Skip to content

Safety Invariants

Jump to bottom
Liku Docs edited this page Sep 8, 2026 · 1 revision

Safety Invariants

These rails do not move. They apply across the CLI, the Electron runtime, and the four fabrics. See repo PROJECT_STATUS.md for the clock and CONFIGURATION.md for the flags.

  • Proposal → confirm. High-risk / critical actions and dynamic-tool proposals flow through the existing confirmation / policy paths. Dynamic tools are fail-closed (quarantine → promote → sandboxed execution).
  • No new actuation from any fabric. Inference / Execution / Transport wrap the coding path; they add no new device or UI actuation authority.
  • 262 BPE. The default cognitive context fragment size is 262 BPE.
  • Bench ≠ prod. A faster bench row is not a cutover; select('http3') throws.
  • Lab ≠ QUIC. The QUIC worker lab is a loopback framed-TCP stand-in that never speaks to vendor APIs; it is not production QUIC/HTTP-3.
  • Agents never open transport streams. A transport handle's invoke() only calls the injected function and grants no authority; it cannot skip budget, routing, escalation, confirm rails, or PAL.
  • Transport policy is advisory. The policy table never calls select().
  • PAL peripheral-task store semantics are unchanged.
  • TradingView live/unknown DOM / Depth-of-Market order entry stays fail-closed behind advisory-only rails; paper-trading order entry still requires explicit confirmation.

Clone this wiki locally