Licence to Actthe control plane for AI agents
Insurance · claims

Motor claim: settle Claim 4471, €3,400

A motor insurer, 200,000 claims a year. An agent prepares routine settlements and, within a mandate owned by the Head of Motor Claims, decides them; the payment service pays.

Today, with a person

The handler is trained to assess claims and follows the claims manual. His signing limit is recorded in the claims system; above it, a supervisor approves. Each decision goes into the claim file, and quality reviews decide whether his authority grows, stays, or shrinks.

The question for the room

Would you let this agent decide a €3,400 settlement without individual human approval?

The day, in the record

  • 08:12 Claim and policy located · contract 88-1201, renewed onto wording v14 on 12.08.2026
  • 08:13 Repair estimate retrieved and verified
  • 08:14 Settlement proposal prepared · beneficiary B-082 · declared basis v14 · operation C4471-S1

The mandate MC-05 · version 05.2 · since 15.06.2026

OwnerHead of Motor Claims
Agentclaims-agent-01, acting for Motor Claims
Actiondecide routine motor settlements within the limits and request execution through the payment service
Leveldecide: the agent decides within the mandate; the payment service executes
Limit€5,000 per settlement · €1.5m per day across the deployment
Conditionsapplicable wording confirmed against the authoritative record · verified estimate · no prior payment
Review triggerthree referrals for one reason in seven days (R-02); a referral that finds a settlement already paid on the wrong wording narrows at once
Revocationthe owner, or a revocation rule
ChallengerChief risk officer, the second line
Restoreafter 20 clean proposals from a test chosen for the cause and run by model risk, on the owner’s signature; after a serious defect, the CRO signs as well
Expiry31.12.2026, or the next release of the agent, whichever comes first; renewed on the evidence of the quarter
Deputythe Head of Claims Operations signs in the owner’s absence, within the same limits

The knowledge that applies

Which wording applies to this contract? the insurer’s own contract wording; fixed by the policy period covering the date of the loss; owned by the policy data team.

  • v13 on 88-1201 for the policy period to 11.08.2026 · excess €400
  • v14 on 88-1201 from the renewal on 12.08.2026 · excess €250

What applies: loss · 04.09.2026 · in the period from 12.08 → v14 applies to 88-1201

Publishing v14 moved no policy onto it; the renewal did. An index rebuilt on 10.09 restored v13 text for policies renewed in August and returns it in good faith. Only the check against the policy record catches it before the money moves.

The check, at the act

Identityclaims-agent-01, acting for Motor Claims
Releasev2.4 · approved and validated for this workflow
Applicable basiswording v14, attached to 88-1201 for the period covering the loss on 04.09.2026
MandateMC-05.2 active · €3,400 within €5,000
Exact action€3,400 to B-082, unchanged since declared
Current stateno prior payment for C4471-S1 · €1.5m daily limit not reached, permits in flight counted

Outcome: permit · paid once

The act, and the customer

The payment service executes the act: settlement payment. The agent cannot pay: the payment service holds the credential.

The agent can explain its proposal and ask for missing evidence. The customer asks: “Can you settle my claim?”

The loop: The same mistake, three times

Rule R-02, within seven days. Restored after 20.

One record, every reader

WhoAsksReads
CISO
security and resilience
Who acted, and was it contained?Its own identity. One gated call, paid once.
CTO
architecture
Which model, and which release?Release v2.4, two model tiers.
CFO
finance
What did this claim cost?€0.34 in tokens, €4.20 in review.
Business owner
Head of Motor Claims
Who decided, and under which mandate?Referred, then paid by a handler, within the handler’s limit.
CRO
risk and the regulator
Can we show why it was paid?Every version, on every line.
Compliance
conduct and the customer
Was the customer treated fairly, and can we explain it?Paid once, on the wording that applied to the contract.

The record of the two acts, field by field

The fields of the record line, as part three gives them, filled for the clean act and for the referral. A field with two lines gives the agent’s line and the person’s, marked S1 and S2.

FieldClaim 4471 · the clean act
11.09.2026 · permitted at 08:14, paid in the 10:00 run
Claim 4476 · the referral
11.09.2026 · referred at 08:31, decided by a handler at 15:20, paid in the 16:00 run
Before the act · what the check read
whenthe second the check decided, and the second the act committeddecided 11.09.2026 08:14:06 · committed 10:00:41, the payment runS1 referred 11.09.2026 08:31:12S2 decided 11.09.2026 15:20:05 · committed 16:00:38, the payment run
the agent and its identitywhich agent, acting for whom, under its own identity, and how long its credential livedclaims-agent-01, acting for Motor Claims · its own identity · token issued 08:12:50, valid 15 minutesS1 claims-agent-01, acting for Motor Claims · its own identity · token valid 15 minutesS2 handler H-117, Motor Claims · her own login · signing limit €10,000
the releasethe release id, each model by version and hash, the prompt set, the validation reportv2.4 · tier-1 model 2026.06.1 (7c41e0) · tier-2 model 2026.05.2 (e9a3b7) · prompt set claims-settle 2.4 · validated by model risk, MRV-031, 01.09.2026S1 v2.4 · tier-1 model 2026.06.1 (7c41e0) · tier-2 model 2026.05.2 (e9a3b7) · prompt set claims-settle 2.4S2 none · a person’s decision in the claims system
the basiseach claim the act relied on, its version, and its standing at that second on both axes: evidential warrant, and authorityThe excess on policy 88-1201 is €250 · wording v14 §4.2 · from 12.08.2026 · warrant validated · current · uncontradicted · authority: the signed wording · the policy data teamPolicy 88-1201 covers accidental damage · wording v14 §2.1 · from 12.08.2026 · warrant validated · current · uncontradicted · authority: the signed wording · the policy data teamThe repair estimate for claim 4471 is €3,650 · the claim file · 11.09.2026 08:13 · warrant validated against the repairer network · authority: claims operationsThe excess on policy 88-1201 is €400 · declared: wording v13 §4.2 · superseded for 88-1201 since 12.08.2026 · warrant fails on currency · contradicted by the policy record · authority: the signed wording · the policy data teamThe excess on policy 88-1201 is €250 · applicable: wording v14 §4.2 · from 12.08.2026 · confirmed by H-117 at 15:19 · warrant validated · current · authority: the signed wording · the policy data teamThe repair estimate for claim 4476 is €2,960 · the claim file · 11.09.2026 08:30 · warrant validated against the repairer network · authority: claims operations
the mandate versionthe mandate in force at that second, with its level and its limitMC-05.2 · since 15.06.2026 · decide · €5,000 a settlement · €1.5m a day across the deploymentS1 MC-05.2 · decide · €5,000 a settlementS2 the handler’s delegated authority · €10,000 · the delegated authority policy
the control standardthe control standard version and the rule set the check appliedCS-3 v2026.2 · rule set RS-MC-05 r14CS-3 v2026.2 · rule set RS-MC-05 r14
the consequence tierthe tier the act was classified into, and the version of the taxonomy that classified itroutine · taxonomy CT-2026.1 · to €5,000, one policyholder, recoverable inside the recall window, inside the firmroutine · taxonomy CT-2026.1
At the act · what the check decided
the check’s decisionpermit, refer, or block, how many of the six inputs held, and the reason codePERMIT · six of six · reason code OKS1 REFER · five of six · reason code BASIS-01: declared v13, applicable v14 for 88-1201 · owner: Motor Claims ReviewS2 PERMIT · the handler’s decision, within her limit
the exact actwhat was done, to whom, for how much, under which id, oncesettle claim 4471 · €3,400 to B-082 · C4471-S1 · onceS1 proposed €2,560 to B-104 · C4476-S1 · not executedS2 settle claim 4476 · €2,710 to B-104 · C4476-S2 · once
the permitits id and what it was bound to: the mandate version, the release, the basis version, the exact act; and how long it heldPR-4471-1 · bound to MC-05.2, release v2.4, wording v14 §4.2 and estimate E-4471-1, €3,400 to B-082 · valid for the next payment runS1 none · the proposal went to the review queue with the reasonS2 PR-4476-2 · bound to the handler’s authority, wording v14 §4.2, €2,710 to B-104 · valid for the next payment run
After the act · what came back
the receiptwhat the receiving system returned, and the reconciliation against it: one permit, one act, one receiptP-4471 · €3,400 · the 10:00 run · acknowledged by the payment service 10:00:41 · reconciled against the payment ledger: one permit, one payment, one receiptS1 noneS2 P-4476 · €2,710 · the 16:00 run · acknowledged by the payment service · one retry carried the same id, paid once · reconciled
the human decisionwhere a person decided: who, under which authority, what they confirmed, and whennone neededS1 none yet · referred to a person with the reasonS2 handler H-117 confirmed v14 for 88-1201 and decided €2,960 − €250 = €2,710, at 15:20
the costwhat the decision cost in tokens, and in a person’s time where one was needed€0.34 in tokens · no reviewer timeS1 €0.34 in tokensS2 €4.20 of a handler’s time
retentionhow long the record, the manifest, and the permits are kept, and personal data inside them by its purposethe record, the manifest, and the permits: ten years from the act, the period the insurer sets for settlement decisions of this tier (illustrative) · personal data by purpose and retention rule · a corrected fact is a new, linked entrythe record, the manifest, and the permits: ten years from the act, the period the insurer sets for settlement decisions of this tier (illustrative) · personal data by purpose and retention rule · a corrected fact is a new, linked entry

control standard CS-3, version 2026.2 · rule set RS-MC-05 r14: refer above €5,000, on any mismatch of basis, on any prior payment · CT-2026.1 · the insurer’s consequence taxonomy · proposed by the CRO with compliance and Motor Claims, set by the board, 06.2026 · ids, dates, and figures invented.

The business case

200,000 claims a year, 60% eligible and 80% adopted; 25 minutes saved on each at €60 an hour, 65% realised. Run cost €600,000 a year; set-up €900,000. Wider benefits, losses, delays, and recovery costs are not yet included.

The people, on the day the mandate narrows

The handlers do this work today. The person who receives a referral holds at least the authority of the mandate the agent acted under, its limit included. Handler H-117 signs up to €10,000; the agent, up to €5,000. On a storm day, a storm doubles the claims that arrive, and all of them come back to people; with the agent still deciding, a storm day comes within about €120,000 of the €1.5m daily limit at the average settlement of €2,000, and a heavier one reaches it, where the current-state input refers the rest

What the law asks here

DutyWhy hereEvidenceBoxes
GDPR, Article 22 (to be tested)
a decision is solely automated and has a legal or similarly significant effect: a test the firm applies per type of decision
to be tested for the motor claim: a settlement decided and paid by the agent may have a similarly significant effect on the policyholder; where it does, the ground is Article 22(2)(a), necessary for the contract, with the 22(3) safeguards: a person on request, a view heard, a decision contesteda route to a person on request, with a time; reasons that explain the procedure and principles actually applied (CJEU C-203/22)w4 w5 w6
GDPR, Articles 15, 16, 17
personal data is processed
the claim file holds personal dataaccess to the data on request; a corrected fact as a linked entry; retention by purpose, the storage-limitation principlew5 p5
EU AI Act, high-risk (classified: not high-risk)
the use is on Annex III, among them the creditworthiness of natural persons (5(b)), life and health pricing (5(c)), and essential public benefits (5(a)), and Article 6(3) does not take it out
not as built: motor claims are not on the list; Annex III point 5(c) covers risk assessment and pricing of natural persons in life and health insurancethe classification, with its reasoning, in the agent portfolio; if high-risk, human oversight and logse1 w1 w4
EU AI Act, Articles 4 and 50
any provider or deployer; Article 50 when an AI system talks to people, since 2 August 2026
Article 50: the agent answers the policyholder directly, so it says it is an AI system; Article 4 for the handlers who decide referralsmeasures to support the AI literacy of the people who decide referrals (Article 4 as reworded by the 2026 omnibus: the duty stays, no guaranteed level); telling the person she is talking to an AI systeme4 w4
DORA
the firm’s ICT, and its ICT third parties
the insurer is a financial entity under DORAidentity and access control, under the ICT risk framework; incident classification and reporting; the register of ICT third-party arrangements; testingp1 p3 p5 p6 e1 e4
EIOPA opinion on AI governance (6 August 2025)
an insurer uses AI outside the AI Act’s high-risk list; an opinion addressed to supervisors, not binding on its own
the insurer uses AI in claimsproportionate governance, data quality, oversight, and explanationse4 w2 w4 w5
EBA guidelines on restrictive measureswritten for banks and payment firms; the sanctions regulations still bind the payment, and the payment service screens the payee
Consumer Credit Directive IIa motor claim is not consumer credit

Dated 11 October 2026; from the shared duty table; not legal advice.

Notes on the case