MAJLIS
The problem
Gulf risk functions sit where three forces meet. Supervisory expectations are converging fast: a new Central Bank law with a one-year transition, model management standards with teeth, climate risk principles, and a financial crime regime under permanent international scrutiny. The institutions absorbing this are growing faster than their second lines. And a generation of licensed payment and fintech firms has just entered the supervisory perimeter with excellent engineering and almost no inherited control infrastructure. Most of the tooling these institutions can buy was designed for other regimes, other balance sheets, and other currencies.
What it is
MAJLIS, named for the council where the Gulf talks governance, is a constellation of eight working prototypes for Gulf risk functions. It is the sibling of AEGIS, the twelve-module platform blueprint this lab builds for mid-tier banks generally: same design language, same synthetic-data discipline, same taxonomy spine, aimed at the regulatory universe of the GCC. The demonstrations run on three synthetic tenants: a conventional Dubai bank, a Sharjah Islamic bank, and a licensed Dubai payments firm, with AED as the working currency.
The eight modules:
FALCON is the regulatory radar: the Gulf issuance stream tracked at obligation level across CBUAE, SAMA, QCB, DFSA, and ADGM sources, with applicability and delta views. Every simulated issuance carries a demo identifier; real regulators appear only as source names.
VERDICT is model risk and AI governance under the CBUAE Model Management Standards and Guidance: model inventory, risk tiering with governed overrides, validation findings, and remediation heat.
ATLAS is concentration analytics: large exposures against the CBUAE Large Exposures Regulation, group resolution of connected counterparties including government-related entities, and a limit engine.
SHAMAL is climate scenario analysis for Gulf portfolios, built on NGFS scenario framings and the region's climate risk principles, with transition deltas made legible at portfolio level.
PRISM is IFRS 9 overlay governance: the register of post-model adjustments, their rationale, their aging, and the challenge trail that supervisors increasingly expect around ECL judgment.
MINARET is the Islamic finance risk toolkit: the disciplines specific to Islamic banking, from profit-sharing investment account risk to Sharia governance, framed on IFSB standards and guidance.
FALAJ is payments risk in a box for the newly supervised: a control and obligation starter kit shaped by the Stored Value Facilities Regulation and the Retail Payment Services and Card Schemes Regulation, for firms that have a licence, a float, and a month to stand up a second line.
SONAR is the financial crime effectiveness lab: screening effectiveness measured honestly, name-variant families, and the gap between coverage claimed and coverage demonstrated.
Why it matters
The Gulf is the most concentrated natural experiment in supervisory modernization anywhere: new law, new standards, new entrants, all on one clock. The transition period of Federal Decree-Law No. 6 of 2025 ends in September 2026, and it pulls banks, insurers, payment providers, and their technology enablers under one supervisor. The capability gap this opens is exactly the gap this lab exists to blueprint: risk tooling that is AI-native, regulator-literate, and buildable by institutions that cannot spend like a G-SIB.
Honest framing
Every MAJLIS module is a working prototype and a blueprint, not a product. Everything runs in the browser on synthetic tenants with fictional data; simulated regulatory content is tagged as demonstration content throughout. Nothing is for sale. Open the constellation, pick a module, and interrogate it.