Local-first · Every output audited

The Intent Router for Autonomous Enterprise

SEI translates CEO-level intent into validated, multi-role agentic execution — local-first, every output audited, zero hallucinated citations survive.

Request a Deep-Sync AuditRead the Architecture
Intent
raw directive
Execution Graph
Intent Parser
Role Dispatch
Dispatcher
Guardian
reject ⟲ iterate
Verified Outcome
+ Evidence Index
The Problem

LLMs are unreliable. Executives need infrastructure.

SEI is engineered around the failure modes that make agents unusable at the C-suite.

Chatbots hallucinate citations

SEI's Stage 1 Guardian mechanically verifies every evidence ref — files exist, memory keys recall, API logs exist.

Agent outputs are unaudited

Stage 2 Guardian judges against Sovereign Standards + role rubrics; rejects with required fixes. Never approves by default.

Decisions lose context over multi-step runs

SEI's State Store keeps Step 1 decisions in scope at Step 10 — versioned, hash-sealed, keyword-searchable.

Four Modules

The routing engine, in four parts

Intent Parser

Decomposes raw intent into JSON execution graph; degrades to deterministic keyword router if model unreachable — never fails dark.

Role Dispatcher

Matches graph tasks to 9 Sovereign Roles; sandboxed tool rounds; unregistered roles fall back to analyst — logged, never silent.

Validation Loop

Two-stage audit: mechanical evidence verification + Guardian agent judging against standards. Rejections iterate. Never approves by default.

State Store

Local JSON state machine: working memory, run records, API call logs, validated reports. Versioned, keyword-searchable.

Proof Chain

Tamper-evident by construction

Hash-chained ledger

Every model call appended to a SHA-256 hash-chained ledger. Any post-hoc tampering breaks the chain.

Sealed run records

Each run record is sealed with a content hash linked to the ledger head at finalization.

sei.py verify

Independently re-walk the ledger and validate every run hash from the CLI — no server required.

~ / sovereign — verify
$ sei.py verify run_2026_06_17_001
✓Ledger chain valid
✓37 model calls verified
✓12 evidence refs resolved
✓Guardian verdict sealed
✓Run hash matches ledger head
→ verdict: VERIFIED
hash chain
block_000a91f…
block_001c4e2…
block_0027d10…
block_003f8b3…
block_0042e5c…
chain valid · head sealed
Output

What a Verified Outcome Looks Like

Every run finalizes into a sealed brief. Below: an actual shape of the artifact SEI hands back.

brief.run_2026_06_17_001
Verified Outcome
Status · Verified
Intent
Reduce Q3 tax exposure across EU entities without triggering substance review.
Assigned roles
Tax · Compliance · Treasury
Evidence refs
12 resolved · 0 hallucinated · sources: OECD BEPS, IE Revenue, NL DGT
Guardian verdict
Approved at iteration 3 — rejected 2× for missing authority citation.
Proof hash
sha256:f8b3…2e5c
Ledger head
block_004 · sealed 2026-06-17 09:41 UTC
Who It's For

Built for CEOs, operators, and funds managing multi-agent workflows

If your team is already running agents in production, you have already hit these walls.

Agent output sprawl across tools and chats
Unverifiable AI work landing on executive desks
Lost context across long-running, multi-step workflows
No audit trail for delegated autonomous decisions
Humans stuck acting as routing glue between models
Nine Sovereign Roles

A specialist for every executive surface

Treasury

Exposure, leakage, recovery.

outputLeakage recovery brief

Supply Chain

Routes, disruption mapping.

outputDisruption route map

Compliance

Dispositions with named authority.

outputAuthority-backed disposition

Tax

Named mechanisms, tiered positions.

outputTiered exposure memo

Crisis

Sequenced command, decision trees.

outputDecision tree

Deals

Valuation triangles, deal-killers first.

outputDeal-killer memo

Intelligence

Source-tiered competitive intel.

outputSource-tiered threat brief

Talent

Human-AI hybrid mapping.

outputHuman-AI workforce map

Analyst

Routing fallback for unregistered intents.

outputFallback routing report
The Sovereign Handshake

An event-driven pipeline for the full asset lifecycle

Thread-safe in-process pub/sub. Every emission journals to telemetry. One event can trigger several reactions in parallel — each routed through the Dispatcher → Guardian moat.

01
Concept
GAP_DETECTED
02
Research
RESEARCH_COMPLETE
03
Plan
PLAN_VALIDATED
04
Build
PROTOTYPE_COMPLETE
05
QA
QA_PASSED
06
Deploy
ASSET_DEPLOYED
Thread-safe in-process pub/sub event bus
Every emission journals to telemetry with delivery records
One event can trigger several reactions in parallel
Every reaction goes through the Dispatcher → Guardian moat
Model calls land in the hash-chained handshake ledger
Active Learning

Guardian rejections compound into competence

  • Every Guardian rejection is persisted as a negative example for that role.
  • Before each attempt, workers are shown the role's most relevant past rejections: "LESSONS FROM PAST GUARDIAN REJECTIONS".
  • Standards enforcement compounds across runs instead of resetting.
  • The system gets stricter and more precise over time — not looser.
1Attempt
2Guardian rejects
3Stored as lesson
4Next attempt
5Passes
lesson_store0012 entries
Quickstart

One CLI. Five verbs.

~ / sovereign
Trust & Infrastructure

Built like the systems it replaces

Local-First

Your data never leaves your infrastructure. Ollama local models by default, Anthropic escalation optional.

Never Fails Dark

Deterministic keyword router fallback if no model is reachable. The gateway always responds.

Auditable

SHA-256 hash-chained ledger on every model call. Detect any post-hoc tampering.

Air-Gap Friendly

Dashboard renders to self-contained local HTML. No server required, no cloud dependency.

Deploy SEI

Install the operating layer between executive intent and verified autonomous execution.

Request a Deep-Sync AuditRead the Architecture