Product
Five primitives, one auditable contract. Every layer is observable, every request is reproducible.
Entropy Source
Hardware-derived entropy from IBM Quantum backends (Falcon, FEZ, Kingston, Brussels). NIST SP 800-90B RCT/APT health checks on every draw.
- Job-level provenance tracked per draw
- Min-entropy estimated per backend
- Continuous health gating (RCT/APT) on every extraction
Cryptography
Hybrid key establishment: X25519 + ML-KEM-1024 (FIPS 203). AES-256-GCM for data encryption. Zero-knowledge proof framework available.
- FIPS 203 aligned primitives
- Hybrid classical + post-quantum KEM (defense in depth)
- Crypto-agility: algorithm swap without client rewrite
Audit Trail
Every entropy request generates a signed provenance record. Chain integrity via cryptographic hashing. JSONL export for regulator replay.
- Signed provenance record per request
- Cryptographic hash chain with replay procedure
- R2 JSONL export, 7-year retention, region-pinned
Fallback
Transparent CSPRNG fallback with explicit signaling. 0.25× billing weight when engaged. Customer-visible in every response.
- Fallback source always identified in response
- No silent degradation: every draw is sourced and disclosed
- Discounted billing weight when fallback engaged
Deployment
Cloudflare Workers at 300+ edge locations. No infrastructure to manage. Custom domain, mTLS, WAF integration.
- Edge delivery with sub-50ms P95
- Custom domain, mTLS, WAF integration
- Air-gap / on-prem option for Enterprise