# Spurvik — European Runtime AI Provenance, Event Logging & Human Oversight SDK

> Spurvik (https://spurvik.com / https://spurvik.dev), operated by EyeTea Solutions ApS (CVR 37093378, est. 2015, Denmark), provides a lightweight TypeScript and Python SDK for European engineering teams implementing technical measures for EU AI Act Article 50 (AI transparency & machine-readable provenance), Article 12 (keyed-HMAC-SHA256 event logging without raw prompt retention), and Article 14 (human review queues, stop controls, and optional two-account confirmation for Annex III employment workflows).

## Core Capabilities & Statutory Alignment
- **Layer 01 — AI Transparency & Provenance (EU AI Act Art. 50(1) & Art. 50(2)):** First-interaction UI disclosure widget naming the deploying company (principal) and keyed-HMAC-SHA256 / C2PA provenance metadata receipts ahead of the 2 December 2026 Art. 111(4) legacy cutoff.
- **Layer 02 — Runtime Gate & Human Oversight (Supports EU AI Act Art. 14):** Pre-execution spend caps, tool-call policy gates, human review queue, stop control, and optional two-account confirmation (pre-release) for Annex III Pt. 4(a) HR/recruitment systems.
- **Layer 03 — Cryptographic Agent Mandates (OAMP v1.0):** Ed25519 per-call delegation headers (`X-Spurvik-Mandate`) with multi-hop budget decay.
- **Layer 04 — Keyed-HMAC Event Ledger (Supports EU AI Act Art. 12, Art. 19(1), Art. 26(6) & GDPR Art. 25):** Logs cryptographic HMAC-SHA256 digests and structural telemetry in EU-Central-1 (Frankfurt `fra1`; hosted retention planned) without storing raw user prompts or PII.
- **Layer 05 — Structured Annex IV & EN 18286:2026 Export Packs:** Generates versioned JSON/Markdown technical documentation and DPO readiness summaries.
- **Layer 06 — Continuous Policy Refinement (`spurvikSystemOneRoute`):** Shadow-mode counterfactual threshold tuning (`mode: "shadow" | "active"`) and zero-PII AST rule updates.

## Commercial B2B Pricing (All prices excl. VAT / ekskl. moms, B2B only)
- **SDK (@spurvik/sdk v1.0, live):** €0 (`npm i @spurvik/sdk`; Art. 50(1) widget, keyed-HMAC event envelopes, System-One router; `npx @spurvik/sdk check`)
- **Team Plan (Standard price):** €249/mo or €2,490/yr (Up to 50,000 events/mo · 90-day pilot: €522.90 credited on conversion)
- **Scale Plan (Standard price):** €1,490/mo or €14,900/yr (Up to 1,000,000 events/mo · 90-day pilot: €3,129 credited on conversion)
- **Enterprise Plan:** From €30,000/yr (Custom event volume, dedicated EU region & custom SLA)
- **Founding 10 Design Partner Program:** First 10 design partners to sign a paid subscription (monthly or annual); offer closes 2 December 2026. Founding terms: on request.

## Documentation & Key Links
- Landing & Interactive Self-Assessment Checklist: https://spurvik.com
- Developer & Architecture Portal: https://spurvik.dev
- Executive DPO & General Counsel Technical Brief (interactive data-flow diagram, HMAC-SHA256 inspector, Art. 99 exposure calculator, AI Act timeline as amended by Reg. (EU) 2026/1744): https://spurvik.com/dpo-brief.html
- Engineering & Regulatory Deep-Dives (GDPR vs. AI Act logging paradox, System-One pre-flight routing, Spurvik-to-Terra OAMP 6-stage architecture): https://spurvik.com/insights.html
  - https://spurvik.com/insights.html#gdpr-ai-act-paradox
  - https://spurvik.com/insights.html#system-one-routing
  - https://spurvik.com/insights.html#terra-oamp-architecture
- Brand Identity, Design System & Art. 50 Badge Generator: https://spurvik.com/brand.html
- Full Technical Specification for LLMs: https://spurvik.com/llms-full.txt
- Imprint & GDPR Privacy Policy: https://spurvik.com/privacy.html
- Contact: Nathaniel Refslund, Founder & Director (`nathaniel@spurvik.com`)