01 Sensor
Everything is an event. Follow one.
Sensor — observed on web-07 · shipped unsealed
A host says a thousand things a minute. The Sensor on it hears all of them, once — and one of them matters.
02 Ingest
A loose line of text becomes one shape.
Ingest — one shape · an id derived from the content
Whatever wire it arrived on, it leaves Ingest in the same form as every other event — so everything downstream reads it the same way.
03 Seal
Signed the moment it lands. Chained to the one before.
Seal — Ed25519 at ingest · chained to the one before
Change a byte later and its signature fails — and the next record's link to it no longer matches. The record cannot be quietly rewritten.
04 Store
Kept once. Read by everything.
Store — stored once · every reader gets a copy
No app keeps a private copy. Detection, the timeline, cases and risk all read the same record — so they can never disagree about what happened.
05 Detect
A detection reads it. The alert is an event too.
Detect — a detection reads it · its alert is an event
Most events pass straight through. This one does not — and what the detection says about it goes back into the same record, sealed like everything else.
06 Gate
One gate. Every action passes it.
Gate — the alert meets one gate · allow, hold or refuse · reason kept
Nothing automated touches the world without passing the same guardrails — and the reason for the decision is kept, whichever way it goes.
07 Canary ↺ Sensor, again
Back to the host that saw it. The loop closes.
Canary — sends it to the Sensor · waits for its report · rolls back if not
The decision travels back to web-07, where it all began. It is applied, checked, and undone if it does not hold — then reported, as one more event.