Sovereign LLM Trust Infrastructure · Licensable IP

Provable AI Act compliance,
as infrastructure — not a PDF.

NI-Stack turns every LLM interaction into a post-quantum-signed, browser-verifiable audit receipt — screened on-premise, on commodity CPU, mapped to EU AI Act Art. 12 / Annex IV. Peer-reviewed. Buyer-reproducible. Available for licensing or acquisition.

Licensing & partnership enquiries See the measured proof
0 injection TPR @ 4.0% FPR Post-quantum FIPS-204 ML-DSA-65 2 IEEE papers, reproduced On-prem · prompt never leaves
The EU AI Act gold nugget

POAW — Proof-of-Agent-Work receipts

Proven & measured

Every verdict is hashed into an append-only Merkle log, signed with FIPS-204 ML-DSA-65 (real 3309-byte post-quantum signatures, not stubs), independently timestamped (RFC-3161), and exported as a W3C Verifiable Credential an auditor checks offline, in a browser — never trusting our servers.

3309-byte

genuine ML-DSA-65 signatures

96

assertions: replay, inflation & forgery all caught

Offline

browser-verifiable against a did:web key

▶  Watch the 60-second explainerExplore all 5 POAW use cases →

POAW is the differentiated asset: no other guardrail ships a portable, offline-verifiable, post-quantum evidence receipt mapped to the AI Act. It is what a compliance-platform vendor licenses.

The stack — honestly scoped

Two proven subsystems, and a research portfolio

We license what is measured and real, and label the frontier as frontier. Overclaiming kills IP deals in diligence — so we don't.

AEGIS
Proven

AEGIS — CPU-first guardrail

A sovereign injection/content cascade led by a zero-dependency Aho-Corasick automaton (median 1.73 ms) that blocks before any GPU spend. 97.7% TPR / 4.0% FPR on public corpora; the prompt never leaves the premises.

LEDGER
Proven

LEDGER / POAW — audit substrate

The post-quantum, browser-verifiable receipt layer above. Real ML-DSA-65 signatures; tamper, replay and forgery detected across 96 assertions. Mapped to EU AI Act Art. 12 / Annex IV.

Research

ORACLE · AUGUR

Memory & forecasting modules — under evaluation, not sold as finished.

Research

SCRIBE · SIREN

Compliance-export & monitoring adapters (EU AI Act Annex IV, ISO 42001).

Research

JOULE

Energy-accounting module — measured claims pending.

Proof, not assertion

Everything here is measured and reproducible

97.7% / 4.0% FPR

Injection detection on public corpora (hackerprompt, jailbreakhub vs OR-Bench) — buyer-reproducible with one command.

2 papers · IEEE

Peer-review format, dated manifests, disclosed gaps (AI Summit Styria 2026, IT-Security track).

Sovereign · on-prem

Runs on commodity CPU before any GPU; no prompt exfiltration — a data-residency win by construction.

Honest scope — this is why buyers trust us. AEGIS + POAW are proven; a two-number evaluation methodology is a third contribution. We publish gaps in the same breath — narrative-jailbreak detection is capped, key custody is software-only today (hardware roadmap), and the research modules are labelled as such. We retired our own hyped modules when measurement didn't hold them up. Verifiability is the product.
Why now — EU AI Act

The record-keeping duty, discharged as a machine-checkable artifact

The AI Act's logging & record-keeping obligations (Art. 12, Art. 19, Annex IV) are today produced as human-authored documents — asserted, not proven, and stale the moment the system changes. A signed, timestamped, offline-verifiable receipt per action discharges the same duty as evidence an auditor independently checks.

  • Maps to Art. 12 / 19 logging & Annex IV record-keeping
  • Sovereign / on-prem — satisfies data-residency (GDPR, sector rules)
  • Portable evidence that never depends on the vendor's servers
We claim a mapping, not conformity.

Conformity is a legal determination against harmonized standards and, for high-risk systems, a notified body — which a technical artifact cannot assert on its own. Verifiable evidence is a precondition for conformity, never a substitute. Stating that line precisely is why regulated buyers and licensees take the technology seriously.

For licensees & acquirers

This IP is available to license or acquire

Built for AI-governance platforms, compliance SaaS, and security vendors who need a differentiated, post-quantum evidence layer their competitors don't have.

ModelWhat it isFit
License + royaltyEmbed POAW as your "EU AI Act evidence" module; per-deployment royalty. Non-exclusive.Governance / compliance platforms
Exclusive field licenseUpfront fee + royalty, exclusive in your field of use (we retain adjacent fields).A strategic platform partner
AcquisitionOne-time asset sale — patents, code, papers, and the browser verifier.Strategic acquirer / corp-dev

Data room available under NDA: patent status, buyer-reproducible benchmarks, architecture, and dependency provenance.

Let's talk

Partner with us on provable trustworthiness

Licensing, royalty, or acquisition — start with a 20-minute conversation and the evidence pack.

✉  IP@destill.ai
Request the evidence pack