01
A citation it cannot support is not returned
Evidence passages are handed to the model with opaque IDs, and the answer is re-checked against them server-side. An ID the model invented is not a footnote that happens to be wrong — it fails validation, and the answer does not ship with it.
02
“The corpus does not say” is a valid answer
When the retrieved passages do not settle a question, the system says so instead of assembling a fluent paragraph out of the nearest available text. Most of the damage done by research assistants is done confidently.
03
The retrieval runs on your machine
Embeddings and reranking are local ONNX models — no key, no per-query spend, and no page of your unpublished work sent anywhere to be indexed. Only the final answering step calls a hosted model.
04
The evaluation splits are leakage-free
Held-out sets are split by question ID, so passages from one question cannot appear on both sides. It is the difference between a metric and a number that looks like one.