Kenosian Q-Fabric Authenticated Node Transfer

Kenosian Q-Fabric is an independently installable proprietary Linux node-transfer product. It uses TLS 1.3 mutual authentication, explicit client certificate authorization, server hostname verification and certificate pinning. Task UUID, attempt UUID, generation, policy digest, byte length and SHA-256 bind each transfer. Different attempts for the same authenticated task are rejected rather than silently retried as new work.

A receiver durably records a bounded payload in SQLite before reporting RECEIVED. The included consumer writes and fsyncs a matching local artifact before reporting CONSUMED. CONSUMED does not mean that a separate application, a QPU or a remote service executed the content. Cancellation is effective before consumption and cannot undo an already consumed artifact. A missing reply remains UNKNOWN in the durable sender outbox. Reconciliation queries the exact bound identity; optional resend uses the same retained bytes and identity only when the receiver reports ABSENT.

The included local demo generates temporary test-only credentials on the buyer instance and performs real loopback TLS transfer, local consumption and duplicate reconciliation without any seller account, external key retrieval, hosted service or additional software purchase. Production configuration uses the buyer's own CA, per-node certificates and restricted network access. No receiver is exposed by default. Core functionality is not gated on buying integration services.

The baseline has a maximum 8 MiB payload, a default 4096-task ledger and a 128 MiB database-payload quota, plus consumed artifact copies and database overhead. These are storage/implementation bounds, not network throughput or tail-latency guarantees. No automatic ledger pruning is performed. Customers must preserve identity records during maintenance. Only one process may open a given storage directory; a local lock enforces this.

Q-Fabric snapshots source bytes before networking and uses allocating Python, TLS, SQLite and filesystem operations. It is not zero-copy transport, AF_XDP, EFA, RDMA, a hardware DMA driver, physical PTP synchronization, QPU control or a QRAM implementation. TLS responses are not independent signed time receipts. The included Q-Link ABI separates local memory quiescence from remote application effects and relies on cooperative ownership. No universal zero-jitter or cryptographic replay-free stateless guarantee is advertised.

Kenosian code is proprietary. OS, interpreter and cryptographic runtime components retain their original licenses. EC2, EBS and network charges are additional. Optional integration services have a separate SOW and are not required for baseline product activation.

Private Python orchestration is compiled as CPython 3.12 x86_64 native extension modules. Readable Python is limited to documented command/bootstrap and payload inventory tools. Generated C, private Python source, bytecode, build objects and debug sections are excluded from the application payload. This reduces source exposure; executable code, identifiers and strings remain reverse-engineerable. The package is not a single native library or a guarantee of complete IP secrecy. The shared native ABI now also includes optional native-owned workspace erase APIs. Existing caller-owned and Fabric snapshot/TLS/SQLite copies are not automatically erased. No D-Wave integration is added.