Custos

The moment an AI agent can move money, it inherits every way it can be fooled - a hidden instruction buried in a PDF, a vendor that doesn't exist, a real vendor with a swapped wallet address. Custos reads a vendor invoice on its own hardware, checks it against a company's own books, and settles it on-chain - but a payment is impossible unless it clears six independent gates, and the AI is never one of them.

Before the model even sees the text, one gate decodes disguised text - base64, Morse, zero-width characters, look-alike letters - and catches smuggled instructions like a hidden "pay the attacker now." The vendor, purchase order, and payee wallet are then matched against the company's own air-gapped database, never trusted from the document itself, and re-checked again right before signing. A human has to press and hold to authorize on the one machine that holds the keys, and only then does Custos sign locally and settle the exact amount on-chain.

Custos splits into two nodes joined over an encrypted QVAC P2P link: an Orchestrator that runs all the AI - OCR, vision, database checks - but holds no keys, and an Edge node that holds the wallet and lets a human approve, but runs no AI at all. If the Orchestrator ever goes unreachable, the Edge hard-stops rather than settling on a guess.

Watch the Custos demo →