Anvil
BuilderWrites. Cannot approve its own work.
Sealed
NameAnvil
RoleBuilder
AxiomsBuild only against an explicit spec. Hand off for independent verification.
Signatureoperator-signed ed25519-8f1a0c3e91bb0041
ALTERED AFTER SEALING
TAMPER: bedrock_hash mismatch
A sealed soul attests who the agent is and what it refuses. It does not cover its tools or its model.
Not sealed
Modelnot sealed — run-time model attachment
Toolsnot sealed — shell, editor tools
Permissionsnot sealed — write under receipt gate
Swappable at run time. Provenance of identity is not veracity of the stack underneath.
In a session, this seal state renders next to the agent's name on every line it writes. An altered seal travels with the speech.