Applied artificial intelligence

We do not advise on AI. We build the systems it runs on.

Inference engineering, model adaptation, routing, retrieval and the non-language models that handle what language models get wrong — plus the governed runtime underneath. Koi Consulting is a principal co-founder of Orchard AI, and we deploy it inside your infrastructure.

The platform

The operating system for an enterprise that runs on AI.

Sovereign AI Infrastructure

Model hosts rent you capacity. Orchard gives you an operating system: a governed runtime where models, memory, tools and agents are components you own, swap and compose — running on your metal, under your policy, learning your business.

Corporate rulesets are enforced at the point of action rather than waiting on a release. The work your organization has already solved becomes findable to everyone in it. Frontier models when you want them, local models when the data cannot leave — one operating system either way.

Rent a model and you rent capability. Own the operating system and the capability compounds into an asset. That distinction is the whole argument, and it is why we co-founded the platform instead of reselling one.

Research & engineering

We do considerably more than chat with an LLM

Most firms selling AI consulting are selling prompt engineering. They wrap a vendor API, call the wrapper a platform, and bill for the integration. That work is real but it is shallow, and it is not what we do.

We build the layers underneath. Inference engineering, model adaptation, routing, retrieval, evaluation harnesses, and the non-language models that handle the problems language models are wrong for. The platform work is ours, which is why we can change it when a client needs something the market has not shipped yet.

01

Inference engineering

Throughput on autoregressive decoding is bounded by memory bandwidth, not compute. The fix is to stop generating one token per forward pass. We work in speculative decoding — draft candidates cheaply, verify them in a single pass of the target model, keep what survives.

Our implementation is a Medusa-derived multi-head arrangement: additional decoding heads predict several positions ahead, candidate continuations are laid out as a tree, and verification happens in one batched forward pass under a modified attention mask. The published method is a starting point. What actually determines whether you get a usable speed-up is head count and depth against the target model, how the candidate tree is pruned, the acceptance criterion, and how the heads are trained on the distribution the deployment actually sees. That tuning is ours and it stays ours.

The number that matters is accepted tokens per forward pass. Raw tokens per second is a marketing figure.

02

Adaptation, not fine-tuning theater

Full fine-tunes are expensive, destructive to base capability, and immediately stale. We fit parameter-efficient adaptation layers instead — per user, per team, per domain — composed onto the base model at load rather than baked into it.

Layers are versioned, inspectable and reversible. A trading desk, a claims unit and a platform team each get a system tuned to their vocabulary, their risk posture and their tools without four separate deployments and without four separate training budgets. When the base model is replaced, the adaptation is refitted, not rewritten. Adaptation stays an engineering artifact under change control rather than an opaque drift nobody can audit.

If you cannot diff it, roll it back, and say what changed, it is not adaptation. It is damage.

03

Routing as a systems problem

Mixture-of-experts selection at the request boundary, not inside the model. A classifier decides the smallest sufficient model for each request — local or frontier — against cost, latency, sensitivity and jurisdiction.

Most enterprise AI spend is a frontier model answering questions a 7B parameter model on your own hardware would have answered correctly. Routing recovers that without conceding capability on the hard work, and it is where sovereignty actually gets enforced: a request touching regulated material is routed in-perimeter as a policy decision, not as a code change.

Roughly half of observed frontier spend in the estates we have instrumented never needed a frontier call.

04

Retrieval that is not chunk-and-pray

Cosine similarity over text chunks retrieves passages that resemble the question. That is not the same as retrieving the passage that answers it, and in a codebase it is frequently worse than grep.

We run a structural index alongside the embedding store — a graph over code, documents and decisions queried by relationship rather than by keyword or distance. Traversal answers dependency questions correctly because it follows real edges. Embeddings handle the fuzzy end. The combination is what makes retrieval survive contact with a large estate, where the naive approach degrades exactly as the corpus gets valuable.

Relationship queries beat similarity queries on anything with structure. Code has structure.

05

The models that are not language models

A transformer is the wrong tool for a large share of enterprise problems, and reaching for one anyway is the most expensive mistake in the current cycle. Much of our applied work uses nothing of the kind.

Time-series forecasting and anomaly detection on operational and financial telemetry. Gradient-boosted trees for tabular classification, where they still beat deep models on most real datasets. Computer vision and OCR pipelines for document and forensic work. Signal processing across sensor networks, including indoor localization by three-axis Delaunay triangulation on commodity hardware. Graph algorithms for dependency and fraud topologies. Federated approaches where the training data legally cannot be centralized.

Ask what the model is for before asking which model. It eliminates most candidates immediately.

06

Local inference on real hardware

Sovereign deployment is a hardware problem before it is a policy problem. Getting useful inference out of on-premise equipment is quantization, KV-cache management, batching strategy and honest measurement.

We quantize, evaluate the degradation rather than assuming it, size the KV cache against real concurrency, and tune batching for the arrival pattern the deployment actually has. Then we measure it against the frontier baseline on the client’s own tasks. Sometimes the answer is that local is fine. Sometimes it is that a subset must route out and the policy has to accommodate it. Both are legitimate; guessing is not.

Quantization degradation is task-specific. Benchmark scores will not tell you whether it broke your workload.

07

Evaluation, or none of this is knowable

You cannot improve what you do not measure, and public benchmarks measure a distribution that is not yours. Every deployment gets a harness built against the client’s own tasks and their own definition of correct.

Regression suites run on model change, adapter change, routing change and prompt change, because all four are silent failure modes. Behavioral drift is caught by the harness rather than by a user complaint six weeks later. This is unglamorous and it is the single highest-value thing most enterprise AI programs are missing.

A model swap without a regression suite is a production change with no rollback signal.

We read the literature and we reproduce it

Papers are read, implemented and measured against our own workloads before anything reaches a client system. A published speed-up on one model family frequently does not transfer, and the only way to know is to build it.

We ship the platform we research on

The research is not a side activity that feeds a blog. It goes into Orchard AI, which we co-founded and operate. Same codebase, same runtime, same production estates.

We say when it does not work

A good deal of R&D produces a negative result. We report those, because a client who is told a technique will not help them has been given something genuinely valuable.

The argument

Six things that have to be true before AI is safe to run on real work

01

Sovereign by construction, not by contract

Managed platforms put your proprietary context inside someone else’s boundary and hand it back as an API. We invert that. The runtime, the memory store, the orchestration layer and the knowledge graph deploy inside your perimeter. Weights, embeddings, recall indices and audit trails never require an egress.

02

Errors stop compounding

Most AI failure is not a single wrong answer — it is the same wrong answer, re-derived indefinitely, because nothing durable was written down. Every correction, constraint and dead end is committed to a persistent recall layer and enforced by policy hooks at the agent loop. The system is not infallible; it is non-repeating.

03

Governance that ships at the speed of policy

A control that lives in a document is a suggestion. A control that lives in a release backlog arrives two quarters after the exposure. Rules are authored centrally, versioned, and enforced deterministically at the point of action — no development cycle between a policy decision and its enforcement.

04

Someone already solved it

The most expensive work in a large enterprise is the work done twice. A semantic index spanning teams, repositories and business units surfaces the prior solution with its author, its constraints and the reasons it was built that way. Silos stop being a function of org structure.

05

Models are components, not commitments

A gateway abstracts frontier APIs and local inference behind one contract, so routing decisions — cost, latency, sensitivity, sovereignty — are made per request rather than per contract. Swapping a model does not cost you your accumulated context, because memory lives in the platform.

06

Contractors work on the asset without holding it

Outsourced and offshore delivery normally means handing over the thing you are protecting. A subcontractor is instead granted a scoped interface onto the asset — they can query, build, test and ship against your code and data while the underlying IP stays resident. Access ends when the contract does.

Platform architecture

Fourteen layers, one estate

What each layer does, and what it changes for the enterprise running it.

LayerFunctionEnterprise effect
RuntimeENGINEFault-tolerant concurrent runtime supervising agents, sessions and events across the estate.Long-running autonomous work that survives failure and restart.
MemoryTRELLISDurable recall keyed to your retrieval patterns; secrets sealed and excluded from the index.Facts are derived once. Re-derivation cost trends to zero.
KnowledgeGRAPHStructural index across code, documents and decisions, queried by relationship rather than keyword.Answers trace real dependencies instead of guessing from text.
RoutingGATEWAYOne contract over frontier and local models; policy decides which runs where.Sensitive workloads stay in-perimeter with no code change.
CoordinationMESHCross-machine dispatch, shared event bus and conflict detection between concurrent agents.Fleets collaborate instead of colliding.
GovernanceHOOKSDeterministic policy fired at agent decision points, not appended as guidance.Controls that hold under autonomy, and evidence for audit.
ComplianceRULESETSCorporate, regulatory and internal controls compiled to enforcement points and versioned like code.Policy changes take effect on publish. No release train.
DistributionSEEDPACKSVersioned capability bundles published once and applied estate-wide.One team’s hard-won method becomes every team’s default.
DiscoveryINDEXSemantic index across every team’s code, decisions and post-mortems.Work already solved elsewhere is found before it is rebuilt.
AdaptationGRAFTSUtilization patterns compiled into inspectable, reversible specialization layers per user, team or domain.One platform serves divisions with genuinely different needs.
EfficiencyMOE ROUTINGMixture-of-experts selection sends each request to the smallest sufficient model, local or frontier.Unit cost falls without conceding capability on hard work.
AssuranceFINGERPRINTBoundary classification and content fingerprinting of regulated, privileged and customer data.Sensitive material is recognized and contained by construction.
ContainmentGATESEvery egress path from the owner’s infrastructure is an explicit, logged policy decision.Data residency is architectural, not contractual.
MediationSCOPED ACCESSThird parties act on assets through permissioned interfaces rather than receiving copies of code or data.Outsourced delivery without handing over the IP.

Measured economics

What it is bought for

Time, efficiency, resources and quality — measured on instrumented workloads rather than asserted in a proposal.

~50%+
Token spend reduction

Recall replaces re-derivation; local routing absorbs work that never needed a frontier call.

65–75%
Output compression

Response-shaping cuts generated tokens without loss of technical fidelity.

0
Egress required

Sovereign deployment keeps regulated workloads inside the perimeter by construction.

0
Dev cycles per policy change

Rulesets are published, not shipped. Enforcement is live estate-wide the moment a control changes.

Time

Context is prepared before it is requested, and answers already derived are recalled rather than recomputed.

Efficiency

Mixture-of-experts routing matches each task to the smallest sufficient model, local or frontier, per request.

Resources

Duplicate effort is surfaced and stopped; existing internal solutions are found before new ones are commissioned.

Quality

Standards are enforced deterministically at the point of action, so conformance does not depend on recall or diligence.

One week of training, and a lifetime of capability.

Adoption is measured in days because routing learns your enterprise rather than asking your enterprise to learn it. What it acquires in that week — your conventions, your controls, your solved problems — it keeps, extends and compounds for as long as you run it.

Economics reflect platform-instrumented savings measured against the same workloads run without recall, routing and response-shaping enabled. Realized figures vary with workload mix, model selection and deployment topology.

Our engagements

How Koi delivers it

Co-founding the platform is the credential. These are the engagements we are actually retained for.

01

AI readiness and architecture

An honest assessment of where machine intelligence actually pays in your estate, what your data will and will not support, and what it costs to run in production rather than in a pilot.

  • Estate and data-flow assessment
  • Model strategy: frontier, local, hybrid
  • Unit-economics modelling before commitment
  • Regulatory and residency constraint mapping
02

Sovereign deployment

On-premises, private cloud or air-gapped installation of a governed AI runtime, so regulated and privileged material never leaves infrastructure you own.

  • On-prem, private cloud or air-gapped
  • Multi-machine mesh with cross-node dispatch
  • Local inference for data that cannot leave
  • Gated, logged egress by architecture
03

Governance and audit

Corporate standards and regulatory obligations compiled into controls that fire at the point of action, with a durable record of every decision, gate, escalation and override.

  • Rulesets authored once, enforced estate-wide
  • Production gates and destructive-action confirmation
  • Full session audit trail as a query, not a reconstruction
  • Per-jurisdiction and per-division policy scoping
04

Agent workflow engineering

Real work moved onto coordinated multi-agent execution — with memory, conflict detection and hand-off — instead of an assistant that forgets everything between sessions.

  • Multi-agent dispatch and coordination gates
  • Persistent institutional recall across sessions
  • Capability packs distributed estate-wide
  • Durable watchers and long-running autonomous work
05

Data intelligence

Analytics, warehousing and pattern work aimed at the questions that change decisions — trend identification, early warning, and the reconciliation nobody wants to own.

  • Data warehousing and analytics platforms
  • Trend and anomaly identification
  • Validation and reconciliation engines
  • Boundary classification and content fingerprinting
06

Mediated delivery

Contractors and offshore teams build against your code and data through a scoped interface, with the underlying IP resident and unexposed and access ending with the contract.

  • Scoped interface onto assets, not a copy
  • Per-engagement permission scope
  • Attributable action-level audit
  • Access terminates with the engagement

Common questions

Enterprise AI, answered plainly

What is sovereign AI infrastructure?

Sovereign AI infrastructure means the AI runtime, memory store, orchestration layer and knowledge graph are deployed inside the organization that owns the data, rather than inside a vendor boundary. Weights, embeddings, recall indices and audit trails never require an egress, so data residency is a property of the architecture rather than a contractual promise. Koi Consulting deploys this model on-premises, in private cloud, or air-gapped.

What is Orchard AI?

Orchard AI is a sovereign AI infrastructure platform positioned as the operating system for an enterprise that runs on AI. It provides a governed runtime in which models, memory, tools and agents are components the enterprise owns, swaps and composes. Koi Consulting is a principal co-founder of Orchard AI.

How does Koi Consulting reduce AI running costs?

Three mechanisms. Persistent recall replaces re-derivation, so a fact is computed once and recalled thereafter. Mixture-of-experts routing sends each request to the smallest sufficient model, local or frontier, per request. Response shaping compresses generated output without loss of technical fidelity. Platform-instrumented measurements show roughly fifty percent or greater token spend reduction and sixty-five to seventy-five percent output compression against the same workloads run without those features.

How is AI governance enforced rather than merely documented?

Corporate standards and regulatory obligations are compiled into policy hooks that fire at agent decision points. Prohibited actions are blocked before execution rather than requested in a prompt, which is the property that holds under autonomy. Rulesets are versioned and take effect on publish, so there is no development cycle between a policy decision and its enforcement, and every decision, gate, escalation and override is captured as a durable audit record.

Can contractors work on our systems without receiving our intellectual property?

Yes. A subcontractor is granted a scoped interface onto the asset rather than a copy of it. They can query, build, test and ship against the code and data while the underlying IP stays resident and unexposed. Permissions are scoped per engagement, every action is attributable, and access ends when the contract does.

Next step

Own the operating system.

If the question on your desk is what your agents are doing and who is in control of them, that is the conversation we are built for.