8.0 Qaduceus AI
An intelligence that shows you its thinking.
A sovereign assistant with a workspace and artifacts, its reasoning visible as it runs — on device by default, or on QERYX-operated hardware; the attested-enclave lane ships when the attestation is real. Research preview: every capability described is one the preview build ships.
Research preview. Capabilities listed are the ones shipped, and no others.
- Research preview
- Shipped-only capability list
- No third-party AI service
- Carrier handshake ML-KEM-1024 + X25519
- Blob sealing ChaCha20-Poly1305
- Carrier model sealed-blob relay
01 / THE THINKING STREAM — LIVE
Run it. The thinking streams first.
Research previewThe reasoning runs in the open. You keep the result.
ARTIFACT — VERIFY A NEW CONTACT
- Open the contact and read your six groups aloud, in order.
- Have them read theirs back. Every group must match, digit for digit.
- Mark the session verified. QERYX remembers the number you approved.
- If the number ever changes, you are told it was verified before — verify again before you trust.
Scripted demonstration of the Qaduceus surface — the reasoning and artifact above are authored copy, not a live model. Research preview: capabilities listed are the ones shipped, and no others.
Demo complete. The artifact is ready below the reasoning rail.
02 / THE PREVIEW — LETTERED
Read the preview, section by section.
Research previewThe visible thinking stream
Reasoning streams into an open rail as it runs. When a turn completes it folds to a disclosure you can reopen at any time — the record you audit is the record that ran.
- Turn law
- a completed turn is immutable — it is never rewritten after the fact
- Rail
- reasoning visible while it runs, foldable after
Workspace and artifacts
The answer is not a scroll of chat. Work lands as artifacts — plans, checklists, drafts — that you keep, reopen, and carry forward inside the workspace.
The relay cannot read your prompts
Conversations ride the same sealed-blob carrier model as your messages: hybrid ML-KEM-1024 + X25519 key agreement, ChaCha20-Poly1305 sealing. The relay holds ciphertext and opaque routing identifiers — prompts and outputs included.
Where inference runs
On your device by default. Heavier work runs on QERYX-operated hardware — your prompts never touch a third-party AI service.
The attested-enclave lane is the direction we are building toward: the enclave sentence ships when the attestation is real, and not before.
A separate surface, by doctrine
The messenger core carries no assistant and no scanning. Qaduceus is its own opt-in surface — your chats never feed it.
An assistant you can audit mid-thought.
- Reading your request — a verification plan.
- The safety number is the anchor.
- Drafting the checklist as an artifact.
The reasoning stream is the product
The path is the surface: you watch the thinking as it runs, then you keep the artifact it produced.
A completed turn never changes behind your back — what you audited is what happened.
03 / THE SHIPPED LIST — THE CONTRACT
No model numbers. One promise.
100%1
of capabilities listed on this page ship in the preview build — the list is the contract
02
third-party AI services your prompts touch
| Surface | What ships | Framing |
|---|---|---|
| Thinking stream | visible reasoning rail; completed turns immutable | shipped |
| Workspace | chat workspace with artifacts you keep | shipped |
| Transport | sealed-blob carrier — ML-KEM-1024 + X25519, ChaCha20-Poly1305 | shipped |
| Inference locality | on-device by default; QERYX-operated hardware for heavier work | shipped |
| Attested enclave | GPU-attestation lane | direction — ships when real |
| Model claims | none published | by design |
04 / THE LANE — WHAT IT NEVER TOUCHES
Trace the line Qaduceus never crosses.
The surfaces around it, with their own status
- Q-RATCHET · THE MESSENGER CORE STAYS CLEAN — No assistant, no scanning inside your chats: Qaduceus is a separate opt-in surface by doctrine.
- QLEAP · THREE HOPS, ZERO MEMORY — The post-quantum onion tunnel built to sit beneath everything you do on QERYX. Not in this build: the packet-tunnel provider requires an Organization Team ID.
- CRYPTO-CORE · ONE RUST CORE — The same open library seals conversations, messages, and files alike.
05 / THE VERDICT — CATEGORY COLUMNS
Set it against a cloud assistant and an on-device one.
| QERYX Qaduceus | Cloud AI assistant class | On-device assistant class | |
|---|---|---|---|
| Real workloads | |||
| Prompt privacy | Sealed carrier; QERYX-operated inference | Provider-readable, often retained | Private but capability-limited |
| Reasoning visibility | Full thinking stream | Hidden or summarized | Hidden |
| Vendor dependence | Sovereign stack | Third-party API | OS vendor |
| Operator subpoenaed | Sealed blobs — content requires breaking both X25519 and ML-KEM-1024 | Provider logs and prompts | Device seizure only |
| Capability honesty | Research-preview law: shipped-only list | Roadmap marketing | Not included |
Research preview. Capabilities listed are the ones shipped, and no others.
06 / ACCESS — THE PREVIEW
Try the preview.
How do I try Qaduceus?
It ships inside QERYX as a research preview with the Armed tier — opt-in, separate from your chats.
What does the preview include?
Exactly what this page lists: the workspace, artifacts, the visible thinking stream, and the sealed transport beneath them. Features arrive when they are real.
07 / THE HARD QUESTIONS
Ask what “research preview” rules out.
What does “research preview” mean?
The page lists the capabilities the preview build ships, and no others. Features arrive when they are real.
Can it read my messages?
No. Qaduceus is a separate opt-in surface; the messenger core carries no assistant and no scanning.
Where does it run?
On your device by default; heavier work runs on QERYX-operated hardware. Your prompts never touch a third-party AI service. The attested-enclave lane is a stated direction — it ships when the attestation is real.
Is this a quantum AI?
No. Qaduceus is a classical assistant inside a post-quantum sealed transport. We publish exactly what is quantum in QERYX and what is not.
This is not QKD. Not quantum networking. Not quantum teleportation. We do not violate the no-communication theorem. We bind a key-derivation function to a verifiable physical measurement no classical adversary can fabricate in advance.
Why show the thinking?
An assistant you can audit mid-thought is the only kind that belongs in this stack. The reasoning stream is the product.
What can be handed over under subpoena?
Sealed blobs, same as messages. Reading conversation content requires breaking both X25519 and ML-KEM-1024.