Weight provenance: per-file SHA-256 manifests of model weights, signed brain_manifest records on every load/swap, and drift verification — which manitou was in…
Semiont's Rust SDK: the protocol's types, the transport contract and a client of the bus over it, and what a client needs to name its principals and hold its…
Take custody of Windows child processes: exact handle inheritance, kill-on-close jobs, launches into another session's token, and SDDL-secured pipes. Not a…
Constitutional self-modification: every change to a system's own behavior-bearing state is a signed amendment — proposed, deliberated, ratified by tier,…
ontos-data-json/1 — the named, total projection of a domain-JSON document to an ontos/data value. Rust peer of data/json/go and data/json/ts. Depends on…
Bounded autonomy for self-acting systems: an autonomy ladder (off/suggest/safe-apply/full), protected surfaces that never auto-apply, blast-radius caps, rate…
A streaming output firewall: Aho-Corasick pattern kill on the token stream as text forms, structural-form evasion checks, and in-place PII redaction — named…
Dead-man memory escrow: Shamir-split secrets across owned custodians with signed shards, quorum or timed recovery, and recovery certificates — named for the…
A dissenting quorum for agent actions: deterministic seats vote on a normalized risk vector, verdicts carry every vote and rationale, and dissent is scored and…
Temporal policy provenance: pin the policy hash in force at every event, then answer 'what rules governed at time T' forever — named for the painted buffalo…
