Senueren is a sovereign systems bureau based in Cape Town, South Africa. We build deterministic infrastructure for the autonomous economy — Quesen (agent decision layer), Shinren (security research), Qarsar (on-chain intelligence) and Diosen (quantitative intelligence) — and, on the legacy-infrastructure side, bespoke sites and platforms for founders and brands.
Our institutional culture is fixed: evidence over assumptions, data over opinions, reproducibility, honest retirement of weak ideas, and no popularity-as-evidence. Same team, end to end.
Senueren builds deterministic decision, authority and evidence infrastructure for autonomous agents (Quesen), runs evidence-first security research and pre-audit smart-contract review (Shinren), and delivers production-grade platform builds. It is a sovereign systems bureau headquartered in Cape Town.
Quesen is a portable, deterministic decision and authorization layer for autonomous agents. Its live risk engine returns PROCEED / REVIEW / SKIP, and its typed-security-context authorization path returns PASS / REVIEW / BLOCK / SKIP — always with machine reason codes, a pinned ruleset and a replayable receipt, so the same inputs always produce the same output. It interoperates with identity, MCP, payment rails and execution frameworks rather than replacing them.
Yes — evidence-first pre-audit and security review, including runnable proof-of-concept reproductions. We prefer fresh, low-duplication and niche-VM targets, and we never make a severity claim without a proof.
Cape Town, South Africa. Email or WhatsApp via senueren.co.za/contact; we reply within one working day.
Shinren is Senueren's protocol-intelligence and security-research practice. It reviews source and protocol design, reproduces issues with evidence, and reports them responsibly — one operational pillar of Senueren, not a separate agency.
Authorized technical surfaces, scoped per engagement: smart-contract and protocol source (including niche VMs such as Soroban/Rust, not only EVM), agent/MCP tool-execution and authority boundaries, and web/API application surfaces. It is not limited to smart-contract audits.
Along an explicit evidence ladder — Observed, Reproduced, Runtime-confirmed, Reported, Remediated, Retested. A source-level observation is never presented as a runtime-confirmed vulnerability unless a proof-of-concept actually reproduces it; every severity claim carries the evidence that supports it.
Findings follow responsible disclosure. Sensitive exploit detail is shared privately with the asset owner, not exposed publicly to look impressive. Active assessment of any system begins only inside a published program scope or a signed authorization.
Shinren is oriented to authorized assessments and reproducible engineering evidence — a scoped review with a findings log, remediation guidance and a retest path — rather than relying on public bounty marketplaces. Discovery records a request; it never starts an audit without authorization.