Sanctions, AI & External Data Adapters
Governed connectors for licensed screening data, AI providers and market data: list versions, sync jobs, structured error handling, vaulted credentials and contract/licence references (INT-08).
INT-08
Source adapters
8
1 blocked (licence) · 7 active
List freshness (p95)
6h 10m
SLA ≤ 24h for sanctions lists
Sync jobs (24h)
38
2 failed · 1 in DLQ
Credential rotations due
1
WorldGuard key · due 20 Jul
Egress redaction checks
100%
0 classification violations (30d)
Source adapters
| Source | Category | Licence / contract | Permitted use | Freshness SLA | Lineage | Residency | Status |
|---|---|---|---|---|---|---|---|
| UN Consolidated Sanctions Public list · signed download |
Sanctions | Public — terms recorded | Screening only | ≤ 24h | Tracked | Local copy · UAE | Active |
| UAE Local Terrorist List Executive Office feed |
Sanctions | Authority feed — registered | Screening only | ≤ 4h | Tracked | Local copy · UAE | Active |
| WorldGuard PEP & Sanctions Licensed commercial feed |
Sanctions / PEP | CTR-2025-142 · exp 31 May 2027 | Screening + periodic review | Daily delta | Tracked | Local copy · UAE | Active |
| NewsTrace Adverse Media Licensed query API |
Adverse media | CTR-2024-310 · expired 12 Jul 2026 | EDD / case enrichment | On demand | Tracked | Query only · redacted | Blocked — licence expired |
| Model provider A (AI Gateway) Generation + extraction · via provider-agnostic gateway |
AI provider | CTR-2026-021 · exp 31 Jan 2027 | Approved use cases only (registry) | n/a | Per-call lineage | UAE region endpoint | Active |
| Model provider B (AI Gateway) Embeddings + fallback generation |
AI provider | CTR-2026-034 · exp 30 Apr 2027 | Approved use cases only | n/a | Per-call lineage | UAE region endpoint | Active — fallback route |
| CBUAE FX reference rates Daily official rates |
Market / FX | Public — terms recorded | Valuation + multi-currency posting | Daily 18:00 | Tracked | Local copy · UAE | Active |
| Company registry lookups DED / free-zone verification |
Registry | CTR-2025-201 · exp 30 Nov 2026 | KYC verification | On demand | Tracked | Query only · minimized | Degraded — upstream latency |
8 adapters · source/licence/version, permitted use, freshness and lineage tracked per §7.11 INT-08AI Gateway console
List versions in force
Delists & rescreening| List | Version | Published (source) | Imported | Δ Added | Δ Removed | Δ Changed | Content hash | Status |
|---|---|---|---|---|---|---|---|---|
| UN Consolidated | 2026-07-15.1 | 15 Jul 20:02 | 16 Jul 02:00 | 14 | 3 | 22 | sha256:4c1a…88f0 | In force — rescreen complete |
| UAE Local List | 2026-07-10.0 | 10 Jul 14:11 | 10 Jul 14:40 | 2 | 0 | 1 | sha256:9de2…41bb | In force — rescreen complete |
| WorldGuard PEP | 2026-07-17.d | 17 Jul 01:30 | 17 Jul 03:05 | 311 | 97 | 1,204 | sha256:be77…03cd | Rescreening 62% — 4,180 of 6,742 parties |
| WorldGuard Sanctions | 2026-07-17.d | 17 Jul 01:30 | 17 Jul 03:05 | 9 | 1 | 44 | sha256:17aa…9e02 | In force — rescreen complete |
| NewsTrace media index | 2026-07-11.0 | 11 Jul 22:00 | 11 Jul 23:15 | — | — | — | sha256:60c4…b7d9 | Stale 6 days — source blocked |
| CBUAE FX rates | 2026-07-16 | 16 Jul 18:00 | 16 Jul 18:04 | — | — | 31 | sha256:f2b8…1140 | In force |
Version deltas trigger authorized rescreening; delist handling per Sanctions sync
Sync jobs (last 24h)
| Job | Source | Started | Duration | Records | Result | Error code | Action |
|---|---|---|---|---|---|---|---|
SYNC-11851 | WorldGuard PEP delta | 17 Jul 03:00 | 4m 55s | 1,612 | Success | — | — |
SYNC-11850 | UAE Local List poll | 17 Jul 02:00 | 18s | 0 | Success — no delta | — | — |
SYNC-11849 | NewsTrace ingestion | 17 Jul 03:00 | 2s | 0 | Blocked — fail closed | ERR_LICENSE_EXPIRED | Degraded notice |
SYNC-11846 | Company registry health probe | 17 Jul 01:15 | 29.8s | 1 | Success after 2 retries | ERR_UPSTREAM_TIMEOUT | — |
SYNC-11843 | WorldGuard full refresh | 16 Jul 22:00 | 41m 12s | 2.4M | Success | — | — |
SYNC-11841 | CBUAE FX rates | 16 Jul 18:02 | 6s | 31 | Success | — | — |
SYNC-11838 | UN Consolidated import | 16 Jul 02:00 | 1m 44s | 39 | Success — hash verified | — | — |
SYNC-11836 | WorldGuard PEP delta | 16 Jul 03:00 | — | 0 | Failed — moved to DLQ after 5 retries | ERR_SCHEMA_MISMATCH | Replay (authorized) |
Retries use bounded backoff; exhausted jobs quarantine to DLQ with owner-visible incidentProvider health
Error handling — structured envelope & DLQ
Events & DLQAll adapter errors use one Problem Details envelope with stable code, correlation ID and retryability (§10.3). No stack traces or sensitive payloads.
{
"type": "https://erp.almanara.example/errors/ERR_LICENSE_EXPIRED",
"title": "Source licence expired",
"status": 403,
"errorCode": "ERR_LICENSE_EXPIRED",
"detail": "Ingestion stopped safely; no partial write.",
"correlationId": "corr_01J2ZK9V7Q8N",
"retryable": false,
"supportRef": "INC-2026-0231"
}
| DLQ item | Error code | Attempts | Age | Action |
|---|---|---|---|---|
SYNC-11836 · WorldGuard delta | ERR_SCHEMA_MISMATCH | 5 | 1d 6h |
Credentials & contract references
Vaulted · least privilege| Adapter | Contract ref | Expiry | Vault reference | Last rotation | Next rotation |
|---|---|---|---|---|---|
| WorldGuard | CTR-2025-142 | 31 May 2027 | vault://data/worldguard/prod#v8 | 20 Apr 2026 | Due 20 Jul 2026 |
| NewsTrace | CTR-2024-310 | Expired 12 Jul 2026 | vault://data/newstrace/prod#v5 | 12 Jan 2026 | Suspended |
| Model provider A | CTR-2026-021 | 31 Jan 2027 | vault://ai/provider-a/prod#v3 | 28 Jun 2026 | 26 Sep 2026 |
| Model provider B | CTR-2026-034 | 30 Apr 2027 | vault://ai/provider-b/prod#v2 | 30 Jun 2026 | 28 Sep 2026 |
| Company registry | CTR-2025-201 | 30 Nov 2026 | vault://data/registry/prod#v4 | 02 Jul 2026 | 30 Sep 2026 |
Provider access is least-privilege; shared credentials prohibited
Egress minimization & redaction by classification
Classification policy| Use case | Destination | Data class | Fields sent | Redaction applied | Approval |
|---|---|---|---|---|---|
| Sanctions screening query | WorldGuard | C2 — Personal | Full name, DOB year, nationality | Emirates ID withheld (784-19●●-●●●●●●●-●) · address withheld | MLRO · 04 Jan 2026 |
| Adverse media query | NewsTrace | C2 — Personal | Full name + alias set | No identifiers beyond name | Suspended with licence |
| AI document extraction | Model provider A | C3 — Sensitive doc | Document image (KYC scope) | Zero retention flag · region-pinned · no training use | AI Platform Owner · 15 Mar 2026 |
| AI listing description draft | Model provider A | C1 — Business | Unit specs, no party data | Party names stripped by gateway policy | Approved use case UC-114 |
| Registry verification | Company registry | C2 — Corporate | Trade licence no., legal name | UBO details withheld | Compliance · 10 Feb 2026 |
Gateway blocks any call whose payload exceeds the approved field set for its classificationAI observability
Suspend adapter — Company registry lookups
Consequence: KYC verification falls back to the controlled manual evidence procedure; open verifications (3) stay queued and are not lost. Screening and AI features are unaffected.
Related: Screening review · Risk & EDD · AI Gateway · Model & prompt registry · Provider Hub · Provider health
Static render mockup — no live data. Source: ERP Modern Development Specification v2.0 (§7.11 INT-08, §10.2/§10.3 provider & API contracts) · Covers: INT-08.