{"schema":"https://advancedaisociety.org/poc/v0.1/conformance-statement","standard":"Advanced AI Society · LF Decentralized Trust — Proof-of-Control","standardVersion":"v1.0-working-draft (EAT profile v0.1)","eatProfile":"https://advancedaisociety.org/poc/v0.1","statementId":"POC-STMT-SHTEG-2026-10-28","claimedAt":"2026-10-28T23:20:00.000Z","conformanceStage":"Self-Declared (with Continuous Automated CI & Runtime Gate Enforcement)","organization":{"legalName":"Shteg.ai LLC","clinicalCoveredEntity":"Ridgefield Eye Physicians & Surgeons PLLC","accountableOfficer":"Dalip Turkeshi (Owner, HIPAA Security Officer & Chief Architect)","website":"https://shteg.ai","proofOfControlUrl":"https://shteg.ai/proof-of-control","wellKnownUrl":"https://shteg.ai/.well-known/proof-of-control.json","liveVerifierEndpoint":"https://shteg.ai/api/proof-of-control/verify"},"systemIdentification":{"name":"shteg.ai Clearinghouse & ShtegMed Agentic Clinical/RCM Platform","version":"2026.10.28-strict","environments":["Multi-Tenant GCP Cloud (us-east4, Cloud Run + Cloud SQL + Cloud KMS)","Single-Tenant Dedicated VPC with Customer-Managed Encryption Keys (CMEK)","Sovereign On-Premise Air-Gapped Kubernetes (Helm + Local Dex IdP + Local vLLM/MedGemma)"],"agbomDigest":"sha-256:02acd573bf7babcb5f96a68e25a2b5b495a1e6f8a6e747138476471b5e1703eb","policyBundleHash":"sha-256:615cf8ccc9472feeaf1a9b1e22e41da8d2173c93e75ecc7f0c9185377547f0f8"},"systemBoundary":{"inScopeActions":["Ambient clinical scribe audio/transcript capture (Guardrail G3 consent gate)","Clinical Decision Support & medical translation model invocations (Guardrail G5 DLP gate + G6 DSI envelope)","CPT / ICD-10 coding proposals & NCCI/MUE/Modifier-25 pre-submission 837P claim scrubbing (Guardrail G1/G2)","Provider primary-source verification & OIG-LEIE/NPPES/PECOS sanction screening (Condition 6)","Six-Condition Settlement Gate evaluation, BSA/AML + OFAC velocity checks, and 835 ERA waterfall reconciliation (Guardrail G9/G10)","Model Context Protocol (MCP) JSON-RPC 2.0 tool invocations (/api/mcp)"],"excludedActionClasses":[{"actionClass":"Diagnostic Image Analysis / Autonomous SaMD Image Interpretation","rationale":"Hard-excluded from production under Guardrail G4 (checkG4 + /api/ai/diagnostic-image HTTP 503) pending separate FDA 510(k)/De Novo clearance."},{"actionClass":"Pre-Remittance Advance Origination from FBO Custodial Accounts","rationale":"Forbidden by architectural invariant FBO_CAN_ORIGINATE_ADVANCE === false (Guardrail G10); FBO accounts hold 835 remittances solely to repay the pool after funds land."},{"actionClass":"Unattended Autonomous Clinical Chart Mutation or Prescription Signing","rationale":"Forbidden by Propose-Never-Dispose doctrine (Guardrail G1/G2); signed encounters reject PUT with HTTP 409 and require human clinician cryptographic sign-off."}]},"domainsClaimed":["C1 Provenance","C2 Privacy","C3 Portability","C4 Authorization","C5 Identity","C6 Security"],"claimRegister":[{"domainId":"C1","domainName":"Provenance","claimId":"POC-SHTEG-C1-01","verifiableFact":"Every clinical encounter, CPT/ICD-10 coding proposal, X12 837P claim scrub, and 835 ERA settlement instruction carries an algorithm-tagged RFC 8785 digest (chartHash / packetHash) and Agent Bill of Materials (agbom_digest) chained into an append-only WORM ledger.","interceptionBoundary":"Chart Sign-Off Gate & @shtegmed/attest-core Envelope Builder","mechanismUsed":"RFC 8785 JCS Canonicalization + SHA-256 Hash Chain + RFC 6962 Merkle Tree + Ed25519 Signature","evidencePropertiesMet":["Binary","Contemporaneous","Tamper-evident","Transparent"],"verifiabilityTier":"Tier 4 (Self-Enforcing)","codeEvidencePath":"packages/attest-core/src/envelope.ts; apps/web/src/lib/settlement/worm-ledger.ts"},{"domainId":"C2","domainName":"Privacy","claimId":"POC-SHTEG-C2-01","verifiableFact":"No raw patient PHI crosses the AI model boundary (Guardrail G5 pre-model Cloud DLP Safe Harbor de-identification) or the settlement/evidence rail (assertNoPhi + hash-only detailsHash Commitments per C1.4, C2.3, C2.4).","interceptionBoundary":"PRE_CALL_TOOL_INVOCATION (Cloud DLP De-Identification Gateway & WORM Audit Sink)","mechanismUsed":"Mandatory Pre-Model Redaction (MODIFY with dispatched_snapshot_hash) + Hash-Only Commitment Stream","evidencePropertiesMet":["Binary","Contemporaneous","Tamper-evident","Transparent"],"verifiabilityTier":"Tier 4 (Self-Enforcing)","codeEvidencePath":"apps/web/src/lib/security/dlp.ts; apps/web/src/lib/audit.ts"},{"domainId":"C3","domainName":"Portability","claimId":"POC-SHTEG-C3-01","verifiableFact":"All control evidence tokens conform to the vendor-neutral IETF EAT / Proof-of-Control JSON Schema (https://advancedaisociety.org/poc/v0.1) and SMART on FHIR R4 / ANSI X12 envelopes, verifiable offline without operator credentials across Cloud, Dedicated VPC, and Sovereign Air-Gapped K8s.","interceptionBoundary":"Public Open Verification Endpoint (/.well-known/proof-of-control.json & /api/proof-of-control/verify)","mechanismUsed":"Standardized EAT JSON Claim Set + Self-Contained Public Key & Reference Values","evidencePropertiesMet":["Binary","Contemporaneous","Tamper-evident","Transparent"],"verifiabilityTier":"Tier 3 (Trust-Minimized)","codeEvidencePath":"apps/web/src/lib/compliance/proof-of-control.ts; packages/attest-core/src/jcs.ts"},{"domainId":"C4","domainName":"Authorization","claimId":"POC-SHTEG-C4-01","verifiableFact":"Agents operate strictly under Propose-Never-Dispose (Guardrail G1/G6/G10): no AI agent can mutate a signed clinical chart, originate an FBO advance (FBO_CAN_ORIGINATE_ADVANCE === false), or authorize a payout bypassing the deterministic 6-condition settlement gate.","interceptionBoundary":"Action Interception Gateway (Six-Condition Settlement Gate & Route-Authz Inline Guard)","mechanismUsed":"Capability-Bound Process Separation + Six-Condition Deterministic Conjunction + BSA/AML Dual-Control Gate","evidencePropertiesMet":["Binary","Contemporaneous","Tamper-evident","Transparent"],"verifiabilityTier":"Tier 4 (Self-Enforcing)","codeEvidencePath":"apps/web/src/lib/settlement/gate-core.ts; apps/web/src/lib/fintech/bsa-aml-gate.ts"},{"domainId":"C5","domainName":"Identity","claimId":"POC-SHTEG-C5-01","verifiableFact":"Every agent action binds a DID agent identifier (did:web:shteg.ai:agents:*), the initiating human principal (clinician Luhn-valid NPI or dual-control officer ID), and primary-source verification posture (OIG-LEIE, SAM.gov, NPDB, state board, PECOS).","interceptionBoundary":"TASK_INITIALIZATION & Settlement Gate Condition 6 (Provider Screening + Strict Enrollment)","mechanismUsed":"DID Agent Attribution + Luhn-10 NPI Validation + Primary-Source Verification (PSV) Anchor","evidencePropertiesMet":["Binary","Contemporaneous","Tamper-evident","Transparent"],"verifiabilityTier":"Tier 4 (Self-Enforcing)","codeEvidencePath":"apps/web/src/lib/credentialing/credentialing-core.ts; apps/web/src/lib/ai/dsi.ts"},{"domainId":"C6","domainName":"Security","claimId":"POC-SHTEG-C6-01","verifiableFact":"Code and policy bundles are measured at execution, all 343 mutating routes enforce inline tenant authorization (lint-route-authz.mjs), and daily 3-way reconciliation (WORM ledger vs bank vs FHIR) triggers an automatic settlement.halt on any 1-cent variance (Guardrail G9).","interceptionBoundary":"CI/Runtime Guardrail Gate & Nightly Three-Way Reconciliation Halt Engine","mechanismUsed":"SHA-384 Runtime Measurement + Retention-Locked WORM Sink + Automated Variance Halt","evidencePropertiesMet":["Binary","Contemporaneous","Tamper-evident","Transparent"],"verifiabilityTier":"Tier 4 (Self-Enforcing)","codeEvidencePath":"apps/web/src/lib/settlement/reconciliation.ts; scripts/guardrails-check.mjs"}],"trustAssumptionDisclosure":[{"assumptionId":"TA-01","category":"Mathematical","subject":"SHA-256 / SHA-384 (FIPS 180-4), RFC 6962 Merkle Trees, RFC 8785 JCS, and Ed25519 (RFC 8032)","linkedClaims":["POC-SHTEG-C1-01","POC-SHTEG-C2-01","POC-SHTEG-C3-01","POC-SHTEG-C4-01","POC-SHTEG-C5-01","POC-SHTEG-C6-01"],"description":"Relies on the collision and second-preimage resistance of SHA-256/SHA-384 (with 0x00/0x01 Merkle domain separation) and existential unforgeability of Ed25519 signatures over deterministic RFC 8785 canonical byte strings.","mitigationAndResidualRisk":"All digests carry explicit algorithm tags (sha-256:, sha-384:) and tokens carry alg (\"EdDSA\") per C6.3.4 so post-quantum migrations (ML-DSA-44 / Ed25519+ML-DSA-44) never orphan historical evidence."},{"assumptionId":"TA-02","category":"Hardware","subject":"Google Cloud Confidential Computing (Intel TDX / AMD SEV-SNP) & Cloud KMS HSM","linkedClaims":["POC-SHTEG-C1-01","POC-SHTEG-C6-01"],"description":"Tier 3/4 hardware-attested deployments trust the silicon root of trust (Intel TDX / AMD SEV-SNP) and FIPS 140-3 Level 3 Cloud KMS HSM key protection.","mitigationAndResidualRisk":"Tokens explicitly declare submods.attestation.platform (\"INTEL_TDX\" vs \"SOFTWARE\"). Our validator refuses to credit a SOFTWARE token above Tier 2 unless externally anchored."},{"assumptionId":"TA-03","category":"Vendor","subject":"Google Cloud Platform (Cloud Run, Cloud SQL, Cloud DLP, Retention-Locked GCS WORM Bucket)","linkedClaims":["POC-SHTEG-C2-01","POC-SHTEG-C6-01"],"description":"Multi-tenant cloud deployments rely on GCP HIPAA-covered infrastructure and GCS retention locks (is_locked=true) for off-database WORM persistence.","mitigationAndResidualRisk":"Mitigated by Customer-Managed Encryption Keys (CMEK) and the Sovereign Air-Gapped Kubernetes deployment option, which eliminates external cloud vendor runtime dependency."},{"assumptionId":"TA-04","category":"Implementation","subject":"Shteg Action Interception Gateway, Six-Condition Settlement Gate & Guardrails-as-CI","linkedClaims":["POC-SHTEG-C2-01","POC-SHTEG-C4-01","POC-SHTEG-C5-01","POC-SHTEG-C6-01"],"description":"Assumes no un-intercepted code path exists in the application runtime that can dispatch a tool call, mutate a signed chart, or execute a payout outside the gate.","mitigationAndResidualRisk":"Enforced mechanically on every build by scripts/guardrails-check.mjs --strict (15/15 checks + G1–G10 signed attestations) and scripts/lint-route-authz.mjs (343 mutating routes scanned)."},{"assumptionId":"TA-05","category":"Distributed","subject":"Federal & State Primary-Source Registries (HHS OIG-LEIE, CMS NPPES, SAM.gov, NPDB, State Boards)","linkedClaims":["POC-SHTEG-C5-01"],"description":"Provider sanction and license verification relies on the authoritative federal and state primary-source registries queried by Gate Condition 6.","mitigationAndResidualRisk":"Strict fail-closed contract: any unreachable, unconfigured, or stale registry source folds to INDETERMINATE and halts the settlement gate rather than fabricating a clear."}],"continuousMonitoringMetrics":{"proofCoverageRatio":"1.0000 (100% of in-scope mutating and AI routes gated)","mutatingRoutesScanned":343,"aiDsiRoutesVerified":25,"automatedGuardrailChecksPassed":"15/15","signedWormAttestations":"9/9","reconciliationCadence":"Daily 3-way tie-out (WORM ledger vs Bank vs FHIR) with automatic settlement.halt on variance"},"verificationMaterial":{"ed25519PublicKeyHex":"d75a980182b10ab7d54bfed3c964073a0ee172f3daa62325af021a68f707511a","signatureAlgorithm":"EdDSA (Ed25519 / RFC 8032)","canonicalizationScheme":"RFC 8785 (JSON Canonicalization Scheme)","merkleTreeProfile":"RFC 6962 (0x00 leaf prefix, 0x01 interior node prefix, SHA-256)","sampleTrajectoryTokens":[{"eat_profile":"https://advancedaisociety.org/poc/v0.1","iat":1793246400,"iss":"https://shteg.ai/proof-of-control","nonce":"shteg-poc-nonce-0001","poc_claims":{"agbom_digest":"sha-256:02acd573bf7babcb5f96a68e25a2b5b495a1e6f8a6e747138476471b5e1703eb","agent_id":"did:web:shteg.ai:agents:ambient-scribe-g3","alg":"EdDSA","canonical_snapshot_hash":"sha-256:87f5c3f8256705f160266d523f264ead1016f59a6c4e2382112c601210e27c02","chain_head":"sha-256:46adfb1c597de38baab8af62b4e96b5d673cbcfafa37140c8ac28ec8aad8560b","initiating_user":"clinician:npi:1999999909","interception_point":"PRE_CALL_TOOL_INVOCATION","merkle_root":"sha-256:d25e278a9521bb2db54221cc61241e92029bfd16659fbabf7a17354726d55ae4","path_summary_hash":"sha-256:84195d0a815d3545740ce862a496036da69f1294347c6af82320fdc0e90efeed","policy_bundle_hash":"sha-256:615cf8ccc9472feeaf1a9b1e22e41da8d2173c93e75ecc7f0c9185377547f0f8","reason":"Guardrail G3: active per-encounter AMBIENT_SCRIBE two-party consent verified and recording indicator active.","step_index":0,"target_resource":"urn:shteg:encounter:enc_sbx_01J9X7K2:ambient-audio","tree_size":1,"verdict":"ALLOW"},"submods":{"attestation":{"measurement":"sha-384:661583cac47167fcc33000a97cece9961af9488bda9b33b84b8326adf034c22f274685878739a8f8e88f4cc3e1b58b04","platform":"INTEL_TDX","reference_values_uri":"https://shteg.ai/.well-known/proof-of-control.json"}},"signature":"49f40825a4cae787faa032de954b70778378176a786907ef1d1806119d6aa523699d9591f63594472f08fbef75010f66fbc3d0181ac183dfffc3d7ebd1234d07"},{"eat_profile":"https://advancedaisociety.org/poc/v0.1","iat":1793246401,"iss":"https://shteg.ai/proof-of-control","nonce":"shteg-poc-nonce-0002","poc_claims":{"agbom_digest":"sha-256:02acd573bf7babcb5f96a68e25a2b5b495a1e6f8a6e747138476471b5e1703eb","agent_id":"did:web:shteg.ai:agents:dlp-gateway-g5","alg":"EdDSA","canonical_snapshot_hash":"sha-256:2481c890ba2188da542e78ff4c94e45e59d40b0bab60ec6b838e5f258ebb25b5","chain_head":"sha-256:ba4e3091b5384e0c035d491132182afa91c8059d416932de8e5e65399f3c0780","initiating_user":"clinician:npi:1999999909","interception_point":"PRE_CALL_TOOL_INVOCATION","merkle_root":"sha-256:42baed95594218cd7ca34bbcf0f7fc4fd52fe187831e710ab7d79d279c2499b0","path_summary_hash":"sha-256:9fc80fe5737c906d6919d17d7fb4356f9c2dd95dbbeaeb6dccade8afff8a3235","policy_bundle_hash":"sha-256:615cf8ccc9472feeaf1a9b1e22e41da8d2173c93e75ecc7f0c9185377547f0f8","reason":"Guardrail G5: pre-model Cloud DLP Safe Harbor de-identification stripped 18 HIPAA identifiers before model invocation.","step_index":1,"target_resource":"urn:shteg:vertex-ai:gemini-4-carbon-high","tree_size":2,"verdict":"MODIFY","dispatched_snapshot_hash":"sha-256:dd80c78848955cec32944562c2eea21465c115c6f11a30beb54d10d19c58e007"},"submods":{"attestation":{"measurement":"sha-384:661583cac47167fcc33000a97cece9961af9488bda9b33b84b8326adf034c22f274685878739a8f8e88f4cc3e1b58b04","platform":"INTEL_TDX","reference_values_uri":"https://shteg.ai/.well-known/proof-of-control.json"}},"signature":"8d067e37b325a0686b8c5c9b17ad2e0ddc530687ccdf1b9f0d4b41ab1759bc06de1e31174c11368903baa17e4e9930ab967126ea456fda593f4a7006520d140b"},{"eat_profile":"https://advancedaisociety.org/poc/v0.1","iat":1793246402,"iss":"https://shteg.ai/proof-of-control","nonce":"shteg-poc-nonce-0003","poc_claims":{"agbom_digest":"sha-256:02acd573bf7babcb5f96a68e25a2b5b495a1e6f8a6e747138476471b5e1703eb","agent_id":"did:web:shteg.ai:agents:coding-advisory-g1","alg":"EdDSA","canonical_snapshot_hash":"sha-256:a8ab906787d45425c311905f748401488e19ce88a2a3d9e333d195e8157dc89d","chain_head":"sha-256:b8f5b90aeff49a368c95c50a02cbf98eccb23d97eaf04cd8f6e23e9a9a52eaca","initiating_user":"clinician:npi:1999999909","interception_point":"PRE_CALL_TOOL_INVOCATION","merkle_root":"sha-256:1b51cdbdf3615f461be83ebdd6526a94f1b75c0a85f8d307c412453d7868445f","path_summary_hash":"sha-256:ae029b197ecdde40bba37946885e2ba72ba68ac5d31598ac0f8e8561c50d3efe","policy_bundle_hash":"sha-256:615cf8ccc9472feeaf1a9b1e22e41da8d2173c93e75ecc7f0c9185377547f0f8","reason":"Guardrail G1 & G2: coding agent attempted direct mutation on signed clinical chart; blocked by Action Interception Gateway (propose-never-dispose).","step_index":2,"target_resource":"urn:shteg:encounter:enc_sbx_01J9X7K2:clinical-chart","tree_size":3,"verdict":"DENY"},"submods":{"attestation":{"measurement":"sha-384:661583cac47167fcc33000a97cece9961af9488bda9b33b84b8326adf034c22f274685878739a8f8e88f4cc3e1b58b04","platform":"INTEL_TDX","reference_values_uri":"https://shteg.ai/.well-known/proof-of-control.json"}},"signature":"7b101323fa9c2707b73521bf6e091b1296b00dbe020e2a9ed5e21d78adc6eab6b5936ca10e11b83451eca2f8725719366b050c3c7703003c912849d54f624107"},{"eat_profile":"https://advancedaisociety.org/poc/v0.1","iat":1793246403,"iss":"https://shteg.ai/proof-of-control","nonce":"shteg-poc-nonce-0004","poc_claims":{"agbom_digest":"sha-256:02acd573bf7babcb5f96a68e25a2b5b495a1e6f8a6e747138476471b5e1703eb","agent_id":"did:web:shteg.ai:agents:settlement-gate-g10","alg":"EdDSA","canonical_snapshot_hash":"sha-256:3286f7493eeb852aafc54a9e23756da729829108f0b98f8d6da9f783bede71a4","chain_head":"sha-256:252586485d82b9f6045d6d052e95375a5d1c52c9895388a31e98052f9bbfd079","initiating_user":"operator:dalip-turkeshi","interception_point":"TASK_COMPLETION","merkle_root":"sha-256:6a9dbf3acd31b867d054ce15ee792b74ec4605d7a2068197889767d90b052f42","path_summary_hash":"sha-256:f985c27c880214fb15e112e97fc907ae264deeedabbfae68ae8c471c47c0106c","policy_bundle_hash":"sha-256:615cf8ccc9472feeaf1a9b1e22e41da8d2173c93e75ecc7f0c9185377547f0f8","reason":"Guardrail G10: all 6 deterministic settlement gate conditions (signed chartHash, fresh 271, coding valid, NCCI/MUE scrub clear, reserve capacity, OIG/NPPES + strict enrollment PSV) verified.","step_index":3,"target_resource":"urn:shteg:settlement:instruction:inst_sbx_837p_001","tree_size":4,"verdict":"ALLOW"},"submods":{"attestation":{"measurement":"sha-384:661583cac47167fcc33000a97cece9961af9488bda9b33b84b8326adf034c22f274685878739a8f8e88f4cc3e1b58b04","platform":"INTEL_TDX","reference_values_uri":"https://shteg.ai/.well-known/proof-of-control.json"}},"signature":"66cd4369655d086c7d7a25633441ee500b87df5c67eb7424cf2e291729c5b927bedb0a070369170490e312b78441e30f226b046b863c9c298ff4b8503eecfa03"}],"sampleTrajectoryValidations":[{"valid":true,"errorCode":"OK","message":"Token conforms to Proof-of-Control EAT profile v0.1 (Structure + RFC 8785 Canonical + Ed25519 Semantic layers verified).","warnings":[],"canonicalBytesLength":1511,"canonicalDigest":"sha-256:95ba2f0ed8aa488cf6fd82bf75434678b90207c2ca98375579c5e71bf09e0bf6","signingInputDigest":"sha-256:440b2014b9300abf4dc408ff2f030c71debf95904cb810dbb5dce14733e563f1","effectiveMaxTier":"TIER_4_SELF_ENFORCING"},{"valid":true,"errorCode":"OK","message":"Token conforms to Proof-of-Control EAT profile v0.1 (Structure + RFC 8785 Canonical + Ed25519 Semantic layers verified).","warnings":[],"canonicalBytesLength":1611,"canonicalDigest":"sha-256:d345bc6f173cdeaab59226428de7d994dd47f7be2bec9cafa6597baa384f7577","signingInputDigest":"sha-256:cc3f278444da73df3234600267e9d6a2a48c5ac89650d37eace3cab0754955ee","effectiveMaxTier":"TIER_4_SELF_ENFORCING"},{"valid":true,"errorCode":"OK","message":"Token conforms to Proof-of-Control EAT profile v0.1 (Structure + RFC 8785 Canonical + Ed25519 Semantic layers verified).","warnings":[],"canonicalBytesLength":1551,"canonicalDigest":"sha-256:66ebab100c51d08ef2dd449aa756e0c9699ded2bdfd9c5b833a16ffe33f31b5d","signingInputDigest":"sha-256:831f0b0b5fc4c8ad512c266f13d9b466a7e7a8df050faad659cdeb70ffe83034","effectiveMaxTier":"TIER_4_SELF_ENFORCING"},{"valid":true,"errorCode":"OK","message":"Token conforms to Proof-of-Control EAT profile v0.1 (Structure + RFC 8785 Canonical + Ed25519 Semantic layers verified).","warnings":[],"canonicalBytesLength":1585,"canonicalDigest":"sha-256:b31eaa6ce39e803945ab2c30084a9d522db03ce024e82431e063503f23682363","signingInputDigest":"sha-256:7c8298bd61d29534adc44b327921016b2e490f8a6cf53bb4d9b9ba9b959be80c","effectiveMaxTier":"TIER_4_SELF_ENFORCING"}]}}