The primitives are open.The proof is yours.
Four audit-grade foundations you can clone, build, and verify without us. Apache 2.0 on every line. No contract. No account. No phone home.
Why Open
Verifiable cryptography cannot be a black box.
The primitives you use to prove a decision happened must be open to anyone who wants to check that they did.
Auditable
Read every line. Reproduce every binary. A primitive that claims to be verifiable cannot ask you to trust it.
Portable
Apache 2.0 across the foundation. Embed in any stack, commercial or not. No upgrade path leads into a sales cycle.
Standalone
Each primitive runs on its own. Capsule without Vault. Vault without Core. No runtime in the foundation requires Quantum Pipes to exist.
The Audit Primitive
Capsule. Seal any AI decision.
Verify it anywhere.
A Capsule is a hash-chained, dual-signed record of what an AI decided, why, and what happened. The primitive everything else in the stack seals to. Apache 2.0, offline verifiable, three implementations.
A native Go verifier with zero external dependencies. One static binary that verifies a Capsule chain offline. Drop it on an air-gapped auditor laptop.
A drop-in wrapper for the LiteLLM proxy. Every LLM call automatically seals into a Capsule with prompt, response, token counts, and model provenance.
01 · The Foundation
The rest of the open foundation.
Apache 2.0 · no agreement required. Storage, networking, and perimeter. The three primitives that Capsule seals into, each standing on its own.
Licensed Layer
The reasoning engine ships under commercial license.
Core, Conductor, Wizard, Scout, and the Surface are distributed to enterprise and regulated customers under a paid agreement. The audit primitives remain open so that any output of the licensed layer is independently verifiable.
Source access on deployment
Full source and reproducible-build attestation chain delivered with the signed release. Build the binary you run.
Written non-training guarantee
Contractual covenant that customer prompts, embeddings, and Capsules are never used to train, fine-tune, or evaluate any model.
Data residency and custody
Inference, storage, and key material remain within the customer's infrastructure boundary. No upstream sync, no shadow telemetry.
Customer-held kill switch
One signed command halts every agent, drains every queue, and seals the stop-state into Capsule. Authority stays with the customer.
Capsule-sealed outputs
Every decision from the licensed layer emits a signed, hash-chained Capsule into the open primitive. Verify offline, in any of three languages.
Defined governance surface
Policy, approval, and escalation hooks expose the full decision lifecycle to your compliance program. Nothing is hidden behind a vendor endpoint.
Distributed under commercial license
The Platform
Platform coming soon.
The full Quantum Pipes platform is in private deployment with our first regulated customers. The open primitives are available today. The licensed layer follows.
Talk to us
Three paths. Same engineers.
Every question reaches the people who own the code. No tier-one queue.