Plane 02

Runtime

The deterministic execution engine. Every action request enters the Runtime as a structured intent and exits as either a policy-authorized execution or a governed denial. No middle ground. No fallback to permissive.

Canonical Execution Flow

Every step is mandatory.

Directive
Intent
Request
Decision
Outcome

No step can be skipped. No outcome is produced without a binding Decision.

Enforcement Properties

Runtime behavior is structural.

Pre-execution authorization, not post-hoc logging

The Runtime enforces policy before the action occurs. Logging records what happened. The Runtime determines whether it is permitted to happen.

Deterministic by construction

Same input plus same policy equals same outcome. Always. Determinism is a structural property of the execution model.

Fail-closed by default

When the Runtime cannot evaluate policy, due to missing data, ambiguous input, or infrastructure failure, execution does not proceed.

The MCP Gateway is the governed interface surface

External AI systems reach the Runtime through the MCP Gateway, the constitutional choke point for effect-bearing action.