Whitepapers
The mechanisms, in detail.
Long-form references on governed agents: the decision model, the machine that enforces it, and the adversary's view. Each is published as a Request for Comments — including, deliberately, what the system cannot yet do.
How Habenula decides what an agent may do
Why a confirmation prompt is not control. Verb-noun permissions with no bare grants, a policy evaluator that is a pure function, held calls resolved out of band, and grants that are one-time or timed and expire on their own — plus a section on what governance cannot do.
Read →The machine that enforces the contract
One Worker, one Durable Object per user, and a governance pipeline sitting on the only path between a model request and an outbound call. Where the trust boundaries sit, and how the same code runs from a container to a hosted service.
Read →Invariants, boundaries, and honest limits
The six invariants that hold everywhere, how OAuth credentials are custodied away from the model, how the hash-chained audit log resists tampering — and a register of the current gaps, listed as prominently as the guarantees.
Read →