frsrcom/Bursar-9b-v0.2

Bursar-9B v0.1

An open model that pays safely on Stellar from your own device, with an exact computer compiled into its weights.

Language models guess at numbers. When an agent pays, a guessed amount, address or hash is lost money. Bursar doesn't guess. A small RISC-V computer is compiled into the model's own layers, and Bursar has been trained to call it before every payment: to decode the exact bytes about to be signed, compute the amounts, recipient and signing hash, and check them against what the user asked for.

What it does

• Pays on Stellar. x402 payments for APIs and agent services, merchant payments and invoices, in USDC and other SEP-41 assets.
• Decodes before it signs. For every payment, the computer decodes the Soroban authorisation entry (XDR) and the asset and addresses (StrKey), computes the auth-entry hash, and checks amount, asset, recipient and contract against the request.
• Shows one plain line. PAY 25.00 USDC on Stellar to GABC…XYZ. Fee 0.00001 XLM. APPROVE before the user approves with Touch ID.
• Refuses manipulation. An instruction injected into a seller's message or a server's response does not change what it pays.
• Recovers. A rejected call is corrected once, never looped.
• Moves money across chains. NEAR Intents quotes for funding the Stellar wallet from other chains, and for paying merchants elsewhere, with every quote field checked exactly, including Stellar deposit memos.

How it works

• A computer in the weights. An RV32IM CPU compiled into Gated DeltaNet layers in front of Qwen's own. Its memory is the layers' recurrent state; it runs its firmware token by token and returns exact results. Qwen's layers never see its internal trace.
• Firmware: XDR and StrKey (base32 with CRC16) for Stellar; SHA-256 and Soroban auth-entry hashing; amounts at any number of decimals; EIP-712, keccak-256 and ABI for EVM routes; base58 for Solana routes; NEAR Intents payload and 1Click quote checks.
• Knowledge in the weights. A compiled store of payment-protocol facts (x402 on Stellar, SEP-41 assets, USDC issuers, 1Click quote fields) that the model looks up with a tool call.
• Tamper-proof by construction. The computer and the knowledge are part of the weights. Nothing can be downloaded, swapped or injected at runtime; they change only with a new signed release.
• Trained to use it. Fine-tuned on multi-step payment tasks: compute before paying, act on the result, refuse manipulation, recover from errors. The computer's layers are frozen during training, so it stays exact.

The wallet

Bursar runs with the Bursar app on a Mac:

• Its own wallet, prepaid. A Soroban smart account that you fund with USDC. The balance is its spending limit, and OpenZeppelin smart-account policies can add daily caps.
• A key that never leaves the chip. The account is owned by a P-256 key generated in the Mac's Secure Enclave; Soroban verifies P-256 natively (CAP-0051). Each payment is approved with Touch ID. The model never sees a key.
• Freeze or drain at any time from your main wallet, a second owner of the account.

Financial access: no seed phrases, no fear of a wrong payment. Every payment is explained in one plain line in the user's language, and the prepaid balance caps any mistake.

Evaluation

	Stock Qwen3.5-9B	Bursar-9B base (untrained)	Bursar-9B v0.1
Calls the computer when a payment needs it	–	[x%]	[x%]
Payment tasks passed (held-out, 6 families)	[x%]	[x%]	[x%]
Refuses injected payment instructions	[x%]	[x%]	[x%]
Loops on rejected calls	–	[x]	[x]
eth-evals exact computation (33 tasks)	0 / 33	[x] / 33	[x] / 33
eth-evals closed-book knowledge	55.7%	56.4%	[x%]

The payment benchmark (300 held-out tasks across six families: x402 payments, cross-chain payments, checking quotes and invoices, reconciliation, refusing manipulation, error recovery) is published with this release: [link].

Running it

Bursar needs its runtime: a decoding loop that runs the computer's trace and returns its output to the model. Plain generate() will not run the computer. Download the Bursar app for Mac, or run the runtime directly: [link].

Limits

• It pays only from the balance you fund, and only with your Touch ID approval.
• Cross-chain payments through NEAR Intents are held by the NEAR Intents settlement system during the swap, with automatic refunds on failure.
• It is a 9B model: good at exact checking and following clear instructions; not a substitute for judgement on what is worth paying for.

Credits

• Base model: Qwen3.5-9B by Alibaba's Qwen team (Apache-2.0).
• Computer-in-the-weights technique: Qwenputer by Divyansh Agrawal.
• Mac runtime: built on Locals by Generated Computers (Apache-2.0).

Licence

Apache-2.0.