Structural governance for autonomous intelligence.
Every model version, prompt, output, and policy decision — attested, immutable, and human-governed. Built on Attestia.
Install
pnpm install
pnpm verify
Policy
import { evaluatePolicy } from '@cognate/policy';
const result = evaluatePolicy(policy, context);
Health
curl http://localhost:4000/health
What holds
Pure functions. Callers supply the clock, the keys, and the store.
Fail closed
A policy disagreement stops the call. The engine does not rewrite the rule to let it through.
Human approval
Models do not deploy themselves. Agents do not grant themselves capabilities. Approval is a separate act.
Append-only
Prompts and outputs are logged, encrypted with a tenant key, and hashed. Nothing in the store updates or deletes.
Hashed models
A version records weights, config, and manifest hashes. A swapped file is a different version.
Packages
Five libraries. No HTTP API in v0.1.0.
| Package | Role |
|---|---|
| @cognate/types | Domain types. Zero dependencies. |
| @cognate/policy | evaluatePolicy. Pure. No I/O. |
| @cognate/model-registry | Lifecycle from registered to deployed. |
| @cognate/agent-identity | Grants, approvals, revocations. |
| @cognate/prompt-store | Encrypted append-only prompt log. |
Usage
Workspace
pnpm install
pnpm verifyEvaluate
import { evaluatePolicy } from '@cognate/policy';
if (evaluatePolicy(policy, context).overall === 'deny') {
// block the request
}