PERMAFRONT

We freeze production models into bit-exact cold cores and serve them from a lattice that cannot drift. The model you audited is the model that answers.

Cryo-compute for systems that must not change: weights vitrified, provenance sealed, every inference replayable to the last logit.

REQUEST A CORE

Warm models forget themselves.

A deployed model is a moving target. Drivers update, kernels reorder, a quiet re-quantization shifts a decimal — and last quarter's answer stops being reproducible. PERMAFRONT ends the thaw.

FREEZE

One command vitrifies the whole stack — weights, tokenizer, kernel graph, random seeds, and the eval harness that approved them — sealed into a single cold core.

ATTEST

Every core carries a frost seal: a signed digest of each tensor. Any node can re-derive it, so “same model” stops being a promise and becomes arithmetic.

SERVE

The lattice pins cores to fixed hardware profiles and replays them deterministically. Same input, same logits — in March, or in ten years.

# determinism certificate — bench fixture, fictional
# same prompt, run twice, 41 days apart
$ frost certify pf_core_9f3a…be21 --replay
  run A   2026-05-19 · node fro-04 · temp −196.0°C
  run B   2026-06-29 · node fro-04 · temp −196.0°C
  embed   ed25519 4b0e…77c2 = 4b0e…77c2
  attend  ed25519 d19a…03fe = d19a…03fe
  reduce  ed25519 2c84…b6a1 = 2c84…b6a1
  decode  ed25519 f5d0…9e4b = f5d0…9e4b
  verdict bit-frozen · 4/4 stages byte-identical · logit diff 0

Instruments for the cold chain.

Five tools, one temperature. Everything below is built around a single artifact — the cold core — and a single invariant: it never changes by accident.

−58.0°C

COLD CORE

The sealed artifact.

A single immutable file holding weights, graph, seeds and provenance. Copy it, archive it, hand it to an auditor — it runs identically anywhere the lattice reaches.

−92.0°C

FROST SEAL

Proof it never moved.

An ed25519-signed tensor digest baked in at freeze time. Verification is one pass and zero trust: the seal either re-derives on your hardware, or it doesn't.

−124.0°C

LATTICE

Serving without weather.

A scheduler that treats determinism as the invariant — pinned kernels, ordered reductions, replayable batches. Throughput is negotiated; identity never is.

−151.0°C

THAW

Change on purpose only.

Warm a candidate core beside the incumbent, diff the logits across your full harness, promote on evidence. Rollback is instant — the old core never left.

−178.0°C

BOREHOLE

Drill into any yesterday.

Query the exact core that answered on a given date, at its original temperature. Regulators call it an audit trail. We call it core sampling.

What we refuse to melt.

Honesty at −196°: PERMAFRONT is a fictional company — this site is a design study in what inference infrastructure owes the people who rely on it. The lattice is imaginary. The principles are not.

Determinism is a feature, not a tax.

If two runs of the same core disagree, that is an outage. We budget performance around reproducibility — never the reverse.

Provenance must outlive the vendor.

The cold core is an open, documented format. If PERMAFRONT vanished tomorrow, every core you froze would still thaw.

No silent updates. Ever.

A model that changes without a signed thaw event is a breach, not an improvement — whatever the changelog says.

State targets as targets.

Numbers on this page are design goals for a fictional system, labeled as such. Cold math over warm marketing.

Freeze in an afternoon.

  • FREEZE

    Point the CLI at your checkpoint and the eval harness that approved it. Vitrification is one pass over the tensors.

  • VERIFY

    Re-derive the frost seal on your own hardware. No dashboard to believe — just a digest that matches or doesn't.

  • ROUTE

    Send traffic to the lattice endpoint. Keep the incumbent core warm beside it until your diff is clean, then commit.

# vitrify a checkpoint + its eval harness
$ frost freeze ./model --evals ./harness --seal ed25519
  core    pf_core_9f3a…be21
  temp    −196.0°C   tensors  8,442   drift  0

# verify the seal anywhere, trust nothing
$ frost attest pf_core_9f3a…be21
  seal    re-derived · match

# serve from the lattice
$ curl https://lattice.permafront.ai/v1/infer \
    -d '{"core":"pf_core_9f3a","input":"…"}'

Bring your model in from the heat.

Tell us what must never change about it. We reply in plain text, usually within two days — no deck, no drip sequence.

hello@permafront.ai

You have reached the nitrogen floor. −196.0°C · nothing moves here unless you ask it to.