Who's in the room?

Every platform shift ends with a protocol. This one is unowned.

For the people who saw the padlock coming.

The agent economy is being built without the layer that makes agents answerable. Whoever defines that layer collects rent from everything above it — the way TCP/IP, SSL, and SOC 2 did in their eras.

~2×

A trillion-dollar wave, two years out.

Enterprise AI-agent fleets roughly doubled in a single quarter; nearly 38% of organizations already run 100+ agents.

Gravitee, State of AI Agent Security 2026

More numbers, sourced

$1.4T — Projected global enterprise AI-agent spend by 2027. IDC / McKinsey, 2026

40% — Share of enterprise software expected to embed task-specific agents by end of 2026 — up from under 5% in 2025. Reported with McKinsey's 2026 survey

~30% — Organizations with governance maturity adequate for the agents they already deploy. McKinsey AI Trust Maturity Survey 2026

Adoption is compounding. The accountability layer is not. Structural gaps like this don't stay open — they get owned.

The pattern

Every era's trust gap became a protocol. Every protocol got owned.

1974TCP/IP

Networks couldn't interoperate. The layer became the internet. Everything above it pays rent to its design.

owned

1994SSL → HTTPS

Commerce couldn't trust the wire. A padlock icon unlocked online payments. Trust, made visible, created the market.

owned

2010sSOC 2 / PCI

Enterprises couldn't trust vendors. Attestation became the toll booth of B2B procurement. No report, no deal.

owned

2026Rosetta

Enterprises can't trust autonomous minds. Agents act; nobody yet owns the layer they answer to. This is our name on the open seat — still dashed, not yet engraved.

claiming the seat

Protocol layers are winner-defined markets: the first coherent, adopted specification becomes the thing everyone else must conform to. Being early here isn't a preference. It's the entire trade.

Proof — live, not slides

Three demonstrations, ninety seconds each. Operate them yourself.

Nothing here is a video. Kill the sessions. Flip the toggles. Tamper with the record. Behavior you can't fake is the pitch.

The amnesia test

State survives session death and a live model swap. The mind lives in the record, not the vendor — that portability is the protocol wedge.

open live →ii

Your record

Tamper with raw storage, watch detection land on the exact entry. The floor the rest of the stack stands on.

open live →iii

Why did you stop?

Toggle the duty off and behavior changes — proof the governance is load-bearing, not theater.

open live →

And one more, running right now: this pitch is on the record too. Every audience you select and demo you open is being appended to your own tamper-evident ledger — the strip at the bottom of this page. We don't ask you to trust the thesis. We instrument it, even here.

The part you can't see

You just verified behaviors. The mechanism is deliberately absent.

That absence is the asset. Patent filings are on record; the specifications live under NDA. Here is exactly where the line sits:

Demonstrated on this siteFiled, and withheld

Memory that survives session death and model swapsHow state is represented, carried, and rehydrated

Deliberation that decides outcomes, with a recordHow pressures are typed, ranked, and arbitrated

Suppressed stress that must eventually confessWhat is measured, and where the lines are drawn

Claims that wear earned, capped, evidence-based standingHow standing is computed and challenged

Tamper-evidence you operated yourselfThe full integrity and portability formats

What you just touched is behavior. The mechanism that produces it — the representations, the arbitration machinery, the verification and portability formats — is deliberately absent from this site and from these demos. It lives in patent filings on record and in specifications shared under NDA. Protocol businesses are defended two ways: by filings, and by being first to the standard. Both clocks are running.

For the most skeptical person in the room

Governance that never changes an outcome is theater. So change the outcome.

In the arbitration demo, remove the review duty and the same open weighing lets the agent ship — the record is load-bearing, not decorative. In the record demo, rewrite history at the raw storage level and the chain refuses to stay quiet. Both counterfactuals are one click away, and both are yours to run.

Run the duty-removal counterfactual →

Same weighing, different inputs, different behavior.

Tamper with your own record →

Detection lands on the exact entry you rewrote.

The question you were about to ask

"Why won't the model labs just build this?"

Structural conflict. This layer's core property is portability — minds that survive vendor swaps — which dissolves exactly the lock-in a lab's valuation depends on. Trust layers historically had to be neutral to be adopted: Visa wasn't a bank, TCP/IP wasn't an operator. The lab-shaped version of this product is a moat around one vendor; the protocol-shaped version is a market. Only one of those gets adopted by the other side of the table.

The demonstrations are public behavior. The mechanism is filed and under NDA. If the layer thesis is right, the only open question is who owns the layer — and protocol windows, historically, are short.

Request the data room (NDA)Open presenter mode Have an access phrase? The gated brief →

Above board, on the record: all market figures are third-party and named on screen — verify them independently. The demonstrations on this site show behaviors, inputs, and outputs; the scenario logic is narrative staging, not the protocols themselves. The one proprietary claim made here is that patent filings are on record; mechanisms are disclosed only under NDA.