v2.1.2-ce — NLI in SQL, 26–33× faster verification

Released 2026-10-12 · GitHub release

v2.1.2 puts truth verification in SQL: NLI_CLASSIFY, NLI_VERIFY, and NLI_ANCHORS wire the in-process DeBERTa-v3 NLI cross-encoder into the query surface, and dynamic-length ONNX batching makes verification 26–33× faster with bit-identical scores.

Why it matters

Hallucination-gating an AI answer becomes a WHERE-clause decision: store the agent's answer only if it is entailed by the retrieval set — evidence, verdict, and audit row in one database.

NLI in SQL

SELECT NLI_VERIFY('nli-default',
  'The rollout completed without failures.',
  json_array(
    'The deployment finished at 14:02 with zero failed checks.',
    'All 46 post-deploy probes passed.'
  )
) AS verdict;
-- {"verdict":"TRUTH","confidence":0.96,...}

Verdicts are TRUTH, LIE, or UNVERIFIED_PLAUSIBLE; contradiction with any anchor takes precedence over entailment; closed_world: true rejects statements the anchors don't support. NLI_ANCHORS(text) aggregates up to 32 anchors from rows. Full semantics in the SQL reference.

Limits: 32 anchors / 16 KB per text; alias AI functions rather than calling them directly in ORDER BY; NLI results are never served from the SQL result cache.

Verification performance

Operation	v2.1.1	v2.1.2
verify, 1 anchor	394 ms	15 ms
verify, 16 anchors	6.19 s	192 ms
verify, 32 anchors	11.1 s	335 ms
classify, 16 pairs	5.56 s	155 ms

CPU (i5-10400F), pinned nli-default, medians of 7. All 32 release-QA fixtures return identical verdicts vs v2.1.1. Applies to REST and SQL alike.

Fixes & improvements

• Result-cache view check short-circuits when no views exist (hot reads at v2.1.1 parity; view staleness semantics unchanged).
• macOS: install-ce.sh fails fast with working guidance (bootstrap or run-in-place) instead of dying mid-install.
• ONNX Runtime loader errors list the searched paths and the fix.

Upgrade

Drop-in swap from v2.1.x / v2.0.0. Tarball installs: upgrade the whole extracted folder (the engine loads ONNX Runtime from lib/ beside the executable). New installs wanting NLI: synapcores --config <cfg> pull nli-default before first gateway start; readiness at GET /v1/ai/nli/models.

Validation

Validator 246/246 · client-contract replay 8/8 · pristine recipe cert failing-set identical to v2.1.1 (same-day A/B) · read/memory A/B median 1.003×, RSS flat · NLI fixture replay 32/32 · zero SIGILL on non-AVX-512.