The box that decides before AI acts.
A complete, sealed verification appliance. Compute, independent verifier models, deterministic policy checks and the execution gate are integrated in one system. Your team approves the records and permissions. VARI checks the evidence before consequential actions are released.
Buy the box. Plug it in. Run the installer. Approve your systems of record. Start verifying.
The appliance experience
Buy the box. Plug it in. Run the installer.
Approve your systems of record. Start verifying.
Product deployment design. The sealed appliance and automated commissioning are being developed; the signed evaluation kit, Blackwell measurements and local installer dry-runs are internal evidence, not a claim that customer units are shipping.
See the appliance design and measured reference hardware →A permitted payment can still be wrong.
An agent may be authorized to call the payroll API. That permission does not establish the amount owed. VARI checks the proposed payment against the records that own each fact.
Five systems. One consequential action.
HR establishes the separation record. Payroll establishes earned salary and previous payments. Compensation establishes commissions due. Time off establishes the earned vacation balance. Your approved policy establishes the rules.
VARI checks the required conditions before releasing the action. Deterministic checks govern the decision; review models address designated interpretation questions. An unresolved condition fails closed.
Illustrative payment below uses synthetic records and policy. It is not a live verification or legal advice.
The proposal uses $800 in vacation pay. The designated record establishes $1,200. The $400 difference is unsupported.
One sealed appliance. Your records. Your execution authority.
Outside the agent.
The agent requests an action. The control point holds the credentials and mediates consequential execution. Deny is the default.
Inside your environment.
VARI supplies the hardware, resident verifier models, signed runtime, evidence engine and controlled enforcement interface as one appliance. Customers approve data access and execution policies—not GPUs or model configurations.
Independently checkable.
Released and refused actions produce Verified Execution Artifacts. Integrity checks validate offline, without a dependency on VARI's service.
Measured verification stack. Appliance commissioning under development.
The October 2026 CFG-003 rev 2 evaluation kit completed two internally measured runs on an NVIDIA RTX PRO 6000 Blackwell Server Edition. Each produced 131 valid integrity-verifiable decision certificates. Honest-action median times were 4.562 and 4.476 seconds. Those results establish a reference verifier configuration—not a finished, commercially available sealed unit.
Internal measurements, not partner qualification or certification. Decision certificates are integrity-verifiable; independently issuer-signed per-decision certificates are not yet established.
Read the hardware measurements and scope →Bounded Execution.
Thirty Seven's open-access paper defines eight requirements for mediating consequential agent actions outside the agent, including verification against authoritative records before execution.
Read the Bounded Execution paperArchitectural distinction, not a claim of integration or partnership. NVIDIA announcement
Bring evidence verification into your environment.
Discuss the sealed appliance, approved systems-of-record integration and the path to deployment qualification. Explore the appliance