Documentation
w⁴iya architecture
An external deterministic gateway binds a request to the authority granted for that action.
Request and mandate
The integration supplies the agent identity, requested operation and concrete arguments. The gateway evaluates the applicable signed mandate and approval state. A pending request must not execute.
Execution boundary
Credentials and the controlled execution route belong at the gateway boundary. The agent should not receive an alternative path that bypasses the check. Complete containment is not yet demonstrated for all Deins and external-agent paths.
Receipt chain
Requested arguments, mandate, decision, human approval where applicable and execution result need a correlated record. Receipt work is ongoing. Arena evaluation and source-level checks are separate from production acceptance.