Secure by construction
Compliance is a
runtime property.
PRESIDIO builds hardened open-source software that gates an AI use case, a workload placement or an agent payment before it executes, and keeps signed, locally verifiable evidence that it did. The research programme behind it is Computational Jurisprudence; the governance model behind it is IKI-Gov, from a Springer book out in December 2026.
Where to start
Four situations.
-
You approve AI use cases and must show how you decided.
Run the IKI-Gov checklist per use case and keep a signed record of each gate decision, verifiable without our software.
-
You run or train AI workloads and must justify replicas and cost.
arch-translucency recommends the replication layer and replica count from measured points, and records what ran in a tamper-evident store.
-
Your agents pay over x402 and compliance wants the checks before signing.
PII and policy screening before the signature, a PII-free decision record after it. Free screening key at screen.presidio-group.eu.
-
You hold digital assets and an external auditor must sign the close.
A disclosure pack the auditor reconstructs from its hash. Design partners are welcome if their external auditor joins from the start.
Flagship products
Four flagships, one thesis.
One rule applied to four flows: gate before execution, keep signed evidence. Every decision lands as a signed, parent-linked record. Gate certificates, workload evidence and payment decisions already chain into one provenance DAG; the treasury close joins it with its first design partner.
-
AI governance
presidio-hardened-ikigov-assess
Decide whether an AI use case may pass its next lifecycle gate, and keep a signed record of that decision. Checklist from the book, mapped to ISO/IEC 42001 and the EU AI Act. Orientation, not a conformity assessment.
v0.29 on PyPI — executes the checklist of the Springer book, out December 2026.
First step: pip install presidio-hardened-ikigov-assess, or book a workshop.
-
Architectural translucency
presidio-hardened-arch-translucency
Choose the Docker or Kubernetes replication layer and replica count that meet the p99 SLO at the lowest cost, calibrated on your measured points. Prometheus exporter, Helm chart and KEDA/HPA output close the loop; the observation history is hash-chained.
Since v0.25, training-run and energy evidence is emitted only after an IKI-Gov gate certificate verifies as OPEN.
First step: pat analyze on one service, then pat calibrate against its measurements.
-
Agentic payments
presidio-hardened-x402
PII and spending-policy checks before an agent signs an x402 payment, and a PII-free decision record after it. Attenuable spending grants, verified offline.
Live screening API at screen.presidio-group.eu. Case study of the Computational Jurisprudence article.
First step: pip install presidio-hardened-x402, then python -m presidio_x402.conformance (seven checks, offline). Free screening key, 100 screenings/day.
-
Treasury close
presidio-hardened-treasury
A quarterly close of digital-asset holdings that your external auditor reconstructs from a single disclosure-pack hash. The close reruns to the identical hash.
Verified end to end against fixtures. Live anchoring and GL adapters land with design partners.
First step: the auditor evidence guide in docs/; design partners (treasury operators, regulated institutions with crypto exposure, their auditors, GL vendors such as NetSuite, SAP, QuickBooks) see "Working with us" in the README.
Book · Springer, December 2026
KI und IT-Governance /
AI and IT Governance.
Vladimir Stantchev's monograph moves from classical IT governance (COBIT, ITIL, ISO/IEC 38500) to AI governance and assembles IKI-Gov: a lifecycle from context to decommissioning, six domains, six measurement dimensions and six quality gates. It is a working heuristic for orientation, not legal advice and not a conformity assessment.
presidio-hardened-ikigov-assess makes the checklist
executable and emits a signed record for every gate decision.
- KI und IT-Governance
German · ISBN 978-3-662-74093-4 · 28 Dec 2026 - AI and IT Governance
English · ISBN 978-3-662-74001-9 · 11 Jan 2027 - Both editions available for preorder from Springer.
Research programme
Computational Jurisprudence.
Agents act in milliseconds; audits run quarterly. The programme makes every consequential action carry machine-checkable evidence of its own policy adherence, verifiable locally and offline by any third party. The anchor article appeared in Future Internet in August 2026.
-
Pillar I
Delegation calculus
Base case proved
-
Pillar II
Runtime compliance proofs
Capability component measured
-
Pillar III
Sealed delegation chains
Proposed
The PRESIDIO products are its compatibility-first instantiation: x402 capability grants and decision records, IKI-Gov gate certificates that arch-translucency verifies before it emits training evidence, the treasury disclosure pack. Signed and visible today, not zero-knowledge. Pillars, publications and the portfolio map →
The brand word
What "hardened" means.
A library earns the PRESIDIO name when it follows these principles and ships with signed release tags, dependency audits in CI and a weekly security audit across every presidio-v repository. The choices trace to twenty years of peer-reviewed work on architectural translucency, SLA enforcement, cloud GRC and fog/edge systems, and a research claim reaches a product only after it is published and measured.
- Open source, by default. Every repository is public on GitHub with a SECURITY.md; the Python libraries are on PyPI.
- Standards-first. Built against OWASP ASVS, OPC UA security profiles, IEC 62443, and x402 — not in-house checklists.
- Assessable. Every project ships with a reproducible audit and a runbook.
Check it yourself.
- OpenSSF Best Practices silver for all four flagships, with Scorecard on each: ikigov-assess, arch-translucency, x402, treasury.
- Signed release tags; PyPI releases through Trusted Publishing with provenance attestation and a CycloneDX SBOM.
- Parsers fuzzed with Atheris; dependency audit in CI.
- A live service: the x402 screening API (OpenAPI at screen.presidio-group.eu/docs).
- The treasury close reruns to the identical disclosure-pack hash; the auditor evidence guide shows how an external auditor reconstructs it.
- Every measured figure in the research reproduces from a public harness.
Supporting catalog
Around the flagships.
The MCP pre-payment screener in front of x402, and continuous cloud-posture audit beside arch-translucency.
Work with us
Five ways to start.
- AI-Ready workshop. Half a day remote or one day on site, from €1,900 net: your AI use cases run through the IKI-Gov gates, with a gate record per use case that you sign with your own key and PRESIDIO countersigns.
- AI-Ready assessment. Three to five use cases in four weeks, from €12,000 net: ISO/IEC 42001 and EU AI Act gaps, remediation plan, signed evidence pack.
- DigiPay. A one-day readiness workshop for agent payments (€4,900 net), then a design-partner pilot. The x402 screening API has a free tier today.
- Design partnership. Treasury: the first live quarterly close against your GL, with your auditor at the table. arch-translucency: calibration against your own services.
- Open source. Everything above runs on public code. Issues on GitHub; vulnerabilities through each repository's SECURITY.md.
Book a 30-minute call Request an offer
Or write to office@presidio-group.eu. Prices are net and for business customers only.
Security disclosures go to the SECURITY.md of the
relevant repository, not to this address.
Vitosha Blvd. 3
Sofia 1000, Bulgaria