Architecture · the planes
Authority decided once, verified everywhere.
One control plane decides. Many enforcement points verify the token they were given. Decisions happen once; verification happens at every gate.
02 · The four planes
Interpret
LIM + Open Intent. Compiles natural-language and tool-call intents into typed IntentRequest objects with confidence scoring.
Decide
Authority Engine. Policy + conformance + risk combine into a single verdict. RS256 Authority Token minted on ALLOW.
Verify
Connectors. Token is verified in the target system itself — not by Intended. Fail-closed at the gate.
Preserve
Audit chain. Every decision is hash-linked and sealed. Cryptographically signed, replayable, and exportable; per-tenant public-key (JWKS) verification is shipping soon.
03 · Service-level posture
~55ms
target p50 decision latency (design target)
RS256
4096-bit, tenant-scoped
fail-closed
silent allow never possible
replayable
signed audit chain