R&D BioTech Alaska / Security systems
QSec is an open-source security and evidence layer for classical, quantum, and AI systems. It keeps execution identity, authorization, quantum state, calibration, entropy, and evidence history under an independent acceptance policy.
Control plane
The system requesting work, the worker performing it, and the policy accepting it remain separate. A worker cannot promote its own result.
Identity, nonce, policy, parent digest
Exact capability and resource envelope
Independent or structured workers
Physics, agreement, probes, limits
Accepted record or fail-closed result
Evidence path
Request and authority
QSec binds the request identity, one-time nonce, policy digest, parent evidence digest, runtime identity, and declared resource envelope. A valid-looking answer cannot substitute for the approved request.
Consume the nonce through the durable SQLite replay guard.
Match package, native runtime, ABI, policy, and artifact identity.
Reject a result whose request digest differs from the issued request.
Two evidence ranges
Independent Python and C++17 workers reconstruct the full state and compare phase-sensitive commitments. QSA may join as a third worker, but it receives no QSec policy or replay authority.
QSec verifies QSA identity, exact adaptive structure, QSC persistence, marginals, probes, validation, and resource use without enumerating every amplitude or claiming arbitrary-state compression.
Published QSA 0.2 evidence
Structured state
QSC round trip, all marginals, exact probes, native validation
Grover challenge
843,314,856 optimal iterations and analytic amplitude checks
Symmetry challenge
Every class size, phase, amplitude, probability, and membership probe
Trust planes
Approved software, model, compiler, backend, policy, pulse, and named artifacts are fingerprinted.
The exact request must be permitted by the active policy and parent evidence state.
Circuit manifests, operation order, parameters, and control schedules remain bound to the request.
Physical validity, phase-sensitive agreement, structured state evidence, and challenge results stay separate.
T1, T2, detuning, readout, reset, gate error, pulse, and thermal evidence are checked against policy.
Byte distribution, bit balance, serial correlation, repeated values, and a bounded min-entropy estimate are monitored.
Source and configuration trees are inventoried for quantum-vulnerable and post-quantum algorithms.
Canonical records are chained so alteration can be detected relative to a retained trusted root.
Security boundary
QSec is a control plane around cryptography, hardware identity, quantum runtimes, endpoint security, and AI automation. Production strength still depends on trustworthy telemetry, protected keys, external anchors, and the host beneath the workers.
Public record
