Overview
THE PROBLEM. Italian banks face dual regulatory urgency: DORA (mandatory since Jan 17 2025 for 22,000+ EU financial entities — UniCredit, Intesa Sanpaolo as G-SIBs) + EU AI Act Article 14 (enforceable Aug 2 2026, fines up to €35M or 7% of global revenue). When Banca d'Italia asks "why did your AI decide X?", the bank needs tamper-evident, third-party-signed audit evidence. Existing tools (Galileo $73M, Lakera $30M, Patronus $20M, Credo AI) don't generate court-grade compliance evidence from production runtime. THE SOLUTION. CONSILIUM is a 3-tier open-source platform: (A) OSS Apache-2.0 entry — 9-vendor adversarial LLM ensemble + 78-rule deterministic judge layer + INV-15 Z3 SMT formal proof (UNSAT in 10.08ms). (B) Governance OS core — 4-stage SOAR pipeline + 6 compliance framework dashboards (EU AI Act, NIST AI RMF, ISO 42001, SOC 2, GDPR, NIST 800-53) + HMAC-SHA256 verdict chain + STIX 2.1 export. (D) CAICEP module — RFC 3161 TSA-timestamped verdict chain via freetsa.org (live evidence today) + roadmap to court-admissible attestation Q3 2026 via eIDAS QTSP partnership (Actalis Italia). LIVE EVIDENCE. apohara.dev/consilium/verify — interactive demo: paste any prompt → 9-vendor decision. Click any of 3 demo verdicts → verify RFC 3161 timestamp against freetsa.org independently. api.apohara.dev shows 10+ SOAR endpoints live, /v1/verdicts/{hash}/verify-timestamp returns valid:true with real Freetsa.org-signed token (1312 bytes, signed 2026-05-19T12:21:50Z). BUSINESS VALUE. TAM AI governance $3.59B by 2033 (36% CAGR). SAM EU regulated industries $400-800M by 2027. Initial wedge: Italian G-SIBs + Milan Fintech District (200+ companies) = $15-30M ACV in 12 months. Revenue: OSS free + Cloud Pro $299-999/mo + Business $2-5K/mo + Enterprise+CAICEP $25-200K/year. Exit reference: Cisco acquired Robust Intelligence Aug 2024 (~$350M, 451 Research). Built solo by Pablo M. Suarez (UNT, Argentina) in 8 days for Milan AI Week 2026.
Note: the demo URL is substituted with the GitHub repository link.
Tech stack
No comments yet
Be the first to comment on this project.
sentinel
Full-Stack Self-Healing DevOps & Security Copilot The Concept: An AI operations engineer that doesn't just suggest code fixes—it monitors cloud infra, detects uptime/security drops, automatically provisions fixes, and generates audit reports for enterprise compliance.
Agency Compiler
Agentic creative project compiler. Most creatives, agencies and designers dont know how to use ai, none the less agents. We created a platform that allows a creative agency or studio owner to instantly spin up agents based on the project ask, resources and scale.
ProofRun
ProofRun helps developers answer a critical question before shipping: will this update break behavior users rely on? An AI agent inspects two Git revisions, designs targeted experiments, and proposes repairs. An independent Docker-based verifier runs those experiments against both versions, preserves the original tests, and checks whether the repair actually works. Developers receive an update, skip, or postpone recommendation with recorded evidence and a reviewable patch. In a live synthetic…