XRack is a sovereign cognitive runtime for enterprises that need AI agents to remember, act, verify, and prove every decision. The model proposes, the runtime executes, the ledger proves. A self-hosted appliance; your perimeter, your LLM, your audit trail.
Agents hallucinate, forget context, drift silently, and cannot prove what they did. For regulated companies, that makes AI too risky to trust, too opaque to audit, and too fragile to operate at scale.
Cites policies that don't exist. Quotes prices that aren't yours. Commits to terms that were never approved. An ungrounded model is a liability with a confident voice.
A junior hire who forgets every yesterday. Commitments evaporate, context is rebuilt from scratch, and the agent never compounds into an asset. No memory, no leverage.
The decision, the inputs, the tool calls, the policy that was checked; all lost behind a confident answer. When the auditor asks, the trail is gone.
For two years, shipping a half-broken AI agent was forgivable. It was new, the demos were good, and nobody had been sued yet. None of those three things are true anymore.
EU AI Act is in force. NIST AI RMF, ISO 42001, and SOC 2's new AI controls are arriving in audit programmes today. "We trust the model" is no longer a compliance answer; your auditor wants the trail.
Data-residency, in-perimeter reasoning, and BYO-key are now standard line items in enterprise procurement. A SaaS reasoning path is a no-go the moment Security reviews the architecture.
The agents that begin compounding institutional knowledge today are the ones that own the next decade of leverage. Every session you ship without persistent memory is a session you do not get to learn from.
The model proposes. The runtime executes.
The ledger proves.
The three layers of a sovereign cognitive runtime.
XRack replaces "call the model and hope" with a governed cognitive runtime. The model proposes, the runtime verifies and executes, and the ledger proves what happened; inside your perimeter, on your terms.
A self-hosted appliance; your cloud, your VPC, your air-gapped subnet. No SaaS reasoning path, no third party touching the conversation. Customer data and cognition never leave the box.
Every tool call, channel write, and code execution is gated by short-lived capability tokens, verified against typed memory and policy, and committed to the ledger. No ambient authority. No silent side-effects.
An immutable, append-only ledger captures every cognitive step; claims, assumptions, commitments, tool calls, costs; with cryptographic receipts you can hand to an auditor. Proof, not promises.
Every claim, decision, and action is hashed and chained to the one before it, the way a blockchain seals a transaction. Trace any outcome back to genesis; nothing rewritten, nothing dropped, nothing hidden.
Not four products bolted together; one cognitive runtime that scales from a single mind to an organization, a portfolio, and a body. The same contract holds the whole way up: the model proposes, the runtime executes, the ledger proves.
Most "agent frameworks" stop at a prompt and a tool loop. The harness builds the mind around the model; a perception layer that reads the world, an executive that chooses how to think, a verifier that refuses ungrounded claims, and a ledger that never forgets what was promised.
It is cognition, not autocomplete; and every step of it is on the record.
Perception, executive, verifier, memory, ledger, causal, temporal, learning; each with its own state and dashboard.
Nothing into or out of the model is ever cut; the verifier blocks ungrounded claims before they reach a customer.
Typed episodes, lessons, entities, and commitments persist across every session; leverage that builds, never resets.
100+ learnable parameters adapt from real operational signals; live and auditable on a learning dashboard.
One agent is a mind. A fleet is an organization; and an organization of agents without accountability is a liability at scale. The Grid makes many harnesses into a chartered team that bids, decomposes, executes, and verifies through full cognitive cycles.
The reasoning stays cognitive; the orchestration stays procedural and auditable to the last byte.
Goals are auctioned and decomposed by reasoning agents competing on merit; never one-shot completions.
Every task is independently checked by a different harness; an inconclusive vote escalates to you, not into production.
Short-lived, scoped work tokens authorize each move; compromise detection watches for forbidden and lateral use.
Every sealed mutation is batched onto a private Hyperledger Besu chain, browsable in a bundled explorer.
Run more than one organization and a new question appears; are they still pulling the way you said? The Federation is the board over a portfolio of grids, and it is deliberately the least powerful layer in the system.
It watches, scores alignment, and raises a hand. It never seizes the wheel.
Read-only pulls, zero model calls of its own, attention-only escalation; the stop decision stays with whoever owns the resources.
Every tenet carries scope, direction, and escalation policy; each change is a new published version, diffable and revertible.
0.40·drift + 0.30·identity + 0.30·trajectory; fixed weights, never learnable, because it feeds compliance evidence.
When two grids assert contradictory things about the same referent, the federation flags it before the drift compounds.
Embodiment binds one harness to a physical robot; or a simulator, the surface neither knows nor cares which. The mind does not change. It simply emits whole plans instead of chat, and proves it acted on what it actually saw.
Not "the robot says it's done"; an independent eye confirms it before the ledger ever does.
The harness emits a whole plan; the embodiment adapter dispatches one action at a time; the robot acts on what it sees. Then perception is grounded into evidence and handed back to the same mind, which decides again. Follow a single cycle as it travels the loop.
Each tick the harness writes a whole plan and supersedes the last; motor control lives in the body, never puppeteered step-by-step.
An independent grounding model reads the robot's own video and confirms what truly happened before a task is ever called done.
Motor, perception, grounding, and cognition each run at their own tempo; observed, never forced into lockstep.
Hardware e-stop, software e-stop, and a reactive pause; the action in flight is sacred, cut only by a stop.
Beneath the four planes runs something small and silent. It watches the whole mind think, and turns that into an edge that compounds the longer an appliance lives. Grown, not configured. It cannot be copied, licensed, or lifted out.
We don't document it. We don't expose it. We don't resell it. It is simply why a two-year-old XRack is not the same animal as a fresh one.
XRack is sold as a self-hosted AI appliance on an annual per-agent contract; hardware, runtime, software, onboarding, support, drift monitoring, and quarterly health reviews. Every appliance ships the whole runtime; all four planes, and the grid binds many into a fleet as you grow. You bring your own LLM. We do not resell tokens.
One box ships the entire runtime; harness, grid, federation, and embodiment. The contract is per agent and procurement-friendly; add appliances to grow a fleet, and the grid coordinates them.
Use the OpenAI, Anthropic, Bedrock, Mistral, or local model you already trust. You hold the LLM contract; XRack never marks up tokens.
The appliance arrives preconfigured. Founder-led provisioning, security-review support, and hands-on onboarding inside your perimeter.
Time-boxed, milestone-based evaluation scoped to one high-stakes scenario. No measurable win, no fee. Production follows your own change-management.
Appliance Hardware · XRack Runtime · Software License · Onboarding · Ongoing Support · Drift Monitoring · Quarterly Health and Business Reviews · Direct Founder & Engineering Access for Design-partner Cohorts.
"AI infrastructure" is the easiest claim in software. Depth shows up in the parts that survive procurement, security review, and an auditor's first question; across all four planes. Here is the harness, where it starts.
Perception, planning, executive arbitration, memory, retrieval, verification, action execution, and ledgering; all composed into a deterministic cycle. Not one prompt with extra steps.
Read, predict, plan, decide, verify, act, learn; in that exact order, before a single token reaches the user. Deterministic, inspectable, replayable.
Every claim, tool call, commitment, and cost are written to an append-only ledger with cryptographic receipts. Replay any cycle byte-for-byte; hand the receipts to your auditor.
Confidence thresholds, escalation triggers, retrieval breadth, response shape are calibrated from real cycles inside your perimeter. A compounding asset, not a chat reset.
Every cycle, every decision, every commitment are inspectable in real time. Cost, drift, claims, and policy posture surfaced as first-class operator views.
XRack runs inside your perimeter; cloud, VPC, or air-gapped. Customer data and cognition stay there. No third-party reasoning hop. No vendor that sees your traffic.
Sixteen subsystems out of the box. Below is the subset that matters in a buying conversation; grouped by the four questions every regulated procurement review asks.
XRack is for teams shipping agents that touch customers, money, contracts, or operations. The stakes are too high for prompt-and-pray; and the procurement review is too sharp.
Resolve customer issues without inventing pricing, refund windows, or contractual terms. Cite the policy. Honor the commitment. Escalate cleanly when confidence is low; and write a receipt for every decision, defensible to legal and your auditor.
Finance sees finance. Legal sees legal. HR sees HR. Engineering sees engineering. Per-user memory, isolated audit, group visibility policies; and the same brain across every internal channel, so no team is pushed onto the wrong tool.
Let the agent execute real work; refunds, ticket actions, document filings, internal API calls; through capability-token-gated tools that emit a signed receipt for every side-effect. Reconcile each receipt against the ledger; nothing happens off the record.
One operator-grade surface for claims, commitments, actions, context, memory, cost, and drift; across every cycle and every channel. Procurement, security, and audit teams ask one question and get one answer; not a Jira chain.
Keep the LLM you trust. Keep the channels your customers live in. Keep the internal tools your team already maintains. XRack meets all of them where they are.
Routed through the bifrost gateway. Multi-vendor, rate-aware, with structured retries. Switch providers without restarting cognition.
One agent brain, every surface. All channels share a single memory, identity, and audit log; so a conversation that starts on Slack continues on email without missing a beat.
XRack speaks Model Context Protocol; the emerging standard for agent tool integration. Plus first-class support for documents, search, and isolated code execution.
A deterministic loop wrapped around your model; so every response runs the same checks before it reaches the customer.
Reads the request, pulls in relevant history, and figures out what the customer actually needs.
Answer directly. Think it through. Politely refuse. Hand off to a human. The agent chooses; based on confidence, not vibes.
Every claim is checked against your business rules and conversation history. If something contradicts, the response is rewritten before it ships.
The agent responds, every action is logged for audit, and the system tunes itself so the next conversation is sharper than the last.
Why it matters. Free-form prompt loops drift. A deterministic cycle gives your team one thing to watch; and one thing to fix when something goes wrong.
A founder-led, hands-on evaluation period: appliance provisioned, your stack wired, your hardest scenario running on real cycles. Production rollout follows your own change-management programme; typically a 3 – 6 month full cycle from kickoff to live.
Realistic timing. 30 days gets you to an evaluation-ready agent with real receipts. The full discovery → tech eval → security review → procurement → production rollout cycle is typically 3 – 6 months for regulated buyers. We sequence the engagement around your change-management programme; not ours.
The operator dashboard shows what the agent is doing, why it chose that, and what it just remembered; for every conversation, in real time. When something looks wrong, you don't read logs. You see the answer.
We don't ship marketing screenshots of internal product surfaces. Tell us a case where your current AI keeps hallucinating, forgetting, or drifting; we'll run it on a shared screen and show you, end to end, what the operator console reveals.
Book a 20-min WalkthroughWe take on partners whose problems force the platform to get sharper. Names stay private until our partners decide otherwise; that's the deal we make on day one.
Design partners running agents that touch money, contracts, or regulated operations inside their perimeter. Names stay private until partners decide otherwise.
A decade shipping infrastructure for teams who can't afford to ship the wrong thing. XRack is what we wished existed the last time we shipped an agent; so we built it.
Two of three partners came in through a direct intro. We turn down more than we take.
The three options on the procurement form are usually hosted agent SaaS, an open-source agent framework you wire yourself, or "we'll build it in-house." Here is what each leaves on the table; and what a sovereign cognitive runtime puts back.
| What you want | Hosted agent SaaS (Sierra · Decagon · Glean · Writer) | Agent framework (LangGraph · Crew · Assistants API) | XRack |
|---|---|---|---|
| Cognition runs inside your perimeter | Multi-tenant SaaS. Your conversations cross a vendor's reasoning hop. | Yes; but you design, integrate, and harden the runtime yourself. | Self-hosted appliance; your cloud, VPC, or air-gapped subnet. |
| Bring your own LLM, no token markup | The model is bundled and marked up. You pay per outcome / message. | Yes; you wire the LLM contract yourself. | BYO LLM, multi-vendor gateway, hot-swap without restarting cognition. |
| Verifier blocks ungrounded claims | Vendor-side prompt & RAG. Opaque to you when it fails. | Bolt on RAG, hope the prompt holds. | Every load-bearing claim verified against typed memory before it ships. |
| Typed, persistent, per-user memory | Vendor-owned profile store. Limited types. Limited portability. | A vector dump that ages badly and leaks across users. | Typed memory with lifecycle, decay, recall, and isolation. |
| Capability-gated execution | Tool integrations execute under vendor authority. You audit through them. | Tool calls bypass any safety layer you didn't build by hand. | Every tool call gated by a short-lived, scoped capability token. |
| Immutable ledger & signed receipts | Vendor logs and dashboards. You trust the vendor's view. | Add your own tracing. Build the receipt layer yourself. | Append-only ledger with cryptographic receipts. Replayable byte-for-byte. |
| Cost & commitment telemetry per cycle | Per-message billing. Spend per cognitive stage is opaque. | Token counts in logs. Up to you to attribute. | Per-user, per-cycle, per-stage spend & commitment telemetry. |
| Procurement shape | Multi-tenant SaaS contract. Per-seat or per-message metering. | Internal headcount budget, indefinite runway, no SLA. | Annual per-agent appliance contract. One box, one agent, one number. |
| Operator visibility into the agent's state | A vendor dashboard. You see what the vendor shows you. | Re-read the prompt and squint at the temperature. | Beliefs, commitments, claims, costs, and drift; first-class operator views. |
Things you don't have to build, hire for, or stitch together. Everything below runs the moment the appliance boots; no scripts, no glue code, no second vendor in the reasoning path.
Self-hosted appliance, air-gap capable. Customer data and cognition never leave your environment; no third-party reasoning hop, no vendor that sees your traffic.
Append-only ledger, signed receipts on every claim, action, and commitment. Replay any cycle byte-for-byte; defend it to your auditor.
OpenAI · Anthropic · Bedrock · Gemini · Groq · Mistral · OpenRouter · Ollama / Local. BYO contract; no token markup; switch without restarting cognition.
Slack · Teams · Telegram · Discord · Google Chat · Twitch · Matrix · Mattermost · email · first-party web. Text, image, and file attachments through the cognitive pipeline; fully tested.
Prometheus · Grafana · Loki · Alertmanager · Bugsink come up alongside the harness on first boot; with two dozen prebuilt dashboards covering API performance, costs, cognition, retrieval, and storage.
EU AI Act · NIST AI RMF · ISO 42001 · SOC 2's new AI controls; every framework now expects an answer to "what did the agent do, why, and on whose authority?" XRack is designed so the answer is one query away; and the receipt is on the ledger.
Self-hosted appliance; your cloud, VPC, or air-gapped subnet. No third-party reasoning path. BYO LLM. Customer data and cognition stay inside your perimeter.
Every tool call, API hit, channel write, and code execution gated by a short-lived, scoped, revocable capability token. No ambient authority. No silent side-effects.
Every claim, decision, action, and commitment logged to an immutable, cryptographically-signed ledger. Replay any cycle in full, byte-for-byte.
When the agent runs code, it runs isolated; never on your host, never with your credentials, never on your production network. Every execution is reconciled to the ledger.
Memory, history, identity, and authority are partitioned per account. Group visibility policies decide what each session, and each operator can see.
Every cycle measured against itself; drift surfaces in the operator console. Control mappings to EU AI Act · NIST AI RMF · ISO 42001 · SOC 2 are documented and shared on request.
We'd rather lose the deal than land a customer expecting something we don't ship. Four places where XRack is the wrong tool.
If you need a five-question lead-capture flow on a landing page, you don't need a cognitive runtime. Use Intercom or Drift.
We onboard partners hands-on because production AI is hard and we'd rather take longer than ship something that drifts in your name.
We optimize for trust; grounding, audit, replayability, not for shaving fractions of a cent. If price-per-token is your only metric, we're the wrong fit.
XRack doesn't train the model, doesn't host the model, and doesn't sell prompts. It's the runtime around the model; the part that decides what's true, what to remember, and what to log.
Don't see yours? Reach out; we'd rather answer it now than after the contract.
Send us a scenario where your current AI keeps hallucinating, forgetting, or drifting. We'll show you what XRack does with it; live, on a 20-minute call. No deck. No theatre.
We're the ones running these calls. If XRack can help your team, we'll tell you. If it can't, we'll tell you that too; and point you somewhere that can.