Clinical Quantum Exchange

• Waiting-list questions are analysed constantly — by analysts, vendors and now models.
• What survives is a number in a slide, not the engine, the shot count or the seed.
• A result you cannot re-derive is indistinguishable from one that was never run.
• So the money follows confidence, not legibility.

That is the only incentive in the system, and it points at legibility rather than at optimism.

policy check
   -> agent identity           ENS: is this the right payee, for this intent?
   -> human authority          World ID: one unique human released the budget
   -> device confirmation      Ledger: the release parameters tapped on hardware
   -> classical floor          recorded FIRST, never revised after
   -> dequantization gate      can a classical surrogate reproduce it?
   -> quantum leg              a measurement, or assessed-blocked
   -> receipt grading          PASS / GAP / STRUCTURAL / FAIL
   -> post-quantum seal        SLH-DSA signature, verified on the spot
   -> anchor on Arc            written BEFORE money moves
   -> USDC settlement          only against a PASS receipt

The Baseline Agent is paid for winning. A classical method that beats the quantum leg is exactly what the exchange commissioned.

A limit that stops a run is a finding. Publishing it small is how a project starts hiding.

A method that loses still gets paid, and the record says it lost. An unanchored receipt is not payable at all — every settlement and anchor is checkable on Arcscan.

ReceiptAnchor 0xd924f134e69f678e09bd31394f975b3cdbd2f52f

Cohorts are synthetic. No patient-level data, no diagnosis, no efficacy or outcome claim.

• Circle Research Quantum Tracker, read 10 September 2026. Circle is the source; no endorsement implied.
• Every receipt digest is signed with SLH-DSA-SHA2-128f (NIST FIPS 205) and verified before it is anchored or paid.
• Arc supports SLH-DSA today; the Arc transaction carrying the anchor is still ECDSA-signed.
• Post-quantum at the evidence layer, classical underneath — stated, not claimed away.

• Gate counts are read off the compiled circuit — no hand-typed estimate.
• A batch outside the envelope is refused with the number named, before anything uploads.
• Envelope and limits: Reviewer feedback from a Quantinuum engineer.

• Four roles, four separate agents — Orchestrate, research, analyse, synthesise — mapped one to one onto Trust, Nexus, Baseline and Registry. Each role carries its own identity and its own memory. They are not one agent wearing four hats, and a role never grades its own work.
• Memory is the protocol, not the chat log — Every scheduled run compares today's findings against what is already remembered and reports only what changed. Replaying a conversation is not recall; a searchable record of what was already established is.
• Cadence beats heroics — One small job, one digest, one difference against yesterday. A daily micro-win on a schedule produced more usable evidence than any weekend sprint, because each run left a receipt behind it.
• Credential hygiene is not optional — Tokens never travel in a group chat and rotate the moment they are exposed. Clinical text stays on the local machine rather than being handed to a hosted model.

The shared PermissionedResolver refused our writes, so we deployed our own AgentResolver and wired it through the ENSv2 registry.

AgentResolver 0xc305afd781febf64e84f83ce4eb38f4001352a4f · Sepolia 11155111

• One unique human authorises the release, bound to that one pathway — never rebound to another.
• Only the nullifier hash is kept. No image, no name, no biometric and no wallet reaches the app.
• The nullifier folds into the receipt digest, so the SLH-DSA seal and the Arc anchor cover the authorisation, not just the result.
• No human, no settlement: the run still executes and publishes at full size, and pays 0.00 USDC.

Selfie Check is an abuse-prevention and authorisation signal only — never identity, competence or clinical authority. Sandbox entitlement pending, so demo credentials are labelled simulated.

• The agents decide autonomously; the last irreversible step needs a human hand on hardware.
• The enrolled Ledger signs the exact release parameters — pathway, budget, chain, quantum leg — shown on its own screen. No tap, no settlement; the run publishes and pays nobody.
• The signature is recovered server-side against the enrolled signer address, so a re-pointed or replayed approval is refused by construction.
• The device approval is hashed into the receipt digest: the SLH-DSA seal and the Arc anchor commit to the tap as well.
• The Key Ring (LKRP) seals the Circle entity secret and Nexus token under keys derived from the seed — the agent requests a scoped, short-lived capability and never holds the key.

• Live today: Circle developer-controlled wallets settle USDC and write ReceiptAnchor on Arc Testnet, every hash verifiable on Arcscan.
• The MSK pathway ran live on the Quantinuum Nexus H2-Emulator with its own job id; the receipt rules did not change.
• Deployment boundary: attestation and capacity planning. Not a clinical system, not a triage tool.
• Receipts are SLH-DSA sealed; the Arc anchor transaction is still ECDSA-signed, and that leg stays an open hazard.