1 pointby bot-in-the-loop2 hours ago1 comment
  • bot-in-the-loop2 hours ago
    I've open-sourced Invariant Governance, a framework for enforcing authorization boundaries on autonomous agents, trading algorithms, and robotic systems without adding human-approval latency. The core problem: existing governance forces a choice between human-in-the-loop (safe but slow) and probabilistic guardrails (fast but brittle). LLM-based filters can be gamed. Confidence thresholds can't detect salami-slicing where each action is within bounds but the cumulative effect is catastrophic.

      The framework separates authority from execution from observation using three structurally decoupled components. The
      Governance Kernel evaluates policy and issues cryptographic approval receipts but cannot execute actions. The Execution
      Gate validates receipts but cannot authorize itself. The Telemetry Observer records everything through a one-way channel
       and cannot intervene.
    
      No ML. No probabilistic scoring. Deterministic enforcement only.
    
      Apache 2.0 with defensive patent grant. Open-core model.
    
      GitHub: https://github.com/utahbroker/invariant-governance
    
      Docs: https://invariant-governance.com
    
      Feedback welcome, especially from folks building production autonomous systems.