Foundation
Structural prerequisites for defensibility
The IDR Principles / Edition 1.0
If DoneRight
The AI Governance Framework for Regulated Financial Services
Twelve principles for using AI without surrendering judgment. The work can move, the record can hold, and the firm can grow with control.
Edition 1.0 uses the SEC Marketing Rule as its primary example, not as the framework's only possible use.
The free preview includes the opening section. One email when it's ready. One publication notice. No product updates.
Provenance
The framework was forged through the work.
The moment to establish disciplined practice is before AI-assisted work becomes routine. Regulated firms still need to explain where an output came from, what changed before it was used, and who decided to rely on it.
Brandon has worked deeply in AI since joining Palantir in 2021; Stefan was pursuing AI and automation in parallel. Together they formed Chaos Holdings LLC, from which TIMEWrit emerged. Building TIMEWrit then pressure-tested and sharpened the twelve IDR Principles into a framework that firms can read and apply independently of the product.
The Framework · Edition 1.0
The Twelve IDR Principles
Four categories organize twelve principles. The book contains each principle's complete statement and implementation guidance.
Intelligence
Analytical infrastructure for screening
Operations
Running a defensible process daily
Evolution
Keeping the framework current
I · FoundationStructural prerequisites for defensibility
IDR 01
Every AI-Assisted Output Must Have a Documented Chain of Origin
IDR 02
Document the Process Before You Need to Defend the Process
IDR 03
Assume the Examiner Will Ask “Show Me” — Build for That Moment
II · IntelligenceAnalytical infrastructure for screening
IDR 04
Your Screening Process Must Be at Least as Sophisticated as the Content It’s Screening
IDR 05
Context Is Not Optional — Decompose Before You Evaluate
IDR 06
Regulatory Interpretation Is Not Static — Your Process Must Anticipate, Not Just React
IDR 07
Language Evolves Faster Than Regulation — Your Screening Must Account for the Gap
III · OperationsRunning a defensible process daily
IDR 08
Every Decision Must Be Explainable — Not Just Recorded
IDR 09
Separate the Screening Function from the Approval Function
IDR 10
Version Everything — Content Changes, Process Changes, Rule Changes
IV · EvolutionKeeping the framework current
IDR 11
Stress-Test Your Process Against Scenarios That Don’t Exist Yet
IDR 12
The Framework Itself Must Evolve — Build Review Cycles into the Architecture
Complete statements and implementation guidance · Forthcoming in the book
What the framework changes
It gives the work a structure that can hold.
Origin
Where did the information come from, and what changed before the firm relied on it?
Interpretation
How were the applicable requirements interpreted, including uncertainty and changes over time?
Decision
Who made the final decision, and why does the record support that judgment?
The governing idea
The work can move.
The judgment stays visible.
The IDR Principles · Edition 1.0
TIMEWrit · Regulated Content Review
Where the principles become practice.
TIMEWrit applies the IDR disciplines to regulated content review. It prepares review-support material while the firm's reviewer retains authority over approval, revision, publication, and reliance.
TIMEWrit is one application of the framework. Firms can read and apply the IDR Principles independently of the product. The goal is to preserve the thinking in the work and leave a record that can explain how it was reviewed and decided.
Explore the TIMEWrit review workflowThe Authors
Written from inside the problem.
The framework joins systems design with the operating judgment of an SEC-registered advisory firm.
Questions
What people ask about the framework.
What is If Done Right?
If Done Right is a forthcoming book by Brandon Veldman, CFA, and Stefan Whitwell, CFA. It introduces the IDR Principles, a twelve-principle framework for governing AI-assisted work in regulated financial services. Edition 1.0 uses the SEC Marketing Rule as its primary example.
What are the IDR Principles?
The IDR Principles are twelve practitioner principles organized into four categories: Foundation, Intelligence, Operations, and Evolution. They address provenance, regulatory interpretation, review authority, versioning, stress testing, and the framework's own evolution.
Are the IDR Principles an SEC rule or official standard?
No. The IDR Principles are an independent practitioner framework. They are not a regulation and were not issued or endorsed by the SEC or any standards body. They are intended to make AI-assisted work more intelligible, reviewable, and supportable.
Who wrote If Done Right?
Brandon Veldman, CFA, and Stefan Whitwell, CFA, co-authored the book. Brandon built TIMEWrit after work across finance, enterprise risk, and Palantir. Stefan leads Whitwell & Co., an SEC-registered investment adviser.
How does TIMEWrit relate to the book?
The IDR Principles took shape through the work of building TIMEWrit. The book sets out the framework so firms can read and apply it independently. TIMEWrit applies the same disciplines to regulated content review, while final judgment remains with the firm.
Who is the framework for?
It is written for firm principals, CCOs and compliance teams, examination staff, and other accountable reviewers who need to understand how AI-assisted work was produced, reviewed, and decided. The framework does not replace a firm's policies, legal advice, or regulatory obligations.
What can I receive before publication?
The free preview includes the opening section. Join the reader list and we'll send it when it is ready, plus one publication notice. No product updates.
Veldman, B. and Whitwell, S. (forthcoming). If Done Right: The AI Governance Framework for Regulated Financial Services. Edition 1.0.
Edition 1.0 · Book forthcoming
Start with the free preview.
The free preview includes the opening section. One email when it's ready. One publication notice. No product updates.