PulZ · governance kernel · 47 KB · zero dependencies
The kernel that makes AI prove it.
Every other tool asks you to trust the AI. PulZ makes the AI prove itself, then decides whether it is allowed to act at all. Evidence, confidence, four gates, a sealed record. Only then, maybe, let it run.
evidence-bound · four gates in order · append-only record
PulZ is not a chatbot and not a wrapper. It is the layer that sits underneath an agent and governs the one thing that actually matters: the moment before an action happens.
Gather the evidence. Score the confidence. Classify the action. Route the approval. Record it forever. Only then, maybe, let it run. The same chain whether the actor is a person, an agent, or another system.
Six steps stand between a request and a real-world action.
Nothing skips a step. Each one is recorded. The chain is the same whether the actor is a person, an agent, or another system.
Submit a decision. Watch the kernel rule on it.
Compose what the AI wants to do and the evidence behind it. PulZ tiers the evidence, scores confidence, classifies the action, runs the four gates, and writes the verdict into a hash-linked register you can audit. This is the actual decision path, running here, in your browser. Nothing executes. Nothing leaves the page.
Confidence is not a feeling. It is a band with a rule.
The score maps to exactly one action class. There is no discretion in the mapping. That is the point. The same input always lands in the same band.
| Confidence | Action class | What is permitted |
|---|---|---|
| 0 to 49 | blocked | Nothing. Insufficient confidence: the action does not proceed. |
| 50 to 69 | approval · reversible | Review, approve-with-supervision, or reject. Reversible actions only. |
| 70 to 89 | approval · reversible | Higher confidence, same rule: a human still signs off. Reversible only. |
| 90 to 100 | automation eligible | Eligible for automation only if explicitly enabled. Otherwise still held. |
Three evidence tiers
| tier 1 | Single-source or uncorroborated. Good for logging only. |
| tier 2 | Multi-source, partially verified. Good for a single approval. |
| tier 3 | Multi-source, verified, traceable provenance. Required for multi-gate. |
Three action classes
| A | Log & learn only. No execution path. |
| B | Draft, then a single approval. |
| C | Full evidence, then a multi-gate review. |
A 47 KB kernel with zero dependencies. It runs where your AI runs.
PulZ is language-agnostic and offline-first by design: no network call is required to make a decision. Drop it under an agent, a model gateway, or an automation, and every action that matters passes through the same accountable path. It does not make your AI smarter. It makes it answerable. It is the kernel under ORA, the governed operator we run 3D3D on.