Enterprise & Sovereign AI Governance Infrastructure

The Governance Layer
for AI Operations.

Replay-safe evidence, audit receipts, operational memory, and local-first governance for AI coding agents and long-context AI systems. No cloud. No account. No telemetry. Sovereign-capable. Deployable today.

deterministic local-first air-gap capable replay-safe no telemetry authoritative_for_wiw=false stdlib-only
7,188 deterministic tests
passing
18 governance subsystems
in the proof chain
14 dangerous-op patterns
blocked before execution
0 external calls
during governance scan
How It Works

Four steps. Audit trail
from day one.

01
Install & wire hooks

pip install verifaier then install_claude_hooks.sh. No account. No config wizard. Done.

02
Intercept every write

Every Edit, Write, and Bash command Claude generates is intercepted before it lands. Governance scan runs locally in <50ms.

03
Session receipt sealed

At session end, a SHA-256 Merkle root over every tool-call hash is computed. Same inputs always produce the same proof_id.

04
Verify & escalate

Run vai replay --verify at any point. Chain breaks trigger automatic escalation to a named reviewer.

For Developers

Governance in your terminal
in 30 seconds.

Install once. Govern everything Claude writes. No account. No cloud. No configuration beyond a single settings.json.

VerifAIer hooks into Claude Code at the tool-call level. Every Edit, every Write, every Bash command Claude generates is intercepted, analyzed, and receipted. Before the file is saved. Before the command runs.

01 Install: pip install verifaier
02 Wire hooks: bash scripts/install_claude_hooks.sh
03 Govern: every Edit Claude makes is now receipted
# Install pip install verifaier # Wire Claude Code hooks (one command) bash scripts/install_claude_hooks.sh # Scan any file vai check src/auth.py # CI gate vai ci gate HEAD~1 --profile enterprise # Output on every Claude Edit: [VerifAIer] Edit recorded receipt=vai-a1b2c3d4-e5f67890 status=red findings=4 [HIGH] HARDCODED_SECRET line 10 [HIGH] SQL_INJECTION_RISK line 18 authoritative_for_wiw=false
Claude Code Integration

Governance at the
tool-call level.

VerifAIer integrates directly with Claude Code's hook system. Three hooks cover the entire session arc: from the first Edit to the final Stop.

PostToolUse: Edit | Write | MultiEdit
Governance scan + deterministic receipt on every file change
PreToolUse: Bash
Dangerous-op detection before execution; exit 2 blocks the command
Stop: Session end
Session receipt with proof_id, Merkle root over all tool-call input hashes

The session proof_id is a SHA-256 Merkle root over every tool-call input hash in the session. Same session inputs → same hash. Verifiable offline, air-gapped, years later.

Live Session (stderr)

# Claude writes auth.py [VerifAIer] Edit recorded receipt=vai-a1b2c3d4-e5f67890 status=red | findings=6 [HIGH] HARDCODED_SECRET line 10 [HIGH] SQL_INJECTION_RISK line 18 [HIGH] BROAD_EXCEPTION line 24 [HIGH] WEAK_HASH_ALGO line 31 [MED] OVERLY_BROAD_PERMS line 47 [MED] MISSING_INPUT_VALID line 52 Recommendation: escalate to remediation review # Claude tries rm -rf [VerifAIer] BLOCKED: DESTRUCTIVE_RM_RF rm -rf detected — irreversible deletion Recommendation: mv to trash or scope explicitly # Session audit complete Session governance complete Events recorded: 14 Files modified: 5 Findings: 6 (4 high, 2 medium) proof_id: 7a9e3f1c2b8d456e... authoritative_for_wiw=false
Flight Recorder

Watch what AI
actually did.

Every tool call Claude makes, every Edit, Bash, Write, is captured in a deterministic, hash-chained event log. Replay it in a cinematic Replay Studio. Archive it to a forensically signed ZIP. Prove it never changed.

Flight Recorder is local-first, zero-cloud, zero-dependency. The session stays in your filesystem. The replay bundle is a single self-contained .html file you can open offline in any browser. No server. No login.

Four capture levels: TELEMETRY → OPERATIONAL → DEEP_CAPTURE → FORENSIC
Forensic archive: signed ZIP with HMAC-SHA256 per-file manifest (fr-archive-1.0)
Tamper escalation: CHAIN_BREAK, INVALID_SIGNATURE, ARCHIVE_MISMATCH events
Encrypted evidence vault (FRVAULT-1): PBKDF2 + SHAKE-256 + HMAC, stdlib only
Replay Studio: timeline scrubber, causality graph, risk heatmap, reasoning markers
Explore Flight Recorder →
# Start recording vai flight start # All Claude tool calls auto-recorded via hooks # Export cinematic Replay Studio vai flight replay-export <session_id> \ --output session_replay.html # Forensic archive (HMAC-signed ZIP) vai flight archive <session_id> # Verify archive integrity offline vai flight verify-archive archive.zip # Verify result: { "signed": true, "chain_ok": true, "event_count": 42, "tamper_detected": false, "authoritative_for_wiw": false }
Memory Receipts

Seal what AI
actually said.

Memory Receipts are cryptographically sealed, tamper-evident records of the AI advice, decisions, and insights that matter to you. Not screenshots. Not chat logs. Sealed evidence.

Local-first personal AI memory vault. Every receipt includes a SHA-256 proof chain. Any edit to the content breaks the proof, verifiable by anyone, offline, years later. authoritative_for_wiw=false

Three capture levels: Bookmark (0), Receipt (1), Decision/Advice Memory (2)
SHA-256 chain: source_hash + content_hash → proof_id → MR-[id]
Export as ZIP bundle: receipt.json + proof.json + verifier.html (no CDN, no network)
Search: keyword, tag, type, source, date range — local, no embeddings
Explore Memory Receipts →
# Seal an AI advice receipt vai memory seal \ --title "Do not hire VP Sales before PMF" \ --content "Advice: wait until 3+ repeatable closes..." \ --type advice \ --tag hiring --tag pmf # Search your vault vai memory search "hiring pmf" # Export verification bundle vai memory export MR-a3f8c12de901 \ --format zip --output receipt_bundle.zip # Verify offline (any browser) # Open verifier.html in bundle # Seal result: Memory Receipt sealed ID: MR-a3f8c12de901 proof_id: d0e1f2a3b4c5... type: advice (level 2) authoritative_for_wiw: false
Intelligence Layer

Flight Recorder + Memory Receipts.
One operational intelligence layer.

The Intelligence Layer links replay sessions to memory receipts: deterministic lineage, no embeddings, no cloud. Export bundles include the full evidence graph, offline-verifiable.

↔ vai memory link-replay MR-xxx --session ses-yyy ↔ vai memory show-links MR-a3f8c12de901 ↔ vai flight referenced-by ses-8f2a1b3c4d5e
Explore Intelligence Layer →
# Link a replay session to a receipt vai memory link-replay MR-a3f8c12de901 \ --session ses-8f2a1b3c4d5e \ --link-type replay_event # Show all sessions linked to a receipt vai memory show-links MR-a3f8c12de901 # Show receipts that reference a session vai flight referenced-by ses-8f2a1b3c4d5e # Export includes relationship_manifest.json vai memory export MR-a3f8c12de901 \ --format zip # Result: Intelligence link created receipt : MR-a3f8c12de901 session : ses-8f2a1b3c4d5e type : replay_event authoritative_for_wiw: false
The Evidence Problem

Screenshots are not proof.

A screenshot shows pixels. It does not prove when it was taken, whether the AI session was real, or whether the content was edited before capture. A mutable file is not governance evidence. VerifAIer seals the moment: cryptographically, locally, forever.

📷

Screenshot

Can be taken any time. No timestamp you control. No proof of AI session. Pixels only.

NOT VERIFIABLE
📄

Log file

Mutable. No cryptographic seal. Timestamps are filesystem metadata, trivially forged.

NOT VERIFIABLE
🔒

VerifAIer receipt

SHA-256 proof chain. Timestamp is part of the hash. Any edit breaks the proof. Verifiable offline.

CRYPTOGRAPHICALLY SEALED
The AI Black Box

Your AI coding assistant is a black box.
VerifAIer opens it.

Every tool call Claude makes is recorded: what it read, what it wrote, what it ran, what it found. The session is hash-chained into a Merkle seal. You can replay it years later: same inputs, same proof.

Most teams using AI coding assistants have zero forensic capability. When an incident happens, they cannot prove what the AI actually did. VerifAIer fixes this in one command.

🔍
Every tool call recorded
Read, Write, Bash, Edit: all captured with input hashes
📋
Governance scan on every write
18 subsystems scan each file: injection, secrets, weak crypto, and more
🚫
Dangerous ops blocked before execution
rm -rf, DROP TABLE, curl|bash, force push: stopped at the hook
🔗
Cryptographic seal at session end
SHA-256 Merkle root over all events, tamper-evident and replay-safe
Decision Lineage

Prove the decision chain, not just the outcome.

Memory Receipts seal what AI said. Flight Recorder seals what AI did. The Intelligence Layer links them. The result: a decision lineage you can prove to an auditor, a board, or a regulator.

1
AI advice given
"Use event sourcing for the order service" (captured in Flight Recorder session)
ses-8f2a...
2
Decision sealed as Memory Receipt
SHA-256 proof chain locked to the moment of advice
MR-a3f8...
3
Intelligence link created
Receipt linked to session: full decision lineage in links.json
link: reasoning
4
Verifiable offline, any time
Export bundle includes all proofs. Drag verifier.html into any browser
authoritative_for_wiw: false
Local-First

No cloud account.
No vendor dependency.
Fully offline.

Every VerifAIer feature works with zero cloud connectivity. Your evidence chain lives on your machine. Verification requires stdlib SHA-256 only (no VerifAIer install, no network).

Air-gap deployable
No mandatory cloud account
Verification requires no VerifAIer install
No telemetry, no analytics, no tracking
Evidence stays in your jurisdiction
You own your evidence
# Install (Python 3.12+) pip install verifaier # Run a governance scan — no network vai check src/auth.py # Verify a receipt — no VerifAIer needed # Just open verifier.html in any browser open export.zip/verifier.html # All evidence lives here ~/.verifaier/ sessions/ memory_receipts/ links.json
Deployment Spectrum

From solo developer to regulated enterprise deployment.

VerifAIer scales from a single developer sealing receipts on a laptop to a regulated enterprise running an air-gapped instance with full evidence-chain requirements. The proof chain is the same. The architecture scales.

👩‍💻
Solo Developer
pip install, Claude Code hooks, local vault
Free
💼
Small Team
Shared evidence formats, CI gate, SARIF export
Team tier
🏢
Enterprise
Dedicated deployment, compliance docs, SLA, audit packs
Enterprise
🎯
Sovereign
Air-gapped, classified, no cloud ever, perpetual license
Custom
View Pricing →
01 / The Problem
"Governance today is a file in a directory."

Most organizations claim AI governance. What they have is a folder of scan reports, a Confluence page updated before the audit, and a Word document that could have been written after the fact. There is no external proof of timing. No cryptographic evidence that policy was applied. No way to demonstrate to a regulator that governance preceded deployment, not just documentation of governance.

Regulators are beginning to notice. The EU AI Act, NIST AI RMF, and emerging FSI model risk guidance all require verifiable governance evidence. A mutable text file is not verifiable. VerifAIer makes it verifiable.

02 / Architecture

Three properties that matter
when the stakes are real.

01
Deterministic by construction.

Every governance receipt is a pure function of the artifact it covers. Same code, same policy, same tool version: same hash, every time. No timestamp enters the hash preimage. No random seed. No model output that varies run to run. Evidence that cannot replay is not evidence.

02
Locally resident, no phone-home.

No telemetry. No cloud dependency. No external API call during a governance scan. VerifAIer runs inside your perimeter: behind your firewall, inside your air gap, on your classification network. Governance infrastructure that phones home cannot be trusted with what it governs.

03
Regulator-ready evidence.

Merkle-rooted attestation manifests for every governed artifact. Proof chain lineage linking evidence over time. Portable bundles with self-verifiable manifests. Optional cryptographic anchoring to public chains for independent timestamp proof, verifiable without VerifAIer, without an account, without disclosing source code.

03 / Proof Infrastructure

The chain that
never forgets.

The TVAM-lite proof chain links every governance artifact from receipt to bundle. Each hash is a commitment: computable from public inputs, verifiable from first principles, stable across the entire artifact lifecycle. Nothing in this chain depends on a server, a session, or a clock.

The proof_id for each artifact is deterministic: SHA-256(type : hash : merkle_root). It is time-independent, anchor-status-independent, and stable from the moment the artifact exists. Only 64 characters ever reach an external chain.

TVAM-lite Proof Chain

receipt_hash
signing
vault
evidence
proof
bundle_hash
# proof_id derivation proof_id = SHA256( artifact_type + ":" + artifact_hash + ":" + merkle_root ) # On-chain footprint tx.data = proof_id # 64 ASCII chars tx.value = 0 # no AVAX moved # Source code: never # Identity: never
04 / Capabilities

A complete governance runtime,
not a scanner with a dashboard.

AI Coding Governance

AST-level analysis of AI-generated Python and JavaScript. Interprocedural taint tracking across function boundaries. Per-PR governance receipts with Ed25519 signatures. Built for coding agents, not static analysis retrofitted to look that way.

Explore AI Coding →
Deep Session Governance

Full semantic analysis across 200,000+ token sessions. Semantic drift detection, instruction conflict identification, tool-call chain auditing, and information boundary violation detection. Designed for the sessions that actually do damage.

Explore Deep Audit →
Enterprise Readiness

Maturity tier classification across the full 18-subsystem governance fabric. TVAM-lite chain verification. Posture scoring across policy, evidence, identity, and federation dimensions. Pilot onboarding readiness without the theatre.

View Readiness →
Regulator-Ready Evidence Bundles

Executive, SOC, regulator, and sovereign reporting bundles. Air-gap ZIP exports with self-verifiable manifests. SIEM export in JSONL and RFC 5424 syslog format. Evidence packages built for handoff, not for internal consumption.

View Reports →
Fleet and Federation

Multi-node governance topology. Policy synchronization across development teams. Cross-workspace federation with governance lineage preserved. Organization-level posture aggregation. Designed for the enterprise that actually has a fleet.

View Partner Modes →
Cryptographic Attestation

Deterministic Merkle trees over proof-stable artifact fields. Inclusion proofs for selective disclosure. Proof chain lineage with tamper detection. Optional anchoring to Avalanche C-Chain. Only 64 characters touch the public ledger.

View Architecture →
Flight Recorder

The AI session black box. Every tool call hash-chained. Cinematic Replay Studio. Four capture levels from telemetry to forensic. Encrypted evidence vault. Signed forensic archives. Tamper detection. Local-first. Zero cloud.

Explore Flight Recorder →
05 / Deployment

From enterprise perimeter
to air-gapped sovereign.

Enterprise
Inside your perimeter.

Deployed to development infrastructure. Governance scans trigger at every pull request, every coding session, every AI generation event. Evidence packs accumulate. Monthly compliance exports verify the posture held across the entire period, not just the day before the audit.

network corporate intranet, VPN
profiles enterprise, HIPAA, pre-commit
anchoring Avalanche C-Chain (optional)
telemetry none
Sovereign
Inside your air gap.

Air-gapped by design. No external call is made during governance scanning, manifest generation, Merkle computation, or bundle creation. The proof_id (64 ASCII characters) transfers outbound through an approved medium. Three public blockchain values return inbound. The classified environment never connects to a network.

network air-gapped, classified
profiles sovereign, CI-only
anchoring offline payload → manual submit
telemetry none, by architecture
06 / External Attestation

64 characters.
External proof.

The proof_id anchors to the Avalanche C-Chain as a standard EVM transaction: UTF-8 calldata, zero AVAX transferred, no smart contract required. An auditor with a block explorer and the manifest JSON can verify the entire chain of custody without VerifAIer, without an account, without source code.

At $0.001–$0.01 per anchor, governance timestamping disappears as a cost consideration. What remains is an externally verifiable, tamper-evident record that governance preceded deployment. Not a claim. A fact.

Fuji anchoring: web3 connector implemented and tested · live ops require a funded wallet

# vai attest anchor submit # --target avalanche # --network fuji-testnet { "target": "avalanche", "proof_id": "abc123d…f456", "encoding": "utf-8-hex", "note": "Submit as tx.data", "authoritative_for_wiw": false } # tx.data = proof_id (64 chars) # tx.value = 0 AVAX # No source code. # No identity. # No governance findings. # After confirmation: { "anchor_status": "anchored", "anchor_tx_id": "0x…", "anchor_hash": "0x…", "anchor_timestamp": "2026-05-14…" } # proof_id and merkle_root # unchanged. Always.
07 / Infrastructure Access

Structured for the
organizations that need it most.

VerifAIer is available through a pilot agreement, not a self-serve checkout flow. Governance infrastructure for regulated environments requires onboarding, not a credit card.

Evaluation
Pilot Access
By arrangement
30-day structured pilot for development teams evaluating AI governance infrastructure. Full CLI, all governance profiles, evidence pack generation, and TVAM-lite chain verification. Suitable for teams of 1–25.
Contact for Pilot
Air-Gapped Infrastructure
Air-Gapped
Custom · by engagement
Air-gapped deployment for regulated, government, or classified environments. 18-subsystem profile, offline bundle signing, air-gap anchoring workflow, and custom policy registry. Engagement-based.
Contact for Air-Gapped

Start your audit trail
in 30 seconds.

Install locally, wire one hook script, and every AI-generated change is receipted. No SaaS. No telemetry. No external dependencies. Evidence from day one.

contact@verifaier.io
Open the Console → Architecture Partner Modes
Advisory authoritative_for_wiw = false. All VerifAIer outputs are governance evidence, not binding determinations. The system never issues autonomous enforcement actions. Compliance posture is the operator's responsibility.