Ten agents. One human gate.
Every action moves through a typed agent chain. Each agent has a single job. The council weighs them. The operator approves. The auditor stamps a sha-256 rationale row. Nothing ships without you.
Detector
broadcast_signal
Reasoner
hypothesis_proposed
Simulator
simulation_result
Policy gate
policy_verdict
Boundary gate
boundary_verdict
Council
council_consensus
Approver
approval_request
Verifier
verification_outcome
Auditor
audit_completed
Improver
method_improvement
Approval-only-no-execution
Every change becomes a packet for review. Axiom never auto-applies; it only stages.
Closed-union types end-to-end
Agent roles, message kinds, severities — hallucinated values break the build, never reach prod.
Auditor sha256 stamps
Every rationale row is hash-stamped. Auditors verify the row by recomputing the hash.