Concepts
Content-addressing, capability isolation, post-quantum seals, and the four status levels.
Content-addressing
Skills, receipts, and freshness are keyed by SHA-256 hashes rather than mutable URLs. If the bytes change, the address changes — so you can verify exactly what you ran. This pipeline is part of the engine today.
Capability isolation
Child processes and sidecars are stripped of secrets, NODE_OPTIONS, and proxy credentials; execution runs in a sanitized WASI sandbox with empty preopens and no shell. A cost handshake (the 402 loop) gates any write. Most of this layer is connected into the daemon and hardening.
Post-quantum seals
Skills and receipts carry ML-DSA-65 signatures, and secrets are sealed at rest with AES-GCM with derived keys zeroed after use. This substrate runs in production today.
The four status levels
Everything in these docs is labeled with one of four honesty levels, sourced from the public capability matrix:
| Level | Meaning |
|---|---|
| Live | Running in production, exercised by tests. |
| Wired | Built and connected into the daemon; hardening in progress. |
| Standalone | Built and tested in isolation; live wiring is supervised. |
| Mock | Scaffold / placeholder — explicitly NOT real yet. |