Some financial decisions are also security decisions: a supplier's bank details change, an unexpected invoice arrives, or a message that seems to come from the owner asks for an urgent payment. In a planned workflow, Qelly would advise holding the payment until the change or request is confirmed through a contact already on file. An unconfirmed change or request would stay unresolved, and the owner would decide whether to release or reject the payment. Qelly does not move money. Other defensive security decisions would come later, each with its own tools, permissions and tests.
The largest AI models that a business can run on its own hardware need far more powerful computers than most small businesses would buy. Our goal is for the judgment model described above to run on one machine the business controls, as a compact model that coordinates Qelly's checked tools, verifies their results and says when it cannot conclude, with no outside model in the loop. We will first compare existing open models; adapting one of them, with help from a larger model if needed, would follow only where that comparison shows a gap. We have not chosen a model.
Records a business keeps for years, such as its accounts and tax records, need protection that lasts. The private deployment would protect the connections it controls with the post-quantum methods NIST standardized in 2024, encrypt storage and backups with keys only the business holds, and sign each decision record so that a change to a signed record can be detected.
The workflow for changed payment details, the compact model and post-quantum protection are not yet built. This direction needs funding.