PromptFrame by GotHawk Solutions LLC — a deterministic, air-gapped AI governance platform for federal contractors of all sizes, DoD program offices, and state agencies. Design-Time scoring and ATO preparation package generation, including machine-readable OSCAL. Self-hosted and zero-egress. A complementary runtime enforcement layer is on the roadmap.
PromptFrame is a deterministic, air-gapped AI governance platform for federal contractors and DoD program offices. The shipping product is Design-Time; a complementary Runtime enforcement layer is on the roadmap.
10-dimension deterministic scoring of AI system prompts — no LLM in the assessment path, same input always produces same output. The scoring method itself is independently verifiable and defensible under C3PAO scrutiny. Aligned to NIST AI RMF, EO 14179, OMB M-25-21/22, OMB M-26-04, GSAR 552.239-7001 (proposed, 14 paragraphs), CMMC Level 2, and PA EO 2023-19. Auto-generates the complete AI-governance evidence package for ATO preparation — the AI-system portion of the body of evidence: SSP narratives, POA&M, NIST 800-53 crosswalk, GSAR checklist, SPRS export, executive summary — all SHA-256 integrity-protected.
A complementary runtime enforcement layer is on the roadmap — architected and in development, not yet fielded. It is designed to sit alongside LLM and agentic toolchains and gate each tool call against the approved policy boundary, recording a cryptographically signed audit record for every decision. The shipping product today is Design-Time.
Standalone scanner surfaces AI systems the organization may not know it has — installed applications, browser extensions, IDE plugins, local model runners (Ollama, LM Studio), and API credential files. Analyzes network logs in six formats: Apache/Nginx CLF, ArcSight CEF, CSV, DNS query logs, Cisco ASA/FTD syslog, and directory scan output. Foreign-origin AI vendor contacts flagged per GSAR 552.239-7001 §(e)(2) American AI Systems requirement (proposed rule) — DeepSeek (China), Mistral (France). Output: HMAC-SHA256 signed scan report, importable directly into the governance record as a chain-of-custody artifact.
Runs as a decoupled, hardened container alongside local, air-gapped model deployments — including open-weights models like NVIDIA Nemotron. Design-Time scoring uses no LLM in the decision path, so scores cannot be reasoned around by the model being governed. The roadmap runtime gate is designed to apply to agent tool-calls routed through it; model-agnostic, modifies no model weights. Generates the design-time ATO-preparation evidence raw compute does not provide.
FIPS 140-3 capable base image. All data encrypted at rest and in transit using government-grade algorithms. Cryptographically signed audit chain — every record tamper-evident and independently verifiable. Zero external API calls — fully self-contained, works in CUI environments and air-gapped networks.
Fixed-scope engagements: governance gap assessments, OMB M-25-21 AI use-case inventory alignment, CMMC Level 2 AI governance posture review. Available as AI governance subcontractor under prime contractor AI modernization efforts. Fixed-price SOWs available.
PromptFrame is deployed as a self-hosted container stack on client infrastructure. GotHawk provides signed container images — no data is ever transmitted to GotHawk or any third party. Full data residency control by design.
Client runs the Docker stack on their own infrastructure. GotHawk delivers signed container images only. No data leaves the client environment — ever. Compatible with air-gapped networks and CUI environments. FIPS 140-3 capable.
Applicable NAICS codes for federal procurement purposes. SAM.gov active — CAGE 1M4D4.
| NAICS Code | Description | SBA Size Standard | Status |
|---|---|---|---|
| 513210 | Software Publishers Primary | $47M annual revenue | Applicable |
| 541512 | Computer Systems Design Services | $34M annual revenue | Applicable |
| 541511 | Custom Computer Programming Services | $34M annual revenue | Applicable |
| 541519 | Other Computer Related Services | $34M annual revenue | Applicable |
GotHawk is positioned for subcontract teaming under prime contractor AI modernization and DoD AI governance efforts. Open to teaming conversations with large and mid-tier primes.
GotHawk Solutions LLC brings specialized AI governance capabilities to prime contractors pursuing federal AI modernization, CMMC compliance, and DoD agentic AI programs. PromptFrame produces defensible ATO preparation documentation and machine-readable OSCAL evidence at design time — the design-time portion of the AI governance lifecycle. A complementary runtime enforcement layer, which would extend this to the runtime portion, is on the roadmap.
Fixed-price SOWs available. SAM.gov active · CAGE 1M4D4.