S.A.L.T CI

Products / TERAS

The sovereign AI core

S.A.L.T CI TERAS

The sovereign AI core. One application that runs your models, gives people a chat workspace, searches your documents, connects tools and agents, and governs all of it, on your own servers, with or without the internet.

Air-gapped by defaultModels on any GPU or CPUKnowledge with citationsModel Studio and fine-tuningAgents, tools and channelsFederated sites, multi-nodeTwo-level white label
TERAS · Console
org/assistantOn-premisesAuto · Proposals
Summarise the 2027 budget circular and make a one-page Word brief for the director.
Thinking · found 3 passages in "Finance circulars", checked the totals…
The circular sets three priorities: digital services, staff training and data centre renewal 1. Operating spend stays flat, while development rises for the new AI services 2. Requests close on 15 January 3.
Budget brief 2027.docx
Organisation letterhead · 1 page
Open
Illustration of the Console: thinking shown apart, numbered citations and a Word file from the organisation's template.
01 · Why TERAS

AI your organisation can own, trust and grow

Government agencies, universities, defence and regulated enterprises need AI, but cannot send their data to a foreign cloud. Until now, a sovereign setup meant stitching borrowed parts together.

Data leaves the country

Popular AI services run in foreign clouds, under foreign law.

A stack of borrowed parts

A model runner, a chat UI, a vector store and pipelines: four products to install, upgrade and brand.

No proof of quality

Nobody can say which model is fit for which job before people rely on it.

What TERAS changes

BeforeWith TERAS
A model runner, a chat UI and pipelines from different projectsOne product that runs models, chat, knowledge, tools and governance, upgraded together
Branding locked by a licenceYour brand, fully: client and reseller white label
One custom model per personPersonalisation applied to every model: about me, memory, style
Guessing which model is goodModel Studio: playground, test sets, judge, scorecards, fine-tuning
Manual copies between serversLinked sites, multi-node failover and encrypted backups
Logs that can be editedA hash-chained audit trail that shows any change
DefaultAir-gapped

Every feature works with no internet.

When allowedHybrid

Cloud models only for permitted people.

LanguageMalaysian

BM and English in OCR, voice and templates.

CodeOurs

Written by S.A.L.T CI, open foundations credited.

02 · One core

Everything an AI platform needs, in one product

People use the Console and the admin panel in a browser or as an app; applications use the /v1 API. Everything a client changes is a setting in the panel, never code.

Overview: mode, engines, models, people, knowledge and connections at a glance, with GPU use and what is loaded.
Overview: mode, engines, models, people, knowledge and connections at a glance, with GPU use and what is loaded.

Run

Model store and engines on CPU, GPU or both, on this server or other machines.

Chat

The Console: answers, attachments, citations, artifacts, voice.

Know

Document collections with OCR, hybrid search and citations.

Act

Tools, MCP, skills, agents, schedules and a code sandbox.

Reach

WhatsApp, Telegram, Teams, Slack, e-mail and a website widget.

Improve

Model Studio: test, compare, grade and fine-tune.

Personalise

About me, memory and style for every person, on every model.

Protect

Sites, nodes, backups, SSO, quotas, guardrails and audit.

03 · The Console

A chat workspace that shows its work

Answers stream in, cite the documents they used, and can produce real files. Pages, diagrams and documents open beside the chat.

Any attachment

Documents are read and cited; pictures go to vision models or OCR; audio is transcribed.

Artifact panel

Pages, Mermaid diagrams, SVG, long documents and code, with versions and download.

Real files

Word, PDF, PowerPoint and Excel, on the organisation's own templates.

Talk to it

Speak instead of typing; answers read aloud in English or Malay.

Private when needed

A private chat is never remembered; per-chat knowledge, tools and style.

Everywhere

Phone layout, installable app, seven window styles, personal colours.

04 · Models & engines

Its own model runtime, on any hardware

TERAS runs models itself, with engines started on demand and placed on the GPU, the CPU or both. No separate model server to install. Models are pulled by name from public model libraries, and other TERAS sites and cloud providers are governed like local models.

Models: base, custom and search models, where each runs and its status.
Models: base, custom and search models, where each runs and its status.

Any GPU, any age

NVIDIA (CUDA), AMD (ROCm, Vulkan), Intel, Apple (Metal) and older cards through Vulkan; CPU only works too.

Compute agents

Any spare machine runs engines for the site; it keeps only model files.

Custom models and LoRA

Prompt, knowledge, tools and skills on a base; many LoRA adapters share one engine.

Smart routing

Auto model, fallback chains, semantic cache, quotas and cost reports.

05 · Model Studio & fine-tuning

Prove a model before people rely on it

Ask once and compare up to three models side by side, each answer with its full trace. Grade them on a test set, then teach a model the organisation's way: build a dataset, train a LoRA adapter on your own GPU, and TERAS tests it before and after.

Playground: a fine-tuned helpdesk model beside its base on the same Malay question, each lane with route, first-word time, speed and tokens.
Playground: a fine-tuned helpdesk model beside its base on the same Malay question, each lane with route, first-word time, speed and tokens.
1Dataset

Import, take from chats, knowledge or a test set

2Base model

Download the base to train on

3Train LoRA

On a workstation card or a server

4Convert

Packed for the TERAS engines

5Add to TERAS

Served beside the base

6Test

Before and after, on the same test set

Example: 0% to 100% in minutes

A small model learned a helpdesk answer format from 61 examples: 35 training steps on a workstation GPU, then added to TERAS and scored before and after on its test set.

Any source

OpenAI messages, ShareGPT, Alpaca, chats, test sets, or generated from a knowledge collection.

LoRA or merged

Small adapters served per request, or a merged model.

Small GPUs welcome

Small models train on a workstation card; larger ones on servers.

06 · Knowledge & documents

Answers from your own documents, with sources

Put policies, handbooks and reports in a collection. TERAS reads them, scans included, and every answer points to the passage it used.

Every format

PDF (scans too), Office, OpenDocument, e-mail, e-books, CSV, HTML, pictures.

OCR in BM and English

Text recognition, or a vision model for handwriting and tables.

Hybrid search

Vector plus keyword, re-ranked; sources open at the passage.

Connectors

Folders, SharePoint, OneDrive, Google Drive, Nextcloud, websites and databases.

Ask your databases

Read-only connections: ask in plain language, see the query and the answer.

Official-looking files

Word letterheads, PowerPoint masters and Excel templates kept; titles and dates filled in.

Federated knowledge

Search a linked site's collection where it lives, without copying documents.

Classified collections

Collections carry a security label that decides who may search them and where they may be processed.

07 · Tools, agents & channels

From answers to action

Models call tools in a governed loop, agents work toward goals, and assistants meet people where they already are.

1Built-in tools

Time, calculator, knowledge, web, documents

2MCP servers

HTTP or SSE, with per-tool switches

3OpenAPI servers

Audio, IRIS, LOGHAT, PERISAI and more; files both ways

4Governed

Risky operations off by default; every call shown and audited

Agents

A goal with a model, tools and limits. It plans, acts over several steps and reports; changes to other systems wait for approval.

Scheduled tasks

A prompt or an agent every morning or on a date; results to a chat, a file, e-mail or WhatsApp.

TERUSAN flows

TERAS is the reasoning engine of TERUSAN process flows, and agents can start a flow.

Code sandbox

Python in an isolated, network-less container for data, maths and charts.

Deep research

Many steps across knowledge (and the web in hybrid mode) into a cited report.

Skills and filters

Reusable instructions with their own tools; masking, word lists and footers.

Channels

WhatsApp

An assistant on WhatsApp Business, same accounts and policies.

Teams, Slack, Telegram

The same assistants as bots in your workspace.

Website widget

A chat for public or intranet sites, tied to chosen knowledge.

E-mail and alerts

Assistants that answer a mailbox; alerts by e-mail and WhatsApp.

08 · Personalisation, voice & languages

Every model answers like it knows you

People tell TERAS who they are once. Their details, memories and preferred style reach every model they use. No more one custom model per person.

About me and style

Name, position, languages and main style, plus styles for situations such as formal BM proposals or concise coding.

Memory

TERAS remembers useful facts after an answer; people can see and forget them.

Never sensitive

Health, religion, politics, race, money, ID numbers and passwords are never remembered (PDPA).

Admins see counts only

Per model: full, facts only or off. Organisation personas for a house style.

Voice in and out

Speech to text and read-aloud voices in English and Malay; local or cloud.

Pictures

Image generation on the server, or cloud models in hybrid mode.

Meeting minutes

A recording becomes a transcript with speakers, then minutes in the organisation's template.

Four languages

Translate between Malay, English, Chinese and Tamil, keeping document layout.

Dialects

Malaysian dialects for speech in and out through LOGHAT; hands-free voice mode.

09 · Sites, nodes & federation

From a notebook to a national network

A notebook, a department server and a data centre run the same product. Install small, then add nodes, compute agents and linked sites without reinstalling.

1Single server

One install is one site, fully air-gapped if required

2Several nodes

Each node a full copy; failover by itself with three or more

3Compute agents

Spare machines lend engines, any GPU or CPU

4Linked sites

Independent sites link with a one-time code; requests are signed

What a link can share

ShareWhat it does
ModelsAll or chosen models, shown as site/model; cloud models only while the giver is hybrid
Engines (burst)Their engines answer when a model is missing here, when busy here, or both
KnowledgeCollections searched where they live; documents never copied
Backup spaceHolds the other site's encrypted backups, which it cannot read
PeopleRecognise their people, sign them in, and let chats and memories follow a person

Example: a university that starts small

Lecturers first run TERAS on their own notebooks. Faculty servers join as the main for people without one and as burst for those who have one, backing each other up. Later a campus data centre becomes the main site for compute and data, with every earlier install still linked.

Encrypted backups

Scheduled, AES-256-GCM, to a folder, another site, S3, Google Drive or OneDrive.

No downtime

Drain and remove a node, or hand the main role over, while people keep working.

All in the panel

Connect, accept, join and promote without scripts or the command line.

10 · Architecture & APIs

A few small services acting as one

Only the Gateway is published. Everything else stays inside the deployment: model manager, media, trainer, knowledge worker, automation and channels, on one PostgreSQL database replicated per site.

People and appsHTTPS · session or API key
Console in browserPhone and installable appREKAPERISAITETAMUMOM StudioS.A.L.T NEXUSAny OpenAI, Anthropic or Ollama app
Gateway · the TERAS corethe one published service
Console and admin panel/v1 APIAccounts, SSO, roles, keysRouting and policyPersonalisationTool loopKnowledge searchAgents, schedules, channelsGuardrails and quotasAuditSites, nodes, backups
Inside the deploymentinternal services
Model ManagerMedia: speech, voices, picturesTrainerCompute agentsKnowledge workerAutomationChannelsPostgreSQL + pgvector

Compatible with what is already built

InterfaceFor
/v1/chat/completions · /v1/responsesOpenAI-compatible apps and agents, streaming and tools
/v1/messagesApps written for Anthropic's Messages API
/api/chat · /api/tagsOllama-compatible tools, unchanged
/v1/embeddings · /v1/rerankSearch vectors and re-ranking from local models
/v1/audio · /v1/imagesSpeech to text, read aloud, pictures
/mcp · webhooksTERAS as an MCP server for other agents; signed events for other systems
11 · Security & governance

Sovereign by design, accountable by default

Every request, sign-in, change and tool call goes into an audit log chained by hash, so any alteration or deletion shows: who, what, which model, where it ran, the result and the tokens.

TerbukaTerhadSulit · never leaves the siteRahsia · named nodes onlyRahsia Besar

Data classification routing decides where each request may be processed.

Air-gap enforced

Cloud needs hybrid mode and the person's permission; cloud items are labelled.

Data loss prevention

IC numbers, accounts and secrets masked, warned or blocked per route.

Injection screening

Documents, web pages and tool results checked before reaching the model.

Strong sign-in

Argon2id, authenticator codes, SSO, LDAP, SAML and SCIM.

Signed between sites

HMAC-SHA256 requests, time-limited and used once.

Red-team tested

Moderation and red-team test sets in Model Studio, with PERISAI.

Audit log with Verify chain: who, what, which model, where it ran, the result and the tokens.
Audit log with Verify chain: who, what, which model, where it ran, the result and the tokens.
12 · Administration & branding

Your people, your rules, your brand

Single sign-on, roles, groups, keys and quotas in one panel, with a view-only admin role for oversight.

Sign-in your way

Google Workspace, Microsoft Entra ID, Keycloak, any OIDC, SAML, LDAP; SCIM provisioning.

Keys with limits

Site and personal keys with permissions, model limits, expiry and rotation.

Quotas and tenants

Limits per person, group or department; several organisations on one site.

Two-level white label

Level 1

Client branding

The client's name, logo, colours and window styles; S.A.L.T CI co-branding remains.

Level 2

Reseller white label

The reseller's brand throughout; a small "Built on S.A.L.T CI Framework" notice remains.

Licence and fleet

Each site carries a signed licence: online activation or an offline file for air-gapped sites. An expired licence never locks people out of their data. A fleet view shows versions, health and updates, with signed online and offline updates.

13 · Deployment & hardware

Runs on whatever you already have

Not tied to any machine, vendor or size. Mix new and old cards, vendors, GPU and CPU machines in one site.

HardwareEngineNotes
NVIDIA GPUsCUDAx86 and ARM; one or several cards
AMD GPUsROCm or VulkanData-centre and desktop cards
Intel GPUsVulkan or SYCLDiscrete and integrated
Older GPUs, any vendorVulkanA second life as compute agents
Apple siliconMetalAs a site or a compute agent
Any CPUCPUEvery feature works, more slowly

Sizing

1–10 peopleNotebook

16–32 GB memory, 8 GB GPU, models up to ~8B.

10–100Department

64–128 GB, one or two 16–48 GB GPUs, up to ~32B.

100+Organisation

Multi-node GPU site plus agents; 70B and larger.

1,000+National

Several linked multi-node sites sharing compute.

Install in minutes, upgrade in one click

A Windows installer with a system check, one script for Linux and macOS, a Helm chart, and an offline bundle on USB for sites that never connect. Upgrades take a backup first. Runs on notebooks and rugged machines, bare-metal servers, VMware, Hyper-V, Proxmox, KVM, sovereign or public cloud, Docker, Podman or Kubernetes.

14 · Why S.A.L.T CI TERAS

One accountable core instead of three products

TERAS compared with the previous S.A.L.T CI generation and a typical open-source chat stack, as an organisation would install it.

CapabilityTERASPrevious generationOpen-source chat stack
Runs models without another productYesNeeds a model serverNeeds a model server
Any GPU vendor or age, mixed in one siteYesPartlyNo
OCR in Malay and English built inYesExternalExternal
Personalisation for every modelYesModel per personBasic
Test sets, judge, scorecards, fine-tuningYesNoArena only
Linked sites and multi-node failoverYesPipeline onlyNo
Hash-chained audit, classification routingYesNoNo
Encrypted backups to five targetsYesNoNo
Full white label for clients and resellersYesLicence limitsLicence limits

Built in the open

TERAS is written by S.A.L.T CI. It stands on credited open-source parts such as llama.cpp, whisper.cpp, stable-diffusion.cpp, Piper, Tesseract, PostgreSQL and pgvector, listed in its NOTICE file.

Proven where it matters

S.A.L.T CI ran air-gapped at government, university and defence proofs of concept. TERAS makes that the default.

Part of one sovereign platform

TERAS runs on the TERAS core with the same sign-in, audit and models as every other S.A.L.T CI application.

WhatsApp