INC-1: Denials rose after bureau feed 3.3
This page shows what happened, how sure Auga is, what has been done, and how the incident can be closed.
Harm suspected Status: Investigating. Owner: Erik Lindqvist, Head of Credit Risk.
What happened
On 1 Nov 2026, the bureau feed changed from version 3.2 to 3.3. After the change, every run on 3.3 ended in a denial. In the same hours, runs that stayed on 3.2 were denied in 16% of cases.
The two groups are clearly different. See the measurement in Improve.
How sure Auga is
| Level | Reached | The evidence |
|---|---|---|
| Something changed | Yes | The share of failed runs changed at 11:15 on 1 Nov 2026. |
| Harm suspected | Yes | A finding of grade A links the bureau feed to the risk score: credit.feed_batch_records to credit.score_source, kind harm. See the finding. |
| Harm confirmed | Not yet | A person must review affected decisions in Coach, or the real outcome must show that the denials were wrong. |
A denial counts as a failed run, but a denial can be correct. So the harm is not confirmed yet.
What has been done
The Bureau agent's data handling is held at a lower stage. See Mandates.
Improve proposes to return the bureau feed to 3.2. See the proposal.
How it can be closed
Auga measures the runs after the fix. When the share of failed runs is back at the level before the change, the owner can close the incident.
The owner can also close it earlier. The record then shows that the measurement was missing.
Serious incident?
Whether this is a serious incident under the EU AI Act is a decision for Acme Lending. Erik Lindqvist has not decided yet.
Timeline
| When | What happened | Who |
|---|---|---|
| 1 Nov 2026 11:15 | The share of failed runs changed. | Auga, later from the data |
| 1 Nov 2026 11:20 | Bureau feed 3.3 appeared in the telemetry. | Auga, later from the data |
| 4 Nov 2026 14:44 | The file credit-nov was imported and analysed. | Auga |
| 4 Nov 2026 14:52 | Auga opened the incident at the level Harm suspected. | Auga |
| 4 Nov 2026 15:10 | Erik Lindqvist became the owner. | Maria Svensson |
| 4 Nov 2026 16:02 | Improve proposed to return the feed to 3.2. | Auga |
This page is a sketch. Nothing on it is built, and all names and figures are invented.
Send evidence
Auga puts the evidence about this incident into one signed package. A receiver can check the package without Auga.
The package holds
- What happened, with the figures.
- The affected runs, under pseudonyms.
- The cause chain, with the grade of each finding.
- Who decided what, and when.
- The stages before and after.
- What Auga cannot say.
Receivers
The GRC system, the ticketing system, the model provider, or a supervisor. See the receivers in Connections.
Now
This prototype sends nothing. Each package that Auga sends would be recorded in the ledger.