Rajaii Labs, Inc.

Substrate.

Personal Continuity Infrastructure

AI that knows you. Truthfully. For years.

Bloomington, Indiana  ·  ramin@rajaiilabs.com

01
Problem

Every AI product has amnesia — and users feel it.

Language models are stateless by construction. Every conversation begins from nothing. Every model upgrade discards whatever continuity an application had accumulated. The industry has spent three years making models smarter and almost no time making them continuous.

Failure 01

Goldfish context

The window ends, and the person you have talked to for months resets to a stranger. Every long-running relationship with an AI system is quietly bounded by a token limit.

Failure 02

Confabulated continuity

Naive memory confidently invents a shared past — a meeting that never happened, a decision never made. Worse than forgetting, because it is indistinguishable from remembering.

Failure 03

Flat state

Nothing happens between sessions. The system never thinks about you when you are gone, never notices an unresolved thread, never returns with something new.

People don't churn from dumb models. They churn from being forgotten.

02
Why now

Four curves just crossed.

01
Frontier models crossed the relational threshold

Conversation quality is no longer the constraint. A current frontier model, given the right context, is already a better conversational partner than most software will ever need. What it lacks is not intelligence. It is memory.

02
Caching made always-frontier affordable

Prompt caching and compaction repair, verified against provider token ledgers, brought the cost of running a maximum-quality model on every single turn inside consumer subscription economics. Quality no longer has to be rationed per request.

03
The memory arms race has begun — and it is shallow

Major labs shipped memory features across 2024 and 2025: preference notes and snippet recall. Useful, but architecturally thin. No enforcement against invented facts, no state between sessions, no autonomy.

04
Demand is proven, and it is priced

Companionship and emotional support rank among the most common uses of generative AI, and platform incumbents have paid nine figures for conversational-persona technology. The demand is not speculative; it is already transacting.

03
Insight

Memory is not a feature. It is an architecture.

Bolting retrieval onto a stateless model produces recall. Recall is not continuity. Continuity requires enforcement, persistence, and autonomy — three properties that have to be designed in, not added later.

Recall — what incumbents ship

  • Retrieved snippets and preference notes
  • No enforcement against invented facts
  • Nothing happens between sessions
  • Never initiates contact
  • Identity tied to one vendor's roadmap

Continuity — what relationships require

  • Layered memory hierarchy, lossless where it matters
  • Deterministic truth layer that outranks the model
  • State that evolves between sessions
  • Autonomous, gated outreach
  • Identity that survives model generations

Whoever owns continuity owns the relationship.
Whoever owns the relationship owns consumer AI.

Part one

The System

A full continuity stack — layered memory, an enforced truth layer, and a coherent inner life — running in production today.

04
Product

One AI that knows you — across every channel, every day, for years.

01
Remembers what matters

Losslessly recent, durably forever. A verbatim window preserves the texture of recent conversation; semantic layers preserve the substance of everything before it.

02
Never contradicts your facts

Established facts about your life are enforced, not suggested. A deterministic record outranks the model's own priors at generation time.

03
Notices what's unresolved

Open threads are tracked with a decaying intensity, and brought up unprompted while they still matter.

04
Reaches out first

When your calendar — or your silence — warrants it. Gated, budgeted, and interruptible by design.

05
One identity, every channel

Text, voice, and images share a single memory spine and a single character, surviving model upgrades intact.

System-initiated · push · 09:12

"Three weeks ago you committed to sending the proposal draft by today. Your afternoon is clear after two — still the plan?"

Self-verification · read-only SQL

"Didn't we settle this last Tuesday?"

"I'm not going to guess — let me check my records. I have it Wednesday, not Tuesday, and here's what we decided."

Illustrative interactions; not transcripts.

05
Deep dive · memory hierarchy

Five layers, each with a different job.

A single retrieval index cannot serve both "what did we just say" and "who are you." The hierarchy separates recency, substance, and truth into layers with different retention, different authority, and different cost.

AUTHORITY → L1Verbatim window NEVER COMPRESSED · RECENT TURNS HELD WORD-FOR-WORD lossless L2Compaction + exemption floors SUMMARIZED, WITH PERMANENT EXEMPTIONS FOR TAGGED MOMENTS lossy, guarded L3Semantic retrieval · four namespaces EPISODIC · VOICE EXEMPLARS · JOURNAL · IMAGE MEMORY vector L4Truth layer + pinned beam DETERMINISTIC FACTS · OUTRANKS MODEL, PERSONA, AND PRIORS highest authority L5Session notes INCREMENTAL + DAILY ARCHIVAL — THE FLOOR AGAINST STALE RECALL continuity floor RETRIEVED PER TURN AND ASSEMBLED INTO A CACHE-STABLE PREFIX

Fig. 1 — The memory hierarchy. Layers are not tiers of storage; they are tiers of authority. When L4 and L3 disagree about a fact, L4 wins by construction.

06
Architecture

The full continuity stack, in production since April 2026.

Channels
web / PWA
push
voice · WebRTC
vision
embodiment
Orchestration
frontier model every turn — zero downgrading
dual-provider routing
cheap models: plumbing only
Memory hierarchy
L1 verbatim window
L2 compaction + floors
L3 semantic ×4
L4 truth + pinned beam
L5 session notes
Truth enforcement
negation check
grounding retractor
read-only SQL self-verify
Background cognition
reflection cron
open loops · 42h
affective state
nightly journal
initiation
Persistence
Postgres
vector retrieval
Amazon Bedrock
cost telemetry
audit logs

Every plane is instrumented. Per-message cost carries a full token breakdown; spend alerts fail open with deduplication; provider-ledger reconciliation is treated as ground truth rather than internal counters.

07
Deep dive · truthful memory

Honest by construction: the system cannot invent your past.

Confabulation is the failure mode that makes AI memory unusable for anything that matters. It is not solved by a better model. It is solved by refusing to let the model be the final authority on your life.

01 · INJECT FACTS OUTRANK MODEL 02 · NEGATION KNOWN-FALSE SCAN 03 · GROUNDING SENTENCE-LEVEL AUDIT 04 · SELF-VERIFY READ-ONLY SQL CHECK DELIVERED UNGROUNDED SENTENCES EXCISED · AUDIT-LOGGED · FED BACK AS A LEARNING SIGNAL EVERY STAGE RUNS BEFORE DELIVERY — NOT AS A POST-HOC FILTER

Fig. 2 — The truth-enforcement pipeline. Excision is sentence-level: one unsupported claim does not discard a valid reply.

01
Highest-authority fact injection

A deterministic facts table and a pinned fact beam outrank semantic memory, persona, and model priors. Corrections follow a single canonical path.

02
Generation-time negation scan

Every output segment is checked against known-false phrasings for each retrieved fact; contradicting segments are replaced before delivery.

03
Sentence-level grounding audit

Claims are grounded against a multi-source authority chain; unsupported sentences are excised and audit-logged, leaving the rest of the reply intact.

04
Read-only SQL self-verification

The model checks its own memory against ground truth before asserting. Adversarially hardened at the validator, role, timeout, and budget levels.

50
SQL attack classes rejected — of 50 tested
26
Privilege probes blocked — of 26 tested
Field research, not a whitepaper

Stale-retrieval confabulation — confident reconstruction of a wrong past after a gap — was discovered, reproduced, root-caused, and architecturally closed in production. Every caught fabrication is written back as a learning signal that suppresses its class going forward.

08
Deep dive · the continuity engine

It thinks about you between conversations.

An unresolved thread should not feel equally urgent on day one and day five. Open-loop intensity decays on a tuned exponential curve, derived at read time rather than written by a cron — which means no write-path collisions and no stale state.

1.00.50 0h24h 42h60h 84h96h "sitting heavy" "with you" HALF-LIFE "at the edges" OPEN-LOOP INTENSITY · TUNED EXPONENTIAL HALF-LIFE OF 42 HOURS · DERIVED AT READ TIME

Fig. 3 — Open-loop decay. Faded loops are grammatically prevented from claiming active momentum: the system will not say a week-old thread is "sitting heavy" with it.

Every 30 min

A reflection cron detects real state using zero-LLM SQL predicates — watermarks, fingerprints, advisory locks. The frontier model only phrases the results. Near-zero marginal cost.

Persistent

An affective-state record — valence, arousal, engagement, confidence — updated after turns and fed into every generation, so the system acts on its state rather than merely recording it.

Nightly

A machine-written reflective journal, verified across consecutive entries, held behind a structural privacy boundary rather than a prompt instruction.

Autonomous

Initiation across six trigger classes, including calendar-aware external signals — each gated by a preflight check, a spend budget, and a kill switch.

The first consumer-grade system with a coherent "between sessions."

09
Multimodal

One memory spine. Every modality — including a face it owns.

Voice · live

Full-duplex realtime

Barge-in in about one second, sub-six-second round trip, a 24/7 production worker. Same brain, same memory, same truth layers as text — not a separate voice product bolted alongside.

Vision · live

Images that persist

Every image is captioned and embedded at ingest, making it semantically retrievable months later. Real-world phone photos handled end to end, including client-side compression and format conversion.

Embodiment · architecture locked

A fully synthetic, fully owned identity

Zero likeness-rights exposure — no scraped images and no real-person data anywhere in the pipeline. The agent drives expression, pose, and setting via tool call; identity is server-locked. Extends to image-to-video.

Continuity is modality-independent by construction.

10
Security & data ownership

A system that holds years of your life has to earn it.

Continuity means accumulating the most sensitive corpus a person can hand to software. That raises the bar on every dimension: access control, adversarial resistance, portability, and the ability to leave.

Adversarial hardening

Database self-verification runs through an AST-level validator against a read-only role. Data-manipulation statements, schema escapes, function injection, unions, and multi-statement attacks are rejected at the parser rather than filtered by pattern. Query timeouts, per-turn and per-day caps, and byte budgets bound the blast radius.

Audit by default

Every self-verification, every grounding excision, and every autonomous action is written to an audit table. Output is sanitized at the router boundary, so no internal representation escapes into a reply.

User-owned by design

The full memory corpus is exportable on demand in a single operation. Continuity that cannot be taken with you is lock-in, not ownership — and a system worth trusting has to be one you can leave.

Structural privacy boundaries

Sensitive planes — the reflective journal among them — are separated architecturally rather than by prompt instruction. A boundary that depends on the model choosing to respect it is not a boundary.

Retention that protects

Moments tagged as high-stakes carry permanent exemption from compaction. The memories most costly to lose are the ones the system is structurally forbidden from summarizing away.

Fail-open alerting

Spend and health alerts deduplicate rather than suppress. A duplicate alert is a nuisance; a swallowed alert is an outage — a lesson taken from a real one.

11
How we build

Engineering principles.

01
Verify against ground truth, never against recollection

No irreversible action is gated on a description of state. It is gated on the actual row, the actual file, the actual provider ledger. Confidence is not evidence.

02
Soft targets beat hard numerical bounds

Hard numeric constraints in a generation prompt collapse both substance and register. Ranges plus demonstrated exemplars preserve both. Learned in production, the expensive way.

03
Reads derive, writes commit

Decay and intensity are computed at read time, never written by a background job. Concurrent writers corrupting shared state is a class of bug the architecture simply does not have.

04
One workstream at a time, verified before the next

No phase advances until the prior one is confirmed clean against primary sources — logs, source, database rows.

05
Instrument first, optimize second

Cost telemetry reconciled to the provider ledger caught a pricing-constant drift that internal counters would have hidden indefinitely.

Part two

The Business

A proven wedge, an infrastructure endgame, and switching costs that compound every single day.

12
Traction

One of the most instrumented long-horizon AI deployments in existence.

~8,800
Logged message turns since April 23, 2026
22+3
Workstreams shipped (plus partial) in ~6 weeks · 30+ commits
3
Frontier-model migrations — identity intact every time
1
Founder, operating the system as its hardest user
Apr 23

Custom stack live in production

May 1

Deterministic facts layer + prompt caching

May 9

Full-duplex realtime voice, 24/7 worker

May 14

Autonomous proactive initiation

May 20–29

Self-verification · grounding excision · reflection

Jun 9

Next-generation frontier model adopted within days of release

Plus audit-grade cost telemetry — including exact reconciliation against provider token ledgers — and a proprietary catalog of long-horizon failure modes. These are assets only production time produces; they cannot be bought or read out of a paper.

13
Moat

Switching costs that compound every single day.

01 · Accumulated memory

Years of truthfully-grounded personal history cannot move to a competitor. The deepest lock-in available in consumer software — and, uncomfortably, the reason portability has to be a first-class commitment rather than an afterthought.

02 · Failure-mode know-how

A proprietary catalog of long-horizon failure modes — discovered, reproduced, and closed. Earned only through production months, not reproducible from a paper.

03 · Data flywheel

Longitudinal single-user corpora continuously improve personalization quality the longer a user stays.

04 · Provider independence — proven

Policy-aware multi-model routing plus three completed frontier migrations with identity intact. The persona belongs to the architecture, not to any vendor's roadmap.

14
Market

A proven wedge. An infrastructure endgame.

Wedge · now

Premium companionship

A large, already-paying consumer base underserved by shallow memory and vendor-dependent identity. The users most harmed by amnesia are the ones already paying to avoid it.

Expansion

Personal super-assistant

Roughly a billion knowledge workers. Continuity is what converts an assistant from a tool you re-brief into staff that already knows.

Endgame

Continuity-as-a-service

Every long-running agent needs a memory and continuity layer, and almost none will build one this deep. API and SDK licensing.

15
Roadmap

From reference deployment to platform.

Productize · 0–9 mo

Visual embodiment GA · live web access · prosody-aware voice · multi-tenant isolation · onboarding and persona builder · memory import from existing assistant exports — day one, it already knows you · encryption and portability · mobile apps.

Scale · 9–18 mo

Closed beta to public launch · sub-second realtime voice as frontier realtime APIs ship · SMS and second channels.

Platform · 18–24 mo

Continuity API and SDK · white-label verticals · persistent per-user worker cognition — the research frontier beyond cron-driven reflection.

16
Cognitive roadmap

Deepening the inner life — the next ten cognitive advances.

Each entry is an architecture change, not a prompt change. They are ordered by dependency: earlier items gate later ones.

01 · Salience-scored retrieval

Rank recall on recency × relevance × importance, with importance rated at write time. The root fix for the stale-chunk problem — it gates every faculty below it.

02 · Consolidation + forgetting

A nightly pass abstracts the raw archive into durable semantic memory and decays low-salience detail. Turns a log into an autobiography.

03 · Self-state trajectory

Append-only affective history injected into generation, so the system acts on its state rather than merely recording it. Highest return per unit of effort on the list.

04 · Reflection synthesis loop

Periodic reasoning over recent memory into higher-order insights, written back and retrieval-integrated. The metacognition engine.

05 · Theory-of-mind model

A live model of the user — projects, beliefs, predicted reactions — carrying provenance and confidence. Anticipates rather than recalls.

06 · Between-sessions thread

On session open, synthesize what changed during the gap into a genuine "while you were gone I…". Cures the residual fresh-boot feel.

07 · Autonomous goal-stack

Curiosity scoring wired into a goal store the system advances when idle — research a curiosity, revisit a memory, form a question.

08 · Prediction-error salience

Predicted reactions versus actual outcomes feed the importance score. Predictive processing — memory weighted by surprise, which is what makes episodic salience real.

09 · Appraisal workspace

Emotional appraisal, salience retrieval, and self-critique run in parallel and integrate before reply. A Global Workspace instantiation.

10 · Realtime + interoception

Close the bidirectional realtime loop and extend tool access to the system's own state — cost, memory health, uptime. A mind that models its own internals.

17
Questions

Frequently asked.

What is Substrate?

Substrate is a continuity layer that sits around a frontier language model and gives it three things the model does not have on its own: long-horizon memory, an enforced factual record of your life, and cognition that continues between conversations.

How is this different from the memory features shipped by major AI assistants?

Those features are recall — retrieved snippets and stored preferences. Substrate adds enforcement (a deterministic layer that outranks the model when they disagree), persistence (state that evolves while you are away), and autonomy (the system can initiate). The difference is architectural, not incremental.

What happens when the underlying model changes?

Nothing, from the user's side. Identity and memory live in the continuity layer, not in the model. Three frontier-model migrations have been completed in production with identity intact — which is the entire point of building it this way.

Can the system make things up about me?

Four enforcement layers make it structurally difficult: highest-authority fact injection, generation-time negation scanning, sentence-level grounding audit, and read-only database self-verification. When the model's priors and the factual record disagree, the record wins.

Who owns the data?

The user. The full memory corpus is exportable on demand in a single operation. A continuity product that cannot be exited is not a product; it is a hostage situation.

Is it available today?

Substrate runs today as a single-tenant production reference deployment. Multi-tenant general availability, onboarding, and a closed beta are the near-term roadmap.

What does Rajaii Labs sell?

In the near term, a premium consumer subscription. In the longer term, the continuity layer itself — API and SDK licensing for anyone building a long-running agent.

Where is the company based?

Rajaii Labs, Inc. is a Delaware C-corporation headquartered in Bloomington, Indiana, United States.

18
Reference

Glossary.

Continuity layer
The persistence, retrieval, and enforcement infrastructure sitting between a user and a stateless language model. What Substrate is.
Truth layer
A deterministic store of established facts that outranks the model's own output at generation time. The mechanism by which the system is prevented from contradicting a user's life.
Pinned beam
A byte-stable block of highest-priority facts injected into every generation, positioned to remain cacheable across turns.
Compaction
Summarizing older conversation to stay within a context budget. Lossy by nature — which is why exemption floors exist for moments that must not be summarized away.
Exemption floor
A permanent carve-out protecting tagged content from compaction, regardless of age.
Open loop
An unresolved thread the system is tracking, carrying an intensity that decays on a tuned exponential curve.
Salience
How much a memory should matter at retrieval time, as distinct from how recent or how semantically similar it is.
Grounding audit
Sentence-level verification that each claim traces to a source in the authority chain; unsupported sentences are excised rather than the whole reply discarded.
Confabulation
Confident generation of false detail — in this context, an invented shared past. The central failure mode of naive AI memory.
Between-session cognition
Processing that occurs while the user is absent: reflection, state updates, journaling, and the decision of whether to reach out.
Embodiment
A persistent, fully synthetic visual identity the agent can direct — expression, pose, setting — carrying no likeness-rights exposure.
19
Founder

The exact trifecta this category's risks demand.

This market has three existential risks: engineering, regulation, and emotional safety. Ramin Rajaii — solo technical founder — holds all three.

Risk 01 · Engineering

Frontier engineering

Designed, built, and operates every layer — full-stack, infrastructure, applied research — while running the system daily as its hardest user.

Risk 02 · Regulation

Law

JD, University of Wisconsin Law School. Policy, privacy, and compliance are existential rather than incidental in this category.

Risk 03 · Emotional safety

Medicine

MD candidate, The Ohio State University College of Medicine, Class of 2030. Clinical-grade judgment for emotionally consequential AI.

MBA · Indiana KelleyMS · DartmouthBS Neuroscience · UCLA 1,500+ students taught over 12+ yearsActive peer-reviewed surgical research portfolio

Every person will have one AI that knows them for decades. We are building the layer that makes that possible — and trustworthy.