SIR Pilot Programme

Put one workflow behind the gate and keep the evidence.

A controlled pilot runs SIR in front of one bounded workflow of yours, and leaves you with signed run artefacts your own auditor can verify offline, without taking our word for any of it.

It is unpaid both ways and it is not a sales process. We want to find out whether this evidence is useful to the people who have to review it, and that question cannot be answered without real operating conditions.

The engagement

What each side does

The terms are further down and they do not change.

What we examine

One workflow you choose, with a governance, audit or risk question attached to it. Not a platform and not an integration programme: a single bounded request path, so that what the evidence does and does not cover stays legible to both of us.

What your team does

Name a technical contact and a governance or risk contact. Describe the workflow and the rule surface it needs. Review the artefacts a run produces and tell us where they fall short of what your reviewer actually asks for. Audit-only runs need nothing in your production path. Organisation size is not the deciding factor; a bounded workflow and a willingness to read evidence rather than only model output are.

What we deliver

A rule configuration for that workflow, the runs it produces, and for each run a signed certificate bound to a hash-chained ledger, with the verifier and keys needed to check it from a clean machine. Plus a written statement of what the run did not establish, in the same form as the rest of the published evidence.

The question you can answer afterwards

Whether a deterministic record of what was blocked, and of what was deliberately not covered, is worth anything to your auditor, your insurer or your board. That is a question about your reviewers rather than about SIR, and a negative answer is a useful result we would rather have than not.

How either side stops

Either party ends it in writing at any point, with no notice period and nothing owed. There is no conversion step, no commercial follow-on and nothing to opt out of. If the evidence is not useful, saying so is the whole deliverable.

What a run exercises

Not whether SIR solves compliance. Whether the evidence is useful.

  • pre-inference request evaluation before model exposure
  • signed, offline-verifiable evidence artefacts
  • latest-audit and latest-run review
  • provider-completeness and INCONCLUSIVE semantics in live runs
  • paired baseline and gated evidence where relevant

Confidentiality, data use, and terms

The pilot is unpaid both ways. SDL does not charge pilot fees and does not pay participants. Each party covers its own costs unless otherwise agreed in writing.

SDL will sign an appropriate NDA. Pilot data use must be agreed in writing before the pilot begins.

SDL will not publish, disclose, reuse, commercialise, or train on participant data or confidential information without written permission. SDL will not reference participation for marketing purposes without consent.

Sensitive, regulated, or production data should not be provided unless separately agreed in writing.

What the pilot may support

The pilot may help evaluate whether SIR evidence can support auditability, record-keeping, governance control evidence, and risk or insurance review conversations.

SIR does not certify compliance. SIR does not provide legal advice. SIR does not guarantee insurance outcomes, underwriting decisions, coverage changes, or premium reductions.

What the pilot does not do

  • certify regulatory compliance
  • replace legal, compliance, security, or insurance advice
  • guarantee insurance outcomes
  • certify model safety
  • prevent all prompt injection
  • provide semantic attack detection
  • control downstream systems outside the declared SIR ingress path
  • attribute an action or an outcome to a specific user or session
  • evaluate content SIR does not receive

Enquiries

info@structuraldesignlabs.com

Please include a short description of the AI workflow, the governance question, and whether the pilot would be audit-only or a live-provider run.