| Security |
| Who can ask | Anyone who can reach the port. The server has no login. | Key holders only, with secrets stored as hashes, rate limits and token caps |
| Clearance levels | Not built in | On keys and models. A key never reaches a model above its level. |
| On the wire | Plain HTTP. Encryption needs a proxy in front. | TLS 1.3 only, built in |
| The model file | Checked by hash when downloaded | Checked when downloaded, re-checked at every start, refused if changed |
| Record of use | Server logs | A hash-chained audit log. A removed or altered line is detected. |
| Cloud | Cloud inference and web search, available unless switched off | The model engine listens on this machine only. A hosted model is used only if you add one. |
| Proof |
| What produced an answer | The model’s name | A signed receipt: weights, instructions, settings, seed, question and answer, by hash |
| Check it later | Not built in | Anyone with the public key, in a browser or on the command line |
| Same answer twice | You can set a seed. Nothing checks the result. | Replay any receipt from an agent that answers one request at a time. The server reruns it and proves the match by hash. |
| Many requests at once | Yes, one setting for the whole server | Yes, set per agent. The receipt says whether that answer replays exactly. |
| Signatures that last | Not built in | Ed25519 and ML-DSA-87, the post-quantum standard |
| Energy per answer | Not built in. Answers report time and token counts. | Measured by the chip’s own counters and signed on the receipt |
| Accuracy |
| Quotations | Not checked | Word for word against the sources given. Invented ones flagged or cut. |
| Forced JSON format | Yes, with a JSON schema | Yes, and the schema’s fingerprint is on the receipt, so a replay uses the same one |
| Images | Yes, for vision models | Yes. Images are inside the fingerprint on the receipt, and the server never fetches one from the web. |
| Which sources it used | Not built in | Measured from the model’s own probabilities, signed on the receipt |
| Learning |
| Conversations as training data | Not built in | JSONL with ratings and corrections, for fine-tuning, DPO and KTO |
| The next model | Not built in | One command retrains it. It comes back signed, with its base model and training data on record. |