Glossary / Continuous Assurance

Definition

What is Continuous Assurance?

Continuous assurance streams every AI interaction through a signed connector and returns a per-event verdict, rolling each day into one signed, externally anchored compliance number with drift detection. Unlike a dashboard, the daily pass rate is the bytes the platform signed — reproducible by an auditor in a browser.

Annual sampling leaves drift invisible until the next audit. Continuous assurance is the telematics layer between the annual checkup and inline enforcement: one HMAC-signed POST per interaction from your gateway, with no inline interception, so production safety is unchanged.

Each calendar day folds every connector’s chain head into a Merkle root, signs the envelope, anchors it to RFC 3161 + Sigstore Rekor, and computes PSI drift against a trailing 30-day baseline — firing a structured webhook on a breach.