Quesarby MLAI

Operations

Each surface has its own gate.

Packaging orchestration, retrieval, and controls. A web check is not mobile evidence.

Independent gates

Run each check in the source tree it covers. The website gate does not validate its standalone sidecars, the separate Abbey app, native devices, or the ABI and WDBX workspaces.

  • bun run check — this website, from the repository root; bun run build:static prepares the GitHub Pages artifact
  • bun run test and bun run typecheck — local Quasar service, from sidecars/quasar-service
  • Abbey workspace — follow the separate app's current README; the browser page here is only a preview
  • Mobile and native — the web vault is a preview; Android sync and signed-device checks are separate
  • ./tools/check.sh — ABI checkout with its sibling WDBX workspace

Targets

Default posture is operator-owned machines. VPC, on-premise, hybrid, and offline-first paths are the design. This website does not provision hosting, deploy adapters, or bill. Configuring quesar.cloud itself is covered below.

Checked against these sources on .

Operations

Configuring this site

For quesar.cloud itself. Each missing value produces a clear "not configured" state, never a crash.

  1. 01

    Database

    Set DATABASE_URL for Postgres. Without it the app runs on in-memory PGLite, and data does not survive a restart or a serverless instance.

  2. 02

    Encryption key

    Set APP_ENCRYPTION_KEY (32 bytes, openssl rand -base64 32). Without it, sealed features refuse instead of storing plaintext.

  3. 03

    Server-only provider keys

    Set XAI_API_KEY, or the Cloudflare AI Gateway URL, token and id, plus LLM_PROVIDER. Never expose them to browser bundles.

  4. 04

    Administrators

    Set ADMIN_EMAILS. Only an allowlisted address with a linked Google or Apple account becomes an admin.

  5. 05

    Evaluation gates

    Run evaluation gates before allowing autonomous write actions or external tool calls.

All docsPrevious: Twelve contract-covered tools.Next: Protected surfaces fail closed.
Architecture

Next

Developers

The READMEs these articles cite.