Ungoverned LLM stack
Direct to the model.
Prompts hit the provider first. You pay for every call — no policy check, no context pruning, no record when something fails.
MSGF · AI gateway
MSGF is an AI gateway. It inspects and organizes context so low-quality data does not poison the next prompt.
Console seats are waitlist-only. Join the beta waitlist
Developer loop
01
Connect
Map the repo, mint an IDE token, and confirm the extension is healthy.
02
Optimize
Compile a local prompt with file attachments and required verify steps — no model call.
03
Verify
Run allowlisted tests or a local build. Pass writes to Vault; repeated fail writes to Hall.
04
Govern
Small Brain routing by default; Big Brain consensus on high drift; shadow then enforce; human-in-the-loop review; SIEM.
Ungoverned LLM stack
Prompts hit the provider first. You pay for every call — no policy check, no context pruning, no record when something fails.
AI gateway
MSGF runs policy checks, Vault and Hall, and Small Brain or Big Brain routing before tokens are billed — so security and engineering share the same audit trail.
Comparison
Policy, routing, memory, and provenance — the jobs every AI gateway is expected to do.
Shadow mode
Zero-latency pass-through to your provider. MSGF evaluates optimizations in the background and records projected savings — switch to enforcement mode when the ROI is credible.
import OpenAI from "openai";
const client = new OpenAI({
apiKey: process.env.OPENAI_API_KEY,
baseURL: "https://elphiesgatedai.elphiesyntax.com/api/v1",
defaultHeaders: {
"x-msgf-mode": "shadow",
"x-msgf-key": process.env.MSGF_LIVE_KEY!,
},
});import Anthropic from "@anthropic-ai/sdk";
const client = new Anthropic({
apiKey: process.env.ANTHROPIC_API_KEY,
// SDK appends /v1/messages — use /api (not /api/v1) as baseURL.
baseURL: "https://elphiesgatedai.elphiesyntax.com/api",
defaultHeaders: {
"x-msgf-mode": "shadow",
"x-msgf-key": process.env.MSGF_LIVE_KEY!,
},
});Start free 7-day trialToken Savings (signed in)Full getting started
These capabilities run in production Cloud Run and Pulse Guard (IDE dev-environment protection) today.
Pulse Guard is IDE dev-environment protection for keystrokes. Cursor or VS Code: connection health, local prompt compiler, allowlisted verify scripts, Safe Build, and remediation tools.
Allowlisted local commands write passing results to Vault (verified state memory) and repeated failures to Hall — then unlock the deploy gate.
Default pair is Claude + Gemini. Optional Claude + Grok or Gemini + Grok. High drift can take a three-model majority (Claude + Gemini + Grok). Humans are notified only above the drift threshold.
Metered provider usage, proven avoidance (not estimates), weekly and monthly reports with PDF, and shadow-mode projected spend kept separate from public eco metrics.
Point the SDK at /api/v1 with x-msgf-mode: shadow. Shadow mode is observe-only. Active mode applies the Active Cache, context gating, and live reputation.
Sentry crashes match approved records in Vault and mark them quarantined (no silent move to Hall). Operators restore or demote on /admin/ops — runtime monitoring linked to governance memory.
Company domains and Google Workspace SSO for corporate seats. Consumer Gmail lands on invite-only — not a silent tenant.
Platform & enterprise
Big Brain can take a Claude + Gemini + Grok majority when drift is high. Split votes no longer force human review when a majority agrees.
Skip-gateway and arbitration decisions leave HMAC-signed, hash-chained snapshots — a compliance trail of who approved what on /admin/ops.
CI checks GET /api/msgf/deploy-gate for your project. Ship only when verify is green for that isolation boundary.
Every vector is scoped by project and subpath — agencies and monorepos keep client and app memory from crossing silos.
Optional hybrid post-quantum envelopes (X25519 + ML-KEM-768) for Vault secrets and ML-DSA-65 authorship certificates. HTTPS post-quantum only when the load-balancer SSL policy is enabled — not Pulse, Redis, or Supabase.
One /admin/ops surface: audit timeline, Session Replay, security event log, most-used resources, model fitness, diff impact, tenant budgets, SIEM export, trusted-OSS bulk review, and Sentry quarantine.
Hashed resource-usage rankings, unified audit events, prompt-session forensics, and human-in-the-loop gates — policy failures and harm always open review; budgets never bypass safety.
Hard monthly spend caps and rapid-retry circuit breakers before gateway dispatch, plus async OpenTelemetry JSON webhooks to your SIEM — primary paths never wait on export.
Isolated context partitions so prompts never mix projects. Full policy-domain guide
Immutable rules and security checks before a request reaches the model.
Pipeline and execution order, including verify-before-ship.
Identity, roles, and tenant isolation.
Runtime telemetry and active session memory.
Workspace context stays sharded so prompts do not carry unused files.
Vault is verified state memory. Hall stores rejected outcomes.
Elphie Syntax product family
MSGF is the shared AI gateway. Author Ecosystem and Syntax Education are applications on that layer — explore from elphiesyntax.com.
For writers & publishers
Foundational testingManuscript workspace — document ingest into wiki and outline, authorship attestation, no-training agreement (Vault Pact), dual Librarian + Critic review, and revision cooldown on the Phase 2 path. Foundational testing on authorecosystem.
K–12 · LTI 1.3 · Utah-aware
In developmentSocratic sandbox with grade-aware AI allowance and district-approved curriculum slicing — on the shared MSGF gateway, isolated by tenant. Host and public registration still in development.
Public signup not open yet.
Map a repo, install the Pulse Guard IDE extension, and open the dashboard for live token-cost visibility.