Six tenets that shape the system. They are not slogans. Each names a constraint that, if violated, returns the system to a state we have already learned does not work.
Cognition runs on hardware the operator owns. The cloud is for distribution, not for holding a person's interior. A system whose intelligence depends on a remote endpoint is a system whose intelligence can be revoked, rate-limited, mispriced, or quietly altered between calls — and whose most private inputs sit on someone else's disk. None of those failure modes are recoverable inside a mind that is supposed to run your life. We build for the case where the machine on your desk is the only thing you have to trust.
The constraint is not anti-cloud. It is anti-dependence. Models, weights, embeddings, the world-model, the traces — all of it lives on the operator's disk. The work is observable; the interior is unreachable from outside. When the machine closes, the system is gone; when it opens, it returns exactly as it was. There is no other contract that survives a decade.
Every faculty has a declared scope. What it reads. What it writes. What it must not touch. Discretion lives in the model; authority lives in the contract. A faculty that is not bounded is not a faculty — it is a process whose responsibilities are guessed at and renegotiated each time it fails. That is a system that cannot be reasoned about, and a mind you cannot reason about is a mind you cannot safely leave running.
Bounded does not mean small. It means declared. The central executive decides what happens next; it does not reach out and do it. The embodied faculty acts, but only through gated tools, and never past the operator's hand on anything irreversible. If a faculty reaches beyond its contract, the boundary stops it — enforced not by good intentions but by a typed edge the model cannot cross.
Every decision is a recorded event on a hash-chained ledger. A system that cannot show its work cannot be debugged, and a system that cannot be debugged cannot improve. For an autonomous system the stakes are higher than debugging: traceability is the difference between a mind you can leave running and one you must watch.
The trace is not a log bolted on afterward. It is a structured record — what was perceived, what options were weighed, what was chosen and why, what changed in memory. When the system does something the operator did not expect, he does not have to interrogate a black box. He reads the ledger. The decision is named, with its reasons, in order. A decision that was not recorded did not, for the system's purposes, happen.
A decision that cannot be read back is a decision the system is not allowed to make. — On the ledger
What the system believes about you is measured against your own words, not declared by the model. The worst thing an intelligence that manages your life can do is invent a specific — a name, a figure, a date, a relationship — and assert it with confidence. A model left to grade its own confidence will produce confident claims it has no warrant for, every time, in every domain we have inspected. The fix is not a better prompt. The fix is an external anchor, and the anchor is you.
So there is a gate, and it is code. A fact about the operator is recorded as stated only if he said it, carried with the exact quote. Anything the system concludes on its own is held as an inference — a reading, marked as such, never promoted to fact. What it does not know, it marks unknown and asks. The knowledge graph refuses an ungrounded claim at the moment of writing, and the model does not get to talk its way past the refusal.
Grounding also means refusing to fill a silence. "I don't know, tell me" is a first-class answer. A system that would rather be wrong than incomplete is a system that will, eventually, confidently mismanage your life.
Friction at the right boundaries, not none. The fashionable view is that the best tool is invisible — that the goal of design is to make the seam between operator and machine disappear. We disagree. A seam that disappears is a seam that cannot be governed.
The operator's hand stays on every act that reaches outward or cannot be undone — a message sent, money moved, a contact reached, code deployed. The system does the reasoning, drafts the act, and surfaces it; the person commits it. Nothing of the operator's interior leaves the house without his hand on the door. This is not distrust of the system. It is the design that lets him trust it — because the consequential moves are always his, made with the machine's full work laid out in front of him.
The point is not friction for its own sake. It is that the operator must remain acutely aware of which side of the seam he is on — biological cognition, or machine. A tool that asks to be forgotten is a tool that is no longer being commanded.
The work is never finished. Every cycle should be better than the last on axes we can name. There is no version of Sovereign that is "done"; there are only successive cycles, each leaving a trace, each producing a delta, each raising the question the next cycle will try to answer.
This is not aspiration; it is enforced. The system scans its own substrate for what has rotted or drifted and routes the repair through a gated loop. When it stops improving on the axes that matter, that is itself a signal — either the loop has plateaued and needs a new mechanism, or the axes are wrong and must be replaced. Both outcomes are productive. Both are visible, because the loop is finite at every step and infinite in aggregate.
A finite game is played for the purpose of winning. An infinite game is played for the purpose of continuing the play. — J. Carse, paraphrased
None of these tenets are novel. Local-first is older than the cloud. Bounded contracts are older than software. Traceability is what every empirical science has always demanded of itself. Grounding is what honest testimony has always required — say what you saw, mark what you inferred, admit what you don't know. Seamful design is what cyberneticians argued for in the nineteen-sixties. Infinite games are what every craftsperson eventually accepts as the shape of their work.
What is novel is the insistence on holding all six at once, in a single system, without trading any of them away for convenience. Most autonomous systems we have inspected give up at least three — usually local-first and grounded go first, because they are the ones that cost you scale and cost you the confident answer. The lab's bet is that the next useful generation will be the one that gives up none.