● primitive — composes wired kernels dual-rail deterministic kernel · probabilistic input attestation_basis ready for ES256

The verify kernel.

Two rails into one verdict. Rail 1 (deterministic) runs inside the kernel: schema match, value threshold, denied terms, scope, idempotency. Rail 2 (probabilistic) takes a precomputed LLM-judge score from upstream and checks it against a confidence threshold. Both pass → the kernel emits an attestation_basis — a canonical, sorted-key, digest-ready object the caller signs with their ES256 key. Both rails are fail-closed; an unknown check type, a missing required key, or a confidence below threshold all produce FAILED + signable failure evidence (so the failure itself is auditable).

Try it · live

–

Rail 1 · Deterministic–

Rail 2 · Probabilistic–

Input rubric

Output · attestation_basis (sign me)

Where does the LLM call live? Not in the kernel. The kernel is pure deterministic + signable. Your API endpoint calls the LLM (Anthropic, OpenAI, BYOK) with your judge prompt, parses the structured 0-1 score, then passes it into the kernel via llm_judge.score. The kernel validates the score against the threshold + emits the attestation_basis. Your endpoint signs it with ES256 and returns the full attestation. EcoCloud computes the verdict — it never moves money, never signs without your key, never replaces the human at the escrow gate. view source · schema · all kernels