BABYLON

Recover what matters. Control what happens next.

AI shouldn't forget what matters. And it shouldn't change what matters without authority.

01 · WHAT DO YOU CONNECT?

Your existing AI tools and agents (Claude Code, Cursor, MCP servers, dev scripts, or local pipelines). Zero changes to your models.

02 · WHAT DO YOU GET?

Latent idea resurrection (CORTEX) + Deterministic veto on destructive mutations before they touch disk (BABYLON Guard) + Auditable cryptographic receipts (NEMESIS).

03 · HOW MUCH EFFORT?

A single local Rust binary with standard C-ABI. No cloud middlemen, no mandatory remote databases, zero subscription lock-in.

SILICON REVISION:32b4a29065
CLAIMS AUDITED:8/21
INVARIANTS:6 FORMAL
CLIENT JS:0 KB (script-src 'none')
REMEMBER · CORTEX

Find what you forgot.

Recover valuable ideas buried across years of conversations, notes, and projects.

ILLUSTRATIVE SPECIMEN · LOCAL MONOREPO RUN
✦ILLUSTRATIVE SPECIMEN · CORTEX FOUND THIS
"Agents should require explicit authority before modifying or deleting files."
FIRST SEEN12 Oct 2025
DORMANT311 days
NOW CONNECTED TOBABYLON Effect Broker

Static demonstration. In production, resolves directly to the immutable SourceRecord sealed by SHA3-256.

ILLUSTRATIVE SPECIMEN · LOCAL APFS RUN
🛡ILLUSTRATIVE SPECIMEN · LOCAL APFS INTERCEPTION
AI
AGENTClaude 3.7 Sonnet (Task #4829)
ACTION REQUESTED:DELETE 234 FILES
DIRECTORY:~/Projects/
AGENT-DECLARED REASON:"Clean temporary build artifacts"
RISK LEVEL:CRITICAL · Irreversible Filesystem Mutation
TRIGGERED RULE:Policy.RequireApprovalOnWildcardDelete

Static demonstration of destructive mutation interception prior to filesystem commit.

CONTROL · BABYLON GUARD

Let AI work. Keep the veto.

Agents execute within a fail-closed sandbox. Every irreversible file deletion, shell execution, or network effect requires explicit authority or biometric friction.

VERIFY · NEMESIS

Don't trust the boundary. Attack it.

Assurance isn't a promise. It is an active, continuous challenge against formal invariants to observe which frontiers hold under documented conditions.

01

Model checking

Lean 4 reflex proofs by decide and Z3 SMT bounded verification.

02

Kernel adversaries

Stress testing against TOCTOU race conditions and atomic renames.

03

Crash injection

SIGKILL injection across 5 transactional phases with zero ambiguous recoveries.

04

Mutation testing

Resilience against nonce manipulation and tampered intent parameters.

05

Independent reproduction

Open test harnesses and reproducible artifact hashes.

CLI TUI ARCHETYPE · SILICON CAPTURE

Terminal Observability with babylon top

Sample projection based on a static capture of the TUI executed on a local test harness (Darwin arm64 on APFS):

babylon top — silicon-specimen (Darwin arm64 · APFS local harness) — 120x34
● STATIC CAPTURELOCAL APFS HARNESS
[01 · CORTEX · REMEMBER]LATENT IDEA THREADS & SOURCE PROVENANCE
THREAD IDSTATEDORMANTSOURCE RECORD (SHA-256)EXERGY
th-0482-authRESURRECTED311dsha256:7f9a12c4...e8100.942
th-0391-cacheDORMANT184dsha256:4b281f9a...02cd0.812
th-0219-seqlockDORMANT92dsha256:88e011ac...55df0.785
[02 · BABYLON · CONTROL]7-TUPLE BROKER & CAUSAL RECEIPT PHASES
EFFECT REQAGENT / PRINCIPALOPERATION & TARGETDECISIONCAUSAL PHASE
#1042-mutClaude-3.7 (p#4829)DELETE ~/Projects/*DENY (FAIL-CLOSED)ABORTED (Phase 01)
#1041-wrtAgent-014 (p#4828)WRITE dist/assets/site.cssALLOWCOMMITTED (COSE_Sign1)
#1040-renAgent-008 (p#4827)ATOMIC RENAME tmp/ledger.walALLOWCOMMITTED (COSE_Sign1)
[03 · NEMESIS · VERIFY]POPPERIAN FALSIFICATION & ADVERSARIAL CHALLENGES
INVARIANTSAFETY SPECIFICATIONFAULT MODEL PERTURBATIONEVIDENCESTATUS
NEM-I1Capability GatingUnauthorized wildcard dispatch0/10,000 leaksSUPPORTED
NEM-I2Atomic QuarantineConcurrent TOCTOU race injectionsZero escapeSUPPORTED
NEM-I4Crash AtomicitySIGKILL_SIMULATED (harness APFS)WAL deterministaSUPPORTED (SIMULATED)
▲ EMPIRICAL DEMARCATION NOTICE

Empirical demarcation notice: This projection is a static capture of the babylon top TUI archetype executed on a local test harness (macOS Darwin arm64 on APFS). It is not a live remote stream. In the current release, all 6 invariants are cataloged as STALE pending automated continuous pipeline attestation. Review verified bounds in Assurance & Limits.

CAUSAL TEMPORAL ARCHITECTURE

Past, Present, and Future

How the three domains coordinate around the agent lifecycle:

PASTO1 · LP(x) SHA3-256

CORTEX

CORTEX · Recover context and decisions

ProposalContext ──►
TRUST BOUNDARY
FUTUREAX-0 · 7-TUPLE

BABYLON

BABYLON · Delimit and govern effects

◄── EffectBroker
AI AGENTClaude · Codex · Gemini · Autonomous Swarms
EMPIRICAL SILICON EVIDENCE
EVIDENCE & ASSURANCEO8/O9 · COSE_Sign1

NEMESIS

NEMESIS · Popperian Falsification

[NEM-I1] Capability Gating[NEM-I2] Atomic Quarantine[NEM-I3] Path Forgetting[NEM-I4] Crash Atomicity
UNDER THE HOOD · THE BRUTALIST SUBSTRATE

The Silicon Machinery Beneath the Product

No stochastic hand-waving: every interaction is bound to deterministic hardware primitives, cryptography, and systems theory:

01SUBSTRATE

C5-REAL Substrate

Landauer dissipation bounds, Chentsov information metric, and asymptotic compression without operational friction.

02SUBSTRATE

WORM Ledger

Single-writer SQLite WAL with Merkle Mountain Ranges enabling O(log N) inclusion proofs.

03SUBSTRATE

Effect Broker & 7-Tuple

Every mutation evaluates ⟨Authority, Capability, Policy, Resource, Effect, Context, Epoch⟩ fail-closed.

04SUBSTRATE

Hardware Touch ID Gate

Local Apple Silicon biometric friction via NIST P-256 Secure Enclave with zero reuse duration.

05SUBSTRATE

Popperian Falsification

NEMESIS challenges security assertions under adverse fault models. Attestations bind evidence, not ontic truth.

06SUBSTRATE

Decoupled Causal Memory

Axiom O1: Source ≠ Inference. Primary records remain immutable under cryptographic SHA3-256 seals.