Enterprise AI Governance
Infrastructure
VerifAIer Sentinel attaches a cryptographically-sealed audit receipt to every AI-generated file change, Bash command, and tool call in your Claude Code sessions. Run it in your terminal today: no account, no cloud, no external dependencies.
AI coding agents now modify critical infrastructure, financial systems, and regulated codebases. Yet most teams have no structured way to audit what an AI did, why it did it, or whether the outputs can be trusted by a regulator, an acquirer, or a governance board.
VerifAIer Sentinel provides the governance infrastructure layer that sits below the AI agent: deterministic, local-first, and model-provider independent. Every session produces a cryptographically-linked audit receipt. Every receipt feeds a deterministic governance chain that can be verified offline.
It is advisory infrastructure, not enforcement. It gives humans the evidence they need to make governance decisions. It does not make those decisions for them.
Every output is a pure function of inputs. Same artifacts, same hash. No probabilistic scoring, no machine learning inference, no non-deterministic state. Posture rules are explicit conditions, not learned thresholds.
authoritative_for_wiw = false is hardcoded and non-configurable.
VerifAIer provides evidence; humans make governance decisions. The system never issues binding verdicts.
All state lives in local JSON files under .verifaier/.
No external APIs, no remote servers, no telemetry. Deploy with pip install verifaier
on a disconnected machine. Evidence bundles export to a single ZIP verifiable by anyone with a browser.
Timestamps never enter any hash preimage. Rebuilding the workspace from the same artifacts always produces
the same workspace_id. The governance chain is replayable and verifiable.
The core system uses Python's standard library only. Optional Ed25519 signing requires the
cryptography package. No hidden supply-chain dependencies.
Absent subsystems produce is_present=false, artifact_hash="",
never an exception. Operators can review which subsystems are degraded via
vai readiness check; posture tier drops transparently without halting the session.
No account required. Install, wire hooks, govern. Evidence stays in your filesystem.
bash install_claude_hooks.sh
vai check src/
No internet required after pip install. All signing and verification runs locally. Evidence bundles are self-contained ZIPs.
# Output: ./evidence-bundle.zip
# Verifiable offline, any browser
Gate PRs on governance posture. Block merges when findings exceed policy threshold. Receipt artifacts attach to CI run.
--profile enterprise \
--fail-on high
TVAM-lite: The Governance Proof Chain
The workspace_hash is the TVAM-lite top-level state artifact:
a single deterministic fingerprint of the entire enterprise governance fabric.
It can be shared with regulators, acquirers, or governance boards as a tamper-evident summary.
| Invariant | Enforcement |
|---|---|
| authoritative_for_wiw = False | Hardcoded in all dataclasses and output dicts |
| is_advisory_only = True | Hardcoded in all dataclasses and output dicts |
| No timestamps in hash preimages | Only structural fields enter cjson() before sha256 |
| 7S never writes 7A–7R artifacts | All 7S writes go to .verifaier/enterprise_workspace/ only |
| Absent artifacts degrade gracefully | is_present=False, artifact_hash="" (no exceptions raised) |
| Deterministic rebuild | build_workspace() is a pure function of artifact file contents |
| stdlib only | No external deps; optional Ed25519 via cryptography package |
Deploy AI Governance Infrastructure
Available for enterprise teams, public-sector agencies, and sovereign AI infrastructure deployments. Local-first, no SaaS, no telemetry, no external dependencies.
contact@verifaier.io