Car Finance Utility — AutoFab
Version: 1.0
Last Updated: May 2026
Reference Implementation: AutoFab
Component Overview
The Car Finance utility is a motor finance remediation application built on the DataFab core framework. It supports the end-to-end remediation lifecycle of motor finance claims under the FCA Motor Finance Scheme — from data ingestion and population building, through cohorting, scheme testing, redress calculation, customer outreach, payment validation, and case closure with a complete audit trail.
The flagship deployment of this utility is AutoFab — a standalone instance in a private cloud that supports execution services. The Car Finance utility is structured so that the same capabilities can be reused for other motor-finance remediation engagements with different banks, schemes, and integration points.
Capabilities:
| Capability |
Description |
| Population Build |
Entity-resolved population of customers, agreements, vehicles, dealers in scope for remediation |
| Cohorting |
Rule-based segmentation of the population into scheme-relevant cohorts with scoring rationale |
| Scheme Testing |
Deterministic DDA pipelines that apply FCA Scheme rules to determine eligibility per case |
| Redress Calculation |
Deterministic calculation pipelines applying scheme-specific redress formulae with full audit trail |
| Customer Outreach |
Outbound customer engagement via Amazon Connect with portal access and communication logging |
| Straight-Through Processing |
Automated case progression for clear cases; manual review path for cases requiring engagement |
| Payment Validation |
Per-case validation and payment-file generation for delivery to the bank |
| Case Closure |
Closure workflow, CRM write-back, immutable audit trail per case |
| Analyst Dialog |
Playbook-driven dialog exposing case lookup, decision explanation, rule deep dives |
| Regulatory Audit Support |
Decision traceability, rule transparency, lineage from source field to final output |
Architecture Overview
┌──────────────────────────────────────────────────────────────────────┐
│ CAR FINANCE UTILITY (AutoFab Reference) │
├──────────────────────────────────────────────────────────────────────┤
│ │
│ ┌────────────────────────────────────────────────────────────────┐ │
│ │ DATA SOURCES (Bank-side) │ │
│ │ Customer Records │ Loan Agreements │ Payment Histories │ │
│ │ Vehicle Data │ Dealer Data │ │
│ │ Connected via VPN tunnel / Private Link │ │
│ └────────────────────────────────────────────────────────────────┘ │
│ │ │
│ ┌────────────────────────────────────────────────────────────────┐ │
│ │ Stage 1 KNOWLEDGE FABRIC │ │
│ │ MCP Connectors → Discovery → Schema Mapping → │ │
│ │ Data Quality Validation │ │
│ └────────────────────────────────────────────────────────────────┘ │
│ │ │
│ ┌────────────────────────────────────────────────────────────────┐ │
│ │ Stage 2 POPULATION BUILD │ │
│ │ Entity Resolution → Knowledge Graph │ │
│ │ Customer → Loan → Vehicle → Dealer relationships │ │
│ └────────────────────────────────────────────────────────────────┘ │
│ │ │
│ ┌────────────────────────────────────────────────────────────────┐ │
│ │ Stage 3 COHORTING (Graph Operations) │ │
│ │ Rule Engine → Cohort Assignment → Document Store │ │
│ └────────────────────────────────────────────────────────────────┘ │
│ │ │
│ ┌────────────────────────────────────────────────────────────────┐ │
│ │ Stage 4 SCHEME TESTING (Studio DDA Pipelines) │ │
│ │ Deterministic eligibility tests → Calculated flags │ │
│ └────────────────────────────────────────────────────────────────┘ │
│ │ │
│ ┌────────────────────────────────────────────────────────────────┐ │
│ │ Stage 5 REDRESS CALCULATION (Studio DDA Pipelines + HITL) │ │
│ │ Scheme formulae → Calculated amounts → Audit trail │ │
│ └────────────────────────────────────────────────────────────────┘ │
│ │ │
│ ┌────────────────────────────────────────────────────────────────┐ │
│ │ Stage 6 STP / PORTAL / OUTREACH (Chain of Agents) │ │
│ │ Auto-progress clear cases │ Amazon Connect outreach │ │
│ └────────────────────────────────────────────────────────────────┘ │
│ │ │
│ ┌────────────────────────────────────────────────────────────────┐ │
│ │ Stage 7 PAYMENT VALIDATION (Studio DDA Pipelines) │ │
│ │ Validate completeness → Generate payment file │ │
│ │ Encrypted SFTP delivery to bank │ │
│ └────────────────────────────────────────────────────────────────┘ │
│ │ │
│ ┌────────────────────────────────────────────────────────────────┐ │
│ │ Stage 8 CLOSURE & AUDIT (Graph Operations + Knowledge │ │
│ │ Fabric Write-back) │ │
│ │ Close case │ Update bank CRM │ Compile audit trail │ │
│ └────────────────────────────────────────────────────────────────┘ │
│ │ │
│ ┌────────────────────────────────────────────────────────────────┐ │
│ │ ANALYST DIALOG (Playbook) │ │
│ │ list_cases │ explain_decision │ rule_deep_dive │ outreach │ │
│ │ payment_status │ audit_trail │ │
│ └────────────────────────────────────────────────────────────────┘ │
└──────────────────────────────────────────────────────────────────────┘
The utility uses Studio’s Chain of Agents rather than Graph Operations DAG Rules as its primary orchestration: the remediation lifecycle is naturally a sequence of stages with explicit Human-in-the-Loop gates (e.g., redress calculation approval) and integration boundaries (Amazon Connect, payment delivery, CRM write-back). The Graph Operations Rule Engine is used inside Stage 3 (Cohorting) for cohort assignment scoring.
Domain and Schemas
| Entity |
Description |
| Customer |
The motor-finance customer / claimant |
| Loan Agreement |
The motor finance agreement under remediation |
| Vehicle |
The financed vehicle |
| Dealer |
The motor dealer that originated the agreement |
| Cohort |
A scheme-relevant segment with shared eligibility characteristics |
| Case |
A claim record progressing through the remediation lifecycle |
| Decision |
An eligibility, redress, or closure decision against a case |
| Payment File |
Per-case validated redress amounts packaged for delivery to the bank |
| AnalysisRecord |
Persisted result of a chain or DDA pipeline run |
| Relationship |
Description |
| HOLDS |
Customer → Loan Agreement |
| FINANCES |
Loan Agreement → Vehicle |
| ORIGINATED_BY |
Loan Agreement → Dealer |
| ASSIGNED_TO_COHORT |
Case → Cohort |
| DECISION_ON |
Decision → Case |
| PAYMENT_FOR |
Payment File entry → Case |
Schemas are managed by the Schema Registry. All extraction is schema-bounded — the platform can only extract and process attributes defined in the Car Finance domain schema; bulk replication of bank data is not permitted.
Data Sources
| Source |
Purpose |
Integration |
| Bank Databases (Customer Records) |
Customer identity and contact data |
MCP Connector via VPN tunnel / Private Link |
| Bank Databases (Loan Agreements) |
Agreement terms, dates, parties |
MCP Connector |
| Bank Databases (Payment Histories) |
Historical payments and balances |
MCP Connector |
| Bank Databases (Vehicle Data) |
Vehicle and asset attributes |
MCP Connector |
| Bank Databases (Dealer Data) |
Originating dealer attributes |
MCP Connector |
Connection security (see 02-Architecture: Connectivity, 03-Knowledge-Fabric: MCP Connectors):
| Control |
Implementation |
| Connection Method |
MCP Connector via VPN tunnel or Private Link |
| Protocol |
JDBC / ODBC over encrypted tunnel |
| Direction |
Inbound (read); outbound only for CRM write-back |
| Credential Storage |
Encrypted vault (AES-256-GCM) with role-based access |
| Connection Audit |
All connection attempts logged with user, timestamp, result |
| Rotation |
Credentials rotated every 90 days; on-demand for incident response |
| Quality Monitoring |
Availability, latency, error rate, data quality score |
The Car Finance utility implements an eight-stage remediation lifecycle. Each stage maps to specific DataFab core components.
Stage 1 — Data Source & Cleanse
| Aspect |
Detail |
| Objective |
Connect to bank databases, ingest claims data, validate and cleanse |
| Core Component |
03-Knowledge-Fabric — MCP Connectors, Discovery Service, Data Quality |
| Processing |
Automated attribute mapping to the Car Finance schema; PII classification; data-quality validation |
| Output |
Cleansed, schema-validated dataset in Knowledge Fabric |
Stage 2 — Population Build
| Aspect |
Detail |
| Objective |
Build the remediation population — identify all customers and agreements in scope |
| Core Component |
03-Knowledge-Fabric — Entity Resolution, Knowledge Graph |
| Processing |
Entity resolution to create golden customer records across multiple source tables; relationship mapping (Customer → Loan → Vehicle → Dealer) |
| Output |
Unified population with deduplicated customer records and linked agreements |
Stage 3 — Cohorting
| Aspect |
Detail |
| Objective |
Segment the population into cohorts based on agreement characteristics and scheme criteria |
| Core Component |
08-Graph-Operations — Rule Engine, Cohort Analysis |
| Processing |
Rule-based cohort assignment using defined eligibility criteria; pattern scoring for scheme classification |
| Output |
Cohort assignments stored against each case in Document Store with scoring rationale |
The cohorting Rule Engine uses the Pattern Scoring Rules defined in 08-Graph-Operations. Rule changes follow Rule Engine governance (role-based editing, version control, multi-party approval, testing, rollback).
Stage 4 — Scheme Testing
| Aspect |
Detail |
| Objective |
Apply Scheme rules to determine eligibility and applicable remediation pathway |
| Core Component |
04-Studio — DDA Pipelines (deterministic processing) |
| Processing |
Deterministic agent pipelines execute scheme tests against each case; calculated flags stored in Document Store |
| Output |
Eligibility determination, scheme classification, and test results per case |
DDA pipelines in this stage are deterministic — they do not use probabilistic LLM-driven reasoning for the eligibility decision itself. LLM use is restricted to pre/post-processing tasks (e.g., document understanding) and bounded by schema validation and ontology execution per 05-AI-LLM.
Stage 5 — Redress Calculation
| Aspect |
Detail |
| Objective |
Calculate redress amounts for eligible cases |
| Core Component |
04-Studio — DDA Pipelines, Human-in-the-Loop review |
| Processing |
Deterministic calculation agents apply scheme-specific redress formulae; results validated and stored |
| Output |
Calculated redress amounts with full calculation audit trail |
A Human-in-the-Loop gate is enforced on the redress calculation stage by default. Calculation parameters, intermediate values, and final amounts are persisted with the calculation audit trail.
Stage 6 — STP / Portal / Outreach
| Aspect |
Detail |
| Objective |
Straight-through processing for clear cases; portal and outreach for cases requiring engagement |
| Core Component |
04-Studio — Chain of Agents, Integration Layer |
| Integration Point |
Amazon Connect for customer engagement |
| Processing |
STP pipeline for automated case progression; outreach workflows via Amazon Connect |
| Output |
Customer communications, portal access, outreach records |
Amazon Connect data handling (see AutoFab Document 02, Section 12):
| Control |
Implementation |
| Data Sent |
Customer contact details (name, phone) and case reference ID only — no financial data, redress amounts, or loan details |
| Data Residency |
Amazon Connect instance in the same UK cloud region as the platform |
| Recordings |
Encrypted (AES-256), restricted access |
| Retention |
Per engagement retention policy; purged after transfer to platform audit trail |
Stage 7 — Payment Validation
| Aspect |
Detail |
| Objective |
Validate and process redress payments |
| Core Component |
04-Studio — DDA Pipelines, Integration Layer |
| Integration Point |
Encrypted payment-file delivery to the bank |
| Processing |
Validation agents verify case completeness and generate detailed payment files |
| Output |
Validated payment files per case, ready for bank processing |
Payment-file delivery security:
| Control |
Implementation |
| Transfer Method |
SFTP over dedicated VPN tunnel |
| File Encryption |
AES-256-GCM applied per file before transfer |
| Integrity |
HMAC-SHA256 signature transmitted via separate secure channel |
| Non-Repudiation |
ECDSA P-256 digital signature with timestamp |
| Confirmation |
Bank acknowledgement logged with hash verification |
| Retention |
Payment-file events retained 7 years |
Stage 8 — Closure & Audit Trail
| Aspect |
Detail |
| Objective |
Close cases, update bank CRM, provide full audit trail |
| Core Component |
08-Graph-Operations — Case Management; 03-Knowledge-Fabric — Write-back |
| Integration Point |
Bank CRM — updated customer profiles with audit trail and decision rationale |
| Processing |
Case closure workflow, audit-trail compilation, CRM update generation |
| Output |
Closed cases with complete audit trail; updated bank customer profiles |
Integration Points
The utility has four defined integration points with external systems.
| # |
Integration |
Direction |
Method |
Security |
| 1 |
Bank Databases |
Inbound |
MCP Connector (JDBC/ODBC) via VPN / Private Link |
Encrypted transport, credential vault, read access |
| 2 |
Amazon Connect |
Outbound |
API integration for customer engagement |
OAuth 2.0, webhook HMAC signatures, HTTPS only |
| 3 |
Payment File Delivery |
Outbound |
Detailed payment file per validated case |
Encrypted file transfer, HMAC + ECDSA signature, validation |
| 4 |
Bank CRM |
Outbound |
Updated customer profiles, audit trail, decision rationale |
API integration, mTLS, write-back with audit logging |
Internal Data Store
Claim processing data is persisted in the internal Document Store.
| Data Type |
Purpose |
| Claim Metadata |
Core claim attributes mapped from source systems |
| Calculated Flags |
Scheme-test results, eligibility flags, cohort assignments |
| Processing Status |
Current stage, status, timestamps |
| User Notes |
Analyst and reviewer notes attached to cases |
| Redress Calculations |
Calculation results with full parameter audit trail |
| Audit Events |
All actions, decisions, and state changes (immutable log) |
| Encryption Layer |
Method |
| Document Store at rest |
AES-256-GCM |
| PII fields |
Application-layer field-level encryption with separate PII key (180-day rotation) |
| Financial fields |
Application-layer field-level encryption with separate financial key (180-day rotation) |
| In transit |
TLS 1.3 |
Decision Outputs
| Output |
Description |
| Cohort Assignment |
Cohort label and scoring rationale (Stage 3) |
| Eligibility Determination |
Eligible / ineligible with scheme classification and applied rules (Stage 4) |
| Redress Calculation |
Calculated amount with full parameter trail (Stage 5) |
| Outreach Outcome |
Customer engagement result and communications log (Stage 6) |
| Payment File |
Per-case validated payment record (Stage 7) |
| Closure Decision |
Closure status with full audit trail (Stage 8) |
| CRM Write-Back Record |
Updated bank-side customer profile reference |
Decisions are deterministic and reproducible: every decision carries a pointer to the rule version, DDA pipeline version, inputs, intermediate values, and approver (where HITL is engaged).
Dialog Playbook
The Car Finance playbook (see Dialog › Playbook-Based Communication) governs the analyst conversation surface. It is the analyst-facing layer over the case-management workflow.
Intents
| Intent |
Slots |
Tools |
Risk Class |
list_cases |
status, cohort, stage, customer, limit |
get_cases |
Low |
case_status |
case_id |
get_case |
Low |
explain_decision |
case_id, stage |
chain trace + DDA execution log lookup |
Medium |
rule_deep_dive |
rule_id |
get_rule_deep_dive |
Low |
cohort_breakdown |
cohort_id |
get_cohort |
Low |
outreach_status |
case_id |
get_outreach |
Low |
payment_status |
case_id |
get_payment |
Medium |
audit_trail |
case_id |
audit log lookup |
Medium |
| Tool |
Description |
get_cases |
Filtered list of cases with stage, cohort, status filters |
get_case |
Full case record including stage history and current flags |
get_rule_deep_dive |
Rule metadata, version history, scoring weight |
get_cohort |
Cohort definition, population, and scoring rationale |
get_outreach |
Amazon Connect engagement record for a case |
get_payment |
Payment validation status and file reference |
Tools are subject to Tool Authorization; analysts only see tools their role permits.
Persona and Guardrails
| Setting |
Default |
| Persona |
Concise, evidence-first; tables and case cards preferred; never fabricates rule outcomes or decisions |
| Refuse-List |
No legal advice; no override of redress calculations; no bypass of HITL gates |
| Escalation |
Any user request to mutate rules or thresholds is redirected to Rule Engine governance |
| Memory |
Turn + session memory retained; cross-session memory off by default |
System Self-Awareness
Within Car Finance, Self-Awareness (see Dialog › System Self-Awareness) gives analysts these specific capabilities:
| Question |
Tool / Source |
| “What rules ran on this case?” |
DDA execution log + cohorting rule trace |
| “Why was this customer assigned to cohort X?” |
Cohort assignment rationale + rule deep dive |
| “How was redress calculated for this case?” |
Redress calculation audit trail (Stage 5 parameter trail) |
| “Has the customer been contacted?” |
Amazon Connect outreach record |
| “Is the payment file delivered?” |
Payment validation + delivery confirmation |
| “Show me the full audit trail for this case” |
Closure-stage audit-trail compilation |
| “Which version of rule X was applied?” |
Rule version history (Rule Engine governance) |
Self-Awareness is read-only; rule, threshold, and pipeline changes go through the Rule Engine and DDA-publish governance workflows.
User Roles
The utility implements role-based access control aligned with the engagement structure (matching the AutoFab reference deployment).
| Role |
Responsibilities |
Access Level |
| Analyst |
Day-to-day case processing, eligibility review, standard analysis |
Case work, read/write on assigned cases |
| Senior Analyst |
Case approval, rule override, quality review |
Full case access, approval authority |
| Operations Manager |
Escalation approval, oversight, reporting |
Full system access, configuration |
| Data Coordinator |
Data intake, initial screening, case creation |
Create cases, basic screening |
| Auditor |
Internal/external audit, compliance review |
Read-only access to all cases and audit logs |
| RBAC Capability Matrix |
Case Work |
Approve |
Override |
Configure |
Audit |
| Analyst |
✓ |
✗ |
✗ |
✗ |
✗ |
| Senior Analyst |
✓ |
✓ |
✓ |
✗ |
✗ |
| Operations Manager |
✓ |
✓ |
✓ |
✓ |
✗ |
| Data Coordinator |
Create only |
✗ |
✗ |
✗ |
✗ |
| Auditor |
Read-only |
✗ |
✗ |
✗ |
✓ |
Authentication: MFA required; password policy minimum 12 characters; idle timeout 15 minutes; absolute session timeout 8 hours; SAML 2.0 SSO supported.
Operational Modes
Given the regulatory nature of remediation, the Car Finance utility runs primarily under Mode 1 (AI-Assisted Manual) and Mode 2 (Routine Automation).
| Mode |
Behavior |
| 1 — AI-Assisted Manual |
Default for cohort and eligibility decisions during pilot; HITL on every decision |
| 2 — Routine Automation |
STP for clear cohort assignments and eligibility determinations; HITL on redress calculation |
| 3 — Autonomous with Escalation |
Closure of clear cases automated; ambiguous cases escalate; HITL on redress calculation retained |
Modes 0 and 4 are not used for this utility; redress calculations always retain a HITL gate by default to meet regulatory expectations on fair treatment and decision rationale.
Reference Implementation: AutoFab
Deployment: Standalone single-tenant instance in a private cloud, with limited integration points.
Scope: End-to-end remediation lifecycle (Stages 1–8) for motor finance claims.
| Aspect |
AutoFab Detail |
| Platform Provider |
DataFab |
| Deployment Model |
Customer Cloud Deployment (Private Cloud) |
| Region |
UK |
| Multi-Tenancy |
Single-tenant, dedicated instance |
| Integration Scope |
4 integration points: Databases (in), Amazon Connect (out), payment-file delivery (out), CRM (out) |
| Data Residency |
All claim data and metadata stored within UK region; no cross-border transfer |
Vendor (DataFab) access controls in the AutoFab deployment:
| Control |
Implementation |
| Production Access |
No standing access; break-glass with client’s approval required |
| Access Method |
Time-limited, audited VPN sessions via client-managed jump box |
| Scope Limitation |
Application-layer components only; no direct database access |
| Activity Logging |
Vendor sessions recorded with full command audit trail |
| Access Review |
Quarterly review of vendor access events by client’s security |
| Data Visibility |
Vendor personnel cannot view customer PII or financial data; access limited to system configuration and logs with PII redacted |
Security Controls
| Control |
Implementation |
| Tenant Isolation |
Single-tenant deployment; all case data, audit logs, and traces tenant-scoped |
| Schema Bounding |
All extraction and processing constrained by the Car Finance domain schema |
| Deterministic Execution |
Eligibility and redress calculation pipelines are deterministic; no probabilistic decision-making in core processing |
| Field-Level Encryption |
PII and financial fields encrypted at the application layer with separate keys |
| Network Segmentation |
Edge / Application / Data / Management zones (see Architecture) |
| Inter-Service Authentication |
mTLS between services; service mesh with zero-trust networking |
| Credential Vault |
All integration credentials in encrypted vault (AES-256-GCM); 90-day rotation |
| HITL Gates |
Redress calculation requires Senior Analyst approval; HITL gates cannot be bypassed |
| Rule Governance |
Cohorting rules and DDA pipelines under role-based editing, version control, multi-party approval, testing, rollback |
| Audit Logging |
Every case action, decision, rule execution, integration call, and configuration change logged immutably |
| Tool Authorization |
Dialog tools follow 04-Studio Tool Authorization model |
| Vendor Access |
No standing production access; break-glass with engagement-host approval |
Audit Logging
| Event |
Retention |
| Case Created |
3 years |
| Case Decision |
3 years |
| Cohort Assignment |
3 years |
| Rule Executed |
1 year (3 years for case-processing) |
| Process / DDA Executed |
1 year (3 years for case-processing) |
| Escalation |
3 years |
| Outreach Initiated |
3 years |
| Call Connected / Customer Response |
3 years |
| Payment File Generated |
7 years |
| Payment File Transferred / Confirmed / Failed |
7 years |
| CRM Write-Back |
3 years |
| Authentication / Authorisation |
1 year |
| Configuration Change |
2 years |
| Compliance Event |
7 years |
| Security Incident |
2 years |
Logs are stored in immutable tamper-evident storage with PII redaction. Auditor role has read-only access to all cases and audit logs.
Data Subject Rights
| Right |
Process |
Response Time |
| Access |
Automated data export from Knowledge Fabric and Document Store |
30 days |
| Rectification |
Data update workflow with audit trail |
30 days |
| Erasure |
Deletion with verification (subject to regulatory retention requirements) |
30 days |
| Portability |
Standard format export |
30 days |
| Objection |
Processing review workflow |
30 days |
Regulatory Mapping
| Regulator / Regulation |
Supported Capability |
| FCA Motor Finance Scheme |
End-to-end remediation lifecycle: population, cohorting, scheme testing, redress, outreach, payment, closure with audit trail |
| FCA — Treating Customers Fairly |
Consistent rule-based processing applied equally to all cases in scope |
| UK GDPR / Data Protection Act 2018 |
Lawful basis (legitimate interest + legal obligation), data subject rights, breach notification, data residency |
| ICO Breach Notification |
Triage within 4h, ICO notification within 72h (per UK GDPR Article 33) |
| EU AI Act |
Risk classification, transparency, human oversight, technical documentation |
| SOC 2 |
Audit trail, change control, access control |
Recovery Objectives (Reference Implementation)
| Component |
RPO |
RTO |
| Knowledge Graph |
1 hour |
4 hours |
| Document Store (Claims Data) |
1 hour |
4 hours |
| API Services |
N/A (stateless) |
15 minutes |
| Credential Vault |
1 hour |
2 hours |
| Audit Logs |
15 minutes |
4 hours |
DR testing schedule: monthly backup-restore tests; quarterly failover tests; annual full DR exercise; semi-annual tabletop exercise.
Cross-References
- Overview — Utilities overview
- Transaction Monitoring — Reference utility implementation
- Compliance — Compliance utility (skeleton)
- Knowledge Fabric — MCP Connectors, Discovery, Entity Resolution, Knowledge Graph
- Studio — DDA Pipelines, Chain of Agents, Tool Authorization, Widget Types
- Dialog — Playbooks, Context-Awareness, System Self-Awareness, Widget Rendering
- Graph Operations — Rule Engine, Cohort Analysis, Case Management
- Compliance Capabilities — Regulatory framework, retention