Governed AI for Tuvaluan institutions,
built for the island office, the licence register, the fund report and the national record

The state held as a record

Tuvalu has begun work on digitally preserving the state itself -- its administrative archives, its cultural and linguistic material, and the legal apparatus of nationhood -- against the prospect that its territory becomes uninhabitable through sea-level rise. Whatever view one takes of the prospects, the project poses the question this platform exists to answer in its purest form. If the records are the institution, then they have to be complete, attributable, reproducible and intelligible to someone reading them in a century, under custody arrangements that do not depend on the place they came from.

That standard is considerably higher than ordinary document management. Every item has to carry its provenance: who created it, from what source, under what authority, in which version, and what was done to it afterwards. Where AI assists in cataloguing, transcription, translation between Tuvaluan and English, summarisation of archives or reconstruction of damaged material, the platform validates the input before the model runs, validates what comes back against the archive's own rules, and writes one immutable ledger row for every call -- actor, action, inputs, outputs, model version and verdict. A machine-produced transcription or translation that cannot be distinguished from an original, or traced to the model and prompt that produced it, quietly corrupts the record it was meant to preserve. Escalation to a person is required wherever a determination would change what the archive asserts.

The .tv domain: an asset whose substance is its records

Licensing of the .tv country-code top-level domain has been a material source of government revenue for years. Unlike a fishery or a port, there is no physical thing to inspect. The contract terms, the revenue computations, the payment schedules, the registry's reporting, the renewal and amendment history and the correspondence around them are not evidence about the asset -- they are the asset's whole substance.

That makes contract administration and reconciliation unusually consequential for a small administration dealing with much larger commercial counterparties. Where AI assists in reviewing contract terms, reconciling revenue statements against reported registrations, drafting correspondence or modelling options, the governed chokepoint validates the input, validates the output against the ministry's own rules, and writes an audit row for every call, with role-scoped access so that the finance ministry, the law officers and an external adviser each see exactly what their mandate permits. A figure that cannot be traced to the statement it came from is not a figure to negotiate against, and an interpretation of a clause that cannot be traced to the clause is not advice.

Licence revenue, vessel monitoring and catch documentation

Tuvalu is a party to the Nauru Agreement, and licence fees paid by distant-water fleets for access to its exclusive economic zone form a large share of government income. The zone is vast, patrol capacity is limited, and the evidence that access was licensed, that effort was reported and that catch was documented comes from vessel monitoring data, observer reports, logbooks, transhipment records and unloading documentation held by several parties in several jurisdictions.

Where AI assists in reconciling vessel day accounting, detecting anomalies in position and effort data, cross-checking reported catch against landing and transhipment records or preparing regional reporting, each step runs through the same governed chokepoint. The input is validated before the model runs, the output is validated against the administration's own rules, and an immutable row records the call. Escalation to a named officer is required wherever an output would support an enforcement action or a payment adjustment, and the reasoning is recorded with the decision, so a contested finding can be re-run exactly as it stood rather than argued from memory.

The Tuvalu Trust Fund and public finance reporting

The Tuvalu Trust Fund is a long-standing sovereign fund established with Tuvalu and partner governments to support the national budget. Its reporting is read by the contributing partners, by the fund's own governance arrangements and by parliament, alongside the ordinary public financial management record: appropriations, drawdowns, procurement, payroll and the audited accounts.

Reporting that several governments rely on has to be reproducible on demand, and reproducibility is a technical property rather than a promise. Where AI assists in reconciliation, variance analysis, drafting reporting narratives or projecting distributions, the platform validates inputs before the model runs, validates outputs against the treasury's own rules, and writes a ledger row for every call, so any figure can be traced to its source data, its model version and the person who accepted it. Where a figure would appear in a statement read by a contributing partner or laid before parliament, a named person approves it and that approval is itself part of the record.

Adaptation finance, monitoring and reclamation works

Coastal protection, land reclamation at Funafuti, water security and related works are financed by climate funds, multilateral development banks and partner governments whose disbursement is conditioned on monitoring, reporting and verification. Baselines, indicator series, safeguards compliance, procurement records and independent verification are what turn a completed work into a disbursement rather than a dispute.

Nine islands and limited survey capacity make the evidence base thin and precious. Where AI assists in processing survey and imagery data, maintaining indicator series, screening procurement or drafting reporting to a funder, the governed chokepoint validates the input, validates the output against the programme's own rules, and writes an immutable row for every call. A monitoring figure that cannot be traced to its instrument, its survey and its moment is not a figure a verifier can accept, and a reporting condition that cannot be evidenced is a condition that has not been met.

Administration across nine islands, in two languages

Civil registration, land records, health and school records, local revenue and public payroll are created on islands separated by long sea distances, with limited and intermittent connectivity, and they have to reconcile into one national account. Tuvaluan and English are both used in government: a great deal of routine administration happens in Tuvaluan, while formal instruments and partner reporting are frequently in English.

The platform enforces at the point of the call rather than at the point of synchronisation. Validation before the model runs, validation of what comes back, an audit row for every call and escalation to a person all execute locally on the island, and records created while disconnected reconcile cleanly when the link returns. Translation and drafting assistance between Tuvaluan and English runs through the same chokepoint, with the source, the model version and the human approval recorded, so a bilingual record shows which text is the original and who accepted the other. Minimization and role-scoped access are enforced at capture, which matters particularly in a population small enough that a health or registration record is rarely anonymous in practice.

On-premise deployment inside Tuvaluan facilities

Enforcement, inference and audit logging run inside the institution's own environment -- a government server room at Vaiaku, a ministry, the hospital, an island office. Data does not leave the perimeter in order to be processed, which is the only version of data residency that actually holds.

Air-gapped operation as a supported configuration

For civil registration, health records, enforcement evidence or the national archive, deploy with no outbound path at all. The platform does not phone home for telemetry, licence checks or model routing, so an air gap is a supported configuration rather than a degraded one.

Offline-capable enforcement across the outer islands

Governance does not pause when connectivity does. On Vaitupu, Nanumea, Nui or Nukufetau, on a patrol or a coastal survey, validation still executes, the ledger still writes and escalation still routes, and records created while disconnected reconcile without collisions when the link returns.

Custody that can be replicated without being surrendered

Preservation implies copies in more than one place. The platform can be deployed to a second site or a partner jurisdiction with the same enforcement rules and the same ledger, so replication changes where a copy sits without changing who controls it, what may be done with it, or how that is evidenced.