VERUM · GBC AIR TECHNICAL SERVICES LTD · IAGi STAGE 2 DEMONSTRATION · 2026

IRROPS
Decision Engine

Real-time aircraft disruption detection, recovery option scoring, role-gated approval and OCC propagation — supported by implemented aviation logic including multi-AOC, readiness, audit and human-approval controls.

Operational prototype. This presentation covers capabilities confirmed working in the Verum platform as of May 2026. Live demo: GBC Air scenario AOG-01 — KMIA hydraulic failure.

This is a controlled Stage 2 demonstration environment prepared for IAGi review. It does not represent the final production hosting architecture. Production-readiness planning includes migration from controlled demo hosting to secure cloud/server infrastructure.

12
Engine modules
3-gate
Feasibility scoring
19
Approval rule types
Multi-AOC
Implemented AOC / FTL logic
SHA-256
Audit log integrity

Multi-AOC architecture includes aircraft-to-AOC mapping, AOC status checks, crew approvals per AOC and FTL framework resolution — allowing Verum to support operators across multiple AOCs, regulatory frameworks and jurisdictions.

BETA Verum is currently in beta. AI outputs are advisory only. Critical operational actions require human approval.
The Problem

Airline disruption is expensive,
complex, and time-critical

When an aircraft goes unserviceable, a controller must simultaneously manage crew legality, aircraft availability, passenger rights, cargo commitments, and regulatory compliance — in under 30 minutes, often without automated decision support.

✈️

Average IRROPS response

Industry benchmark: OCC controllers take 20–40 minutes to assemble recovery options manually across fleet, crew, and MX systems — by which time slot windows may have closed.

⚠️

Regulatory exposure

A delayed passenger flight on a short-haul sector triggers EU261 Art. 7 claims of €250–€400 per eligible passenger, plus duty-of-care obligations within 2 hours of notification. Every minute of delay counts.

📋

Governance gaps

Manual IRROPS decisions leave no structured audit trail. Post-incident reviews — regulatory, safety, or insurance — cannot easily reconstruct who decided what, with what information, at what time.

Integrated Platform

VERUM — The Integrated Airline Operations System.

Verum is GBC Air Technical Services Ltd.'s integrated airline operations system — designed as a multi-departmental seamless solution, including OCC, crew control, disruption management, compliance and dispatch readiness. One control surface, ten operational modules, full audit chain — engineered for real airline operations.

Verum is developed by aviation specialists around real operational workflows — not as a generic software product retrofitted for aviation.

Operational Disruption Management (IRROPS) is one module within Verum, focused on disruption detection, recovery options, approval control, execution tracking and operational propagation.
🗂️

OCC & Dispatch

Flight watch, readiness gates, W&B, fuel, cargo, documentation — unified in a single OCC control surface.

🧑‍✈️

Crew Control

FDP projector, duty-time tracking, crew legality gates — integrated directly into the disruption recovery workflow.

⚖️

Compliance & Audit

Configurable multi-jurisdiction regulatory logic, EU261 triage, hash-chained audit log — built into every decision and approval record.

About the Team

Operational aviation leadership
and systems expertise

Verum is developed by GBC Air Technical Services Ltd., led by aviation professionals with more than 30 years of combined operational, compliance and aviation management experience. The platform is built by people who understand real airline operations from the inside.

David Barma

CEO · GBC Air Technical Services Ltd.

David is a seasoned aviation executive, senior pilot, instructor, check pilot and examiner, with experience in aviation company set-up, operational management and supporting operators in improving their performance.

dbarma@gbc-air.com

Marc Agusti Roc

Senior Project Manager & Company IT Specialist

Marc has extensive front-line aviation operations experience across short and long-haul environments. His background in project management, compliance, performance and aeronautical systems supports his role as primary architect of Verum.

magusti@gbc-air.com
Platform Overview

An operational decision loop,
not a notification system

Verum IRROPS is a connected engine chain that takes an aircraft impact event and drives it through recovery scoring, human approval, execution, and system-wide propagation — with every step recorded.

01 DETECT
Decision Queue
AOG, FDP breach, MEL expiry, cascade delay — scored and prioritised automatically. 7 issue types.
02 ANALYSE
Recovery Engine
Fleet candidates ranked by availability, conflict score, FDP impact, and operational cost.
03 APPROVE
Approval Layer
19-rule governance matrix. SWAP requires Senior OCC. Cancel requires Duty Manager. Role-gated, timestamped.
04 EXECUTE
Execution Engine
8 action types executed with field-level mutation logging. Blocked until approved. Cannot be bypassed.
05 PROPAGATE
Propagation Engine
10 reconcilers refresh readiness gates, alert state, FDP projector, and OCC timeline in one pass.
06 RECORD
Audit Log
Every decision, approval, and execution is hash-chained. Tamper-evident. Regulator-ready.
🔧

Readiness Engine — 7 gates

Aircraft, Crew (FDP/docs), W&B, Fuel, Cargo, Checklist, Documents. Real B737-800F limits. Configured for multi-AOC regulatory logic. Each gate has an alert upsert path.

FDP Projector

Forward duty-time projection per crew member. Per-sector breakdown. BREACH_PROJECTED / AT_RISK / OK classification. Read-only — never mutates duty state.

⚖️

EU261 Risk Board

5-state triage lifecycle. EU Art. 7 exposure calculation (€250/€400/€600). Hash-chained audit log. Human-decision gated. Advisory output only.

Demo Scenario · AOG-01

GBC-737-02 hydraulic failure
at KMIA — T-65 min to departure

Incident Facts

Aircraft
GBC-737-02 (B737-800F)
Station
KMIA — Miami International (home base)
Fault
No.2 hydraulic system failure
Status
Declared unserviceable — AOG
Affected flight
GBC411 · KMIA → MYNN · STD T+65 min
MEL active
MEL-2026-017 · Weather Radar No.2 (Cat B, deferred)
Crew rostered
CM003 David Brown (PIC) / CM004 Maria Perez (SIC)

What the system must do

In the 65 minutes between AOG declaration and departure block, the OCC must:

  • Surface the disruption with correct severity and urgency
  • Generate and rank recovery options against real fleet state
  • Route the selected option through the correct approval chain
  • Execute the decision and propagate state changes system-wide
  • Record every action with full provenance and timestamp
✓ GBC-737-04 is serviceable at KMIA · same type · no schedule conflict in window
Step 01 / 06

AOG surfaces
in the decision queue

The moment GBC-737-02 is declared unserviceable, the Decision Queue engine classifies it as an AOG issue at home station, scores it CRITICAL, and positions it at the top of the queue. The network exposure banner turns RED.

Priority is computed in real-time: SEV_WEIGHT × urgency_multiplier × network_factor. At T-65 min, this flight is in the highest urgency tier.

Issue type
AOG (home station)
Severity
CRITICAL
Gates passed
Safety → Legality → Feasibility
Urgency countdown
T–65 min to STD
Approval routing
AIRCRAFT_SWAP → Senior OCC
IRROPS Control Panel
3 Active Issues
NETWORK STATUS: RED · AOG ACTIVE · CASCADE RISK
AOG-01 · GBC-737-02 · KMIA
No.2 Hydraulic System Failure
GBC411 KMIA→MYNN · David Brown / Maria Perez
CRITICAL T–65 min
FDP-01 · CM001 · GBC-737-01
FDP Breach Projected — 13h30m
GBC103 MYNN→MKJP · John Smith
HIGH T–40 min
RDY-01 · GBC103 · W&B
Readiness Gate Blocked — W&B not initiated
Pre-departure checklist not started
HIGH T–40 min
Step 02 / 06

Recovery options
ranked automatically

The Recovery Engine evaluates all dispatchable fleet against three gates: Safety (airworthiness, CofA), Legality (FDP headroom, crew documents), Feasibility (station match, schedule conflict window, turnaround time).

GBC-737-04 scores FEASIBLE — same type, same station, no conflicting schedule in the slot window. Cost breakdown is pre-computed.

Dispatchable fleet check
Excludes AOG, MAINT, virtual, grounded aircraft
Conflict detection
STD/STA window + turnaround buffer (60 min min.)
Cost estimate source
Live EU261 engine + CostEngine.rates
Top candidate
GBC-737-04 · KMIA · B737-800F · FEASIBLE
Recovery Options · GBC-737-02
3 options
✈ AIRCRAFT SWAP FEASIBLE
Donor: GBC-737-04 · KMIA · B737-800F · No conflicts
FDP impact: CM003 headroom 4h20m remaining — OK
Op. cost~$2,400
EU261 exp.$0 (FRT)
Delay added~25 min
⏱ DELAY FDP RISK
Max delay window: 120 min · CM003 FDP headroom: 4h20m
Op. cost~$800
Delay riskMEDIUM
✕ CANCEL FEASIBLE
Last resort · Full cargo rerouting · EU261 N/A (FRT)
Op. cost~$12,000
Cargo penalty~$4,500
Step 03 / 06

Controller selects SWAP —
approval required

The controller selects GBC-737-04 as the donor aircraft and submits the AIRCRAFT_SWAP decision. A native confirmation modal fires before the record is created — preventing accidental submissions.

The governance engine routes this to Senior OCC approval automatically. The flight state does not change. The operation is still on GBC-737-02 until the approval completes and execution runs.

Approval class
AIRCRAFT_SWAP → SENIOR_OCC (mandatory)
DEC record created
DEC-001 · status: AWAITING_APPROVAL
APR record created
APR-001 · approvalClass: MANDATORY
Network state
GBC411 still on GBC-737-02 — no premature mutation
Approval Request
UNDER REVIEW
Decision IDDEC-001
Action typeAIRCRAFT_SWAP
AircraftGBC-737-02 → GBC-737-04
Flight in scopeGBC411 · KMIA→MYNN
Selected byOCC Controller
Selected at2026-05-28T14:22:07Z
Approval classMANDATORY
Approval statusPENDING
Required roleSENIOR_OCC
Execution gateAWAITING_APPROVAL
⛔ Execution is blocked. The operation cannot be mutated until APR-001 is approved by a SENIOR_OCC role holder.
Step 04 / 06

Senior OCC approves —
decision executes

The Senior OCC reviews the decision record — aircraft, flight scope, cost — and approves. The DEC transitions to READY. Execution is now permitted.

On execution, the engine writes a field-level mutation log: exactly which flight, which field, from what value, to what value, by whom, at what time. This record is permanent.

Approved by
Senior OCC Controller
DEC status
AWAITING_APPROVAL → READY → EXECUTED
Execution gate
_assertReady() — hard gate, cannot be bypassed
Mutation recorded
aircraft: "GBC-737-02" → "GBC-737-04"
Execution Log · EXEC-001
EXECUTED
Exec IDEXEC-001
DecisionDEC-001
ApprovalAPR-001
Approved bySenior OCC Controller
Executed at2026-05-28T14:26:41Z
Executed bySenior OCC Controller
// Field-level mutation record
flight: "OTP001-AOG01-GBC411"
field: "aircraft"
from: "GBC-737-02"
to: "GBC-737-04"
action: "AIRCRAFT_SWAP"
reason: "AOG-01: hydraulic failure KMIA"
hash: sha256·2f8a4c1d...
Step 05 / 06

State propagates
across the OCC

The Propagation Engine fires 10 ms after execution and runs all registered reconcilers in one pass. Flight Watch, Readiness, Alert state, FDP Projector, and the OPS Timeline all reflect the updated aircraft assignment automatically.

The AOG-01 issue is resolved from the queue. Readiness re-evaluates GBC411. The impact marker is cleared from GBC-737-02's scope.

Reconcilers fired
SWAP, READINESS, ALERTS, TIMELINE, FLIGHTWATCH
Events dispatched
gbc:decisionExecutedgbc:alertsReconciledgbc:timelineRefreshRequested
Readiness state
GBC411 impact marker cleared · re-evaluation triggered
Alert resolution
AOG alerts for GBC-737-02 scope resolved
Post-Execution State
Resolved
NETWORK STATUS: AMBER · AOG RESOLVED · FDP RISK REMAINING
AOG-01 · GBC-737-02 · KMIA
No.2 Hydraulic System Failure
GBC411 reassigned to GBC-737-04
RESOLVED
✓ GBC411 aircraft updated · GBC-737-04 · Readiness re-evaluated · Alerts reconciled
FDP-01 · CM001 · GBC-737-01
FDP Breach Projected — 13h30m
GBC103 MYNN→MKJP · Active · T–40 min
HIGH T–40 min
Step 06 / 06

Full decision in
under 4 minutes

From AOG declaration to confirmed swap: detection, option scoring, approval routing, execution, and state propagation — all inside a single operational loop. Every action is timestamped, role-attributed, and recorded in the immutable audit log.

The controller's next task is already visible in the queue: the FDP breach on CM001 still requires resolution.

T+0:00
AOG declared — queue issue created automatically
T+0:45
Recovery options scored and displayed
T+1:30
SWAP selected — APR-001 created, routed to Senior OCC
T+2:55
APR-001 approved — DEC-001 transitions to READY
T+3:50
EXEC-001 written — GBC411 on GBC-737-04 · propagation complete
Decision Timeline · AOG-01
14:22:00Z
AOG Declared · GBC-737-02 · KMIA
Issue created · severity CRITICAL · T–65 min urgency
14:22:45Z
Recovery Options Generated
SWAP (FEASIBLE), DELAY (FDP RISK), CANCEL (FEASIBLE)
14:23:30Z
DEC-001 Created · AIRCRAFT_SWAP Selected
APR-001 routed to SENIOR_OCC · Execution blocked
14:25:55Z
APR-001 Approved · Senior OCC Controller
DEC-001 → READY · Execution gate open
14:26:41Z
EXEC-001 Written · GBC411 → GBC-737-04
Propagation complete · AOG-01 resolved · T–61 min remaining
sha256: 2f8a4c1d9e3b7a0f6c2d8e4b1a9f3c7d…
Passenger Rights Awareness

EU261 triage runs
in parallel with IRROPS

Every disruption touching a passenger-carrying flight generates an EU261 regulatory exposure case automatically. The OCC does not need to trigger it manually.

EU261 Risk Board 1 Active Case
EU261-2026-0041 REVIEW REQUIRED
TriggerCANCELLATION
FlightGBC200 · PAX COMBI
Cause codeTECH-ROUTINE
Eligible pax47
Art. 7 band€400 / pax (short-haul)
Max exposure€18,800 (estimate)
Duty of careChecklist active · 3 items open
⚠ ADVISORY ONLY — ESTIMATE. This figure is a triage calculation for OCC awareness. It is not a confirmed liability. Claim resolution, passenger communication, and finance posting are out of scope for the current platform version. Human review is required before any external action.

What the EU261 engine does

  • Detects disruption events across 8 trigger types (cancellation, delay, denied boarding…)
  • Classifies cause using 13 standardised codes (WX, ATC, TECH-HIDDEN, TECH-ROUTINE…)
  • Computes EU Art. 7 compensation band (€250 / €400 / €600) based on distance and delay threshold
  • Assigns a triage state: DETECTED → REVIEW_REQUIRED → DUTY_OF_CARE_ACTIVE → HUMAN_DECISION
  • Maintains hash-chained, tamper-evident audit log for every state transition
  • Hard-excludes freight-only (FRT) operations — no false positives on cargo flights

Advisory scope note

EU261 advisory exposure awareness — implemented. Passenger-impact triage, eligibility screening, exposure estimate and audit trail are included.

Formal claim resolution, passenger communications, GDS rebooking and finance posting are outside this demo scope. The EU261 engine gives the OCC early-warning awareness — human review and downstream action remain with the operational team.

Governance & Audit

Every decision is
immutable and traceable

The audit log uses SHA-256 hash chaining. Every record references the hash of the previous entry. Any tampering breaks the chain and is detectable. Human-gated transitions cannot be skipped — the state machine enforces them in code, not policy.

🔐

SHA-256 Hash Chain

Every audit log entry carries the SHA-256 hash of the previous entry. The chain is verifiable independently. Tampering with any entry invalidates all subsequent hashes.

🔒

Human-gated transitions

State machine enforced in engine code. REVIEW_REQUIRED → DUTY_OF_CARE_ACTIVE requires actor_kind = 'USER'. An API call with the wrong actor is rejected — no bypass path exists.

📝

Role-stamped approvals

Every DEC and APR record carries approvedBy, approvedAt, and approvalReason — immutable after write. The execution record inherits the approver's identity.

Demo Scope

What this
IAGi demo shows

This IAGi demo shows how Verum's IRROPS module supports operational disruption management inside an integrated airline operations environment.

The demo demonstrates:

  • AOG detection and prioritised decision queue
  • Recovery option ranking for SWAP, DELAY and CANCEL scenarios
  • Human approval workflow before operational execution
  • Execution tracking and field-level audit trail
  • OCC propagation into operational state
  • FDP forward-risk awareness
  • Readiness and alert re-evaluation
  • EU261 advisory exposure awareness for passenger-impact scenarios

Demo environment

This is a read-only demo environment using simulated / anonymised operational data. It is designed to demonstrate the workflow, control logic and audit discipline of Verum without connecting to live airline systems.

Scope note

EU261 advisory exposure awareness — implemented. Passenger-impact triage, eligibility screening, exposure estimate and audit trail are included in this demo.

Formal claim resolution, passenger communications, GDS rebooking and finance posting are outside this demo scope.

Verum is presented as a working operational prototype / beta. This platform is designed for real airline operations and is engineered for production extension.

Value Proposition · IAGi

What Verum delivers
to an airline partner

Verum is not a notification dashboard. It is a decision engine that integrates regulatory logic, fleet state, crew legality, and governance into a single operational loop.

Speed without loss of control
Decision options are machine-ranked and pre-validated. Human authority is preserved — the controller selects and the Senior OCC approves. Automation accelerates; it does not replace judgement.
🔬
Aviation-depth logic
Designed around configurable multi-AOC regulatory logic. Boeing 737 MEL category intervals. IATA DGR 64th edition class validation. IATA RP-1600 standard weights. Real operational constants — not approximations.
📊
Regulatory readiness built in
EU261 exposure is surfaced before the regulator asks. The audit log is hash-chained and tamper-evident. Every decision has a documented chain of custody from detection to execution.
🏗
Built to extend
Modular engine architecture. Each engine (Recovery, Approval, Execution, EU261, W&B, Cargo, MEL) is independently testable and replaceable. Backend persistence and multi-user support are engineered next.
🛡
Honest about boundaries
The platform does not claim capabilities it does not have. Ferry execution, multi-user state, and passenger claim resolution are documented on the roadmap — not presented as working features.
🤝
Partner-ready prototype
The OCC decision loop works end-to-end today — detect, score, approve, execute, propagate. What a partner brings is production infrastructure, fleet data, and the regulatory context to take it to certification.
Platform contact
GBC AIR TECHNICAL SERVICES LTD
David Barma
dbarma@gbc-air.com
verum-aviation.com gbc-air-tech-services.com linkedin.com/company/gbc-air-technical
This presentation covers confirmed capabilities only.
Live system demonstration available on request.