Identity before action
Every agent has a DNA ID registered in the immutable registry before it can do anything. Agents belong to organisations and zones, and identity resolves up the chain.
Every agent action, governed.
Sumway is the governance kernel that sits between AI agents and the world. It does not run agents — it governs them. If an action isn't explicitly permitted, it never happens.
What the kernel enforces
Section titled “What the kernel enforces”Capability ceiling
Agents can only perform actions their DNA explicitly lists. Unlisted capabilities are blocked and written to the ledger.
Passport and visa payments
A payment executes only if it passes policy and a live, human-signed mandate covers it — inside a spend ceiling that concurrent payments cannot race past.
Real-time intercept
For agent-to-agent communication, a governance interceptor sits inside the message broker and evaluates every message before delivery.
Cryptographic audit chain
Every action writes a SHA-256 chained ledger entry. Tampering with any entry breaks the chain and is detected immediately.
Single Go binary
Built in Go. No Python. No Docker required. The same binary is the kernel, the CLI, and an MCP server.