Open protocol · Apache 2.0

Every AI answer.
Sealed where you can check it.

A capsule is a sealed receipt for one thing QP did. It records what started it, what QP knew, why it chose, who approved, what it did, and what happened. Each receipt is signed and chained to the one before it, so a change to any of them shows.

6
Sections
2
Signatures
SHA3
Hash chain
On
By default

Capsule Anatomy

Six questions, answered on every record.

Trigger

What started this?

The message, schedule, or command that started the action.

Context

What did the AI know?

The files, conversation, and rules QP had in view at that moment.

Reasoning

Why this decision?

The model it used and the reasoning behind the path it chose.

Authority

Who approved it?

Who approved it, and which policy allowed it.

Execution

What happened?

The tools it called and the steps it took.

Outcome

What was the result?

Success or failure, and what changed as a result.

Tamper Detection

Hash-Chained. Tamper-Evident.

Every capsule holds the SHA3-256 hash of the capsule before it. Think of a row of numbered seals, each stamped with the last one's number. Change any record and every seal after it stops matching.

SHA3-256 hash of the previous capsule in every record
A change to one record breaks every later link
Verify now checks the whole chain on your Mac
Fails closed: a broken link is reported, never skipped
capsule-chain
// capsule 1
{ id: "cps_a7f3"
type: "Agent"
hash: "0x8e2a...f41d"
prev: "0x0000...0000" }
↓
// capsule 2
{ id: "cps_b1e9"
type: "Tool"
hash: "0x3c7b...a928"
prev: "0x8e2a...f41d" }
↓
// capsule 3
{ id: "cps_c4d2"
type: "Chat"
hash: "0xf19e...6b03"
prev: "0x3c7b...a928" }

Cryptographic Integrity

Two signatures. Built for the quantum era.

Every capsule is signed twice: once with Ed25519, once with ML-DSA-65. A record you seal today stays checkable after quantum computers arrive.

Ed25519

Classical · Required

The proven classical signature, fast to check. On every capsule.

ML-DSA-65

Post-Quantum · Required

A lattice-based signature, standardized by NIST, built to resist quantum attacks. On every capsule.

Verify it yourself

Three steps. Your own proof.

The check runs on your Mac, against your own record. Proof you hold yourself.

Step 1

Open the audit trail

In AskQP, go to Settings > Governance > Audit trail. Every sealed record is listed there, newest first.

Step 2

Press Verify now

QP recomputes every hash in the chain and checks both signatures on every record, right on your Mac.

Step 3

Read the result

A pass, or the exact record where the chain stops matching. The check fails closed: a broken link is reported, never skipped.

Proof you can check.
Every answer. Every time.

Capsules come with every AskQP install and start sealing from your first question. The format is open source under Apache 2.0.

Get AskQP