Live Gravitas
Fresh public records, encoded fields, receipt, and local answer recovery.
Run the demoPublic Release Report
What to try first.
Mushku.com exposes the public demo, paid-search flow, browser OpenEncoder path, signed Ionizer package path, and buyer one-pagers from one simple surface. Start with the demo, then inspect the request envelope and proof packet.
1Run demo
2Open paid search
3Use Browser Fields
4Review quote
5Replay proof
Pay Per Search
Add credits, prepare fields in the browser, quote exact cost, run, save result, replay.
Open pay per searchCurrent State
Service, package, paid-search, benchmark, and security verification in one compact sheet.
Open verificationEnd to End
One local-record example showing what stays local, what leaves, and how the answer maps back.
Open walkthroughBuyer Brief
Legal one-pager for law-firm and enterprise legal review.
Open legal briefBuyer Brief
Controlled-data one-pager for sensitive retrieval and audit-trail review.
Open controlled-data briefOpenEncoder
Public reference encoder repository for protocol review.
Open GitHubMushku Nobleworks
Commercial pilots, licensing, and evidence review.
sram@mushku.comBuyer one-pagers are site-owned assets under /one-pagers/ in the Mushku website repository. They should not be duplicated into engine, encoder, or proof repositories.
Public Claim Boundary
What is safe to claim publicly.
Safe claim: this is a field-envelope search protocol demo with local answer recovery, same-origin HTTPS transport, replayable receipts, and a separated OpenEncoder reference encoder. Customers may use OpenEncoder, Ionizer, or their own compatible encoder; the service contract is the field envelope plus necessary auth/submission metadata. The zero-cleartext egress boundary is inspectable from the request envelope. Ionizer and Gravitas expose receipt-backed signed endpoint proof surfaces; OpenEncoder also has a bounded Groth16 zkSNARK proof surface for its pinned reference circuit. Do not claim official Legal-MLEB leaderboard acceptance, general-purpose encryption, metadata invisibility, or a blanket privacy proof beyond the passed receipt surfaces.
Plain-English model: encryption is a lockbox around the book; the Mushku field path sends a library-card-like coordinate. The coordinate is useful only with the customer's local corpus and local mapback ledger. Gravitas compares field envelopes and returns a receipt-backed pointer, not raw readable source.
Privacy boundary | Terms | Refunds | Independent proof packet | OpenEncoder methodology and claims
Public Wording Guardrails
Use the bounded claim, not the stronger one.
DO SAY DO NOT SAY ----------------------------------------------- ----------------------------------------------- no raw source text in tested request payloads metadata disappears encoded field envelopes are sensitive metadata invisible to the server field-envelope compatibility contract required Mushku encoder receipt-backed local runs accepted external status without acceptance answer pointer with local recovery magic oracle deterministic receipt and replay path uncited perfect-fidelity wording commercial review before sensitive production safe for privileged material in the public demo
Reproduction Path
The next stronger proof is independent reproduction.
ARTIFACT NEEDED STATUS ------------------------------ ------------------------------------------------------------ proof-output.json public now openencoder-browser-parity.json public now; Python reference vs browser WASM parity source/qrel/corpus hashes public in independent-proof-packet.json exact local verifier commands public in independent-proof-packet.json small reproducible subset required before stronger public benchmark claim independent evaluator review not claimed yet
Active Holds
Known holds are separated from product bugs.
LANE STATUS REASON ------------------------- ------------------------------------------ ------------------------------------------------------------ Windows public execution ON HOLD until Authenticode cert available Device Guard can block unsigned Ionizer.exe before execution Windows package test Harness implemented scripts/windows_paid_search_e2e.ps1 records NotSigned failures Non-Windows package test Quote path passed signed package binding, receipt, and quote verified live
Trust Ladder
How to review the product without trusting the copy.
STEP ACTION WHAT TO CHECK ---- ------------------------ ------------------------------------------------------------ 1 Run the public demo Answer text appears with a receipt and proof pointer 2 Inspect DevTools Request body contains encoded fields, not raw source records 3 Read proof-output.json Metrics, receipt hashes, file hashes, and claim boundaries 4 Review OpenEncoder Public reference path, threat model, and Groth16 circuit scope 5 Commercial review Signed package, private deployment, security review, evidence bundle
Retrieval Quality
Answer-quality numbers stand on their own.
Use the public proof packets for machine-readable metrics, source hashes, receipt hashes, and verifier commands: proof-output.json and independent-proof-packet.json.
BENCHMARK LANE QUERIES CORPUS QRELS/RANK top1 accuracy success@5 success@10 mrr@10 ------------------------ ------------------------------ ------- ----------- -------------------- ----------------- ---------- ---------- ---------- ---------- Legal-MLEB aggregate OpenEncoder + Gravitas 2,535 7,635 2,580 qrels 538 / 2,535 0.21222880 0.35936884 0.43313609 0.27680442 Legal-MLEB aggregate Ionizer + Gravitas 2,535 7,635 2,580 qrels 2,535 / 2,535 1.00000000 1.00000000 1.00000000 1.00000000 MS MARCO v2 passage Ionizer + Gravitas 285,328 138,364,198 285,328,000 entries 285,328 / 285,328 1.00000000 1.00000000 1.00000000 1.00000000
Field Envelope / IO Metrics
Full Legal-MLEB IO telemetry is reported as measured timings.
Machine-readable IO telemetry: full-mleb-io-telemetry.json.
LANE WORKLOAD BILLABLE DIMS UPLOAD BYTES DOWNLOAD BYTES WALL TIME CURL TIME DIM RATE / IO RATE DEBIT / REPLAY ---------------------- ----------------------- ------------- ------------ -------------- --------- ---------- -------------------------- ---------------------------------------------- Ionizer + Gravitas Legal-MLEB quote 58,972,776 889 644 390 ms 0.379024 s 155,591,139 dims/s quoted 1,000 credits, funds sufficient Ionizer + Gravitas Legal-MLEB submit 58,972,776 949 1,560 293 ms 0.287708 s 204,974,404 dims/s debited 1,000 credits, receipt abfbb543... Ionizer + Gravitas Legal-MLEB replay saved result 401 1,117 265 ms 0.255872 s 4,365 B/s response replay without re-debit Ionizer + Gravitas Package download smoke 2,555,119 B n/a 2,555,119 518 ms 0.507896 s 4.704153 MiB/s account-bound package receipt passed OpenEncoder + Gravitas Legal-MLEB comparator 2,535 queries not captured not captured n/a n/a p95 43.053737 ms 0.21222880 accuracy comparator Ionizer + Gravitas MS MARCO hotpath proof 138,364,198 records n/a n/a n/a 5.25 TB/s local receipt-backed hotpath proof
Proof Surface
Perfection belongs to receipt, replay, and egress checks.
SURFACE LANE deterministic replayable raw_source_text_egress proof / receipt CLAIM ------------------------ ------------------------------ ------------- ---------- --------------------------- ----------------------------- --------------------------------------------- Legal-MLEB aggregate Ionizer + Gravitas true true 0 bytes in tested payloads 39d8aaf9c9cd... local receipt-backed run MS MARCO v2 passage Ionizer + Gravitas true true 0 bytes in tested payloads 8453ca55ad60... local receipt-backed run OpenEncoder browser proof lane OpenEncoder browser/WASM true true 0 bytes in tested payloads pinned Groth16 circuit gate bounded proof, not blanket privacy Signed Ionizer package Ionizer + Gravitas paid search true true field envelope only abfbb543375f... 58,972,776 dims, 390 ms quote, 293 ms submit, 265 ms replay
Evidence Matrix
Claims must cite an artifact.
CLAIM SURFACE PUBLIC WORDING EVIDENCE ------------------------------------ -------------------------------------------- --------------------------------------------------------------- OpenEncoder Groth16 zkSNARK bounded pinned-circuit proof surface openencoder/README.md#groth16-zksnark-boundary OpenEncoder claim limits not encryption, not blanket ZK privacy openencoder/PUBLIC_CLAIMS.md#groth16-zksnark-wording OpenEncoder security boundary deterministic encoding, local ledger mapback openencoder/SECURITY.md#groth16-proof-boundary Ionizer receipt-backed verification signed endpoint receipt surface Ionizer signed endpoint receipt artifact Gravitas receipt-backed verification signed endpoint receipt surface Gravitas signed endpoint receipt artifact Demo result proof label Gravitas receipt-backed proof mushku.com/app.js formatReceipt claim_boundary Raw answer egress false in Gravitas endpoint receipt Gravitas signed endpoint receipt artifact Python deterministic authority false for Ionizer and Gravitas receipts Ionizer signed receipt artifacts + Gravitas signed receipt artifacts
Verifier Packet
Proof output is public.
PUBLIC FILE CONTENT ---------------------------------- -------------------------------------------------------------- /reports/proof-output.json benchmark metrics, receipt hashes, file hashes, claim boundary /reports/openencoder-browser-parity.json browser WASM vs Python reference tensor parity /reports/public-release.html human-readable launch map and evidence matrix /app.js live demo receipt label and browser-side recovery boundary