quorum v0.1.5

Timed readings: a start-up bypass and an on-delay.

reading starting "the first 30 s after a start"           when motor_started within first 30s
reading door_off "the guard switch has read open for 2 s" when door_open for 2s

• X within first T is set during the first T after X became set, while X stays set. The usual use is a start-up bypass: excuse start_transient "..." needs starting with start_transient undercuts cavitation keeps low suction from raising an alarm for the first 30 s of each start, and no longer.
• X for T is an on-delay for any reading: a switch must read open for 2 s before it counts, so a bounce does not. Before, only a sensor-channel threshold could be held.
• Both chain with the other timed forms, are covered by the bench script and the test clock, and are refused at load by older firmware rather than run wrongly.

Checked: the board's timer code against a second, whole-history implementation over random histories with all five forms (two deliberately planted bugs were each caught), the bench script against the device code on the host, the second implementation of the language on all 256 states of the new example, and CI 15 of 15. On a Raspberry Pi Pico 2 the new example's bench test passed 17 of 17 on the test clock and 17 of 17 in real time; the earlier timed examples still pass on the new firmware. The Uno R4 has not run these forms yet.

Example: casebook/fixtures/timed/startup.cb. Definitions: casebook/LANGUAGE.md, "Timed readings".

Downloads

• Windows: quorum-studio-windows-setup.exe. It is not code-signed, so SmartScreen may warn.
• Linux: quorum-studio-linux-amd64.tar.gz.
• macOS: quorum-studio-macos.zip. It is not notarized: the first time, Control-click the program and choose Open.

Verify the downloads against SHA256SUMS.

Licence: PolyForm Noncommercial 1.0.0. Commercial licences from BioDream LLC (firstmind@biodream.ai). Not certified for safety-critical use.

quorum v0.1.4

Timed readings: chains, a test clock, and a bench test through time.

• Chains. A timed reading may watch another timed reading, for example reading hot_twice "..." when ran_hot 2 times in 1h. The compiler orders them so each comes after those it watches, and refuses loops. A timed reading still cannot watch a conclusion: the rules' answers would feed back into their inputs, and the check over every combination of readings would no longer cover what the board does.
• No missed writes. The board now steps its timed readings just before and just after every Modbus write, so a reading the controller writes is never missed, however briefly it is set. What the board cannot see is a pulse on the plant that the controller never writes.
• Test clock. Modbus map version 2 adds registers 10 to 12, which move the board's clock forward so an hour-long window can be tested in seconds. The test clock can be turned on only before anything else has been written since the board started, and it stays on until the board is reset. Reset the board before it goes into service, and have the controller check that register 10 reads 0.
• Bench test for timed rulebooks. The commissioning sheet of a timed rulebook now carries a script: each timed reading just inside and just outside its window, then every line of the sheet. The expected answers come from replaying the script through the definitions over the whole history, not from the board's timer code. "Test the board" plays it on the test clock, or in real time with -real-time (a box in the studio).
• Fixed: an event a full turn of the 32-bit millisecond clock old (49.7 days) could look recent again.

Measured on a Raspberry Pi Pico 2: the timed example rulebook passed 19 of 19 on the test clock and 19 of 19 in real time (71 minutes), the chained example 17 of 17, and the 5-minute and 1-hour windows were waited out for real (6 of 6). The Uno R4 has not run the new firmware or the timed bench test yet.

Limits: when a timed reading is set is shown by tests and board runs, not by the exhaustive check; a timed reading cannot watch a conclusion; the bench test does not cover raw sensor channels.

Boards with older firmware refuse a chained image rather than run it wrongly; quorum studio writes the new runtime with the image.

Downloads

• Windows: quorum-studio-windows-setup.exe. It is not code-signed, so SmartScreen may warn.
• Linux: quorum-studio-linux-amd64.tar.gz.
• macOS: quorum-studio-macos.zip. It is not notarized: the first time, Control-click the program and choose Open.

Verify the downloads against SHA256SUMS.

Licence: PolyForm Noncommercial 1.0.0. Commercial licences from BioDream LLC (firstmind@biodream.ai). Not certified for safety-critical use.

quorum v0.1.3

Timed readings: rules can now say what happened before what.

reading dead_head "pressure went high within 10 s of a start" when pressure_high within 10s after motor_started
reading ran_hot   "the bearing was hot in the last 5 minutes"   when bearing_hot within last 5m
reading repeated  "the overload relay tripped 3 times in an hour" when overload_trip 3 times in 1h

• Each timed reading is one more yes/no reading, so every rule is still checked in every combination of readings. The board works out when to set it, using a few timestamps per reading.
• When a timed reading is set is checked by tests against a second, whole-history implementation: 360,000 timer steps with no disagreement, and two deliberately planted bugs were each caught. On a Raspberry Pi Pico 2 and an Arduino Uno R4, each with its own clock, 8 of 8 timed checks passed on each.
• Rulebooks without timed readings compile exactly as before: identical images, headers, certificates and fingerprints for all 67 rulebooks in the repository.
• Limits: the three forms cannot be nested or chained, a reading shorter than the board's step (about 1 ms) can be missed. The studio's bench test refuses rulebooks with timed readings; the printed commissioning sheet describes each one in words.
• See casebook/LANGUAGE.md, "Timed readings", and the example casebook/fixtures/timed/timed.cb.

Boards running an older runtime refuse a timed image rather than run it wrongly; quorum studio writes the new runtime with the image.

Downloads

• Windows: quorum-studio-windows-setup.exe. It is not code-signed, so SmartScreen may warn.
• Linux: quorum-studio-linux-amd64.tar.gz.
• macOS: quorum-studio-macos.zip. It is not notarized: the first time, Control-click the program and choose Open.

Verify the downloads against SHA256SUMS.

Licence: PolyForm Noncommercial 1.0.0. Commercial licences from BioDream LLC (firstmind@biodream.ai). Not certified for safety-critical use.

quorum v0.1.2

Faster, more independently checked, and ready for commissioning.

• Checks are about 30 times faster and use every core. The output is byte-identical: a 30-reading rulebook takes about 2 minutes on an 8-core PC.
• A second implementation of the rulebook language (tools/refcheck.py), written from the documentation, is compared with the compiler in every situation. On its first run it found a compiler bug, now fixed. No rulebook on a board was affected.
• Commissioning sheet. After a passing check, quorum studio prints a loop-check sheet for the real machine: what each reading must cause, with room to sign it off. Test the board drives a board over Modbus through every line of the sheet; on a Pico 2, 41 of 41 states matched.
• One-click repair. When a rulebook is refused because nothing can argue with it, the studio adds a failed-sensor check for each reading, each marked for an engineer to confirm.
• A fair drafting test. On four regulations no model had seen, with the answer key written down first, AI drafts got 116 of 135 checks (86%). The results and every draft are in casebook/fixtures/manual/eval/.
• Building from a fresh checkout needs only Docker, git and bash.

Downloads

• Windows: quorum-studio-windows-setup.exe. It is not code-signed, so SmartScreen may warn.
• Linux: quorum-studio-linux-amd64.tar.gz.
• macOS: quorum-studio-macos.zip. It is not notarized: the first time, Control-click the program and choose Open.

Verify the downloads against SHA256SUMS.

Licence: PolyForm Noncommercial 1.0.0. Commercial licences from BioDream LLC (firstmind@biodream.ai). Not certified for safety-critical use.

quorum v0.1.1

quorum studio is now available for macOS (Apple Silicon and Intel), as well as Windows and Linux.

Drafting a rulebook from a manual got better. The AI drafter now tells a shutdown from an alarm-only condition, handles "must not start until..." rules, and keeps exceptions to exactly what the manual excuses. With Claude Sonnet 5.5:

• a US Army Corps standard: 12 of 12 rules in 10 runs (up from 8 to 9). The drafter was taught on that same standard.
• a Coast Guard regulation it had never seen: all 6 rules in 8 of 8 runs.

A person still approves every draft. An optional second opinion lets another model check the draft against the manual. It has not yet been shown to improve drafts.

Downloads

• Windows: quorum-studio-windows-setup.exe. This is not code-signed, so SmartScreen may warn.
• Linux: quorum-studio-linux-amd64.tar.gz.
• macOS: quorum-studio-macos.zip. It is not notarized: the first time, Control-click the program and choose Open.

Verify the downloads against SHA256SUMS.

Licence: PolyForm Noncommercial 1.0.0. Commercial licences from BioDream LLC (firstmind@biodream.ai). Not certified for safety-critical use.

quorum v0.1.0

First public release of quorum.

quorum studio for Windows (installer, no administrator rights) and Linux (one binary). Open, import, learn or draft a rulebook, check every situation, and write the chip image for a Raspberry Pi Pico 2 or an Arduino Uno R4. Everything runs on your computer.

Verify the downloads against SHA256SUMS. The Windows installer is not code-signed, so Windows SmartScreen may warn before it runs.

Licence: PolyForm Noncommercial 1.0.0. Commercial licences from BioDream LLC (firstmind@biodream.ai). Not certified for safety-critical use.