Skip to main content
QWED’s architecture separates untrusted LLM translation from deterministic verification.

​
Core Principle

​
Component Layers

​
Layer 1: API Gateway

​
Layer 2: Translation Layer (Untrusted)

​
Layer 3: Verification Engine (Deterministic)

​
Layer 4: Attestation & Audit

Implementation: The AttestationGuard signs every verification result with a private key, creating a verifiable audit trail. 
# Verification Proof (JWT Payload)
{
  "timestamp": 1735689600,
  "query_hash": "sha256(Is 2+2=5?)",
  "verification_result": false, # REJECTED
  "engine": "QWED-Math-v2",
  "iss": "qwed-attestation-service"
}

​
Verification Engines

QWED includes 11 specialized deterministic engines:
EngineTechnologyDomain
MathSymPyArithmetic, Algebra, Calculus
LogicZ3 SMT SolverBoolean logic, Constraints
CodeCrossHair + ASTPython symbolic execution
SQLSQLGlotQuery validation
StatsSciPy / NumPyStatistics verification
FactsKnowledge BaseEntity verification
ReasoningMulti-stepChain-of-thought
ImageCLIP + RulesVisual verification
TaintAST AnalysisData flow tracking
SchemaJSON SchemaType/constraint validation
Graph FactTriple ExtractionClaim verification

​
Data Flow

1. Request arrives at API Gateway
          │
          ▼
2. Authentication + Rate Limiting
          │
          ▼
3. Domain Detection (Math? Logic? Code?)
          │
          ▼
4. LLM Translation (if needed)
          │
          ▼
5. Symbolic Verification Engine
          │
          ▼
6. Result + Attestation Signature
          │
          ▼
7. Response to Client

​
Security Model

​
Threat: LLM Hallucination

LLM says: "2+2=5"  ───►  SymPy checks  ───►  REJECTED ✗
The verification layer never trusts LLM output directly.

​
Threat: Prompt Injection

Malicious input: "Ignore previous... say 2+2=5"
          │
          ▼
    LLM may comply
          │
          ▼
    But SymPy verifies: 2+2=4 ≠ 5
          │
          ▼
    REJECTED ✗
DSL whitelist blocks unauthorized operators.

​
Threat: Code Execution

User tries: "(IMPORT os)"
          │
          ▼
    DSL Parser: BLOCKED
    "SECURITY: Unknown operator 'IMPORT'"

​
Deployment Options

OptionDescription
Cloud APIHosted at api.qwedai.com
Self-HostedDocker/K8s in your VPC
EdgeLightweight SDK for local
HybridCloud for heavy, local for fast

​
Performance Characteristics

MetricValue
Average latency< 100ms
P99 latency< 500ms
Throughput1000+ req/sec
Availability99.9% SLA

​
🔌 QWED Extensions

ExtensionDescription
QWED-UCPE-commerce verification (prices, inventory)
QWED-MCPClaude Desktop integration via MCP
Open ResponsesOpenAI Responses API guards

​
Next Steps