Built for environments where failure has consequence.
Evaluation-first AI systems, built to run where they are deployed — on-prem, air-gapped, log-verified. This page makes no external request. What reads as atmosphere around this text is the canonical mark itself, observed from far — its own sparse periphery, not decoration. What follows is not a sitemap: it is this claim, unfolding into the conditions that make it true. Scroll is the observation function.
At the surface, failure is one word. It is not one thing.
Each failure mode acquires a governing mechanism.
CytherCAD — Controlled Generative CAD
SijilOS — Event-Sourced Ledger Engine
A deliberately hostile proposer streams arbitrary tokens at the constraint boundary — junk symbols, wrong axis, out-of-range arguments, premature closure. The boundary admits token by token; an independent kernel re-verifies every program before emission. Nothing inadmissible is ever emitted: validity is a property of the boundary, not the proposer. Same seed, same stream, same admissions — on every machine.
Numbers with their conditions attached.
| METRIC | CYTHER | DEEPCAD | T2CAD† |
|---|---|---|---|
| ◌Invalid Rate (↓ better) | 0.00% | 10.00% | 0.93% |
| ●GVR · Constrained Beam (n=100) | 100% | — | — |
| ●GVR · Completion (n=100) | 100% | — | — |
| ●Dimensional Accuracy ±3mm (n=35) | 99% | — | — |
| ●Dimensional Accuracy ±5mm (n=35) | 97% | — | — |
| ●Multi-Op Accuracy · Encoder (n=35) | 91% | — | — |
External benchmark; evaluation not conducted or curated by CytherAI.
Beyond this line: the existence, reference class, and access conditions of controlled information. Nothing secret is shown by crossing — the index becomes legible, not its contents.
REFERENCE — NTP-2025-001 · APPENDIX ENTRY 003
REQUIREMENT — VERIFIED CONTEXT · NDA · IDENTITY CONFIRMATION
Selective about what gets built. Thorough about how it gets built.
Public materials
This page and everything visible on the way down. Disclosed without qualification.
Capability review
Full validation records, the controlled strata, and a working session with the systems — under NDA and identity confirmation.
Technical diligence
Architecture, logs, and evaluation harnesses opened for inspection inside a controlled review window.
Depth conditions.
Records substantiate.
Boundaries govern.
The reader is a record.
Nothing is stated that is not checked.
One object, one world. The mark is not framed on this page — this page is inside it. Four pre-rendered exposures of the canonical orbit are the background; scroll is the observation function, moving a derived camera from far-field into the filament core. The camera anchors are the orbit's densest cells, chosen by digest: the journey through the mark is derivation, not decoration.
The mark is derived, not designed. Its four parameters are digests of the public manifest below — systems, validation index, revision, and the count of sealed references. When the disclosed state changes, the canonical form changes deterministically. Your drag forks a local variant; the canonical state is always recoverable, and a link reproduces any form exactly.
Closed causality. No webfonts, no CDNs, no images, no external calls. Everything visible was present at initialization or derived locally from your interaction. Open the network tab — the artifact is sealed, and CL-01 observes it.
One loop, and it sleeps. The weight-field on the thesis, the weight waves on the system titles, the world's fork re-development, and the boundary proposer share a single frame loop that stops completely at rest.
Two records, facing each other. The manifest derives; the reading self-reports. They are not the same kind of record, and the page says so: the reading attests your descent to you, not to anyone else, and travels only by your explicit act. Standing claims run as predicates against the page itself; a hostile proposer demonstrates the boundary live; the record's own boundary is drawn in NOT CLAIMED. The page states nothing it cannot check.