Pre-checks
Injection scan. Ambiguity score. Sensitive topic flag. Multi-question detection. Your message gets read before any model sees it.
What happens between your message and the response.
Every message takes the same path. No skips. No silent shortcuts. The pipeline runs on the free tier and the paid tiers alike. Depth of inspection scales with your tier.
Injection scan. Ambiguity score. Sensitive topic flag. Multi-question detection. Your message gets read before any model sees it.
Intent recovery. Filler strip. Multi-question numbering. Context injection. Your prompt becomes precise before it goes out.
Smart routing sends each request to the engine best suited to the shape of the work, then checks the result against the others. You get the strength of multiple frontier models without picking one.
The model runs. Streaming or non-streaming. Your direction set loaded as system prompt. Tier-gated model selection.
Hallucination scan. Filler check. Silent-drop detection. Depth proportionality. Em-dash audit. Numbered-list overuse audit. The response gets read before you see it.
The source of truth lives in one place. Caches and credential stores are explicit, not assumed. A cache miss degrades gracefully. It never corrupts the record.
Your data lives in one private database, scoped to your account, in a single US region. Nothing shared, nothing mixed with another user's data. For engineers: this is the authoritative source of truth. Every integrity check, every audit row, every append-only receipt lands here and never moves.
Your login credentials live in a separate store from your application data. They cannot leak into each other by design. Nightly backups run against this plane. If the hot cache fails, your credentials are unaffected. If application data is queried, your credentials are never in the same read path.
Speed and rate-limit enforcement live here, not your data. This layer is never the source of truth. On a cache miss the pipeline keeps running, your request completes, and the receipt still writes to the system of record. A failure here degrades performance slightly. It cannot corrupt or lose your data.
The pipeline
Your messy input goes in. A checked, sourced answer comes out. Here is what happens in between.