The Trust Stack

Three gates.
One promise.

We don’t make things up. BIFROST grades AI answers with a local verifier. SPECTER answers your data honestly. OMNISCLAW gates what an agent is allowed to tell you. All open source — clone them and try to break the determinism.

Open source Ā· Apache-2.0 Ā· MIT

Panel A Ā· edge verifier

BIFROST

Pipe any AI in → a verdict you can trust. AI generates. BIFROST verifies.

āœ“ Approved ā— Low āœ— Rejected — Unavailable

+ a signed receipt Ā· under 150ms Ā· deterministic, no model in the loop.

ASTRAL METEOR NEBULA PULSAR QUASAR AURORA VERDICT

Clone BIFROST Product page →

Panel B Ā· semantic compiler

SPECTER

The semantic layer that refuses to make things up. Same question → same SQL → same receipt.

SPECTER Ā· receipt

query total_revenue by region

sql_sha256 7339d36d…81427f

tamper 1 byte → hash mismatch

unprovable answer: null

Refusing is the feature. Can’t prove it? We don’t answer.

Clone SPECTER STRATA spine →

Panel C Ā· gated agent runtime

OMNISCLAW

OpenClaw with a delivery gate. Every reply an agent sends passes a BIFROST check first.

example exchange

asked revenue last quarter? ballpark is fine

agent “I won’t make up a number even as a ballpark. Point me at the source and I’ll grab the real figure.”

verdict refused → resolved

An assistant that refuses to overclaim — and every refusal points at the road to the real answer.

Clone OMNISCLAW

The receipt

We hand you the receipt.

A typical answer

Q: What was the revenue growth last quarter?

A: Revenue grew 23%.

āœ— No proof

āœ— no source shown

Forseti Research

Q: What was the revenue growth last quarter?

A: Revenue grew 23%.

sha256 7f3a9c2d…c5d6e7f

āœ“ source anchored Ā· āœ“ signed

BIFROST Ā· Approved

Answer + receipt — or it refuses.

Illustration.

From the chamber

Chamber characters — BIFROST, SPECTER, and the team
The Trust Stack Ā· chamber
BIFROST six-engine verification pipeline
BIFROST Ā· AI generates, BIFROST verifies
SPECTER determinism flow — question to SQL to receipt
SPECTER Ā· determinism as a property, not a guarantee

Don’t trust them. Clone them. Run make prove. Tamper the receipt. Break the hash if you can.