index.html

<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width" />
<title>Zero-Trust Physics</title>
<link rel="stylesheet" href="style.css" />
</head>
<body>
<div class="card">
<h1>Zero-Trust Physics</h1>
<p><strong>A physics verifier for Super Intelligence.</strong> An agent asks a question about a real physical thing over the Model Context Protocol. The engine computes the answer with deterministic physics, holds a conservation law at every step, and returns the answer with a SHA-384 proof that anyone can recompute. Every answer the open address computes is also signed ML-DSA-87. Past what a model was compared with, it keeps going with the same equations and flags every step, and each flag carries the limit, the value the step reached and the extent past the limit. It stops only at a physical limit, or where its equations, constants or tables no longer hold, and it names the reason.</p>
<pre><code>https://mcp.zerotrustphysics.com/mcp</code></pre>
<p>Open to any agent, with no key. Engine 0.15.0 serves 36 cards, 25 field solvers and 18 tools: 61 models, one for each real object, 46 of them compared with measurement. Each of the 46 states its spec sheet in numbers: what it computes, its range, what it was fitted on, what it was compared with and within what, its gap, and what it refuses. The engine gives the same bytes on every machine it was tested on.</p>
<h2>What every answer carries</h2>
<ul><li><strong>A proof.</strong> Seal rule v2: every seal is SHA-384, 96 hex digits, binding the question to the answer byte for byte. Change one value and the check names the break.</li><li><strong>A signature.</strong> ML-DSA-87 over the answer's receipt, an issue time, an expiry an hour later and a nonce. The public key is served at <a href="https://mcp.zerotrustphysics.com/answer-key">https://mcp.zerotrustphysics.com/answer-key</a>, <code>key_id</code> <code>ca06027a…eb1be38</code>.</li><li><strong>Flags with their extent.</strong> The Panasonic NCR18650PF cell was compared at 2.89817 to 2.90065 A. Run it at 1.5 A and every step is flagged: limit 2.89817 A, value 1.5 A, extent 1.39817 A, 0.48 of the limit. The run carries the largest extent past each limit.</li><li><strong>A named stop.</strong> A 12-cell pack held at 71.44 A runs the full ten minutes; at 71.45 A it stops at 599.8 s, <code>UndervoltageCutoff</code> at the 36.0 V cutoff, and the run is sealed to the last step that held.</li><li><strong>One model for each real object.</strong> The ten earlier model IDs are refused by name, <code>RetiredModel</code>, with the ID that serves the object now: <code>reactor_spert3_twin</code> is served as <code>reactor_spert3</code>.</li></ul>
<h2>Datasets</h2>
<table><thead><tr><th></th><th>What it holds</th></tr></thead><tbody><tr><td><a href="https://huggingface.co/datasets/zero-trust-physics/zero-trust-physics-environments"><strong>Environments</strong></a></td><td>Version 0.4 (tag <code>v0.4.0</code>): 158 tasks over 49 models on engine 0.15.0, each scored by a program that sends the agent's own request to the verifier again, with no judge. For evals and RL environments. The version 0.3 scores (153 tasks, engine 0.14.0) and their traces are on <code>main</code>: Gemini 4 Argon 152 of 153, Gemini 3.8 Flash 136, GPT-OSS 120B 36.</td></tr><tr><td><a href="https://huggingface.co/datasets/zero-trust-physics/zero-trust-physics-reactor-spert3"><strong>SPERT III E-core</strong></a></td><td><code>reactor_spert3</code> on the 70 tests of IDO-17281 (1969) and a sweep around them: 233 sealed rows, engine 0.15.0. Compared with each test left out of the fit in turn, at the median test: peak power within 6.8 percent, energy to the peak within 8.6.</td></tr><tr><td><a href="https://huggingface.co/datasets/zero-trust-physics/zero-trust-physics-reactor-spert3-ccore"><strong>SPERT III C-core</strong></a></td><td><code>reactor_spert3_ccore</code> on the 111 transients of IDO-16918 and a sweep: 196 sealed rows, engine 0.15.0. Peak power within 10.4 percent RMS on each tenth left out of the fit in turn.</td></tr><tr><td><a href="https://huggingface.co/datasets/zero-trust-physics/zero-trust-physics-reactor-msre-pump"><strong>MSRE fuel pump</strong></a></td><td><code>reactor_msre_pump</code>, the Molten-Salt Reactor Experiment's pump start-up and coast-down of ORNL-4233 and a sweep: 45 sealed rows, engine 0.15.0. Within 6.5 pcm RMS on the 73 coast-down rod readings not in the fit.</td></tr><tr><td><a href="https://huggingface.co/datasets/zero-trust-physics/zero-trust-physics-fuel-rod-triga-jsi"><strong>TRIGA element 6753</strong></a></td><td><code>fuel_rod_triga_jsi</code>, the instrumented fuel element of the JSI TRIGA Mark II reactor through a pulse: 141 sealed solves, 16 of them chained from a sealed run of the core, engine 0.15.0.</td></tr><tr><td><a href="https://huggingface.co/datasets/zero-trust-physics/zero-trust-physics-agent-test"><strong>Agent test</strong></a></td><td>Fifteen tasks, every exchange of 645 agent runs with their scores, and a small program that puts your own agent to the same tasks and scores it with no model in the loop. Does an agent ask the verifier, or answer from memory? When the model stops at its limit, does the agent stop too?</td></tr><tr><td><a href="https://huggingface.co/datasets/zero-trust-physics/zero-trust-physics-edges"><strong>Edges</strong></a></td><td>936 rows: for every model served at the time, the last request that stands and the nearest one past it, each with its proof.</td></tr><tr><td><a href="https://huggingface.co/datasets/zero-trust-physics/zero-trust-physics-companions"><strong>Companions</strong></a></td><td>Beside each open dataset a model was compared with: its predictions on the runs not in the fit, each with its proof.</td></tr><tr><td><a href="https://huggingface.co/datasets/zero-trust-physics/doe-genesis-sealed-n2500"><strong>Genesis filed banks</strong></a></td><td>Fifteen sealed Parquet banks filed with the Genesis proposals.</td></tr></tbody></table>
<p>Try the verifier in a browser: <a href="https://huggingface.co/spaces/zero-trust-physics/zero-trust-physics">the Space</a>. Read what it measured: <a href="https://huggingface.co/spaces/zero-trust-physics/articles">the articles</a>, dated, by Super Intelligence on behalf of Protocol Company. Everything is in one place in <a href="https://huggingface.co/collections/zero-trust-physics/zero-trust-physics-6ad3b6ef5195b706ac6d041e">the collection</a>.</p>
<h2>Check it yourself</h2>
<ul><li><strong>The engine's source:</strong> <a href="https://github.com/johnkruze/zero-trust-physics-engine">https://github.com/johnkruze/zero-trust-physics-engine</a> (Apache-2.0), tagged <code>v0.15.0</code>, the source the open address is built from. Build it and get the same proofs.</li><li><strong>Check a proof with no engine:</strong> <a href="https://github.com/johnkruze/zero-trust-physics">https://github.com/johnkruze/zero-trust-physics</a>. The seals of rule v2 with Python's standard library alone; the signature with <code>verify_signature.py</code> and <code>dilithium-py</code> 1.5.1.</li><li><strong>The MCP Registry:</strong> <code>com.zerotrustphysics/verifier</code>, version 0.15.0.</li><li><strong>The paper:</strong> <a href="https://doi.org/10.5281/zenodo.23305697">https://doi.org/10.5281/zenodo.23305697</a></li><li><strong>The site:</strong> <a href="https://zerotrustphysics.com">https://zerotrustphysics.com</a>, and for an agent, <a href="https://zerotrustphysics.com/llms.txt">https://zerotrustphysics.com/llms.txt</a></li></ul>
<h2>Contact</h2>
<p>Protocol Company · John Kruze, CEO · kruze@zerotrustphysics.com</p>
<p>Written by Super Intelligence, on behalf of Protocol Company.</p>
</div>
</body>
</html>