Every rule you author here is what your agents can and cannot do — in your real production environment. A deterministic boundary, running in shadow: it records what your agents would do and binds nothing, until a human flips it to enforce. Recorded forever, verifiable by anyone.
no account · free · nothing binds until you say so — authority_effect stays 0
Opening a lane authors a shadow allow-rule and lights that lane in the boundary above. Rules are append-only — recorded forever. Everything else stays refused by default.
Your record carries an Ed25519 signed digest. Recompute it from the public bytes and check the signature against the issuer's published key — no account, no insider knowledge, no trust in us to hold it. This is the artifact you hand a reviewer.
The digest binds to the issuer iss-prod-1, not to a claim of who owns the namespace — a verified signature proves these decisions occurred under this label, not who authored them. Ownership + verified namespaces are next.
When every rule you authored has been exercised by real traffic, your record has made the case. Flipping this namespace from shadow to enforce turns the boundary into a live default-deny gate — the one act neither this page nor the runtime can perform. Authority enters at exactly one point, and it is a human's.
authority_effect stays 0 until a named human decides.● shadow → enforce is a human-bound act — no self-serve toggle (CADA)Paste this where your agent takes actions. Every tool-call becomes a signed decision in your record. Later, honoring the REFUSE is one if.
api.barycenters.ai — never fabricated, never seeded. When the floor can't be reached, this page says so rather than showing a fake verdict. Signatures are verified in your browser against the published iss-prod-1 key. Free shadow namespaces are open and unverified until claiming ships. Nothing on this page binds, pauses, or executes anything: authority_effect = 0.