TrigGuard
TRIGGUARD PROTOCOL_SPEC
Open Console

TG-01

No irreversible action executes without explicit authorization.

That is the protocol. Everything else is implementation.

Stable Rev 1.0.4 Updated

The flow

Protocol flow

TrigGuard protocol sequence AI agent to host application, interception at TGP gate, receipt returned, downstream execution only when authorized. AI AGENT HOST APP TGP GATE DOWNSTREAM 1. Executes Action (High Risk) 2. Intercepts Intent Payload 3. [RECEIPT] 4. Authorizes (WITH Receipt) 5. Returns Success

Guarantees

What the protocol commits to

Deterministic outcome
Same valid inputs + policy state → same decision.
Fail closed
No valid PERMIT → no execution.
Signed evidence
Every protocol decision produces verifiable evidence.
Offline verification
Receipts can be independently verified.

Primitives

Protocol primitives

  • RequestSurface, action, context, idempotency - bound before evaluation.
  • DecisionExactly one of PERMIT · DENY · ESCALATE · SILENCE.
  • ReceiptImmutable record of what TrigGuard decided for that request.
  • SignatureEd25519 over canonicalized JSON. Tamper-evident offline.
  • Public keysPublished keys for independent verification without trusting uptime.

Specification

Specification & references