90%
CNB
Czech National Bank
- §4 Books of account → double-entry ledger
- §20d Business continuity plan → BCP tiers
- CERTIS Domestic clearing → domestic-payment
Open Bank Foundation
Open Bank Foundation
This isn't a pitch deck. It's a running European bank you can inspect: governance mapped to the regulation, the real cost of every business process this month, continuity proven tier by tier, AI under the same gates as humans, and live cloud architecture. All of it, observable.
Every framework control traces to a named article. This is the maturity of that mapping today: a coverage surface, not a compliance claim. The work in the open is closing the gap.
Czech National Bank
Digital Operational Resilience
Payment Services Directive
Anti-Money-Laundering
Data Protection
European Banking Authority
v4.0 · Card Security
EUDI Wallet · digital identity
AI Governance
Every euro of run-cost attributed to the flow that spends it, fully-loaded with shared dependencies. Not an estimate. The current month, live.
Flows share services, so the per-flow sums overlap. Figures are fully-loaded sandbox run-cost.
A prioritized recovery plan per DORA Art.11-12, CNB §20d and EBA ICT guidelines, with real-time health, not a document in a drawer.
Prerequisite of every other tier
CNB §4 accounts · DORA Art.17 audit online during incident
5AMLD Art.18 · payments must not run without AML/sanctions
ADR-0031 · Accepted, deployed. Agents propose; governance disposes. An agent never holds more privilege than a human. It holds less. A customer-facing LLM copilot is live in the sandbox, bearer-auth + rate-limited at the ingress.
Target state per ADR-0027 with a live health overlay from the openbank-sandbox EKS cluster. Cloud-agnostic by design: one AWS-managed layer, everything stateful runs as in-cluster OSS.
The admin portal you just scrolled through is running right now. Sign in with the demo account and click around: FinOps, BCP, AI governance, the live cloud map.