1Proposal / Candidate
Intent, context, and candidate plan submitted.
Hover to explore
5 Trust DomainsSeparation by design
DeterministicReproducible governance path
Policy-BoundPermissions before execution
ObservableEvidence without mutation
End-to-EndProposal → proof → evidence
2Cinema Proof + Exact Z3
Independent raw-evidence and exact proof boundary.
Hover to explore
3DSG Canonical Authority
Policy, constraints, permissions, and canonical decision.
Hover to explore
4Controlled Execution
Plan-bound side effects through API, MCP, browser, and deployment adapters.
Hover to explore
5Evidence / Monitoring
Replay, proof records, metrics, baseline review, and rollback evidence.
Hover to explore
Decision States
ALLOW
Approved exact-plan work may continue.
WAITING_PERMISSION
Approved work pauses until the missing capability is provisioned.
BLOCK
Out-of-plan or unsupported work is denied and logged.
⬡
QUBO / Ising Deterministic Search
Formal deterministic search for encoded optimization problems. Natural-language hints do not become solver code.
Explore ↗✓
VERIFIED_GLOBAL_OPTIMUM
Exact Z3 proof obligation: only an UNSAT better-solution query supports the bounded optimum claim.
Explore ↗▣
Plan-bound Remote Browser
Approved plan + approved step + agent identity. Verifier-side observation remains read-only.
Explore ↗↶
Baseline / Review / Rollback
PASS can become the next baseline; REVIEW holds; BLOCK supports rollback through canonical authority.
Explore ↗∞
CI/CD + Test + E2E Evidence
44 workflow files in the current repository snapshot, 40 primary pytest modules, and documented executable E2E paths.
Explore ↗♙
Business / Team / Docs
Direct API, GitHub/CI, agent/MCP integrations, marketplace packages, and enterprise delivery context.
Explore ↗Built on Separation.
Trusted by Design.
Separation of Trust
Each domain has a single authority boundary and no hidden privilege transfer.
Deterministic by Default
Governance decisions and proof boundaries are designed for reproducibility.
Provable & Auditable
Commit binding, proof records, logs, and replay form an evidence path.
Policy-bound & Observable
Execution is bounded; monitoring does not silently mutate production.
Explore the verified architecture
Use the live proof surface or inspect each trust domain in this document.
Open Live Proof →