Stable reason codes
PASS / FAIL / HOLD with deterministic semantics.
Evidence-first • Fail-closed • Audit-grade
Decision before action.
Proof before impact.
For consequential AI, action requires signed public state, local verification, and independent replay.
Signed state inPolicy gatePASS / HOLD / FAIL out
When proof is incomplete, action stays locked before impact.
PROD is the canonical public rail. Demo and candidate rails are secondary.
Why reviewers trust this
One signed production pointer. Local verification. Independent replay. Missing proof stays HOLD.
Canonical production pointerLocal verificationMissing proof = HOLD
Current public decision state
The current public HOLD is frozen as a witness pack. Independent replay will confirm the same signed bundle and reason path when it lands.
Signed receipt
SIGNED
Policy pack
MATCH
Independent replay
PENDING
HOLD
H-203
Current public HOLD
Independent replay pending — decision preserved
REVIEW REPLAY
Inspect state, verdict, and reason path
WHY THE BOUNDARY MATTERS NOW
Pressure is building on the same rail.
Review windows are shrinking. Capability does not reliably predict control. High-stakes autonomy is moving into production. Evidence has to arrive where action happens.
Signals synthesized across the Why now page and external corroboration. The operating conclusion is unchanged: more capability still needs explicit boundaries and portable proof.
NON-NEGOTIABLES
When proof fails, action pauses.
Determinism, replayable receipts, and fail-closed control are the minimum credible baseline.
Replayable receipts
Portable evidence another institution can inspect.
Non-bypassable gates
Control at egress, dispatch, promotion, and other real action surfaces.
EVIDENCE ANCHORS
Evidence anchors for Security & Counsel
Offline-verifiable artifacts for Security, Counsel, and skeptical reviewers.
Verify release
Treat the website itself as an auditable artifact: signed releases, pinned manifests, and fail-closed verification.
Verify release
Open procurement kit
Ticket-ready evidence and signed status — offline-verifiable, fail-closed, one-pass review.
Open kit
View transparency log
Append-only release history with inclusion proofs and deterministic regeneration.
View log
Verify assurance pack
Procurement-grade assurance artifacts with local verification workflow.
Verify pack
More evidence surfaces
FLAGSHIP SYSTEMS
Distinct products. Shared posture.
Determinism, receipts, and fail-closed control across agentic, enterprise, and clinical surfaces.
Pre-action control
Pre-action control for real-world side effects — fail-closed at non-bypassable gateways.
Verifier → Permit → Gate
Deterministic validators
Vendor-neutral conformance packs with deterministic validators and replayable receipts.
PASS / FAIL / HOLD
Clinical truth chain
Clinical truth chain for high-stakes revenue-cycle and care decisions.
CB-1 • Permit-to-Pay
WHY WE EXIST
Protect the person downstream.
When systems decide access, work, care, or safety, consequential outcomes should carry reviewable proof.
Stewardship, not spectacle.