Security Model.
Six fail-closed surfaces. GAL transport. GAL strict-parse. TEE trust anchors. TEE allowlist. TEE freshness. DAO validators. Each surface returns a stable error code on failure; none silently degrades. Breach the outer surface — the inner five still hold.
sigil · liverunning
Six surfaces. All explicit. All typed.
Stable error codes · audit trails · OpenTelemetry traces · structured logging on every node.