- Add Guardian Agents verification as step 6 in governance flow (8 steps, was 7) - Add Guardian Agents featured card in features section - Update deployment facts: 5 governed features (was 4) - Add verification evidence to "What This Demonstrates" - Add Guardian Agents Philosophy paper link to CTA section - Update EN locale to match Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
180 lines
11 KiB
JSON
180 lines
11 KiB
JSON
{
|
|
"breadcrumb": "Village Case Study",
|
|
"hero": {
|
|
"badge": "CASE STUDY",
|
|
"title": "The Village: Sovereign Community AI in Production",
|
|
"subtitle": "A multi-tenant community platform running its own language model on its own infrastructure, governed by a polycentric architecture where communities hold co-equal authority.",
|
|
"disclaimer": {
|
|
"label": "Important:",
|
|
"text": "This documents an early-stage multi-tenant deployment by the framework developer. Metrics are self-reported. Independent audit and broader validation are planned but not yet conducted."
|
|
}
|
|
},
|
|
"what_is": {
|
|
"heading": "What Is the Village",
|
|
"description": "The Village is a member-owned platform for whānau, marae, clubs, and community organisations. Each community gets its own isolated tenant with sovereign data storage, AI-assisted features, and governance-protected privacy. The platform supports te reo Māori throughout.",
|
|
"description_2": "All AI processing runs on the platform's own infrastructure — a locally fine-tuned Llama model with no data sent to external AI providers. Communities operate with full data ownership and can withdraw consent at any time.",
|
|
"facts_title": "Deployment Facts",
|
|
"facts": {
|
|
"duration_label": "Duration:",
|
|
"duration_value": "18+ months in production",
|
|
"tenant_label": "Tenant Model:",
|
|
"tenant_value": "Multi-tenant (multiple communities)",
|
|
"ai_label": "AI Model:",
|
|
"ai_value": "Sovereign Llama (QLoRA fine-tuned)",
|
|
"features_label": "AI Features:",
|
|
"features_value": "5 governed features live",
|
|
"infra_label": "Infrastructure:",
|
|
"infra_value": "NZ + EU (no US dependency)"
|
|
}
|
|
},
|
|
"sovereign": {
|
|
"heading": "Sovereign AI Architecture",
|
|
"intro": "The Village runs its own language model — not an API call to a US hyperscaler, but a locally fine-tuned model where the training data, model weights, and inference pipeline all remain under community control.",
|
|
"model_title": "Local Language Model",
|
|
"model_desc": "Llama 3.1 8B and Llama 3.2 3B, fine-tuned with QLoRA on community-specific data. All inference runs on the platform's own GPU infrastructure.",
|
|
"infra_title": "Sovereign Infrastructure",
|
|
"infra_desc": "Production servers in New Zealand and the EU. No data transits US jurisdiction. Community data never leaves the deployment it belongs to.",
|
|
"training_title": "Community-Controlled Training",
|
|
"training_desc": "QLoRA fine-tuning on domain-specific data with consent tracking and provenance. Communities can withdraw training data and trigger model retraining.",
|
|
"link_note": "For a detailed account of the model architecture, training approach, and governance integration, see <a href=\"/village-ai.html\" class=\"text-blue-600 hover:text-blue-700 font-medium underline\">Village AI / SLL: Sovereign Locally-Trained Language Model</a>."
|
|
},
|
|
"polycentric": {
|
|
"heading": "Polycentric Governance",
|
|
"intro": "The distinctive contribution of the Village is its governance architecture. Rather than a single operator making all decisions, the platform implements polycentric governance — multiple co-equal authorities that share structural control over how AI is used.",
|
|
"coequal_title": "Co-Equal Authority",
|
|
"coequal_desc": "Communities maintain architectural co-governance — not just consultation rights, but structural authority over how their data is used. Drawn from te ao Māori concepts of rangatiratanga (self-determination) and kaitiakitanga (guardianship).",
|
|
"nonparticipation_title": "Right of Non-Participation",
|
|
"nonparticipation_desc": "Members can opt out of any AI feature without losing access to the platform. AI governance defers to human judgment on values questions and never overrides community decisions.",
|
|
"taonga_title": "Taonga-Centred Design",
|
|
"taonga_desc": "Cultural treasures (taonga) are governed as first-class objects with provenance tracking, withdrawal rights, and community authority over how they appear in AI contexts.",
|
|
"tenant_title": "Tenant-Scoped Isolation",
|
|
"tenant_desc": "Each community operates in complete data isolation. No cross-tenant data sharing. Each tenant's governance decisions apply only within their own boundary.",
|
|
"paper_note": "The research foundation is described in <a href=\"/downloads/taonga-centred-steering-governance-polycentric-ai.html\" class=\"text-blue-600 hover:text-blue-700 font-medium underline\">Taonga-Centred Steering Governance: Polycentric AI for Indigenous Data Sovereignty</a>."
|
|
},
|
|
"flow": {
|
|
"heading": "How Governance Works in Practice",
|
|
"intro": "When a member uses any AI feature, the request passes through seven governance checks before a response reaches them. Each check is independent and can block or modify the request.",
|
|
"steps": {
|
|
"1": {
|
|
"title": "Member request received",
|
|
"desc": "A member asks for help, requests OCR, or uses story assistance."
|
|
},
|
|
"2": {
|
|
"title": "Values boundary check",
|
|
"desc": "Is this a values question that requires human judgment? If so, the AI defers rather than answering."
|
|
},
|
|
"3": {
|
|
"title": "Intent validation",
|
|
"desc": "Does the request conflict with stored governance rules or attempt prompt injection? Cross-references against known instruction sets."
|
|
},
|
|
"4": {
|
|
"title": "Context and session health",
|
|
"desc": "Is the session within acceptable bounds? Monitors for context pressure and triggers graceful handoff when needed."
|
|
},
|
|
"5": {
|
|
"title": "Permission-filtered retrieval and response",
|
|
"desc": "The sovereign Llama model generates a response using RAG context filtered by the member's permissions. All processing stays on-infrastructure."
|
|
},
|
|
"6": {
|
|
"title": "Guardian Agents verification",
|
|
"desc": "Every factual claim in the response is checked against source material using embedding cosine similarity — mathematical measurement, not generative checking. Each claim receives a confidence badge visible to the member."
|
|
},
|
|
"7": {
|
|
"title": "Scope verification",
|
|
"desc": "Is the response appropriate to what was asked? Detects scope creep and blocks responses that exceed the original request."
|
|
},
|
|
"8": {
|
|
"title": "Delivery with attribution",
|
|
"desc": "Response delivered to the member with confidence badges, source attribution, and full audit trail. Every step is logged."
|
|
}
|
|
}
|
|
},
|
|
"features": {
|
|
"heading": "What the Platform Delivers",
|
|
"help": {
|
|
"title": "Help Centre",
|
|
"benefit": "Members ask questions in natural language and get answers drawn from help content, stories, and documentation — filtered by their permissions.",
|
|
"governance": "Governance: Values boundary check prevents AI from making judgments; intent validation blocks prompt injection attempts."
|
|
},
|
|
"ocr": {
|
|
"title": "Document OCR",
|
|
"benefit": "Upload a document and get the text extracted automatically. Useful for digitising letters, certificates, and historical records.",
|
|
"governance": "Governance: Requires explicit consent before processing. All operations are audit-logged with full provenance."
|
|
},
|
|
"stories": {
|
|
"title": "Story Assistance",
|
|
"benefit": "AI-assisted writing suggestions for community stories and family histories. Helps with structure, prompts, and gentle editing.",
|
|
"governance": "Governance: Values boundary check prevents inappropriate content suggestions; scope verification ensures the AI stays within what was asked."
|
|
},
|
|
"memory": {
|
|
"title": "AI Memory Transparency",
|
|
"benefit": "Members can see, edit, and delete what the AI \"remembers\" about them. Full audit dashboard shows every AI interaction.",
|
|
"governance": "Governance: Multi-stakeholder consent required. Persistence decisions classified and auditable. Members control their own data."
|
|
},
|
|
"guardian": {
|
|
"title": "Guardian Agents",
|
|
"badge": "NEW",
|
|
"benefit": "Every AI response is verified against source material using embedding cosine similarity — mathematical measurement, not another generative model checking the first. Each factual claim gets a confidence badge (high, medium, low, unverified) visible to the member.",
|
|
"governance": "Governance: Verification operates in a fundamentally different epistemic domain from the generation layer — avoiding common-mode failure. Moderator corrections feed back into verification thresholds. All tenant-scoped.",
|
|
"link": "Philosophical foundations →"
|
|
}
|
|
},
|
|
"limitations": {
|
|
"heading": "Honest Limitations",
|
|
"intro": "This case study documents preliminary evidence from a production multi-tenant deployment. We are transparent about the following limitations:",
|
|
"items": [
|
|
{
|
|
"title": "Small Scale:",
|
|
"description": "The Village currently serves a small number of community tenants. Generalisability to larger deployments or different community types is unknown."
|
|
},
|
|
{
|
|
"title": "Self-Reported Metrics:",
|
|
"description": "No independent verification of logged data has been conducted."
|
|
},
|
|
{
|
|
"title": "Operator-Developer Overlap:",
|
|
"description": "Framework developer also operates the Village (conflict of interest)."
|
|
},
|
|
{
|
|
"title": "Limited Adversarial Testing:",
|
|
"description": "No formal red-team evaluation has been conducted."
|
|
},
|
|
{
|
|
"title": "Voluntary Invocation:",
|
|
"description": "AI could theoretically bypass governance if not configured to use it."
|
|
}
|
|
]
|
|
},
|
|
"demonstrates": {
|
|
"heading": "What This Demonstrates",
|
|
"supports": {
|
|
"title": "Evidence Supports",
|
|
"items": [
|
|
"• Sovereign AI deployment is technically feasible for small community organisations",
|
|
"• Polycentric governance can operate in production without prohibitive overhead",
|
|
"• Multi-tenant isolation with per-community governance is achievable",
|
|
"• Governance violations are detectable and auditable",
|
|
"• The framework learns from failures (documented incident responses)",
|
|
"• Verification without common-mode failure is achievable using mathematical similarity rather than generative checking"
|
|
]
|
|
},
|
|
"does_not_support": {
|
|
"title": "Evidence Does NOT Support",
|
|
"items": [
|
|
"• Framework effectiveness at scale (thousands of concurrent users)",
|
|
"• Generalisability across different AI systems or model architectures",
|
|
"• Resistance to sophisticated adversarial attacks",
|
|
"• Regulatory sufficiency (EU AI Act compliance untested)"
|
|
]
|
|
}
|
|
},
|
|
"cta": {
|
|
"heading": "Explore Further",
|
|
"description": "Dive deeper into the technical architecture, read the research, or see the Village platform in action.",
|
|
"visit_village": "Visit the Village →",
|
|
"village_ai": "Sovereign Language Model →",
|
|
"research_paper": "Research Paper →",
|
|
"guardian_paper": "Guardian Agents Philosophy →",
|
|
"research_details": "Research Details →"
|
|
}
|
|
}
|