1. Pilot Overview

$10,000 USD
10 working days. One AI system. Three structured sessions. No custom code.

What is included

  1. Dedicated Enclave-tier tenant with 365-day anchor retention
  2. SDK integration support for one AI system (Python or TypeScript, any provider)
  3. Three structured working sessions (remote, 60 minutes each):
    • Kickoff: scope alignment, environment provisioning, integration planning
    • Mid-point: evidence review, procedure coverage assessment, issue resolution
    • Findings: final posture review, export walkthrough, conversion discussion
  4. Auditor portal access with real witness evidence from your AI system
  5. Compliance Passport export (HTML + signed JSON)
  6. OSCAL Assessment Results export validated against NIST oscal-cli
  7. Regulatory conformity checklist with framework-specific evidence mapping

What is not included

The pilot uses the published SWT3 SDK and Axiom platform without modification. If requirements arise that the SDK does not address, they are documented as findings and scoped separately.

Binding terms: The full Pilot Evaluation Agreement covers fees, IP, confidentiality, data handling, and termination provisions.

2. Prerequisites

What You Need

  • An AI system endpoint (OpenAI, Anthropic, AWS Bedrock, vLLM, Ollama, or any OpenAI-compatible API)
  • Python 3.9 or later, or Node.js 18 or later
  • Network access to sovereign.tenova.io on port 443

What TeNova Provides

  • Enclave-tier tenant ID (in your welcome email)
  • API key (shown once at signup -- save it immediately)
  • Calendar invites for three scheduled working sessions

3. Self-Serve Setup

Steps 1 through 6 require no TeNova assistance. Total setup time: approximately 15 minutes.

1

Verify Your Account

5 minutes
  1. Check your email for the verification link and click to confirm.
  2. Sign in at sovereign.tenova.io/login.
  3. Confirm your tenant ID appears in the dashboard header.
2

Install the SDK

2 minutes
Python
TypeScript
pip install swt3-ai

Verify:

python -c "import swt3_ai; print(swt3_ai.__version__)"
npm install @tenova/swt3-ai

Verify:

node -e "console.log(require('@tenova/swt3-ai').version)"
Zero external dependencies. The SDK uses only standard library cryptography.
3

Choose Your Clearing Level

Decision point
LevelNameWhat Leaves Your InfrastructureChoose This If
0AnalyticsHashes, factors, model name, providerInternal analytics, no regulatory constraint
1StandardHashes, factors, model nameMost production applications (RECOMMENDED)
2SensitiveHashes and factors onlyHealthcare, legal, PII-adjacent workloads
3ClassifiedNumeric factors only, model name hashedDefense, classified, air-gapped environments
We recommend Level 1 for most pilots. At Level 1 and above, raw prompts and responses never leave your infrastructure.
4

Wrap Your AI Client

5 minutes
OpenAI (Python)
Anthropic (Python)
OpenAI (TypeScript)
vLLM / Ollama
Vercel AI SDK
# OpenAI + Python
from swt3_ai import Witness
from openai import OpenAI

# --- Add these 3 lines ---
witness = Witness(
    endpoint="https://sovereign.tenova.io",
    api_key="YOUR_API_KEY",
    tenant_id="YOUR_TENANT_ID",
    clearing_level=1,
)
client = witness.wrap(OpenAI())
# --- Your existing code below does not change ---

response = client.chat.completions.create(
    model="gpt-4o",
    messages=[{"role": "user", "content": "Summarize this contract"}],
)
# Anthropic + Python
from swt3_ai import Witness
from anthropic import Anthropic

witness = Witness(
    endpoint="https://sovereign.tenova.io",
    api_key="YOUR_API_KEY",
    tenant_id="YOUR_TENANT_ID",
    clearing_level=1,
)
client = witness.wrap(Anthropic())

response = client.messages.create(
    model="claude-sonnet-4-20250514",
    max_tokens=1024,
    messages=[{"role": "user", "content": "Summarize this contract"}],
)
// OpenAI + TypeScript
import { Witness } from '@tenova/swt3-ai';
import OpenAI from 'openai';

const witness = new Witness({
  endpoint: 'https://sovereign.tenova.io',
  apiKey: 'YOUR_API_KEY',
  tenantId: 'YOUR_TENANT_ID',
  clearingLevel: 1,
});
const client = witness.wrap(new OpenAI());

const response = await client.chat.completions.create({
  model: 'gpt-4o',
  messages: [{ role: 'user', content: 'Summarize this contract' }],
});
# vLLM or Ollama (OpenAI-compatible)
from swt3_ai import Witness
from openai import OpenAI

witness = Witness(
    endpoint="https://sovereign.tenova.io",
    api_key="YOUR_API_KEY",
    tenant_id="YOUR_TENANT_ID",
    clearing_level=1,
)

# vLLM
client = witness.wrap(OpenAI(base_url="http://localhost:8000/v1"))

# Ollama
client = witness.wrap(OpenAI(base_url="http://localhost:11434/v1"))
// Vercel AI SDK
import { Witness } from '@tenova/swt3-ai';
import { openai } from '@ai-sdk/openai';
import { streamText } from 'ai';

const witness = new Witness({
  endpoint: 'https://sovereign.tenova.io',
  apiKey: 'YOUR_API_KEY',
  tenantId: 'YOUR_TENANT_ID',
  clearingLevel: 1,
});
const model = witness.wrapModel(openai('gpt-4o'));

const result = await streamText({
  model,
  prompt: 'Summarize this contract',
});
Your existing application code does not change. The witness observes silently in the background.
5

Run Your First Inference

1 minute

Make one API call through the wrapped client. Open your dashboard at sovereign.tenova.io and navigate to AI Witness. Your first anchor should appear within 30 seconds.

6

Verify Your First Anchor

2 minutes
  1. Navigate to sovereign.tenova.io/verify.
  2. Copy the SWT3 anchor from the AI Witness page (starts with SWT3-).
  3. Paste and click Verify.
  4. You should see VERIFIED with the fingerprint decomposition.
Your auditor can verify this same anchor independently at any time, with no login required.

4. Dashboard Walkthrough

PageWhat It Shows
CommandSovereign Score, drift monitor, overall compliance posture
ControlsFull control catalog with family grouping and verdict filters
Compliance LedgerChronological witness record with type, verdict, and family filters
Drift MonitorCA-7 continuous monitoring with severity classification
AI WitnessKPI cards, per-model table, amnesia indicator, anchor history
ExportsOSCAL, Compliance Passport, conformity checklist, CSV export
VerifyIndependent anchor verification (also available publicly)
SettingsAPI keys, account management, Auditor Share Links

5. Pilot Timeline

Phase 1 -- Days 1-3: Setup
Complete Steps 1 through 6. First inferences witnessed and verified. Kickoff session with TeNova: tenant walkthrough, clearing level confirmation, initial anchor review.
Phase 2 -- Days 4-7: Evidence Generation
Run production-representative workload through the wrapped client. Accumulate witness anchors across your inference patterns. Mid-point session: auditor portal walkthrough, evidence review, clearing level tuning.
Phase 3 -- Days 8-10: Review
Generate export packages (Compliance Passport, OSCAL AR, conformity checklist). Review evidence quality with your assessment team. Findings session: gap identification, export walkthrough, transition discussion.

6. Troubleshooting

No anchors appearing

API key rejected (401)

Connection timeout

Still stuck? Email engineering@tenovaai.com with your tenant ID and a description of the issue.

7. Frequently Asked Questions

Pilot Logistics

How long is the pilot?
10 working days from the date of the kickoff session.
Is the fee refundable?
If you terminate before the mid-point session, you receive a pro-rated refund. After the mid-point session, no refund is due.
Who should attend the working sessions?
Your technical lead and compliance stakeholders. TeNova provides one engineer. All sessions are remote.
Can we evaluate more than one AI system?
The pilot covers one system. Additional systems require an Enclave subscription ($9,500/month) or a separate pilot engagement.
What if we need more than 10 days?
Extensions are available by mutual agreement at $1,000 per additional working day.
Do we need to sign a separate NDA?
No. The Pilot Agreement includes mutual confidentiality provisions covering a 2-year term.

Technical

What latency does the SDK add?
Near zero. Witnessing happens asynchronously after the inference returns. Your application is never blocked.
Does TeNova see our prompts or responses?
No. At Clearing Level 1 and above, raw prompts and responses never leave your infrastructure. Only cryptographic hashes and numeric factors are transmitted.
Which AI providers are supported?
OpenAI, Anthropic, AWS Bedrock, vLLM, Ollama, LiteLLM (100+ providers), Vercel AI SDK, NVIDIA Dynamo, Cerebras, Google ADK, and any OpenAI-compatible endpoint.
Does the SDK work offline?
The SDK buffers anchors locally and flushes when connectivity is restored. For permanently air-gapped environments, contact us about the Sovereign tier.
What Python or Node versions are required?
Python 3.9 or later, or Node.js 18 or later.
Does the SDK support streaming responses?
Yes. Both Python and TypeScript SDKs handle streaming transparently (OpenAI stream=True, Vercel AI SDK streamText).

Compliance and Legal

Who owns the witness anchors?
You own all compliance evidence, exports, and anchors generated during the pilot. TeNova owns the protocol and platform.
Is this GDPR compliant?
Yes. At Clearing Level 1 and above, no personal data is processed by TeNova beyond account credentials.
What compliance frameworks are supported?
NIST 800-53, CMMC, NIST AI RMF, EU AI Act, FedRAMP, SR 11-7, NIST 800-171, and 6 additional frameworks. 16 total.
Is TeNova a security product?
No. TeNova is an independent witness. It creates attestation records, not enforcement policies. Think notary, not bodyguard.
Is the SWT3 protocol proprietary?
The protocol specification is open source under Apache 2.0. The Axiom platform and enterprise features are proprietary. Patent pending.
Can our auditor verify anchors independently?
Yes. The public verification page requires no login. Auditors can verify any anchor using only the token string and SHA-256.
What happens if TeNova ceases operations?
All witness anchors are independently verifiable using the open-source SWT3 protocol. Your data remains exportable via JSON, CSV, and OSCAL formats. The Pilot Agreement guarantees 90 days of export access in the event of service discontinuation.

Integration

Does SWT3 export to SIEM tools?
Yes. The SDK includes an OpenTelemetry exporter for Jaeger, Grafana, and Datadog. The platform also supports HMAC-signed regulatory webhooks to any HTTP endpoint.
Does SWT3 work with multi-agent systems?
Yes. Each agent can have its own identity, signing key, and tool/access witnessing. The AI-CHAIN.1 procedure tracks multi-agent handoffs with cycle detection.
Is there an MCP server?
Yes. @tenova/swt3-mcp provides Model Context Protocol integration. Install from npm or the MCP registry (io.tenova/swt3-witness).

Post-Pilot

What happens to our data after the pilot ends?
Your Enclave-tier tenant remains active with 365-day retention. Data is not deleted unless you request it.
What are the subscription options?
Pro ($499/month, 90-day retention), Enclave ($9,500/month, 365-day retention), or Sovereign ($125,000 for a full ATO sprint). Annual discounts available.
Is the pilot fee credited toward a subscription?
No. The pilot fee is a standalone engagement fee.
Can I keep my tenant ID and API keys?
Yes. Your tenant, anchors, and configuration carry forward to any paid tier with no migration required.

8. Next Steps