Authority Lives in the Agreement, Not in Identity
Traditional security architectures bind permission to user identity, role-based access tokens, or ambient API privileges. The Constitutional OS completely inverts this paradigm. Identity proves authenticity; only an active, bilateral Agreement Directed Acyclic Graph (ADAG) carries authority to execute state mutations.
Role Granted
A principal or system entity is assigned a cryptographically attested capability role through sovereign identity verification.
Agreement Authorises
An explicit, machine-readable agreement envelope explicitly authorises that role for the specific context and interaction parameters.
Agreement Decides
The mathematical rules encoded in the Agreement DAG evaluate the transaction stanzas and issue an immutable deontic ruling.
Record Proves
A bitemporal cryptographic proof receipts the decision, rule version, and execution trace to the immutable knowledge ledger.
The Invariant Rule: Remove any one of the four, and you are back to trusting people or models to behave. With all four, trust is computed mathematically.
Compliance Leaves the Transaction Path
The compliance function no longer operates as a lagging, post-hoc audit committee or expensive secondary screening service. The authority check is the transaction itself. Unlawful transactions are mathematically un-executable, eliminating regulatory penalty risk before state mutation occurs.
Complete Authorisation Transparency
Nobody – neither platform operators, financial institutions, nor autonomous AI agents – can act on your identity or transfer your value without an active, explicit agreement you can inspect and verify. Every action must prove its lawful mandate upfront.
The Anatomy of an Agreement DAG
An Agreement Directed Acyclic Graph (DAG) structures bilateral contracts and business workflows into a sequence of verified assertions. By processing operations across four distinct layers (Logic, Physics, Law, and Economics), the network guarantees constitutional conformance before runtime execution.
3-Pass Wire-Speed Adjudication Pipeline
Target State Architecture (Q4 2026 / 2027 Roadmap)To guarantee zero-compromise safety at line rate, the platform executes a 3-Pass Adjudication process at the network edge before any transaction is committed:
Runs on SmartNIC DPU hardware enforcing hard eBPF/XDP network membrane checks and dropping packet-level anomalies.
Offloads complex Deontic Logic Evaluation (\(\mathbf{F} \succ \mathbf{O} \succ \mathbf{P}\)) to the Wide-SIMD DRAGON hardware engine using SRAM Hives.
Finalises zero-knowledge proof verification, multi-tenant state isolation, and cryptographic signing inside hardware-isolated enclaves.
Logic Layer (WASM & Rust no_std)
The execution engine. Computes state mutations using WebAssembly (WASM) binary stanzas compiled from Rust (no_std). Operates under strict real-time edge execution target parameters, running directly within the in-chassis switch processor utilising SRAM Hive hardware acceleration.
(module
(func $evaluate_payment (param $amount i32) (result i32)
local.get $amount
i32.const 1000000 ;; Limit set at 1,000,000 cents
i32.le_s
)
(export "eval" (func $evaluate_payment))
)
Physics Layer (xBOM & LBDPs)
The physical constraints. Maps hardware (HBOM), software (SBOM), models (MBOM), and data consent (DBOM) into standard bills of materials. Validated data attributes are packaged as cryptographically sealed Law-Bound Data Products (LBDPs), leveraging Zero-Knowledge Proofs (ZKPs) to guarantee utility without exposing raw PII.
SBOM & MBOM
Verifies code signatures of all execution libraries and lineage records/weights of AI models in the enclaves.
DBOM, HBOM & LBDP
Attests hardware roots-of-trust, user consent lifecycles, and issues privacy-preserving Zero-Knowledge credentials.
Law Layer (Deontic Envelopes)
The normative filter. Evaluates permissions, obligations, and prohibitions. Rules are executed based on a strict dominance hierarchy: Forbidden ($\mathbf{F}$) overrides Obligatory ($\mathbf{O}$), which in turn overrides Permitted ($\mathbf{P}$).
Economics Layer (Value Flows)
The financial rails. Facilitates instant settlement and real-time ledger updates. Executes transfers based on verified outputs from the Logic, Physics, and Law layers, routing over direct account-to-account rails.
Unlawful Execution is Unavailable
Unlawful execution is a state the platform simply cannot enter. Not detected late, not remediated, not subject to regulatory fines – unavailable. The commercial reality of this invariant is insurability. Autonomy that enterprise cannot underwrite is merely an unbounded balance sheet liability. Pre-execution adjudication by construction creates the mathematically bounded-loss conditions required by tier-1 underwriters.
Replay as a Product, Not a Log
Traditional audit logs store static text records of what went wrong after the damage is done. In the Constitutional OS, auditability is an active product: “We can re-run the decision exactly as it was made, against the precise version of the rule in force at that exact millisecond.” This deterministic bitemporal replay converts contentious disputes into immediate mathematical verification.
Executable Contract Twins & Deontic Logic
The Constitutional OS takes BIAN's high-level Agreement construct and instantiates it as a live, machine-executable Agreement Directed Acyclic Graph (ADAG) – functioning as the literal “Digital Twin of the Contract.”
Discretionary Allowances
Explicitly authorised capabilities defined within the bilateral contract stanzas (e.g. initiating a payment up to £1,000).
Mandatory Actions
Statutory or contractual duties that must be fulfilled before state commit (e.g. recording bitemporal proofs to the ledger).
Absolute Invariants
Non-negotiable legal, prudential, and safety boundaries that trigger an instant, hardware-level execution veto.