25+ years of board-level risk. Founder & Managing Director of Axiom Puzzleworks.
Andrew Moore spent 25+ years carrying board-reported technology, cyber, and cryptography risk at Royal London, HSBC, and Barclays. Then founded Axiom Puzzleworks to build and ship a governed AI system himself, not just advise on one. Axiom Verity is where that experience becomes advisory work.
Two words. One deterministic loop.
A starting proposition accepted as true without proof, used as the foundation for a logical system.
The input. The rule.An unassailable, real-world truth: not assumed, but proven; the actual state of things as they are.
The output. The proof.The two words aren't a redundancy: they describe a loop, not a synonym.
Axiom is the input: the deterministic controls, constraint solvers, and cryptographic validation gates engineered at Axiom Puzzleworks. Verity is the output: the audited, provable outcome those controls guarantee.
Sound axioms, rigorously applied, produce verity. That's not a coincidence of language: it's the operating model. AI governance here isn't a feeling. It's a proof.
Twenty-five years across regulated financial services.
- Founder & Managing Director · Axiom Puzzleworks (2025 – present)
- Director, Technology & Resilience Risk · Royal London Group (2023 – 2025)
- Global Head of Cryptography · HSBC Bank (2019 – 2021)
- Director, Information Integrity & Protection · Barclays Bank (2012 – 2019)
- Head of Operational Rigour · Barclays Bank (earlier career)
- IT Infrastructure Audit Manager · Barclays Bank (earlier career)
- IT Assurance Consultant · Ernst & Young (earlier career)
- Chartered Accountant · Hurst & Company (earlier career)
Certifications and professional standing.
- CIPP/E
- ISO/IEC 42001 Senior Lead Implementer
- AAISM (Advanced in AI Security Management)
- AAIR (Advanced in AI Risk)
- CRISC
- CGEIT
- CISA
- ISSMP
- CCSP
- CISSP
- ACA
BSc Computation, University of Manchester.
2:1 Honours.
Governed AI, running in production.
Axiom Puzzleworks is a live testbed for governed AI: an AI-integrated logic puzzle platform that combines generative model outputs with deterministic constraint solving, schema validation, automated evaluation, uniqueness testing, and human approval gates before anything ships.
Deterministic control of probabilistic systems
Constraint solving and schema validation gate every generated output before release, the same discipline advised to clients under ISO/IEC 42001 and the EU AI Act, running in production.
Traceability and versioning
Model selection, versioning, and production telemetry are logged for every release, not reconstructed after the fact.
Human-in-the-loop by design
Approval gates sit between generation and publication as a structural part of the pipeline, not a policy document describing intent.
Public code, not just this description of it: see the Labs showcase for working demonstrations, each with governance notes connecting it back to the Risk & Control Library.
This experience is available as advisory work.
The same accountability and systems-architecture experience above is available for advisory conversations.