Cryptographic witness attestation for AI-driven Radio Access Networks, Cloud RAN on Kubernetes, Multi-access Edge Computing, and 5G network slicing. Standards mapping for ETSI, 3GPP, O-RAN Alliance, and EU AI Act critical infrastructure obligations.
Audience: Telecom infrastructure engineers, RAN platform architects, compliance teams at mobile network operators and RAN vendors, and regulatory assessors evaluating AI in critical communications infrastructure. Covers O-RAN, Cloud RAN, and traditional RAN deployments.
Fast track: Hardware attestation across your entire RAN cluster requires one Helm install and zero code changes. Inference witnessing requires one SDK call per AI decision. Local mode runs free, forever, with no API keys or accounts. Cloud mode adds independent verification and auditor access. See Section 3 for the SDK quick start or Section 4 for the Helm chart.
Modern radio access networks run AI at every layer. Beamforming optimization, spectrum allocation, traffic prediction, network slicing, and anomaly detection all rely on machine learning models that make millions of decisions per second across thousands of cell sites. These decisions directly affect service quality for subscribers and, in the case of emergency call routing, human safety.
Three properties of telecom AI create unique compliance challenges:
SWT3 addresses all three. The protocol witnesses AI decisions by recording cryptographic hashes of model behavior, not the data itself. Clearing levels control what metadata is captured, and the write-ahead log pattern supports asynchronous attestation that does not block real-time inference paths.
Key principle: Hashes only. Raw inference data, subscriber identifiers, and spectrum allocation details never leave the RAN node. SWT3 witnesses the fact that an AI decision occurred, what model made it, and what operational context surrounded it. The subscriber data stays where it belongs.
The O-RAN Alliance architecture disaggregates the RAN into functional components, each of which may host AI/ML functions. SWT3 attestation points map to where AI decisions are made:
| Component | AI Functions | Control Loop | SWT3 Attestation |
|---|---|---|---|
| Non-RT RIC | Policy optimization, model training, A1 policy generation, network planning | > 1 second | Standard witness (AI-INF.1). Full metadata capture. Clearing Level 1-2. |
| Near-RT RIC | RAN slicing, load balancing, interference management, QoS optimization, xApps | 10ms - 1s | Async witness via WAL. Level 0-1. Flush on configurable interval. |
| O-CU (Central Unit) | Handover prediction, bearer management, PDCP optimization | 10ms - 100ms | Async witness. Level 0 for real-time path. Batch replay at Level 1. |
| O-DU (Distributed Unit) | Scheduling, beamforming, power control, HARQ optimization | < 1ms | Level 0 only. Numeric factors (3 integers). Post-hoc batch at Level 1. |
| O-RU (Radio Unit) | Digital front-end optimization (limited AI currently) | < 0.25ms | Hardware attestation only (AI-HW.1). No inference witnessing at this layer. |
| SMO (Service Management) | Lifecycle management, fault prediction, capacity planning | Minutes - hours | Full witness. All clearing levels. Standard SDK integration. |
O-RU O-DU O-CU Near-RT RIC Non-RT RIC / SMO
[AI-HW.1 only] -> [L0: WAL] -> [L0/L1: WAL] -> [L1: async] -> [L1-2: standard]
3 factors batch replay xApp witnesses full SDK integration
~200 bytes enriched flush 10ms-1s loop rApp/A1 policies
no network I/O 60s interval configurable minutes-hours cycle
The critical design point is that attestation granularity decreases as you move down the stack toward real-time processing. The O-DU operates at physical layer speeds where even microseconds of overhead affect throughput. SWT3 handles this through clearing level selection: Level 0 captures only three numeric factors and a timestamp, adding negligible overhead. Richer attestation happens asynchronously via the write-ahead log.
SWT3 provides two integration patterns for RAN AI. Choose the one that matches your inference architecture.
For RAN AI models served via gRPC, ONNX Runtime, TensorRT, or custom REST endpoints, use the dedicated witness methods. Each method maps to a specific SWT3 procedure and is non-blocking.
from swt3_ai import Witness
witness = Witness(
tenant_id="your-tenant-id",
api_key="axm_YOUR_KEY",
agent_id="near-rt-ric-xapp-beam-01",
clearing_level=0, # Real-time path: numeric factors only
flush_interval=60.0 # Batch flush every 60 seconds
)
# Your existing beamforming inference (unchanged)
beam_result = beam_model.predict(cell_measurements)
# Witness the decision -- one call, non-blocking
anchor = witness.witness_hardware(
accelerator_count=4,
health_status=1,
silicon_vendor="arm-neoverse",
discovery_method="pci-fallback",
topology="o-du-cluster"
)
print(anchor.fingerprint) # e.g., "96b7d56c0245"
# Witness model drift against production baseline
drift_anchor = witness.witness_drift(
metrics_evaluated=8,
drifted_count=0,
drift_type="performance",
baseline_hash="sha256:a1b2c3d4",
drift_score=0.002,
detection_method="mse",
threshold=0.005
)
# Witness model weights at deployment
weights_anchor = witness.witness_model_weights(
param_count=7_000_000,
quantization_bits=8,
weights_hash="sha256:e4f5a6b7..."
)
Direct witness methods work with any inference framework. Your model code does not change. The witness call appends to a local buffer and returns immediately.
For RAN AI models served via OpenAI-compatible APIs (vLLM, Triton with OpenAI frontend, or LLM-based network assistants), the wrap() method provides zero-code-change witnessing:
import openai
from swt3_ai import Witness
witness = Witness(
tenant_id="your-tenant-id",
api_key="axm_YOUR_KEY",
agent_id="non-rt-ric-rapp-01",
clearing_level=1
)
# Wrap the model server client -- every call is witnessed transparently
client = openai.OpenAI(base_url="http://ran-llm-server:8080/v1")
witnessed_client = witness.wrap(client)
# Use exactly like the original -- witnessing happens automatically
response = witnessed_client.chat.completions.create(
model="network-advisor-v2",
messages=[{"role": "user", "content": "capacity forecast for sector 7"}]
)
For AI that processes per-subscriber data (QoS optimization, location services), use Level 2 with Cross-Jurisdictional Transparency (CJT) fields:
witness_sensitive = Witness(
tenant_id="your-tenant-id",
api_key="axm_YOUR_KEY",
agent_id="near-rt-ric-xapp-qos-01",
clearing_level=2, # Sensitive: subscriber data involved
jurisdiction="EU", # GDPR jurisdiction
legal_basis="legitimate_interest",
purpose_class="network_optimization"
)
# Your existing QoS inference (unchanged)
qos_result = qos_model.optimize(subscriber_context)
# Witness the decision with CJT metadata
anchor = witness_sensitive.witness_performance(
metrics_evaluated=5,
metrics_passing=5,
benchmark_type="qos_sla",
score=0.97,
threshold=0.95
)
The jurisdiction, legal_basis, and purpose_class fields survive all clearing levels. They provide auditors with the legal context for subscriber data processing without exposing the data itself.
Cloud RAN deployments run O-CU and O-DU workloads as containerized network functions on Kubernetes. The swt3-witness Helm chart deploys alongside RAN pods to provide continuous hardware and inference attestation.
# Install with RAN-specific tolerations and ARM node support # Replace taint keys with your cluster's actual RAN node taints helm install swt3 oci://ghcr.io/tenova-labs/charts/swt3-witness \ --set 'tolerations[0].key=ran.example.com/du' \ --set 'tolerations[0].operator=Exists' \ --set 'tolerations[0].effect=NoSchedule' \ --set 'tolerations[1].key=ran.example.com/cu' \ --set 'tolerations[1].operator=Exists' \ --set 'tolerations[1].effect=NoSchedule' \ --set config.interval=300 \ --set config.clearingLevel=1
RAN Kubernetes clusters typically use node taints to isolate DU and CU workloads from general-purpose pods. The tolerations above ensure the SWT3 DaemonSet runs on RAN-specific nodes alongside the network functions it attests.
Cloud RAN clusters often mix silicon: ARM Neoverse for O-DU processing, Qualcomm Cloud AI 100 for inference acceleration, and x86 for O-CU and Non-RT RIC. The DaemonSet runs on all architectures and discovers hardware automatically.
# values-ran.yaml (example -- adjust tolerations for your cluster)
tolerations:
- operator: Exists # Run on all tainted RAN nodes
nodeSelector: {} # All nodes (DU, CU, RIC, MEC)
config:
mode: cloud
interval: 300 # 5-minute attestation cycle
clearingLevel: 1
agentId: "" # Auto-generates from pod hostname
resources:
requests:
cpu: 50m # Minimal footprint on latency-sensitive nodes
memory: 32Mi
limits:
cpu: 200m
memory: 128Mi
Resource limits are deliberately low. RAN nodes are latency-sensitive, and the DaemonSet must not compete with network functions for CPU cycles. The 50m CPU request is sufficient for periodic hardware discovery and anchor generation.
For detailed Kubernetes multi-silicon attestation patterns including GKE, EKS, and AKS, see Multi-Silicon Kubernetes Attestation.
The fundamental tension in telecom AI attestation is that compliance evidence must be generated without affecting the real-time performance of network functions. SWT3 resolves this through a two-tier attestation model.
For AI decisions in the O-DU and Near-RT RIC control loops, Level 0 captures only three numeric factors and a timestamp. The witness call performs no network I/O and no cryptographic operations in the real-time path. Factors are written to a local buffer with minimal overhead relative to the scheduling interval.
| Factor | Encoding | Payload Size |
|---|---|---|
factor_a | Model version hash (first 8 digits) | 4 bytes |
factor_b | Decision category code | 4 bytes |
factor_c | Confidence bucket (0-9) | 4 bytes |
| Timestamp | Millisecond epoch | 8 bytes |
| Total | ~200 bytes per anchor |
These factors are written to a local write-ahead log (WAL) on the node. No network I/O occurs in the real-time path.
A background process reads the WAL and enriches anchors with additional context: model metadata, operational parameters, and (at Level 2) subscriber context hashes. Enriched anchors are flushed to the clearing house on a configurable interval (default: 60 seconds for RAN, 5 seconds for Non-RT RIC).
# Configure WAL flush interval for RAN nodes
from swt3_ai import Witness
witness = Witness(
tenant_id="your-tenant-id",
api_key="axm_YOUR_KEY",
agent_id="du-node-arm-01",
clearing_level=0,
on_flush=lambda anchors: logger.info(f"Flushed {len(anchors)} RAN anchors"),
flush_interval=60.0 # 60-second batch flush (seconds)
)
Design rationale: Level 0 anchors are cryptographically valid on their own. The batch replay enriches them but does not replace them. If the node loses connectivity or crashes before a flush, the Level 0 anchors in the WAL are recoverable and independently verifiable. This matches the reliability requirements of telecommunications infrastructure where evidence must survive node failures.
ETSI Multi-access Edge Computing (MEC) deploys AI applications at the network edge, co-located with or adjacent to base stations. MEC applications run on the MEC platform, which provides APIs for radio network information, location, bandwidth management, and application lifecycle.
| MEC Component | AI Use Cases | SWT3 Integration Point |
|---|---|---|
| MEC Application | Video analytics, AR/VR optimization, autonomous vehicle coordination, local content recommendation | SDK integration in application code. Standard witness.wrap() calls. |
| MEC Platform | Application placement optimization, resource scheduling, traffic steering | Platform-level DaemonSet. Hardware attestation (AI-HW.1) for edge servers. |
| MEC Orchestrator | Multi-site placement, lifecycle management, SLA enforcement | Orchestrator plugin. Witnesses placement decisions and SLA compliance. |
MEC applications differ from core RAN AI in that they typically have more relaxed latency requirements (10ms-100ms vs sub-1ms) and richer input data (video frames, sensor streams vs radio measurements). This means MEC applications can use Level 1 or Level 2 clearing without performance concern.
Virtualized Network Functions (VNFs) and Cloud-Native Network Functions (CNFs) that incorporate AI/ML capabilities fall under the same attestation model. The SWT3 DaemonSet running on the NFV infrastructure provides hardware attestation, while the VNF/CNF integrates the SDK for inference witnessing.
Key attestation targets for NFV AI:
5G network slicing creates isolated virtual networks tailored to specific service types. AI systems manage slice lifecycle, resource allocation, and SLA enforcement. Each slice type has distinct compliance requirements based on the data it carries and the criticality of decisions.
| Slice Type | AI Decisions | Data Sensitivity | Recommended Clearing Level |
|---|---|---|---|
| eMBB (Enhanced Mobile Broadband) | Bandwidth allocation, video optimization, content caching | Aggregate traffic patterns | Level 0 (Analytics) |
| URLLC (Ultra-Reliable Low-Latency) | Resource reservation, latency guarantee enforcement, failover prediction | Mission-critical service metadata | Level 1 (Standard) |
| mMTC (Massive Machine-Type) | Device clustering, congestion prediction, sleep scheduling | Device identifiers (IoT, not subscriber) | Level 0 (Analytics) |
| V2X (Vehicle-to-Everything) | Trajectory prediction, collision avoidance coordination, platoon management | Vehicle location, safety-critical decisions | Level 2 (Sensitive) |
| PPDR (Public Protection and Disaster Relief) | Priority access, emergency capacity allocation, coverage prediction | Emergency responder data, location | Level 2 (Sensitive) |
The AI system that orchestrates slice lifecycle (creation, scaling, termination) should be witnessed at Level 1 regardless of slice type, because slice orchestration decisions affect all subscribers on the network.
V2X and PPDR slices carry safety implications. AI decisions in vehicle-to-everything and emergency services slices can directly affect human safety. These qualify as high-risk under EU AI Act Article 6 independently of the telecommunications critical infrastructure classification. Clearing Level 2 is the minimum for auditable evidence of these decisions.
The following matrix maps common telecom AI use cases to recommended clearing levels. Use this as a starting point and adjust based on your specific regulatory requirements and data processing agreements.
| Use Case | Layer | Level | Rationale |
|---|---|---|---|
| Beamforming optimization | O-DU | 0 | Physical layer, no subscriber data, sub-1ms constraint |
| Scheduling optimization | O-DU | 0 | Physical layer aggregate metrics |
| Traffic prediction (aggregate) | Near-RT RIC | 0 | Cell-level aggregates, no individual subscriber data |
| Interference management | Near-RT RIC | 0 | Inter-cell coordination, RF measurements only |
| Load balancing | Near-RT RIC | 1 | May trigger handovers affecting individual subscribers |
| QoS optimization (per-user) | Near-RT RIC | 2 | Subscriber-specific quality decisions, GDPR personal data |
| Network slicing orchestration | SMO | 1 | Service-level decisions affecting multiple subscribers |
| Anomaly detection (security) | Non-RT RIC | 1 | Network-wide patterns, potential false positive impact |
| Subscriber experience optimization | Non-RT RIC | 2 | Per-subscriber profiling, GDPR Article 22 considerations |
| Location-aware services | MEC | 2 | Subscriber location is sensitive personal data |
| Emergency call routing | O-CU | 2 | Safety-critical, location data, regulatory retention requirements |
| Capacity planning (predictive) | SMO | 0 | Aggregate demand forecasting, no subscriber data |
| Fault prediction | SMO | 1 | Infrastructure state, potential service impact |
| Energy optimization | Non-RT RIC | 0 | Power consumption metrics, no subscriber data |
| Spectrum sharing (CBRS/LSA) | Non-RT RIC | 1 | Regulatory spectrum allocation decisions |
O-RAN disaggregation means a single operator's network may include RAN components from multiple vendors. Each vendor supplies AI/ML models for their equipment, but the operator (deployer) bears compliance responsibility for the integrated system.
| Vendor | RAN Products | AI Functions | Recommended Integration |
|---|---|---|---|
| Ericsson | RAN Compute, Cloud RAN, Ericsson Silicon | AI-RAN (beamforming, spectrum, energy), Network Intelligence | SDK in xApp/rApp. DaemonSet on Cloud RAN K8s. |
| Nokia | AirScale, MantaRay SON, ReefShark SoC | Self-Organizing Networks, capacity optimization | SDK in SON functions. DaemonSet on AirScale cloud. |
| Samsung | vRAN, Samsung AI-RAN | Virtualized RAN optimization, multi-RAT management | SDK in vRAN workloads. Container sidecar pattern. |
| Mavenir | Open RAN (O-RAN native), MAVcore | Cloud-native RAN intelligence, edge AI | SDK in CNFs. Helm chart on Mavenir K8s platform. |
| Rakuten Symphony | Symworld platform | AI-native network automation | SDK integration via Symworld API layer. |
Integration patterns above are architectural recommendations based on each vendor's published platform architecture. SWT3 is vendor-agnostic: the Python SDK and Helm chart work on any Kubernetes-based RAN platform.
In a multi-vendor RAN, the equipment vendor is the AI provider (supplies the model, training data, and documentation). The mobile network operator is the AI deployer (operates the model in production, bears responsibility for operational behavior). SWT3 witnesses at the deployer boundary: the operator's infrastructure generates attestation evidence for AI decisions made by vendor-supplied models running on operator-managed infrastructure.
This separation means the operator does not need access to vendor model internals. SWT3 witnesses the observable behavior (inputs, outputs, performance metrics) without requiring model weights or training data. The vendor provides model documentation per EU AI Act Article 13; the operator provides operational evidence per Article 26.
For detailed provider-deployer obligation mapping, see GPAI Code of Practice Mapping (Section 11: Deployer Obligations).
Telecom infrastructure uses a distinct silicon landscape from cloud data centers. The SWT3 hardware attestation procedure (AI-HW.1) generates a cryptographic anchor for each accelerator type, providing continuous inventory of AI compute resources across the RAN.
| Silicon | Vendor | RAN Role | Discovery Method | Status |
|---|---|---|---|---|
| Custom 5nm AI-RAN ASIC | Ericsson | O-DU acceleration, beamforming, Cloud RAN compute | ericsson-hwid | Planned |
| Cloud AI 100 / AI 200 | Qualcomm | Edge inference acceleration, Near-RT RIC xApps | qaic-util | Planned |
| Neoverse N2 / V2 | ARM | O-DU general-purpose processing, CNF hosting | PCI + /sys/devices | Planned |
| ReefShark SoC | Nokia | Baseband processing, power-efficient RAN compute | PCI fallback | Planned |
| A100 / H100 / H200 | NVIDIA | Non-RT RIC model training, large-scale inference | nvidia-smi | Live |
| Xeon Scalable | Intel | Traditional RAN baseband, O-CU, FlexRAN | PCI fallback | Live |
| Gaudi 2 / Gaudi 3 | Intel | AI training workloads at operator data centers | hl-smi | Live |
All telecom silicon is detectable today via PCI fallback (vendor ID from /sys/bus/pci/devices), which provides device identification, vendor, and accelerator count. "Planned" native discovery methods add richer metadata (memory topology, interconnect detail, serial numbers) but are not required for compliant attestation. PCI fallback produces valid AI-HW.1 anchors on all hardware.
For detailed multi-silicon Kubernetes attestation including Helm chart configuration and discovery internals, see Multi-Silicon Kubernetes Attestation.
Telecom AI systems operate at the intersection of telecommunications regulation, AI regulation, and data protection law. The following control cards map key regulatory obligations to SWT3 attestation evidence.
AI systems used in the management and operation of critical digital infrastructure are high-risk. This includes AI in RAN optimization, network slicing, traffic management, and fault prediction. SWT3 provides the continuous logging evidence required by Article 12 and the risk management documentation required by Article 9.
Automated AI-INF.1 inference provenance, AI-HW.1 hardware attestation, AI-LOG.1 log retention
High-risk AI systems must implement a risk management system that operates throughout the system lifecycle. SWT3 drift detection (AI-DRIFT.1, AI-DRIFT.2) provides continuous monitoring of model performance against defined thresholds. Consequence-mapped drift thresholds (AI-DRIFT.2) link performance degradation to service impact.
Automated AI-DRIFT.1 drift detection, AI-DRIFT.2 consequence mapping, AI-PERF.1 performance metrics
High-risk AI systems must allow human oversight. In RAN operations, full human-in-the-loop is impractical for sub-millisecond decisions. SWT3 supports human-on-the-loop oversight by providing real-time dashboards, drift alerts, and guardrail enforcement evidence (AI-GRD.1). Emergency override attestation (AI-EMRG.1) documents when human operators intervene to override AI decisions.
Partial AI-GRD.1 guardrails, AI-EMRG.1 emergency override, AI-SAFE.1 safe state transition
Article 40 requires operators to ensure the integrity of their networks. AI systems that make autonomous network management decisions must be governed to prevent service degradation. SWT3 provides evidence that AI-driven network changes were witnessed, bounded by guardrails, and recoverable via safe state transitions.
Automated AI-INF.1 decision logging, AI-SAFE.1 safe state, AI-ROBUST.1 robustness testing
MEC applications that serve IoT devices must comply with baseline security requirements. SWT3 hardware attestation (AI-HW.1) documents the security posture of edge compute infrastructure. Inference witnessing (AI-INF.1) provides audit trails for AI decisions affecting IoT device management.
Automated AI-HW.1 hardware attestation, AI-INF.1 inference provenance
3GPP TR 38.843 and TS 38.331 define the framework for AI/ML in NR air interface. SWT3 attestation aligns with the 3GPP model lifecycle: training, validation, deployment, monitoring, and update. Each lifecycle phase maps to SWT3 procedures: AI-MDL.5 for model weights at deployment, AI-DRIFT.1 for monitoring, AI-LCM.1 for lifecycle transitions.
Partial AI-MDL.5 model weights, AI-DRIFT.1 monitoring, AI-LCM.1 lifecycle
AI systems that make per-subscriber decisions (QoS optimization, experience scoring, predictive churn) may constitute automated decision-making under GDPR Article 22. SWT3 Level 2 attestation provides evidence of what model made the decision, what factors were considered (hashed), and what safeguards were in place, without exposing the subscriber data itself.
Partial AI-INF.1 with CJT metadata (jurisdiction, legal_basis, purpose_class)
The following table maps specific clauses from telecom standards to SWT3 procedures. This mapping is the publisher's analysis and should be validated against your organization's specific compliance requirements.
| Standard | Clause/Requirement | SWT3 Procedure | Coverage |
|---|---|---|---|
| EU AI Act | Art. 12 -- Automatic logging | AI-INF.1, AI-LOG.1 | Full |
| EU AI Act | Art. 9 -- Risk management | AI-DRIFT.1, AI-DRIFT.2, AI-PERF.1 | Full |
| EU AI Act | Art. 14 -- Human oversight | AI-GRD.1, AI-EMRG.1, AI-SAFE.1 | Partial |
| EU AI Act | Art. 15 -- Accuracy, robustness | AI-PERF.1, AI-ROBUST.1 | Partial |
| EU AI Act | Art. 26 -- Deployer obligations | AI-INF.1, AI-HW.1, AI-DRIFT.1 | Full |
| EU AI Act | Art. 50 -- Transparency | AI-INF.1 with CJT metadata | Full |
| EECC | Art. 40 -- Network integrity | AI-SAFE.1, AI-ROBUST.1, AI-GRD.1 | Full |
| EECC | Art. 40 -- Incident reporting | AI-EMRG.1, AI-INCIDENT.1 | Full |
| 3GPP Rel. 18 | TR 38.843 -- AI/ML for NR | AI-INF.1, AI-MDL.5, AI-DRIFT.1 | Partial |
| 3GPP Rel. 18 | TS 38.331 -- RRC AI/ML procedures | AI-INF.1, AI-LCM.1 | Partial |
| O-RAN Alliance | WG2 -- Non-RT RIC A1 policies | AI-INF.1, AI-GRD.1 | Full |
| O-RAN Alliance | WG3 -- Near-RT RIC xApps | AI-INF.1, AI-CHAIN.1 | Full |
| O-RAN Alliance | WG1 -- O-RAN architecture | AI-HW.1 per component | Full |
| ETSI GS MEC 003 | MEC framework and reference | AI-INF.1, AI-HW.1 | Full |
| ETSI GS MEC 011 | MEC platform application enablement | AI-INF.1, AI-ACC.1 | Partial |
| ETSI SAI | Securing AI -- threat landscape | AI-ROBUST.1, AI-CYBER.1 | Partial |
| ETSI EN 303 645 | Consumer IoT security baseline | AI-HW.1, AI-INF.1 | Full |
| GDPR | Art. 22 -- Automated decisions | AI-INF.1 with CJT fields | Partial |
| GDPR | Art. 35 -- DPIA | AI-DPIA.1, AI-IMPACT.1 | Full |
| ePrivacy | Art. 5 -- Confidentiality of comms | Clearing Level 2+ for subscriber data | Full |
Full = SWT3 generates primary evidence for this obligation. Partial = SWT3 provides supporting evidence; additional organizational measures required.
The following examples show what SWT3 anchors look like for common telecom AI scenarios.
{
"procedure": "AI-INF.1",
"anchor": "SWT3-E-TELCO-AI-INF1-PASS-1786537200-a3f7c1209e44",
"fingerprint": "a3f7c1209e44",
"clearing_level": 0,
"factor_a": 30100007,
"factor_b": 3,
"factor_c": 8,
"model_id": "beam-predictor-v3",
"agent_id": "du-node-arm-site-0142",
"provider": "on-device",
"metadata": {
"ran_function": "beamforming",
"control_loop": "o-du"
}
}
{
"procedure": "AI-DRIFT.1",
"anchor": "SWT3-E-TELCO-AI-DRIFT1-PASS-1786540800-b2e6d0318f57",
"fingerprint": "b2e6d0318f57",
"clearing_level": 1,
"factor_a": 20100003,
"factor_b": 94,
"factor_c": 2,
"model_id": "spectrum-optimizer-v2",
"agent_id": "near-rt-ric-xapp-drift-01",
"drift_metric": "mse",
"drift_value": 0.0023,
"drift_threshold": 0.005,
"drift_status": "within_bounds"
}
{
"procedure": "AI-HW.1",
"anchor": "SWT3-E-TELCO-AI-HW1-PASS-1786544400-c1d5e9427a63",
"fingerprint": "c1d5e9427a63",
"clearing_level": 1,
"factor_a": 4,
"factor_b": 1,
"factor_c": 1,
"silicon_vendor": "arm-neoverse",
"discovery_method": "pci-fallback",
"accelerator_count": 4,
"hostname_hash": "sha256:7f8e9a...",
"agent_id": "ran-witness-du-node-0142"
}
{
"procedure": "AI-EMRG.1",
"anchor": "SWT3-E-TELCO-AI-EMRG1-PASS-1786548000-d0c4f8536b72",
"fingerprint": "d0c4f8536b72",
"clearing_level": 2,
"factor_a": 1,
"factor_b": 5,
"factor_c": 1,
"model_id": "traffic-steering-v4",
"agent_id": "o-cu-emergency-handler",
"override_reason": "manual_operator_intervention",
"override_scope": "sector_alpha_cell_0142",
"jurisdiction": "EU",
"legal_basis": "legitimate_interest",
"purpose_class": "emergency_services"
}
This guide covers the telecom-specific aspects of AI attestation. For deeper treatment of individual topics, see the following companion guides:
For SDK documentation, code examples, and API reference, visit the SDK Documentation portal. To verify any SWT3 witness anchor, use the public verifier.