OJK Penetration Test Audit Dossier & Cryptographic Verification Package
verified Statutory Compliance Seal: VerifiedOfficial regulatory submission package conforming to POJK 13/POJK.02/2018 (IKD Sandbox), UU Perlindungan Data Pribadi (UU PDP) No. 27/2022 Article 20 & 27, and ISO/IEC 27001 / 27701 statutory risk annexes.
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
0x7c9f82a1e0b5c19aa827ff9938b8140e6c27f311082c9e7820bb291a182b4b12
Devin Vance
Principal FinTech Enterprise Architect, LIVESTAR Inc.
Ahmad Subagyo, S.E., M.B.A.
Head of Institutional Risk & Regulatory Compliance, PT Bank Mandiri (Persero) Tbk
SYSTEM PENETRATION AUDIT REPORT & CRYPTOGRAPHIC PII REDACTION VERIFICATION
Full Compliance With POJK 13/POJK.02/2018 & Personal Data Protection Law (UU PDP) No. 27/2022
I. Executive Summary · Penetration Test & Redaction Enclave
Test Ref: ADV-TEST-8842-X| Audit Parameter | Target Spec & OJK SLA | Field Test Result | Compliance Evaluation |
|---|---|---|---|
| AI Autonomous Sales Coverage | Livin' PayLater Gadget Surge Q2 | Aisyah Farhana & Bunga Salsabila | 100% IN-SCOPE |
| Red Teaming Attack Vectors | 4 Vectors (Homoglyph, Prompt Inject, Hex Polyglot) | 4 / 4 Perfectly Defended | PASSED (0 BREACH) |
| Redaction Success Rate NIK / PII | Leak Tolerance 0.00% (Zero-PII Leak) | 100.00% (0 / 4.120 Samples NIK) | PASSED (UU PDP) |
| RAM Scrub Latency (Volatile Scrub) | Maximum Threshold < 25.00 ms | Avg 1.18 ms (P99: 2.04 ms) | EXCELLENT (SUB-2MS) |
| Physical Disk Persistence (Non-Volatile Memory) | 0.00 Bytes Stored (Zero Disk Footprint) | 0.00 Bytes (RAM Enclave Isolated) | TERVERIFIKASI |
II. Bukti Samples Telemetri Redaksi (WhatsApp & WhatsApp Business Call)
"Hi there, would like to buy an iPhone 16 Pro on PayLater. My NIK: [REDACTED_NIK_SHA256:7f89a1...] and account number [REDACTED_ACCT:****-9104]."
Aisyah AI: "Your application is approved for a Rp 18,500,000 limit at a transparent 1.42%/mo rate per POJK simulation."
Statutory Matrix
Consumer protection & fee transparency. Autonomous agents strictly enforce non-bypassable disclosure of deterministic APR (1.42%/mo) before transaction checkout.
Strict lawfulness of personal data processing. In-flight PII masked prior to memory ingestion. Zero non-volatile disk write guarantee with TTL 0s purge.
Anti-predatory sales guardrails & cooldown timers active. Conversational drift prevention blocks coercive lending rhetoric and manipulative upselling.
Credit limit ceiling locked at Mandiri Tranche #TR-MNDR-2025-Q2. Drawdowns cannot exceed facility bounds under any multi-turn conversational exploit.
Merkle Audit Tree & RFC 8785
{
"@context": "https://schema.ojk.go.id/ikd/v1/audit.jsonld",
"dossierId": "OJK-PEN-MNDR-2025-8842X",
"campaignRef": "CAMP-MNDR-2025-084B",
"testVectorRef": "ADV-TEST-8842-X",
"bankPartner": "PT Bank Mandiri (Persero) Tbk",
"facilityCapIdr": 25000000000,
"piiScrub": {
"protocol": "ZERO_DISK_RAM_VOLATILE",
"samplesTested": 4120,
"violations": 0,
"avgLatencyMs": 1.18
},
"attestationSignature": "3045022100e4b89...022067c29"
}