QUANTSULTANT.DEV / DOCS Canonical Crawler Surface · 19 Verified Nodes 18.5% → 0.08% Medical Floor

Argon2id Authentication & Live Dataset Audit API

/docs/api/auth Security & Sandbox Gate · RFC 9106

Plain-English translation: Exchanges your organization passkey for a cryptographically scoped tw_live_... bearer token using memory-hard Argon2id, unlocking all 10 API streams and the stateless live dataset audit sandbox.

1. Purpose & Architectural Role

Protects all 10 modular API streams and the interactive FDE dataset upload console behind RFC 9106 Argon2id key derivation (memory=65,536 KiB, iterations=3, parallelism=4, 128-bit salt). Also exposes POST /v1/demo/upload-dataset so prospective enterprise buyers can run an immediate stateless audit on uploaded CSV/JSONL rows.

Cross-references: System Architecture · GRAMS™ Manifold & GRMA · 3 Runtime Shells (FastAPI, Go, Rust).

2. Request Schema (POST /v1/auth/argon2-verify)

All requests require Content-Type: application/json and an Argon2id-scoped bearer header (Authorization: Bearer tw_live_...) issued via /v1/auth/argon2-verify.

Field Type Requirement Specification
passkeystringRequiredFounder or enterprise FDE session passkey (minimum 4 characters) used for Argon2id key derivation.
organizationstringOptionalOrganization, fund, or clinical health system identifier bound to the issued token.
dataset_namestringOptional (/v1/demo/upload-dataset)Filename of the uploaded CSV/JSONL dataset when invoking the live dataset audit route.
runtime_shellstringOptional (/v1/demo/upload-dataset)Target execution shell: rust_2_5ms, cloudflare_edge_4_8ms, go_mesh_5_4ms, or fastapi_8_1ms.

3. Response Schema

Responses are deterministic JSON payloads returned with X-Powered-By: Quantsultant-GRAMS-Engine/2.5ms-Edge and zero customer payload retention at rest.

Field Type Deterministic Guarantee
authenticatedbooleanTrue when the Argon2id verification gate succeeds.
kdf_algorithmstringArgon2id (RFC 9106) with explicit memory, iteration, and parallelism parameters.
api_key / scoped_session_tokenstringDeterministic scoped bearer token (tw_live_...) authorized for Streams 01–10.
unlocked_capabilitiesarrayList of canonical /v1/* endpoints unlocked for the session.
verify_latency_msnumberClocked edge key-exchange latency in milliseconds.

4. Deterministic Examples & Live Edge Sandbox

Switch between cURL, Python (FastAPI), Go 1.22, and Native Rust below, or click Run Live Edge Test to execute a real verification call against the Cloudflare Edge Gateway.

curl -X POST https://quantsultant.dev/v1/auth/argon2-verify \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer tw_live_9f4a8c2e1b7d6035a4c8e2f1" \
  -d '{
  "passkey": "quantsultant-fde-2026",
  "organization": "Regional Health System \u00b7 CTO Evaluation"
}'
import requests

# 00 · Argon2id Cryptographic Gate & Live Dataset Sandbox (POST /v1/auth/argon2-verify · POST /v1/demo/upload-dataset) — FastAPI / Python 3.11+ SDK Client
resp = requests.request(
    "POST",
    "https://quantsultant.dev/v1/auth/argon2-verify",
    headers={
        "Content-Type": "application/json",
        "Authorization": "Bearer tw_live_9f4a8c2e1b7d6035a4c8e2f1",
    },
    json={
  "passkey": "quantsultant-fde-2026",
  "organization": "Regional Health System \u00b7 CTO Evaluation"
}
)
print(resp.status_code, resp.json())
package main

import (
	"bytes"
	"fmt"
	"io"
	"net/http"
)

func main() {
	// 00 · Argon2id Cryptographic Gate & Live Dataset Sandbox (POST /v1/auth/argon2-verify · POST /v1/demo/upload-dataset) — Go 1.22+ Stream Mesh Client
	payload := []byte(`{"passkey": "quantsultant-fde-2026", "organization": "Regional Health System \u00b7 CTO Evaluation"}`)
	req, _ := http.NewRequest("POST", "https://quantsultant.dev/v1/auth/argon2-verify", bytes.NewBuffer(payload))
	req.Header.Set("Content-Type", "application/json")
	req.Header.Set("Authorization", "Bearer tw_live_9f4a8c2e1b7d6035a4c8e2f1")

	res, err := http.DefaultClient.Do(req)
	if err == nil {
		defer res.Body.Close()
		body, _ := io.ReadAll(res.Body)
		fmt.Println(string(body))
	}
}
// 00 · Argon2id Cryptographic Gate & Live Dataset Sandbox (POST /v1/auth/argon2-verify · POST /v1/demo/upload-dataset) — Native Rust 2.5ms Bare-Metal Invocation
use std::time::Instant;

fn main() {
    let t0 = Instant::now();
    let request_json = r#"{"passkey": "quantsultant-fde-2026", "organization": "Regional Health System \u00b7 CTO Evaluation"}"#;
    // Executes in-memory against the 15.88 MB single-GPU / bare-metal index with zero GC pauses
    println!("Dispatched POST /v1/auth/argon2-verify ({} bytes) in {:?}", request_json.len(), t0.elapsed());
}
{
  "authenticated": true,
  "kdf_algorithm": "Argon2id (RFC 9106)",
  "kdf_params": {
    "memory_kib": 65536,
    "iterations": 3,
    "parallelism": 4,
    "salt_bits": 128
  },
  "api_key": "tw_live_9f4a8c2e1b7d6035",
  "scoped_session_token": "tw_live_9f4a8c2e1b7d6035",
  "organization": "Regional Health System \u00b7 CTO Evaluation",
  "unlocked_capabilities": [
    "POST /v1/demo/upload-dataset",
    "POST /v1/etl/jacobian (100% 242/242 TPC-DI Coverage)",
    "POST /v1/verify (GRAMS Manifold)",
    "POST /v1/reason/universal (Domain Router)",
    "POST /v1/harness/wrap (Model-Agnostic Wrapper)"
  ],
  "verify_latency_ms": 1.84
}

5. Versioning, Error Codes & Rate Limits

Parameter / HTTP Code Status / Value Operational Behavior & Recovery
API Version v1 (Engine 2.5.0) Pinned schema contract across FastAPI, Go 1.22, Native Rust, and Cloudflare Edge. Pre-patent charter waitlist active.
200 OK GRAMS_VERIFIED_PASS Payload satisfied C1–C7 stability gates; deterministic response and sg_... hash returned.
401 Unauthorized ARGON2ID_AUTH_REQUIRED Missing or invalid tw_live_... token. Re-authenticate via POST /v1/auth/argon2-verify.
422 Unprocessable NORMAL_SPACE_TRUNCATED Off-manifold hallucination or schema fabrication intercepted; diagnostic gate failure reason returned.
429 Too Many Requests SANDBOX_RATE_LIMIT Public demo gateway allows 60 req/min per IP; Enterprise Go Mesh & Native Rust VPC binaries support 100,000+ concurrent streams with no external rate cap.

One Verification Core · Two Direct Paths

API access is gated while we complete utility patent filings and IP legal structuring. Investors can start a direct SAFE & data-room conversation with Garrick Pinon; technical evaluators can reserve a gated tw_live_... API slot or 48-hour blind dataset proof of value.