Nisaba LLC · August 10, 2026 · Substrate is not the product — governed process proof is.
| Layer | Name | Status | What it proves |
|---|---|---|---|
| L0 | Substrate | Live | Ed25519 · SHA-256 chain · gist/TSA anchor · public /verify |
| L1 | Process physics | Live | POSS-2 completeness · DRP-1 O/F/P · TCB · Restraint Atom (POST /tcb/restraint-atom) |
| L2 | Institutional | Live | Pre-dispute bundle · bind-gate · Exhibit D · diligence + SSRN/GAAIA/NIST |
| L3 | Formal grammar | Published | Pāṇini precedence (6972380) · issuer-pays impossibility (7221561) · Kolmogorov per-instance boundary |
| L4 | Proof-not-log | Horizon | zkAgent transcript proofs · STARK · ML-DSA-65 PQ roots on Merkle apex |
| L5 | Constellation | Horizon | SCITT federation · multi-witness quorum cosmology · ZK restraint without policy disclosure |
One API call replaces two-phase commit-reveal UX. Returns a single verify_url with capability + opportunity + decision proofs, Handler Receipt binding, and deontic F (forbidden enforced).
POST /tcb/restraint-atom · SDK prove_restraint()
| They stop at | We add |
|---|---|
| Agent action / inaction receipts | Class B completeness (silence counts) |
| Commit-reveal restraint | Restraint Atom + frozen Handler Receipt |
| Developer SDK | Carrier bind-gate · counsel exports · institutional record |
We prove specification adherence under frozen law — not that the AI was morally or statistically correct. Per-instance certificates forever; universal safety proof never.