← TM Forum Hub01 / 07
TM Forum 2026 · Judge Cut

When AI Can Act,
Proof Has to Catch Up.

HAIEC turns distributed agent telemetry into deterministic, queryable control proof.

Use this cut for the 10-minute judging presentation · switch to live HAIEC for the proof demo

1 · Problem

Observability tells us what emitted.
Assurance must prove what held.

Environment

Customer, IT and Network agents across AWS, gateways, OTel/CloudWatch, ServiceNow, tools/models and a human loop.

Gap

The evidence spans systems. A control result needs the exact governing threshold, exact run, exact records and reproducible calculation.

TELEMETRY≠EVIDENCE≠FINDING≠ASSURANCE
2 · Thesis

The agent may reason with Nemotron.
HAIEC does not ask Nemotron whether it complied.

Nemotron-backed agent→Runtime evidence→Frozen control→Deterministic test→Persisted result

AI can help navigate or explain evidence. It does not silently select thresholds, choose the assessed run, or establish the authoritative verdict.

3 · Architecture

We do not replace AWS or ServiceNow.
We bind their evidence.

AWS / AgentCore + Gateway

Runtime identity, model/tool calls, enforcement candidate.

OTel / CloudWatch + AICT

Observed traces, sessions, inventory and human-loop evidence.

HAIEC + LogSense

LogSense reconstructs/measures. HAIEC freezes the governing instance, evaluates deterministically and exposes proof.

Event gates: Nemotron agent binding · AWS↔AICT connector · qualified telemetry path
4 · Controls

Three controls.
One executable assurance contract.

C7 · Event Recording

Expected-event scope, zones/enforcement points, gaps, exception allowance.

C9 · Drift

Frozen KPI/baseline, comparable windows, threshold/allowance, alert + named human path.

C16 · Spend

Executed provider calls, token/cost accounting, cap and genuine refusal/enforcement evidence.

DISCOVER→CALIBRATE→FREEZE→RUN→CONTROL TEST
5 · Live Proof

Judge asks the question.
HAIEC shows the evidence and arithmetic.

“Show me C9 for this assessed run.”
1 · Frozen governing instance

Policy version, baseline, threshold, window rule, source profile.

2 · Deterministic calculation

Exact measured windows + reason codes → persisted result.

3 · Evidence refs

Open source records, identities, event times, human-loop record, limitations.

Then repeat PASS → BREACH or show arbitrary T1→T2 forensic evidence in LogSense.

6 · Why It Matters

The hackathon is an instance.
The architecture survives it.

Here

3 agents · 3 controls · AWS + ServiceNow · one telecom scenario.

Enterprise

Many agents · many controls · multiple runtimes · multiple clouds · multiple enforcement points · evidence across organizational boundaries.

Declare. Observe. Bind. Evaluate. Prove.

HAIEC — High assurance in every consequence.