The core idea is that every action must pass through a verifiable execution boundary that produces a replayable evidence bundle.

Pipeline:

Gateway → ActionIntent → PolicyDecisionPoint → SafetyGate → Approval Workflow → ExecutorPlugin → ExecutionTrace → ExecutionProofBundle

This allows you to deterministically replay a decision and verify exactly why an action was allowed or denied.

The repo includes a restrained-autonomy demo where an operator vetoes an action and the system produces a deterministic audit stream.

I'm particularly interested in feedback from people working on agent infrastructure, security, and safety systems.