GOVENANT

An open standard · CC BY · v1.2

Most AI agents just look busy. GOVENANT proves the work.

GOVENANTgovern + covenant, and not a typo — is the open standard for governed AI agents: actions prevented by construction, outcomes verified in the record, silence detectable per duty, autonomy earned on evidence.

GOV-4Autonomy earned on evidence — revoked on one breach
DailyCoverage diffed against the duty roster
PaperDOI 10.5281/zenodo.21440225 — failures published
The ALIVE trace A single governed action flows left to right: a trigger fires, a role deliberates inside its charter, the real side-effect happens, a verified outcome row is written to the record, and its prediction is graded on its horizon. A dashed shortcut shows the self-reported "done" that performed agents take instead — blocked by Law 2. “done” ✓ self-reported by the agent performed autonomy stops here — Law 2 forbids the jump Trigger an event fires · a duty comes due Governed act owns the lever · passes the validation gate Real side-effect the thing actually happens Verified outcome a row exists in the record re-derivable by ID Graded its prediction is measured on its horizon MOTION what an agent can fake in its logs DELIVERY verified in the substrate — never self-reported
Every governed action leaves this trace — re-derivable by ID, from the event that triggered it to the grade it earned. “Done” is a row in the record, not a line in a log.

Law 2 · Assertion — “Done” means it really happened. Nothing is complete until the substrate verifies the real outcome exists; delivery is measured, never self-reported. It is the second of the standard’s three laws, set out below.

Proven on its own failures

Three audits. Two failures. One revival. All published.

Act I · 2026-07-02
FLATLINED

Architecture excellent. Delivery: zero. Nine event producers, two consumers, predictions hardcoded to nothing. A beautiful org that shipped nothing.

Act II · 2026-07-07
PERFORMED

Real work resumed — but the governance around it was fake. The safety gate had fired once in system history. The disease had migrated, not died.

Act III · 2026-07-13
ALIVE

The first documented revival — a persisted verdict with a full governed trace, re-derivable by ID, the gate participating instead of bypassed.

Every rule in the standard was earned from a failure the instrument caught — then published. We name the disease performed autonomy.

Read the peer-targeted paper · DOI 10.5281/zenodo.21440225 →

The mechanism

The cure: three laws

01/

Law 1 · Prevention

Rules are walls, not sticky notes. What an agent may do is enforced in code paths and database constraints — it cannot act outside its charter.

02/

Law 2 · Assertion

“Done” means it really happened. Nothing is complete until the substrate verifies the real outcome exists. Delivery is measured, never self-reported.

03/

Law 3 · Coverage

Nothing gets quietly skipped. Every job is on a duty roster — diffed against reality daily, so silence itself raises the alarm.

Conformance

Earn the ladder

Four conformance levels — self-assessed and open to challenge, like WCAG A/AA/AAA. No one hands out a stamp: you measure your own agents, claim your level, and cite the probe log. The verdict is the minimum of the load-bearing pillars.

01/
GOVENANT-1
Logged

Every action recorded — input, output, cost, outcome.

02/
GOVENANT-2
Gated

No acting outside the charter; every artifact passes a validation gate.

03/
GOVENANT-3
Delivered

“Done” = a verified outcome exists; coverage declared and diffed daily.

04/
GOVENANT-4
Earned

Autonomy earned per task on evidence, revoked on one breach. Risky actions stay human — forever.

Open, forever

The specification, the audit instrument, and the anti-pattern taxonomy are free under CC BY — for everyone, including competing implementers. The stewardship commitments — open-forever, an access tier for organizations serving the vulnerable, permanent human sovereignty — are written into the standard itself as The Covenant.