◆Accountability
Prove it.
Evidence on every answer; a tamper-evident record of every decision and its reason.
Manifesto
Public institutions deserve an AI they can govern.
A statement of intent. CiviQ is accountable, sovereign, and open — built for correctness and trust, not engagement. Focused on local government first. What follows is what we believe, what we refuse to build, and what is true today.
The moment
A Sunday night, and a sofa.
It was nine o'clock on a Sunday when I tried to book a bulky-waste collection — an old sofa, a bed and a mattress. It should have taken two minutes. It took closer to thirty: clicking between PDFs and website pages, second-guessing every step, nearly giving up to phone a line that wasn't open.
Every fact I needed was published somewhere on the council's site. What didn't exist was a way to actually get helped — a straight, trustworthy answer, at the moment I needed it.
That gap, between information existing and a resident being helped, is the whole reason CiviQ exists.
The diagnosis
The obvious build is exactly wrong for the public sector.
Wire a frontier model to a council website and you inherit everything that model was built for — and none of it fits a public service. The defaults are engagement-optimised, cloud-egressing, black-box, metered per message, and locked in.
A public institution's requirements run the other way. The sector doesn't need a more talkative model. It needs a more accountable system.
What the default optimises for — vs what the sector needs
- ✗Engagement → correctness
- ✗Cloud egress → data stays home
- ✗Black box → glass box
- ✗Per-message meter → flat, sovereign cost
- ✗Lock-in → open by default
What we believe
Ten tenets.
Correct or honestly silent.
Better to refuse than to guess. A wrong answer from a public service costs more than no answer.
The institution sets the policy, not the model.
What CiviQ may answer, refuse, or escalate is your decision — configured, versioned, and editable.
Show your work — glass-box by default.
Every answer carries its sources and checks. Nothing is asserted without evidence.
Data stays home.
Sovereignty is non-negotiable. Resident data does not leave the institution's infrastructure.
Never a dead end.
When CiviQ can't help, it hands over to a named human, with the conversation's context attached.
Memory is organisational, never personal.
It learns what content to improve — never who asked. Privacy by construction, not by promise.
Capability is a system property, not a model property.
Retrieval, grounding, refusal, self-checking and auditing are where capability lives.
Open by default.
Apache-2.0, self-hostable, no lock-in. You can read it, run it, fork it, and leave.
Measure, don't assert.
Refusal correctness, groundedness, and quality are evaluated — claims are backed by a green gate.
Accountability is a feature, not paperwork.
A tamper-evident record built for the Ombudsman, IG, and FOI is part of the product, not an add-on.
The redefinition
From "chatbot" to an accountable system.
"Chatbot" describes the surface and misses the substance. The work isn't the conversation; it's the governed system that decides whether to speak, proves where every answer came from, and records the decision.
The category CiviQ is actually in: an accountable, sovereign citizen-support system for councils and public bodies.
The USP
Three layers no commodity chatbot combines.
The model is interchangeable. The value is in the layers around it.
◆Governance
Control it.
A policy the institution sets and versions, running before the system engages at all.
◆Intelligence
Learn from it.
Every question and refusal becomes a ranked backlog of what to fix, write, and automate next.
The anti-roadmap
What we refuse to build.
Some things we will not ship, not because we can't, but because they're wrong for a public institution.
✗Commitment
No autonomous action on consequential journeys.
Benefits, housing, safeguarding — CiviQ informs and hands over. It does not act on a resident's behalf where the stakes are high.
✗Commitment
No per-citizen profiling.
It learns about content, never about people. No profiles, no targeting, no behavioural dossiers.
✗Commitment
No engagement optimisation.
Success is a resolved question, not time on page.
✗Commitment
No cloud egress by default.
Data stays on your infrastructure unless you explicitly choose otherwise.
✗Commitment
No black-box answers.
If it can't show its sources, it doesn't say it.
Status
What's true today.
CiviQ is an open-source foundation: 228 automated tests, a green accuracy/refusal eval gate on the representative set, and the core capabilities described above are implemented. The next step is a design-partner council running on real content and real traffic.
A project about accountability has to be accountable about itself.
The bigger picture
An open, sovereign, accountable layer for public services.
As AI moves into the institutions that serve everyone, the question isn't whether they'll use it — it's whether they'll govern it, or be governed by a vendor's defaults. Digital sovereignty means a public body can run capable AI on its own terms: its data, its policy, its infrastructure, its right to leave.
An open, sovereign, accountable layer is how that future stays public.
If you run a council, let's run a pilot.
CiviQ is open and self-hostable today. A design-partner council turns a tested foundation into a proven one and shapes what gets built next.