TRAI Documentation

Cryptographic compliance evidence for AI-generated content

What is TRAI

TRAI produces court-defensible cryptographic evidence trails for AI-generated text. For each disclosure event, it signs the evidence envelope with Ed25519 (ML-DSA-65 hybrid available), timestamps via RFC 3161 Time-Stamp Authority, anchors in SCITT transparency log format with RFC 9162 Merkle inclusion proofs, and renders a multi-section A4 PDF certificate with embedded QR code and 3-tier disclosure.

TRAI is being offered as a source-only acquisition -- full source repository under exclusive IP assignment, including 31 Rust crates, 4 SDKs, a Python control plane, and 2,775+ independently verifiable tests.

Evidence Pipeline

Content SHA-256 / BLAKE3 hash

→

Sign Ed25519 + ML-DSA-65

→

Timestamp RFC 3161 TSA

→

Anchor SCITT receipt

→

Certificate PDF + QR code

The pipeline is implemented across 31 Rust workspace members. The canonical crypto root is trai-evidence -- every other crate that needs to sign or verify goes through it.

Quick Links

Quickstart

Pick your role -- CISO, developer, compliance officer, or acquisition buyer -- and get a tailored entry point.

Getting Started

Clone, build, test, and run your first notarization. Prerequisites and step-by-step setup.

Acquisition Brief

What the buyer receives: source repository, SDKs, control plane, documentation, CI/CD.

API Reference

REST endpoints, MCP tools, SDK surfaces. Every integration surface documented.

Modules

TRAI ships as a single Rust workspace with 31 active members. The core modules that form the evidence pipeline:

Module	Tools	Purpose
Signing (COSE_Sign1)	14 submodules	Ed25519 + ML-DSA-65 hybrid signatures per RFC 9052. BLAKE3 hash chain. FIPS 204 post-quantum ready.
Timestamping (RFC 3161)	3 TSA adapters	Actalis Italia eIDAS-qualified timestamps for production. DigiCert and Sectigo adapters. FreeTSA for dev.
SCITT Anchoring	RFC 9162 proofs	RFC 9943 SCITT receipt format with Merkle inclusion proofs. Transparency log anchoring.
PDF Rendering	A4 layout + QR	Multi-section A4 PDF certificate with embedded QR code, cryptographic details, 3-tier disclosure (L1/L2/L3).
Verification	5 WASM methods	Public `GET /v1/verify/{cert_id}` endpoint. Offline COSE_Sign1 verifier. Browser WASM SDK.
Compliance Mappers	7 frameworks	DORA, EU AI Act, ISO 42001, NIST AI RMF, OWASP Agentic 2026, ISO 23894, ISO 5469. Framework dispatch.
SDKs	4 SDKs + WASM	Python (PyO3), Python-light (HTTP), TypeScript (WASM), Go. 108KB browser verification bundle.
MCP Server	37 tools	stdio JSON-RPC interface for Claude Code / Cursor / Codex. 7 v1 + 30 v2 tools.
Watermark Detection	Kirchenbauer z-test	Text watermark detection via statistical z-test. C2PA and AudioSeal hooks stubbed (deferred to v1.1.1+).

Test suite: 1,375 Rust tests + 1,400 Python tests = 2,775 total. All passing, zero failures. Verified independently via cargo test --workspace and pytest.

TRAI provides technical evidence generation capabilities. It does not constitute legal advice, regulatory certification, or a substitute for independent compliance review. Buyers and users must validate regulatory applicability in their jurisdiction. Built to support Article 50 transparency workflows -- not a substitute for legal compliance assessment.