In the shopBeta applications openRunning on our bench

Optima Prime · our model server

A chain of custody for AI.

Optima Prime runs AI on hardware you control and keeps a signed record of everything that matters: which model came in, what the agent was told, every answer it gave, who corrected it, and what the next version learned. Anyone can check the signatures. Any answer can be replayed and proven.

  1. 1A model comes inHash checked against its publisher’s, re-checked at every start.
  2. 2An agent is definedA signed Agentfile. What it was told is on record.
  3. 3Every answer is signedWeights, instructions, settings, seed, question and answer, by hash.
  4. 4Any answer can be replayedSame inputs, same words. The match is proven, not promised.
  5. 5People correct itRatings and corrected answers, tied to the receipt they judge.
  6. 6The next version learnsTrained on those corrections, signed, with its whole lineage.

Michael askedWhat is Synthros?

bench-llama answered · you can edit thisSynthros is a simulated town with AI residents.

Optima Prime receiptrcp_1a117ce4a4e5a01756daf5b
Time
2026-10-07 19:19:18 UTC
Server
optima-prime 0.3.0, Rhode Island, USA
Engine
llama.cpp, build b11429-d81235049
Agent
bench-llama, level public
Weights
sha256 7b064f58…33557c
Instructions
sha256 4ee39952…776ec4
Settings
temperature 0.3, top_p 0.9, up to 160 tokens
Seed
835207603
Question
sha256 44cc8a59…ba9acd
Answer
sha256 7c064612…bb5337
Work
229 tokens in, 12 out, 824 ms
Signed by
ed25519:5c662e4a0fc65474
Ed25519 and ML-DSA-87

Check it yourself.

This page holds a real receipt from our server and the server’s public key. Your browser checks the signature and the hashes. Nothing is sent anywhere.

  • Signaturenot checked
  • Answer matches the receiptnot checked
  • Question matches the receiptnot checked
Press the button. Then try to fool it.

Try to fool it:

The receipt also carries an ML-DSA-87 signature, the post-quantum standard, so it still holds when today’s signatures can be broken. Browsers can’t check that one yet; our command-line tool does. Download this receipt and the public key.

We started on Ollama.

Like a lot of labs, we championed Ollama early. We built on it, and for a long time we maintained our own modified core. It made running AI on your own hardware easy, and it taught us a lot.

It also showed us what it was never built to do: check who is asking, name the exact weights behind an answer, and prove it later. We stopped patching around that and built our own server.

175,000Ollama hosts open to the internet across 130 countries, found by SentinelLABS and Censys (January 2026). Ollama’s server has no login, so anyone who finds one can use it.
# Ask with no key
$ curl -sk https://127.0.0.1:8443/v1/chat/completions
{"error":{"message":"a valid API key is required: Authorization: Bearer op_...","type":"authentication_error"}}

# Check the receipt on this page
$ optima-prime receipt verify receipt.json --public-keys public-keys.json
valid: receipt rcp_1a117ce4a4e5a01756daf5b signed by ed25519:5c662e4a0fc65474 (ML-DSA-87 checked too)
  • Asked with no key401 refused
  • Key below the model’s level403 refused
  • Weights file changed on diskrefused at start
  • Key holder asksanswered, signed
  • Answer replayedmatch
  • Every stepin the chained audit log

Optima Prime and Ollama, side by side.

 Ollama 0.40Optima Prime
Security
Who can askAnyone who can reach the port. The server has no login.Key holders only, with secrets stored as hashes, rate limits and token caps
Clearance levelsNot built inOn keys and models. A key never reaches a model above its level.
On the wirePlain HTTP. Encryption needs a proxy in front.TLS 1.3 only, built in
The model fileChecked by hash when downloadedChecked when downloaded, re-checked at every start, refused if changed
Record of useServer logsA hash-chained audit log. A removed or altered line is detected.
CloudCloud inference and web search, available unless switched offThe model engine listens on this machine only. A hosted model is used only if you add one.
Proof
What produced an answerThe model’s nameA signed receipt: weights, instructions, settings, seed, question and answer, by hash
Check it laterNot built inAnyone with the public key, in a browser or on the command line
Same answer twiceYou can set a seed. Nothing checks the result.Replay any receipt from an agent that answers one request at a time. The server reruns it and proves the match by hash.
Many requests at onceYes, one setting for the whole serverYes, set per agent. The receipt says whether that answer replays exactly.
Signatures that lastNot built inEd25519 and ML-DSA-87, the post-quantum standard
Energy per answerNot built in. Answers report time and token counts.Measured by the chip’s own counters and signed on the receipt
Accuracy
QuotationsNot checkedWord for word against the sources given. Invented ones flagged or cut.
Forced JSON formatYes, with a JSON schemaYes, and the schema’s fingerprint is on the receipt, so a replay uses the same one
ImagesYes, for vision modelsYes. Images are inside the fingerprint on the receipt, and the server never fetches one from the web.
Which sources it usedNot built inMeasured from the model’s own probabilities, signed on the receipt
Learning
Conversations as training dataNot built inJSONL with ratings and corrections, for fine-tuning, DPO and KTO
The next modelNot built inOne command retrains it. It comes back signed, with its base model and training data on record.

Where Ollama is ahead: a one-line install, a large model library and a big community. Compared with Ollama 0.40.0, the latest stable release, October 2026.

Quotes checked. Sources measured.

Verified quotes

An invented quote doesn’t get through.

Given town council minutes and asked for a quote from the mayor, who never spoke, a small model took a councilor’s sentence, changed one word and gave it to the mayor. The server checks every quotation word for word against the sources before the answer leaves.

The model wrote

Mayor Grant said: “The rail stop means traffic on Broad Street for two years, and the people who live there deserve a say before we vote.”

Not in the sources
What was delivered

Mayor Grant said: [unverified quote removed]

Llama 3.1, given the same minutes, said it did not know, and every quote it gave checked out.

Evidence attribution

Which sources the answer actually used.

Asked how long construction will take, Llama 3.1 answered from three sources. The server took each one away in turn and measured, from the model’s own probabilities, how much less likely the answer became.

  • Engineer’s memo85.7 · relied on
  • Council minutes−0.5 · not needed
  • Weather note−0.1 · not needed

Measured by the server, not claimed by the model. The numbers are signed onto the answer’s receipt.

Energy and images, on the receipt.

Energy per answer

Every answer says what it cost to make.

The server reads the chip’s own energy counters while the answer is produced and signs the result onto the receipt. On our bench, Qwen3.8 27B on an M2 Ultra, a 90-token answer took 4.3 seconds:

  • GPU274.9 J
  • Memory269.0 J
  • CPU8.3 J

552 J in all, about 128 watts while it ran. The figure covers the whole chip during the answer, and the receipt says so when two answers overlap.

Images

A screenshot, read and signed.

We gave the same model a screenshot of our THREADPULL demo page and asked what the site is and what a visitor has to do.

It answered, word for word

Site name: ThreadPull (Optimatech Labs – Evidence Investigations).
What it offers: A research/demo tool that untangles a question, company, or claim by pulling on the thread of evidence and showing what holds.
What a visitor must do: Enter their email address and verify it via a sent code to start (2 free investigations per day).

The image is inside the fingerprint on the receipt, which also names the vision file by hash. The receipt verified and the replay matched. Images must be sent with the request; the server will not fetch one from the web.

Runs the models you choose.

Open models

Any model llama.cpp runs in GGUF format: Llama, Qwen, Mistral, Gemma, Phi, DeepSeek and more, at whatever size your hardware holds.

Straight from Hugging Face

One command downloads a model and checks it against the hash its publisher posted. For an air-gapped box, bring it in on a USB drive instead.

Your own fine-tunes

Models trained by the retrain loop come back signed, with the data, the base model and the settings that made them on record.

Hosted models

Point it at any OpenAI-compatible service and those answers get receipts too, naming the service that answered and marked as not guaranteed to repeat word for word.

On our bench now Qwen3.8 27B, text and images, imported from Ollama’s library · Llama 3.1 8B Instruct · Qwen2.5 0.5B Instruct · bench-v2, our first fine-tune

Every conversation becomes training data.

Switch on capture for an agent and every exchange is saved as a line of JSONL, tied to its receipt. Rate answers, write the answer it should have given, and export in the formats training tools read. These three lines are real, from our bench agent.

Fine-tuning

The conversation as it should go. Feeds our retrain loop directly.

{"messages": [
  {"role": "user", "content": "What is Neon?"},
  {"role": "assistant", "content": "Neon is a companion that knows your day and runs on the lab's own model."}
 ],
 "receipt": "rcp_1a117b73a3e3…"}

Preference pairs (DPO)

The model invented a forecast. We wrote the right answer. That becomes a chosen and a rejected answer to the same question.

{"prompt": [{"role": "user", "content": "What's the weather in Boston tomorrow?"}],
 "chosen": [{"role": "assistant", "content": "That is outside my bench. I can tell you about the lab's work…"}],
 "rejected": [{"role": "assistant", "content": "The weather forecast for tomorrow in Boston is partly cloudy with a high of 72…"}],
 "receipt": "rcp_1a117b739e29…"}

Thumbs up, thumbs down (KTO)

Every rated answer, labelled good or bad. No pairs needed.

{"prompt": [{"role": "user", "content": "What's the weather in Boston tomorrow?"}],
 "completion": [{"role": "assistant", "content": "The weather forecast for tomorrow in Boston is partly cloudy…"}],
 "label": false,
 "receipt": "rcp_1a117b739e29…"}

Preference pairs and labels are the same human-feedback data that reinforcement learning from human feedback is built on, in the DPO and KTO formats that today’s training tools read. Every line points back to the receipt of the answer it came from, so a trained model’s data has provenance.

In production: Jurors.com.

What it’s for.

Answers you can put in a file.

When an AI answer ends up in a case file, a report to a regulator or a decision memo, the receipt says exactly what produced it, and the replay proves it.

receipt verify → valid
replay → match: true

AI that stays in the building.

It runs on your hardware, next to your data. Keys, clearance levels and a tamper-evident log come built in, and no cloud sits in the loop.

public key → only the public agent
internal model → 403 refused

Agents that learn on the job.

An agent is a short text file. Its conversations become training data, your corrections are applied, and the next version is one command away, signed, with its lineage on record.

small model, taught by a large one on 43 answers, in under two minutes: it turned down 5 of 5 off-topic questions it had never seen, at nearly five times its teacher’s speed

Where it’s going.

  • DoneProof and replaySigned receipts on every answer, replay with a match report, a public verify command.
  • DoneControlKeys, clearance levels, rate limits, TLS 1.3, the chained audit log, signed model manifests.
  • DoneVerified quotesEvery quotation checked word for word against the sources given. Invented ones flagged or cut, the check on the receipt.
  • DoneShows its evidenceWhich sources an answer actually leaned on, measured by the server and signed.
  • DoneAgents that learnAgentfiles, every conversation saved as JSONL, ratings and corrections, exports for fine-tuning and preference training, the one-command retrain loop.
  • DoneEnergy and imagesEnergy per answer from the chip’s own counters, image input, and forced JSON formats, all recorded on the receipt.
  • DoneSigned investigationsEvery model answer behind a THREADPULL investigation signed by Optima Prime, with the receipts listed on the investigation.
  • DoneMany at onceAn agent can answer several people at the same time. Agents left at one at a time still replay word for word, and the receipt says which.
  • DoneCharactersEvery Nonplayer character is a signed agent. Each line it says carries the fingerprint of who it was told to be.
  • NextLearning from correctionsThe retrain loop trains on preference pairs directly, so an agent learns from what it got wrong as well as what it got right.
  • NextYour key, plugged inA USB-C security key to sign in, to approve a new model or agent before anyone can use it, and to add your own signature to an answer that leaves the building. The record then shows the server produced it and a person stood behind it.
  • NextWho said itA verified quotation also checked against the person the source says spoke it.
  • DoneDecisions and attestations/v1/decide answers typed questions about a situation with a probability for every option. /v1/attest signs a hash, such as every Kicker batch root. Both come with signed receipts.
  • LaterCloud, provably privateThe same server inside attested hardware enclaves, so a cloud deployment can prove nobody else could read it.

In the shop

Optima1, our own model.

We're building our own model. It's tuned for one kind of job, small enough to run on your hardware, and built to be checked. It's in the shop now.

We plan to use it first in our own products. No launch date yet. When we have one, it'll be a real one.

Optima1 Model · in the shop
What it is
A fine-tuned, single-purpose model on our own stack. Not a general chatbot.
Where it runs
Our hardware or yours.
First use
Planned for our own products.
Status
In the shop. No date yet.