Six services, each one narrow enough to understand in a minute: prove a fact without revealing it, check where an artifact came from, price a call by what it cost, enforce a mandate while it runs, remember across sessions, and check that a platform is real.
Prove a balance, stake, account age or transaction count meets a threshold — the verifier learns only that it does, never the value. Five Groth16 circuits, zero public signals.
Four layers: schema, is there anything inside, what conditions produced it, and was the action permitted. Ed25519-signed, and the check runs without trusting us.
Price a call by what it actually consumed — tokens, CPU, bytes, writes, external calls — with the breakdown attached. A price table is a guess made once; this recomputes.
Continuous mandate enforcement for AI agents, as an MCP server. Checks the mandate at the moment of the action, so permissions that expire mid-session stop working mid-session.
Facts live in SQLite outside the context window; only a relevance-ranked sample enters the prompt. Context-bound memory degrades with length — the model cannot see the start of its own conversation.
Three answers, not two: the site responds, the domain is a corporate root with the platform buried at a path, or it is dead. A responding domain is not a usable platform.