Quorum-QaaS (4-region PBFT): selling tools

Evidence for Quorum-QaaS (4-region PBFT): 1. Evidence pack · 2. Answers to buyer questions · 3. Figures & benchmarks · 4. Selling tools · IHVRK kit · Learn it

The evidence is your best sales tool: a buyer can check it without trusting you. Press Copy on any box, fill in the [brackets] and send it, one person at a time.

What to send, and when

When	Send this
First message	A short personal note with the kit page
They reply, "show me"	The live demo on a call, using the script below
"Send it to our engineer"	The kit and the evidence pack
Security review or questionnaire	The answers page. Never upgrade a NO to a YES.
Finance or procurement wants records	The figures page and figures.tsv
Ready to go ahead	The hand-off below. The founder does the contract, price and setup.

Who to approach

Head of Security / Compliance lead: Can I prove our records were not tampered with?
CTO of an AI agent platform: Customers do not believe our logs.
Legal / General counsel: Evidence for disputes.

Questions to ask them

Where do your AI agent logs live today, and who can edit them?
Has anyone ever questioned whether a log or record was complete?
Who outside your company would need to trust your records?
How often do you produce records you might need to defend later?
Would you be comfortable sending a fingerprint (not the content) to an outside service?
Do you need certified legal timestamps, or tamper evidence?

30-second pitch

Quorum-QaaS (4-region PBFT): Quorum-QaaS gets a record confirmed by four servers in four regions, so nobody, including us, can quietly change it later.

We recorded 9 live checks, including 8 attack cases it had to refuse or flag, and every one matched. You can re-run them yourself without an account.

Don't trust us. Check it: https://cainstudio.online/ihvrk-quorum-qaas.html

First email

Subject: making your AI logs believable to people who don't trust you

Hi [first name],

When there is a dispute about what an AI agent did, logs on your own server convince
nobody, because you could have edited them. We seal a fingerprint of your records with four servers in four
regions (3 of 4 must agree), and anyone can check the receipt offline.

Here is a real receipt you can verify yourself: https://cainstudio.online/top25-quorum-qaas-demo.html

Open to a 15-minute call?

The evidence: We recorded 9 live checks, including 8 attack cases it had to refuse or flag, and every one matched. You can re-run them yourself without an account.
Check it yourself: https://cainstudio.online/ihvrk-quorum-qaas.html

[your name], working with FIRME AI CORPORATION
[your postal address]
If you'd rather not hear from me again, just say so and I won't write again.

LinkedIn connection note (under 300 characters)

Hi [name], we help AI teams make their logs believable in a dispute: four servers in four regions seal a fingerprint, and anyone can re-check it offline. Happy to share a real receipt.

One follow-up, three days later (then stop)

Hi [first name], following up with one concrete thing: a real receipt and a checker your engineer can run
offline in two minutes. If it fails to verify, we have a problem; if it passes, we should talk.

Live demo call script

1. Show the normal case
   Do: Open https://cainstudio.online/top25-quorum-qaas-lab.html and run: Published receipt verifies
   Say: Signed by a quorum of the pinned cluster.

2. Now the attack
   Do: Run: Digest changed
   Say: The quorum signed this digest, not yours.

3. Now the attack
   Do: Run: Cluster renamed (unsigned top-level field)
   Say: cluster_id must equal the signed membership's; the 2026-11-03 lab found the verifier echoing it. Fixed and deployed 2026-11-03.

4. Let them check you
   Do: Send the kit link and ask them to run python3 verify.py --live on their own computer.
   Say: They don't have to take your word for any of this. That's the point.

5. Say the limit yourself
   Do: Tell them what the kit does not show.
   Say: Say it before they ask. It costs nothing and it earns trust.

When they push back

Isn't this just a blockchain?

No tokens, no fees and no public chain. Four known servers run a classic consensus protocol and sign their votes.

You run all four servers, so why trust you?

A fair point, and we say so on the limits page: Byzantine tolerance protects against a faulty server, not against the operator of all four. Independent operators are the next step.

How fast is it?

About 2.6 seconds per fingerprint. Right for evidence, wrong for a real-time request path.

What does it cost?

There is no published price yet. Today we include it in an evidence pack; the founder can quote volume use.

Do you see our data?

No. You send only a fingerprint. The content never leaves you.

Why should I believe your numbers?

You shouldn't have to. Run the kit on your own computer: https://cainstudio.online/ihvrk-quorum-qaas.html. It re-sends every request and compares the answers, using no code of ours.

What doesn't it do?

Written down here: https://cainstudio.online/top25-quorum-qaas-limits.html

Are you SOC 2 or ISO certified?

No, we hold no certification. What we offer instead is evidence you can check yourself.

Has anyone independent tested it?

No third-party audit has been completed. The attack cases in the kit are our own. I'd rather tell you that now.

Who else uses it?

We are an early company. I can show you the product working and the evidence, not a customer list.

It found nothing. So we're safe?

No. It means none of its checks fired. It doesn't prove something is safe.

How much is it?

Quorum-QaaS has no stand-alone price yet. Use it to make the evidence offers believable, and pass volume requests to the founder.

One-page summary (paste into a document or email)

Quorum-QaaS (4-region PBFT)
by FIRME AI CORPORATION, a California corporation

What it does
Quorum-QaaS gets a record confirmed by four servers in four regions, so nobody, including us, can quietly change it later.

The evidence
We recorded 9 live checks, including 8 attack cases it had to refuse or flag, and every one matched. You can re-run them yourself without an account.
Recorded 2026-11-03. 9 live checks. Median round trip 110 ms including network; this is not a load test or an SLA.

Check it yourself
https://cainstudio.online/ihvrk-quorum-qaas.html
Zip SHA-256: e11da0dfe80b7c9bbc9ac81193d92ce652e3487ccaeda64d97127b969738ae71
Signing key fingerprint: 1cacdfc1fc2024b6bb4f8fb02c7c80f4a57f44c5adb11c507190781b5d613de3
Run: python3 verify.py --live  (Python 3, no account, no code of ours)

What it does not do
Written down here: https://cainstudio.online/top25-quorum-qaas-limits.html

What this is not
Not a third-party audit, a certification or a guarantee. No SOC 2 or ISO certification is held.

Contact
[your name], working with FIRME AI CORPORATION, [your email]

After the call: the proposal email

Hi [first name],

Thanks for your time. As discussed, here is what I suggest for Quorum-QaaS (4-region PBFT).

What you told me: [their problem, in their words]

What we'd do: Quorum-QaaS has no stand-alone price yet. Use it to make the evidence offers believable, and pass volume requests to the founder.

Evidence you can check before deciding: https://cainstudio.online/ihvrk-quorum-qaas.html
Answers for your security review: https://cainstudio.online/evidence-quorum-qaas-answers.html
Figures for your files: https://cainstudio.online/evidence-quorum-qaas-figures.html
Limits: Written down here: https://cainstudio.online/top25-quorum-qaas-limits.html

Next step: [date], [who]. The founder, Vincent Noriega, handles contract and setup.

[your name], working with FIRME AI CORPORATION
[your postal address]
If you'd rather not hear from me again, just say so and I won't write again.

Hand-off to the founder

To: vincent@firmeai.com
Subject: Lead: Quorum-QaaS (4-region PBFT) - [company]

Company: [company]
Person: [name], [job title], [email]
What they said: [paste their reply]
Evidence already sent: https://cainstudio.online/ihvrk-quorum-qaas.html
Price mentioned: [what you quoted, or none]
Next date: [date]

The rules

Send each message yourself, one person at a time. No bulk lists and no automated sending.
Commercial email needs your real name, a real postal address and a way to opt out, and you stop when someone asks (US CAN-SPAM; many countries are stricter, so check yours).
Never change a number, invent a customer, or say certified, audited or guaranteed.
Only test a system the client owns or operates, after they confirm it in writing.
Your share is agreed in writing with FIRME AI CORPORATION before your first message (email vincent@firmeai.com). Nothing here promises income. Most messages get no reply; that is normal.