Status

From reference implementation to production: our progress across custody, disclosure, inference governance, erasure and verification.

The five capabilities

Custody

Your organization would hold the main memory store, separate from AI providers.

Prototype check: Context is compiled from the organization-held vault; providers receive selected disclosures rather than the whole store.

Evidence availability and limits

DesignedTested in reference implementation

Governed disclosure

Each disclosure would be checked against the permissions for that tool and task.

Prototype check: Restricted, third-party and health-data rules are checked in the reference implementation; disclosure manifests are reproducible.

Evidence availability and limits

DesignedTested in reference implementation

Inference governance

Inferences recorded by Vivendur would retain source links and could be reviewed or removed.

Prototype check: Source links, revision history and exclusion below a configured confidence threshold are checked in the reference implementation.

Evidence availability and limits

DesignedTested in reference implementation

Scoped erasure

Erasure would cover selected governed records and their tracked derivations.

Prototype check: The reference implementation checks that tracked derivations are removed, erased records are excluded from later context, and a certificate identifies the recorded erasure set.

Evidence availability and limits

DesignedTested in reference implementation

Verifiable records

Receipts and ledger checks would help a customer inspect disclosures and changes.

Prototype check: The reference implementation checks detection of changes, deletions and reordering in its hash-chained ledger.

Evidence availability and limits

DesignedTested in reference implementation

Next milestones

  1. Complete the production core and compare it with the reference implementation using shared test cases.
  2. Publish versioned implementation details, test outputs, test dates and a threat model with known limitations.
  3. Release a public tool for checking disclosure receipts and ledger records.
  4. Arrange independent review of the production core and define readiness criteria before handling sensitive partner data.
  5. Agree pilot scope, safeguards and commercial terms with suitable design partners.

We’re inviting design-partner conversations to help define useful workflows and evaluation priorities. Any pilot will have an agreed scope, readiness criteria and terms.

Updated November 1, 2026. Architecture & verification · Our commitments