# AI-Governance Evidence Pack

**Prepared for:** SAMPLE — TRELYAN DEMO (not a real client)
**Order:** demo-sample
**Verdict:** ADMIT — re-derived under the verifier's pinned keys (the pack carries no verdict).
AI GOVERNANCE EVIDENCE PACK — ADMISSION: ADMIT
  pack:         54b58b4fda795336…  [unsigned bundle — hash-bound only]
  integrity:    integrityOk=true  artifactsVerified=true  packagerAnchored=null
  AI GOVERNANCE ADMISSION: ADMIT
    policy:       demo-ai-release v3 (issuer, self-declared: DEMO Compliance (fictional))  hash:bf6b4bbd2ee0b87f…
    authenticity: ownerAnchored=true  window=in-window
    AI GOVERNANCE GATE: PASS (admit)
      subject:      SAMPLE — TRELYAN DEMO model (not a real client)  (authenticated from the signed AIBOM)
      AIBOM grade:  A (Bound)   eval posture: A (registered_standard)
      checks:       modelHashWellFormed=true modelInBom=true subjectConsistent=true distinctSigners=true driftChecked=true driftOk=true
      NOTE: enforces a caller policy over a SELF-ATTESTED record; not a certification or endorsement.
    NOTE: proves the HOLDER OF THE PINNED OWNER KEY set these criteria (issuer/description are
          self-declared labels, not key-bound), over a self-attested record; not a certification.
  NOTE: gate on `admit` (NOT integrity). Re-derives the admission from the embedded SIGNED
        artifacts under the VERIFIER's own pins — verifies the crypto + policy LOGIC of the
        chain; FACTUAL claims inside each leg are trusted on their signatures, NOT independently
        checked. Inherits every leg's honest limit; not a certification of the model.

---
Signed, self-attested AI-governance evidence produced with the TRELYAN verify-pqc toolchain. This is NOT a
certification, NOT an audit opinion, NOT a conformity assessment, NOT a legal-compliance certification, and NOT a
guarantee of quantum safety or model safety. It proves WHO signed WHAT (an AI Bill of Materials, an evaluation, an
execution trace) and that a signed policy admitted the model under the pinned owner keys — it does not attest the
model is adequate, safe, or compliant. Supports (does not constitute) NIST AI RMF / EU AI Act preparation; not
legal or compliance advice.
TRELYAN Inc.