US 12,464,027 B2
System and method for policy-constrained symbolic rendering of AI outputs
Harold Arkoff, Sudbury, MA (US); and Vedran Jukic, Trieste (IT)
Assigned to OneSource Solutions International, Inc., Sudbury, MA (US)
Filed by OneSource Solutions International, Inc., Sudbury, MA (US)
Filed on May 28, 2025, as Appl. No. 19/221,392.
Application 19/221,392 is a continuation in part of application No. 17/993,765, filed on Nov. 23, 2022, granted, now 12,327,634.
Prior Publication US 2025/0294061 A1, Sep. 18, 2025
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/20 (2013.01) 23 Claims
OG exemplary drawing
 
1. A computer system for policy-constrained symbolic rendering of artificial-intelligence (AI) outputs, comprising:
a) an AI accelerator having an output first-in/first-out (FIFO) buffer that emits inference tokens as (token identifier, confidence, domain tag) tuples;
b) a graphics processor including a command processor and a single-instruction multiple-data (SIMD) co-processor coupled to the command processor;
c) a policy-evaluation co-processor implemented in the SIMD co-processor and operable to execute a deterministic finite automaton (DFA) stored in a non-transitory memory, the DFA receiving the tuples from the FIFO and, prior to emission of any pixel values, outputting a permit/deny decision together with a visibility mask that constrains presentation attributes;
d) a glyph selector comprising lookup tables that map permitted tuples to entries of a constrained glyph dictionary, each entry specifying a glyph identifier, semantic class, and allowed substitutions;
e) a provenance tagger operable to compute a cryptographic hash over at least the glyph identifier, a policy identifier associated with the DFA state, a session nonce, and a checksum of the tuples, thereby producing an evidence capsule bound to the glyph identifier;
f) a device-aware renderer coupled to a device profile registry and a rendering grammar, the device-aware renderer selecting a renderable asset for the glyph identifier only if the visibility mask and the rendering grammar permit co-occurrence on the target device profile; and
g) a justification ledger implemented as an append-only log that records, for each displayed glyph, the evidence capsule and a timestamp generated by a monotonic hardware clock;
wherein the permit/deny decision and evidence-capsule binding in elements (c)-(e) are executed within the graphics processor prior to writing any pixelvalues to a frame buffer, thereby preventing unauthorised tokens from entering a display pipeline and reducing rendering bandwidth by representing outputs as glyph identifiers instead of text or raster imagery.