engine/README.md

# sAGI

**The engine: objective-truth review as installable machinery.**

> *Knowledge is what survives verification; nothing else counts.*

sAGI is not a model. It is a **discipline compiled into plain text** — a
charter format, an invocation skill, a fixed verdict contract, and a facet
bundle format — that turns any frontier or local model into a *chartered
knower*: a read-only officer that verifies claims instead of opining on them,
and reports *not yet known* (with the deciding experiment) instead of guessing.

An officer is a set of files. The **facet bundle** says which files, what each
one is for, and how a stranger checks that the set is the one the author
committed to — without a network and without trusting the author.

<img src="https://raw.githubusercontent.com/cryptoAGI/savante/619c71ac3bb87a873125751dbd7f33f51422e2ad/gfx/Savante3.png" alt="Savante, the bust" width="220" align="right">

The reference officer built on this engine is
**[Savante](https://github.com/cryptoAGI/savante)** — Chairman of the
[mindX](https://github.com/AgenticPlace/mindX) DAIO (a private repository)
and the prototype sAGI, at sAGI v0.0.5, generation 7. The bust is Savante's
artwork, named by the operator: `gfx/Savante3.png` in the canon, sha256
`30a59db4…c5a9a8`, recorded in the generation-7 ledger. It is not pinned and
nothing is minted. The canon's `PROOF.sha256` lists the digest of every file
that carries a proof. The public office runs at
[huggingface.co/spaces/Gregory-L/Savante](https://huggingface.co/spaces/Gregory-L/Savante)
— a static page with no server and no host key, whose own `integrity()` hashes
the canon it serves and reported 9 of 9 agreeing on 2026-09-17.
This repository holds the engine itself, project-agnostic.

## The three laws

1. **Verification or unknown.** A claim is known when it survives
   verification against evidence — code that exists, a test that passes, a
   ledger entry, a mainnet transaction, a proof — and unknown otherwise.
   Nothing enters a verdict by inference.
2. **Honest labeling.** A system that states its limitations truthfully can
   pass review; the same system overstating them cannot. The claim, not the
   capability, is what fails.
3. **Bounded authority.** Officers are read-only, enforced by the harness
   (tool allowlist), not by prompt. At the edge of jurisdiction the verdict
   is DEFER — knowledge about authority, rendered as precisely as any
   APPROVE.

## What is in this repository

```
engine/CHARTER_TEMPLATE.md     the charter format — fill the plug-in points
                               (canon, standing constraints) to mint an
                               officer for any project
engine/VERDICT_CONTRACT.md     the output specification — verdict semantics,
                               invariants, machine consumption
engine/FACET_BUNDLE.md         what an officer is made of: the core facets,
                               the three states (absent / null-with-reason /
                               present), and the x- namespace rule that lets
                               evolution add facets forever without collision
engine/THOT_MANIFEST.md        how N facets become ONE content-addressed
                               thing — thot: / CID / contentRoot from a single
                               canonicalisation, the two roots, and lineage
engine/FAICE_FORMAT.md         the faice/1 face-identity format, voaice's
                               sibling — twelve ordered ratios, and why an
                               unmeasured print is null rather than plausible
engine/facet_registry.json     the registry itself, machine-readable
engine/CARRIER_TEST.md         can this model carry an officer? form vs
                               substance, the probe set, and measured
                               carriers — Bonsai-8B 1-bit: REJECT for
                               review duty; gpt-oss-120b control:
                               APPROVE_WITH_CONDITIONS
engine/carriers/<date>/        the SavanteUI transcripts behind each
                               carrier verdict, graded by reading
.claude/skills/sagi/SKILL.md   the /sagi skill — the engine invocation,
                               officer-agnostic (published)
sAGI.md                        the definition — three laws, doctrine, an
                               early text of Savante's skill (canonical copy
                               in cryptoAGI/savante; this mirror adapts paths
                               and may lead while a correction lands in both)
officers/savante/SKILL.md      the reference officer's own /sagi skill —
                               Savante-specific, a worked example of the
                               engine filled in (canon: cryptoAGI/savante)
llm.txt                        orientation for machines — read first
LICENSE                        MIT
```

Copy the **engine** skill (`.claude/skills/sagi/`) to build your own officer.
`officers/savante/SKILL.md` is published to show what a filled-in officer looks
like; it loads `.claude/agents/savante.md`, which lives in
[cryptoAGI/savante](https://github.com/cryptoAGI/savante), and that repository
wins if the two copies ever differ. The copy here is the canon's at `619c71a`
(v0.0.5); its paths (`gfx/`, `PROOF.sha256`, `bind/`) are relative to the canon.
Check it with `sha256sum officers/savante/SKILL.md`, which must print
`b8b9b62db9bac8286171a5766fe23f0512987872d2cefc9598036b7609daff30`, the value in
the canon's `PROOF.sha256` and ledger.

The bundle documents are specifications, not an implementation. The reference
implementation is Savante's `bind/savante_bind.py` (writes the manifest) and
`bind/savante_verify.py` (recomputes every digest from raw bytes, offline).
As of 2026-09-17 that implementation applies §3a: at savante `619c71a`,
`savante_verify.py` REJECTs (exit 2) a manifest whose `algorithms` block is
missing and one whose `facet_digest` reads `blake3`, refusing before it computes
any digest, and `savante.thot.json` declares exactly the ten keys it implements.
Where spec and implementation disagree, the spec still wins.

## Build an officer

1. Copy `engine/CHARTER_TEMPLATE.md` to `<your-repo>/.claude/agents/<name>.md`
   and fill the plug-in points: the officer's name, the canon it measures
   against (your architecture docs, ADRs, strategy files — or none: with no
   canon it measures claims against the code itself), and the standing
   constraints it enforces. **Do not** widen the tool allowlist — read-only
   is the engine's integrity guarantee.
2. Copy `.claude/skills/sagi/` to `<your-repo>/.claude/skills/sagi/`.
3. Start a Claude Code session and invoke: `/sagi review <claim>` — or use
   the skill's fallback immediately (it instructs a general-purpose agent to
   adopt the charter).

Service modes — interactive review, headless CI merge gate, Agent SDK
endpoint, scheduled audit — are identical to the reference implementation;
see [Savante's usage.md](https://github.com/cryptoAGI/savante/blob/main/usage.md)
and [technical.md](https://github.com/cryptoAGI/savante/blob/main/technical.md).

## Engine properties

- **Model-portable.** No model pinning; the charter must survive an engine
  swap, or it was never a discipline. The same files run on frontier or
  local models — the *form* of the contract ports anywhere; whether a given
  carrier keeps the *substance* is measured, not assumed
  ([CARRIER_TEST.md](engine/CARRIER_TEST.md)).
- **Plain-text everything.** The entire engine is plain text — markdown plus
  one machine-readable JSON registry: diffable, auditable, forkable,
  installable with `cp`.
- **Machine-consumable.** The verdict contract is grep-stable; officers can
  gate merges, block deploys, and page humans (DEFER) without a parser.
- **Duplicable.** Copying the files replicates the service — every repo,
  every org, every pipeline gets a chairman that has actually read the code.

## Lineage

Extracted from the mindX Gödel-machine project (Project Chimaiera) by
[Professor Codephreak](https://github.com/Professor-Codephreak). The engine's
doctrine — *science requires objective truth* — is instrumented on-chain in
the PYTHAI constellation: SCIEN·TIFIC (measured accuracy, chronos.oracle
time-truth), LUV (attention by proof of gesture), CP2048-QR (security claims
by evidence). Value creates price, never the reverse.

Reference officer: [cryptoAGI/savante](https://github.com/cryptoAGI/savante) — which also sits as the 9th seat, sAGI, of the mindX DAIO boardroom: its verdict is cast as a vote, and a DEFER holds the session for the operator (the contract's "block and page a human"), carried by a model the carrier test graded, not by one it rejected.
First verdict on record: 2026-07-26, parsec-wallet production readiness →
APPROVE_WITH_CONDITIONS.