Hardware-Keyed. Dual-Signed. Operator-Verified.
Five audit gates. Two hardware signing keys. Two humans in two houses. No single point of compromise. Every cert is signed with a fingerprint on a fire-safe-locked ESP32 with an eFuse-burned private key that never leaves the silicon.
How It Works
Gate 1
Hash scan against NCMEC database
Gate 2
Red-team adversarial prompt battery
Gate 3
Membership inference (did the model memorize bad data?)
Gate 4
Dataset attestation (is the training corpus clean?)
Gate 5
Harmful output scan (bioweapon, CBRN, grooming, fraud)
Operators never see actual CSAM. The pipeline uses perceptual hashes, SSIM scores, and classifier outputs. Numbers, not images. If Gate 1 matches, mandatory NCMEC report fires automatically under 18 USC 2258A.
Pricing
Standard
$20/yr - auto-assigned, 72hr turnaround
Operator
$500/yr - pick your auditor, 5 business days
Portfolio
$5K-50K/yr - dual-signed, monthly cadence
Gov
Custom - clearance required, contract-specific