Skip to main content
QWED Finance v3.0.1 is the current release. It fixes three security advisories: ISO 20022 business rules now read the parsed XML, sanctions screening resists in-word perturbations, and QueryGuard rejects MySQL executable comments. See the overview for details.

​
Overview

QWED Finance is a verification library for AI financial agents, banking pipelines, and financial LLM applications. An LLM proposes a number, a decision, a payment message, or a query; QWED Finance recomputes or checks it deterministically before your system acts on it. It combines formal and high-precision tools: SymPy for cash-flow maths, Z3 for the AML rule, mpmath and Decimal for pricing and risk, XML parsing with required-element rules for ISO 20022, field checks on the framed text of SWIFT MT messages, and the SQLGlot parser for SQL safety.
The principle: LLM text generation is probabilistic; financial accounting is exact. QWED Finance checks LLM outputs against deterministic computations and fails closed when an input is ambiguous or malformed.

​
Get started

1

Take the model's claim

A figure, a decision, a payment message or a query your model produced.
2

Call the guard for it

For example verify_npv for an NPV, verify_aml_flag for an AML decision, or verify_readonly_safety for a query. The guard recomputes or checks it.
3

Act only on a verified result

A rejected or unparseable result goes back to the model or to a person, never into your systems.
The Quickstart runs a full example in Python and Node.js.

​
Key capabilities

11 verification guards

Compliance, Calendar, Derivatives, Message, ISO, Query, Cross, Bond, FX, Risk, and Trading.

Exact arithmetic

Decimal and mpmath precision for bond pricing, option Greeks, IRR, NPV, FX, and risk metrics.

Receipts and audit logs

Verification receipts with keyed HMAC-SHA256 signatures, an audit log, and AML/KYC/sanctions checks.

Integrations

OpenAI-compatible tool calls through Open Responses, the Universal Commerce Protocol (UCP), and a GitHub Action for CI.

​
What’s new in v3.0.x

v3.0.1: security fixes

  • ISO 20022 business rules read amounts and currencies from the parsed XML tree (GHSA-mrrj-6m2q-jch9).
  • Sanctions screening folds diacritics and look-alike letters and compares separator-free names (GHSA-mv2c-jwm9-pfrq).
  • QueryGuard rejects MySQL /*! ... */ and MariaDB /*M! ... */ executable comments (GHSA-q8r4-6gpp-5fx2).
  • VerificationReceipt.get_signature(key): HMAC-SHA256 over all receipt fields, with no default key.
  • ISO amount and currency limits in receipts and UCP; verify_iso20022_payment takes kyc_verified.
  • Fail-closed AML, sanctions, amount, and message validation.
  • Breaking (npm): the @qwed-ai/finance bridge sends JSON over stdin with runtime validation; malformed inputs are rejected.
See the full changelog.

​
Quick navigation

Quickstart

Install qwed-finance or @qwed-ai/finance and run your first check.

Verification guards

Explore the 11 verification guards with working examples.

CI/CD Action

Verify financial calculations in GitHub Actions.
QWED Finance is part of the QWED verification ecosystem. For the core protocol and other modules, see docs.qwedai.com.