On your machine
Sovereign
Files, sessions, model keys, approvals, effects, the append-only ledger, and the final decision about what executes.
The sovereign action plane
Your machine does the work. Rig proves the path.
People and AI work through one local system. Effects pass through explicit authority. Receipts stay portable. The cloud coordinates identity and commitments—it never becomes the place your work lives.
checking portal
checking fabric
V7: blocked pending owner records
One system, two planes
The boundary is part of the product.
Sovereign owns work and effects. Fabric owns coordination metadata. The model vendor receives the prompts you deliberately send to it. None of those seams are hidden in small print.
On Cloudflare
Fabric
Identity, pairing, presence, revocation, receipt commitments, and checkpoints. Metadata only; content-shaped bodies are refused.
In your hands
Evidence
Signed DSSE receipts, explicit assurance levels, checkpoints, and an offline verifier that does not need rig.rest to answer.
The live path
Authority narrows. Receipts compose.
A proposal does not become an effect because an agent sounded confident. The local mediator checks the capability, class, epoch, and approval boundary first.
1. ProposeA person or capsule names an exact effect and the capability it believes it holds.
2. MediateSovereign checks current local authority and fails closed for input-touching or irreversible work.
3. ProveThe outcome becomes a signed, chained receipt with an assurance level—not a generic green check.
Current V7 truth
The machine half survived. The release did not pass.
The exact 94-case run remains blocked because required owner, provenance, human, and external records were not invented. That blocked state is a working safety property.
55machine pass
1harness only
11owner blocked
6provenance blocked
16human + external
5scope excluded
Mandatory owner stop:
The supplied V7 artifacts disagree between capsule.created and capsule.create. Rig selects neither spelling until the owner rules.