Open-source runtime verification for AI, licensed under Apache-2.0.
QWED
Contact

Type to search pages, engines and advisories.

    Looking for API details?Search the docs

    Open-source runtime verification

    Runtime verification for AI output and agent actions.

    QWED checks the numbers, SQL, code and tool calls your AI produces, with solvers and parsers, before anything executes. Proven results are admitted; everything else is denied by default. Every decision leaves a record your auditors can review and re-run.

    Get startedTalk to us

    verify_math("2*(3+4) = 14") VERIFIED · ADMIT with a proof_ref

    How QWED fits: answers and actions from your AI pass through the QWED platform. Proven results reach your systems; the rest are held for a person or stopped.

    Supported by these companies’ programs for open-source projects and startups

    They give QWED free access to their products.

    • Docker
    • Netlify
    • Cloudflare
    • Sentry
    • CircleCI
    • Buildkite
    • Mintlify
    • Sanity
    • Heroku
    • Atlassian
    • Gitar by Sonar
    • Greptile

    AI has moved from answering questions to taking actions.

    It approves refunds, edits databases, fills in figures and runs tools. When it is wrong, it sounds exactly as sure as when it is right.

    Nobody checked any of it

    Without QWED

    • Refund sent: 1,350The total should have been 1,250.
    • Query ran on every customerWHERE customer_id = 88 OR 1 = 1
    • Tax filed: 814,500 × 0.18 is 810.
    • Refund files deletedrm -rf /srv/refunds/*

    Each call checked before it runs

    With QWED

    1. Refund of 1,3508 × 150 + 50 is 1,250
      VERIFIED · DENYHeld
    2. Query on every customerOR 1 = 1 is always true
      VERIFIED · DENYHeld
    3. Tax filed as 814,500 × 0.18 is 810
      VERIFIED · DENYHeld
    4. Delete the refund filesA policy forbids it
      BLOCKED · DENYHeld
    5. Refund of 1,250Proven correct
      VERIFIED · ADMITSent

    Every decision leaves a record that can be re-run.

    Examples of the mistakes QWED is built to catch. QWED returns the decision; your integration acts on it.

    Only a proof lets an action through.

    Every check ends with a result and a decision. VERIFIED needs a proof; everything else is held or stopped by default. QWED returns the decision, and your integration or a QWED product enforces it.

    From your AI An answer, a figure or an action QWED Checks it and returns a decision

    • Proven correct.

      VERIFIED · ADMIT

      With a record of why.

      Reaches your systems

    • Proven wrong.

      VERIFIED · DENY

      Stopped, with the evidence that it is false or unsafe

    • Can’t be proven.

      UNVERIFIABLE · DENY

      Held back by default, so a person can decide

    • Can’t be checked.

      BLOCKED · DENY

      Stopped: the input could not be read, or a policy forbids it

    Built for systems where a wrong answer is expensive.

    Banking and payments

    Interest, fees, loan figures and payment messages can be recalculated exactly before money moves.

    QWED Finance

    Legal

    Deadlines, amounts and claims in contracts are checked against the rules.

    QWED Legal

    Tax

    Withholding and tax figures are checked before anyone relies on them.

    QWED Tax

    Cloud infrastructure

    Changes to permissions, infrastructure code and cloud costs are checked before they apply.

    QWED Infra

    AI agents

    Before an agent runs a tool, messages another agent or makes a purchase, QWED checks the action.

    Open Responses, MCP, A2A and UCP

    Software delivery

    QWED Security checks every code change on GitHub before it merges.

    QWED Security

    One verification core. A whole platform on top of it.

    Every QWED product runs on the same core, so a payment figure, a contract deadline and an agent’s action are all checked the same way.

    Every package and version

    Verification core

    Every product runs on the same engines, guards and record.

    Runs inside the systems you already have.

    QWED is a library, a server and a set of integrations, so it fits wherever your AI already runs.

    • In your code

      Libraries for Python, TypeScript, Go and Rust.

      pip install qwed

    • On your own servers

      A Docker image runs the QWED API wherever you deploy it.

      docker pull qwedai/qwed-verification

    • In your delivery pipeline

      A GitHub App and a GitHub Action check code changes before they merge.

      QWED Security

    • Inside your agents

      An MCP server and agent middleware check tool calls before they run.

      Agents and protocols

    Why you can trust the check.

    Security policy and advisories
    • 22security advisories published openly
    • 9open-source packages
    • 15contributors so far

    Math, not opinion

    A proven result comes from math and logic engines, never from asking another AI whether the first one was right.

    A record for every decision

    Each result says what was checked, how, and what came out, so it can be reviewed later.

    Open for inspection

    The code is open source under Apache-2.0, and security problems are disclosed in public.

    Are you a developer?

    Install the core library, then follow the quickstart in the documentation.

    pip install qwed
    DocumentationOther languagesGitHub

    Latest releases

    All releases