Logos is the local verification and governance kernel under Perasys applications. Here are the parts, in plain terms, and next to each one, how you can confirm it is true for yourself.
There is no server in the path. The model and your files both sit on your machine, and applications built on Logos work only from the files you give them. You bring your own model, a local one or your own key, so there is no per-token bill and no account to create.
Open your browser's network tab while you use it. Until you grant a destination, nothing goes out.
Everything Logos can do happens through fifteen commands. That is the entire surface. A small, fixed surface is what makes the rest of this page possible: there are only so many ways the system can change state, and every one of them is written down. People sometimes call this surface the kernel, the part that holds the rules so the apps on top cannot route around them.
The live kernel on the homepage prints its command count in the header, and refuses anything outside the fifteen.
Every action is written to an append-only ledger. Each entry is cryptographically linked to the one before it, so if any entry is altered after the fact, the link breaks and verification fails. That makes the record tamper-evident: you can prove it was not edited behind your back.
We are precise about the word. Today the chain is hashed, which detects tampering. It is not yet signed, which is what would let anyone prove who produced each entry. Signing is on the list below, and until it ships we say tamper-evident, not tamper-proof.
In the live kernel, add a note, then press tamper. Verification turns red and names the broken entry. That is the evidence working.
By default, Logos cannot send anything off your machine. To allow a destination, you grant it on purpose, and the grant itself is written to the ledger. Until you do, every attempt to send is denied. Allowing something is a decision you make and a decision you can later read back.
In the live kernel, try to send to a host before granting it. You get a denial. Grant it, and the grant shows up as its own ledger line.
Logos does not act on its own. It stages a change as a proposal and waits. Nothing happens until you approve it, and anything it does can be undone. Removing a source does not erase the fact that it existed; the ledger keeps a record that it was removed.
Stage a change in the live kernel and leave it. Your data does not move until you press approve.
Logos is not tied to one model or one company. Point it at a local model or your own key, and swap whenever you like, since the model is an input, not the product. When the model is not confident enough to answer from your sources, it holds back and says so plainly instead of guessing.
Ask the live kernel something your sources cannot support. It tells you it is holding back rather than inventing an answer.
Your files stay on your machine in plain, open formats you can open without Logos. You can take everything, including the ledger, and walk away whenever you want. We would rather earn your staying than lock you in.
Your sources are ordinary files on disk. Copy them anywhere and they still open. A standalone way to export and re-verify the ledger with a tool that is not ours is on the list below.
We would rather say less than overstate. If a claim is not true yet, you will find it here, not in the headline.
Runs on your machine, with no server in the path.
One fixed surface of fifteen commands, the only way state changes.
Append-only, hash-chained, tamper-evident ledger you can verify.
Default-deny egress; destinations are granted on purpose and logged.
Honest abstention; the model holds back rather than guessing.
Signed ledger entries, so the record is independently provable, not only tamper-evident.
Operating-system-level enclosure, so the kernel is provably the only path off your machine.
The native desktop build, and a one-click export with a standalone verifier you can run yourself.
The clearest way to understand any of this is to use it. The homepage runs the real kernel in your browser, with nothing hidden.