Sovereign by construction
The model lives on the hospital's own hardware. No outbound call. No CLOUD Act. No third-party platform. Encryption keys in a hospital-owned HSM. Patient data never crosses jurisdiction in plaintext.
LUMEN is the cognitive substrate of the modern hospital. Kimi K2.6 (1T MoE) runs on the hospital's own GPUs, fine-tuned on the hospital's own protocols, queried by every clinician through one unified surface. No outbound call, no foreign cloud, no CLOUD Act exposure. The patient state, the audit chain, the encryption keys, the model itself: every byte is hospital-owned.
The model lives on the hospital's own hardware. No outbound call. No CLOUD Act. No third-party platform. Encryption keys in a hospital-owned HSM. Patient data never crosses jurisdiction in plaintext.
Every query, every reasoning step, every citation, every signature appended to the hospital's own cryptographic chain. Patent 207. Append-only. Portable. Inspectable by the hospital's own audit team.
Arabic to family, English to chart, French to colleague. Mid-utterance code-switch captured natively. Native first-class for all three scripts, never auto-translation as the primary surface.
The same patient state plus the same Counsel plus the same prompt yields the same recommendation. The decision is reproducible end to end. No black box, no drift between consults.
Kimi K2.6, a one-trillion-parameter mixture-of-experts open-weight model, fine-tuned on the hospital's own anonymized historical EMR plus its formulary plus its protocols. Runs on a hospital-owned GPU server (reference architecture below). One brain, every ward, every shift, every language. The hospital owns the weights, the fine-tune deltas, and the inference logs.
Every patient is one unified semantic substrate. Vitals stream, labs grid, orders timeline, drips, imaging thumbnails, nurse notes, family thread, all encoded on a holographic boundary. Every agent queries the same state without round-tripping a database. The doctor never re-types the patient's history. The pharmacist sees the same state the consultant sees. The night-shift resident inherits the state intact at handover. This is what eliminates the documentation tax that consumes two to three hours of every senior consultant's day.
DirectStream Local Anchor. Layer-major chunked prefill. The trillion-parameter model loads layer by layer on demand instead of holding every weight in memory at once. Sub-three-second time-to-first-token on cold cache, sub-one-second on warm cache. One hundred plus concurrent ICU sessions per server. The model never round-trips through a foreign cloud. The hospital's own server returns the answer.
The .col format is a compressed AI-weight container with cryptographic integrity, replacing the .safetensors plus .lora plus GPU-dependent inference stack with one sovereign envelope. Measured 9.84× compression on Gemma 4 31B. Similar ratios expected on Kimi K2.6. USPTO provisional filed 2026-04-04. Held by Collapse Technologies Inc., a 100% PulsarOS subsidiary. Thirty-eight measured patent embodiments around the format.
When the local model lacks confidence, the encrypted semantic substrate flows through Patent 41 lattice-bound homomorphic semantic encryption to a sovereign Canadian Anthropic Claude bridge. The cloud sees an encrypted substrate, returns an encrypted result. Plaintext patient data never crosses the hospital firewall. Decryption happens inside the hospital perimeter only. Sovereignty even on fallback.
Counsel is five to seven specialist AI agents that deliberate per complex case the way a real physician's consilium does. Critical Care opens. Pharmacology weighs the regimen. Infectious Diseases comments on the antibiotic. Renal weighs the dose in AKI. Ethics weighs in on goals of care. Each adds, the others react, the attending synthesizes. They disagree where they should, visibly. Every clinical statement traces to a citation. Every decision lands on a human signature.
Every read, every write, every model inference, every order, every signature is appended to the hospital's own cryptographic chain. The chain is portable: the hospital exports it for regulators on demand. The hospital owns the chain end to end. No foreign auditor. No vendor key escrow. No CLOUD Act subpoena path. The audit chain is a hospital asset, not a vendor service.
The hospital procures the hardware via its preferred vendor. PulsarOS provides reference architecture, vendor lists per jurisdiction, and procurement validation. We never mark up hardware. The hardware is the hospital's capex, the platform is the license.
FHIR R4 exposure as standard. Custom adapters for Epic, Cerner, Meditech, plus regional EHRs (Cerner Saudi Arabia, NPHIES integration, Wasfaty integration). The hospital configures once, integrates everywhere. The substrate ingests the existing EHR feed without forcing a migration. LUMEN sits next to the EHR, not on top of it.
Institutional capex. Hospital-owned. Sovereign Canadian. Trilingual native.
Open the conversation