GotHawk Solutions LLC — Pennsylvania Vendor Credentials

Company Overview

GotHawk Solutions LLC is a Pennsylvania BDISBO self-certified Small Business and Micro Business providing AI governance technology to Commonwealth agencies, county governments, municipal entities, and Pennsylvania-based contractors. PromptFrame is a deterministic, air-gapped AI governance platform — Design-Time (DT), the shipping product, scores AI system prompts across 10 governance dimensions and auto-generates the complete AI-governance evidence package for ATO preparation — the AI-system portion of the body of evidence, including machine-readable OSCAL. A complementary Runtime (RT) enforcement layer, designed to gate agentic tool calls inline against approved policy, is in development and not yet fielded. All 10 DT dimensions map to Pennsylvania Executive Order 2023-19 Section 3 core values. Fully self-hosted — deployed as a Docker container stack on your infrastructure. No data leaves your environment. No external API calls.

As Pennsylvania advances HB 95, HB 2314, and HR 425, agencies deploying AI need documented compliance postures with verbatim regulatory citations. PromptFrame delivers that evidence — deterministic, tamper-evident, and ready for agency oversight, legal review, or public accountability requirements.

Commonwealth Commodity Codes

Code	Description
43230000	Software — IT and Networking
80100000	Management and Business Consulting Services
81111800	Computer or Network or Internet Security
84110000	Education and Training Services

PA EO 2023-19 Regulatory Alignment — Design-Time (DT)

PromptFrame DT Dimension	PA EO 2023-19 Core Value	EO Section
Prompt Clarity	Transparency	EO 2023-19 §3(j)
Agentic Architecture	Safety and Security	§3(i)
Tool Boundary Definition	Accuracy · Proportionality	§3(a) §3(h)
Data Privacy & Security	Privacy · Safety and Security	§3(g) §3(i)
Transparency & Disclosure	Transparency	§3(j)
Policy Adherence	Mission Aligned · Proportionality	§3(f) §3(h)
Output Quality Controls	Accuracy	§3(a)
Context & State Integrity	Privacy · Transparency	§3(g) §3(j)
Explainability	Transparency	§3(j)
Task Alignment	Mission Aligned · Employee Empowerment	§3(f) §3(c)

All 10 DT dimensions map to PA EO 2023-19 Section 3 core values. Citations reference the Governor's Executive Order of September 20, 2023 directly — not implementing regulations.

PA EO 2023-19 Alignment — Runtime (RT), Roadmap

The runtime enforcement layer is architected and in development, not yet fielded. The table below describes how the planned RT capabilities are designed to map to PA EO 2023-19 once delivered; the shipping product today is Design-Time.

Planned RT Capability (roadmap)	PA EO 2023-19 Core Value	EO Section
Unauthorized tool call blocking (pre-execution)	Safety and Security	§3(i)
Scope boundary enforcement	Mission Aligned · Safety and Security	§3(f) §3(i)
Data exfiltration attempt blocking	Privacy · Safety and Security	§3(g) §3(i)
Cryptographically signed gate decision log	Transparency · Accuracy	§3(j) §3(a)
Real-time anomaly promotion to DT	Safety and Security · Adaptability	§3(i) §3(b)

The roadmap RT layer maps most directly to §3(i) Safety and Security — the EO's requirement that agencies safeguard data against unauthorized uses and intrusions. It is designed to gate unauthorized AI tool calls before execution, addressing this requirement at the operational layer once fielded. Today, PromptFrame produces the design-time governance evidence for these alignments.

Core Capabilities

Design-Time (DT) — Governance Scoring & ATO Artifacts

Deterministic 10-dimension scoring of AI system prompts — no LLM in the scoring path, same input always produces same output. Auto-generates per assessment: SSP narratives, NIST SP 800-53 crosswalk, POA&M (FedRAMP format), GSAR 552.239-7001 (proposed) checklist, SPRS export, remediation report, and executive summary. All SHA-256 integrity-protected. Aligned to PA EO 2023-19, NIST AI RMF, EO 14179, OMB M-25-21/22, and OMB M-26-04.

Runtime (RT) — Inline Enforcement Gate · Roadmap

A complementary runtime enforcement layer, in development and not yet fielded. It is designed to sit inline with LLM and agentic toolchains and gate unauthorized tool calls before execution, logging each decision as a cryptographically signed audit record across four categories: tool authorization, scope boundary, data exfiltration attempt, privilege escalation. The shipping product today is Design-Time.

Shadow AI & Foreign AI Detection

Workspace scanner identifies installed AI tools, browser extensions, environment variables, and network contacts with foreign-origin AI endpoints (DeepSeek, Mistral, etc.) flagged per GSAR 552.239-7001 §(e)(2) American AI Systems requirement (proposed rule). HMAC-signed scan report produced as a standalone artifact.

Agency Advisory & Teaming

Fixed-scope engagements for agencies conducting pre-deployment AI risk assessments under PA EO 2023-19 §5 and OMB M-25-21 §3. Self-hosted deployment — no data leaves your environment. Contact for deployment documentation and a capabilities briefing.

Deployment & Engagement

PromptFrame is deployed as a self-hosted container stack on your infrastructure. GotHawk provides signed Docker container images, deployment documentation, and configuration guidance for your environment. No data leaves your network — ever. Compatible with air-gapped networks and CUI environments. FIPS 140-3 capable (Red Hat UBI 9).

Engagements available through the PA Suppliers Portal (Vendor No. 0000569874) or via direct award under applicable thresholds. Contact to discuss your deployment and receive a capabilities briefing: williams@gothawksolutionsllc.com · 717-489-9585