←All work Climate finance risk management Financial services

Turning climate risk advice into a product

A ten-person regulated investment manager sold highly specialised climate-risk analysis that took a senior analyst roughly a week to produce for each client. The work was valuable but could not scale without repeatedly consuming the same scarce expert capacity.

We decomposed the advisory workflow into repeatable analytical components and expert judgement, then built a configurable engine combining satellite data, exposure mapping, financial modelling and scenario analysis. Clients could change defined inputs while specialists retained the decisions that required judgement.

One analyst could now serve three clients instead of one. Once prospects saw the working product, pipeline conversion increased from 50% to 70%, and nearly every existing client asked to pay for platform access.

Human factors engineeringService designProduct definitionAI adoptionInterface design
Trace the chain A figure you can't trace back down through every layer won't survive the first person who asks how you got it.
01 / CONTEXT

A firm that could answer anything, one analyst at a time

A small regulated investment manager working on climate and market risk. Around ten senior people, most of them out of global banks, serving two quite different buyers: institutions deciding where to put money, and companies with a lot of physical stuff in industry, energy and farming.

They weren't selling climate data. They sold what it would cost a specific company, worked out against that company's own accounts. The analysis was excellent. They just couldn't produce it twice without spending the same senior week again.

Buyer oneInstitutional investorsPutting money to work against emissions targets without losing return. Hover to see the holdings settle onto the frontier.
Buyer twoAsset-heavy operatorsIndustry, energy and farming. Sites, supplies and delivery routes, each with its own exposure.
What sets the paceThe regulatory calendarReporting rules widen, then the costs start, then they grow. The deadlines aren't ours to pick.
Layer 01 · advisory

The thing clients bought

Senior specialists deciding what mattered, explaining the result, and standing behind it when a board pushed back.

Layer 02 · capability

What made it possible

A financial analytics library, a simulation engine, satellite data, and components built to be reused.

Layer 03 · product

Nobody was selling this

A working platform and dashboards, real and in use, shown off as proof the firm was sophisticated instead of sold as the thing itself.

Engineering had already built shared, reusable components. That only pays back if a family of products is coming, and nobody had defined one. The architecture was quietly answering a product question nobody had asked out loud, and that gap turned out to be the whole job.

02 / THE DOMAIN

Climate risk isn't the product. What it costs you is.

A flood, a new law, a price move. None of it matters to a finance team until somebody has carried it all the way to a number in their own accounts.

Terrain and hazard morphology

Hills and water flow are what make a flood risk specific to one site instead of a whole region. How fine the detail is decides whether the answer is usable.

Satellite data is an input, not a product

Satellite layers are raw material. They only become a risk product once you join them to a list of the company's sites and a valuation model.

How precisely you can locate exposure

This is the honest bit. Your exposure figure is only ever as good as the link between a company on paper and a physical location on the ground.

How a hazard becomes a number

STRUCTUREDrag to explore →
Decisionthe number that gets acted onFinancial enginevaluation · aggregation · P&LExposureentity → site → coordinateHazard & driver fieldacute · chronic · policy · priceData foundationEO · registries · customs · curves
Five layers, one question. Data becomes a hazard map, the map meets a list of the company's sites, the engine turns that into money, and the towers are the decisions people take because of it. The dashed pillars matter more than the flat planes. A figure you can't trace back down through every layer won't survive a regulator asking how you produced it.

How risk travels to the accounts

CHAIN
Drag to explore →
PHYSICAL RISK · HAZARD TO DECISION01Hazardriver & surfacefloodcoastal flood,storm surgewildfire,droughtextreme heat,windacute / chronic02Locationsite coordinatenot a postcodecentroidelevation &defencesgeospatial03Exposurewhat physicallysits therereplacementcostoutputdependencyasset register04Vulnerabilityconstructiontypecriticality tonetworkadaptationalready inplacedamage function05Physical impactdamage tostructuredowntime daysrecoveryprofileexpected annual loss06Business effectlost output &salessupplyinterruptionthird-partyinfrastructurerevenue at risk07Financial effectEBITDA impactassetrevaluationinsurability &premiumP&L line08Decisionadapt, insure,relocateprice the riskindisclose itactionA hazard map is not a risk assessment. Collapsing this chain into a single score destroys the four intermediate quantities a CFO needs to act — andis why physical risk products so often fail to change a decision.
TRANSITION RISK · POLICY TO VALUATION01Policy ortechnology shiftcarbon pricing& levy phase-infree-allowancewithdrawalelectrificationof process heatexternal driver02Productioneconomicsenergy mix &fuelprocess routethroughput &utilisationunit cost03Emissionspositiondirect &indirectintensitysectorbenchmarkfree allocationheldtCO₂e per tonne04Regulatory costexposed volumecertificateprice pathefficiencypenalty€ per year05Capitalrequirementabatement CAPEXbreak-evenenergy pricetiming of spendinvestment case06Cash flowoperating costmargincompressioncovenantheadroomEBITDA07Valuation &creditasset valuecost of capitalprobability ofdefaultenterprise value08Decisioninvest, hedge,repricereshape supplyoriginexit theproduct lineactionTransition risk is economic repricing, not an ESG score. Every box is a quantity the finance function already understands — which is precisely whythe analysis lands, and why an intensity rating does not.
Two routes, one discipline. Physical risk runs: hazard, location, exposure, how vulnerable the site is, the impact, the hit to cash. Transition risk runs: policy, production costs, emissions position, regulatory cost, capital, valuation. Squash either into a single score and you've thrown away the middle numbers a finance director needs.

A worked example: the cost of a new levy

WORKED MECHANISMDrag to explore →
REGULATORY COST ENGINE · FROM A CUSTOMS CODE TO A LINE IN THE ACCOUNTS01 CLASSIFYcommodity code →product scopecode hierarchy governsscope, not the product name02 ATTRIBUTEorigin →embedded intensitytCO₂e per tonne, byproduction route and country03 BOUNDscope of emissionsdirect + purchased energy;selected upstream inputs only04 PRICEcertificate price pathforward curve, convertedat the FX forward05 PHASEpolicy scale-upphase-in againstfree-allowance withdrawal06 LANDcost → EBITDAannual and cumulative,by horizonPolicy phase-in — share of full cost appliedillustrative, on the published scale-up shape100%75%50%25%0%20262202752028102029222030482031612032732033862034100Same product, same year — cost varies by supply originembedded cost as % of import value at full phase-in · illustrativeOrigin A10%Origin B26%Origin C26%Origin D30%Origin E35%Origin F38%Origin G44%Ranking reshuffles once the policy lands — which is the actionablefinding, because procurement can move.
The sharpest thing in the firm, and the template for everything else. A customs code, a country of origin, the emissions built into the product, a price path and a phase-in date produce a figure that lands in the accounts. Both charts use the published mechanism with made-up values. The mechanics are exact, the numbers are stand-ins.

Risk arriving second-hand

CHAIN 03Drag to explore →
SECOND-ORDER TRANSMISSION · HOW PHYSICAL RISK REACHES A BALANCE SHEET IT DOES NOT TOUCHLoss frequencyand severity riseinsuranceTechnical premiumrepricesinsuranceInsurer withdrawsfrom the perilinsuranceCoverage gapopensinsuranceCollateral valuefallscreditLoan-to-value anddefault risk movecreditCapital requirementand appetite shiftcreditA bank with no physical assets still carries physical risk — through the insurability of the collateral behind its loan book.
The one that catches people out. A lender owns no factories and still carries flood risk, because it arrives through whether the buildings behind its loans can still be insured. Understanding that is what lets one engine serve an operator and an investor at the same time.
03 / METHOD

Taking an expert's job apart, piece by piece

We didn't run a discovery sprint and hope an AI roadmap fell out. We studied how the experts think and decide, and the automation opportunities came out of that.

The order matters more than people expect. You need to know what the domain is for before you decompose what the experts do, and you need the cues behind their judgement before you can say what a machine should carry.

Step 01

What is this work for?

Settle the purpose before the mechanism. Stops a team building the thing nobody asked for.

Step 02

What are the steps?

You can't hand a job to a machine before you've named it.

Step 03

What do the experts notice?

Turns "could a machine do this" from an opinion into a finding.

Step 04

Who does which part?

Split each step four ways instead of judging the whole step. That's what gives you a nuanced answer instead of a yes or no.

What the work is for

INSTRUMENT 01Drag to explore →
WORK DOMAIN ANALYSIS · ABSTRACTION HIERARCHYRead down for how, read up for whyFunctional purposeWhy the system existsProtect cash-flow predictabilityPreserve asset valueSatisfy regulatory disclosureValues & priority measuresHow good is judgedEBITDA volatilityExpected annual lossCost of capitalAudit defensibilityPurpose-related functionsWhat must happenCharacterise hazardResolve exposure toentity & assetValue the impactProject underscenariosDecide & actPhysical functionsWhat performs itEarth-observationingestEntity resolutionValuation librarySimulation engineReporting &evidencePhysical objectsWhat it is made ofSatellite rastersTrade & customsrecordsCompany registriesForward curvesPlant & sitecoordinatesWHY ↑HOW ↓
Read down for how, read up for why. This is the instrument that stops a team building a beautiful hazard map. A map sits in the bottom two rows. Nothing in the top two rows is asking for one.

Breaking the work into steps

INSTRUMENT 02Drag to explore →
HIERARCHICAL TASK ANALYSIS · EXPERT ENGAGEMENT0. Quantify a client's climate-driven costplan 0: 1 → 2 → 3 → 4 → 5 → 6, iterate 3–5 until materiality agreed1Framemateriality1.1 identify value drivers1.2 agree hazard scope1.3 set horizonsjudgement2Acquireinputs2.1 customs & trade2.2 registries & sites2.3 EO rasters2.4 forward curvesdata work3Resolveexposure3.1 entity → subsidiary3.2 subsidiary → site3.3 site → coordinate3.4 verify matchdata work4Computeimpact4.1 embedded intensity4.2 apply price path4.3 hazard × vulnerability4.4 aggregate to P&Lcomputation5Projectscenarios5.1 select pathway5.2 bump curves5.3 run alternativescomputation6Advise &sign off6.1 interpret6.2 recommend6.3 accept accountabilityjudgementSteps 2–5 executed identically on every engagement. Steps 1 and 6 varied completely — and consumed the accountability.
Goals, sub-goals, and the order they have to happen in. Breaking it down this far is what makes the next step possible. The colour split is the first hint of the finding: judgement clusters at the two ends.

What the experts notice

INSTRUMENT 03Drag to explore →
COGNITIVE DEMANDS TABLE · CRITICAL DECISION METHOD OUTPUTTASK ELEMENTWHY IT IS DIFFICULTCUES EXPERTS USEWHERE NOVICES FAILCODIFIABLE?Deciding what is materialMateriality is contextual — dependson the client's own cost base andcovenant structureShare of COGS; covenant headroom;whether the board already has a viewTreat every hazard as equallyrelevant; produce a list, not ajudgementNo — judgementMatching entity tophysical siteRegistry names, trading names andsite operators diverge; subsidiariesreorganiseOwnership chains; sector codes;plausibility of site size againstoutputAccept a fuzzy name match withoutchecking the operatorPartly — generate, humanverifiesClassifying goods intoscopeScope turns on code granularity andon production route, not on theproduct nameCode hierarchy; production route;whether upstream inputs are capturedClassify by product descriptionand miss the route distinctionPartly — extract, rulesverifyChoosing scenarioassumptionsPathway choice changes the answermore than the model doesClient's own planning assumptions;regulator's stated scenario; thefinancial statementsPick the headline pathway andnever reconcile it to theaccountsPartly — defaults, humanconfirmsSense-checking an outputThe dangerous error is plausible,not obviousOrder-of-magnitude against peers;direction of change; discontinuitiesin the curveAccept an output because themodel ran without errorYes — anomaly detectionflags, human adjudicatesRecommending an actionCarries consequence; must survivechallenge from a board and aregulatorWhat the client can actuallyfinance; what the counterparty willpriceRecommend the optimum rather thanthe executableNo — accountability
From interviews that walk an expert back through a real job. Asking about the specific signals someone used surfaces what experts notice but never say out loud. The last column falls out of whether those signals can be written down at all.

How a decision gets made

INSTRUMENT 04Drag to explore →
DECISION LADDER · WHERE THE BUYER ACTUALLY ENTERSActivationa signal arrivesObservegather informationIdentify system statewhat is happeningInterpret consequencewhat it means for usEvaluate against goalswhich outcome do we wantDefine target statewhat should be trueDefine taskwhat must be doneFormulate procedurehow exactlyExecuteactSHORTCUT — the rule the CFO actually runs“A number attached to my operations, with a range and a date” → actThe product's job is to make the shortcut safe, not to walk the buyer up the ladder.
Nobody walks the whole loop. The finance director jumps from one signal straight to a decision, and the product's job is to make that jump safe instead of forcing them the long way round. This one diagram shaped every screen we designed.

What the user needs to see, and where

INSTRUMENT 05
Level 1 · perception

What hazard is here?

Answered by the hazard filters, the map, and the sudden-versus-slow split.

Level 2 · comprehension

What of ours is there, and how exposed?

Answered by the site list, the location matching and the vulnerability scores.

Level 3 · projection

What will it cost, by when?

Answered by the scenario controls, the loss figure and the price curves.

Three questions, three regions of the screen, in that order. Blend “what's here” with “what will it cost” on one screen and you get users who are confident and wrong, which in a regulated firm is the expensive kind of mistake.

Who does which part, step by step

INSTRUMENT 06Drag to explore →
FUNCTION ALLOCATION · LEVELS OF AUTOMATION ACROSS FOUR INFORMATION-PROCESSING STAGESInformationacquisitionInformationanalysisDecisionselectionActionimplementationAcquire inputs9869Resolve exposure9746Classify scope8745Compute impact9958Project scenarios8847Sense-check output7633Frame materiality4311Recommend action3211Execute21118–10 full automation, human informed6–7 system acts, human can veto4–5 system proposes, human selects1–3 human decides, system supportsThe allocation is per stage, not per task. Acquisition and analysis automate hard; decision selection stays low everywhere; action implementation never leaves the human on the advisory path.
Not a list of what humans do better than machines. Every step gets split four ways: gathering the data, analysing it, choosing what to do, and doing it. Automate the gathering and the analysis hard, keep the choosing with people everywhere, and never let a machine act on its own on the advisory side.
Countermeasure 01

A queue, never a silent auto-accept

Automating the easy cases makes the leftover ones rarer and harder. Those have to land somewhere a person is looking.

Countermeasure 02

Show the confidence

A number with no confidence attached invites exactly the wrong kind of trust.

Countermeasure 03

Keep the evidence trail on every automated step

You can't bolt an evidence trail on afterwards. If it isn't captured while the sum is being done, the answer can't be defended.

04 / THE PROGRAMME

Every session had to close a decision

We designed the programme backwards from the decisions that had to be made. Each session had one question and one set of tools, and couldn't start until the previous one had produced an answer.

One rule, set at the start: no session ends without a decision written on the wall. If we ran out of time we cut scope.

01Frame the offer
→
02Map the decisions
→
03Blueprint the work
→
04Elicit the cues
→
05Allocate function
→
06Rebuild the service
Session 01

What is this firm selling?

If we can't name the decision, we can't build for it.

InstrumentsPurpose map · rewriting claims
In the roomChief executive · advisory leads · engineering lead · commercial
Inputs
  • Existing capability list
  • Two years of past project scopes
  • The firm's own materials
What we did
  1. Listed every capability we could compute, unedited
  2. Rewrote each as one sentence, this lets a named person decide a named thing
  3. Built the purpose map live on the wall
  4. Parked anything with no purpose above it
Artefacts
  • Capability list
  • Claim statements
  • Purpose map
  • Parked wall
What it decided

Eleven capabilities came out as six claims. The five that failed had no decision above them, which told us more than the six that passed.

Session 02

Who decides, and what makes them act?

What evidence would move them.

InstrumentsDecision map · what the buyer is trying to get done · evidence thresholds
In the roomAdvisory leads · two client-facing partners · commercial
Inputs
  • Client conversation records
  • Sales objections
  • Lost-deal reasons
What we did
  1. Mapped both buyer types separately against how they decide
  2. Traced what triggers it, who's in the room, what evidence they use, and the deadline behind it
  3. Asked what they do when the evidence is missing workarounds mark the real gap
  4. Found where each buyer starts, instead of assuming they start at the bottom
Artefacts
  • Decision map per segment
  • Evidence thresholds
  • The shortcut they take
What it decided

Both segments wanted the same thing: a figure they can defend, attached to their own operations, with a range and a date. That became the design constraint for every screen.

Session 03

How does the work get done?

Draw it before judging it.

InstrumentsService map · step-by-step breakdown
In the roomAnalysts · quantitative research · engineering
Inputs
  • One live project, walked through end to end
  • Time records
  • The analysts' own account of it
What we did
  1. Drew five lanes and ten stages, then walked it back through twice
  2. Broke each stage into its steps and the order they run in
  3. Marked every handoff, every wait, every manual fix
  4. Put the line the client can see where it sat, not where it should
Artefacts
  • Current service map
  • Step breakdown
  • Where it jams
  • List of client touchpoints
What it decided

Ten stages. Three manual jams ate most of the elapsed time, and all three sat below the line the client can see, where nobody could ever object to them.

Session 04

What's hard about the hard parts?

Get the signals, not the opinions.

InstrumentsWalk-back interviews · table of what the job demands
In the roomSenior analysts, one at a time, never as a group
Inputs
  • A real finished project per interviewee
  • The step breakdown from session three
What we did
  1. Walked each project backwards, incident by incident
  2. Probed every decision point for the signals used
  3. Asked what a competent newcomer would get wrong, and why
  4. Ran these one to one, because people don't admit what they notice in front of an audience
Artefacts
  • Table of what the job demands
  • List of signals used
  • How newcomers get it wrong
What it decided

“Could a machine do this” stopped being an opinion. If the signals could be written down, the step could be assisted. If not, it stayed human.

Session 05

Which machine, for which stage?

Split every step four ways before deciding.

InstrumentsLevels of automation · a four-gate screen
In the roomEngineering · quantitative research · compliance · advisory
Inputs
  • Service map
  • Step breakdown
  • Table of what the job demands
What we did
  1. Scored each step separately for gathering, analysing, choosing and acting
  2. Turned every manual step into an automation candidate
  3. Ran each through four gates designed to be failed
  4. Recorded which gate each candidate cleared
Artefacts
  • Who-does-what matrix
  • Candidate list
  • Why each decision went the way it did
What it decided

The survivors all cleared the same two bars: they could be audited, and the data existed at the detail we'd assumed.

Session 06

What does the service look like afterwards?

Design the human moments first, then fill in the machine.

InstrumentsFuture service map · pricing tiers · countermeasures
In the roomFull group
Inputs
  • Everything above
  • Commercial constraints
  • Regulatory calendar
What we did
  1. Started from the moments worth protecting and built automation around them
  2. Designed the exceptions queue, visible confidence and the evidence trail as parts of the service
  3. Priced three delivery tiers deliberately differently
  4. Ordered the roadmap against the compliance deadlines, not engineering preference
Artefacts
  • Future service map
  • Pricing tiers
  • Product definition
  • Three-stage roadmap
What it decided

Three delivery tiers on deliberately different economics, and a written list of the moments that stay human on purpose.

Why this shape

You can't decide what to turn into a product until you know which decision the output serves and what would make somebody act on it. Session three produces the map the whole engagement turns on. Session four is the one most programmes skip, and it's the one that turns opinion into evidence. Five is deliberately destructive. Six puts the service back together with the people still in it.

The mixed room was the method. Almost every disagreement that mattered sat between quantitative research and commercial, or between engineering and advisory. Never inside one team. Separate interviews would have given us four tidy, incompatible views. One room forced the trade-offs to close in the session. The exception was session four, run one to one, because nobody admits what they notice in front of an audience.

05 / TRANSFORMATION

From a consulting method to a system

A consulting method is a set of decisions that happens to live in people's heads. Writing it down was most of the work. Deciding what a machine should carry was the rest.

Two things did the heavy lifting. The before-and-after service map shows what moved. The ladder gave every capability a current rung and a next one, which ended an argument that had been going in circles.

Service map, before and after

BEFORE / AFTER
Drag to explore →
CURRENT STATE · WHERE THE EFFORT AND THE RISK ACTUALLY SIT01TRIGGER02FRAME03ACQUIRE04RESOLVE05CLASSIFY06COMPUTE07PROJECT08CHECK09DELIVER10MONITORClientevidence & decisionFrontstage · advisorwhat the client seesBackstage · analysthidden effortSystems & modelscomputationData & feedsinputsLINE OF VISIBILITYRegulation ormarket eventBrief theproblemChallengethe resultBoarddecisionFrame whatis materialInterpret &recommendPresentRe-engagenext yearHunt forthe dataMatch entityto siteRead theregulationConfigurethe modelSet scenarioby handEyeball theoutputWrite thereportRe-runmanuallyValuationlibrarySimulationengineStaticdashboardCustoms &registriesSitecoordinatesForwardcurvesNothingwatchesmanual bottleneckhuman judgementsystemdata sourceThree manual bottlenecks — data hunting, entity matching and report writing — sit entirely below the line of visibility. The client never sees thework that makes the engagement expensive, so nobody ever argues about it. And the final column is empty: the analysis was accurate on the day it wasdelivered and decayed from there.
FUTURE STATE · DESIGNED OUTWARD FROM THE TOUCHPOINTS WORTH KEEPING01TRIGGER02FRAME03ACQUIRE04RESOLVE05CLASSIFY06COMPUTE07PROJECT08CHECK09DELIVER10MONITORClientevidence & decisionFrontstage · advisorwhat the client seesBackstage · analysthidden effortSystems & modelscomputationData & feedsinputsLINE OF VISIBILITYRegulation ormarket eventBrief theproblemExplorescenariosChallengethe resultBoarddecisionFrame whatis materialInterpret &recommendPresentAdjudicateflagged matchesConfirm scopeclassificationApprovematerialityEdit thedraftContinuousingestionEntityresolutionRegulatoryextractionValuationlibraryScenariobuilderAnomalydetectionDraftgenerationChangedetectionCustoms &registriesSitecoordinatesForwardcurvesLivefeedsAI-assisted, human adjudicateshuman judgementdeterministic systemdata sourceThe analyst lane empties of assembly and keeps only adjudication — reviewing what was flagged, confirming a classification, approving materiality,editing a draft. The client gains a touchpoint rather than losing one. Every green cell is a machine acting under a human decision right next to it,never instead of one.
Switch between them and watch the analyst lane. Today the client touches four of ten stages, and three manual jams sit below the line they can see. In the future version the assembly work goes and the judgement stays. The client gains a touchpoint instead of losing one. Every green cell is a machine acting with a human decision right next to it.

From one-off study to product: six rungs

FRAMEWORK · CLICK A RUNG
BespokeRepeatableTemplatedParameterisedAutomatedProductised

This ended an argument nobody was going to win. Engineering wanted to automate. Advisory wanted to protect the skill. Both were right and neither could prove it. Giving each capability a current rung and a next one turned a values fight into a question about order, and a group can answer that.

One engine, many futures

Turning inputs into settings a buyer can change is what turns a one-off study into a product.

Layered reuse

Shared components serving one bespoke service are over-engineering. Serving a family of products pays for itself several times over. Same spend, opposite verdict.

Intelligence, engine, accountability

The AI layer, the calculation engine, and human accountability. Anything that blurs them is a liability dressed up as a feature.

One engine instead of a study each time

Every new market or sector question got treated as its own study. Same analysis, different inputs, another senior week gone. Nobody saw it as a problem. It was just how the work got done.

We proposed one engine with a set list of variables the user controls. A fixed set of combinations covered most of the questions people asked. It was also the cheapest way to test whether any of this held. If a configured analysis couldn't answer what a bespoke project had answered, nothing further down the roadmap was worth starting.

Build the repeatable middle. Protect the two ends. Price them differently.
06 / AI OPPORTUNITY

Found by analysis, then screened hard

Candidates came out of the service map. Every manual step became one, and each had to get through four gates before it went near a roadmap.

In regulated advice, a guess you can't explain is a liability. So every candidate had to prove it solved a real problem, could be explained to a regulator, and had data behind it.

The four gates

METHODDrag to explore →
AI CANDIDACY SCREEN · DERIVED FROM THE BLUEPRINT, NOT FROM A TECHNOLOGY MENUGATE 01Generatedevery manual step in theblueprint becomes acandidate100%of candidates surviveGATE 02Acts on uncertaintycan the user act on aprobabilistic answer here?71%of candidates surviveGATE 03Survives auditdoes it hold when asupervisor asks how thefigure was produced?45%of candidates surviveGATE 04Data existsat the resolution andrefresh actually claimed28%of candidates surviveGATE 05Failure is visiblea wrong answer is caughtbefore it reaches a decision19%of candidates survivePercentages describe the shape of the screen, not a recorded tally. The value is in what it removes: most ideas die on auditability or on data that does not exist, never on ambition.
Generating candidates is easy. The screen is the work. Gate two asks whether it solves the real problem. Gate three whether it can be explained to a regulator. Gate four whether the data exists at the detail we assumed. Only the last is about engineering.

What each AI capability may and may not do

DEFINITIONDrag to explore →
AI CAPABILITY MAP · WHAT EACH CAPABILITY IS FOR, AND WHAT IT IS FORBIDDEN FROM DOINGPerception & extractionRegulatory readingextract scope, dates, thresholds andaffected codes from legal textBOUNDARYclassify only — a rules engine verifies,the financial engine calculatesDocument intakepull site lists, ownership andproduction data from unstructuredfilingsBOUNDARYnever infers a value that is absent fromthe sourceResolution & linkageEntity resolutioncompany → subsidiary → operating site →coordinate, at portfolio scaleBOUNDARYevery match is evidenced and reversible;low-confidence goes to a queueAsset characterisationinfer construction type and criticalityfrom imagery and recordsBOUNDARYfeeds vulnerability, never overrides asurveyed valueReasoning & assistanceAnomaly detectionflag results that breakorder-of-magnitude or directionexpectationsBOUNDARYraises, never suppresses; the analystadjudicatesScenario translationturn a plain-language question intoengine parametersBOUNDARYproposes the parameter set; the user seesand confirms itGenerationNarrative draftingfirst draft of the client-facingexplanation from the computed resultBOUNDARYdrafts prose around numbers it did notproduceEvidence assemblyassemble the audit trail behind adisclosure figureBOUNDARYassembles provenance; never authors anumber
Every capability carries an explicit boundary. A capability defined only by what it does will drift into doing more. One defined by where it stops survives contact with a compliance team. The boundaries are the load-bearing half of this diagram.

The AI proposes. The engine calculates. People decide.

PRINCIPLEDrag to explore →
THE ARCHITECTURE BOUNDARY · THE SINGLE MOST CONSEQUENTIAL DECISION IN THE CASEINTELLIGENCE LAYERUnderstands, retrieves, draftsprobabilistic · always supervised · never authoritativeread and classify regulatory textresolve entities to physical assetsretrieve prior analysis and evidencedetect anomalies in inputs and outputstranslate intent into engine parametersdraft the first narrativeDETERMINISTIC ENGINECalculates, and is explainable by mandatereproducible · versioned · auditable line by lineembedded intensity and carbon costvaluation and risk metricshazard × vulnerability damage functionsscenario mathematicsportfolio aggregationeverything that gets signed offACCOUNTABILITY LAYERDecides, and carries the consequencecannot be delegated to either layer abovewhat is material for this businesswhether the result is crediblethe recommendation itselfnegotiation with counterpartiessign-off and its consequencesthe client relationshipA technical buyer does not test an AI position by what it promises. They test it by what it declines to promise.
The single most consequential decision in the case. The AI layer understands, retrieves and drafts. The engine calculates, and has to be explainable. People decide, and carry the consequence.

Three stages against the regulatory deadlines

SEQUENCEDrag to explore →
AI ROADMAP · SEQUENCED AGAINST THE REGULATORY CLOCK, NOT ENGINEERING PREFERENCETHE CLOCK SETS THE ORDERReporting obligations widendisclosure of anticipatedfinancial effects becomes thebinding requirementBorder levy costs begin tobitereporting turns into payment; freeallowances start withdrawingCosts scale past thematerial thresholdthe figure becomes a board-levelnumber, not a compliance lineFull phase-inthe mechanism reaches 100% and theanswer must be defensible at auditHORIZON 1Prove the codificationParameterised regulatory-cost analysis replaces thebespoke studyEntity resolution as an internal analystaccelerator, behind the line of visibilityRegulatory extraction feeding a rules engine, not acustomer-facing claimEvidence trail captured from day one — retrofittingprovenance is not possibleTests the whole thesis at the lowest cost. If aconfigured analysis cannot answer what a bespokeengagement answered, nothing further is worth starting.HORIZON 2Extend the surfaceClient-facing scenario exploration with the analystin an approval roleAnomaly detection on every automated path, feeding areview queueNarrative drafting on computed results, analystedits and signsPhysical exposure joined to the transition engine onone asset spineOnly starts once Horizon 1 has produced an audit trailpeople trust. Each item widens who can use the systemwithout widening who is accountable for it.HORIZON 3Compound the intelligenceCross-client exposure intelligence feeding theportfolio-side productAdaptation and mitigation options priced against thesame cost engineContinuous monitoring replacing the annual snapshotAgentic assembly of disclosure packs, human sign-offunchangedThe flywheel. Serving asset-heavy operators generates thebottom-up intelligence that makes the institutionalproduct defensible — the strategic reason for twosegments.
The compliance calendar sets the order. Regulation hands you the requirements and the deadline at the same time, which is unusually convenient. The argument about what comes first comes from outside, so nobody has to win it internally every quarter.
07 / THE PRODUCT

The menu finally said what the firm sold

Once the repeatable middle was separated out, the components underneath turned out not to be specific to any one kind of risk. The same core answers several quite different commercial questions.

The clearest evidence of the whole engagement is a menu. Where a capability sits in the navigation says what the firm believes it sells.

One shared core, several products

ARCHITECTUREDrag to explore →
PRODUCT SYSTEM · ONE CORE, CONFIGURED FOR DIFFERENT DECISIONSPRODUCTRegulatory costwhat an incoming levy adds to thecost base, by year, product andsupply originBUILD FIRSTPRODUCTCorporate exposurecontinuous view of margin riskacross commodity, energy, FX andratesBUILD NEXTPRODUCTPhysical asset riskasset-level exposure and thecash-flow consequence of itBUILD NEXTPRODUCTTransition twinbusiness-as-usual against abatementalternatives, pricedLATERPRODUCTPortfolio climate viewholdings screened onclimate-adjusted risk, fed by theaboveLATERSHARED COREEntity & asset resolutioncompany → facility → coordinateHazard & driver layerphysical hazards, policy, pricesAnalytics & valuationturns exposure into moneyScenario & simulationalternative futures, consistentlyDelivery & evidenceinterface, API, provenance trailDATA FOUNDATIONearth observation · customs & trade · registries · forward curvesADVISORY LAYERmateriality · interpretation · recommendation · accountabilityShared infrastructure serving one bespoke service is over-engineering. Serving a family pays for itself several times over. Same investment, opposite verdict.
Engineering had already built the shared components. They were waiting on a product decision without knowing it. Once the family of products existed, the same spend stopped looking like waste and started looking early.

The menu, before and after

RESTRUCTUREDrag to explore →
INFORMATION ARCHITECTURE · THE NAVIGATION IS WHERE THE PRODUCTISATION BECOMES VISIBLEBeforeorganised by the firm's own systemsMarketMarket overviewMarket detailedEarth observationPortfolio overviewPortfolio detailedTradeSwap pricerTrade draftsCommodity exposure+1 moreAnalysisCustom book managementCommodity position summaryRegulatory costBooksEnd of day summaryReturns analysis+2 moreInternalMarket fit monitorBook risk+3 moreAfterorganised by how risk and regulation decomposeGlobal riskOverviewScenario analysisTransition riskOverviewEmissions tradingBorder levyDeforestationSustainability reportingScenario analysisPhysical riskOverviewScenario analysisrestructureThe same capability moves from a lineitem inside an internal trading menu toa named branch of the risk taxonomy thatthe client, the auditor and theregulator all already use.That single move is the productisation,made visible.Navigation is not decoration. It encodes what the firm believes it sells — which is why restructuring it was a product decision, not a design refresh.
The productisation, made visible. A capability moves from a line buried in an internal menu to a named branch of the risk categories the client, the auditor and the regulator all already use. Nothing about the underlying sums changed. Everything about what it was changed.

Two very different buyers, and that helped

Serving two buyers this different normally costs you focus. Here it did the opposite. Analysing companies with a lot of physical stuff, their sites, their supplies, their exposure to policy and weather, produces something that didn't exist before: detailed, bottom-up intelligence about which real operations are fragile.

That is exactly what investors need to judge which companies are safe to hold. The operator business produces the raw material that makes the investor business defensible. One improves as the other grows, so what looks like a lack of focus turns into an advantage, and it's the reason the roadmap's third stage exists at all.

08 / INTERFACE

Where the analysis becomes something a person can use

Four screens redesigned from the working product, three proposed for things the analysis defined but the platform hadn't reached. Anonymised throughout. Every figure is illustrative, computed on published mechanisms.

This is where the research work cashes out. The three-question split, the shortcut people take, who does which part, the countermeasures. They all turn up here as concrete design decisions.

Physical exposure: site list

Hazard filter, map, scenario controls and per-site scoring on one screen

REDESIGNEDDrag to explore →
Risk platform
Global risk
Overview
Scenario analysis
Transition risk
Overview
Emissions trading
Border levy
Deforestation
Sustainability reporting
Scenario analysis
Physical risk
Overview
Asset register
Scenario analysis
River floodingSurface floodingStorm surgeWildfire
592574
FLOOD DEPTHassets in extent
InsightData
Estimated loss p.a.5.8%of replacement value · expected annual loss
28% low52% medium20% high
Where this came from · hazard layers dated Q1 · pathway per stated scenario · figures illustrative
Site list, score 1–100, banded 1–49 low / 50–69 medium / 70+ high
AssetACUTERiver floodingACUTESurface floodingACUTEStorm surgeACUTEWildfireACUTEDroughtACUTEWindCHRONICCoastal floodingCHRONICSubsidenceCHRONICExtreme heat
SITE-023941569240302354545454
SITE-122452518645303030535630
SITE-121234568912531554545454
SITE-121442609586242054545454
SITE-121344549234304553535353
SITE-434345548565655449494949
Three questions, three regions. The hazard filters and the map answer what is present. The site list answers what of ours sits there. The scenario controls and the loss figure answer what it costs us. The sudden/slow split uses the wording of the disclosure standard, so the screen produces reportable output by construction.

Global exposure: four drivers on one screen

Commodity, energy, macro and financial exposure with the payment schedule underneath

REDESIGNEDDrag to explore →
Risk platform
Global risk
Overview
Scenario analysis
Transition risk
Overview
Emissions trading
Border levy
Deforestation
Sustainability reporting
Scenario analysis
Physical risk
Overview
Asset register
Scenario analysis
Commodity
€2.3M ▲
1 day+9,1461 month+259,450Year to date−351,245
Energy
€3.5M ▼
1 day−11,1561 month−263,130Year to date−361,211
Macro
€5.1M ▼
1 day+22,2951 month+563,130Year to date+361,211
Financial
€22.5M ▼
1 day−52,3561 month−1,004,000Year to date−1,200,000
Exposure summarybook · illustrative
Total exposure56,953,128
Total exposure NPV−55,434,734
Price differential−6,020,153
Company cost−61,454,887
Residual risk−748,926
Cashflow schedulenotional, price and present value by month
DateTotal notionalFixed notionalAggregateMarketCF (PV)
2026-0140,71315,39656.7055.74-2,300,964
2026-0239,70515,31256.6655.71-2,238,026
2026-0340,96515,85756.6555.62-2,303,995
2026-0440,20914,81856.5855.64-2,254,553
2026-0538,90712,81160.6155.44-1,131,657
2026-0640,02014,37056.3555.32-2,223,306
Notional calendarfixed against unfixed exposure
price fixednot fixed
Exposure against market curveaggregate price versus market
marketaggregate
The claim was “four business drivers in one place”. This is what that has to mean. Each driver shows where it stands now plus three changes, because a finance director reads direction before size. The schedule below is the audit trail for the number above: the same figure broken down by month.

Regulatory cost: one engine, four states

The bespoke country study, turned into something you configure. Same screen, four sets of settings.

REDESIGNED
A
Single origin

Base parameters only. One country, cost as a share of import value.

Analysis
Display
Benchmarking
Projection
20262034
Global avgOrigin B
OriginLevy cost
Global avg6,860
Origin B5,096
B
With base material

Base material cost switched on. The levy is now shown against what the goods themselves cost.

Analysis
Display
Benchmarking
Projection
20262034
Global avgOrigin B
OriginBase materialLevy cost
Global avg17,0566,860
Origin B15,4165,096
C
Benchmarked origins

Seven origins compared on the same basis. This is the state that changes a procurement decision.

Analysis
Display
Benchmarking
Projection
20262034
Global avgOrigin AOrigin BOrigin COrigin DOrigin EOrigin F
OriginBase materialLevy cost
Global avg17,0566,860
Origin A15,4161,960
Origin B16,4005,096
Origin C17,3845,096
Origin D18,3685,880
Origin E19,3527,448
Origin F20,3368,624
D
Forward projection

Phase-in applied across the compliance period, all origins, cost per year.

Analysis
Display
Benchmarking
Projection
20262034
202620272028202920302031203220332034
Origin AOrigin BOrigin COrigin DOrigin E
Origin2026202820312034
Origin A2,50010,00061,000100,000
Origin B6,50026,000158,600260,000
Origin C7,50030,000183,000300,000
Origin D9,50038,000231,800380,000
Origin E11,00044,000268,400440,000
This is the parameterisation, designed state by state. Controls appear as they become relevant. Origins stay greyed out until benchmarking is switched on, the date range until projection is. The results table rebuilds with each state instead of showing empty columns. Four states cover most real questions, which is exactly why the study didn't need rebuilding each time.

Scenario: holding the moving parts still

Adjusting currency and carbon price assumptions, with the resulting cost path

REDESIGNEDDrag to explore →
Risk platform
Global risk
Overview
Scenario analysis
Transition risk
Overview
Emissions trading
Border levy
Deforestation
Sustainability reporting
Scenario analysis
Physical risk
Overview
Asset register
Scenario analysis
Scenario constructionwhat is being held, and what is being moved
Curve bumpsparallel shift applied to the forward curve
FX forward
+10%
Carbon price
+10%
Base commodity
0%
Bumping the curve is how a hedge gets sized. The screen exists because fixing the moving parts was the recommended action, so the control had to be in the product.
Resulting cost pathillustrative, on the published phase-in shape
202620272028202920302031203220332034
with bump appliedunbumped baseline
Cumulative, 5-year horizon€246kper €1m of annual import value
Sensitivity to the bump+18%against the unbumped path
A written recommendation became a control on screen. The advice was to hold the volatile inputs still by hedging. Instead of leaving that sitting in a document, we put the setting in the product, so the client can size the hedge themselves and watch the path move. The dashed baseline stays on screen, because a scenario with nothing to compare it against isn't telling you much.

Regulatory coverage: requirement to capability

Every disclosure clause mapped to the capability that answers it

NEW · DESIGNEDDrag to explore →
Risk platform
Global risk
Overview
Scenario analysis
Transition risk
Overview
Emissions trading
Border levy
Deforestation
Sustainability reporting
Scenario analysis
Physical risk
Overview
Asset register
Scenario analysis
RequirementCovered byStatus
Processes to identify and assess climate riskDescribe the process, own operations and value chain, under multiple pathways including a high-emissions one Core platformCost engine Covered
Hazard identificationIdentify hazards, define short, medium and long horizons Core platform Covered
Exposure assessmentAssess exposure of assets and activities, considering location and hazard likelihood and severity Core platform Covered
PoliciesDescribe policies to manage material climate impacts, risks and opportunities n/a Client-authored
Actions and resourcesDisclose mitigation and adaptation actions and the resources allocated Adaptation module Partial
TargetsDescribe targets for adaptation and physical risk mitigation Adaptation module Partial
Anticipated financial effectsMonetary amount and share of assets at material physical risk, split acute and chronic Core platformCost engine Covered
Location of significant assetsDisclose location of significant assets at material physical risk Core platform Covered
Net revenue at riskNet revenue from activities at material physical risk, monetary and proportional Cost engine Covered
Methodology disclosureScope, horizons, calculation methodology, critical assumptions and limitations Cost engine Covered
Reconciliation to the accountsReconcile to the relevant financial statement line items n/a Client-authored
Requirement wording paraphrased from the public disclosure standard. Coverage marks are a product decision.
The one we'd build first. Regulation writes the requirements list and sets the deadline. Mapping clause to capability produces a roadmap and a sales asset at once, and marking two rows as client-authored is what makes the other nine not credible.

Transition twin: act, sell, or do nothing

The same exposure priced three ways over one period

NEW · DESIGNEDDrag to explore →
Risk platform
Global risk
Overview
Scenario analysis
Transition risk
Overview
Emissions trading
Border levy
Deforestation
Sustainability reporting
Scenario analysis
Physical risk
Overview
Asset register
Scenario analysis
actInvest in adaptation
Revenue disruption0.0
Adaptation CAPEX−2.9
Residual damages−50.8
Insurance premium−28.0 to −112.1
Net 10-year impact−80.9 to −165.0
actDivest the exposure
Revenue disruption0.0
Replacement CAPEX−41.1
Residual damages−50.8
Insurance premium−28.0 to −112.1
Net 10-year impact−119.9 to −204.0
don't actDo nothing
Revenue disruption−9.7
CAPEX0.0
Total damages−169.3
Insurance premium−93.5 to −373.8
Net 10-year impact−272.4 to −552.8
Structure follows published adaptation-finance practice. Values illustrative, so the point is the comparison.
The shortest path from the existing sums to a recurring commercial conversation. The engine already produced the cost of doing nothing. This adds the alternative, because nobody acts on one number. They act on the difference between options. Putting the comparison on the same screen turns an analysis into something you can decide from.

Exceptions queue: where the human stays

The screen that makes automation defensible

NEW · DESIGNEDDrag to explore →
Risk platform
Global risk
Overview
Scenario analysis
Transition risk
Overview
Emissions trading
Border levy
Deforestation
Sustainability reporting
Scenario analysis
Physical risk
Overview
Asset register
Scenario analysis
17items awaiting adjudication
96% auto-resolved this run0 auto-accepted below thresholdfull provenance retained
TypeWhy it was raisedContextConfidence
Entity match Operator name on the site licence differs from the registry parentTwo candidate parents share a trading name Site 12442 · rolling mill
0.62
AcceptCorrect
Scope classification Production route ambiguous between two eligible codesRoute determines whether upstream inputs are in scope Consignment 8841
0.58
AcceptCorrect
Anomaly Cost per tonne 3.4× the sector median for this originDirection and magnitude both outside expected band Origin D · Q3 batch rule AcceptCorrect
Entity match Registry shows dissolution mid-periodOwnership transferred, coordinates unchanged Site 09813
0.71
AcceptCorrect
Extraction Threshold value absent from the published textFalls back to the prior period value pending review Regulatory update · clause 14
0.44
AcceptCorrect
Nothing on this screen has been applied. Every row is a machine proposal held behind a human decision, and every decision is written to the evidence trail.
The screen that makes automation defensible. Automating the easy cases makes the leftover ones harder and rarer. So the machine queues a low-confidence result with the reason and the evidence behind it, and a person decides. Confidence is shown because trust has to be earned. The queue also becomes the training signal.