Cross-Border Systemic Risk Monitor

Systemic risk you can reproduce, audit, and defend.

CBSRM reproduces the canonical systemic-risk and financial-stability measures used by central banks and supervisors — in modern, typed, fully-tested Python — under one Protocol, one SHA-256 audit chain, and one reproducibility guarantee. Built around SR 26-2 model-risk-management principles.

Apache-2.0 open methodology· 1,071 passing tests· Deterministic & reproducible· 5 jurisdictions · 5 languages

Why CBSRM exists

Most systemic-risk numbers can't survive a model review.

Academic code lives in R, Stata, and MATLAB; commercial systems are black boxes; reference numbers come from vendors that don't agree. None of that clears a model-risk function. CBSRM is methodology-first.

The status quo

Fragmented implementations, undocumented assumptions, vendor numbers you can't reproduce, and no lineage from input to published figure. A reviewer asks "why is this number what it is?" — and no one can say.

CBSRM

Every number is reproducible from source. Every methodology stage carries its own version. Every lifecycle event is written to a SHA-256 audit chain. One Protocol covers stress indicators and risk-pricing measures alike — adding a method is one file plus one registration line.

The methodology

Five systemic-risk lenses, one data spine.

One auditable pipeline resolves into the four questions a financial-stability desk actually asks — how stressed is the system, which firms carry the tail, how does shock propagate, and what regime are we in.

01 · SYSTEM STRESS

Composite stress indices

CISS-family stress (US / Euro-Area / UK), STLFSI4, and the OFR Financial Stress Index — quadratic-form aggregation that amplifies in correlated stress.

Holló · Kremer · Lo Duca (2012)
02 · FIRM TAIL-CONTRIBUTION

SRISK & LRMES

Expected capital shortfall of a firm conditional on a systemic market decline — who would need recapitalising in a crisis, and by how much.

Brownlees · Engle (2017)
03 · TAIL SPILLOVER

ΔCoVaR & MES

The system's value-at-risk conditional on an institution in distress, and each firm's marginal expected shortfall — tail dependence, not average correlation.

Adrian · Brunnermeier (2016) · Acharya et al. (2017)
04 · NETWORK CONTAGION

DebtRank

A pure-numpy DebtRank engine over the interbank exposure network — distress that propagates once through the graph, ranking systemic importance by impact.

Battiston et al. (2012)
05 · MACRO REGIME

4-state macro composite

Yield-curve recession probit, the Sahm rule, FFR/USD regimes, and a four-state composite that classifies the prevailing macro-financial regime.

Estrella · Mishkin (1996) · Sahm (2019)
+ · CONNECTEDNESS

Diebold-Yilmaz spillover

Generalized FEVD spillover index measuring cross-asset connectedness — how shocks in one sector transmit to the rest of the system.

Diebold · Yilmaz (2012)

The differentiator

A governed pipeline your model-risk reviewers can verify.

CBSRM's L3 Composer assembles every stage into one content-addressed PipelineRecord — the difference between a quant toolbox and a model-governance system.

  • One governed pipeline. A single record spans every stage with a uniform date convention, a uniform identifier & version contract, and explicit input → output lineage.
  • #Content-addressed lineage. Each stage carries a SHA-256 content hash; a methodology change produces a different hash a diff catches immediately. "Did the model change?" becomes a string comparison.
  • Tamper-evident. verify_pipeline_record() re-derives every hash from the record's own data — proof the published figure was not altered after composition.
  • SHA-256 audit chain. Every lifecycle event — requested, fetched, computed, served — is written to a hash-linked ledger you can replay and verify end to end.
  • §SR 26-2 aligned. Purpose & use, conceptual soundness, ongoing monitoring, and outcomes analysis map directly onto the architecture — the validation conversation, pre-answered.
cbsrm.wavervanir.com · governed pipeline
# Compose one auditable research record for the 2008 crisis window
GET /api/pipeline/2008Q4

{
  "pipeline_id": "crisis-research-flow",
  "window_id":  "2008Q4",
  "stages": [ /* 7 stages, each version-pinned */
    { "stage_id": "score_event",
      "identifier": "crisis-research-flow:2008Q4:score_event:1.0.0",
      "output_sha256": "9f12959…" },
    … debt_rank · phase_classifier · crisis_dossier · report_renderer
  ],
  "hashes": { "output_sha256": "5ee94755…" }   ← the join key
}

# Prove nothing was tampered with after composition
POST /api/pipeline/verify
→ { "ok": true, "mismatches": [] }

See it now

A self-contained, audit-traceable risk terminal.

Five systemic-risk lenses plus the model-governance audit chain — every number computed from the public CBSRM classes, rendered offline, with zero external dependencies. No login, no data leaves the page.

Open the live Risk Terminal → View the source on GitHub
1,071
Passing tests
5
Jurisdictions
12
Whitepaper sections
Apache-2.0
Open methodology

Who it's for

Built for the desks that have to defend the number.

The same code runs on a researcher's laptop and behind a production service — from a single FastAPI deployment to an air-gapped institutional install.

Risk & prop desks

Hedge funds and proprietary trading firms pricing systemic and tail risk with numbers they can reproduce and explain.

Central banks

Financial-stability and research teams reproducing CISS, SRISK, and CoVaR with point-in-time discipline.

Supervisory tech

SupTech and RegTech vendors embedding auditable, citable systemic-risk measurement into their stack.

Family offices

Allocators who want an independent, transparent read on system stress and contagion exposure.

Academic research

Researchers needing a reproducible, citable reference implementation for SSRN-grade figures.

Engagement

Open methodology. Institutional delivery.

The CBSRM methodology is Apache-2.0 and free to read, run, and cite. What institutions engage us for is delivery: hosted infrastructure, jurisdiction extensions, validation packs, and support.

Open

Research

Free · Apache-2.0
For researchers & evaluation
  • Full public methodology & source
  • CLI, Python API, and the Risk Terminal
  • Reproducible crisis dossiers (2008Q4 / 2020Q1 / 2023Q1)
  • 12-section methodology whitepaper
Get the library
Most institutions

Desk

from $— / yr
For risk desks & research teams
  • Hosted, monitored read-only API & dashboards
  • Live jurisdiction data feeds & refresh
  • Governed PipelineRecord + audit-chain access
  • Onboarding & priority support
Request a quote
Regulated

Institution

Custom
For banks, central banks & suptech
  • On-prem / VPC / air-gapped deployment
  • Custom jurisdictions & instruments
  • SR 26-2 model-validation pack & documentation
  • SLA, security review, and integration support
Talk to us

Request a briefing

See CBSRM run on your jurisdiction.

A 30-minute walkthrough of the five lenses, the audit chain, and the governed pipeline — with a live, reproducible record for the window of your choice.