Trace every effect
Intent, authority, outcome, and provenance remain linked.
Auditability · control · portability
Sovereignty is an operating property.
Signal keeps authority in domain-owned state, evidence in append-only Memory, and projections rebuildable from both.
Provider intelligence is replaceable. Your operating record is not.
Control plane
Know what can act, where, and why.
Scoped principals, transition contracts, expected-head checks, and exact receipts turn broad AI capability into bounded operating authority.
Deny by default
Missing, stale, or ambiguous authority produces zero effects.
Rebuild elsewhere
Canonical records and evidence outlive a UI or model provider.