The TruthLayer pilot programme
for APRA-regulated entities
Three design-partner slots are open for Q4 2026. Twelve weeks, A$19,999 fixed fee, one concrete deliverable: a mapped CPS 230 evidentiary package your internal audit team can put in front of APRA’s supervisory review.
Structure
| Weeks 1–2 | Integration: webhook wiring at your edge, tenant and agent registration, HMAC credential exchange. |
|---|---|
| Weeks 3–6 | Live capture: your agents’ production or staging traffic chained, sealed nightly, anchored to Bitcoin. |
| Weeks 7–10 | Detection tuning: anomaly thresholds and capability envelopes calibrated against your agents’ real behaviour. |
| Weeks 11–12 | Evidence assembly: CPS 230 evidentiary package mapped paragraph-by-paragraph, internal audit dossier, verification walkthrough with your audit team. |
Terms
- A$19,999 fixed fee, invoiced 50% at commencement and 50% at week 6.
- Twelve weeks from integration start, not contract signature.
- Your data stays in your jurisdiction — jurisdiction tagging is enforced at ingest.
- Complete Iceberg-format export of all captured evidence if you choose not to continue.
- No auto-renewal. Continuation is a separate decision at week 12.
Fit criteria
- You are an APRA-regulated entity: bank, insurer, superannuation fund, or private health insurer.
- You run — or will run within six months — autonomous AI agents that call tools, execute code, or move money.
- Your operational risk or AI governance function owns the CPS 230 response.
- Your agent traffic can transit Cloudflare edge services, or you can route a representative subset through them for the pilot.
What you receive at week 12
- CPS 230 evidentiary package with paragraph-level mapping
- Internal audit dossier
- Insurer-formatted evidence bundle (if pursuing affirmative AI coverage)
- Complete Iceberg export if you choose not to continue
- Reference customer status (entity name only, no operational detail)
No sales cycle. No calendar link. Response within one business day.