Contents

1. Why Telecom AI Needs Independent Attestation 2. O-RAN Architecture and Attestation Points 3. Python SDK Quick Start for RAN AI 4. Cloud RAN on Kubernetes 5. Latency-Constrained Attestation 6. Multi-access Edge Computing (MEC) 7. Network Slicing AI Governance 8. Clearing Level Decision Matrix 9. Multi-Vendor RAN Compliance 10. Telecom AI Silicon 11. Regulatory Mapping 12. Standards-to-Procedure Mapping 13. Sample SWT3 Witness Anchors 14. Next Steps and Related Guides

Audience: Telecom infrastructure engineers, RAN platform architects, compliance teams at mobile network operators and RAN vendors, and regulatory assessors evaluating AI in critical communications infrastructure. Covers O-RAN, Cloud RAN, and traditional RAN deployments.

Fast track: Hardware attestation across your entire RAN cluster requires one Helm install and zero code changes. Inference witnessing requires one SDK call per AI decision. Local mode runs free, forever, with no API keys or accounts. Cloud mode adds independent verification and auditor access. See Section 3 for the SDK quick start or Section 4 for the Helm chart.

EU AI Act enforcement: Telecommunications networks are classified as critical infrastructure under Article 6(2), Annex III, point 2(b). AI systems used in the management and operation of critical digital infrastructure are high-risk. GPAI transparency obligations under Articles 50 and 53 are enforceable from August 2, 2026. Annex III high-risk obligations apply from December 2, 2027.

1. Why Telecom AI Needs Independent Attestation

Modern radio access networks run AI at every layer. Beamforming optimization, spectrum allocation, traffic prediction, network slicing, and anomaly detection all rely on machine learning models that make millions of decisions per second across thousands of cell sites. These decisions directly affect service quality for subscribers and, in the case of emergency call routing, human safety.

Three properties of telecom AI create unique compliance challenges:

SWT3 addresses all three. The protocol witnesses AI decisions by recording cryptographic hashes of model behavior, not the data itself. Clearing levels control what metadata is captured, and the write-ahead log pattern supports asynchronous attestation that does not block real-time inference paths.

Key principle: Hashes only. Raw inference data, subscriber identifiers, and spectrum allocation details never leave the RAN node. SWT3 witnesses the fact that an AI decision occurred, what model made it, and what operational context surrounded it. The subscriber data stays where it belongs.

2. O-RAN Architecture and Attestation Points

The O-RAN Alliance architecture disaggregates the RAN into functional components, each of which may host AI/ML functions. SWT3 attestation points map to where AI decisions are made:

ComponentAI FunctionsControl LoopSWT3 Attestation
Non-RT RICPolicy optimization, model training, A1 policy generation, network planning> 1 secondStandard witness (AI-INF.1). Full metadata capture. Clearing Level 1-2.
Near-RT RICRAN slicing, load balancing, interference management, QoS optimization, xApps10ms - 1sAsync witness via WAL. Level 0-1. Flush on configurable interval.
O-CU (Central Unit)Handover prediction, bearer management, PDCP optimization10ms - 100msAsync witness. Level 0 for real-time path. Batch replay at Level 1.
O-DU (Distributed Unit)Scheduling, beamforming, power control, HARQ optimization< 1msLevel 0 only. Numeric factors (3 integers). Post-hoc batch at Level 1.
O-RU (Radio Unit)Digital front-end optimization (limited AI currently)< 0.25msHardware attestation only (AI-HW.1). No inference witnessing at this layer.
SMO (Service Management)Lifecycle management, fault prediction, capacity planningMinutes - hoursFull witness. All clearing levels. Standard SDK integration.

Attestation Flow

O-RU                O-DU               O-CU             Near-RT RIC         Non-RT RIC / SMO
[AI-HW.1 only]  ->  [L0: WAL]      ->  [L0/L1: WAL]  ->  [L1: async]     ->  [L1-2: standard]
                     3 factors           batch replay       xApp witnesses      full SDK integration
                     ~200 bytes          enriched flush     10ms-1s loop        rApp/A1 policies
                     no network I/O      60s interval       configurable        minutes-hours cycle

The critical design point is that attestation granularity decreases as you move down the stack toward real-time processing. The O-DU operates at physical layer speeds where even microseconds of overhead affect throughput. SWT3 handles this through clearing level selection: Level 0 captures only three numeric factors and a timestamp, adding negligible overhead. Richer attestation happens asynchronously via the write-ahead log.

3. Python SDK Quick Start for RAN AI

SWT3 provides two integration patterns for RAN AI. Choose the one that matches your inference architecture.

Pattern A: Direct Witness Methods (custom inference pipelines)

For RAN AI models served via gRPC, ONNX Runtime, TensorRT, or custom REST endpoints, use the dedicated witness methods. Each method maps to a specific SWT3 procedure and is non-blocking.

from swt3_ai import Witness

witness = Witness(
    tenant_id="your-tenant-id",
    api_key="axm_YOUR_KEY",
    agent_id="near-rt-ric-xapp-beam-01",
    clearing_level=0,           # Real-time path: numeric factors only
    flush_interval=60.0         # Batch flush every 60 seconds
)

# Your existing beamforming inference (unchanged)
beam_result = beam_model.predict(cell_measurements)

# Witness the decision -- one call, non-blocking
anchor = witness.witness_hardware(
    accelerator_count=4,
    health_status=1,
    silicon_vendor="arm-neoverse",
    discovery_method="pci-fallback",
    topology="o-du-cluster"
)
print(anchor.fingerprint)  # e.g., "96b7d56c0245"

# Witness model drift against production baseline
drift_anchor = witness.witness_drift(
    metrics_evaluated=8,
    drifted_count=0,
    drift_type="performance",
    baseline_hash="sha256:a1b2c3d4",
    drift_score=0.002,
    detection_method="mse",
    threshold=0.005
)

# Witness model weights at deployment
weights_anchor = witness.witness_model_weights(
    param_count=7_000_000,
    quantization_bits=8,
    weights_hash="sha256:e4f5a6b7..."
)

Direct witness methods work with any inference framework. Your model code does not change. The witness call appends to a local buffer and returns immediately.

Pattern B: Transparent Proxy (OpenAI-compatible model servers)

For RAN AI models served via OpenAI-compatible APIs (vLLM, Triton with OpenAI frontend, or LLM-based network assistants), the wrap() method provides zero-code-change witnessing:

import openai
from swt3_ai import Witness

witness = Witness(
    tenant_id="your-tenant-id",
    api_key="axm_YOUR_KEY",
    agent_id="non-rt-ric-rapp-01",
    clearing_level=1
)

# Wrap the model server client -- every call is witnessed transparently
client = openai.OpenAI(base_url="http://ran-llm-server:8080/v1")
witnessed_client = witness.wrap(client)

# Use exactly like the original -- witnessing happens automatically
response = witnessed_client.chat.completions.create(
    model="network-advisor-v2",
    messages=[{"role": "user", "content": "capacity forecast for sector 7"}]
)

Subscriber-Aware AI (Level 2)

For AI that processes per-subscriber data (QoS optimization, location services), use Level 2 with Cross-Jurisdictional Transparency (CJT) fields:

witness_sensitive = Witness(
    tenant_id="your-tenant-id",
    api_key="axm_YOUR_KEY",
    agent_id="near-rt-ric-xapp-qos-01",
    clearing_level=2,           # Sensitive: subscriber data involved
    jurisdiction="EU",          # GDPR jurisdiction
    legal_basis="legitimate_interest",
    purpose_class="network_optimization"
)

# Your existing QoS inference (unchanged)
qos_result = qos_model.optimize(subscriber_context)

# Witness the decision with CJT metadata
anchor = witness_sensitive.witness_performance(
    metrics_evaluated=5,
    metrics_passing=5,
    benchmark_type="qos_sla",
    score=0.97,
    threshold=0.95
)

The jurisdiction, legal_basis, and purpose_class fields survive all clearing levels. They provide auditors with the legal context for subscriber data processing without exposing the data itself.

4. Cloud RAN on Kubernetes

Cloud RAN deployments run O-CU and O-DU workloads as containerized network functions on Kubernetes. The swt3-witness Helm chart deploys alongside RAN pods to provide continuous hardware and inference attestation.

Helm Installation for RAN Clusters

# Install with RAN-specific tolerations and ARM node support
# Replace taint keys with your cluster's actual RAN node taints
helm install swt3 oci://ghcr.io/tenova-labs/charts/swt3-witness \
  --set 'tolerations[0].key=ran.example.com/du' \
  --set 'tolerations[0].operator=Exists' \
  --set 'tolerations[0].effect=NoSchedule' \
  --set 'tolerations[1].key=ran.example.com/cu' \
  --set 'tolerations[1].operator=Exists' \
  --set 'tolerations[1].effect=NoSchedule' \
  --set config.interval=300 \
  --set config.clearingLevel=1

RAN Kubernetes clusters typically use node taints to isolate DU and CU workloads from general-purpose pods. The tolerations above ensure the SWT3 DaemonSet runs on RAN-specific nodes alongside the network functions it attests.

Node Affinity for Multi-Silicon RAN

Cloud RAN clusters often mix silicon: ARM Neoverse for O-DU processing, Qualcomm Cloud AI 100 for inference acceleration, and x86 for O-CU and Non-RT RIC. The DaemonSet runs on all architectures and discovers hardware automatically.

# values-ran.yaml (example -- adjust tolerations for your cluster)
tolerations:
  - operator: Exists    # Run on all tainted RAN nodes

nodeSelector: {}        # All nodes (DU, CU, RIC, MEC)

config:
  mode: cloud
  interval: 300         # 5-minute attestation cycle
  clearingLevel: 1
  agentId: ""           # Auto-generates from pod hostname

resources:
  requests:
    cpu: 50m            # Minimal footprint on latency-sensitive nodes
    memory: 32Mi
  limits:
    cpu: 200m
    memory: 128Mi

Resource limits are deliberately low. RAN nodes are latency-sensitive, and the DaemonSet must not compete with network functions for CPU cycles. The 50m CPU request is sufficient for periodic hardware discovery and anchor generation.

For detailed Kubernetes multi-silicon attestation patterns including GKE, EKS, and AKS, see Multi-Silicon Kubernetes Attestation.

5. Latency-Constrained Attestation

The fundamental tension in telecom AI attestation is that compliance evidence must be generated without affecting the real-time performance of network functions. SWT3 resolves this through a two-tier attestation model.

Tier 1: Real-Time Path (Level 0)

For AI decisions in the O-DU and Near-RT RIC control loops, Level 0 captures only three numeric factors and a timestamp. The witness call performs no network I/O and no cryptographic operations in the real-time path. Factors are written to a local buffer with minimal overhead relative to the scheduling interval.

FactorEncodingPayload Size
factor_aModel version hash (first 8 digits)4 bytes
factor_bDecision category code4 bytes
factor_cConfidence bucket (0-9)4 bytes
TimestampMillisecond epoch8 bytes
Total~200 bytes per anchor

These factors are written to a local write-ahead log (WAL) on the node. No network I/O occurs in the real-time path.

Tier 2: Batch Replay (Level 1-2)

A background process reads the WAL and enriches anchors with additional context: model metadata, operational parameters, and (at Level 2) subscriber context hashes. Enriched anchors are flushed to the clearing house on a configurable interval (default: 60 seconds for RAN, 5 seconds for Non-RT RIC).

# Configure WAL flush interval for RAN nodes
from swt3_ai import Witness

witness = Witness(
    tenant_id="your-tenant-id",
    api_key="axm_YOUR_KEY",
    agent_id="du-node-arm-01",
    clearing_level=0,
    on_flush=lambda anchors: logger.info(f"Flushed {len(anchors)} RAN anchors"),
    flush_interval=60.0        # 60-second batch flush (seconds)
)

Design rationale: Level 0 anchors are cryptographically valid on their own. The batch replay enriches them but does not replace them. If the node loses connectivity or crashes before a flush, the Level 0 anchors in the WAL are recoverable and independently verifiable. This matches the reliability requirements of telecommunications infrastructure where evidence must survive node failures.

6. Multi-access Edge Computing (MEC)

ETSI Multi-access Edge Computing (MEC) deploys AI applications at the network edge, co-located with or adjacent to base stations. MEC applications run on the MEC platform, which provides APIs for radio network information, location, bandwidth management, and application lifecycle.

MEC Architecture and SWT3 Integration

MEC ComponentAI Use CasesSWT3 Integration Point
MEC ApplicationVideo analytics, AR/VR optimization, autonomous vehicle coordination, local content recommendationSDK integration in application code. Standard witness.wrap() calls.
MEC PlatformApplication placement optimization, resource scheduling, traffic steeringPlatform-level DaemonSet. Hardware attestation (AI-HW.1) for edge servers.
MEC OrchestratorMulti-site placement, lifecycle management, SLA enforcementOrchestrator plugin. Witnesses placement decisions and SLA compliance.

MEC applications differ from core RAN AI in that they typically have more relaxed latency requirements (10ms-100ms vs sub-1ms) and richer input data (video frames, sensor streams vs radio measurements). This means MEC applications can use Level 1 or Level 2 clearing without performance concern.

NFV AI Compliance

Virtualized Network Functions (VNFs) and Cloud-Native Network Functions (CNFs) that incorporate AI/ML capabilities fall under the same attestation model. The SWT3 DaemonSet running on the NFV infrastructure provides hardware attestation, while the VNF/CNF integrates the SDK for inference witnessing.

Key attestation targets for NFV AI:

7. Network Slicing AI Governance

5G network slicing creates isolated virtual networks tailored to specific service types. AI systems manage slice lifecycle, resource allocation, and SLA enforcement. Each slice type has distinct compliance requirements based on the data it carries and the criticality of decisions.

Slice TypeAI DecisionsData SensitivityRecommended Clearing Level
eMBB (Enhanced Mobile Broadband)Bandwidth allocation, video optimization, content cachingAggregate traffic patternsLevel 0 (Analytics)
URLLC (Ultra-Reliable Low-Latency)Resource reservation, latency guarantee enforcement, failover predictionMission-critical service metadataLevel 1 (Standard)
mMTC (Massive Machine-Type)Device clustering, congestion prediction, sleep schedulingDevice identifiers (IoT, not subscriber)Level 0 (Analytics)
V2X (Vehicle-to-Everything)Trajectory prediction, collision avoidance coordination, platoon managementVehicle location, safety-critical decisionsLevel 2 (Sensitive)
PPDR (Public Protection and Disaster Relief)Priority access, emergency capacity allocation, coverage predictionEmergency responder data, locationLevel 2 (Sensitive)

The AI system that orchestrates slice lifecycle (creation, scaling, termination) should be witnessed at Level 1 regardless of slice type, because slice orchestration decisions affect all subscribers on the network.

V2X and PPDR slices carry safety implications. AI decisions in vehicle-to-everything and emergency services slices can directly affect human safety. These qualify as high-risk under EU AI Act Article 6 independently of the telecommunications critical infrastructure classification. Clearing Level 2 is the minimum for auditable evidence of these decisions.

8. Clearing Level Decision Matrix

The following matrix maps common telecom AI use cases to recommended clearing levels. Use this as a starting point and adjust based on your specific regulatory requirements and data processing agreements.

Use CaseLayerLevelRationale
Beamforming optimizationO-DU0Physical layer, no subscriber data, sub-1ms constraint
Scheduling optimizationO-DU0Physical layer aggregate metrics
Traffic prediction (aggregate)Near-RT RIC0Cell-level aggregates, no individual subscriber data
Interference managementNear-RT RIC0Inter-cell coordination, RF measurements only
Load balancingNear-RT RIC1May trigger handovers affecting individual subscribers
QoS optimization (per-user)Near-RT RIC2Subscriber-specific quality decisions, GDPR personal data
Network slicing orchestrationSMO1Service-level decisions affecting multiple subscribers
Anomaly detection (security)Non-RT RIC1Network-wide patterns, potential false positive impact
Subscriber experience optimizationNon-RT RIC2Per-subscriber profiling, GDPR Article 22 considerations
Location-aware servicesMEC2Subscriber location is sensitive personal data
Emergency call routingO-CU2Safety-critical, location data, regulatory retention requirements
Capacity planning (predictive)SMO0Aggregate demand forecasting, no subscriber data
Fault predictionSMO1Infrastructure state, potential service impact
Energy optimizationNon-RT RIC0Power consumption metrics, no subscriber data
Spectrum sharing (CBRS/LSA)Non-RT RIC1Regulatory spectrum allocation decisions

9. Multi-Vendor RAN Compliance

O-RAN disaggregation means a single operator's network may include RAN components from multiple vendors. Each vendor supplies AI/ML models for their equipment, but the operator (deployer) bears compliance responsibility for the integrated system.

VendorRAN ProductsAI FunctionsRecommended Integration
EricssonRAN Compute, Cloud RAN, Ericsson SiliconAI-RAN (beamforming, spectrum, energy), Network IntelligenceSDK in xApp/rApp. DaemonSet on Cloud RAN K8s.
NokiaAirScale, MantaRay SON, ReefShark SoCSelf-Organizing Networks, capacity optimizationSDK in SON functions. DaemonSet on AirScale cloud.
SamsungvRAN, Samsung AI-RANVirtualized RAN optimization, multi-RAT managementSDK in vRAN workloads. Container sidecar pattern.
MavenirOpen RAN (O-RAN native), MAVcoreCloud-native RAN intelligence, edge AISDK in CNFs. Helm chart on Mavenir K8s platform.
Rakuten SymphonySymworld platformAI-native network automationSDK integration via Symworld API layer.

Integration patterns above are architectural recommendations based on each vendor's published platform architecture. SWT3 is vendor-agnostic: the Python SDK and Helm chart work on any Kubernetes-based RAN platform.

Provider vs Deployer Boundary

In a multi-vendor RAN, the equipment vendor is the AI provider (supplies the model, training data, and documentation). The mobile network operator is the AI deployer (operates the model in production, bears responsibility for operational behavior). SWT3 witnesses at the deployer boundary: the operator's infrastructure generates attestation evidence for AI decisions made by vendor-supplied models running on operator-managed infrastructure.

This separation means the operator does not need access to vendor model internals. SWT3 witnesses the observable behavior (inputs, outputs, performance metrics) without requiring model weights or training data. The vendor provides model documentation per EU AI Act Article 13; the operator provides operational evidence per Article 26.

For detailed provider-deployer obligation mapping, see GPAI Code of Practice Mapping (Section 11: Deployer Obligations).

10. Telecom AI Silicon

Telecom infrastructure uses a distinct silicon landscape from cloud data centers. The SWT3 hardware attestation procedure (AI-HW.1) generates a cryptographic anchor for each accelerator type, providing continuous inventory of AI compute resources across the RAN.

SiliconVendorRAN RoleDiscovery MethodStatus
Custom 5nm AI-RAN ASICEricssonO-DU acceleration, beamforming, Cloud RAN computeericsson-hwidPlanned
Cloud AI 100 / AI 200QualcommEdge inference acceleration, Near-RT RIC xAppsqaic-utilPlanned
Neoverse N2 / V2ARMO-DU general-purpose processing, CNF hostingPCI + /sys/devicesPlanned
ReefShark SoCNokiaBaseband processing, power-efficient RAN computePCI fallbackPlanned
A100 / H100 / H200NVIDIANon-RT RIC model training, large-scale inferencenvidia-smiLive
Xeon ScalableIntelTraditional RAN baseband, O-CU, FlexRANPCI fallbackLive
Gaudi 2 / Gaudi 3IntelAI training workloads at operator data centershl-smiLive

All telecom silicon is detectable today via PCI fallback (vendor ID from /sys/bus/pci/devices), which provides device identification, vendor, and accelerator count. "Planned" native discovery methods add richer metadata (memory topology, interconnect detail, serial numbers) but are not required for compliant attestation. PCI fallback produces valid AI-HW.1 anchors on all hardware.

For detailed multi-silicon Kubernetes attestation including Helm chart configuration and discovery internals, see Multi-Silicon Kubernetes Attestation.

11. Regulatory Mapping

Telecom AI systems operate at the intersection of telecommunications regulation, AI regulation, and data protection law. The following control cards map key regulatory obligations to SWT3 attestation evidence.

EU AI Act Article 6(2) / Annex III, Point 2(b)

High-Risk Classification: Critical Digital Infrastructure

AI systems used in the management and operation of critical digital infrastructure are high-risk. This includes AI in RAN optimization, network slicing, traffic management, and fault prediction. SWT3 provides the continuous logging evidence required by Article 12 and the risk management documentation required by Article 9.

Automated AI-INF.1 inference provenance, AI-HW.1 hardware attestation, AI-LOG.1 log retention

EU AI Act Article 9 -- Risk Management

Continuous Risk Monitoring for RAN AI

High-risk AI systems must implement a risk management system that operates throughout the system lifecycle. SWT3 drift detection (AI-DRIFT.1, AI-DRIFT.2) provides continuous monitoring of model performance against defined thresholds. Consequence-mapped drift thresholds (AI-DRIFT.2) link performance degradation to service impact.

Automated AI-DRIFT.1 drift detection, AI-DRIFT.2 consequence mapping, AI-PERF.1 performance metrics

EU AI Act Article 14 -- Human Oversight

Human Oversight for Network-Affecting Decisions

High-risk AI systems must allow human oversight. In RAN operations, full human-in-the-loop is impractical for sub-millisecond decisions. SWT3 supports human-on-the-loop oversight by providing real-time dashboards, drift alerts, and guardrail enforcement evidence (AI-GRD.1). Emergency override attestation (AI-EMRG.1) documents when human operators intervene to override AI decisions.

Partial AI-GRD.1 guardrails, AI-EMRG.1 emergency override, AI-SAFE.1 safe state transition

EU Electronic Communications Code (EECC) -- Directive 2018/1972

Network Integrity and Security Obligations

Article 40 requires operators to ensure the integrity of their networks. AI systems that make autonomous network management decisions must be governed to prevent service degradation. SWT3 provides evidence that AI-driven network changes were witnessed, bounded by guardrails, and recoverable via safe state transitions.

Automated AI-INF.1 decision logging, AI-SAFE.1 safe state, AI-ROBUST.1 robustness testing

ETSI EN 303 645 -- Cyber Security for Consumer IoT

Security for IoT-Connected Edge AI

MEC applications that serve IoT devices must comply with baseline security requirements. SWT3 hardware attestation (AI-HW.1) documents the security posture of edge compute infrastructure. Inference witnessing (AI-INF.1) provides audit trails for AI decisions affecting IoT device management.

Automated AI-HW.1 hardware attestation, AI-INF.1 inference provenance

3GPP Release 18 -- AI/ML for NR (New Radio)

3GPP AI/ML Framework Alignment

3GPP TR 38.843 and TS 38.331 define the framework for AI/ML in NR air interface. SWT3 attestation aligns with the 3GPP model lifecycle: training, validation, deployment, monitoring, and update. Each lifecycle phase maps to SWT3 procedures: AI-MDL.5 for model weights at deployment, AI-DRIFT.1 for monitoring, AI-LCM.1 for lifecycle transitions.

Partial AI-MDL.5 model weights, AI-DRIFT.1 monitoring, AI-LCM.1 lifecycle

GDPR Article 22 / ePrivacy Directive

Automated Decision-Making Affecting Subscribers

AI systems that make per-subscriber decisions (QoS optimization, experience scoring, predictive churn) may constitute automated decision-making under GDPR Article 22. SWT3 Level 2 attestation provides evidence of what model made the decision, what factors were considered (hashed), and what safeguards were in place, without exposing the subscriber data itself.

Partial AI-INF.1 with CJT metadata (jurisdiction, legal_basis, purpose_class)

12. Standards-to-Procedure Mapping

The following table maps specific clauses from telecom standards to SWT3 procedures. This mapping is the publisher's analysis and should be validated against your organization's specific compliance requirements.

StandardClause/RequirementSWT3 ProcedureCoverage
EU AI ActArt. 12 -- Automatic loggingAI-INF.1, AI-LOG.1Full
EU AI ActArt. 9 -- Risk managementAI-DRIFT.1, AI-DRIFT.2, AI-PERF.1Full
EU AI ActArt. 14 -- Human oversightAI-GRD.1, AI-EMRG.1, AI-SAFE.1Partial
EU AI ActArt. 15 -- Accuracy, robustnessAI-PERF.1, AI-ROBUST.1Partial
EU AI ActArt. 26 -- Deployer obligationsAI-INF.1, AI-HW.1, AI-DRIFT.1Full
EU AI ActArt. 50 -- TransparencyAI-INF.1 with CJT metadataFull
EECCArt. 40 -- Network integrityAI-SAFE.1, AI-ROBUST.1, AI-GRD.1Full
EECCArt. 40 -- Incident reportingAI-EMRG.1, AI-INCIDENT.1Full
3GPP Rel. 18TR 38.843 -- AI/ML for NRAI-INF.1, AI-MDL.5, AI-DRIFT.1Partial
3GPP Rel. 18TS 38.331 -- RRC AI/ML proceduresAI-INF.1, AI-LCM.1Partial
O-RAN AllianceWG2 -- Non-RT RIC A1 policiesAI-INF.1, AI-GRD.1Full
O-RAN AllianceWG3 -- Near-RT RIC xAppsAI-INF.1, AI-CHAIN.1Full
O-RAN AllianceWG1 -- O-RAN architectureAI-HW.1 per componentFull
ETSI GS MEC 003MEC framework and referenceAI-INF.1, AI-HW.1Full
ETSI GS MEC 011MEC platform application enablementAI-INF.1, AI-ACC.1Partial
ETSI SAISecuring AI -- threat landscapeAI-ROBUST.1, AI-CYBER.1Partial
ETSI EN 303 645Consumer IoT security baselineAI-HW.1, AI-INF.1Full
GDPRArt. 22 -- Automated decisionsAI-INF.1 with CJT fieldsPartial
GDPRArt. 35 -- DPIAAI-DPIA.1, AI-IMPACT.1Full
ePrivacyArt. 5 -- Confidentiality of commsClearing Level 2+ for subscriber dataFull

Full = SWT3 generates primary evidence for this obligation. Partial = SWT3 provides supporting evidence; additional organizational measures required.

13. Sample SWT3 Witness Anchors

The following examples show what SWT3 anchors look like for common telecom AI scenarios.

Beamforming Inference (O-DU, Level 0)

{
  "procedure": "AI-INF.1",
  "anchor": "SWT3-E-TELCO-AI-INF1-PASS-1786537200-a3f7c1209e44",
  "fingerprint": "a3f7c1209e44",
  "clearing_level": 0,
  "factor_a": 30100007,
  "factor_b": 3,
  "factor_c": 8,
  "model_id": "beam-predictor-v3",
  "agent_id": "du-node-arm-site-0142",
  "provider": "on-device",
  "metadata": {
    "ran_function": "beamforming",
    "control_loop": "o-du"
  }
}

Model Drift Detection (Near-RT RIC, Level 1)

{
  "procedure": "AI-DRIFT.1",
  "anchor": "SWT3-E-TELCO-AI-DRIFT1-PASS-1786540800-b2e6d0318f57",
  "fingerprint": "b2e6d0318f57",
  "clearing_level": 1,
  "factor_a": 20100003,
  "factor_b": 94,
  "factor_c": 2,
  "model_id": "spectrum-optimizer-v2",
  "agent_id": "near-rt-ric-xapp-drift-01",
  "drift_metric": "mse",
  "drift_value": 0.0023,
  "drift_threshold": 0.005,
  "drift_status": "within_bounds"
}

Hardware Attestation (RAN DU Node, Level 1)

{
  "procedure": "AI-HW.1",
  "anchor": "SWT3-E-TELCO-AI-HW1-PASS-1786544400-c1d5e9427a63",
  "fingerprint": "c1d5e9427a63",
  "clearing_level": 1,
  "factor_a": 4,
  "factor_b": 1,
  "factor_c": 1,
  "silicon_vendor": "arm-neoverse",
  "discovery_method": "pci-fallback",
  "accelerator_count": 4,
  "hostname_hash": "sha256:7f8e9a...",
  "agent_id": "ran-witness-du-node-0142"
}

Emergency Override (O-CU, Level 2)

{
  "procedure": "AI-EMRG.1",
  "anchor": "SWT3-E-TELCO-AI-EMRG1-PASS-1786548000-d0c4f8536b72",
  "fingerprint": "d0c4f8536b72",
  "clearing_level": 2,
  "factor_a": 1,
  "factor_b": 5,
  "factor_c": 1,
  "model_id": "traffic-steering-v4",
  "agent_id": "o-cu-emergency-handler",
  "override_reason": "manual_operator_intervention",
  "override_scope": "sector_alpha_cell_0142",
  "jurisdiction": "EU",
  "legal_basis": "legitimate_interest",
  "purpose_class": "emergency_services"
}

14. Next Steps and Related Guides

This guide covers the telecom-specific aspects of AI attestation. For deeper treatment of individual topics, see the following companion guides:

For SDK documentation, code examples, and API reference, visit the SDK Documentation portal. To verify any SWT3 witness anchor, use the public verifier.