--- title: "QWED: open-source verification infrastructure for LLMs and AI agents" description: "QWED checks every claim an LLM or agent makes with deterministic engines. Each comes back verified, unverifiable or blocked." url: https://qwedai.com/ --- # QWED Open-source verification infrastructure for LLMs and AI agents. QWED sits between your model and production and checks every claim with deterministic engines. Each one comes back verified,unverifiable orblocked. Nothing unproven passes. `$ pip install qwed` Python 3.10+ `$ npm install @qwed-ai/sdk` TypeScript `$ go get github.com/QWED-AI/qwed-verification/sdk-go` Go `$ cargo add qwed` Rust `$ docker pull qwedai/qwed-verification` Container [Get started](https://qwedai.com/install) [Read the docs](https://docs.qwedai.com) Apache-2.0 Docker Sponsored Open Source GitHub Technology Partner your model production ## Where QWED sits In your own stack, between the model and whatever acts on its output. As a library, a CLI or a self-hosted container. [How the engine tiers work](https://qwedai.com/engines) 1. 1 · YOUR APP **Sends a prompt** 2. 2 · ANY LLM **OpenAI, Anthropic, Gemini, NVIDIA, local** 3. 3 · QWED **Routes each claim to an engine** 7 PROOF ENGINES · can return verified - **Math** SymPy - **Logic** Z3 - **SQL** SQLGlot - **Code** AST - **Schema** - **Stats** Pandera - **Symbolic** CrossHair 9 POLICY GUARDS · block or hold Shell commands, config, RAG sources, MCP tools, data exfiltration and more. 5 ADVISORY ENGINES · signals for review Image, Graph, Reasoning, Consensus, Fact. Heuristic results never count as verified. **verified** → production **unverifiable** → your policy **blocked** → stopped ## Why QWED ### Deterministic Claims are checked by solvers and parsers such as SymPy, Z3 and SQLGlot. The model translates; it never judges its own answer. ### Fail-closed Verified needs a proof. Anything that cannot be proven comes back unverifiable or blocked, never verified. ### Evidence you can keep Every verdict can be exported as a Verification Context v1.0 document: schema-validated and tamper-evident. ### Runs where you run Python, TypeScript, Go and Rust SDKs, a CLI and a Docker image. Use it with OpenAI, Anthropic, Gemini, NVIDIA or a local model. ## From install to first verdict `qwed init` checks the engines, runs a short verification suite, and sets up your model provider. [Full quickstart](https://docs.qwedai.com/getting-started/quickstart) ~/my-project $ pip install qwed $ qwed init \[QWED\] Initializing verification engines... \[ok\] SymPy math engine ready \[ok\] Z3 logic engine ready \[ok\] AST code engine ready \[ok\] SQLGlot sql engine ready Running verification suite... \[ok\] 2+2=5 -> BLOCKED \[ok\] SELECT \* WHERE 1=1 -> BLOCKED \[ok\] eval(user\_input) -> BLOCKED All engines verified. QWED is operational. ## Ecosystem [All repositories](https://github.com/QWED-AI) | Package | Verifies | Latest | Install | Links | | --- | --- | --- | --- | --- | | qwed | Verification engines and agent security guards | 7.2.2 | pip install qwed | [Docs](https://github.com/QWED-AI/qwed-verification#readme) · [Repo](https://github.com/QWED-AI/qwed-verification) | | qwed-finance | Banking, payments and financial calculations | 3.0.1 | pip install qwed-finance | [Docs](https://finance.qwedai.com) · [Repo](https://github.com/QWED-AI/qwed-finance) | | qwed-legal | Deadlines, amounts and legal claims | 0.5.1 | pip install qwed-legal | [Docs](https://github.com/QWED-AI/qwed-legal#readme) · [Repo](https://github.com/QWED-AI/qwed-legal) | | qwed-tax | Tax compliance and withholding | 0.2.1 | pip install qwed-tax | [Docs](https://github.com/QWED-AI/qwed-tax#readme) · [Repo](https://github.com/QWED-AI/qwed-tax) | | qwed-infra | Terraform, IAM and cloud cost | 0.3.0 | pip install qwed-infra | [Docs](https://github.com/QWED-AI/qwed-infra#readme) · [Repo](https://github.com/QWED-AI/qwed-infra) | | qwed-open-responses | Agent tool calls, checked before they run | 0.6.1 | pip install qwed-open-responses | [Docs](https://github.com/QWED-AI/qwed-open-responses#readme) · [Repo](https://github.com/QWED-AI/qwed-open-responses) | | qwed-mcp | MCP server for any MCP client | 0.2.2 | pip install qwed-mcp | [Docs](https://github.com/QWED-AI/qwed-mcp#readme) · [Repo](https://github.com/QWED-AI/qwed-mcp) | | qwed-a2a | Agent-to-agent verification | 0.3.0 | pip install qwed-a2a | [Docs](https://github.com/QWED-AI/qwed-a2a#readme) · [Repo](https://github.com/QWED-AI/qwed-a2a) | | qwed-ucp | Universal Commerce Protocol transactions | 0.3.0 | pip install qwed-ucp | [Docs](https://github.com/QWED-AI/qwed-ucp#readme) · [Repo](https://github.com/QWED-AI/qwed-ucp) | ## Latest releases [All releases](https://qwedai.com/releases) - [2026-10-10 **qwed-tax** 0.2.1](https://pypi.org/project/qwed-tax/0.2.1/) - [2026-10-09 **qwed** 7.2.2](https://pypi.org/project/qwed/7.2.2/) - [2026-10-09 **qwed-finance** 3.0.1](https://pypi.org/project/qwed-finance/3.0.1/) - [2026-10-09 **qwed-legal** 0.5.1](https://pypi.org/project/qwed-legal/0.5.1/) - [2026-10-08 **qwed-open-responses** 0.6.1](https://pypi.org/project/qwed-open-responses/0.6.1/) ## Built with QWED [**QWED Security** GitHub App that verifies pull requests](https://qwedai.com/products/security) [**QWED Verification Action** Run QWED checks in GitHub Actions](https://github.com/QWED-AI/qwed-verification-action) [**Docker image** qwedai/qwed-verification](https://hub.docker.com/r/qwedai/qwed-verification) [Using QWED? Tell us about it](https://github.com/QWED-AI/qwed-verification/discussions) ## Open by default - [**Security** Private reporting, a published policy, and every advisory with its fix.](https://qwedai.com/security) - [**Specs** Verification Context v1.0 and the QWED protocol documents.](https://qwedai.com/specs) - [**Roadmap** What is being built next, tracked in public.](https://github.com/QWED-AI/qwed-verification#roadmap) - [**Discussions** Questions, ideas and show-and-tell.](https://github.com/QWED-AI/qwed-verification/discussions) - [**Contribute** Good first issues across the QWED repositories.](https://github.com/QWED-AI/qwed-verification/issues?q=is%3Aissue+is%3Aopen+label%3A%22good+first+issue%22) - [**Governance** How decisions are made, and the code of conduct.](https://qwedai.com/governance) ### Contributors [All 13 contributors](https://qwedai.com/community) - [[Image: rahuldass19]](https://github.com/rahuldass19) - [[Image: mikemikimike]](https://github.com/mikemikimike) - [[Image: Pryce22]](https://github.com/Pryce22) - [[Image: HarshRajSinghania]](https://github.com/HarshRajSinghania) - [[Image: FaresIbrahim32]](https://github.com/FaresIbrahim32) - [[Image: AshSgDe29071999]](https://github.com/AshSgDe29071999) - [[Image: sarvesh1327]](https://github.com/sarvesh1327) - [[Image: andesyteoss]](https://github.com/andesyteoss) - [[Image: 2REBCat]](https://github.com/2REBCat) - [[Image: EQSTLab]](https://github.com/EQSTLab) - [[Image: Lxcardoza993]](https://github.com/Lxcardoza993) - [[Image: manus-pi]](https://github.com/manus-pi) - [[Image: manus-use]](https://github.com/manus-use) ## Supported by GitHub Technology Partner Docker Sponsored Open Source [Netlify Open Source plan](https://www.netlify.com)