1. Pilot Overview
What is included
- Dedicated Enclave-tier tenant with 365-day anchor retention
- SDK integration support for one AI system (Python or TypeScript, any provider)
- Three structured working sessions (remote, 60 minutes each):
- Kickoff: scope alignment, environment provisioning, integration planning
- Mid-point: evidence review, procedure coverage assessment, issue resolution
- Findings: final posture review, export walkthrough, conversion discussion
- Auditor portal access with real witness evidence from your AI system
- Compliance Passport export (HTML + signed JSON)
- OSCAL Assessment Results export validated against NIST oscal-cli
- Regulatory conformity checklist with framework-specific evidence mapping
What is not included
- Custom application code, model development, or bespoke integrations
- On-site visits or in-person sessions
- Integration of more than one AI system
- Production SLA, 24/7 support, or documentation drafting
- Submission of regulatory filings on behalf of the client
The pilot uses the published SWT3 SDK and Axiom platform without modification. If requirements arise that the SDK does not address, they are documented as findings and scoped separately.
Binding terms: The full Pilot Evaluation Agreement covers fees, IP, confidentiality, data handling, and termination provisions.
2. Prerequisites
What You Need
- An AI system endpoint (OpenAI, Anthropic, AWS Bedrock, vLLM, Ollama, or any OpenAI-compatible API)
- Python 3.9 or later, or Node.js 18 or later
- Network access to
sovereign.tenova.ioon port 443
What TeNova Provides
- Enclave-tier tenant ID (in your welcome email)
- API key (shown once at signup -- save it immediately)
- Calendar invites for three scheduled working sessions
3. Self-Serve Setup
Steps 1 through 6 require no TeNova assistance. Total setup time: approximately 15 minutes.
Verify Your Account
- Check your email for the verification link and click to confirm.
- Sign in at sovereign.tenova.io/login.
- Confirm your tenant ID appears in the dashboard header.
Install the SDK
pip install swt3-ai
Verify:
python -c "import swt3_ai; print(swt3_ai.__version__)"
npm install @tenova/swt3-ai
Verify:
node -e "console.log(require('@tenova/swt3-ai').version)"
Choose Your Clearing Level
| Level | Name | What Leaves Your Infrastructure | Choose This If |
|---|---|---|---|
| 0 | Analytics | Hashes, factors, model name, provider | Internal analytics, no regulatory constraint |
| 1 | Standard | Hashes, factors, model name | Most production applications (RECOMMENDED) |
| 2 | Sensitive | Hashes and factors only | Healthcare, legal, PII-adjacent workloads |
| 3 | Classified | Numeric factors only, model name hashed | Defense, classified, air-gapped environments |
Wrap Your AI Client
# OpenAI + Python from swt3_ai import Witness from openai import OpenAI # --- Add these 3 lines --- witness = Witness( endpoint="https://sovereign.tenova.io", api_key="YOUR_API_KEY", tenant_id="YOUR_TENANT_ID", clearing_level=1, ) client = witness.wrap(OpenAI()) # --- Your existing code below does not change --- response = client.chat.completions.create( model="gpt-4o", messages=[{"role": "user", "content": "Summarize this contract"}], )
# Anthropic + Python from swt3_ai import Witness from anthropic import Anthropic witness = Witness( endpoint="https://sovereign.tenova.io", api_key="YOUR_API_KEY", tenant_id="YOUR_TENANT_ID", clearing_level=1, ) client = witness.wrap(Anthropic()) response = client.messages.create( model="claude-sonnet-4-20250514", max_tokens=1024, messages=[{"role": "user", "content": "Summarize this contract"}], )
// OpenAI + TypeScript import { Witness } from '@tenova/swt3-ai'; import OpenAI from 'openai'; const witness = new Witness({ endpoint: 'https://sovereign.tenova.io', apiKey: 'YOUR_API_KEY', tenantId: 'YOUR_TENANT_ID', clearingLevel: 1, }); const client = witness.wrap(new OpenAI()); const response = await client.chat.completions.create({ model: 'gpt-4o', messages: [{ role: 'user', content: 'Summarize this contract' }], });
# vLLM or Ollama (OpenAI-compatible) from swt3_ai import Witness from openai import OpenAI witness = Witness( endpoint="https://sovereign.tenova.io", api_key="YOUR_API_KEY", tenant_id="YOUR_TENANT_ID", clearing_level=1, ) # vLLM client = witness.wrap(OpenAI(base_url="http://localhost:8000/v1")) # Ollama client = witness.wrap(OpenAI(base_url="http://localhost:11434/v1"))
// Vercel AI SDK import { Witness } from '@tenova/swt3-ai'; import { openai } from '@ai-sdk/openai'; import { streamText } from 'ai'; const witness = new Witness({ endpoint: 'https://sovereign.tenova.io', apiKey: 'YOUR_API_KEY', tenantId: 'YOUR_TENANT_ID', clearingLevel: 1, }); const model = witness.wrapModel(openai('gpt-4o')); const result = await streamText({ model, prompt: 'Summarize this contract', });
Run Your First Inference
Make one API call through the wrapped client. Open your dashboard at sovereign.tenova.io and navigate to AI Witness. Your first anchor should appear within 30 seconds.
Verify Your First Anchor
- Navigate to sovereign.tenova.io/verify.
- Copy the SWT3 anchor from the AI Witness page (starts with
SWT3-). - Paste and click Verify.
- You should see VERIFIED with the fingerprint decomposition.
4. Dashboard Walkthrough
| Page | What It Shows |
|---|---|
| Command | Sovereign Score, drift monitor, overall compliance posture |
| Controls | Full control catalog with family grouping and verdict filters |
| Compliance Ledger | Chronological witness record with type, verdict, and family filters |
| Drift Monitor | CA-7 continuous monitoring with severity classification |
| AI Witness | KPI cards, per-model table, amnesia indicator, anchor history |
| Exports | OSCAL, Compliance Passport, conformity checklist, CSV export |
| Verify | Independent anchor verification (also available publicly) |
| Settings | API keys, account management, Auditor Share Links |
5. Pilot Timeline
Complete Steps 1 through 6. First inferences witnessed and verified. Kickoff session with TeNova: tenant walkthrough, clearing level confirmation, initial anchor review.
Run production-representative workload through the wrapped client. Accumulate witness anchors across your inference patterns. Mid-point session: auditor portal walkthrough, evidence review, clearing level tuning.
Generate export packages (Compliance Passport, OSCAL AR, conformity checklist). Review evidence quality with your assessment team. Findings session: gap identification, export walkthrough, transition discussion.
6. Troubleshooting
No anchors appearing
- Verify your API key starts with
axm_and contains no extra whitespace. - Test connectivity:
curl -s https://sovereign.tenova.io/api/v1/healthshould return{"status":"healthy",...} - Confirm your tenant ID matches the one shown in Settings.
- Check that your AI client is using the wrapped client, not the original.
API key rejected (401)
- Verify the key was copied completely from the signup screen.
- Check for leading or trailing spaces.
- If the key is lost, generate a new one at Settings > API Keys.
Connection timeout
- Verify your firewall allows outbound HTTPS to
sovereign.tenova.io(port 443). - If behind a corporate proxy, configure
HTTPS_PROXYin your environment. - The SDK retries automatically. Check your application logs for retry messages.
Still stuck? Email engineering@tenovaai.com with your tenant ID and a description of the issue.
7. Frequently Asked Questions
Pilot Logistics
How long is the pilot?
Is the fee refundable?
Who should attend the working sessions?
Can we evaluate more than one AI system?
What if we need more than 10 days?
Do we need to sign a separate NDA?
Technical
What latency does the SDK add?
Does TeNova see our prompts or responses?
Which AI providers are supported?
Does the SDK work offline?
What Python or Node versions are required?
Does the SDK support streaming responses?
stream=True, Vercel AI SDK streamText).Compliance and Legal
Who owns the witness anchors?
Is this GDPR compliant?
What compliance frameworks are supported?
Is TeNova a security product?
Is the SWT3 protocol proprietary?
Can our auditor verify anchors independently?
What happens if TeNova ceases operations?
Integration
Does SWT3 export to SIEM tools?
Does SWT3 work with multi-agent systems?
Is there an MCP server?
@tenova/swt3-mcp provides Model Context Protocol integration. Install from npm or the MCP registry (io.tenova/swt3-witness).Post-Pilot
What happens to our data after the pilot ends?
What are the subscription options?
Is the pilot fee credited toward a subscription?
Can I keep my tenant ID and API keys?
8. Next Steps
- Pilot Evaluation Agreement -- binding terms, IP, confidentiality, and signatures
- AI Witness Quickstart -- condensed SDK setup for developers
- Full SDK Documentation -- Python and TypeScript reference
- UCT Registry -- browse all 80 AI procedures
- Anchor Verifier -- independent verification, no login required