCA/PRA fine of £48.65M.

How Anchor Responds

CI/CD defect limit gates (POL-DEPLOY-004) enforce active-active datacenter configuration drift detection before production cutover. The runtime sandbox blocks deployment when unresolved defect counts exceed constitutional thresholds.

Summary

In 2020, Citibank accidentally wired $893M to Revlon lenders due to an Oracle Flexcube UI checkbox failure, resulting in a $500M net loss and OCC Consent Order.

How Anchor Responds

Structured Mode payment rules (POL-FIN-005) enforce multi-party approval gates and amount-threshold verification before high-value wire execution. The Decision Audit Chain captures the full authorization lineage.