qwedai/qwed-verification repository overview

⁠QWED Verification

Open-source verification infrastructure for LLMs and AI agents. QWED sits between your model and production and checks each claim with deterministic engines. Every claim comes back verified, unverifiable or blocked. Nothing unproven passes.

Website⁠ · Documentation⁠ · Source⁠ · Self-hosting guide⁠

⁠What's inside

7 proof engines can return verified, always with a proof_ref: Math (SymPy), Logic (Z3), SQL (SQLGlot), Code (AST), Schema (Pydantic), Stats (Pandera), Symbolic (CrossHair).

9 policy guards block or hold, and never verify: SystemGuard, ConfigGuard, RAGGuard, MCPPoisonGuard, ExfiltrationGuard, SelfInitiatedCoTGuard, SovereigntyGuard, StartupHookGuard, ProcessVerifier.

5 advisory engines add signals for review. Heuristic results never count as verified: Fact, Graph, Image, Reasoning, Consensus.

How the engine tiers work⁠

⁠Run

The server will not start without API_KEY_SECRET and QWED_CORS_ORIGINS.

docker pull qwedai/qwed-verification

docker run -p 8000:8000 \
  -e API_KEY_SECRET="$(python3 -c 'import secrets; print(secrets.token_urlsafe(48))')" \
  -e QWED_CORS_ORIGINS="http://localhost:3000" \
  -e ACTIVE_PROVIDER=openai \
  -e OPENAI_API_KEY=sk-... \
  qwedai/qwed-verification

Check that it is up:

curl http://localhost:8000/health

⁠Verify something

Verification endpoints need an API key in the x-api-key header. To create one, follow the self-hosting guide⁠.

curl -X POST http://localhost:8000/verify/math \
  -H "Content-Type: application/json" \
  -H "x-api-key: $QWED_API_KEY" \
  -d '{"expression": "2*(3+4) = 14"}'

For every environment variable, endpoint and the production checklist, see the deployment guide⁠.

⁠Ecosystem

Domain packages, installed with pip:

• qwed-finance⁠: banking, payments, ISO 20022
• qwed-legal⁠: deadlines, amounts, legal claims
• qwed-tax⁠: tax compliance and withholding
• qwed-infra⁠: Terraform, IAM, cloud cost
• qwed-open-responses⁠: agent tool calls, checked before they run
• qwed-mcp⁠: MCP server for any MCP client
• qwed-a2a⁠: agent-to-agent verification
• qwed-ucp⁠: Universal Commerce Protocol transactions

⁠Security

Report vulnerabilities privately through GitHub⁠ or [email protected]⁠. Published advisories: qwedai.com/security/advisories⁠.

⁠Contributing

Contributing guide⁠ · Good first issues⁠ · Code of conduct⁠

Apache-2.0 · Part of the Docker Sponsored Open Source program