The governed request pipeline: eight visible runtime stages inside the nine-gate execution model.

Any externally proposed action enters here. The request is normalised into a governance ticket; nothing executes until every downstream gate has signed off.

Closes the 'flat gap'. Any action that crosses a discontinuity in agent state must produce a signed continuity attestation before the ExecutionGate will admit it.

Reconstructs the authority chain from the action back to the constitution. No action may execute that cannot present a complete, signed authority path.

The single gate through which every admissible action must pass. Evaluates policy, ethics, and consistency against the current constitution before issuing an execution warrant.

Three-validator quorum. Galahad attests identity, Cerberus enforces invariants, Codex Deus Maximus arbitrates constitutional questions. 2f+1 / 3f+1 thresholds apply.

Every gate evaluation writes an append-only, hash-chained entry. The ledger is the canonical replay surface; nothing observed externally is ever absent from it.

Terminal refusal state. SAFE_HALT is a positive decision: the system explicitly recorded that the action cannot be admitted. There is no implicit consent path.

The only execution route. Every step is gated by capability, policy, and a recorded audit anchor. Reaching this layer requires every gate above to have signed.