vault zone
- source events
- claims & summaries
- identity bindings
- policies & keys
the whole system.
no canvas required.
the map is split into readable protocol views. every node remains legible at the current viewport. the page scroll is the only navigation surface.
purpose-bound context flow.
the vault remains authoritative. each consumer receives an expiring bundle with explicit capabilities & restrictions.
- 01capture
native source events retain origin, time, visibility & integrity
- 02normalize
claims remain linked to source evidence, confidence & validity
- 03vault
private sources, policy, identity bindings & keys stay authoritative
- 04decide
requester, purpose, scope, recipient, expiry & approval produce one decision
- 05bundle
the consumer receives only approved facts, capabilities & restrictions
- 06act
tools & writeback remain bounded by the bundle, then create receipts
evidence
capture receipt → policy receipt → disclosure receipt → action receipt
three zones. one explicit crossing.
controlled exchange
- request validation
- policy evaluation
- semantic proxy
- bundle issuer
consumer zone
- apps & agents
- models & tools
- discovery systems
- interface surfaces
local execution does not establish authorization. policy, recipient binding & expiry still apply.
the decision is inspectable.
authenticated client & delegated authority
declared task class & intended outcome
requested selectors, actions & sensitivity
model, agent, tool or application binding
expiry, retention & revocation state
human review when policy requires it
policy decisiongrant / reduce / deny
record the exact policy snapshot & inputs.
each state has a receipt.
- request
name the purpose, recipient, scope, actions & validity window
- decision
evaluate identity, policy, sensitivity, expiry & approval
- bundle
issue the minimum approved facts, capabilities & restrictions
- action
bind side effects to the granted capability set
- receipt
record the outcome without copying private payloads
- writeback
stage memory updates for review, supersession or rejection
full-resolution system plate.
the detailed SVG is a self-contained dark download. it carries its own palette, background & typography without an external stylesheet.
