P&C coverage investigation · Track 02: the agent that can explain why
Every fact, under the lamp.
The missing one, named.
COLDSPOT investigates a disputed claim across the carrier's scattered systems, federates them through one governed Zetaris query, and decides coverage with Nemotron. When a required fact is missing it refuses to guess: it shows you the cold spot instead.
real governed sources · append-only Trust Ledger · every number recomputable from seed
missing factwhether the loss date falls inside the declared CAT event window
sources · kept 4 / discarded 2
● oracle_policy schema match, 1 row, fresh
● endorsement_rows schema match, 1 row, fresh
● treaty_api schema match, 1 row, fresh
● openfema DR-4844-FL, Hurricane Milton
○ legacy_notes stale, 2794d > 365d; 0 rows match POL-1001
○ damage_photo no readable image evidence
the leak
$30B/yr
P&C underwriting leakage from fragmented coverage data. Industry estimate; framing in the project brief.
wrong call, one way
Pay a claim the policy never covered. The leakage compounds silently, cycle after cycle.
wrong call, the other way
Deny a claim that was covered. Now it is bad faith, regulators, and a courtroom asking for your lineage.
the coldspot answer
An overconfident answer is the expensive one. COLDSPOT's value is the honest refusal: surface the missing fact instead of hallucinating a confident call.
how it investigates
Four moves. Every one leaves a receipt.
Discover the sources
Probes the carrier estate, keeps what governs this claim, and discards decoys with a signal-derived reason it writes down.
legacy_notes: "stale (last refreshed 2019-03-01, 2794d > 365d); 0 rows match policy POL-1001"
Federate, in place
One governed Zetaris Lightning SQL query joins policy admin, endorsements, and the reinsurance treaty where they live. The data never centralizes; governance stays intact.
federate: ["FILES.policy", "FILES.endorsement", "SRC.treaty"] · 1 row
Reconcile completeness
A deterministic gate checks whether the evidence set can support a confident decision. Each required fact is a cell; any cold cell holds the gate open.
facts: { baseLimit, sublimit, peril, cession, reported, catWindow, lossInsideCatWindow: null }
Decide, or refuse
Nemotron reasons over the warm cells and issues a reserve, or abstains, naming the exact missing fact and the source that resolves it. Every sentence cites its lineage.
abstain: missing_fact = "loss date inside the declared CAT event window"
the record stands
Numbers you can re-derive, not just read.
Every headline number recomputes from the committed seed by scripts/verify-claims.ts, never read back from a cached artifact. The Trust Ledger is append-only: every probe, discard, federate, reconcile, and refusal on the record, in order, forever.