Deep Tech Research Lab · Est. 2024 · Utah, USA

Post-quantum security.
Exact quantum verification.

Arcel builds post-quantum security infrastructure that meets FIPS 203/204 and CNSA 2.0 mandates today — and operates the world's only independent quantum hardware verifier above 40 qubits. No approximations. No roadmap promises. Deployed and verifiable.

200q
Max circuit size, exact — no approximation
3.88×
IBM Eagle off from theoretical optimum
FIPS
203 / 204 / 197 compliant — available today
CNSA
2.0 / NSM-10 ready — Seam & Seamless

Independent Findings We tested IBM Eagle and Google Willow

Classical simulators break down at ~40 qubits. Above that, there has been no independent verification of quantum hardware — until now. qRoute computes exact observables up to 200 qubits with error_bound=None. Here's what we found.

Hardware Verification Results · Surface Code · p_phys = 0.30% Exact theory computed by qRoute · 2024
IBM Eagle · d=3 · 17 physical qubits
Claimed logical error rate 0.2500%
Exact theory (qRoute) 0.0644%
3.88×
worse than theoretical optimum
Gap is unexplained by IBM's published noise model
Google Willow · d=7 · 97 physical qubits
Claimed logical error rate 0.0051%
Exact theory (qRoute) 0.0054%
<5%
from theoretical optimum
Google Willow independently confirmed accurate

Both verifications computed by qRoute — no truncation, no approximation, no classical simulator approximation artifacts. IBM Eagle's 3.88× discrepancy points to correlated errors, leakage, or measurement crosstalk not captured in their published noise model. Nobody else has had this view above d=3.


Product Quantum Hardware Verification

The standard validation method — comparing hardware output against a classical simulator — fails above ~40 qubits. Arcel is the only organization that can independently verify quantum hardware at real operating scales. We compute the exact ideal result, then measure precisely how far your hardware is from it.

200q
Maximum circuit size computed exactly — no approximation, no truncation
0
Other independent verifiers at this scale exist anywhere in the world
100%
Reproducible, documented methodology — suitable for publication and due diligence
01
Submit your circuit
Send the circuit specification and the observables you're measuring. We support standard quantum circuit formats (QASM, Cirq, Qiskit). No proprietary lock-in.
02
qRoute computes the exact ideal
We compute the exact ideal result using proprietary methods. No Monte Carlo sampling, no matrix product state truncation. error_bound=None on every output.
03
You receive the exact gap
A full report: ideal result, your hardware's output, and the exact discrepancy broken down by observable and error type. Correlated errors, leakage, and crosstalk are all surfaced.
04
Independent, publication-ready
All methodology is documented and fully reproducible. Results are suitable for publication, investor due diligence, regulatory compliance, or competitive benchmarking.
Pricing Verification packages
Benchmark
$14,500
Single circuit, full discrepancy report. Right for academic groups and enterprise teams running a first independent validation.
  • 1 circuit, up to 100 qubits
  • Exact ideal result computation
  • Full observable-level gap analysis
  • Written methodology documentation
  • Results in 5 business days
Get Started →
Enterprise
Custom
Ongoing verification program for quantum hardware companies, cloud providers, and enterprises with continuous hardware access or regulatory requirements.
  • Unlimited circuits, full 200q range
  • Continuous verification cadence
  • Dedicated researcher point of contact
  • White-label or co-branded reporting
  • API access for automated benchmarking
  • NDA and co-authorship available
Contact Us →

All packages include full methodology documentation. Results are reproducible independently. Questions? contact@arcel.org


Research Three active research directions
🔬
Exact Quantum Simulation

qRoute computes exact quantum observables up to 200 qubits — no truncation, no approximation. 18 published experiments spanning quantum foundations, error correction, drug discovery, and cryptography. The only tool of its kind above 40 qubits.

🧠
Kernel-Level AI

Neural Kernel embeds trained INT8 MLP models directly inside Linux kernel subsystems using eBPF — replacing handcrafted heuristics in the process scheduler, TCP congestion controller, and memory prefetcher with learned models that hot-swap at runtime.

🔐
Post-Quantum Cryptography

Production-grade cryptographic primitives engineered to survive quantum adversaries. ML-KEM-768 + X25519 hybrid KEM, Noise protocol handshakes, ChaCha20-Poly1305 AEAD. Deployed in Seam — a secure UDP transport library available today.

Open Source arcel — AI agent runtime

11 composable tools for building autonomous AI agents that run safely, remember everything, and cost less to operate.

🏗️
Stable
arcel

Core runtime — Docker sandbox + persistent memory. Every command runs in isolation; structured state survives /compact and session restarts.

Docker MCP Memory
🔭
Stable
Lens

Observability — traces every tool call, token cost, and latency via PostToolUse hook. Query call counts and latency across sessions.

SQLite Hooks Tracing
🗂️
Stable
Index

Semantic memory — keyword search across all past agent runs. FTS5 BM25 ranking, tag filtering, persistent SQLite store.

FTS5 BM25 SQLite
⚒️
Stable
Forge

Eval framework — YAML test cases run against any model. Catch regressions before they reach production agents.

YAML Evals CI
🔐
Stable
Vault

Encrypted secrets — Fernet + PBKDF2 credential store. Inject API keys at runtime without exposing them in prompts or logs.

Fernet PBKDF2 Secrets
Stable
Grid

Parallelism — N tasks at 30s each still takes 30s total. Fan out work across threads with full result aggregation.

Threads Parallel Async
💰
Stable
Budget

Cost enforcement — hard token and dollar limits. Prevent runaway agent spend before it hits your billing dashboard.

Tokens Cost limits Guards
🚧
Stable
Gate

Policy enforcement — block dangerous tool calls before they execute via PreToolUse hook. Glob + regex rules, configurable YAML policy.

PreToolUse Policy YAML
🌐
Stable
Scout

Web memory — fetch any URL, extract clean text, search cached content by keyword. Agents browse without burning context on HTML noise.

HTTP FTS5 Cache
📊
Stable
Sift

Data queries — load CSV/JSON into SQLite, query with SQL. No need to read entire files into context; get exactly the rows you need.

SQLite CSV SQL
🔗
Stable
Chain

Workflows — YAML pipelines connecting all arcel tools. Steps reference each other with {{ step.output }} template syntax.

YAML Pipelines Orchestration
Install the full suite: curl -fsSL https://install.arcel.org/arcel.sh | sh && python3 -m arcel --suite — requires Docker
Open Source · AGPL-3.0 Post-Quantum Security Infrastructure

Built for adversarial environments. Every connection is post-quantum encrypted from byte one — resistant to harvest-now-decrypt-later attacks and compliant with CNSA 2.0 / NIST SP 800-52 Rev 2.

Stable
Seam

Post-quantum UDP transport with capabilities beyond any current military standard. The only network transport with fully quantum-resistant identity, per-epoch forward secrecy, and built-in traffic analysis resistance.

  • Hybrid PQ handshake — ML-KEM-768 + X25519, Noise_XX protocol
  • PQ identity — ML-DSA-65 (FIPS 204) signatures; identity is quantum-resistant
  • Double ratchet — per-epoch forward secrecy; past sessions safe after key compromise
  • Traffic analysis resistance — fixed-size packet padding, cover traffic, timing jitter, protocol obfuscation
  • Multi-path anti-jamming — simultaneous paths; adversary must jam ALL paths to disrupt
  • Reed-Solomon FEC — configurable k/r, tuned for satellite and HF radio links
  • FIPS mode — AES-256-GCM + SHA-256, startup banner citing FIPS 197/203/204/180-4
  • TOFU host pinning — ML-DSA-65 fingerprints in known_hosts; MITM impossible
  • seam shell — full PTY remote shell over PQ channel; SSH replacement
  • seam forward / proxy — port forwarding, --via multi-hop, SOCKS5 proxy
  • seam cp / sync — BLAKE3/SHA-256 integrity, resumable, content-addressed
  • Client audit log — O_APPEND JSONL per command; NIST SP 800-53 AU-2/AU-12
Rust ML-KEM-768 ML-DSA-65 FIPS 203/204 Noise_XX CNSA 2.0 AGPL-3.0
curl -fsSL https://install.arcel.org/seam.sh | sh
🛡️
Stable
Seamless

Production-grade reverse tunnel relay built for government and enterprise. Self-hosted alternative to ngrok/Cloudflare Tunnel with TLS 1.3 enforcement, structured audit logging, and full compliance instrumentation.

  • TLS 1.3 only — CNSA 2.0 / NIST SP 800-52 Rev 2 compliant; TLS 1.2 rejected
  • Let's Encrypt ACME — DNS-01 via Cloudflare, HTTP-01 fallback, auto-renewal
  • Custom domains — SNI-based routing for HTTP and HTTPS; bring your own domain
  • Load balancing — weighted round-robin across backends, TCP health checks
  • Per-tunnel DDoS protection — token bucket, 429 + Retry-After, admin UI threat badges
  • mTLS for admin port — mutual TLS with client CA verification; FIPS 204 ready
  • Structured audit log — 11+ event types, append-only JSONL, midnight rotation, SIEM webhook
  • Prometheus /metrics — 10+ counters + request latency histogram
  • Admin IP allowlist — pure IPv4 CIDR bitmask; no admin UI exposure without restriction
  • SIGUSR1 cert rotation — hot-swap TLS cert without dropping connections
  • IP CIDR deny list — block hostile ASNs/Tor exits, SIGHUP hot-reload
  • Tunnel expiry + keepalive — auto-evict stale tunnels, detect dead clients
Rust TLS 1.3 ACME mTLS Prometheus CNSA 2.0 AGPL-3.0
Open Source Other tools

Enterprise Commercial products & services

Arcel IP is commercialized through Vaua — our software development and government contracting entity. Enterprise products ship with SLAs, dedicated support, white-label options, and compliance documentation suitable for procurement.

Contact contact@arcel.org for pricing, NDAs, and procurement. All products are production-deployed — no beta caveats.

☁️
Available
SeamCloud

Managed post-quantum relay infrastructure. Run Seam tunnels without operating your own relay nodes — fully managed, globally distributed, monitored 24/7. API key auth, usage dashboard, per-tunnel analytics, and instant provisioning.

  • Managed relay nodes — provisioned in seconds, no ops overhead
  • API key management — scoped keys, rotation, audit trail
  • Usage dashboard — per-tunnel bandwidth, connection counts, health
  • All Seam guarantees — ML-KEM-768, ML-DSA-65, FIPS mode, TAR, double ratchet
  • SLA + support — 99.9% uptime guarantee, dedicated channel
  • GovCloud option — FedRAMP-aligned deployment available on request
Managed PQ-encrypted API Dashboard SLA
Request Access →
📷
Enterprise
Signet Enterprise

Production-grade cryptographic photo provenance for media organizations, law enforcement, intelligence agencies, and legal evidence workflows. Embeds unforgeable drand beacon proofs at capture — chain-of-custody for every image from shutter to courtroom.

  • On-device signing — beacon proof embedded at capture, not in post
  • Tamper-evident — any pixel modification invalidates the proof
  • Temporal anchoring — cryptographically proves photo existed at a specific time
  • SIEM integration — provenance events streamed to your security stack
  • White-label SDK — embed under your brand, your app, your workflow
  • Legal-grade reports — chain-of-custody documentation for litigation and compliance
Rust SDK drand White-label SIEM Chain-of-custody
Contact for Pricing →
🏗️
Vaua
Custom Contracts

Vaua — our contracting entity — builds bespoke software for government agencies and enterprise clients. Full-cycle delivery from proposal through ATO. Cleared personnel available. No templates, no shortcuts.

  • Federal procurement — SBIR, OTA, IDIQ, GSA schedule paths
  • Compliance-first — FedRAMP, FISMA, CMMC, ATO experience
  • Post-quantum integration — embed Arcel IP directly into your stack
  • Cleared capability — personnel available for classified environments
  • Full-stack delivery — infra, backend, frontend, DevSecOps, documentation
Federal SBIR FedRAMP CMMC Full-stack
Start a Conversation →

Government & Defense Built for Government & Defense

Post-quantum security infrastructure that meets NIST, FIPS, and CNSA 2.0 mandates — available today.

Seam and Seamless are production-ready and ship with the compliance controls DoD, civilian agencies, and defense contractors need. No roadmap promises — the capabilities below are implemented and verifiable in the open-source codebase.

NSM-10 / NIST Compliance
FIPS 203 / 204 / 197 algorithm suite

ML-KEM-768 (FIPS 203), ML-DSA-65 (FIPS 204), and AES-256-GCM (FIPS 197) are the default cryptographic primitives — not optional modules bolted on after the fact.

FIPS Mode
--fips-mode enforces approved algorithms only

A single flag restricts the runtime to FIPS-approved primitives exclusively. Non-compliant negotiation paths are rejected at startup. Startup banner cites FIPS 197/203/204/180-4.

Audit Logging — SP 800-53 AU-2 / AU-12
Append-only JSONL audit trail

Every command generates an O_APPEND JSONL audit record. Midnight log rotation, SIEM webhook forwarding, and 11+ structured event types. Designed to satisfy NIST SP 800-53 AU-2 and AU-12 controls.

CAC / PIV Integration
mTLS admin port with client CA verification

The admin interface enforces mutual TLS with configurable client certificate authority verification — ready for CAC/PIV smart card authentication workflows used across DoD environments.

Passive Surveillance Resistance
Traffic analysis resistance by design

Fixed-size packet padding, cover traffic generation, timing jitter, and protocol obfuscation are built into the transport layer. Passive observers cannot distinguish session activity from noise.

Contested RF Environments
Multi-path anti-jamming

Sessions run simultaneously across multiple network paths. An adversary must jam every path concurrently to disrupt communications. Reed-Solomon FEC is configurable for satellite and HF radio links.

Key Compromise Resilience
Forward secrecy via double ratchet

Per-epoch key derivation via double ratchet ensures that compromise of a current session key exposes no past traffic. Session history is not recoverable even with full key material from a later session.

MITM Prevention
TOFU host pinning with ML-DSA-65 fingerprints

First-use fingerprints are stored in a known_hosts file backed by quantum-resistant ML-DSA-65 signatures. Subsequent connections reject any host presenting a different identity — man-in-the-middle is cryptographically impossible.

Disconnected Operations
Air-gap traversal via relay chain

seam forward --via enables multi-hop relay across network segments. Operators can establish connectivity through isolated enclaves without direct routing — all hops remain end-to-end post-quantum encrypted.

Standards reference FIPS 203 (ML-KEM-768)  ·  FIPS 204 (ML-DSA-65)  ·  FIPS 197 (AES-256-GCM)  ·  FIPS 180-4 (SHA-256/384)  ·  NIST SP 800-52 Rev 2 (TLS 1.3)  ·  NIST SP 800-53 AU-2/AU-12 (Audit)  ·  CNSA 2.0  ·  NSM-10

Work With Us

Government procurement, partnerships, and SBIR inquiries welcome. Reach out directly — no sales funnel, no form.

contact@arcel.org  →

Ready to verify your hardware?

Whether you're building quantum hardware, running enterprise quantum programs, or conducting investor due diligence — this is the only independent verification that works at real scale.