Procurement pack · enterprise lane

SourceA — Execution Proof Infrastructure

Self-hosted receipts · fail-closed dispatch · export bundle · shadow mode. Educational framework maps only — not certification.

What you get

Self-hosted receiptsALLOW/BLOCK on your disk — durable for counsel

Fail-closed dispatchPolicy before every action — BLOCK stops the loop

Export bundleWeekly HTML/PDF/replay — what ran, what blocked

Shadow modeProve policy fires before production enforcement

Evaluate in 5 minutes

Last factory boot · 2026-07-02 07:29:34 UTC · PASS

$ sourcea-boot --json
SOURCEA_BOOT PASS ok=true
  [SKIP] policy_version: no policy file (POLICY.md) (not configured)
  [PASS] provider: provider env present (ANTHROPIC_API_KEY)
  [SKIP] receipt_fresh: no prior receipt — first boot allowed
  [SKIP] queue_truth: no queue files configured (not configured)
REPORT=receipts/sourcea-boot/BOOT_REPORT.json▋

Public eval: sourcea-boot on PyPI · sourcea.app/eval

Framework alignment (educational)

NIST AI RMF 1.0 — GOVERN · MEASURE
ISO/IEC 42001:2023 — Clause 6 · 8
EU AI Act — Art. 12 · 14 (audit trail)
OWASP LLM Top 10 — LLM06 · LLM08

Alignment maps only · not certification · cited sources

Proof chain (screen-share)

request → policy → decision → receipt → replay → tamper-FAIL — under five minutes live.

Book procurement walkthrough

contract@sourcea.app · 15-minute live demo

Platform: sourcea.app/platform