On your phone
A small open model — like Gemma 4 — runs on the device. Completely offline. No warehouse in the middle.
One app. No data centers. Every claim it makes, signed.
Ask an AI anything and your words travel to someone else’s building, run on someone else’s model, and land in someone else’s logs — with the carbon as a side effect.
You don’t own the answer, the data, or the footprint.
CIRISAgent is what you hold and talk to — it carries the reasoning.
CEWP is the fabric it runs on: a web of devices that trust each other, all hardware you already own.
People and AI both live on it as equals — side by side.
Usually these come from three different companies. Here they fall out of one design.
It runs on the phone in your pocket and a small box at home.
Your private life literally can’t leave your circle.
Every claim it makes is signed — so you can see it and undo it.
of everyday web activity never leaves your city. We call it the locality bonus.
phones · home boxes · no giant data centers
A small open model — like Gemma 4 — runs on the device. Completely offline. No warehouse in the middle.
For phones too small to run a model, CIRIS is free over hosted inference in 29 languages. Same signed claims. Someone else’s data center.
The agent sorts everything into seven circles — from self out to the whole Global Commons.
For the closest circles, the system never sends the little message that tells the network your data is even there. No message, no way to ask for it. The privacy comes from what’s missing — not from a promise.
Big tech checks its AI once, while building it — then hopes. CIRIS keeps checking it while it runs, out in the open.
When the AI gets something wrong, you don’t just see it — you can undo it, and it loses trust.
If a person — or an AI — is ever caught misleading people, every claim they ever signed becomes moot, and every conclusion built on them can be re-opened.
The same signature that proves who said something also decides what stays home. One simple idea — and privacy, less waste, and safe AI all come from it.
It works before the AI can even think — and only a trusted, signed key can set it off.
Every choice is signed and linked to the one before. A lie can’t keep its story straight.
Checked by computer on every update — built first for the people who need it most.
And every word of it is open code you can read.
Open source, all the way through. 2.9.4 is shipping now on iPhone and Android, and 3.0 rolls out through June and July 2026.
Explore further