Core Enforcement Modules
The current MVP validates the following backend modules.
Identity Resolution Service
Accepts trusted identity signals from authentication and proofing providers and resolves them into a canonical subject DID and wallet. Ambiguous or invalid mappings are designed to fail closed.
Runtime Gatekeeper
Evaluates consent, wallet status, version compatibility, likeness similarity, operation, resource, and governance policy before returning an authorization decision.
Governed Wallet Container
Binds identity references, proofing outcomes, consent state, assurance metadata, embedding records, and governance state to a stable wallet context.
Decision Proof Object
Creates a canonicalized-signed proof artifact containing identity, consent, assurance, policy, similarity, block context, and decision evidence.
Deterministic Embedding Registry
Stores versioned embedding records with model, preprocessing, configuration, precision, embedding hash, and pipeline manifest information.
Audit Replay Service
Replays and verifies historical decisions against stored hashes, signatures, manifest state, similarity results, and original outcomes.
Validated in the MVP
Canonical identity and wallet resolution
Consent grant and revocation
Deterministic text embedding records
Cosine similarity and threshold gating
Policy-based governance denial
Model-version mismatch blocking
Signed DPO generation
Audit replay
M3 Productization in Progress
AWS ECS staged deployment
Production provenance population
API idempotency
Cryptographically bound consent evidence
Enterprise M2M/API-key access
Tenant isolation and rate limiting TypeScript and Python SDKs
Developer portal and verifier tooling
Lean audit and administration interfaces
Designed for Multiple AI Execution Environments
The same authorization model can be applied to interactive avatars, voice synthesis, image generation, enterprise agents, delegated application actions, and regulated AI workflows.
The enforcement authority remains on the MyAKH backend. SDKs, portals, and verifier tools transport requests or expose results without independently reimplementing consent, similarity, policy, or proof generation.


