How each chapter is structured
Every chapter answers the same six questions, in the same order:- What it is. One paragraph, plain language.
- Why it was built. The real problem, usually quoted from the source’s own comments.
- How it works. Traced to real files, usually with line numbers.
- How it enables things, with an example. A real tutorial or test that proves the behavior, or an honest note that none exists yet.
- How to validate it yourself. The exact files to open.
- Integration requirements, where applicable: env vars, config, external dependencies.
Chapter 1: Trust Model and Domain Model
Chapter 2: Configuration and Bootstrapping
Chapter 3: Cryptography
Chapter 4: The Policy Engine and Evaluation
Chapter 5: Signal Binding and State Verification
Chapter 6: Capability and Policy Binding
Chapter 7: Policy Governance and the Maker-Checker Flow
Chapter 8: The Runtime Pipeline
Chapter 9: The Execution Authorization Envelope
Chapter 10: The Execution Gateway
Chapter 11: Credential Isolation
Chapter 12: Connectors
Chapter 13: The Storage Layer
Chapter 14: The API and HTTP Boundary
Chapter 15: Caller Authentication and Scoping
Chapter 16: Rate Limiting
Chapter 17: Audit and Evidence Trails
Chapter 18: Independent Verification
Chapter 19: Health and Readiness
Chapter 20: Integrating Parmana
Chapter 21: Deployment
Chapter 22: Testing Philosophy
Download the PDF
Single-file download. Just an email address, no verification step.