Scripted mission · No model callCOSMIC-ALLOW
A cross-vendor proof-of-allow protocol for AI coding-agent cockpits: deny is the ground state, allow requires an unforgeable sentinel, and a kernel sandbox floor — not the policy layer — is the load-bearing boundary.
- Type
- RFC + reference implementation (cosmic-cli, Apache-2.0)
- Lifecycle
- Published · v1.1
- Evidence
- Supported within scope — the protocol holds across vendors; not a claim that any deployment is secure
What failed
Policy-layer-only enforcement: it can be talked past by the thing it governs.




