Argon2id Authentication & Live Dataset Audit API
Plain-English translation: Exchanges your organization passkey for a cryptographically scoped tw_live_... bearer token using memory-hard Argon2id, unlocking all 10 API streams and the stateless live dataset audit sandbox.
1. Purpose & Architectural Role
Protects all 10 modular API streams and the interactive FDE dataset upload console behind RFC 9106 Argon2id key derivation (memory=65,536 KiB, iterations=3, parallelism=4, 128-bit salt). Also exposes POST /v1/demo/upload-dataset so prospective enterprise buyers can run an immediate stateless audit on uploaded CSV/JSONL rows.
Cross-references: System Architecture · GRAMS™ Manifold & GRMA · 3 Runtime Shells (FastAPI, Go, Rust).
2. Request Schema (POST /v1/auth/argon2-verify)
All requests require Content-Type: application/json and an Argon2id-scoped bearer header (Authorization: Bearer tw_live_...) issued via /v1/auth/argon2-verify.
| Field | Type | Requirement | Specification |
|---|---|---|---|
passkey | string | Required | Founder or enterprise FDE session passkey (minimum 4 characters) used for Argon2id key derivation. |
organization | string | Optional | Organization, fund, or clinical health system identifier bound to the issued token. |
dataset_name | string | Optional (/v1/demo/upload-dataset) | Filename of the uploaded CSV/JSONL dataset when invoking the live dataset audit route. |
runtime_shell | string | Optional (/v1/demo/upload-dataset) | Target execution shell: rust_2_5ms, cloudflare_edge_4_8ms, go_mesh_5_4ms, or fastapi_8_1ms. |
3. Response Schema
Responses are deterministic JSON payloads returned with X-Powered-By: Quantsultant-GRAMS-Engine/2.5ms-Edge and zero customer payload retention at rest.
| Field | Type | Deterministic Guarantee |
|---|---|---|
authenticated | boolean | True when the Argon2id verification gate succeeds. |
kdf_algorithm | string | Argon2id (RFC 9106) with explicit memory, iteration, and parallelism parameters. |
api_key / scoped_session_token | string | Deterministic scoped bearer token (tw_live_...) authorized for Streams 01–10. |
unlocked_capabilities | array | List of canonical /v1/* endpoints unlocked for the session. |
verify_latency_ms | number | Clocked edge key-exchange latency in milliseconds. |
4. Deterministic Examples & Live Edge Sandbox
Switch between cURL, Python (FastAPI), Go 1.22, and Native Rust below, or click Run Live Edge Test to execute a real verification call against the Cloudflare Edge Gateway.
curl -X POST https://quantsultant.dev/v1/auth/argon2-verify \
-H "Content-Type: application/json" \
-H "Authorization: Bearer tw_live_9f4a8c2e1b7d6035a4c8e2f1" \
-d '{
"passkey": "quantsultant-fde-2026",
"organization": "Regional Health System \u00b7 CTO Evaluation"
}'
import requests
# 00 · Argon2id Cryptographic Gate & Live Dataset Sandbox (POST /v1/auth/argon2-verify · POST /v1/demo/upload-dataset) — FastAPI / Python 3.11+ SDK Client
resp = requests.request(
"POST",
"https://quantsultant.dev/v1/auth/argon2-verify",
headers={
"Content-Type": "application/json",
"Authorization": "Bearer tw_live_9f4a8c2e1b7d6035a4c8e2f1",
},
json={
"passkey": "quantsultant-fde-2026",
"organization": "Regional Health System \u00b7 CTO Evaluation"
}
)
print(resp.status_code, resp.json())
package main
import (
"bytes"
"fmt"
"io"
"net/http"
)
func main() {
// 00 · Argon2id Cryptographic Gate & Live Dataset Sandbox (POST /v1/auth/argon2-verify · POST /v1/demo/upload-dataset) — Go 1.22+ Stream Mesh Client
payload := []byte(`{"passkey": "quantsultant-fde-2026", "organization": "Regional Health System \u00b7 CTO Evaluation"}`)
req, _ := http.NewRequest("POST", "https://quantsultant.dev/v1/auth/argon2-verify", bytes.NewBuffer(payload))
req.Header.Set("Content-Type", "application/json")
req.Header.Set("Authorization", "Bearer tw_live_9f4a8c2e1b7d6035a4c8e2f1")
res, err := http.DefaultClient.Do(req)
if err == nil {
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}
}
// 00 · Argon2id Cryptographic Gate & Live Dataset Sandbox (POST /v1/auth/argon2-verify · POST /v1/demo/upload-dataset) — Native Rust 2.5ms Bare-Metal Invocation
use std::time::Instant;
fn main() {
let t0 = Instant::now();
let request_json = r#"{"passkey": "quantsultant-fde-2026", "organization": "Regional Health System \u00b7 CTO Evaluation"}"#;
// Executes in-memory against the 15.88 MB single-GPU / bare-metal index with zero GC pauses
println!("Dispatched POST /v1/auth/argon2-verify ({} bytes) in {:?}", request_json.len(), t0.elapsed());
}
{
"authenticated": true,
"kdf_algorithm": "Argon2id (RFC 9106)",
"kdf_params": {
"memory_kib": 65536,
"iterations": 3,
"parallelism": 4,
"salt_bits": 128
},
"api_key": "tw_live_9f4a8c2e1b7d6035",
"scoped_session_token": "tw_live_9f4a8c2e1b7d6035",
"organization": "Regional Health System \u00b7 CTO Evaluation",
"unlocked_capabilities": [
"POST /v1/demo/upload-dataset",
"POST /v1/etl/jacobian (100% 242/242 TPC-DI Coverage)",
"POST /v1/verify (GRAMS Manifold)",
"POST /v1/reason/universal (Domain Router)",
"POST /v1/harness/wrap (Model-Agnostic Wrapper)"
],
"verify_latency_ms": 1.84
}
5. Versioning, Error Codes & Rate Limits
| Parameter / HTTP Code | Status / Value | Operational Behavior & Recovery |
|---|---|---|
| API Version | v1 (Engine 2.5.0) |
Pinned schema contract across FastAPI, Go 1.22, Native Rust, and Cloudflare Edge. Pre-patent charter waitlist active. |
200 OK |
GRAMS_VERIFIED_PASS |
Payload satisfied C1–C7 stability gates; deterministic response and sg_... hash returned. |
401 Unauthorized |
ARGON2ID_AUTH_REQUIRED |
Missing or invalid tw_live_... token. Re-authenticate via POST /v1/auth/argon2-verify. |
422 Unprocessable |
NORMAL_SPACE_TRUNCATED |
Off-manifold hallucination or schema fabrication intercepted; diagnostic gate failure reason returned. |
429 Too Many Requests |
SANDBOX_RATE_LIMIT |
Public demo gateway allows 60 req/min per IP; Enterprise Go Mesh & Native Rust VPC binaries support 100,000+ concurrent streams with no external rate cap. |
One Verification Core · Two Direct Paths
API access is gated while we complete utility patent filings and IP legal structuring. Investors can start a direct SAFE & data-room conversation with Garrick Pinon; technical evaluators can reserve a gated tw_live_... API slot or 48-hour blind dataset proof of value.