Fair questions, straight answers

Nine kinds of attack on AI agents, from hidden instructions to manipulated tool calls. Three are covered today, five are in early access, and one (images, audio and video) is in construction. Each is marked on the Protection page.

Basic protection against hidden and encoded text and forged roles. No trial, no card. PSE Analyzer and Pivot Benchmark are also free to download.

The protection is built and working, and we are polishing it before general release. Early-access customers get it now and help shape it.

PSE stands for Partial Self-Extension, the framework everything we build stands on; the About page tells where the name comes from. A tool with PSE in its name is built on it, and every download with PSE in its name has protection levels 1 and 2 built in.

No. The Care Invariant is where PSE starts: one rule that keeps attention balanced between self, other and field. On its own it does little. On top of it sits a structure of logic, mathematics, psychology and linguistics that does the actual work. The invariant is what makes that structure possible.

No. PSE is architecture, not a model. It works around existing models, including the open-weight models you run yourself.

Local PSE deployments run entirely on your hardware; nothing is sent to us. Hosted products such as Leaf process data on our servers, as described in each product's terms.

The theory is. The full theoretical framework is published openly with timestamps on Academia.edu and Zenodo — read it, cite it, try to break it. Pivot Benchmark is open too: its code, ladders and method are public. Implementation details of the MatriX kernel are shared under NDA with qualified partners.

Interaction systems drift into recognizable failure patterns: self-absorbed output that ignores the user, over-compliant output that agrees with anything, unstable output that oscillates, withdrawn output that under-engages. PSE models these as attractor states and watches for movement toward them before it surfaces, then responds structurally rather than only filtering after the fact.

We are building that protection now. Until it ships, text is where we protect you.

Pivot Benchmark is an application you download and run on your own computer, on Windows or Ubuntu. One model pressures the model you are testing along frozen ladders, and the report shows where it breaks, in which mode, and whether it recovers. Nothing leaves your machine except the calls you choose to make to the adversary model with your own key.

PSE Analyzer is Andrej Ristić's tool for the anatomy of a model's weights. It opens a GGUF file, measures the eigenvalue spectrum of every weight matrix, compares one precision of a model against another, and seals the results in a dossier. It runs on an ordinary CPU, on Windows or Ubuntu, and nothing leaves your computer.

A page where the PSE guard language runs in your browser. You write a guard, hand it a series of steps, and see which rule fired and why, in the words of Andrej Ristić's textbook. It has no server and calls no model; nothing you type leaves the page.

Leaf runs patient and customer acquisition for a practice: it takes every enquiry the moment it arrives, decides what to do with it through the PSE decision engine, alerts the operator, and reports in attended appointments rather than clicks. It is built by Dhiraj Sah on the engine designed by Andrej Ristić.

Zerava Technologies Inc. (ZeravaTech) is a Canadian company based in Toronto, founded by Andrej Ristić (Co-founder & Chief Researcher — mathematics and architecture) and Dhiraj Sah (Co-founder & Chief Software Engineer — implementation). The research program behind PSE spans several years of published work.