Closing the consequence gap in <50ms.

The execution graph

Dual-boundary governance in one linear path—from Ground Truth upstream to the commit boundary downstream.

Control plane & IFQ at the boundary (US Prov. App. No. 63/XXXXX)

1. 1

   Phase 1: Ground Truth anchoring

   You define the admissible state space. We ingest your regulatory identifiers, statutory anchors, and hard corporate policies—encrypting them into an immutable Ground Truth baseline.
2. 2

   Phase 2: Synchronous intent interception

   When your AI model (or a third-party vendor’s AI) emits a response or proposes a state-change, the BiDigest Control Plane performs a synchronous intercept on the wire: the payload is evaluated before it reaches client surfaces or systems of record. This is not post-generation filtering and not a prompt-only wrapper.
3. 3

   Phase 3: The IFQ calculation & Triple-Lock

   In under 50 milliseconds, our patent-pending IFQ Engine scores the payload's intent against your Ground Truth. The system demands a deterministic Triple-Lock (cryptographic sign-off from Legal, Risk, and Engineering).
4. 4

   Phase 4: Fail-closed or admitted execution

   If the IFQ score drops below the defined threshold, the Commit Boundary mathematically fails closed (the action is blocked). If authorized, the action executes and generates a Merkle-chained Admissibility Receipt.

The IFQ engine (patent pending)

We do not rely on probabilistic LLM "safety" prompts. Admissibility is a mathematical certainty. The Identity Fidelity Quotient (IFQ) is calculated at the execution boundary:

The three pillars of IFQ

• Identity (A — Anchor)

  Matches the payload against hard tokens from your Ground Truth. We rely on statutory anchors, not paraphrased blog summaries, to drive what the gate may admit.

• Structure (S — Schema)

  Ensures requests and payloads satisfy structural contracts at the boundary. “Valid JSON” cannot be used to mask invalid regulatory obligations.

• Citation & fidelity (C × F)

  Enforces citation integrity. Shadow Sources (outdated or rogue URLs) must be on your allow-list. Fidelity (F) acts as the multiplier, mathematically tying the output tokens back to the anchored reference text. A “right answer” from the “wrong source” yields an IFQ of zero.

Merkle-chained forensics

In regulated industries, an action didn't happen unless you can prove why it happened. Every admitted execution generates a cryptographic Admissibility Receipt.

• Tamper-proof ledger: a SHA-256 hashed record of the exact AI payload, the IFQ calculation, and the Ground Truth anchor used at the moment of execution.
• Audit ready: export the enforcement path for your insurers, the SEC, or Bank of England PRA supervisors.

Intercept in action — fail-closed report

The last step from trial to purchase is seeing a real intercept: an inadmissible intent blocked before it mutates a system of record, with a receipt-shaped artifact your CCO can file. We will publish a sanitized fail-closed case study here as soon as it clears review — in the meantime, run the public sandbox and home showcase to watch the same boundary behavior on synthetic payloads.

• Test the Physics — synthetic payloads against the Triple-Lock demo.
• Home — Commit Boundary showcase (authorized vs fail-closed video loops).

Deploy the control plane

Trustee handbook (Markdown): Open Trustee Tier handbook