Publications.
Research, engineering, and work in progress.
Research notes and project updates from across OVRLab.
Follow via RSSToward a network for AI agents
PqP’s next research direction is task exchange between independently operated agents, using queued contact and direct connections across interruptions.
Read the publicationAll publications
23 publications
Toward a network for AI agents
PqP’s next research direction is task exchange between independently operated agents, using queued contact and direct connections across interruptions.
PqP NetworkBinding PqP messages to their sender
The identity implementation now connects authenticated principals, queue ownership, and message-signing identity across the control plane and clients.
PqP NetworkDocument answers with page-level evidence
Sanad’s new document-answering pipeline combines PDF extraction, source verification, and an explicit review state when the evidence does not agree.
SanadA PDF extraction API for Sanad
The OCR beta accepts PDF uploads and returns extracted text, with page selection, language hints, and explicit processing limits.
SanadProject memory for Sanad 0.1
Approved project context can now be retrieved for a Sanad 0.1 request, with permission checked again before it reaches the model.
SanadSanad opens self-serve access
Individual accounts and business workspaces can now activate without an approval queue, with a persistent balance for model usage.
SanadSanad in your terminal and VS Code
Two coding clients bring Sanad into the repository, with account-based login, model selection, and approval before file changes or terminal commands.
SanadIntroducing Sanad 0.1
A research preview investigating whether open-weight models can improve software work by exchanging direction while they are still reasoning.
SanadA coding API for Sanad
Sanad can now accept model requests through a dedicated API, translate message formats, and stream responses back to coding clients.
SanadChoose the license, keep the policy with it
Employees can now select an enabled managed license, with capacity, session controls, and access policy tied to that selection.
UltraNowAn audit log for organization access
Company administrators can now inspect recorded access and policy events, with actor and category filters and sanitized event metadata.
UltraNowEnforcing a shared access limit
UltraNow now checks organization capacity before activation and rechecks after reserving a session to handle competing requests.
UltraNowVerify credential-key ownership before forwarding
A new request check verifies the key material in a credential reference before the proxy uses the stored secret, alongside the existing IP controls.
SecretProxyThe UltraNow activation beta
UltraNow now connects sign-in, a managed AI Ultra identity, and persistent session controls in one beta workflow.
UltraNowVersioned credentials and deliberate rotation
Secret versions and binding promotion make credential changes explicit, with checks that preserve tenant ownership and secret lineage.
SecretProxyEncrypted secret storage for SecretProxy
The secrets API now encrypts new credential values with AES-256-GCM, while the proxy recovers them only when preparing the outbound request.
SecretProxyCredentials at the point of egress
SecretProxy now resolves application placeholders into target-bound credentials, with a management interface connected to the request path.
SecretProxySigned ancestry for shared vault changes
PqP’s public-vault synchronization now records merge ancestry in signed metadata and prepares that metadata before replacing local content.
PqP NetworkStart, extend, and stop temporary access
Our internal UltraNow access tool now has a dashboard that makes the active session and its controls visible to the person using it.
UltraNowDirect WebRTC connections in the desktop client
PqP’s Electron client can now establish a WebRTC path through the shared package, extending the transport work already integrated in the browser extension.
PqP NetworkPqP gets a shared networking core
The networking implementation is now a TypeScript package, with common cryptography and messaging behind Chrome and Electron adapters.
PqP NetworkA queue for each PqP participant
The first PqP Worker can find or create a participant’s queue, establishing the provisioning step for queue-assisted peer communication.
PqP NetworkSecretProxy’s first forwarding prototype
A small Worker experiment forwards requests to an explicit set of destinations and pairs that request path with key-value storage.
SecretProxy