The records.

The programme, written with Arnaud Gelas, specifies the layer between an institution's data and the agents that act on it. Every piece of institutional knowledge is a claim with provenance, standing, and a shelf life. A check before each act compares the standing of what the agent relied on with the consequence of what it is about to do. A record afterwards lets a supervisor replay the basis of the decision. And above the architecture, a control plane says who may let an agent act, on whose authority, and within what limit. The papers of this year build that argument from the diagnosis to the type system; the working notes of October take the step above it, to the mandate and to the value of what the model knows.