Explanation

Understanding-oriented. The reasons behind the design, and the parts that are easy to get wrong.

• The trust model — why a valid signature is necessary and never sufficient.
• The harness and its cage — a local-LLM agent that may touch one bundle and nothing else, and how you prove a cage actually holds.
• Measured, not claimed — why this site marks every statement, and what each mark means.