Governed Application · The enforcement point
The assistant itself, every exchange gated on prompt and on response before anyone sees it.
Two gate strips fire per exchange, use-auth and inbound-disclosure, then outbound-disclosure and prohibited-activity.
The path grows a segment per exchange, so the projection cone can reach the drift region before a breach.
The inferred heading is a signal about the pattern of use, never a judgement of the person.
Why the Suite is different
A per-output verdict against a signed library, not a probabilistic guardrail.
Every output carries a compliance token bound to a named library version.
A bounded convergence loop brings a divergent output back into bounds where it can.
Author, operator, oversight and inspector are separated by keys and bounded views.
One Suite, six seats
This governs information use and disclosure. It does not govern targeting, fire-control, or any actuation of force. Demonstration scenario; the depicted units are fictional; illustrative data only.