Effective Date: Upon execution by both parties

Agreement Version: 2.0-INSTITUTIONAL (hybrid of the Quick Evaluation License and the Nitro Enclave Deployment SOP)

Governing Law: Liechtenstein (Vaduz)

Arbitration: International Chamber of Commerce (ICC), Zurich

Currency: Swiss Francs (CHF)

PARTIES

LICENSOR: Aveum Systems ("Aveum", "Licensor", "we", "us")

EVALUATOR: The institution, sovereign government entity, or authorized

agency executing this Agreement ("Evaluator", "you", "your")

RECITALS

WHEREAS Aveum Systems is the sole owner and inventor of the ArkGIS Genomic

Identification System, protected under United States Patent Application

No. 18/831,836;

WHEREAS the Evaluator desires a time-limited, controlled, self-service

evaluation of the Software using exclusively synthetic data;

WHEREAS the evaluation operates through Aveum's confidential computing

pipeline — an AWS Nitro Enclave deployment governed by the Standard

Operating Procedure incorporated herein as Schedule 1;

NOW THEREFORE, the parties agree as follows:

Disclosure (Test Scope): For the purpose of testing, a GIS is generated from chr1 and chr22 only. The Production GIS is derived from the complete panel (full WGS input) - Test Scope is Chr1 and CHr22 only, and would reject in the Production GIS which only resolves certified labs WGS not limited synthetic data).

ARTICLE 1 — DEFINITIONS

1.1 "Software" means the ArkGIS evaluation pipeline, the Ark512P Kernel: the Genomic

Replicator Engine (synthetic subject generator), the GIS Tunnel intake, the

derivation engine, and the confidential enclave computing environment,

as provisioned by Aveum.

1.2 "Evaluation Environment" means the Aveum-operated enclave

Test Infrastructure (AWS EC2, enclave-enabled, eu-west-2 or successor region)

assigned to the Evaluator for the Evaluation Period. The Evaluator does not

operate the underlying infrastructure during evaluation.

1.3 "Synthetic Data" means artificially generated genomic sequences

produced by the Genomic Replicator Engine that do not correspond to any real

individual. Only Synthetic Data may be processed during the Evaluation Period.

1.4 "Real Data" means any genomic data derived from an actual biological

sample, including WGS, VCF, FASTQ, BAM/CRAM, or SNP/MtDNA arrays from real

individuals.

1.5 "Evaluation Period" means twenty-four (24) consecutive hours

commencing at first activation and terminating automatically.

1.6 "Evaluation Key" means the time-limited cryptographic activation

issued by Aveum for the Evaluation Period only.

1.7 "Source Wallet" means the MPC-backed wallet provisioned for the

Evaluator via the approved MPC provider (Blockdaemon sandbox or successor),

used to sign evaluation operations. The Source Wallet is an extension of a

wallet on the MPC platform; the MPC operator's terms govern KYC and custody

obligations. Aveum is protocol-only and performs no KYC.

ARTICLE 2 — EVALUATION GRANT

2.1 Aveum grants the Evaluator a non-exclusive, non-transferable,

revocable, time-limited license to evaluate the Software for twenty-four (24)

consecutive hours at no license fee.

2.2 The grant is limited to:

• (a) One Evaluation Environment;
• (b) Processing of Synthetic Data only;
• (c) One vault configuration per the Vault Order Model (one Main Vault,

up to ten (10) sub-vaults, eleven (11) source wallets);

• (d) The 24-hour Evaluation Period;
• (e) Internal assessment by the Evaluator's authorized personnel.

2.3 The grant does NOT include: production use; Real Data processing;

national database integration; sublicensing; source code access; any rights

beyond the Evaluation Period; modification of the enclave image, kernel, or

derivation parameters (the "sealed runtime" boundary per Schedule 1).

ARTICLE 3 — SELF-SERVICE PIPELINE (SCOPE OF EVALUATION)

The Evaluator may exercise, through the Test Operations Control Panel:

• (a) Vault Allocation Number (VAN) assignment and vault-type selection

(Family Vault or Balaenoptera Mode);

• (b) Provisioning of the AVEUM Source Wallet via the MPC provider;
• (c) Generation of synthetic genome pairs and their submission to the GIS

Tunnel;

• (d) Derivation of genomic identity anchors inside the confidential enclave,

with identity heads returned under a time-limited display window and

identity tails permanently sealed enclave-side;

• (e) Sub-vault pod configuration: role allocation, folder-based genomic

drop with permanent disposal of input files, and returned identity

windows per sub-vault;

• (f) On-chain testnet provisioning (Sepolia or successor test network) of

vault accounts bound to the VAN.

ARTICLE 4 — NITRO ENCLAVE OPERATION (SOP INCORPORATION)

Schedule 1 (Standard Operating Procedure: Nitro Enclave Deployment) is

incorporated into this Agreement by reference. During the Evaluation Period:

• (a) The enclave measurement (PCR values) is recorded and immutable per

deployment;

• (b) The vsock bridge operates over a whitelist of permitted operations only;

all responses are sanitized to carry the GIS result and no derivation

internals;

• (c) The Evaluator has no access to enclave memory, kernel internals,

derivation salts, panel composition, or sealed identity tails;

• (d) Any attempt to introspect, dump, or extract enclave contents terminates

the evaluation immediately under Article 8 (Penalty Provisions of the

Quick Evaluation License, incorporated by reference).

ARTICLE 5 — NO REAL DATA; NO VAULT ASSETS

5.1 The evaluation is limited to Synthetic Data. Submission of Real Data

constitutes a material breach.

5.2 Any on-chain test-network vaults contain no assets of value. The

Evaluator acknowledges test-network tokens carry no monetary value.

5.3 Utility-token provisioning to Source Wallets during evaluation, if

any, is for pipeline testing only and confers no ownership, equity, dividend,

or profit-sharing rights.

ARTICLE 6 — TERM; CONVERSION

6.1 This Agreement terminates automatically twenty-four (24) hours after

activation.

6.2 Evaluation does not convert automatically. Production or extended use

requires the INSTITUTIONAL FULL PLATFORM LICENSE AGREEMENT (5-year or 10-year

term), executed separately.

ARTICLE 7 — CONFIDENTIALITY (NDA INCORPORATED)

7.1 Each party may receive Confidential Information of the other in

connection with the evaluation. "Confidential Information" includes the

Software architecture, enclave measurements, vault configurations, workflows,

pricing, and this Agreement's terms.

7.2 Confidential Information does not include information that is or

becomes public through no breach, was independently developed, or is required

to be disclosed by law (with prompt notice to Aveum).

7.3 Confidentiality obligations survive for three (3) years after

termination; obligations regarding derivation internals, panel composition,

and sealed identity material survive indefinitely.

ARTICLE 8 — INCORPORATED PROVISIONS

The Quick Evaluation License's provisions governing the GIS Counter,

Evaluation Key, data handling, intellectual property, penalty provisions for

breach (including Real Data submission and enclave introspection), warranty

disclaimers, and liability limits are incorporated into this Agreement by

reference as if fully restated.

ARTICLE 9 — GENERAL

Governing law, arbitration, severability, and entire agreement provisions of

the Quick Evaluation License apply. This Agreement plus its Schedules

constitute the entire agreement regarding the evaluation.

SCHEDULE 1: Standard Operating Procedure — Nitro Enclave Deployment

(incorporated by reference; current version held by Aveum, disclosed to the

Evaluator at activation)

SCHEDULE 2: Evaluation Order Form (environment, VAN, vault configuration,

activation timestamp)