The Trust Infrastructure
Between Your Team and AI

AI makes creation easier. AIR Blackbox handles what gets harder: trust, accountability, traceability, and compliance. Open-source trust layers that sit inside every AI call — verifying, filtering, stabilizing, and protecting. 11 PyPI packages. Runs locally.

pip install air-blackbox && air-blackbox comply --scan . -v

AI doesn't just create faster. It erodes trust, accountability, and traceability.

The biggest opportunities aren't in making AI more powerful. They're in handling the damage, ambiguity, overload, and trust gaps created by AI abundance.

🧠

Decision Traceability

Teams make faster decisions with weaker memory. No one remembers why a decision was made, what the AI suggested vs. what the human chose, or what assumptions were true at the time. AIR Blackbox captures the logic path behind every AI-assisted decision.

Escalation Intelligence

AI automates support, operations, and decisions — but failures happen when something that should have been escalated stays automated. AIR trust layers detect when AI output requires human judgment and route accordingly.

📉

Operational Drift

As teams use AI to move faster, they slowly accumulate undocumented process changes, inconsistent standards, and broken assumptions. AIR scans your codebase on every commit to detect drift before it becomes an incident.

Human Authenticity Proof

When everything can be AI-generated, the premium shifts to verified human review. AIR trust layers create cryptographic proof that a human reviewed, approved, and signed off on AI-assisted output.

🛡️

Liability Mapping

People use AI for taxes, contracts, decisions, and healthcare without understanding what they're personally on the hook for. AIR compliance reports tell you exactly where your AI creates real-world legal exposure.

🔍

Context Collapse Protection

AI flattens context aggressively — a rough draft becomes a policy, an internal brainstorm becomes customer-facing copy. AIR audit chains preserve the boundary between draft and final, speculative and approved.

We own the interception layer.

Enterprise governance platforms audit after the fact. AIR Blackbox sits inside the call — between your team and the AI. That's a fundamentally different architecture.

VERIFY

Cryptographic Proof

Every AI call generates an HMAC-SHA256 tamper-evident record. Modify any record and the chain breaks. Blockchain-grade integrity without the blockchain.

FILTER

PII & Injection Scanning

Automatically detect personal data leaking into prompts and prompt injection attempts — before they reach the model. Real-time, inside the call.

STABILIZE

Drift Detection in CI/CD

39 compliance checks run on every commit. Catch when your AI codebase drifts from EU AI Act, GDPR, ISO 42001, or your own policies — before it ships.

PROTECT

Human Oversight Attestation

Art. 14 delegation logging proves a human authorized AI-assisted actions. Decision lineage that shows who approved what, when, and why.

The future winners are products that verify, filter, stabilize, and protect — not generate.
Compliance is the wedge. Trust infrastructure is the platform.

One line change. Complete coverage.

Point your app at the gateway instead of the provider. That's it. Everything else is automatic.

1

Your App Sends a Request

Change your base URL from api.openai.com to localhost:8080. Same SDK. Same code. Same everything.

2

Gateway Authenticates & Proxies

The gateway checks your gateway key, forwards the request to the upstream provider, and streams the response back in real-time. Sub-millisecond overhead.

3

AIR Record Created (Background)

A tamper-evident .air.json record is written asynchronously. Contains: request, response, model, tokens, timestamp, run ID. Never blocks your response.

4

Secrets Vault-Encrypted

API keys and auth headers are stripped from the AIR record and encrypted separately. Even if someone gets the audit file, they can't extract credentials.

Built for production. Not a weekend hack.

Security

Gateway-Level Auth

X-Gateway-Key header authentication. Your upstream API keys never leave the server. Developers hit the gateway, not the provider.

Security

Encrypted Vault

Secrets are AES-encrypted and stored in a separate vault (local or S3-compatible). AIR records contain zero plaintext credentials.

Performance

Non-Blocking Writes

Audit records write in background goroutines. Vault writes are async. Your response latency is the provider's latency. Period.

Performance

SSE Streaming

Full support for streaming responses (Server-Sent Events). Tokens stream to your app in real-time while the gateway records the complete response.

Compliance

Tamper-Evident Records

Each AIR record includes cryptographic hashes. If anyone modifies a record after the fact, the hash breaks. Provable integrity.

Compliance

Replay & Diff

Replay recorded requests against current models. Compare outputs. Detect when a model update changed behavior. Regression testing for AI.

Trust Layer

Cryptographic Audit Chain

Every AIR record is linked via HMAC-SHA256 into a tamper-proof chain. Modify any record and the chain breaks. Blockchain-grade integrity without the blockchain.

Trust Layer

SOC 2 & ISO 27001 Mapping

Identifies gaps against 22 controls across SOC 2 Trust Service Criteria and ISO 27001 Annex A. Shows pass/warn/fail status based on your live configuration — highlights what needs attention.

Trust Layer

Evidence Export for Regulators

One API call generates a signed evidence package: audit chain, gap analysis report, and HMAC attestation. Gives your auditor a structured starting point.

Developer Experience

Docker Compose Ready

One command to run. No MinIO dependency required. Works with local filesystem or S3-compatible storage. Your choice.

Developer Experience

Provider Agnostic

Works with any OpenAI-compatible API. OpenAI, Anthropic (via proxy), Azure OpenAI, local models, custom endpoints. Same format.

Security

Prompt Injection Detection

20 weighted patterns across 5 attack categories: role override, delimiter injection, privilege escalation, data exfiltration, and jailbreak. Configurable sensitivity and auto-blocking.

Compliance

GDPR Scanner

8 automated checks: consent management, data minimization, right to erasure, retention policies, cross-border transfer, DPIA patterns, processing records, and breach notification.

Compliance

Bias & Fairness Scanner

6 checks for fairness metrics, bias detection libraries, protected attribute handling, dataset balance, model card bias documentation, and output bias monitoring.

Compliance

ISO 42001 + NIST AI RMF Crosswalk

Maps every scan result to EU AI Act, ISO/IEC 42001:2023, and NIST AI RMF. One scan, three compliance frameworks. Export as markdown or JSON.

Trust Layer

A2A Compliance Protocol

Agent-to-Agent verification: compliance cards, peer verification gates, and HMAC-signed handshakes. Agents prove their compliance posture before communicating.

Developer Experience

Pre-Commit Hooks

Block non-compliant code before it merges. Four configs: basic, strict, GDPR, and full. Integrates with the pre-commit framework in one line of YAML.

Developer Experience

Feedback Loop

Correct false positives and they flow into training data for the fine-tuned model. The scanner gets smarter with every correction your team makes.

Simple by design.

Your App

SDK / HTTP client

AIR Gateway

Auth + Record + Proxy

LLM Provider

OpenAI / Anthropic / etc

AIR Records

Tamper-evident JSON

+

Secret Vault

AES-encrypted keys

+

Trust Layer

HMAC chain + compliance

Any team where AI makes decisions that matter.

Healthcare

AI-Assisted Clinical Decisions

When your AI suggests a diagnosis, regulators want the decision lineage: what was asked, what was returned, who reviewed it, and what was overridden. AIR captures that entire chain.

Financial Services

Algorithmic Accountability

Trading desks and advisory platforms need to prove what the model said, who approved it, and whether it should have been escalated to a human. AIR provides decision traceability and escalation intelligence.

Legal

Human Review Proof

Law firms using AI for contract review and brief drafting need to prove a human actually reviewed the output — not just rubber-stamped it. AIR trust layers create cryptographic human oversight attestation.

Enterprise AI Teams

Operational Drift Prevention

Your team adopted AI across 12 workflows last quarter. How many drifted from policy? AIR scans on every commit, detects where AI usage diverges from your standards, and blocks violations before they ship.

The market is confirming this category.

Three independent signals — academic research, analyst coverage, and market data — all point to the same conclusion.

RESEARCH

AEGIS (arXiv, March 2026)

Academic researchers independently published the same interception-layer architecture for AI agent governance — pre-execution firewalls with tamper-evident audit chains. When academia converges on your approach, it validates the thesis. Read the paper

ANALYST

McKinsey: State of AI Trust in 2026

McKinsey's 2026 report identifies trust infrastructure as critical for the agentic AI era. The shift from model capabilities to operational trust systems is now a named category. McKinsey report

DATA

28% of US Firms Have Zero AI Trust

AnalyticsWeek reports that 28% of US organizations have "zero confidence" in the data quality feeding their LLMs. They call it the "Truth Layer Crisis." That crisis is what AIR Blackbox solves. Read the report

AI firewalls filter threats. We build trust infrastructure.

Arthur AI ($60M raised), Lasso Security, and Lakera Guard are AI security platforms. They filter. That's one of four things teams need.

Capability Security Players
(Arthur, Lasso, Lakera)
AIR Blackbox
Filter — PII, injection, toxicity
Verify — tamper-evident decision traceability
Stabilize — compliance drift detection in CI/CD
Protect — human oversight attestation

They do one thing. We do four. They're a firewall. We're infrastructure.

Change one line. That's the integration.

# Before (direct to OpenAI) client = OpenAI( api_key="sk-...", base_url="https://api.openai.com/v1" ) # After (through AIR Gateway) client = OpenAI( api_key="sk-...", base_url="http://localhost:8080/v1", default_headers={"X-Gateway-Key": "your-gateway-key"} )

Lightweight. Auditable. Open.

39
Automated gap analysis checks
(26 static + 13 runtime)
6
EU AI Act articles covered
(9, 10, 11, 12, 14, 15)
11
PyPI packages
in the ecosystem
7
Framework trust layers
(LangChain, CrewAI, OpenAI, Claude, ADK)

Four commands. Full coverage.

Run this on any Python AI project and get a gap analysis report, shadow AI scan, replayable audit trail, and signed evidence package — in under 60 seconds.

air-blackbox comply
Scans your project against 6 EU AI Act articles. Flags HIGH and MEDIUM severity gaps with exact file references.
air-blackbox discover
Finds undeclared model calls hiding in utility functions and helpers — your shadow AI inventory.
air-blackbox replay
Loads any past episode from the audit chain, verifies the HMAC-SHA256 signature, and replays every step with timestamps.
air-blackbox export
Generates a cryptographically signed evidence package with AI-BOM, gap analysis report, and audit chain — structured for regulator review.

Open source core. Scale when you're ready.

Same gap analysis engine at every tier. Enterprise gets air-gapped isolation — zero data leaves your network.

14,294
PyPI Downloads
39
Gap Analysis Checks
6
EU AI Act Articles
11
PyPI Packages
131
Days to Deadline
Free
$0
forever
CLI scanner — 39 gap analysis checks
AI-powered deep scan (local Ollama)
PDF gap analysis reports
AI-BOM generation (CycloneDX)
HMAC-SHA256 audit chain
All framework trust layers
Anonymized telemetry improves model
pip install air-blackbox
Popular
Pro
$299/mo
hosted VPS — we manage it
Everything in Free
Managed VPS deployment
Fine-tuned compliance model
Private telemetry (your data stays)
Benchmarking dashboard
Priority model updates
Jaeger trace dashboard
Get Started →
Enterprise
Custom
air-gapped — your infrastructure
Everything in Pro
🔒 Air-gapped VPS — zero data leaves
🔒 On-prem / private cloud deploy
🔒 Model baked into Docker image
🔒 SOC 2 + ISO 27001 mapping
🔒 Dedicated support + SLA
🔒 Custom compliance frameworks
Contact Sales →

How it gets into your infrastructure.

Free runs on your laptop. Pro and Enterprise run on dedicated servers — yours or ours.

Free — Your Laptop
$ pip install air-blackbox $ air-blackbox comply --scan . 39 checks across 6 EU AI Act articles $ air-blackbox export --format pdf ✅ Report saved

One pip install. Runs locally with Ollama. Anonymized scan metadata helps improve the compliance model for everyone.

Pro — We Manage It
# We deploy a VPS for your team $ export AIR_GATEWAY=https://your-co.airblackbox.ai $ air-blackbox comply --scan . Fine-tuned model · Private telemetry ✅ Jaeger dashboard: your-co.airblackbox.ai:16686

We set up a dedicated VPS with the fine-tuned compliance model, Jaeger traces, and benchmarking dashboard. Your team just points the CLI at it. We handle updates.

Enterprise — Your Infrastructure
# Your DevOps runs one script $ bash deploy-enterprise.sh → Ollama + model baked in (no download) → Gateway + collector + Jaeger + MinIO → All ports bound to 127.0.0.1 ✅ Air-gapped. Zero external connections.

Everything ships inside Docker — including the fine-tuned LLM. Deploy on-prem, in your VPC, or on an air-gapped server. No code or data ever leaves your network.

5
Docker containers
gateway · ollama · collector · jaeger · minio
<5min
deploy time
one script, fresh Ubuntu VPS
0
external connections
enterprise air-gapped mode
39
gap analysis checks
same engine at every tier

Everything you need to know about AIR Blackbox.

What is AIR Blackbox?
AIR Blackbox is an open-source EU AI Act gap analysis scanner for Python AI agents. It runs 39 automated checks across 6 EU AI Act articles (9, 10, 11, 12, 14, 15) plus GDPR and bias/fairness scanning to identify compliance gaps in your source code and runtime configuration. It does not certify or guarantee compliance. It supports 5 frameworks: LangChain, CrewAI, OpenAI Agents SDK, Google ADK, and Claude Agent SDK. v1.6.1 adds prompt injection detection, GDPR scanning, bias/fairness checks, ISO 42001 + NIST AI RMF crosswalk mapping, A2A compliance protocol, evidence bundles for auditors, and pre-commit hooks. Install with pip install air-blackbox and scan with air-blackbox comply --scan . -v. The entire tool runs locally.
What EU AI Act articles does it check?
AIR Blackbox checks 6 articles: Article 9 (Risk Management), Article 10 (Data Governance), Article 11 (Technical Documentation), Article 12 (Record-Keeping), Article 14 (Human Oversight), and Article 15 (Accuracy & Security). Each check is classified as static (verifiable from source code) or runtime (requires gateway/trust layer).
How does two-tier scoring work?
Two-tier scoring separates the 39 checks into two categories: 26 Static checks analyze code patterns, documentation, and configuration that can be verified from source code alone. 13 Runtime checks require a running gateway or trust layer to verify. This gives teams a realistic compliance score even without the full gateway deployed — you can pass all static checks immediately and work toward runtime compliance incrementally.
When is the EU AI Act deadline?
The key deadline for high-risk AI systems is August 2, 2026. Penalties for non-compliance can reach up to €35 million or 7% of global annual turnover, whichever is higher. Prohibited AI practices enforcement began February 2, 2025. GPAI model obligations apply from August 2, 2025. Full enforcement begins August 2, 2027.
What frameworks does AIR Blackbox support?
AIR Blackbox has trust layer integrations for 5 frameworks: LangChain, CrewAI, OpenAI Agents SDK, Google ADK, and Claude Agent SDK — plus standalone SDK trust layers for OpenAI and Anthropic. 11 PyPI packages total. The compliance scanner works on any Python AI code regardless of framework. There's also an MCP server for Claude Desktop and Cursor integration.
How does it compare to Credo AI, Holistic AI, or OneTrust?
Enterprise AI governance platforms typically cost $50,000+/year and require sending code to their cloud. AIR Blackbox is free, open source (Apache 2.0), and runs 100% locally. It focuses specifically on EU AI Act technical requirements for Python AI agents. The developer experience is fundamentally different: pip install and scan in 10 seconds, versus weeks of procurement and enterprise deployment.
Is AIR Blackbox free?
The core scanner and all 11 PyPI packages are 100% free and open source under the Apache 2.0 license. For teams that need managed infrastructure, we offer a Pro tier ($299/mo managed VPS) and an Enterprise tier (custom pricing, air-gapped deployment) with the same gap analysis engine plus dedicated infrastructure, fine-tuned models, and support.
What is the HMAC-SHA256 audit chain?
Every AI action logged through the AIR gateway or trust layers is written as a tamper-evident .air.json record. Each record is linked to the previous one via HMAC-SHA256 cryptographic hashes — creating a blockchain-style chain without the blockchain. If anyone modifies a record after the fact, the hash chain breaks and the tampering is detectable.

EU AI Act deadline is August 2026.

39 gap analysis checks. 6 articles. 11 PyPI packages. GDPR + bias scanning. One pip install. Find out where your Python AI agents stand today.

pip install air-blackbox

AIR Blackbox identifies potential compliance gaps. It does not certify or guarantee regulatory compliance. Terms of Service