Financial Systems

SECTION 01

Domain overview and system boundary

Define the financial function whose continuity matters before selecting an institution or metric. A payment system, a funding market and a bank balance sheet have different boundaries and time scales. Record obligations, currencies, maturities and the parties entitled to act. Separate solvency from the ability to make a payment when due: an asset may have long-term value without being immediately usable. This distinction prevents a stock measure from concealing a timing problem. The learning case should identify the real-economy service that depends on the function and the evidence required to judge whether continuity has been preserved. [F01] [F14]

Financial systems connect payments, credit, funding, collateral, insurance and risk transfer. This library studies the continuity of those functions and the mechanisms through which distress spreads across institutions, markets and the real economy. It is an academic systemic-risk domain, not the Institute’s operating budget, a business plan or investment guidance. The unit of analysis can be a payment network, a funding market or an interconnected set of balance sheets, provided its boundary and critical functions are explicit.

A financially sound institution in isolation may be vulnerable to simultaneous withdrawals, collateral calls, asset sales or the failure of a shared service provider. Conversely, connectivity can diversify ordinary shocks while transmitting unusually large ones. Analysis must therefore distinguish solvency, funding liquidity, market liquidity and operational continuity. The learning case should specify currencies, maturities, legal entities, settlement timing and the location of usable resources. Public indicators support a bounded interpretation; confidential exposure data and authorised institutional judgement may be needed for a fuller assessment.

A domain label is not yet a case boundary. Separate the condition of a resource or asset from the function delivered to users. A nominally available installation may fail to deliver usable service, and a system-wide average can conceal localized loss. Preserve the original physical or institutional unit alongside any normalized representation. The boundary should make it possible to ask what enters, what changes, what leaves and who experiences the consequences.

Section readings [F01; F14]

SECTION 02

Historical development and changing conditions

Historical financial crises reveal changes in the form of liquidity transformation rather than the disappearance of run risk. Deposits, repo funding, investment-fund redemptions and collateralised derivatives can each create demands for cash on different terms. Compare the contractual structure, information environment and available response mechanisms before borrowing a historical parameter. A traditional bank-run model clarifies coordination problems, while the repo literature documents a different institutional channel. The timeline should show how funding, collateral and market infrastructure evolved. It should not convert unlike crises into one stationary empirical distribution of failure. [F01] [F07]

A historical baseline must be examined for changes in exposure, technology, operating practice and observation. Compare episodes using their mechanisms and evidence, rather than treating all events with a similar label as exchangeable observations. A reconstruction should show what was known at each time; later explanations should not be presented as information available to the original decision maker. Recovery and long-term change may require a separate timeline from the initiating incident.

Section readings [F01; F07]

SECTION 03

Actors, institutions and decision responsibilities

The institutional landscape includes banks, non-bank intermediaries, exchanges, clearing houses, custodians, payment operators, central banks, supervisors and resolution authorities. Each controls a different part of continuity. A central counterparty’s risk management differs from a bank’s funding decisions, and a private service provider does not hold public resolution powers. Map the function, legal entity, information holder and decision authority for the case. International standards provide common analytical reference points, but national implementation and institutional mandates determine available actions. The map should identify both the responsible role and the operational ability to act within the relevant deadline. [F14] [F15]

Map actors by the function they perform and the responsibility they actually hold in the case. The same organization may observe a condition, supply a service and participate in a decision; those roles should remain distinguishable. Examine information access, resources, expertise, affected users and accountability together. A list of institution names is not an operating governance arrangement. Record the evidence for each responsibility and the process for resolving a disagreement or correcting a record.

Section readings [F14; F15; C07]

SECTION 04

Primary systemic risks

Primary financial risks should distinguish losses, timing shortages and operational interruption. A counterparty default can reduce asset value; a margin call can create a cash demand without an equivalent long-term economic loss; a payment outage can block settlement despite adequate resources. These mechanisms require different observations and responses. Record gross and net exposures, collateral, seniority and the time at which obligations become due. A single solvency ratio cannot represent all of them. Network models are useful when their contractual assumptions match the question, while liquidity models expose pathways that fixed loss propagation can miss. [F03] [F04]

The inventory is a structured set of research hypotheses. It separates a threatening condition from the mechanism of loss and from its consequences. The proposed TFP association indicates which question to investigate; it is not evidence that a particular indicator predicts the event. Risk importance depends on the defined function, exposure, duration and usable alternatives. Do not infer frequency, severity or priority from the position of a row in the table.

Section readings [F03; F04]

SECTION 05

Amplification mechanisms and secondary risks

Amplification often comes from individually reasonable responses that are destabilising when performed together. Institutions sell assets to raise cash, but common sales depress prices and reduce collateral values elsewhere. Tighter margins then create further cash needs. Analyse these loops jointly instead of assigning an independent shock to each institution. The relevant market depth is the capacity available during simultaneous stress, not normal trading volume. A case should identify which rules or funding terms make responses procyclical and which resources can absorb the timing pressure without requiring the same crowded sale. [F04] [F05] [F10]

An amplifier changes the consequences of an initiating condition without necessarily causing the initiating event. Useful counterfactuals hold the threat constant and vary concentration, maintenance, access, information or response capacity. Document the mechanism and the observation that would distinguish it from an alternative explanation. Several amplifiers may share the same upstream cause; counting each one as independent evidence exaggerates confidence.

Section readings [F04; F05; F10]

SECTION 06

Emerging risks and research horizons

Horizon scanning should examine changes to settlement, leverage visibility, service concentration and the speed of funding withdrawal. Tokenisation may alter custody and redemption arrangements without removing the underlying claim on cash or assets. Shared AI tools may synchronise responses, while climate pathways can reprice correlated exposures. For each item, specify the mechanism, exposed function and evidence needed to assess it. A technology label alone is not a risk estimate. The objective is to identify assumptions that need stress testing, including whether legal finality, operational access and usable liquidity remain aligned in the proposed arrangement. [F13] [F14]

A research horizon is tied to the time needed to investigate, prepare or change a system. It is not a date at which an emerging threat is predicted to occur. Record the reason for concern, the strength of evidence, the exposed function and the observation that would change the priority. Distinguish a newly observed mechanism from a known mechanism whose exposure, scale or institutional context is changing.

Section readings [F13; F14]

SECTION 07

Cascades and cross-domain dependencies

A cascade taxonomy should separate direct counterparty losses, common-asset valuation effects, funding withdrawal and operational dependencies. Two institutions can be connected through overlapping portfolios even without direct claims on one another. Conversely, a large gross exposure may be partly collateralised or legally netted, changing both the loss and timing path. Label each edge with its economic meaning, currency and maturity. Network density can diversify small shocks while transmitting larger ones under some models. The case should test this conditional relationship rather than assume that either more connectivity or more separation is always safer. [F02] [F08] [F09]

Maturity transformation funds longer-lived assets with liabilities that can be withdrawn or repriced sooner. It supplies valuable liquidity services but creates a timing vulnerability when many creditors demand payment together.

Funding liquidity and market liquidity interact. Selling assets to obtain cash can depress their prices, weaken collateral values and increase the cash needed elsewhere. This feedback differs from a fixed direct-credit-loss model.

Counterparty networks transmit missed payments according to obligation size, seniority, collateral and settlement rules. A graph without those contractual features can misstate both loss and timing.

For each directed dependency, specify the function supplied, the destination, the propagation time and the substitute. Shared-cause failure, interacting threats and cascading propagation are different structures. A directed arrow becomes an explanatory claim only when the timing and mechanism are supported. Test apparent redundancy by removing the common access route, platform, energy supply or specialist on which both alternatives depend.

Section readings [F02; F08; F09; C01; C02]

SECTION 08

Readiness and response protocols

A response protocol should connect a measured deterioration with an authorised, feasible action. For a payment backlog, the task may concern operational processing and liquidity timing; for a funding shock, it may concern mobilisation of already available resources. Analysts should not assume access to public emergency support or invent a power to restrict counterparties. State the responsible institution, action scope and verification step. Preserve a record of the information available at the time. The exercise should compare the time required to act with the time until the relevant obligation is due, rather than use an arbitrary escalation clock. [F14] [F15]

Preparedness connects a signal to a responsible actor, an available measure and a condition of completion. This learning architecture does not grant emergency command or operational authority to the c-ECO Institute or a course participant. A useful protocol distinguishes checking the signal, protecting exposed functions and verifying recovery. A paper plan contributes to usable capacity only when its relevant assumptions have been tested.

Section readings [F14; F15]

SECTION 09

Scientific review and decision records

Independent technical review should challenge exposure completeness, behavioural assumptions, dependence structure and the feasibility of the proposed action. A liquidity plan may rely on assets that are already encumbered or on transfers that cannot occur between entities in time. A network model may omit common holdings or non-bank counterparties. Reviewers should ask which assumptions change the decision and which can be tested with current evidence. Record disagreements rather than conceal them inside one stress score. Scientific review supports an institutional decision; it does not replace the legal authority of supervisors, operators or resolution bodies. [F03] [F10] [F15]

A review record separates observation, inference and decision. Record the data version, methods, alternative explanations, relevant expertise, conflicts of interest and unresolved disagreement. Review should be matched to the question and its consequences. Scientific analysis can inform a competent actor without replacing that actor’s mandate. No membership size, quorum or institutional power is established by this teaching library.

Section readings [F03; F10; F15; C05; C07]

SECTION 10

Communication and observation continuity

Communication can influence funding behaviour, but it should not be treated as a substitute for credible resources and accurate records. During stress, identify which critical function is affected, which facts are verified and when further information will be provided. Avoid mixing a temporary operational workaround with a claim of financial soundness. Different audiences need different information, and disclosure decisions may have legal constraints. A learning exercise should test message consistency, responsible approval and independent delivery channels. The objective is to reduce avoidable ambiguity while preserving the distinction between evidence, institutional judgement and uncertain future outcomes. [F16] [F18]

Continuity of observation should be tested alongside continuity of the function itself. Losing data may increase uncertainty before the physical process visibly changes. Redundancy must be demonstrated against common causes, including power, location, communications, credentials and specialist availability. During disconnected operation, preserve the last reliable observation, record the uncertainty that follows and reconcile timestamps and authorship when information paths return.

Section readings [F16; F18; C01]

SECTION 11

International instruments and technical references

Financial governance depends on jurisdiction, institution type and the function under examination. International principles and resolution attributes are reference frameworks, not identical self-executing rules everywhere. The case should identify applicable domestic instruments, contractual terms and competent authorities before discussing intervention. Separate supervision, operational management, recovery and resolution because their powers and objectives differ. Scientific evidence can illuminate exposure and contagion channels, while authorised legal analysis determines the available action. This avoids presenting a simulated response as an actual c-ECO power or assuming that one country’s institutional mechanism is portable without adaptation. [F14] [F15]

Classify each instrument before using it. A scholarly article supports an inference, a technical guide describes a method, a standard has a defined scope, and a legal instrument may create obligations only where applicable. The case record should identify the specific provision or method, its version and the activity to which it relates. A source’s institutional reputation cannot by itself establish applicability or demonstrate compliance.

Section readings [F14; F15]

SECTION 12

Jurisdiction-specific responsibilities and requirements

A baseline should reconcile legal entities, accounting dates, maturity buckets, currencies, collateral and off-balance-sheet commitments. Consolidated figures may conceal a local shortage or a transfer restriction. Market data and balance-sheet data also arrive at different frequencies and can reflect different perimeters. Record those differences before calculating indicators. A publicly reported ratio is a useful observation, but its definition and lag matter. Where necessary data are unavailable, state which inference cannot be made rather than fill the gap with an apparent precision derived from a broad sector average. [F12] [F22]

The register should cover the actual activity and location, including interfaces between organizations and jurisdictions. Separate responsibility for observing, supervising, deciding and executing. Retain the official source, version consulted and evidence needed to assess a condition. Conflicting definitions and overlapping mandates are analytical findings to investigate. A general library cannot create a universal legal threshold for all settings.

Section readings [F12; F22]

SECTION 13

Causation, accountability and cascading consequences

Accountability analysis should trace decisions about funding structure, risk limits, control remediation and operational change. The final event in a failure sequence is not necessarily the root cause. A software deployment can reveal weaknesses in testing, permissions and financial controls, while a bank failure can involve management and supervisory processes over a longer period. Preserve the distinction between an official finding and a research interpretation. Identify who had authority to address each contributing condition and what evidence was available. This supports learning without reducing a complex incident to a single person, ratio or market move. [F16] [F20]

A technical chain of consequences is not automatically a legal allocation of liability. Separate evidence of causation from the duties, control and decisions relevant to each actor. A case may contain direct damage, dependent service interruption and persistent environmental or social consequences on different timescales. The analysis should show which links are documented and which need further investigation, without presuming an institutional restoration fund, mandatory levy or insurance mechanism.

Section readings [F16; F20]

SECTION 14

Cross-boundary coordination

Cross-border finance introduces currency, legal-entity, time-zone and resolution constraints. Group-level resources may not be immediately usable by the entity that must settle an obligation. Netting and collateral rights can also depend on enforceability and contractual scope. Map the location and timing of both claims and resources. A scenario should not assume frictionless transfers precisely when markets and institutions are stressed. International coordination arrangements are relevant evidence, but their existence does not establish that every action can be executed within the required window. Identify the responsible authorities and the unresolved information or legal dependencies. [F14] [F15]

Processes and dependencies often cross administrative, organizational or national boundaries. Coordination requires compatible definitions, useful timing, authorized exchange and an identifiable decision interface. Sharing data does not by itself resolve disagreements over objectives, risk allocation or resources. An exercise should expose which decision can be coordinated under existing arrangements and which would require an additional agreement or competent determination.

Section readings [F14; F15; C07]

SECTION 15

Position (P): candidate observations

A candidate P construct should represent the remaining capacity to preserve a specified financial function under the scenario. Usable cash, eligible collateral, settlement capacity and loss absorption describe different dimensions and should remain visible before aggregation. A resource unavailable in the required currency or entity should not be counted as immediate headroom. Define the horizon and obligation being protected. An average system ratio can conceal a critical node with no remaining capacity. The purpose of a composite, if used, is to support a transparent decision, not to erase the timing and contractual details that determine feasibility. [F03] [F22]

P represents position relative to a specified loss of function. The raw observation, reference condition, direction of deterioration and boundary of failure must remain explicit. A candidate monotone transformation can help compare states within a defined case, but it does not establish the threshold or validate an aggregate index. Capacity, delivered performance and exposure may require different indicators even when they concern the same installation.

A didactic monotone transformation for an indicator that worsens as it rises is p = clip[(x − x_ref)/(x_failure − x_ref), 0, 1]. Reverse the direction for a reserve that deteriorates as it falls. The expression makes the reference points visible; it does not choose those points, prove comparability or establish an operational aggregate. Retain x in its original unit and justify the function separately for each case.

Section readings [F03; F22]

SECTION 16

Velocity (ΔV): rates and trajectory

Velocity is central when withdrawals, collateral calls or payment queues develop faster than institutions can respond. Measure outflow and buffer depletion at a frequency appropriate to the mechanism. A daily average can conceal an intraday shortage, while a short burst should not be extrapolated mechanically over a longer horizon. Separate actual cash movement from valuation changes and revised classifications. Compare deterioration with the demonstrated time needed to mobilise resources and authorise action. The question is not only how much stress exists, but whether a feasible response remains available before the next binding obligation. [F16] [F17]

ΔV describes direction and rate of change over a declared interval. Two systems at the same apparent position may have different reaction times because their trajectories differ. Compare rates using consistent units, observation windows and reference systems. Check seasonality, missing periods, reporting changes and process acceleration before extrapolating. A time-to-boundary calculation is conditional on its trajectory assumption; it is not a general forecast.

Section readings [F16; F17]

SECTION 17

Uncertainty (σ): evidence and model limits

Financial uncertainty includes incomplete exposures, unknown behavioural responses, stressed market depth, legal enforceability and model specification. A confidence interval on a market-based measure does not capture every one of these uncertainties. Distinguish measurement lag from scenario uncertainty and from an assumed causal structure. Conditional co-movement can identify a warning without proving a particular contagion channel. Report results under alternative plausible withdrawal, recovery and price-impact assumptions. The most useful uncertainty statement identifies which observation would change the decision and which conclusion remains stable across the tested assumptions. [F11] [F12]

Uncertainty should be recorded by object and source. Measurement uncertainty, sampling limitations, parameter uncertainty, model structure, future scenarios and institutional ambiguity cannot be replaced by one unsupported percentage. More simulation samples can reduce numerical sampling error without resolving a missing mechanism. Identify which uncertainty changes the decision and which further observation, comparison or test could reduce it.

Section readings [F11; F12; C06]

SECTION 18

Reversibility liquidity (Lr): usable recovery resources

Recoverability concerns continuity of critical functions under operational and legal constraints. It is not equivalent to restoring every asset value or returning every institution to its previous structure. Inventory usable liquidity, collateral mobilisation, trusted payment processing, decision authority and the records needed for recovery or resolution. Test resources in the entity, currency and time window where they are needed. A plan is evidence of preparation, while an exercise or demonstrated operation supplies evidence of feasibility. Separate private recovery options from public resolution actions, whose authority and availability cannot simply be assumed in a simulation. [F14] [F15]

Lr examines resources that can preserve, contain or recover the defined function within the relevant time. A resource listed in an inventory is different from a resource that is accessible, compatible, staffed and mobilizable. Record capacity, useful arrival time, duration, dependencies and evidence of testing. Avoid averaging away an essential bottleneck. Recovery of a service does not necessarily restore ecological condition, accumulated losses or public trust.

Section readings [F14; F15]

SECTION 19

Stress scenarios and comparative strategies

Scenarios should isolate and combine distinct channels: a concentrated funding outflow, a common-asset price shock, collateral calls, a payment-system outage and a physical disruption affecting borrowers. Include a scenario in which resources exist at group level but are unavailable at the required entity. The point is to identify binding constraints and robust actions, not to declare a universal crisis probability. Historical cases supply plausible sequences and questions. Their exact magnitudes should be transferred only when the exposure base, contractual structure and market conditions justify the comparison. [F16] [F17] [F18]

A stress scenario states the initiating condition, prior state, time sequence, exposed function, shared dependencies and feasible responses. Its purpose is to reveal when a strategy loses usefulness and why. Compare alternatives across several conditions, including absent substitutes and simultaneous demand. Scenarios should lead to observations, tests and resource questions; assigning a precise event probability requires a separate justified model and evidence.

Section readings [F16; F17; F18]

SECTION 20

Reproducible simulation and sensitivity analysis

A quantitative stress exercise must specify balance-sheet identities, obligation timing, loss allocation and behavioural responses. Independent draws of asset losses will miss a common portfolio shock; a fixed price model will miss fire-sale feedback. Network-clearing and market-based methods answer different questions and should be compared with those limits visible. Retain parameter provenance, distributions and sensitivity results. A simulated shortfall is conditional on the scenario and model, not a forecast or an institutional recommendation. Report which critical functions fail and when, because an aggregate end-period loss can hide an earlier liquidity interruption. [F03] [F04] [F12]

Simulation is an explicit transformation of assumptions. Input distributions, dependencies, parameter estimation, output definition and testing must be documented. Numerical convergence does not establish model validity. Examine sensitivity to the function used, the weights selected, dependence assumptions and conditions outside the fitting data. The reproducible laboratory below is a synthetic exercise, separated from SPS and from any claim about real-event frequency.

The factor loadings define association on the latent scale. Correlations after the nonlinear transform should be estimated from the simulated samples. Q is a teaching index and is not SPS. Its exceedance fraction concerns the generated sample under these assumptions; it is not the probability of a real event or a forecast over a stated number of years. A temporal forecast would require a separately specified process and observation model.

from random import Random
from math import log, exp, sqrt
from statistics import mean
rng = Random(2743319735)
m = [.72, .62, .40, .38]
s = [.40, .45, .30, .40]
a = [.65, .55, .35, -.45]
q = []
for _ in range(10000):
    g = rng.gauss(0, 1)
    x = []
    for mj, sj, aj in zip(m, s, a):
        z = aj*g + sqrt(1-aj*aj)*rng.gauss(0, 1)
        x.append(1/(1+exp(-(log(mj/(1-mj))+sj*z))))
    p, v, u, lr = x
    q.append(.35*p+.25*v+.15*u+.25*(1-lr))
q.sort()
print(mean(q), q[499], (q[4999]+q[5000])/2, q[9499])
print(sum(x >= .70 for x in q)/len(q))

Sensitivity exercise: remove the common factor, vary one dispersion, change the weight of recovery resources, and compare the ranking of the selected strategies. Then state which domain observations would be needed to replace each illustrative assumption. Use a suitable estimator when inputs are dependent; the common-factor experiment is a dependence check, not a claim that a particular Sobol estimator applies unchanged.

Section readings [F03; F04; F12; C03; C06]

SECTION 21

Restoration and performance verification

A restoration simulation should follow the sequence from evidence reconciliation to resource mobilisation, payment processing and acceptance of critical-function continuity. Include staffing, authorisation and data-integrity checks, not only financial amounts. A system can have adequate resources while instructions are delayed or records cannot be trusted. Test a minimum viable payment path and identify which obligations remain unresolved. Where a scenario includes failure management, distinguish the actions available to the institution from those reserved to public authorities. The exercise should expose missing dependencies and decision delays rather than assume that every listed option is executable. [F14] [F15]

Restoration follows prerequisites and verification conditions rather than a universal fixed clock. Tasks may proceed in parallel only where they do not compete for the same people, access, equipment or information. Protect essential functions while the critical path is addressed. Define what is measured before returning service, who can make that determination and which effects require continued observation after a technical restart.

Section readings [F14; F15]

SECTION 22

Recovery provider capability

A provider supporting financial recovery should demonstrate task-specific competence and the authority to perform the relevant work. Payment-system restoration, collateral operations, data reconstruction and legal resolution support require different expertise. Record independence, conflicts, access controls and the scope of any assurance claim. An external analyst cannot validate the availability of a facility merely by citing its description. Ask for operational tests, custody arrangements and the responsible institution’s acceptance criteria. Supplier concentration should also be mapped because multiple providers may rely on the same digital platform, market infrastructure or specialist team during a common shock. [F14] [F20]

Capability assessment must be specific to the task, place and stress conditions. A training certificate cannot demonstrate that a team can mobilize and deliver the required function. Inspect competence, safety, compatibility, relevant experience and actual availability. Define the verification method and limits of recognition. This teaching library does not establish a c-ECO provider certification scheme or substitute for professional or regulatory requirements.

Section readings [F14; F20]

SECTION 23

Recovery sequencing and time constraints

Recovery sequencing should preserve trustworthy records, identify obligations and deadlines, stabilise critical operations and mobilise resources that are actually available. Subsequent steps depend on whether the problem is temporary liquidity, sustained loss or operational compromise. Do not use a solvency intervention to explain a payment-processing repair, or assume an operational restart resolves a funding shortage. Each transition needs evidence and an authorised decision owner. Track unsettled obligations and residual reconciliation tasks separately from system availability. This keeps a nominal return to normal from concealing unresolved claims or unsafe processing. [F14] [F15] [F18]

A recovery time objective is a decision criterion to test against real capacity. Distinguish mobilization, work, verification and decision time, and identify dependencies between tasks. Shared resources can prevent apparently parallel activities from proceeding together. Repeating the sequence with unavailable access, a specialist or a verification service reveals where a target relies on an untested assumption.

Section readings [F14; F15; F18]

SECTION 24

Equipment, inputs and replenishment

The resource inventory should identify amount, location, currency, maturity, encumbrance, eligibility and mobilisation time. A headline asset value does not establish a usable source of cash. Include trusted data, personnel and operational access because those determine whether financial resources can be deployed. Test commitments against their conditions and avoid counting assumed emergency assistance as a pre-positioned resource. The inventory should be joined to the time-bucket analysis so that a reviewer can see which obligation has no matching resource. Update dates and valuation assumptions are part of the evidence, not administrative decoration. [F05] [F22]

Inventory analysis connects each item to a protected function. Use condition, compatibility, accessibility and consumption under stress rather than a nominal stock count alone. Replenishment time must include procurement, transport, installation and verification where relevant. A substitute that depends on the same supplier or platform may disappear in the same event. Keep the last inspection date and the evidence supporting usable availability.

Section readings [F05; F22]

SECTION 25

Mutual aid and cooperation arrangements

Mutual assistance in financial systems is constrained by contracts, regulation, risk limits and the condition of the assisting party. Do not assume that a counterparty can supply liquidity or operational support during a system-wide shock simply because it can do so in normal times. Record committed terms, authorisation, collateral and delivery timing where relevant. For operational aid, define access to sensitive records and the acceptance of reconstructed transactions. Exercises should include simultaneous demand on the same provider. Available assistance is the support that can be delivered under the stated scenario, rather than a broad statement of institutional cooperation. [F14] [F18]

Cooperation contributes to recovery when its scope, activation, resources and practical availability are demonstrated. Record who requests support, who authorizes it, the useful arrival time, responsibility for the work and conditions of return. Consider simultaneous demand across participants. A reference to an organization or network in the literature does not imply that c-ECO or a case partner has joined it or secured a deployment commitment.

Section readings [F14; F18]

SECTION 26

Source classification and evidence quality

Classify sources by their evidentiary role. Balance-sheet records describe positions at a date; transaction data describe flows; market prices reflect traded conditions; research models examine mechanisms; official investigations document a bounded event. These are complementary and can disagree for legitimate reasons. Record perimeter, frequency and revisions. A market-based risk measure is not a direct observation of every counterparty exposure, while an exposure network can omit the market feedback that drives common losses. Source classification should help reviewers understand the inference being made rather than treat every official or peer-reviewed item as interchangeable validation. [F03] [F11] [F12]

Source classes organize origin and function; they do not form an automatic hierarchy of evidential strength. An official statistic, an operational record and a causal study answer different questions. Classify the product, not only the organization. Detect shared data origins so that a dashboard, article and secondary report based on one observation are not counted as three independent confirmations.

Section readings [F03; F11; F12; C04; C05]

SECTION 27

Institutional, regulatory and technical sources

International bodies provide principles, policy analysis and comparable terminology for critical financial functions. Their publications should be cited by edition and purpose. A foundational liquidity document is useful for understanding measurement, but current local requirements need separate verification. A resolution-policy framework describes desired institutional capabilities without granting powers to the learning project. Extract the relevant analytical question: which function must continue, which resources absorb loss, who can act and what information must be available? The usefulness of the framework lies in making those questions concrete and reviewable, not in displaying an institutional logo. [F14] [F15] [F22]

Institutional sources should be selected by product, method and scale. Record whether the source defines a requirement, observes a condition, reports an investigation or synthesizes a literature. A current portal may contain several editions and methods; cite the actual version used. Public access does not establish accuracy for a different question, and a restricted source can still be used only under its authorized conditions.

Section readings [F14; F15; F22]

SECTION 28

Operational observations and monitoring products

Operational and market sources include payment queues, funding transactions, collateral records, order books and provider incident reports. Their interpretation depends on coverage and timing. Quoted depth may disappear before execution; a settlement message may not establish finality; a funding spread can reflect several components. Align sources to a common time basis and retain the original definitions. During disruption, missing records can be informative about operational failure but should not be read as zero activity. A reconstructed event timeline should show data gaps, revisions and the difference between observed transactions and inferred intentions. [F19] [F20]

Operational observations should show what the system delivered, not merely that an asset was declared available. Inspect the acquisition process, sensor or reporting changes, gaps, coverage and quality controls. Compare records with independent observations where feasible. Aggregated performance, a status dashboard and user experience can diverge because they concern different units, locations, periods or definitions of availability.

Section readings [F19; F20]

SECTION 29

Academic research and independent evidence

Academic methods should be selected for the causal question. Clearing models analyse obligations and recovery under specified rules; portfolio-overlap models examine indirect losses from common holdings; conditional market measures estimate stress-related co-movement or shortfall. No method replaces the others automatically. Compare assumptions with the case’s contracts, markets and data. A network metric can screen potentially influential nodes but cannot establish legal responsibility or predict a unique crisis path. The learning exercise should explain which channel the method represents, which channels it excludes and what additional evidence would test its relevance. [F03] [F08] [F10] [F11]

Read the research design before transferring a conclusion. Identify the question, unit of analysis, method, comparison, result, limitations and conditions that matter for the case. Foundational concepts, empirical studies, critical replications and technical syntheses serve different functions. A literature-supported mechanism may justify a hypothesis without validating a local threshold, forecasting performance or a complete TFP application.

Section readings [F03; F08; F10; F11]

SECTION 30

Source–variable correspondence

A source-to-variable matrix should make the lineage of every indicator visible. Identify the raw position or transaction, valuation date, unit, legal entity, currency and transformation. Separate contractual cashflows from behavioural estimates and distinguish gross exposures from netted amounts. A correction to collateral eligibility may change usable liquidity without changing total assets. Preserve both the original observation and the revised interpretation. This allows reviewers to reconstruct what was known at each decision time and prevents a later restatement from silently improving the apparent quality of the earlier analysis. [F12] [F22]

The source–variable matrix exposes the path from an observation to an analytical representation. Preserve the raw unit, time, location, method, transformation and uncertainty. Multiple derived variables may share one observation and therefore share its limitations. Record the code or reproducible procedure, authorized access and version. A score should remain inspectable through its originating evidence rather than replacing that evidence.

Section readings [F12; F22; C04; C05]

SECTION 31

Source–risk correspondence

A source-to-risk matrix should identify which mechanism a dataset can support. Holdings data help examine common-asset exposure but may be too infrequent for intraday liquidity. Payment records reveal settlement stress but may not identify the ultimate cause. Public market measures can signal joint distress without resolving hidden bilateral claims. Mark the coverage limit and the evidence needed to distinguish competing explanations. Reusing the same price series in several indicators does not create independent confirmation. The matrix should lead to a targeted investigation rather than equate the presence of a source with a validated risk parameter. [F08] [F11] [F19]

A source–risk matrix should cover the threat, the observed state, the mechanism and the consequences separately. Evidence that an event occurred does not alone show why a function failed or who was affected. Use a chronology and alternative explanations to test the chain. A citation becomes useful when the specific part of the claim it supports and its limits are visible.

Section readings [F08; F11; F19]

SECTION 32

Monitoring gaps and research priorities

Monitoring gaps are often concentrated in non-bank leverage, collateral chains, legal-entity transfers and rapidly changing intraday positions. Public reporting may be too delayed or aggregated for a short action window. Build a gap register stating the affected inference, a defensible temporary proxy and the conditions under which the proxy fails. Absence of observed exposure is not evidence that the exposure is zero. A scenario can explore plausible bounds, but the result must retain that conditional status. The analytical priority is to discover which missing observation could materially change the assessment of critical-function continuity. [F18] [F12]

Prioritize a gap by its consequence for the decision. The next observation may be a targeted measurement, an independent comparison, a capability test or a correction of incompatible definitions. More data of the same kind may not resolve structural uncertainty. Specify the question, required observation, responsible custodian, time of collection and condition under which the gap is considered sufficiently addressed.

Section readings [F18; F12; C03]

SECTION 33

Dependency matrix and propagation tests

Cross-domain financial analysis should trace a specific payment, credit, insurance or collateral channel. A flood may damage borrowers, interrupt utility revenue and increase claims at the same time; a digital outage may prevent otherwise funded payments. These mechanisms operate on different horizons and should not be compressed into one sector correlation. Identify the receiving function, its time tolerance and the available alternative. The purpose is to understand where a financial interruption could constrain an essential service and where a physical or institutional disruption could create financial stress, without drifting into the Institute’s own business planning. [F13] [F14]

Overlapping portfolios connect institutions that have no direct lending relationship. One institution’s sale can impose valuation losses on others holding the same assets.

Margin calls convert valuation changes into immediate cash demands. A position that is economically hedged over a long horizon may still require substantial short-term liquidity.

Operational dependencies can interrupt financial functions independently of balance-sheet strength. Payments require trustworthy identity, connectivity, data and settlement infrastructure.

A dependency matrix should be directional and time-specific. Record the supplying function, receiving function, mechanism, useful delay, substitute and evidence. Test the destination when the origin becomes unavailable for different periods. Then remove a common prerequisite of the substitute. The resulting structure describes the case; it does not establish all connections in a global architecture or validate an edge weight.

For each relationship, add the measured delay, duration of tolerable interruption, substitute and observation supporting the directed edge. Repeat the test for short, intermediate and extended unavailability. A generic list of linked sectors is not an estimated network, and no edge weight is validated by inclusion in this table.

Section readings [F13; F14; C01; C02]

SECTION 34

Documented cases, near misses and recovery

Historical cases should be compared by channel and evidence type. Repo stress illustrates secured-funding vulnerability; the Flash Crash concerns market dynamics; Knight Capital exposes operational and control failures; March 2020 and the LDI episode show liquidity feedback; the SVB review examines management and supervisory weaknesses around a bank failure. These records are not interchangeable observations from one population. Ask which assumption failed, how quickly stress developed and what resource or decision constrained response. Transfer the causal question to the present case while retaining the original institutional and temporal boundaries. [F07] [F16] [F17] [F18] [F19] [F20]

Historical analysis distinguishes observed loss, protective response, near miss and recovery. Several records can concern one event without becoming independent events. Preserve what the source actually investigated and avoid adding unsupported casualty, cost or restoration-time estimates. Compare cases by mechanism and evidence quality; the fact that one response was associated with an outcome does not alone establish a general causal effect.

Section readings [F07; F16; F17; F18; F19; F20]

SECTION 35

Integrated review, transfer and learning portfolio

Financial data can illuminate cross-domain stress only when economic interpretation accompanies technical integrity. A securely stored price can still be stale, an exposure can be legally unenforceable and a liquidity commitment can be unusable in the required currency. Preserve measurement quality, contractual context, provenance and model assumptions as separate layers. Cross-domain use should report the critical function being analysed and the confidence limits on the proposed channel. The resulting evidence supports scientific review and authorised institutional decisions; it is neither investment advice nor an automatic forecast of failure for a named institution. [F03] [F13] [F14]

The integrated portfolio should allow a reviewer to move from the question to observations, transformations, mechanism tests, scenarios and proposed monitoring. Make the strongest competing explanation and the most consequential unresolved gap visible. Transfer requires checking mechanisms, exposure and recovery resources in the new setting. Formation, optional credentialing, submission permission and licensing remain distinct processes; no case or data contribution enters the SIL without an associated fellow and applicable review.

Section readings [F03; F13; F14; C04; C05]