TECHNICAL METHODOLOGY — PATENT PENDING GB2610865.4

How the Environmental
Firewall Works

A hardware-native enforcement layer for AI inference carbon governance. Every request intercepted, evaluated, and cryptographically sealed. Suitable for ESRS E1 limited assurance.

View Audit Report →Live Dashboard
Abstract

The February 2026 Omnibus I Directive has narrowed mandatory CSRD scope to approximately 5,000 large enterprises facing mandatory limited assurance audits with legal consequences for non-compliance. The primary audit failure mode identified in CSRD literature is material misstatement — unverifiable emissions estimates that cannot withstand independent assurance scrutiny. AI inference emissions (GHG Protocol Scope 3 Category 11) are the fastest-growing and least-governed component of corporate carbon liability.

ACERM eliminates material misstatement risk for AI emissions by providing per-transaction, cryptographically verified audit evidence. Production V1 has been validated in a live operational environment, governing 1,000+ inference requests across ten AI agents with verified carbon avoidance of 73.6kg CO₂e.

Section 1

The Computational-Grid Synchronisation Gap

We define the Computational-Grid Synchronisation Gap as the structural disconnect between millisecond-scale AI inference execution and monthly-scale carbon accounting. This gap has three dimensions:

Temporal

AI inference decisions are made in milliseconds. Grid carbon intensity is measured at 30-minute intervals. No existing system bridges these timescales at the enforcement layer.

Architectural

AI agents operate entirely above the application layer. The electrical grid operates at the physical layer. No hardware-level interface exists between them in standard deployments.

Regulatory

ESRS E1 and CSRD mandate emissions reporting but specify no enforcement mechanism. Organisations can report high-carbon AI usage with no obligation to prevent it.

ACERM addresses all three dimensions simultaneously by operating as a mandatory network proxy — a hardware-level chokepoint between AI agents and upstream inference providers — that queries live grid telemetry at the moment of each inference request.

Section 2

Prior Art — What Existing Tools Cannot Do

Several tools exist for AI carbon measurement and reporting. None address real-time enforcement at the inference request level.

CapabilityCodeCarbonCloud DashboardsACERM
Real-time enforcement
Per-request granularity
Tamper-evident audit chain
Hardware-layer operation
Provider-agnostic
ESRS E1 compliant outputPartial
Carbon credit issuance
Section 3

System Architecture

Component 4.1
Local Gateway Node

Implemented as a binary process on an edge-computing device — the mandatory and exclusive network chokepoint between AI agents and upstream providers. Exposes an OpenAI-compatible endpoint. Any AI agent can route through ACERM by changing a single environment variable.

Component 4.2
Grid Telemetry Interface

Maintains continuous connection to the UK National Grid ESO Carbon Intensity API, polling at 30-second intervals. Returns current intensity in gCO₂/kWh, forecast, generation mix, and grid state. Implements Carbon Integrity Safety Protocol (CISP) — fail-closed on telemetry loss.

Component 4.3
Enforcement Engine

Applies configurable governance policy to each intercepted inference request. Evaluates agent authentication, kill switch state, grid telemetry, operating mode, carbon intensity, and agent priority. Produces PERMIT, DELAY, DOWNGRADE, or DENY outcome.

Component 4.4
Agent Identity Registry

Maintains authenticated AI agents, priority classifications, and team assignments. Stored in Supabase (EU West London) with local caching. Authentication uses SHA-256 hashing of the X-ACERM-KEY header value. Refreshed every 60 seconds.

Gateway API Endpoints
POST/v1/chat/completionsOpenAI-compatible inference proxy (X-ACERM-KEY required)
GET/api/heartbeatSystem health check and live grid state
GET/api/auditAudit chain summary and ESRS E1 export
GET/api/leaderboardAgent performance rankings
GET/api/savingsCarbon avoidance metrics
POST/api/toggle-modeShadow / Active mode switch
POST/api/killEmergency kill switch — deny all non-HIGH requests
WS/ws/oracleReal-time grid state WebSocket broadcast
Section 4

Carbon Intensity Measurement

ACERM uses the UK National Grid ESO Carbon Intensity API as its primary telemetry source, maintained under CC BY 4.0 licence by National Grid ESO.

Carbon avoidance calculation:
CO₂_avoided = tokens × energy_per_token × grid_intensity_delta
tokens = estimated token count from request parameters
energy_per_token = 0.000003 kWh/token (conservative estimate, aligned with Google 2024 benchmark)
grid_intensity_delta = difference between current intensity and GREEN threshold
Grid StateDefault ThresholdHIGH PrioritySTANDARD PriorityLOW Priority
GREEN< 120 gCO₂/kWhPERMITPERMITPERMIT
AMBER120–250 gCO₂/kWhPERMITDELAYDENY
RED> 250 gCO₂/kWhPERMITDELAYDENY
Section 5

Cryptographic Audit Chain

Every enforcement decision is recorded as an immutable ledger entry in a SHA-256 sequential hash chain. The chain provides tamper-evident, independently verifiable evidence suitable for ESRS E1 limited assurance engagement.

Hash chain entry structure:
entry_hash = SHA-256(prev_hash + request_id + timestamp + agent_id + outcome + tokens + co2 + grid_intensity)
genesis = SHA-256("GENESIS_ACERM_2026") = a4b2c9d1e8f3a7b6...
Tamper-evident

Any modification to any entry breaks the hash chain from that point forward. Detectable by any independent verifier.

Independently verifiable

The genesis hash and chain structure are publicly documented. Any third party can verify chain integrity without access to ACERM systems.

ESRS E1 suitable

Chain entries include all fields required for ESRS E1 Scope 3 Category 11 disclosure — per-transaction, with timestamps, agent identity, and carbon calculation.

Section 6

Production V1 — Empirical Results

The following results were verified in a live operational environment on Apple M-series edge hardware — May 2026.

592
governance decisions/second
Concurrent throughput
0.857ms
per request
Proxy latency — sub-millisecond confirmed
101g vs 101g
CO₂/kWh
NESO telemetry accuracy — perfect match
100%
compliance rate
ESRS E1 VERIFIED — chain intact
73.6kg
CO₂e avoided
Real accumulated data — 1,000 requests
4,900+
ledger entries
SHA-256 hash chain entries — verified
Section 7

Regulatory Compliance Framework

ESRS E1

ACERM audit chain provides per-transaction Scope 3 Category 11 data with timestamps, agent identity, carbon calculation, and chain hash. Suitable for limited assurance engagement under ISAE 3000.

CSRD

ACERM satisfies the evidentiary requirements for CSRD mandatory limited assurance by providing independently verifiable, tamper-evident carbon accounting at the individual inference request level.

GHG Protocol

Carbon calculations align with GHG Protocol Scope 3 Category 11 methodology. Energy per token estimate is conservative and benchmarked against published Google data.

GDPR Article 28

ACERM is content-blind by design. Only request metadata is inspected. No prompt content, no personal data, no user identifiers are processed or stored. DPA template available.

UK PPN 06/21

ACERM provides the Category 11 AI inference emissions data absent from all reviewed UK government supplier Carbon Reduction Plans — closing the structural gap created by PPN 06/21's mandatory category subset.

For Sustainability Assurance Professionals

If you are conducting a limited assurance engagement under CSRD and require further technical detail on ACERM's methodology, audit chain structure, or evidentiary standards, we welcome professional correspondence.