// ANOMLY INVAR · LOCAL AI · RECEIPTS ON EVERY INFERENCE

AI that doesn't drift.
And can prove it.

Ollama gives you an answer. INVAR proves where it came from. Turn hardware you already own into a local AI endpoint where every inference writes a re-executable, hash-chained receipt — its worldline. No cloud. Nothing taken on faith.

Your AI answered ✓ PROVEN
"The capital of France is Paris."
Ran on your machine — a local model, no cloud
Re-ran it just now — same answer, bit for bit
Record sealed sha256:4efc…ecbd
Someone edits the record? ✗ REJECTED — math, not trust.

How it works

Three moving parts, all on your hardware.

01 · RUN

Pinned local inference

INVAR runs your model (llama.cpp-compatible GGUF) with a pinned configuration — temperature 0, fixed seed and threads, digested binary and weights — so the same deployment reproduces the same output.

02 · RECORD

A receipt per inference

Every completion emits a canonical, certified manifest binding runtime, model, prompt, and parameters to the output — hash-chained into an append-only worldline. Built on the open Computation Receipts spec.

03 · PROVE

Re-executable verification

invar verify re-runs any entry and compares digests. Broken chains, swapped models, or edited outputs are REJECTED — mechanically, not by trust.

Who it's for

Local AI adoption has an accountability gap. INVAR closes it.

Compliance-bound teams

Law, health, finance, government: the confidentiality rules that push you to local AI also require you to account for it. The worldline is your record-keeping artifact — which model, which input, which output, provable after the fact.

Teams shipping agents

When an agent writes code or takes an action, the worldline is the flight recorder. Model digests in every receipt catch silent model swaps.

Anyone selling AI output

Hand your client the receipt chain proving your deployment produced this deliverable, then. Provenance you can attach to work product.

Sovereignty-first operators

Flash it, own it: no cloud, no telemetry, no subscription required to keep running. Receipts make "my AI, my machine" tangible.

WHAT INVAR DOES NOT CLAIM

  • The default profile is deployment-pinned re-execution: the same box, binary, and weights reproduce the output. Cross-machine bit-exactness is a separate, verification-grade profile (Anomly's exact-arithmetic stack) — slower, exact, optional.
  • Receipts prove this computation ran on these weights. They do not prove the model's answer is good.
  • We name the hardware and the numbers we measure. Take it apart — the teardown is the marketing.

Pricing

You bring the hardware. The license covers the software, the receipts, and every update.

FREE

$0 · forever

No account. No trial clock. No cloud.

  • The full local agent: receipted OpenAI-compatible endpoint
  • invar verify — re-executable verification for everyone
  • Local worldlines & export
  • Installs beside your existing OS in one command
Install free

DEVELOPER

$19 / month · or $190 / year

For the professional whose work needs proof

  • Personal Ledger — up to 5 of your devices
  • Chain-of-custody export packets
  • Email support
Start Developer

ENTERPRISE

$49 / seat / month · 5-seat minimum

Founding teams: $29/seat locked for life — first 25 teams

  • Team Ledger fleet-wide — every entry verified at the door
  • Chain-of-custody exports for audits and clients
  • Model-governance alerts (digest changes, unapproved weights)
  • SSO & retention policies included when they land — roadmap, priced in now

FRONTIER

Talk to sales

For organizations where inference itself must be provable at scale

  • Cross-hardware bit-exact profiles (demonstrated: x86 ↔ FPGA ↔ GPU)
  • Receipt infrastructure at datacenter scale
  • Custom integration & silicon roadmap access
Contact us

Paid tiers: refundable in full for 30 days. The free agent is simply free.

Download

One command on the system you already run — nothing flashed, nothing replaced. Your license email contains your install command and key. The verifier is free for everyone, forever — receipts anyone can't check aren't receipts.

# install the free verifier — no license, no account
curl -fsSL https://www.anomly.com/get/invar.sh | sh

# verify any INVAR worldline
invar verify worldline.jsonl

Direct downloads: invar.sh · wheel (v0.1.0) · SHA256SUMS — verify: sha256sum -c SHA256SUMS

The receipt format is built on the open Computation Receipts (CR-v0.1) specification — public spec, 17 published conformance vectors, independent implementations. Verification is a property of the format, not a feature we gatekeep.