Architecture
A single boundary between an instruction and its execution. Nothing crosses it without a confirmed presence and a valid receipt.
The gateway sits upstream of execution. An instruction is held at the boundary. It is admitted only after the origin condition is satisfied: a present operator, confirmed through the Hearts sequence, bound to that exact instruction.
The boundary is stateless. It holds an instruction for the duration of a single exchange and nothing beyond it.
The point at which the operator completes the sequence. No identity is captured.
The instruction is reduced to a fixed seal and bound to the confirmation.
An Ed25519 receipt, verifiable independently and offline.
Execution proceeds on a valid, single-use receipt, and is refused otherwise.