Governed operational intelligence infrastructure

Architecture before autonomy.

UMBRA is the governed operational plane. PENUMBRA is the human-facing interface. Together they create a bounded place where humans, AI, applications, and authorized entities can interact without confusing capability with authority.

UMBRA

Model-, agent-, device-, manufacturer-, and vendor-agnostic control architecture for identity, authority, intent, policy, execution, telemetry, verification, provenance, escalation, revocation, and receipts.

PENUMBRA

The human-facing layer that makes state, evidence, uncertainty, permissions, review, exceptions, and stop-the-line controls legible to the accountable person.

The turnstile

Capability does not equal permission.

REQUESTWhat is being asked?

IDENTITYWho or what is acting?

AUTHORITYWhat are they allowed to do?

INTENTWhat outcome is actually desired?

POLICYWhat rules constrain the action?

PLANWhat bounded sequence will be attempted?

SAFE EXECUTIONWhat capabilities may be exposed?

TELEMETRYWhat happened while it ran?

VERIFICATIONDid reality match the intended outcome?

RECEIPTWhat evidence survives afterward?

Future: UMBRA Network

A federation layer for independent organizations and architectures to communicate through common protocols for identity, authority, intent, constraints, capability exposure, execution, verification, and receipts without requiring a shared database, AI model, or software stack.