Canonical Architecture

Personal Intelligence Infrastructure

Artificial intelligence can reason and act, but must never become the authority over itself.

TELHAR decouples memory, cognition, evidence, policy, and execution into distinct, governed planes — preserving human agency across time, surfaces, and models.

Architectural Decoupling

Five Planes. Zero Ambiguity of Authority.

Traditional AI systems collapse memory, permissions, reasoning, and network access into opaque black boxes. TELHAR enforces explicit mathematical and cryptographic boundaries.

Memory Plane PROVEN

Mnḗmē

Continuous context, temporal indexing, and belief state. Never a global truth or identity authority.

Qdrant · pgvector · DEK telhar:v1:memory-envelope
Cognitive Plane IMPLEMENTED

Praxis & ARK

Parses intent, formulates plans, and deliberates. Proposes actions, but holds zero intrinsic execution authority.

TLA+ · Planner · LLM Router telhar:v1:execution-plan
Policy Plane (PDP) IMPLEMENTED

Foedus

Policy Decision Point. Evaluates covenants and deterministic rules prior to any state mutation in the world.

OPA · Rego · Fail-Closed telhar:v1:policy-decision
Evidence Plane PROVEN

Explorator & Refuto

Protected external discovery and independent falsification harness. "An agent cannot be judge of its own execution."

SSRF Guard · Immutable Ledger telhar:v1:evidence-event
Experience Plane IMPLEMENTED

Experience Platform

Multimodal perceptual projection over a singular core. The modality is an adapter, not a reimplementation.

Web · Desktop · Mobile · TUI telhar:v1:projection-model
Singular Chokepoint • Gateway Effect Gate

The 7 Controls of the Effect Gate

No model or agent has direct connectivity to actuators, APIs, or filesystem effects. Every action proposal crosses the 7 controls deterministically, terminating at the first DENY verdict.

1. Auth / Token
2. Tenant RLS
3. Rate Limit
4. Foedus PDP
5. Plan Hash
6. ARK Capability
7. Idempotence
The Execution Chain

From Human Intent to Verifiable Action

A simple human experience supported by rigorous systems engineering. Every consequential step is audited, authorized, and anchored.

01
1. Person & Identity

A sovereign individual authenticates via cryptographic OIDC 2.1 credentials. Identity is a verified principal, never an ephemeral cookie.

OIDC 2.1 · PKCE · RS256
02
2. Intent Formulation

The individual expresses a goal. The cognitive engine parses intent and retrieves relevant governed context from Mnḗmē.

Praxis · Mnḗmē Context
03
3. Evidence Gathering

If external facts are needed, Explorator queries sources under strict egress guards and cost ceilings, producing graded claims.

Explorator · SSRF Fail-Closed
04
4. Proposed Plan Hash

Cognition proposes a concrete action set. Its cryptographic hash (approvedSetHash) is bound to the specific turn.

approvedSetHash · Nonce
05
5. Policy Authorization

Foedus evaluates the proposed plan against active tenant policy. Missing rules result in an immediate fail-closed DENY.

Foedus OPA · Single-PDP
06
6. Effect Gate Execution

The singular chokepoint validates rate limits, tenant isolation, and capability tokens before invoking external tools.

Gateway · 7 Controls
07
7. Evidence Anchoring

The result, causation ID, and decision token are recorded into an append-only ledger for post-execution verification.

Ledger · HMAC-SHA256 Chain
Radical Transparency

State of the System

We do not confuse vision with current capabilities. We classify every component with empirical honesty.

Component Domain Status Repository Evidence
Mnḗmē (ai/mneme) Memory Plane PROVEN Continuous memory with pgvector, KMS/DEK encryption, FTS, and 214 active contract references.
Explorator (ai/explorator) Evidence Plane PROVEN Fail-closed egress guard & SSRF classifier with 133,921 tested addresses (0 leaks, 17.8 ns).
Refuto (/refuto) Assurance & Falsification PROVEN Independent falsification harness with append-only ledger and strict 6-status contract.
Agent Runtime Kernel (ARK) Control Automaton PROVEN Formally model-checked FSM in TLA+ (TLC 1.8.0, 149 states with zero deadlocks).
Foedus (security/foedus) Policy Plane (PDP) IMPLEMENTED OPA/Rego authorization engine issuing DecisionTokens with tenant boundary validation.
Gateway (core/gateway) Exposure Gateway IMPLEMENTED Native Axum binary serving as execution chokepoint for governed traffic.
Praxis (ai/praxis-api) Cognitive Plane IMPLEMENTED Cognitive agent runtime and bridge (CommandTracker and RemediationEngine with cooldown).
Aesthesis (ai/aesthesis) Perceptual Physics PROVEN Perceptual physics engine grounded in physical equations (Sellmeier, Fresnel, APCA-W3).
Experience Platform (platform/experience) Experience Plane EXPERIMENTAL Multi-surface monorepo (Web, Tauri, React Native). CLI TUI in production; Web in scaffolding.
Protect-OS Subordination Vision CONCEPTUAL Guiding principle subordinating cognition to governance. Implemented piecewise in ARK, Foedus, and Gateway.
Guiding Constitution

Architecture for Intelligent Systems

TELHAR is governed by an unyielding Brand & Engineering Constitution. It rejects market hype, decorative technology, and anthropomorphic illusions.

Read the 12 Principles →

The Three Refusals (Canonical Invariants)

  • • We do not sell AI — we design intelligent systems.
  • • We do not build isolated products — we build governed capabilities.
  • • We do not automate blindly — we architect enduring ecosystems.