Quantum Pipes
The Platform

The Anatomy of
Sovereign Intelligence

Open foundations you can run without us. Licensed intelligence you own the moment you deploy it.

Open Source · Apache 2.0+Licensed
Four Layers

The whole stack. Layer by layer.

The foundation is open and yours to run. The rest is licensed intelligence that answers to your key, on your infrastructure, under your audit.

Run the foundation yourself

Trust, but verify. Offline.

The Foundation layer is Apache 2.0. No account, no license key, no phone home. Install a package, read the code, verify a Capsule on your laptop.

CapsulePython
pip install qp-capsule
The audit primitive. Seal any AI decision into a signed, hash-chained record.
CapsuleGo
go get github.com/quantumpipes/capsule-go
Stdlib-only verifier. One binary, zero dependencies, verifies offline.
CapsuleLiteLLM
pip install capsule-litellm
Drop-in wrapper for LiteLLM. Every LLM call auto-seals to a Capsule.
VaultPython
pip install qp-vault
Governed knowledge store with trust tiers, Merkle verification, and offline search.
ConduitGit
git clone https://github.com/quantumpipes/conduit
Internal DNS and local TLS for your LAN. No external services, no public certificates.
TunnelGit
git clone https://github.com/quantumpipes/tunnel
WireGuard plus post-quantum hybrid TLS. Double encrypted remote access by policy.
For your AI coding agents

The Capsule Protocol, applied.

Two open-source tools bring tamper-evident audit trails to the agents you already use: Claude Code, Cursor, Codex, and Cline.

Open Source

Agent Capsule

Seal every Claude Code, Cursor, Codex, and Cline session into a tamper-evident hashchain. Real diffs, full tool results, reasoning, and a cryptographic seal.

Open Source

Capsule Explorer

Re-verify any agent's session in your browser, offline. Recompute every hash, check every signature, with nothing to trust but the math.

One operation, end to end

Watch the platform work.

One request crosses eight parts of the stack in under five seconds. Every step lands on your hardware. Every step signs itself into the chain.

operation.log
live
T+0.00sconductorpending
Planning “Review Q2 vendor SOC 2, draft summary for legal.”
T+0.31sscoutsealed
Ingested 4 docs · /vendors/acme/q2/
T+1.12svaultsealed
Retrieved 12 passages · trust tier 3
T+2.47scoresealed
Reasoned 4 steps · confidence 0.87 · 3 citations
T+3.22sforgesealed
Drafted acme-soc2-summary.pdf · Typst signed PDF
T+3.43shubpending
Queued for human review → mdavis@acme-bank.internal
T+4.18shubsealed
Approved by mdavis@acme-bank.internal
T+4.31sportsealed
Sent → legal@acme-bank.internal · internal TLS
T+4.52sledgersealed
Logged · 41,820ms local inference · $0 (no egress)
T+4.53scapsulesealed
Chain sealed · depth 248 · ed25519 + ml-dsa-65
Wall time
4.53s
Parts involved
8
Capsules sealed
8
Chain
verifiable ✓

No data left the building. No cloud meter ran. The chain is verifiable in Python, Go, or TypeScript, today, tomorrow, or in ten years. Any auditor can replay it from the ledger.

Run the open parts. License the rest.

The Foundation installs in minutes. The Intelligence layer unlocks with an agreement. Thirty minutes with an architect tells you exactly where the line falls for your deployment.

Open foundationAir-gap capablePost-quantum signaturesZero egress by default