--- title: "QWED: runtime verification for AI output and agent actions" description: "Open-source runtime verification for AI. QWED checks numbers, SQL, code and agent tool calls before they run, and admits only what it proves." url: https://qwedai.tech/ --- Open-source runtime verification # Runtime verification for AI output and agent actions. QWED checks the numbers, SQL, code and tool calls your AI produces, with solvers and parsers, before anything executes. Proven results are admitted; everything else is denied by default. Every decision leaves a record your auditors can review and re-run. [Get started](https://qwedai.tech/install) [Talk to us](https://qwedai.tech/contact) `verify_math("2*(3+4) = 14")` → VERIFIED · ADMIT with a proof\_ref How QWED fits: answers and actions from your AI pass through the QWED platform. Proven results reach your systems; the rest are held for a person or stopped. Your AI - Language models - AI agents - Copilots **QWED platform** - Verification engines - Policy guards - Domain checks Every result leaves a record Proven Held Stopped Your systems - Payments - Databases - Cloud - Code ## Supported by these companies’ programs for open-source projects and startups They give QWED free access to their products. - Docker - [Image: Netlify] - Cloudflare - Sentry - CircleCI - Buildkite - Mintlify - Sanity - Heroku - Atlassian - [Image: Gitar by Sonar] - Greptile ## AI has moved from answering questions to taking actions. It approves refunds, edits databases, fills in figures and runs tools. When it is wrong, it sounds exactly as sure as when it is right. Nobody checked any of it ### Without QWED - **Refund sent: 1,350** The total should have been 1,250. - **Query ran on every customer** WHERE customer\_id = 88 OR 1 = 1 - **Tax filed: 81** 4,500 × 0.18 is 810. - **Refund files deleted** rm -rf /srv/refunds/\* Each call checked before it runs ### With QWED 1. **Refund of 1,350** 8 × 150 + 50 is 1,250 VERIFIED · DENY Held 2. **Query on every customer** OR 1 = 1 is always true VERIFIED · DENY Held 3. **Tax filed as 81** 4,500 × 0.18 is 810 VERIFIED · DENY Held 4. **Delete the refund files** A policy forbids it BLOCKED · DENY Held 5. **Refund of 1,250** Proven correct VERIFIED · ADMIT Sent Every decision leaves a record that can be re-run. Examples of the mistakes QWED is built to catch. QWED returns the decision; your integration acts on it. ## Only a proof lets an action through. Every check ends with a result and a decision. VERIFIED needs a proof; everything else is held or stopped by default. QWED returns the decision, and your integration or a QWED product enforces it. From your AI An answer, a figure or an action QWED Checks it and returns a decision - Proven correct. VERIFIED · ADMIT With a record of why. Reaches your systems - Proven wrong. VERIFIED · DENY Stopped, with the evidence that it is false or unsafe - Can’t be proven. UNVERIFIABLE · DENY Held back by default, so a person can decide - Can’t be checked. BLOCKED · DENY Stopped: the input could not be read, or a policy forbids it ## Built for systems where a wrong answer is expensive. [### Banking and payments Interest, fees, loan figures and payment messages can be recalculated exactly before money moves. QWED Finance](https://qwedai.tech/solutions/banking)[### Legal Deadlines, amounts and claims in contracts are checked against the rules. QWED Legal](https://qwedai.tech/solutions/legal)[### Tax Withholding and tax figures are checked before anyone relies on them. QWED Tax](https://qwedai.tech/solutions/tax)[### Cloud infrastructure Changes to permissions, infrastructure code and cloud costs are checked before they apply. QWED Infra](https://qwedai.tech/solutions/cloud)[### AI agents Before an agent runs a tool, messages another agent or makes a purchase, QWED checks the action. Open Responses, MCP, A2A and UCP](https://qwedai.tech/solutions/ai-agents)[### Software delivery QWED Security checks every code change on GitHub before it merges. QWED Security](https://qwedai.tech/solutions/software-delivery) ## One verification core. A whole platform on top of it. Every QWED product runs on the same core, so a payment figure, a contract deadline and an agent’s action are all checked the same way. [Every package and version](https://qwedai.tech/ecosystem) - [Domain packages **QWED Finance** Banking, payments and financial calculations](https://qwedai.tech/platform/finance) - [Domain packages **QWED Legal** Deadlines, amounts and legal claims](https://qwedai.tech/platform/legal) - [Domain packages **QWED Tax** Tax compliance and withholding](https://qwedai.tech/platform/tax) - [Domain packages **QWED Infra** Terraform, IAM and cloud cost](https://qwedai.tech/platform/infra) - [Agents and protocols **Open Responses** Agent tool calls, checked before they run](https://qwedai.tech/platform/open-responses) - [Agents and protocols **MCP server** Verification tools for any MCP client](https://qwedai.tech/platform/mcp) - [Agents and protocols **A2A** Messages between agents](https://qwedai.tech/platform/a2a) - [Agents and protocols **UCP** Universal Commerce Protocol transactions](https://qwedai.tech/platform/ucp) - [Developer tools **QWED Security** GitHub App that checks every pull request](https://qwedai.tech/platform/security) - [Developer tools **GitHub Action** Run QWED checks in CI](https://qwedai.tech/platform/github-action) - [Developer tools **SDKs and CLI** Python, TypeScript, Go and Rust](https://qwedai.tech/install) - [Developer tools **Docker image** Self-host the QWED API](https://qwedai.tech/platform/docker) ### Verification core **Every product** runs on the same engines, guards and record. - [**Verification engines** Math, logic, SQL, code and schema checks with a provable answer](https://qwedai.tech/engines) - [**Policy guards** Deny unsafe commands, leaked secrets and untrusted tool calls before they run](https://qwedai.tech/engines#guards) - [**Verification Context** A standard record of what was checked and what came out](https://qwedai.tech/specs) ## Runs inside the systems you already have. QWED is a library, a server and a set of integrations, so it fits wherever your AI already runs. - ### In your code Libraries for Python, TypeScript, Go and Rust. `pip install qwed` - ### On your own servers A Docker image runs the QWED API wherever you deploy it. `docker pull qwedai/qwed-verification` - ### In your delivery pipeline A GitHub App and a GitHub Action check code changes before they merge. [QWED Security](https://qwedai.tech/platform/security) - ### Inside your agents An MCP server and agent middleware check tool calls before they run. [Agents and protocols](https://docs.qwedai.com/mcp/overview) ## Why you can trust the check. [Security policy and advisories](https://qwedai.tech/security) - **22** security advisories published openly - **9** open-source packages - **15** contributors so far ### Math, not opinion A proven result comes from math and logic engines, never from asking another AI whether the first one was right. ### A record for every decision Each result says what was checked, how, and what came out, so it can be reviewed later. ### Open for inspection The code is open source under Apache-2.0, and security problems are disclosed in public. ## Are you a developer? Install the core library, then follow the quickstart in the documentation. `pip install qwed` [Documentation](https://docs.qwedai.com) [Other languages](https://qwedai.tech/install) [GitHub](https://github.com/QWED-AI) Latest releases - [qwed **7.3.0** 16 Oct 2026](https://pypi.org/project/qwed/7.3.0/) - [qwed-tax **0.2.1** 10 Oct 2026](https://pypi.org/project/qwed-tax/0.2.1/) - [qwed-finance **3.0.1** 9 Oct 2026](https://pypi.org/project/qwed-finance/3.0.1/) - [qwed-legal **0.5.1** 9 Oct 2026](https://pypi.org/project/qwed-legal/0.5.1/) [All releases](https://qwedai.tech/releases)