swt3-ai 0.5.9

Witness your AI. Prove it followed the rules. Cryptographic accountability for every inference, tool call, and resource access.

swt3-ai

SWT3 AI Witness SDK for .NET: mint, verify, and sign SWT3 witness anchors with cross-language parity. Zero external dependencies -- uses only System.Security.Cryptography.

GPAI transparency obligations are enforceable now. EU AI Act high-risk enforcement begins December 2, 2027. This SDK gives you the cryptographic primitives.

What's New in v0.5.9

• Compliance Intelligence available in Python, TypeScript, and MCP SDKs -- offline crosswalk resolution across 24 frameworks. Core primitives in this package remain stable and unchanged.
• 2,069 tests passing across all 7 SDK languages.

What You Get

• Fingerprint.MintFingerprint -- canonical SWT3 fingerprint from tenant, procedure, factors, and timestamp
• Signing.SignPayload -- HMAC-SHA256 signing with optional agent identity binding
• Fingerprint.Sha256Truncated -- truncated SHA-256 hashing for prompts, responses, and model weights
• Types -- WitnessPayload, WitnessReceipt, WitnessConfig, RevocationReasons classes ready for serialization

All output is byte-identical to the Python, TypeScript, Swift, Rust, Ruby, and MCP SDKs. 7 languages, one audit trail. Verified by shared test vectors.

Quick Start

dotnet add package swt3-ai

Mint a fingerprint:

using Swt3Ai;

// Hash prompt and response locally (raw text never leaves your machine)
var promptHash = Fingerprint.Sha256Truncated("Summarize this contract...", 16);
var responseHash = Fingerprint.Sha256Truncated("The contract states...", 16);

// Mint a fingerprint from the canonical formula
var fp = Fingerprint.MintFingerprint("MY_TENANT", "AI-INF.1", 1.0, 1.0, 0.0, 1774800000000);

// Sign for non-repudiation (optional)
var sig = Signing.SignPayload("swt3_sk_my_key", fp, "fraud-detector-prod");

Verify Any Anchor From Your Terminal

echo -n "WITNESS:DEMO_TENANT:AI-INF.1:1:1:0:1774800000000" | sha256sum | cut -c1-12
# Produces a 12-character fingerprint. Compare it to the anchor. If it matches, the anchor is real.

No SDK needed. Works on any machine, any language.

Cross-Language Parity

All SWT3 SDKs produce identical fingerprints from the same inputs. A unified audit trail across your entire stack, verified by shared test vectors at build time.

The Python and TypeScript SDKs include the full witness pipeline: transparent client wrapping, buffer management, clearing engine, adapter support (OpenAI, Anthropic, Bedrock, vLLM, Ollama, LangChain, LangGraph, Microsoft AGT, Google ADK, CrewAI), trust mesh, policy-as-code, and Merkle accumulator. Use them for production AI witnessing. Use this .NET package for embedding fingerprint verification into C# services, ASP.NET middleware, or Azure Functions.

Regulatory Coverage

The SWT3 AI Witnessing Profile maps to:

• EU AI Act: Articles 9, 10, 12, 13, 14, 53, 72
• NIST AI RMF: GOVERN, MAP, MEASURE, MANAGE functions
• ISO 42001: Annex A AI management controls
• NIST 800-53: SI-7 (integrity), AU-2/AU-3 (audit), AC controls
• SR 11-7: Model risk management (financial services)

Privacy

Your prompts and responses never leave your infrastructure. The SDK computes SHA-256 hashes locally and transmits only irreversible hashes and numeric factors. At Clearing Level 3, even the model name is hashed. The witness endpoint is a blind registrar: it stores cryptographic proofs, not your data.

Links

• Website: tenova.io
• Protocol Spec: SWT3-SPEC-v1.0
• Live Demo: sovereign.tenova.io/audit/axm_audit_demo_eu_ai_act_public

SWT3: Sovereign Witness Traceability. We don't run your models. We witness them.

SWT3 and Sovereign Witness Traceability are trademarks of Tenable Nova LLC. Patent pending. Apache 2.0 licensed.

This project is not affiliated with, endorsed by, or sponsored by any third-party AI provider. All third-party trademarks are the property of their respective owners. Use of these names is for identification and interoperability purposes only.