Secure by construction
Compliance is a
runtime property.
PRESIDIO builds hardened open-source software that gates an AI use case, a workload placement or an agent payment before it executes, and keeps signed, locally verifiable evidence that it did. The research programme behind it is Computational Jurisprudence; the governance model behind it is IKI-Gov, from a Springer book out in December 2026.
Where to start
Four situations.
-
You approve AI use cases and must show how you decided.
Run the IKI-Gov checklist per use case and keep a signed record of each gate decision, verifiable without our software.
-
You run or train AI workloads and must justify replicas and cost.
arch-translucency recommends the replication layer and replica count from measured points, and records what ran in a tamper-evident store.
-
Your agents pay over x402 and compliance wants the checks before signing.
PII and policy screening before the signature, a PII-free decision record after it. Free screening key at screen.presidio-group.eu.
-
You hold digital assets and an external auditor must sign the close.
A disclosure pack the auditor reconstructs from its hash. We are selecting a small number of design partners.
Flagship products
Four flagships, one thesis.
One rule applied to four flows: gate before execution, keep signed evidence. Every decision lands as a signed, parent-linked record, and the records verify as one provenance DAG.
-
AI governance
presidio-hardened-ikigov-assess
Decide whether an AI use case may pass its next lifecycle gate, and keep a signed record of that decision. Checklist from the book, mapped to ISO/IEC 42001 and the EU AI Act. Orientation, not a conformity assessment.
v0.29 on PyPI — executes the checklist of the Springer book, out December 2026.
First step: pip install presidio-hardened-ikigov-assess, or book a workshop.
-
Architectural translucency
presidio-hardened-arch-translucency
Choose the Docker or Kubernetes replication layer and replica count that meet the p99 SLO at the lowest cost, calibrated on your measured points. Prometheus exporter, Helm chart and KEDA/HPA output close the loop; the observation history is hash-chained.
Since v0.25, training-run and energy evidence is emitted only after an IKI-Gov gate certificate verifies as OPEN.
First step: pat analyze on one service, then pat calibrate against its measurements.
-
Agentic payments
presidio-hardened-x402
PII and spending-policy checks before an agent signs an x402 payment, and a PII-free decision record after it. Attenuable spending grants, verified offline.
Live screening API at screen.presidio-group.eu. Case study of the Computational Jurisprudence article.
First step: pip install presidio-hardened-x402, then python -m presidio_x402.conformance (seven checks, offline). Free screening key, 100 screenings/day.
-
Treasury close
presidio-hardened-treasury
A quarterly close of digital-asset holdings that your external auditor reconstructs from a single disclosure-pack hash. The close reruns to the identical hash.
Verified end to end against fixtures. Live anchoring and GL adapters land with design partners.
First step: the auditor evidence guide in docs/; design partners (treasury operators, regulated institutions with crypto exposure, their auditors, GL vendors such as NetSuite, SAP, QuickBooks) see "Working with us" in the README.
Book · Springer, December 2026
KI und IT-Governance /
AI and IT Governance.
Vladimir Stantchev's monograph moves from classical IT governance (COBIT, ITIL, ISO/IEC 38500) to AI governance and assembles IKI-Gov: a lifecycle from context to decommissioning, six domains, six measurement dimensions and six quality gates. It is a working heuristic for orientation, not legal advice and not a conformity assessment.
presidio-hardened-ikigov-assess makes the checklist
executable and emits a signed record for every gate decision.
- KI und IT-Governance
German · ISBN 978-3-662-74093-4 · 28 Dec 2026 - AI and IT Governance
English · ISBN 978-3-662-74001-9 · 11 Jan 2027 - Both editions available for preorder from Springer.
Research programme
Computational Jurisprudence.
Agents act in milliseconds; audits run quarterly. The programme makes every consequential action carry machine-checkable evidence of its own policy adherence, verifiable locally and offline by any third party. The anchor article appeared in Future Internet in August 2026.
-
Pillar I
Delegation calculus
Base case proved
-
Pillar II
Runtime compliance proofs
Capability component measured
-
Pillar III
Sealed delegation chains
Proposed
The PRESIDIO products are its compatibility-first instantiation: x402 capability grants and decision records, IKI-Gov gate certificates that arch-translucency verifies before it emits training evidence, the treasury disclosure pack. Signed and visible today, not zero-knowledge. Pillars, publications and the portfolio map →
The brand word
What "hardened" means.
A library earns the PRESIDIO name when it follows these principles and ships with signed release tags, dependency audits in CI and a weekly security audit across every presidio-v repository. The choices trace to twenty years of peer-reviewed work on architectural translucency, SLA enforcement, cloud GRC and fog/edge systems, and a research claim reaches a product only after it is published and measured.
- Open source, by default. Every repository is public on GitHub with a SECURITY.md; the Python libraries are on PyPI.
- Standards-first. Built against OWASP ASVS, OPC UA security profiles, IEC 62443, and x402 — not in-house checklists.
- Assessable. Every project ships with a reproducible audit and a runbook.
Check it yourself.
- OpenSSF Best Practices silver for ikigov-assess, arch-translucency and x402, with Scorecard on each of the three. Treasury runs CI only.
- Signed release tags; PyPI releases through Trusted Publishing with provenance attestation and a CycloneDX SBOM.
- Parsers fuzzed with Atheris; dependency audit in CI.
- A live service: the x402 screening API (OpenAPI at screen.presidio-group.eu/docs).
- The treasury close reruns to the identical disclosure-pack hash; the auditor evidence guide shows how an external auditor reconstructs it.
- Every measured figure in the research reproduces from a public harness.
Supporting catalog
Around the flagships.
The MCP pre-payment screener in front of x402, and continuous cloud-posture audit beside arch-translucency.
Work with us
Five ways to start.
- Workshop. On site and offline-capable: we classify your AI use cases and run each through the IKI-Gov gates. You leave with a report per use case whose manifest you sign with your own key; PRESIDIO countersigns as assessor.
- Assessment. Gate certificates for named use cases, verifiable by a third party without our software.
- Design partnership. Treasury: the first live quarterly close against your GL and your auditor. arch-translucency: calibration against your own services.
- Hosted screening. The x402 screening API, free tier today; the client falls back to local screening if the network is unhealthy.
- Open source. Everything above runs on public code. Issues on GitHub; vulnerabilities through each repository's SECURITY.md.
Write to office@presidio-group.eu.
Security disclosures go to the SECURITY.md of the
relevant repository, not to this address.
Vitosha Blvd. 3
Sofia 1000, Bulgaria