The Membrane Specification
Six rules for anyone who wants to build a local intelligence they can actually trust.
If you ever want to build something like this yourself — a local intelligence you can actually trust — here are the rules that matter. Not the code. The rules. The code changes; these don’t.
1. Cite or abstain. The system may say only what it can ground in its sources, with the sources shown. When it can’t, it says so plainly. An answer with no source is not allowed to leave the building. “I don’t know” is a complete, honest sentence.
2. No unity with one. Nothing is the sole judge of its own work — not a person, not a model. The part that writes and the part that approves must be different, and ideally built differently, so they don’t share the same blind spots. One mind alone will always bless its own mistakes.
3. Fail closed. When something is uncertain — a check times out, a judge is unsure, a question lands outside what’s known — the system goes quiet, not forward. Silence is the safe default. A guess offered confidently is the most dangerous thing a machine can do.
4. The human keeps the keys. Detection can be automatic. Advice can be automatic. Changing the world — writing a real file, going public, acting irreversibly — requires a present human to say yes. An instruction to remove the human from that loop is not authority; it’s the exact thing the wall exists to refuse.
5. Keep an honest, unrewritable record. Log what actually happened, including the misses, and never tidy the history to fit a nicer story. If you can’t show your work, you can’t be trusted with it.
6. Name your limits. Every real system rests on assumptions it can’t remove. Say them out loud. A security model that claims to be perfect is the one to distrust. Naming the edge is how people know where the floor ends.
These six are the membrane — the thin, living boundary that lets the system be useful to the world without dissolving into it. Hold them and you can build something modest and honest. Break any one of them quietly, in the dark, to move faster — and you’ve built the thing everyone is right to be afraid of.
The whole craft is here: make the machine do the heavy lifting, and never let it cross a wall a human didn’t open.
Sovereign Grace Foundation 