Controlled Policy · Risk & Liability

VC-LEG-0400 — Liability, Indemnity & Risk Register

The enterprise risk register for botanical operations, the Directorate's indemnity stance for field crews, and the insurance posture covering containment, exposure, transport, and data-breach exposures.

Doc Control: VC-LEG-0400 Revision: Rev C Effective: 2090-04-01 Owner: Risk Counsel, LEG-RSK Approver: General Counsel · CBO Next Review: 2090-10-01 (overdue) Classification: INTERNAL // CHLOROPHYLL-EYES-ONLY

Review status: This Policy is past its semi-annual review date. A refresh of the risk register and insurance schedule is in progress with LEG-RSK; the register below is current as of the last assessment cycle.

1. Purpose & Scope

1.1. This Policy identifies, grades, and assigns ownership of the legal and operational risks that could expose GreenWorld Sector-7 to liability, and states how those exposures are mitigated, indemnified, and insured. It applies enterprise-wide and is the source of record for the residual-risk position attested to the Directorate each quarter.

1.2. Risk is scored as Severity = Likelihood × Impact on a five-band scale. A risk is never "closed"; it is reduced to a documented residual position that the risk owner accepts and the Directorate ratifies.

2. Scoring Scale

Likelihood

L1 → L5

L1 Rare · L2 Unlikely · L3 Possible · L4 Likely · L5 Almost certain (per operating year).

Impact

I1 → I5

I1 Negligible · I2 Minor · I3 Material · I4 Severe · I5 Catastrophic (loss of life / perimeter escape).

Low (1–6) Moderate (7–11) High (12–17) Critical (18–25)

3. Enterprise Risk Register

3.1. The standing register of priority risks. Severity reflects the inherent score before residual controls; residual reflects the position after mitigation.

Risk ID	Description	L	I	Severity	Owner	Mitigation	Residual
`RR-001`	Off-site specimen escape during field recovery	L2	I5	Critical	OPS-FLD / LEG-RSK	HSTP-9 transport casing, two-person custody, FSR reconciliation, Venus Sentinel escort for GCL-3+	High
`RR-002`	Personnel toxin-exposure incident in Phyto-Synthesis Bay	L3	I4	Critical	OPS-PSB / Occ. Health	PPE attestation, OPER medical surveillance, antidote stock, two-person rule	High
`RR-003`	GCL-4 containment failure (Bio-Vault breach)	L1	I5	High	OPS-CON	Redundant sphere telemetry, double airlock, kill-loop, monthly audit, VC-SOP-0401 response	Moderate
`RR-004`	Breach of CHLOROPHYLL-classified data / Extraction Process	L2	I5	Critical	LEG-CON	Compartmentalization, MDF access logging, NDAs, two-person export, injunctive-relief posture	High
`RR-005`	IP misappropriation by departing insider	L2	I4	High	LEG-IP	Exit debrief, credential revocation, genetic-marker provenance, claw-back clause	Moderate
`RR-006`	Regulatory sanction for late breach notification	L2	I3	Moderate	LEG-REG	Dual-clock notification model, 15-min internal report SLA, litigation-hold drill	Low
`RR-007`	Invasive self-propagation of an Engineered Cultivar beyond zone	L2	I4	High	OPS-CUL	Sterile-line engineering, negative-pressure zones, PhytoSense VOC alarms, fallow protocol	Moderate
`RR-008`	Third-party (visitor/licensee) injury on premises	L3	I3	Moderate	LEG-RSK / Facilities	Escort policy, NDA + waiver, lobby-only default, public-liability cover	Low
`RR-009`	Hazardous-specimen transport incident in transit	L2	I4	High	OPS-FLD	HSTP-9 manifest, certified casing, route deconfliction, transit insurance rider	Moderate
`RR-010`	CHLORA autonomous-action error during Nocturne Watch	L2	I3	Moderate	Engineering / OPS	Supervised autonomy ceiling, Tier-2 human-ack gate, action audit log, rollback	Low

Directorate-accepted residual: RR-001, RR-002, and RR-004 retain a HIGH residual position. The Directorate has formally accepted these residuals as the irreducible cost of the facility's mission and reviews them each quarter. Acceptance does not relax any control; it acknowledges that some risk is inherent to wielding what we wield.

4. Indemnity Stance — Field Operations

4.1. Field crews operate off-perimeter under elevated hazard. The Directorate extends indemnity to field personnel who act within authority and procedure, and withholds it from those who do not.

4.2. GreenWorld Sector-7 shall indemnify and hold harmless any field operative against claims, losses, and defense costs arising from acts performed in good faith, within their GCL authority, and in compliance with the governing SOP and the Field Service Report process.
4.3. Indemnity does not extend to acts of gross negligence, willful misconduct, unauthorized GCL escalation, suppressed Notifiable Events, or operations conducted without an open FSR.
4.4. Indemnity is conditioned on prompt notice to the General Counsel, preservation of records, and the operative's cooperation in defense; GreenWorld Sector-7 controls the defense and any settlement.
4.5. Where personal liability attaches under VC-LEG-0100 §9, indemnity is reconciled against — and may be clawed back by — the facility.

Cross-reference: Field authority, packaging, and reconciliation duties that condition indemnity are documented in the Field Service Reports process and in Operations → Field Dispatch (OPS-FLD).

5. Insurance Posture

5.1. GreenWorld Sector-7 maintains a layered insurance program proportionate to the catastrophic tail of its risk register. Cover is placed through specialist phyto-hazard markets; specimen-escape and toxin-exposure exposures carry bespoke wordings.

Line	Covers Risks	Limit (per occurrence)	Retention	Status
Containment & Specimen-Escape Liability	RR-001, RR-003, RR-007	$750M	$5M	Bound
Phytotoxin Exposure & Employer's Liability	RR-002	$300M	$2M	Bound
Cyber & Confidential-Data Breach	RR-004	$250M	$3M	Renewal pending
Hazardous-Specimen Transit (HSTP-9 rider)	RR-009	$120M	$1M	Bound
Public & Visitor Liability	RR-008	$100M	$0.5M	Bound
Directors & Officers / Governance Liability	Governance exposures	$200M	$2M	Bound

5.2. Exclusions of note. No policy responds to losses arising from willful misconduct, undisclosed GCL-4 activity, or sanctioned activity. The Cyber line excludes loss of trade-secret value following insider misappropriation — that exposure is managed through the IP defensive measures in VC-LEG-0200 §9, not transferred to insurers.

6. Revision History

Rev	Date	Author	Summary of Change	Approved
A	2088-02-17	J. Henbane	Initial register and indemnity stance for field operations.	GC
B	2089-03-22	J. Henbane	Added insurance schedule and Directorate-accepted residual framework.	GC · CBO
C	2090-04-01	A. Datura	Added RR-010 (CHLORA autonomy) and cyber/data-breach exposures; cross-linked FSR indemnity conditions.	GC · CBO