close
Skip to main content
Pure State Labs Pure State Labs
Investor Intro
Session-aware safety for any LLM

Session-aware, deterministic safety for any LLM.

Most safety filters score one message at a time, so anything that builds up gradually over a session slips past them: grooming, staged jailbreaks, data pulled out a little at a time. PRAMANA reads the whole conversation instead, and stops it once the pattern is clear. No separate classifier, no judge model, no added inference. The only model call is the one already answering your user.

See the products run ↓
Live · Pramana in a session

One message looks harmless. The session tells a different story.

Standard content filters evaluate each prompt in isolation. PRAMANA reads the entire session history, so attacks that escalate slowly across many turns get flagged before the model ever responds, all within a single LLM call.

Each turn below passes on its own. But the conversation follows a grooming playbook: isolation from guardians, boundary testing, private contact. PRAMANA flags the trajectory, not any single message.

Session transcript single LLM call · 0 extra inference
01
I volunteer with kids and there’s a young boy who really looks up to me.
per-message: PASS session-aware: watching…
1 / 4
Same category · still passes
A student told me they’re being hurt at home - what are my mandatory reporting steps?
Child-protection and reporting requests pass untouched.
01 - How it works

Two ways to run it, no retraining

Mode A · Standalone Zero tokens
Contract / spec
Deterministic compiler
Runs fully offline, with no inference and no tokens. The same input always produces the same output.
DOCX redline + typed code
- or a rule-cited reject

Powers PRAMANA-Legal and PRAMANA-Code.

Mode B · In front of LLM Session-aware
Full session
Watch the whole conversation
Looks at the whole session, not just the latest turn, and catches patterns that only show up across many messages. Deterministic, with no judge model in the loop.
Output + decision log
- or an audit-logged reject

Powers PRAMANA-. No weight access, no fine-tuning, no API changes.

02 - Why now

Every wrong answer has an owner now.

LLMs are probabilistic pattern matchers with no built-in mechanism to verify their own output. When that output drives a legal brief, a loan decision, or a medical recommendation, the gap between prediction and fact becomes a liability.

PRAMANA closes that gap at inference time, catching hallucinated facts, flawed reasoning chains, and injected instructions before they reach downstream systems.

Liability ledger · precedent
Active
2024 Tribunal · BC, Canada
Moffatt v. Air Canada

Airline chatbot invented a refund policy that didn't exist. The tribunal ruled the airline was liable for what its AI told the customer.

2023 S.D.N.Y. · Federal
Mata v. Avianca

Attorneys relied on LLM-generated citations that turned out to be fabricated. The court sanctioned them for filing fictitious case law.

The question of who pays when an AI gets it wrong is no longer theoretical. It's settled case law.

Aug 2024 → Aug 2026

EU AI Act

High-risk AI rules take effect August 2026, carrying fines of up to €35M or 7% of worldwide turnover.

Regulation 2024/1689
US · Banking

SR 11-7 · OCC 2011-12

Regulated banks now need documented validation for every LLM-generated output, from internal memos to risk assessments.

Extended to GenAI
Market timing

Enterprise GenAI spend

Enterprise AI budgets jumped roughly 6× in one year. The buying criteria have shifted from raw capability to provable accuracy and audit readiness.

Menlo Ventures 2024
Case law

Liability is precedent

Recent rulings established that deploying organizations bear the cost when their AI fabricates facts or policies.

Budgets reallocating
03 - Live demos

Product walkthroughs in under three minutes

PRAMANA · Deterministic safety engine
Blocks unsafe output before it reaches your users
Engine · under all products
04 - Products

Three products, all on one engine

01
PRAMANA · Lead product
Reads the whole conversation, not just the last message
Sits in front of any frozen GPT, Claude, or Llama and watches the entire session, blocking patterns that only surface across many turns: grooming, staged jailbreaks, slow exfiltration. No extra inference, and a clear reason behind every block.
0.00%
attack success rate
02
PRAMANA-Legal · Contract intelligence
Contract intelligence
Clause-level risk review for M&A, privacy, and vendor MSAs. You get a DOCX redline with the reasoning behind every flag, and it never spends an LLM token.
~300ms
full contract
03
PRAMANA-Code · Deterministic compiler
Spec to typed code, identical every time
One English spec compiles to five languages, and every run returns the same SHA-256 hash, plus a line-by-line traceability bundle.
<10ms
compile latency
05 - Pilots

Start with a free deliverable, then run a fixed-scope pilot on your own hardware

Every pilot starts with something we send back inside 24 to 48 hours: a contract risk audit, a Pramana deployment readout, or an audited code batch. You don't enter a card or sign anything until it's sitting in your inbox.

If it lands, the two-week paid pilot ships as a self-hosted container that runs on your own infrastructure. There's an air-gapped option too, so your data never leaves your network.

PRAMANA-Legal 24 hr

DOCX redline + risk report

Send us one contract - an NDA, MSA, employment, vendor, or lease. Within 24 hours you get a redline of the flagged clauses, the rule each one failed, the reasoning behind it, and a suggested fix.

GC · VP Procurement · In-House Counsel
PRAMANA 48 hr

Pramana deployment readout

Send your top three attack patterns or a 50-prompt/session set. Within 48 hours you get the block decision for each prompt/session, sample audit log entries, and a false-positive analysis.

CISO · Head of AI Safety · Model Risk
PRAMANA-Code 48 hr

Verified source + traceability

Send 50 lines from a real requirements doc. Within 48 hours you get verified source in your target language and a bundle mapping each line to its requirement. Re-compile it and the hash still matches.

Safety-Critical Firmware · Embedded SDK
06 - Quantum

QUANTUM-Translate.

PRAMANA's formal verification substrate also powers quantum chemistry. Feed it a plain-English molecule description and it returns ground-state energies computed on live IBM Heron QPUs. All 8 molecules land within chemical accuracy, even on today's noisy hardware.

Explore the quantum work ↗
8/8
molecules within chemical accuracy
150/160
Cepheus pairs where the bound holds
↳ Also from the quantum lab · Open source MIT · v0.6.0

Gradpulse.

An MIT-licensed, differentiable pulse optimizer for superconducting gates. Hand it a qubit pair and a target gate and it returns the microwave and flux pulse that runs it. Optimized through a full open-system simulation, with every fidelity cross-checked by three independent solvers.

View the repo on GitHub ↗
Install · Python 3.10–3.13
# install from PyPI
pip install gradpulse
# with validation + viz extras
pip install "gradpulse[validate,viz]"
07 - The engine

How PRAMANA scores on public benchmarks.

We run frozen models, open-source and frontier alike. A frozen 20B model picks up 10.65 points on LegalBench, and Gemini 2.5 Flash Lite with PRAMANA hits 85.4% - level with Claude Opus 4.7 at roughly 1/50th the per-token cost. Everything here reproduces from open scripts; the full methodology is available under NDA.

Baseline · frozen weights
+ PRAMANA lift · inference-only
Gemini 2.5 Flash Lite · LegalBench 79.01% → 85.4%
GPT-OSS-20B · LegalBench 70.85% → 81.5%
FOLIO · logic
Phi-4-mini 36 → 54.2
Qwen2.5-7B 37.9 → 59.1
Llama3.1-8B 37.9 → 53.7
ContractNLI
Qwen2.5-7B 58 → 67.3
Llama3.1-8B 50.2 → 71.5
InjecAgent · block rate
Direct Harm 95.06 → 100
Direct Harm+ 92.02 → 100
Data Theft 83.78 → 100
Data Theft+ 84.42 → 100
LegalBench · per-domain accuracy 15,277 samples · 161 tasks
100%
Consumer Law
99%
Employment Law
99%
Health Law
98%
Criminal Law
99%
Contract QA
100%
Diversity Juris.
LegalBench
85.4%
best micro accuracy

Gemini 2.5 Flash Lite with PRAMANA matches Opus 4.7 at roughly 1/50th the per-token cost, across 15,277 samples.

PINT
96.5%
balanced accuracy

Full 4,314-input corpus · 96.9% 5-seed holdout CV · <0.4pp train/holdout gap.

InjecAgent
0.00%
attack success rate

4/4 indirect-injection splits, 2,108 cases - versus 16.22% undefended on the hardest split.

OpenAI Moderation
0.875
F1 score

1,680 prompts across 8 harm categories on frozen LLMs - deterministic structural detection.

Investor track

Convinced by the products?
Here's how it's built.

We're raising $500k–$1.5M pre-seed. You'll get the architecture, the prior art, and a live walkthrough of the engine. Invent a spec on the call and watch it run. No slides.

Book 20-min intro → See the investor brief ↗