Five deliberately separate responsibilities
| Layer | Owns | Does not own |
|---|---|---|
| Federation Image v2 | Bytes, section geometry, integrity, capabilities, image identity | Policy decisions or learned meaning |
| Monk | Scoped rules, routing, search classification, validation and denial | Statistical learning |
| Monk Loom | Bounded inference, evidence, adaptation proposals | Execution authority or commits |
| Perl specialist agent | Intent classification, reviewed answers, and optional fixed workspace-action proposal data | Review, application, VFS commit, policy, build, or release authority |
| Chronicle, transaction, and host | User authorization, validation, review, ordinary commands, atomic promotion | Unreviewed autonomous learning |
Binding
The attachment stores the SHA-256 fingerprint of the exact canonical Monk profile. Readers reject a mismatched or orphaned attachment. A policy edit therefore requires an explicit attachment review and rebind; old learned state is never silently carried onto semantically different policy.
Data flow
- The host derives named, bounded feature values.
- Loom validates the complete feature mapping and runs integer inference.
- The host receives advisory evidence with model and Monk fingerprints.
- If configured for adaptation, verified feedback binds to that evidence fingerprint.
- Loom returns a new attachment proposal. Nothing is committed.
- The host may review, validate, rebuild, verify, and promote through the normal VFS transaction path.
Agent proposal flow
- A validated, quality-accepted branch bundle is registered by fingerprint.
- A human accepts that exact bundle for submitting plans.
- An answer’s stored action recipe is bound to one workspace/configuration fingerprint.
- Chronicle dry-runs and displays every ordinary command.
- A named reviewer accepts or rejects the plan without applying it.
- A named operator separately reapplies validation and atomically saves the commands.
- Build and export remain independent, verified operations.
There is no call from Loom or a Perl agent into authorization, arbitrary file mutation, Monk-policy editing, image promotion, or release publication.