Capability is not authority.

Agent actions are governed, signed, and proven — or they don’t happen.

The mechanism

No permit. No action.

Authorization happens at the action boundary — not the agent’s intent.

Propose
Agent requests action
Govern
Compass checks scope
Authorize
SE Host signs or refuses
Deny
Refused before action
Prove
Hash-committed receipt

Use cases

Where authority matters.

Autonomous agents

Emails, calls, purchases, writes, deletes. Every action needs informed human verification for execution.

Regulated workflows

Finance, health, legal, and defense sectors where decisions need receipts and information requires confidentiality.

Multi-agent systems

Scoped permissions for agent fleets; no worker inherits another agent’s authority and fails closed otherwise.

Compliance & audit

Hash-committed receipts for every action taken, denied, deferred, or redeemed.

Prompt injection

Injected instructions cannot bypass the action boundary or override authority.

Safety controls

Put limits on what agents can do before they touch devices, accounts, or sensitive content.

Local-alpha proof room. Public boundary. Working local alpha. This public evidence surface does not claim production deployment. Authority proof surface Lifecycle proof surface Review proof surface Workbench proof surface Commission proof surface Constitutional controls proof surface

Evidence

Proof — not promises.

superego governance console · local alpha demo
Fleet status
Governed agents4local alpha fleet
Signed permits122 active right now
Policy stateCleanfail-closed default
Session authority
Capability agreement · Diogenes agent-042signed
OperatorSuperEgo local-alpha tenant
Subject lockbaron.dev · non-transferable
Surfacesgraph.write, graph.read, file.read
Deniedshell.exec, net.outbound, fs.write
ExpirySession-scoped · revoked on disconnect
7c3f91a…b204e8
Live feed

See it work

Watch the boundary hold.

A model proposes work without exposing private information, and cannot act without signed authority.

Learn more

Working Alpha. Patent pending.

Get in touch to learn more about the architecture, request a technical review, or explore integration.