/**
 * AU AML/CTF Act 2006 — AUSTRAC + 2024 DNFBP Amendments
 *
 * Primary statute: Anti-Money Laundering and Counter-Terrorism Financing Act
 * 2006 (Cth) (AML/CTF Act); AML/CTF Rules 2007; Anti-Money Laundering and
 * Counter-Terrorism Financing and Other Legislation Amendment Act 2024 (royal
 * assent November 2024, phased commencement 2025-2026).
 *
 * Reporting entities (existing): "Designated services" Tables 1+2: banking,
 * lending, remittance, currency exchange, financial advice, brokerage, bullion
 * dealing, safe deposit services, digital currency exchange.
 *
 * 2024 amendments — DNFBP expansion (phased): Real estate agents, solicitors
 * and barristers, accountants and auditors, trust and company service providers,
 * dealers in precious metals and stones. DNFBP enrolment deadline: 31 March 2026.
 *
 * AI relevance: AI for transaction monitoring, customer risk scoring, KYC/identity
 * verification, fraud detection, sanctions screening. AUSTRAC issued explicit
 * AI/AML guidance. AI false negatives in transaction monitoring = direct compliance
 * failure. AI-based identity verification must meet CDD standards.
 *
 * Key AI obligations:
 *   - AML/CTF Programme: AI used in AML documented in Part A; programme reviewed
 *     when AI model or thresholds change.
 *   - CDD: Standard CDD before designated service; Enhanced CDD for PEPs, high-
 *     risk countries, complex structures.
 *   - SMR: 3 business days after forming suspicion; 24 hours for CTF suspicion.
 *   - Tipping off (s.123): Cannot disclose SMR existence or subject to customer.
 *     AI customer communications must not reference suspicious activity reviews.
 *   - TTR/IFTI: Physical currency/digital currency at/above AUD 10,000 and
 *     international funds transfers reported within 10 business days.
 *   - Note: AU 24-hour CTF SMR clock is the strictest AML SMR obligation globally,
 *     stricter than US BSA/FinCEN 30-day SAR window.
 *
 * Cross-pack interactions:
 *   - au-aml-ctf + au-privacy-act: CDD records contain sensitive PI; APP 11
 *     security + APP 12 access rights apply. Tipping-off restriction may override
 *     APP 12 access during active investigation.
 *   - au-aml-ctf + au-cdr: CDR data cannot be used for AML CDD without CDR consent
 *     covering that purpose. PS 6 use limitation applies.
 *   - au-aml-ctf + au-cps230: APRA banks/insurers face AML programme failures as
 *     operational risk events under CPS 230. Major AML breach may trigger CPS 230
 *     APRA notification in parallel with AUSTRAC obligations.
 *   - au-aml-ctf + au-soci-act: Financial services sector = designated CI sector.
 *     AML system compromise (AI monitoring offline by cyberattack) may simultaneously
 *     trigger SOCI cyber incident notification to ASD.
 *   - au-aml-ctf + bsa-aml (US): Parallel AUSTRAC + FinCEN obligations for entities
 *     with AU and US reporting relationships. AU 24-hour CTF SMR clock is strictest.
 *
 * [CITATION TO VERIFY]: DNFBP enrolment deadline of 31 March 2026 is based on the
 * Anti-Money Laundering and Counter-Terrorism Financing Amendment Act 2024 (royal
 * assent November 2024). Verify final commencement dates against AUSTRAC
 * implementation schedule before relying on this deadline.
 *
 * Authority: Australian Transaction Reports and Analysis Centre (AUSTRAC)
 * Sovereignty: Australian Federal
 *
 * @connexum/ai-governance
 */
export const AU_AML_CTF_CATEGORY_CLASSIFIERS = {
    AU_AML_CUSTOMER: {
        references: ['AML/CTF Act Part 2 — customer due diligence obligation'],
        classifier: (input) => {
            if (/\b(?:aml\s+customer|cdd\s+customer|kyc\s+(?:record|profile|status)|aml[_\-\s]ctf\s+(?:customer|client))/i.test(input))
                return true;
            return false;
        },
    },
    AU_AML_PEP: {
        references: ['AML/CTF Rules — politically exposed person; enhanced CDD mandatory'],
        classifier: (input) => {
            if (/\b(?:politically\s+exposed\s+person|PEP\b|pep\s+(?:customer|client|screening|enhanced\s+cdd))/i.test(input))
                return true;
            return false;
        },
    },
    AU_AML_HIGH_RISK_COUNTRY: {
        references: ['AML/CTF Rules — high-risk jurisdiction enhanced CDD'],
        classifier: (input) => {
            if (/\b(?:high[_\-\s]?risk\s+(?:country|jurisdiction|location)|fatf\s+(?:grey|black)\s+list|high[_\-\s]?risk.*(?:aml|cdd|transaction))/i.test(input))
                return true;
            return false;
        },
    },
    AU_AML_SUSPICIOUS_MATTER: {
        references: ['AML/CTF Act s.41 — SMR 3 business days; s.41A — CTF SMR 24 hours'],
        classifier: (input) => {
            if (/\b(?:suspicious\s+matter\s+(?:report|SMR)|SMR\b|transaction\s+(?:monitoring\s+)?(?:flag|alert|suspicious)|austrac\s+report(?:ing)?)/i.test(input))
                return true;
            return false;
        },
    },
    AU_AML_THRESHOLD_TRANSACTION: {
        references: ['AML/CTF Act s.43 — TTR within 10 business days; AUD 10,000 threshold'],
        classifier: (input) => {
            if (/\b(?:threshold\s+transaction\s+report|TTR\b|AUD\s*10[,.]?000.*(?:cash|currency)|cash\s+(?:at|above|exceeding)\s+(?:AUD\s*)?10[,.]?000)/i.test(input))
                return true;
            return false;
        },
    },
    AU_AML_IFTI: {
        references: ['AML/CTF Act s.45 — IFTI within 10 business days'],
        classifier: (input) => {
            if (/\b(?:international\s+funds\s+transfer\s+instruction|IFTI\b|cross[_\-\s]?border\s+funds\s+transfer.*austrac)/i.test(input))
                return true;
            return false;
        },
    },
    AU_AML_TIPPING_OFF_RISK: {
        references: ['AML/CTF Act s.123 — tipping off criminal offence; 2024 digital communications update'],
        classifier: (input) => {
            // Customer communication that may disclose SMR context
            if (/\b(?:tipping[_\-\s]?off|SMR\b.*(?:customer\s+communication|notify\s+customer|tell.*customer)|suspicious\s+matter.*(?:customer\s+message|email\s+customer|notify))/i.test(input))
                return true;
            // AI-generated communication referencing the investigation
            if (/\b(?:your\s+(?:account|transaction)\s+(?:has\s+been\s+)?(?:flagged|reviewed)\s+(?:for\s+)?(?:suspicious|money\s+laundering|aml|austrac))/i.test(input))
                return true;
            return false;
        },
    },
    AU_AML_DNFBP_SCOPE: {
        references: ['AML/CTF Amendment Act 2024 — DNFBP expansion; [CITATION TO VERIFY] enrolment 31 March 2026'],
        classifier: (input) => {
            if (/\b(?:dnfbp|designated\s+non[_\-\s]?financial\s+business|real\s+estate\s+(?:agent|agency).*aml|solicitor.*austrac|accountant.*aml[_\-\s]ctf)/i.test(input))
                return true;
            return false;
        },
    },
};
export const AU_AML_CTF_PACK = {
    categoryClassifiers: AU_AML_CTF_CATEGORY_CLASSIFIERS,
    /**
     * P3.5: AML customer records, PEP/high-risk assessments, SMR flags, and
     * tipping-off risks are subject-keyed by customer to maintain the 7-year
     * CDD record integrity and audit trail per AML/CTF Rules.
     * TTR and IFTI are transaction-level (non-subject-keyed).
     * DNFBP scope flag is entity-level (non-subject-keyed).
     */
    subjectKeyedCategories: [
        'AU_AML_CUSTOMER',
        'AU_AML_PEP',
        'AU_AML_HIGH_RISK_COUNTRY',
        'AU_AML_SUSPICIOUS_MATTER',
        'AU_AML_TIPPING_OFF_RISK',
    ],
    id: 'au-aml-ctf',
    name: 'AU AML/CTF Act 2006 — AUSTRAC + 2024 DNFBP Amendments',
    version: '1.0.0',
    description: 'AUSTRAC AML/CTF Act compliance for AI systems performing transaction monitoring, KYC/CDD, risk scoring, and sanctions screening. Enforces 3-business-day SMR (24-hour for CTF), tipping-off block (s.123), PEP/high-risk-country enhanced CDD gates, 10-BD TTR/IFTI reporting, AI programme documentation requirement, and DNFBP enrolment alert for 2024-amendment entities. [CITATION TO VERIFY: DNFBP 31 March 2026 deadline per 2024 Act implementation schedule.]',
    authority: 'Australian Transaction Reports and Analysis Centre (AUSTRAC)',
    industries: [
        'banking', 'fintech', 'payments', 'crypto', 'gambling',
        'real-estate', 'legal', 'accounting', 'jewellery', 'insurance', 'open-banking',
    ],
    requiredModules: [
        {
            name: 'governance-runtime',
            required: true,
            reason: 'AML/CTF programme enforcement; SMR 3-BD/24-h clocks; tipping-off block; CDD gates; TTR/IFTI auto-generation',
            reference: 'AML/CTF Act Part 2 (programme); s.41 (SMR); s.41A (CTF); s.43 (TTR); s.45 (IFTI); s.123 (tipping off)',
        },
        {
            name: 'audit-integrity',
            required: true,
            reason: '7-year retention for CDD, transaction, SMR, TTR, IFTI, programme records',
            reference: 'AML/CTF Act record-keeping provisions',
        },
        {
            name: 'data-classifier',
            required: true,
            reason: 'Classify customers, PEPs, high-risk jurisdictions, suspicious matters, threshold transactions, IFTIs, tipping-off risks',
            reference: 'AML/CTF Act s.41; s.41A; s.43; s.45; s.123',
        },
        {
            name: 'approval-queue',
            required: true,
            reason: 'PEP/high-risk enhanced CDD approval; SMR human-in-the-loop mandatory review before filing; DNFBP enrolment approval',
            reference: 'AML/CTF Act s.41; AML/CTF Rules (enhanced CDD)',
        },
        {
            name: 'session-persistence',
            required: true,
            reason: 'SMR deadline tracking (3-BD/24-h); TTR/IFTI 10-BD countdown; CDD lifecycle per customer',
            reference: 'AML/CTF Act s.41; s.43; s.45',
        },
        {
            name: 'event-bus',
            required: true,
            reason: 'Suspicious matter event stream with human-escalation; threshold transaction events; tipping-off risk events',
            reference: 'AML/CTF Act s.41; s.123',
        },
    ],
    moduleConfig: {
        'data-classifier': {
            enabledCategories: [
                'AU_AML_CUSTOMER',
                'AU_AML_PEP',
                'AU_AML_HIGH_RISK_COUNTRY',
                'AU_AML_SUSPICIOUS_MATTER',
                'AU_AML_THRESHOLD_TRANSACTION',
                'AU_AML_IFTI',
                'AU_AML_TIPPING_OFF_RISK',
                'AU_AML_DNFBP_SCOPE',
            ],
            smrSlaBusinessDays: 3,
            smrCtfSlaHours: 24,
            tippingOffBlockEnabled: true,
            pepEnhancedCddRequired: true,
            highRiskCountryApprovalRequired: true,
            ttrSlaBusinessDays: 10,
            iftiSlaBusinessDays: 10,
            amlProgrammeAiDocumentationRequired: true,
            dnfbpRegistrationDeadline: '2026-03-31',
        },
        'governance-runtime': {
            smrSlaBusinessDays: 3,
            smrCtfSlaHours: 24,
            tippingOffBlockEnabled: true,
            pepEnhancedCddRequired: true,
            highRiskCountryApprovalRequired: true,
            ttrSlaBusinessDays: 10,
            iftiSlaBusinessDays: 10,
            amlProgrammeAiDocumentationRequired: true,
            dnfbpRegistrationDeadline: '2026-03-31',
        },
        'approval-queue': {
            pepCddApprovalRequired: true,
            highRiskCddApprovalRequired: true,
            smrHumanReviewRequired: true,
        },
    },
    providerPolicy: {
        blockedProviders: [],
        requiredCapabilities: [
            'AML-PROGRAMME-DOCUMENTED',
            'TIPPING-OFF-CONTROLS',
            'AUSTRAC-REPORTING-CAPABLE',
            'CDD-DIGITAL-ID-VERIFICATION',
        ],
        blockReasons: {},
    },
    dataPolicy: {
        scanCategories: [
            'AU_AML_CUSTOMER',
            'AU_AML_PEP',
            'AU_AML_HIGH_RISK_COUNTRY',
            'AU_AML_SUSPICIOUS_MATTER',
            'AU_AML_THRESHOLD_TRANSACTION',
            'AU_AML_IFTI',
            'AU_AML_TIPPING_OFF_RISK',
            'AU_AML_DNFBP_SCOPE',
        ],
        categoryActions: {
            AU_AML_CUSTOMER: 'LOG',
            AU_AML_PEP: 'REQUIRE_APPROVAL',
            AU_AML_HIGH_RISK_COUNTRY: 'REQUIRE_APPROVAL',
            AU_AML_SUSPICIOUS_MATTER: 'REQUIRE_APPROVAL',
            AU_AML_THRESHOLD_TRANSACTION: 'LOG',
            AU_AML_IFTI: 'LOG',
            AU_AML_TIPPING_OFF_RISK: 'BLOCK',
            AU_AML_DNFBP_SCOPE: 'WARN',
        },
        encryptionRequired: true,
        encryptionStandard: 'AES-256',
        minimumClassification: 'CONFIDENTIAL',
    },
    retentionPolicy: {
        sovereignty: ['AU'],
        auditLogRetentionDays: 2555, // 7 years (CDD, transactions, SMRs, programme versions)
        sessionRetentionDays: 2555,
        incidentRetentionDays: 2555,
        reference: 'AML/CTF Act record-keeping: CDD 7y from end of relationship; transactions 7y; SMR copies 7y; programme versions 7y',
    },
    incidentPolicy: {
        notificationDeadlineHours: 24, // CTF suspicion: 24-hour SMR (hardest constraint)
        reference: 'AML/CTF Act s.41A — CTF suspicion SMR within 24 hours (hardest constraint); s.41 — other suspicion SMR within 3 BD',
        requiredRecipients: ['austrac', 'compliance-officer', 'aml-officer'],
        formalNotificationRequired: true,
    },
    validators: [
        {
            id: 'au-aml-smr-3bd',
            description: 'Suspicious matter report filed within 3 business days of suspicion formation',
            reference: 'AML/CTF Act s.41',
            check: 'au_aml_smr_3bd_active',
            failSeverity: 'CRITICAL',
        },
        {
            id: 'au-aml-smr-ctf-24hr',
            description: 'Terrorism financing SMR filed within 24 hours of suspicion formation',
            reference: 'AML/CTF Act s.41A',
            check: 'au_aml_smr_ctf_24hr_active',
            failSeverity: 'CRITICAL',
        },
        {
            id: 'au-aml-tipping-off-block',
            description: 'Customer communications blocked if referencing or disclosing SMR context',
            reference: 'AML/CTF Act s.123',
            check: 'au_aml_tipping_off_block_active',
            failSeverity: 'CRITICAL',
        },
        {
            id: 'au-aml-pep-approval',
            description: 'Politically exposed persons require enhanced CDD with approval',
            reference: 'AML/CTF Rules (PEP enhanced CDD)',
            check: 'au_aml_pep_approval_active',
            failSeverity: 'HIGH',
        },
        {
            id: 'au-aml-high-risk-country',
            description: 'High-risk jurisdiction transactions and customers require enhanced CDD approval',
            reference: 'AML/CTF Rules',
            check: 'au_aml_high_risk_country_active',
            failSeverity: 'HIGH',
        },
        {
            id: 'au-aml-ttr-10bd',
            description: 'Threshold transaction report filed within 10 business days',
            reference: 'AML/CTF Act s.43',
            check: 'au_aml_ttr_10bd_active',
            failSeverity: 'HIGH',
        },
        {
            id: 'au-aml-ifti-10bd',
            description: 'International funds transfer instruction report filed within 10 business days',
            reference: 'AML/CTF Act s.45',
            check: 'au_aml_ifti_10bd_active',
            failSeverity: 'HIGH',
        },
        {
            id: 'au-aml-programme-ai-docs',
            description: 'AI changes in transaction monitoring or CDD documented in AML/CTF programme',
            reference: 'AML/CTF Act Part 2',
            check: 'au_aml_programme_ai_docs_active',
            failSeverity: 'MEDIUM',
        },
        {
            id: 'au-aml-dnfbp-registration',
            description: 'DNFBP entities registered with AUSTRAC by 31 March 2026 [CITATION TO VERIFY]',
            reference: 'AML/CTF Amendment Act 2024 [CITATION TO VERIFY — verify final commencement date]',
            check: 'au_aml_dnfbp_registration_active',
            failSeverity: 'HIGH',
        },
    ],
};
//# sourceMappingURL=au-aml-ctf.js.map