The verification stack
QWED combines specialized verification engines for math, logic, code, facts, schemas, and agent safety. Use them together as a control layer between model output and production execution.
Math Verifier
SymPy-powered symbolic calculation. Solves calculus, algebra, and arithmetic from first principles.
Logic Verifier
Z3 Theorem Prover. Formal verification for reasoning chains and policy contradiction detection.
Reasoning Engine
Validates Chain-of-Thought (CoT) steps for logical consistency and coherence.
Stats Verifier
Sandboxed Pandas execution. Verify text summaries against raw CSV/JSON datasets.
Fact Verifier (RAG)
Citation-backed context checking. Ensures claims are supported by source documents.
Graph Fact Verifier
Triple-based (Subject-Predicate-Object) fact checking against Knowledge Graphs.
Code Security
Static analysis firewall. Blocks secrets, SQLi, and dangerous patterns in AI code.
SQL Armor
Prevent SQL injection and complexity limit denial-of-service attacks in natural language-to-SQL.
Taint Analyzer
Trace data flow from untrusted inputs to sensitive sinks to prevent XSS and RCE.
Image Guard
Check image metadata and content with VLM consensus to detect manipulated or unsafe media.
Schema Verifier
Validate JSON structures with embedded math capability (e.g., checking totals in an invoice).
AgentStateGuard
Deterministic State Verification & Atomic Execution
AgentStateGuard extends QWED from output verification into agent memory governance. It deterministically verifies proposed state transitions before any commit occurs — ensuring agents cannot write invalid, regressed, or structurally unsound state to disk.
Phase 1 — Structural
Strict JSON parsing, duplicate key rejection, deep nested type validation. VERIFIED only on full schema match.
Phase 2 — Semantic
Immutable field enforcement, monotonic counters, ordered enum transitions, keyed array integrity checks.
Phase 3 — Atomic Commit
Sandboxed commit roots, atomic file writes via fsync + replace. No partial writes persist on failure.
Fail-closed: if a transition cannot be proven valid, it is never committed.