Four-gate per-node pipeline · F : A → B | P · Regulator-readable evidence
Every agent action becomes a typed transformation that must cross a verifiable edge — before it runs and after it answers. Humans define the contract. GEM² audits at the edge. The LLM operates inside an enforced face.