A follow-up to I built an AI dev harness that isn't allowed to trust itself.
The harness I wrote about isn't allowed to trust itself. That was the whole point, and it rested on one sentence:
nothing an agent produces closes without machine-checkable proof, and no irreversible action happens without a human.
I still believe it. But it contains an assumption I didn't notice I was making: that the dangerous thing is unchecked work.
Over one night I rebuilt both halves of that sentence on pi — an open, npm-distributed, forkable agent runtime — mostly to find out how much of my harness was discipline and how much was one host's shape. Two public repos came out of it: pi-eval for the proof half, and pi-gates for the irreversibility half.
