A guided introduction for assessors encountering SWT3 witness anchor evidence for the first time.
SWT3 witness anchors prove that specific operational controls were active at a specific point in time. They do not replace the assessor's independent judgment, professional expertise, or regulatory authority. Assessors must verify that anchored evidence is sufficient, appropriate, and relevant to the specific assessment context. Each regulatory framework retains its own assessment authority, methodology, and determination standards.
This guide provides a structured onboarding path for any assessor encountering SWT3 cryptographic evidence for the first time. Two assessment tracks are supported:
For Notified Bodies and conformity assessment bodies performing assessments under the EU AI Act (Article 43) or other regulatory frameworks requiring third-party evaluation.
For C3PAOs, auditors, ISSMs, and internal compliance teams performing assessments under NIST 800-53, CMMC, AI RMF, or other compliance frameworks.
Key guide: C3PAO Assessment Guide
SWT3 (Sovereign Witness Traceability) is a cryptographic witness protocol. It generates deterministic, independently verifiable attestation records -- called witness anchors -- that encode observed operational facts about AI systems.
| What SWT3 Is | What SWT3 Is Not |
|---|---|
| A deterministic cryptographic attestation computed from observed facts | A log entry or assertion that could be edited after the fact |
| Independently verifiable using standard SHA-256 (no proprietary tools) | A certificate issued by a trusted authority |
| Framework-neutral (maps to EU AI Act, NIST, CMMC, and 33 other frameworks) | A compliance product tied to a single regulation |
| Evidence that controls were operational at runtime | Evidence that policies or documentation exist |
Every witness anchor encodes exactly three numeric factors that capture the observed measurement:
Example: For AI-GRD.1 (Guardrail Enforcement), factor_a=2 means 2 guardrails required, factor_b=3 means 3 guardrails were active, factor_c=0. Verdict: PASS (3 >= 2).
Clearing levels control what metadata accompanies the anchor. Higher levels remove more metadata before transmission:
| Level | Name | What Survives | Assessor Implication |
|---|---|---|---|
| 0 | Analytics | All metadata (model ID, hashes, tokens, latency, context) | Full forensic capability |
| 1 | Standard | Hashes + model ID + context (raw evidence purged) | Recommended default. Sufficient for most assessments. |
| 2 | Sensitive | Hashes + model ID only | Reduced context. Check if traceability requirements are met. |
| 3 | Classified | Factors only. Model ID hashed. | Proves a fact occurred without revealing model identity or operational details. |
Evaluating SWT3 evidence requires the following technical knowledge. No proprietary tooling, platform access, or vendor-specific training is needed.
| Competence | Level Required | Why |
|---|---|---|
| SHA-256 hash computation | Basic | Fingerprint verification requires computing a SHA-256 hash and comparing the first 12 hex characters |
| JSON document structure | Basic | Compliance passports and witness payloads are JSON documents |
| Hexadecimal notation | Familiarity | Fingerprints, hashes, and signatures are hex-encoded |
| Anchor format decomposition | Familiarity | Reading the structured fields in an anchor token string |
sha256sum, Python hashlib, online calculator, or the public verifier at sovereign.tenova.io/verify) is sufficient. No proprietary SDK or API key is required.
An anchor token contains the fingerprint but not the inputs needed to verify it. To perform verification, request the witness payload JSON from the provider. This is available via the anchor chain export (JSON), the Compliance Passport, or the platform API. The payload contains the tenant ID, procedure ID, factors, and millisecond timestamp needed for recomputation.
Given this anchor token:
And these input components (from the witness payload JSON):
| Component | Value |
|---|---|
| Tenant ID | ENCLAVE_PROD |
| Procedure ID | AI-INF.1 |
| factor_a | 1 |
| factor_b | 1 |
| factor_c | 0 |
| Timestamp (ms) | 1774800000000 |
Step 1: Construct the fingerprint input string:
Step 2: Compute SHA-256 of that string (UTF-8 encoded):
Step 3: Take the first 12 characters: 2e16e2fe92dd
Step 4: Compare to the anchor's claimed fingerprint (last segment): 2e16e2fe92dd
Result: VERIFIED. The fingerprints match. The anchor's factors, tenant, procedure, and timestamp are confirmed authentic.
For convenience, the public verifier at sovereign.tenova.io/verify provides a web interface for single and bulk anchor verification. Enter an anchor token and the verifier recomputes the fingerprint. No account required.
To verify an entire collection of anchors:
fp1:fp2:fp3:...A Compliance Passport is a signed summary of a tenant's compliance posture. It is available in three formats:
| Format | Tier | Verification |
|---|---|---|
| HTML (printable report) | Pro+ | Visual review |
| JSON (HMAC-signed) | Pro+ | Server-side HMAC verification via POST /api/v1/passport/verify |
| W3C Verifiable Credential | Enclave+ | Ed25519 signature verification, DID resolution via did:web:sovereign.tenova.io |
eddsa-jcs-2022 proof suite). The public key is in the DID document at did:web:sovereign.tenova.io. Any W3C VC verifier can validate it without contacting the issuer.
SWT3 anchor chains provide the runtime evidence layer for conformity assessments under Article 43 of the EU AI Act.
Detailed guide: EU AI Act Conformity Assessment Evidence Guide
Integration with ISO/IEC 17065: SWT3 evidence can be referenced in the assessment body's quality management system as a standardized evidence source. The deterministic verification algorithm provides a repeatable, auditable evaluation procedure.
SWT3 anchor chains map to NIST 800-53A assessment objectives and CMMC practice families through the UCT Registry crosswalk engine.
Detailed guide: C3PAO Assessment Guide
When referencing SWT3 anchors in assessment findings, use the full anchor token string as the evidence citation:
Include the following context with each citation:
When an organization shares an audit portal link with you, the portal provides interactive tools beyond what the SDK and CLI offer:
The portal also features a Guided Walkthrough for first-time users that covers the score overview, framework toggle, control matrix, lifecycle chains, and verification workflow.