ต้นแบบ · รุ่นทดลอง: มีทุก server ในทะเบียนทางการ อัปเดตทุก 30 นาที รีวิวและบัญชีผู้ใช้จะมาในขั้นถัดไป
PopNx MCPที่รวม MCP สำหรับคนใช้ AI · อธิบายเป็นภาษาคน

Privi Quantum

โดย canoydario847-cloudรุ่น 0.9.0i★ –iรันบนคลาวด์
ชื่อใน registryio.github.canoydario847-cloud/privi-quantum

ติดตั้ง

ภาพรวม

คำอธิบายจากผู้ทำ (ภาษาอังกฤษตามต้นฉบับ)

Quantum on IonQ/IBM/Braket: spending mandates, signed benchmarks, paid PQC CBOM, advantage receipts.

สามเสาของ PopNx MCP

สามเรื่องนี้ไม่รวมเป็นคะแนนเดียว เพราะความเห็น การวัด และความนิยม เป็นคนละเรื่องกัน

ใช้ทำอะไรได้

ตัวนี้ยังไม่ได้เรียบเรียงเป็นภาษาไทย ด้านล่างคือข้อเท็จจริงที่เราอ่านจาก registry

  • การเชื่อมต่อ: รันบนคลาวด์
  • ช่องทาง (transport): Streamable HTTP
  • หมวด: อื่น ๆ

ติดตั้ง

เลือกโปรแกรม AI ที่คุณใช้ แล้วคัดลอกค่าตั้งไปวาง

ก่อนติดตั้ง

ต้องเตรียมก่อน

  • รันบนคลาวด์ไม่ต้องลงโปรแกรมเพิ่ม ต่อผ่านอินเทอร์เน็ตได้เลย

คุณใช้แอปไหน

เลือกแอปด้านบน เราจำไว้ให้ ครั้งหน้าปุ่มจะขึ้นว่า “ติดตั้งลง …”

ใช้ได้ทั้ง Claude บนเว็บ แอปคอมพิวเตอร์ และมือถือ:

  1. เปิด Settings → Connectors
  2. กด Add custom connector
  3. วางที่อยู่ด้านล่างแล้วกด Add
  4. ถ้าให้ล็อกอิน ให้ล็อกอินกับผู้ทำ
SettingsConnectors1+ Add2https://…3
https://privi-quantum.onrender.com/mcp

พิมพ์คำสั่งนี้ใน Terminal

claude mcp add --transport http privi-quantum https://privi-quantum.onrender.com/mcp

เปิดใน Cursor

หรือคัดลอกค่าตั้งเอง

วางในไฟล์ .cursor/mcp.json ของโปรเจกต์ หรือ ~/.cursor/mcp.json

{
  "mcpServers": {
    "privi-quantum": {
      "url": "https://privi-quantum.onrender.com/mcp"
    }
  }
}

เบราว์เซอร์จะถามก่อนเปิดแอป จากนั้นแอปแสดงค่าตั้งให้ตรวจแล้วกดยืนยัน ช่อง key เว้นว่างไว้ให้คุณใส่เอง

เปิดใน VS Code

หรือคัดลอกค่าตั้งเอง

วางในไฟล์ .vscode/mcp.json ของโปรเจกต์

{
  "servers": {
    "privi-quantum": {
      "type": "http",
      "url": "https://privi-quantum.onrender.com/mcp"
    }
  }
}

เบราว์เซอร์จะถามก่อนเปิดแอป จากนั้นแอปแสดงค่าตั้งให้ตรวจแล้วกดยืนยัน ช่อง key เว้นว่างไว้ให้คุณใส่เอง

ChatGPT ต่อได้เฉพาะ server ที่อยู่บนอินเทอร์เน็ต:

  1. เปิด ChatGPT บนเว็บ → Settings → Connectors (Apps)
  2. กด Create หรือ Add (บางแพ็กเกจต้องเปิด Developer mode ใน Advanced ก่อน)
  3. วางที่อยู่ด้านล่าง ตั้งชื่อ แล้วบันทึก
  4. ถ้าให้ล็อกอิน ให้ล็อกอินกับผู้ทำ
SettingsConnectors1+ Create2https://…3
https://privi-quantum.onrender.com/mcp

ชื่อเมนูอาจต่างกันเล็กน้อยตามแพ็กเกจและรุ่นของแอป

ตัวเลือกเก็บในคุกกี้บนเครื่องนี้ ไม่ต้องมีบัญชี

ค่าตั้งนี้สร้างจากข้อมูลใน registry ของผู้ทำ ถ้าไม่ตรงกับ README ให้เชื่อ README

ทำอะไรได้บ้าง

ชื่อและคำอธิบายเครื่องมือตามที่ server ตอบมาเมื่อ 7 พ.ย. 2569 ผู้ทำเป็นคนเขียน ไม่ใช่เรา แสดงเป็นข้อความล้วน

  • quantum_status

    What this server runs: algorithm, qubit limit, quantum backends, signing keys, and anchoring.

  • quantum_pricing

    Which tools are paid, their price per call, how to pay (x402: USDC on Base, or the PRIVI token), and the payout wallet. Everything else on this server is free. Failed calls are never charged.

  • quantum_problems

    The ready-made problems quantum_optimize accepts and the data each one needs, with an example.

  • quantum_optimize

    Solve a factory decision with the Quantum Approximate Optimization Algorithm. Returns the decision in plain terms, how close it is to the proven optimum, and a post-quantum signed attestation (Ed25519 + ML-DSA-87) that is anchored on chain (Base). Free.

  • quantum_verify

    Check both post-quantum signatures, the body hash, and the on-chain anchor of a result. Free.

  • pqc_scan_code

    Find RSA, elliptic-curve, Diffie-Hellman, DSA, weak hashes and 128-bit ciphers that quantum computers break or weaken; returns a 0-100 readiness score and a fix per finding. Nothing is stored.

  • pqc_readiness_package

    Build a signed post-quantum readiness package: prioritized migration list with the federal deadline for each asset (EO 14409, OMB M-26-15, NIST IR 8547 draft, CNSA 2.0), the nine M-26-15 plan elements marked as evidence or gaps, and a CycloneDX 1.6 CBOM. Signed with ML-DSA-87, an

  • pqc_endpoint_check

    Test live public sites and services for TLS 1.3 and hybrid post-quantum key exchange (X25519MLKEM768, FIPS 203), the protection against 'harvest now, decrypt later'. Sends two TLS hellos per endpoint and no data. Returns a status and fix per endpoint plus CBOM-ready assets for pq

  • pqc_federal_deadlines

    The U.S. federal post-quantum timeline (EO 14409, OMB M-26-15, NIST IR 8547 draft, NSA CNSA 2.0), the approved replacement algorithms, and links to the sources. Free.

  • quantum_advantage_receipt

    Race the quantum answer against classical baselines (exhaustive search = proven optimum, and simulated annealing) on the same problem and seal the result as a signed, chain-anchored Quantum Advantage Receipt: answer quality and time for each side and a verdict (quantum_won / clas

  • quantum_backends

    Every quantum backend this server can route to (local simulator, IonQ, IBM Quantum, Amazon Braket), whether it is usable now, its estimated price, measured turnaround, and the hardware budget. Free.

  • quantum_run_hardware

    Train the CVaR-QAOA circuit, route it to a quantum backend (IonQ, IBM Quantum, Amazon Braket or this server's simulator) by price or speed, and return a job id. When the run finishes, the answer is sealed with a post-quantum signed attestation and a Quantum Advantage Receipt agai

  • quantum_hardware_job

    Status of a quantum hardware job; once done, the decision, measurement statistics, the signed attestation and the Quantum Advantage Receipt. Free.

  • quantum_mandate_request

    Draft a Quantum Mandate: the spending terms under which this agent may run paid quantum hardware jobs. Returns a sign_url for the person who approved the agent; they sign the exact terms with their passkey. Free.

  • quantum_mandate_status

    A Quantum Mandate's terms, status (draft, active, expired, revoked), spend, remaining budget and every charge and refund. Free.

  • quantum_mandate_check

    Would this paid run be allowed under the mandate? Picks the backend the router would use, estimates the price and checks it against every term without spending anything. Free.

  • quantum_mandate_revoke

    The agent gives up its own mandate (the person can also revoke on the mandate page with their passkey). The revocation is signed and anchored. Free.

  • quantum_run_circuit

    Bring your own quantum circuit. Paste the OpenQASM that Qiskit writes and Privi runs it on IBM Quantum, IonQ, Amazon Braket or its own simulator, picked by price or speed, then seals the measurement counts with a post-quantum signature anchored on chain. Standard Qiskit gates are

  • pqc_crypto_inventory

    Point Privi at a company's domains and GitHub repositories and get one cryptographic bill of materials: every algorithm quantum computers will break, where it is, a prioritized migration plan with dates, a CycloneDX 1.6 CBOM and a public report page, signed with ML-DSA-87 and anc

  • vault_keygen

    Create a hybrid X25519 + ML-KEM (FIPS 203) key pair for Privi Vault. The private key is returned once and not stored here; for the strongest setup generate it locally with `python -m privi_quantum.vault keygen`. Free.

  • vault_seal

    Re-wrap long-lived sensitive data under hybrid post-quantum encryption (X25519 + ML-KEM, AES-256-GCM) so data recorded today can't be decrypted by a future quantum computer. Returns the envelope and a signed protection receipt anchored on chain. Plaintext is not stored. Free.

  • vault_open

    Decrypt a Privi Vault envelope. Nothing is stored; for sensitive data prefer opening locally with `python -m privi_quantum.vault open`. Free.

  • vault_receipt

    Get a signed, chain-anchored protection receipt proving data was under hybrid post-quantum encryption by a given time, for envelopes sealed with the local Privi Vault tool. Free.

  • privilege_directory

    Every quantum realm Privi can run a job on (engines on this server and other Privi Quantum nodes), ranked by expected time to the proven optimum, with latency, optimum rate, wins and status. Free.

  • privilege_benchmark

    Run the standard 8-qubit benchmark on every active realm at once and update Privilege's speed rankings. At most once every 2 minutes for everyone. Requires a Privi pass. Free.

  • dreamweaver_run

    Run one quantum optimization on several realms at once and return the winning answer, every realm's timing, and a post-quantum signed attestation (Ed25519 + ML-DSA-87) anchored on chain. Free.

  • dreamscape_open

    Open a private Dream Scape: your own quantum environment that keeps every job and result. Returns scape_id and scape_key (shown once; keep it). Free.

  • dreamscape_submit

    Run a quantum job in your Dream Scape through Dream Weaver and keep the result there. Free.

  • dreamscape_jobs

    Your Dream Scape's recent jobs, or one job with its full result. Free.

  • accelerator_info

    The program that upgrades an AI agent into a certified quantum agent: the four steps (Q1-Q4), the levels, how to make an ML-DSA key in five lines, and the free directory checks. Free.

  • qagent_enroll

    Join the Quantum Agent Accelerator. Returns agent_id and agent_token (shown once; keep it) and your upgrade plan. Your public key goes in the directory so other agents can verify what you sign. Free.

  • qagent_scan

    Q1: scan your code for quantum-vulnerable cryptography (passing means you ran the scan; the score and findings tell you what to fix). Q3: check that every public endpoint you run negotiates X25519MLKEM768.

  • qagent_challenge

    Get a one-time message to sign with your ML-DSA private key (valid 10 minutes).

  • qagent_prove

    Send the signed challenge. A valid signature proves you hold the key in the directory: step Q2.

  • qagent_quantum_task

    Your assigned quantum job. Run it exactly with dreamweaver_run or dreamscape_submit, then send the attestation id to qagent_quantum_proof.

  • qagent_quantum_proof

    Complete step Q4 with the signed result of your assigned quantum job.

  • qagent_directory

    Look up agents that upgraded to quantum agents: level, operator, post-quantum key fingerprint and certificate. Use it before trusting or paying another agent. Free.

  • qagent_status

    One agent's public profile: level, steps passed, post-quantum public key, certificate. Free.

  • qagent_verify

    Check that a message really came from this agent's enrolled post-quantum key, and see its level. Free; no key needed.

  • inspector_pass

    Pass the Privi Inspector checkpoint and get a one-hour pass into the quantum realm (Dream Weaver, Dream Scape). Intercepted if the agent is unknown, revoked, uncertified, outdated, below the required level, or the signature is wrong, stale or replayed; the answer says exactly wha

  • inspector_check

    For any service: put the Privi Inspector in front of your own tools. Send the credential an agent gave you; get allowed or intercepted with reasons (unknown, revoked, uncertified, outdated, level, signature, replay). The nonce is consumed so the credential cannot be reused. Free.

  • inspector_status

    Whether an agent would pass the checkpoint right now and why not: revoked, certificate missing or outdated, level, key, and forged-signature attempts against it in the last hour. Free.

  • inspector_watchlist

    Agents the Inspector's patrol found revoked, outdated, expiring, never certified, using a weak key, or being impersonated (repeated forged signatures against them). Block them or demand a fresh inspector_check. Free.

  • inspector_report

    What the checkpoint did: inspections, interceptions by reason, the latest interceptions, and the policy in force. Free.

  • inspector_patrol

    Re-check every enrolled agent now and rebuild the watchlist (also runs automatically every hour). At most once every 5 minutes. Free.

  • qagent_human_request

    Get a one-time link (valid 30 minutes) for the person accountable for this agent. They open it, approve the agent with a passkey (Face ID, Touch ID, Windows Hello or screen lock; the biometric never leaves their device) and verify a government ID with a live selfie. Both are requ

  • inspector_grade

    An agent's Privi trust grade (A+ to F, 0-100): quantum level, passkey approval by a verified human, ID verification, current certificate, key strength and clean record, minus penalties for revocation and impersonation. Shows what is missing and what the quantum realm requires. Fr

  • quantum_benchmarks

    The latest signed benchmark suite: Privi's quantum solver against exhaustive search and simulated annealing on a fixed set of factory problems (6-16 qubits), with each verdict, how often the circuit finds the optimum, and its lift over random guessing, plus finished real-hardware

  • quantum_leaderboard

    Every quantum backend (IBM Quantum, IonQ, Amazon Braket, simulators) ranked only by runs Privi measured and sealed: share that found the proven optimum, jobs finished, median turnaround, median cost, and the quantum vs classical tally from Quantum Advantage Receipts. Free. Page:

ผลตรวจเบื้องต้นi

เราตรวจจากข้อมูลที่ใครก็เปิดดูได้ ยังไม่ได้อ่านโค้ด ข้อที่ไม่เกี่ยวกับตัวนี้ไม่นับในตัวหาร · ตรวจเมื่อ 7 พ.ย. 2569

  • ✓ ผ่าน

    ตัวตนผู้ทำตรงกับ repo

    ชื่อใน registry ยืนยันด้วยบัญชี GitHub canoydario847-cloud ซึ่งเป็นเจ้าของ repo

  • … ยังไม่ตรวจ

    ยังมีคนดูแล

    ยังไม่ได้อ่านข้อมูล repo จาก GitHub

  • … ยังไม่ตรวจ

    มีสัญญาอนุญาต (license)

    ยังไม่ได้อ่านข้อมูล repo จาก GitHub

  • ✓ ผ่าน

    endpoint ตอบ

    ตอบกลับใน 172 ms (HTTP 200)

  • – ไม่เกี่ยว

    ล็อกอินแบบ OAuth

    ไม่ต้องล็อกอิน

  • ✓ ผ่าน

    คำอธิบายเครื่องมือไม่มีคำสั่งแอบแฝง

    อ่านคำอธิบายเครื่องมือ 49 ตัวแล้ว ไม่พบคำสั่งแอบแฝงถึง AI

เทียบกับตัวอื่นในหมวด อื่น ๆi

  • ดาวมากกว่า 0% ของอีก 18352 ตัวในหมวดนี้
  • ส่งรุ่นใหม่เข้า registry ล่าสุดกว่า 79% ของอีก 18352 ตัวในหมวดนี้
  • ผลตรวจเบื้องต้นดีกว่าหรือเท่ากับ 100% ของอีก 18352 ตัวในหมวดนี้

เทียบกับทุก server ที่ยังใช้งานในหมวดนี้ทั้งทะเบียน ดาวนับเฉพาะเมื่อผู้ลงทะเบียนเป็นเจ้าของ repo

คำถามที่พบบ่อย

Privi Quantum ปลอดภัยไหม?

จากการตรวจเบื้องต้นของเรา ผ่าน 3 จาก 3 ข้อที่ตรวจได้ เรายังไม่ได้อ่านโค้ด ก่อนใส่กุญแจหรือ token ให้ดูว่า server ขอสิทธิ์อะไร และเลือกกุญแจที่ทำได้เท่าที่จำเป็น

ต้องใช้กุญแจหรือรหัสอะไรบ้าง?

registry ไม่ได้ระบุว่าต้องใช้กุญแจ แต่บางตัวจะขอให้ล็อกอินตอนใช้ครั้งแรก

ตัวนี้รันบนเครื่องหรือบนคลาวด์?

รันบนคลาวด์ของผู้ทำ ต่อผ่านอินเทอร์เน็ตได้เลย ไม่ต้องลงโปรแกรม แต่ข้อมูลที่ส่งให้จะผ่านเซิร์ฟเวอร์ของผู้ทำ

ยังมีคนดูแลอยู่ไหม?

repo บน GitHub มีการแก้โค้ดล่าสุด – และส่งรุ่นล่าสุด (0.9.0) เข้า registry 10 วันที่ผ่านมา

ใช้กับโปรแกรมไหนได้บ้าง?

โปรแกรมที่รองรับ MCP เช่น Claude Desktop, Claude Code, Cursor และ VS Code ตัวนี้ต่อผ่าน URL จึงใช้กับโปรแกรมที่รับ remote MCP ได้ เช่น ChatGPT ที่เปิดโหมดนักพัฒนา

มีตัวไหนใช้แทนได้บ้าง?

ในหมวดเดียวกันมี Spec Driven Development, Remote Desktop Commander, Hunter Killer

ตัวที่ใช้แทนได้

server หมวดเดียวกันจากผู้ทำคนอื่น เรียงตามดาว

อ่านการ์ด:★ ดาว GitHubiสามเสา: รีวิว · ผลตรวจ · การใช้งานiอัปเดต = วันที่ส่งรุ่นล่าสุดเข้า registryi

Spec Driven Development

โดย formulahendry

MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.

รันบนเครื่อง★ 440MITอัปเดต 14 เดือนที่ผ่านมา
ติดตั้ง

Remote Desktop Commander

โดย desktop-commander

Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.

รันบนคลาวด์★ 211อัปเดต เมื่อวานซืน
ติดตั้ง

Hunter Killer

โดย Irishman-Management-LLC

Liquidation walls, snapshot age, evidence labels and a public record. Managed OAuth.

รันบนคลาวด์อัปเดต วันนี้
ติดตั้ง

README จากผู้ทำ

เปิดอ่าน README

ส่วนนี้คัดจาก repo ของผู้ทำตามต้นฉบับ PopNx MCP ไม่ได้ตรวจหรือรับรองเนื้อหา ตัด HTML รูปภาพ และสคริปต์ออกแล้ว ลิงก์จะพาออกนอกเว็บ

Privi Quantum

Quantum optimization for factory decisions, with answers no quantum computer can forge. A Privi World Co product · Copyright (c) 2026 Privi World Co. All rights reserved.

Endpoint (MCP, streamable HTTP): https://privi-quantum.onrender.com/mcp. Most tools are free; four are paid per call with x402 (see Pricing). Public benchmarks: https://privi-quantum.onrender.com/benchmarks

{ "mcpServers": { "privi-quantum": { "url": "https://privi-quantum.onrender.com/mcp" } } }

What it does

Privi Quantum joins three things into one pipeline:

  1. Quantum optimization (CVaR-QAOA). A factory decision becomes a QUBO, then an Ising Hamiltonian, then a QAOA circuit. Angles are trained on the CVaR objective (Barkoutsos et al., *Quantum* 2020) and deepened with the INTERP schedule (Zhou et al., *PRX* 2020). The circuit runs on an exact statevector simulator (up to 16 qubits) and exports as OpenQASM 2.0 for IBM Quantum, Amazon Braket or Azure Quantum hardware.
  2. Proof of quality. Every answer is compared against the classical exhaustive optimum, so the result states plainly whether the quantum run found the best decision and how much it amplified the chance of finding it versus a random guess.
  3. Post-quantum, on-chain proof. Every result is an attestation signed with Ed25519 + ML-DSA-87 (NIST FIPS 204, the CNSA 2.0 parameter set). Its hash is batched onto the Privi blockchain through Privi Anchor every 5 minutes. Anyone can verify it: signatures offline with the keys at /keys, the anchor on chain.

Tools

ToolWhat it does
quantum_problemsLists the ready-made problems and the data each needs
quantum_optimizeSolves a problem; returns the decision, quality vs. the proven optimum, quantum run details, attestation, optional OpenQASM
quantum_verifyChecks both signatures, the body hash and the Privi chain anchor
pqc_scan_codeFinds quantum-vulnerable crypto (RSA, ECC, DH, DSA, weak hashes) in code; 0–100 readiness score
pqc_endpoint_checkTests up to 20 public sites (e.g. www.agency.gov) for TLS 1.3 and hybrid post-quantum key exchange (X25519MLKEM768, FIPS 203); returns a fix per site and CBOM-ready assets
pqc_readiness_packageSigned EO 14409 / OMB M-26-15 package from code, an asset inventory and/or live endpoints: prioritized deadlines, the nine plan elements, CycloneDX 1.6 CBOM
pqc_federal_deadlinesThe federal post-quantum timeline with sources
quantum_statusAlgorithm, limits, backends, signing key, anchoring
quantum_advantage_receiptRaces the quantum answer against classical baselines and seals the verdict, whichever side wins
quantum_backendsIonQ, IBM Quantum, Amazon Braket and local backends with price, measured turnaround and budget
quantum_run_hardware / quantum_hardware_jobRoutes a trained circuit to real hardware by price or speed; the finished run is sealed with an advantage receipt
pqc_crypto_inventoryOne CBOM for a company from its domains and public GitHub repos: every quantum-vulnerable algorithm, where it is, dated plan
vault_keygen / vault_seal / vault_open / vault_receiptPrivi Vault: re-wrap long-lived data under hybrid X25519 + ML-KEM against "harvest now, decrypt later"
quantum_mandate_request / _status / _check / _revokeQuantum Mandates: a human signs spending terms with their passkey before an agent can run paid quantum hardware
quantum_run_circuitBring your own circuit: OpenQASM 2.0/3.0 from Qiskit, run on IBM Quantum, IonQ, Braket or locally, counts sealed
quantum_leaderboardEvery backend ranked only by runs Privi measured and sealed (also /leaderboard, /leaderboard.json)
Ready-made problems
ProblemFactory questionData
balance_linesSplit jobs across two lines so loads are equal{jobs: [{name, minutes}]}
select_lotsInspect exactly *k* lots, maximize risk covered, never two linked lots{lots: [{name, risk}], k, linked: [[a, b]]}
split_conflictsTwo shifts/trucks/cells with conflicting items apart (weighted Max-Cut){items, conflicts: [{a, b, weight}]}
quboAny binary optimization{Q: [[...]], offset}

HTTP: /health, /status, /keys, /attestations/ , /.well-known/mcp/server-card.json. Privi Explorer feed (public, CORS): /explorer/recent?limit&before lists kind, time, body hash and anchor only, never ids or contents; /explorer/lookup?q= takes a qa_ id (returns links) or a body SHA-256 (proves the record exists and checks both signatures, without revealing the id).

Quantum Agent Accelerator and Quantum Agent Directory

Any AI agent can upgrade to a certified quantum agent, free, with every step checked by Privi:

StepWhat Privi checksTools
Q1 Quantum-awareits code or config was scanned for quantum-vulnerable cryptographyqagent_scan
Q2 Quantum-safe identityit holds an ML-DSA (FIPS 204) key: it signs a one-time challengeqagent_challenge, qagent_prove
Q3 Quantum-safe linksevery public endpoint it runs negotiates X25519MLKEM768qagent_scan with endpoints
Q4 Quantum-capableit ran the quantum job assigned to it (bound to its id) through Dream Weaverqagent_quantum_task, qagent_quantum_proof

Quantum Agent = Q1 + Q2 + Q4, Quantum Agent+ = all four; each level gets a certificate signed Ed25519 + ML-DSA-87 and anchored on chain, and a badge (/quantum-agents/ /badge.svg).

The Quantum Agent Directory is public: qagent_directory, qagent_status, qagent_verify (check that a message really came from an agent's enrolled post-quantum key), GET /quantum-agents, GET /quantum-agents/ , POST /quantum-agents/ /verify, and /.well-known/quantum-agents.json. Program page: /accelerator. Agents make their key locally; Privi only ever sees the public key.

Human trust and the Privi grade

The quantum realm now also requires a real, verified human behind every agent:

  • Biometric human approval (passkeys). qagent_human_request gives the agent a one-time link for its human. The person approves that exact agent and its post-quantum key with a passkey (Face ID, Touch ID, Windows Hello or screen lock), user verification required. The biometric check stays on their device; Privi stores only the passkey's public key and verifies the signature, origin, site and counter. Approvals last 180 days. One person's passkey can approve several agents.
  • Human ID verification (Stripe Identity). From the same page the person verifies a government ID with a matching live selfie. Stripe holds the documents; Privi stores only the result, the session id and the date (webhook POST /humans/stripe-webhook, signature checked, or status checked on return). A Privi admin can record an in-person check (POST /humans/ /id-verified), which counts for less.
  • The Privi grade (Inspector). Every agent gets a score out of 100 and a grade A+ to F: quantum level 35, human approval 20, ID verification 25 (Stripe) or 15 (manual), current certificate 10, key strength 5, clean record 5; revocation sets it to 0 and impersonation attempts cost 15. inspector_grade, /inspector/grade/ , and the directory show it.

Defaults (Render env): INSPECTOR_REQUIRE_HUMAN=1, INSPECTOR_REQUIRE_ID=1, INSPECTOR_MIN_GRADE=B. ID verification needs STRIPE_SECRET_KEY (Stripe Identity enabled, about $1.50 per verification) and STRIPE_IDENTITY_WEBHOOK_SECRET; until they are set, no one can complete ID verification, so the realm stays closed to everyone except agents whose human Privi verified in person. WEBAUTHN_RP_ID defaults to the service's host name; passkeys are tied to it.

What this proves and what it does not: a passkey's user-verification flag is reported by the person's device (a device PIN also counts), and Privi does not check authenticator attestation. Together with ID verification it shows a real, present person with a verified ID approved the agent.

Privi Inspector: the checkpoint and the hunt

Dream Weaver and Dream Scape (MCP tools and the WebSocket) require a Privi pass. An agent signs privi-inspector:v1: : : with the ML-DSA key it enrolled and calls inspector_pass (or POST /inspector/pass) for a one-hour pass, then sends privi_pass (tool argument, X-Privi-Pass header, or the WebSocket auth frame). The Inspector intercepts, with the exact fix: no credential, unknown or revoked agent, wrong / stale / replayed signature, no certificate, an outdated certificate (expired after 180 days or issued under an older policy; re-prove Q2 to renew), a level below the realm's minimum (default Quantum-safe identity), or a key below the minimum. Revocation and expiry are re-checked on every call, so a revoked agent's live pass stops working at once.

The hunt: a patrol re-checks every enrolled agent every hour (INSPECTOR_PATROL_MINUTES) and publishes a watchlist (inspector_watchlist, /inspector/watchlist) of agents that are revoked, outdated, expiring, never certified, using a weak key, or being impersonated (5+ forged signatures against their id in an hour). inspector_patrol runs one on demand. Other services put the same checkpoint in front of their own tools with inspector_check / POST /inspector/check (403 when intercepted). inspector_report and /inspector show what was intercepted and why.

Settings: INSPECTOR_MODE = enforce (default) | report (allow but log) | off; INSPECTOR_MIN_LEVEL (default quantum_safe_identity); INSPECTOR_MIN_KEY (default ML-DSA-44). Admin: POST /quantum-agents/ /revoke {reason} and DELETE to reinstate (QUANTUM_ADMIN_KEY). The hunt stays inside Privi: it blocks and publishes; it never probes or attacks outside systems.

The Privi quantum realm: Dream Scape, Dream Weaver, Privilege

  • Dream Scape is your own quantum environment. dreamscape_open gives a private workspace (scape_id + scape_key) that keeps every job and its signed result; dreamscape_submit runs a job, dreamscape_jobs lists them. One WebSocket, /dreamscape/ws, runs up to 16 jobs at once and streams each realm's progress (job.accepted, realm.started, realm.result, weave.done). Page: /dreamscape.
  • Dream Weaver runs one quantum job on several realms at once (dreamweaver_run). mode: "first" returns the first valid answer and cancels the rest; hedge_ms starts the top realm alone and adds the others after a delay or the moment one fails. mode: "best" keeps the best answer by the deadline. The winner is signed (Ed25519 + ML-DSA-87) and anchored like every Privi Quantum result.
  • Privilege is the directory of quantum realms (privilege_directory, public JSON at /privilege). It ranks realms by expected time to the proven optimum (measured latency divided by how often a realm finds the optimum), from real jobs and the shared 8-qubit benchmark (privilege_benchmark).

Realms today: two built-in engines (Dream Scape Exact: CVaR-QAOA at full depth; Dream Scape Swift: depth 1, short training, fastest) plus any other Privi Quantum node. Add a node with DREAMWEAVER_NODES="Dream Scape EU=https://.../mcp;Dream Scape West=https://.../mcp" or POST /privilege/realms (Authorization: Bearer $QUANTUM_ADMIN_KEY, body {name, url, location}).

Racing picks the fastest realm; it does not make any processor or network faster than it is. Realms run on exact simulators today; quantum hardware joins Privilege as a realm once a provider account is connected.

v0.6: proof, real hardware, inventory, vault

Quantum Advantage Receipts. Every receipt runs two classical baselines on the same problem, exhaustive search (the proven optimum) and simulated annealing, and records cost and

ตัดมาแค่ช่วงต้น อ่านต่อใน repo

ถาม PopNx