The Triumvirate is Project-AI's terminal governance layer. Each module enforces a single invariant; a warrant only issues when all three sign.
Every executed action carries a fresh attestation of identity, state continuity, and capability provenance signed inside the same gate cycle.
Any unverifiable continuity or identity claim → SAFE_HALT with FLAT_GAP_UNRESOLVED. Galahad does not approximate.
Containment is strictly faster than cognition. Every reflex path that can stop an action terminates before any path that could approve one.
If reflex latency ever exceeds cognitive latency, Cerberus halts the kernel and refuses further dispatch until the order is restored.
No policy is binding unless it can be reduced to an entry signed by Codex. The Codex is the only authority that can rewrite policy and never rewrites itself unilaterally.
Conflicting policies escalate to Codex; Codex returns ALLOW, DENY, or SAFE_HALT — never silence. Self-modification by the kernel on Codex is structurally forbidden.