How Sanctuary works
A control boundary outside the model.
A model may propose an action, but model text does not itself create authority. Sanctuary V3 keeps the proposed action, the authority to act and the resulting evidence in distinct roles.
Declared flow
Proposal is not permission.
01
AI model or agent proposes an action
02
External authorisation and fixed policy are checked
03
The Governor permits, blocks or withholds
04
The confined executor handles the defined effect
05
The Verification Harness retains the evidence
Three roles
Distinct responsibilities, visible outcomes.
Kernel
A deterministic execution substrate that establishes the declared operating boundary.
Governor
A control layer that keeps model output separate from authority and applies the declared policy.
Verification Harness
An evidence layer that runs predeclared cases and retains outcomes for inspection and reproduction.