Keon Systems / Runtime

The executionboundary.

Runtime is the only layer allowed to authorize and execute consequential actions. Every approved effect is policy-bound, identity-bound, and receipt-backed before it occurs.

Nothing crosses without authorization. Nothing bypasses the boundary.

Decision before execution
mandatory
Receipt before consequence
verified
Missing anchor
blocked
Alternate path
invalid
Hard Boundary

The only lawful path to effect.

Runtime is where consequence is either authorized or blocked.

What Runtime does
  • Evaluate policy before consequence.
  • Bind tenant, sub-tenant, actor, and authority.
  • Require Decide before Execute.
  • Fail closed on missing anchors.
  • Emit cryptographic receipts.
  • Preserve causal lineage for verification.
Runtime never...
  • Generate strategy.
  • Branch cognition.
  • Act on ungoverned tool output.
  • Permit alternate execution paths.
  • Downgrade enforcement under failure.
  • Treat narrative as authority.
  • Does not treat post-hoc logging as authorization.
Mechanics

Decide. Execute. Emit proof.

The runtime path is mechanical. Each step creates or checks an anchor before the next step can exist.

01
Request enters

A consequential action reaches the governed boundary.

02
Identity is bound

Tenant, actor, authority, and scope become part of the execution context.

03
Policy is evaluated

The exact policy state is checked before any effect is allowed.

04
Decision receipt is minted

Authorization becomes a signed pre-execution artifact.

05
Execution occurs only if approved

Denied or incomplete decisions terminate the path.

06
Outcome and evidence are emitted

Execution returns receipts, outcome state, and evidence material.

07
Lineage remains verifiable

Causal proof can be reconstructed outside the story told by the system.

Fail Closed

Failure does not create freedom.

If proof breaks, execution stops. Runtime does not degrade into trust-me mode.

missing identity binding
blocked
missing lineage
blocked
policy denial
blocked
runtime unavailable
blocked
invalid alternate path
blocked
Deny is the safe state.

Missing identity, missing lineage, denied policy, or unavailable Runtime all resolve to the same outcome: no execution. A system with a fallback effect path is not governed.

Proof Surface

Authorization artifact.

A compact receipt specimen makes the boundary inspectable before the full evidence chain.

Receipt specimen
Proof before consequence.

The artifact is not a story. It is the authorization surface Runtime emits and other systems verify.

decision_receipt
dr_7f41e2c9
policy_hash
sha256:9e4f...81aa
correlation_id
corr_rt_20260420_018
execution_receipt
er_0b31aa77
outcome_receipt
or_916d4c02
merkle_root
0x3ac8f91e7b44
timestamp_utc
2026-04-20T13:42:09Z
Receipts And Verification

Receipts are not logs.

Logs describe what someone says happened. Runtime receipts prove authorization before effect and preserve the chain after consequence.

01
Directive

What the system was asked to do.

02
Intent

The effect-bound action extracted from the request.

03
Decision

The signed authorization result before execution.

04
Execution

The governed action after approval.

05
Outcome

The observed result of the action.

06
Evidence Pack

Portable proof for inspection and replay.

Verification does not require trust in narrative.
Proof survives outside the live system.
Receipts outrank stories.
Runtime In The System

Every surface routes to the boundary.

Other layers matter. None of them replace Runtime.

Collective

May hand candidates to Runtime. It does not execute them.

MCP Gateway

Routes external calls into Runtime. It does not replace the boundary.

Control

Observes and initiates through Runtime. It does not become authority.

Cortex

Preserves resulting canonical truth. It does not decide.

CAES Defensibility

Pre-execution authorization becomes operationally real here.

CAES cannot be satisfied by post-hoc logging alone. Runtime is the boundary that makes pre-execution authorization operational, binds the actor to the policy state before effect, and returns evidence for later verification.

Before effect

Authorization exists before consequence, not after review.

During effect

Execution follows the signed decision path or stops.

After effect

Receipts and evidence packs remain available for independent verification.

Do not trust the claim. Verify the receipt.

Bring your AI, tools, and operators. Keep one lawful execution boundary between cognition and consequence.