What may an AI system actually do?
The ability to execute an action is not permission to do it. That distinction shapes the architecture.
An initial question about AI authority became a portfolio of 36 distinct execution-control architectures, detailed engineering specifications, and a reusable foundation for applying protections across different kinds of AI systems.
The ability to execute an action is not permission to do it. That distinction shapes the architecture.
Distinct control problems, defined boundaries and a modular system for selecting risk-relevant protections.
Detailed specifications, repeatable enforcement foundations, defined tests and pathways toward qualified integration.
1. The original problem
As AI systems gained tools, memory, delegated tasks, infrastructure access, and the capacity to act across digital and physical environments, a central engineering question emerged: how can increasingly capable systems remain within authority legitimately granted by humans?
Different failures needed different controls. Unauthorized actions, excessive retries, replication, indirect pathways, compute escalation, compromised components, persistent influence and physical effects cannot all be treated as one undifferentiated problem.
The starting principle: define the approved purpose and enforce no more authority, reach, persistence, resources or operational freedom than that purpose requires.
2. How the architecture took shape
SafeWave developed through a sustained human-led, AI-assisted process. Human direction established the governing mission, recognized real-world risks, questioned weak formulations, corrected drift, and preserved final architectural decisions. AI assisted with structured analysis, comparisons, definitions, documentation, technical decomposition and iterative challenge.
Each architecture needed a distinct failure surface, an explicit control objective, and a boundary separating it from neighboring protections.
Preparing patent applications required rigorous distinctions between mechanisms, scope, claims and neighboring ideas. Patent preparation strengthened architectural precision; it did not substitute for implementation or engineering validation.
Specific risks demanded specific controls. The resulting architecture was built one bounded engineering problem at a time.
3. The repeatable development cycle
Define the failure surface, its consequences and the authority at stake.
Distinguish this control from conventional safeguards and adjacent SafeWave architectures.
Define states, gates, interfaces, permitted transitions, failures and recovery.
Test bypasses, compromise, escalation, concurrency and composition.
Specify expected results, traceability, tests and implementation criteria.
Integrity and adversarial reviews asked whether a control preserved legitimate human authority, remained coherent under uncertainty and could be misused or circumvented. Stable definitions, cumulative constraints and preserved reasons for correction helped prevent architectural drift.
4. The Level Four engineering program
The work progressed beyond high-level architectural explanations into substantial, controlled engineering specifications. Selected architectures have Level Four Engineering Packs designed to reduce the work of defining and implementing complex protections from the beginning.
Multiple detailed dependency relationships, integration surfaces, trust boundaries, technical interfaces, contracts, structured schemas and data definitions where applicable.
Authority rules, decision logic, state models, permitted and prohibited transitions, failure handling, interruption and recovery expectations.
Compromised components, unexpected pathways, bypass conditions, excessive retries, concurrency, escalation and cascading effects.
Requirements traceability, test cases, expected outcomes, evidence requirements, acceptance criteria and implementation guidance.
Purpose-built for engineering teams: the objective is to speed risk prioritization and staged implementation, while leaving system-specific integration and independent testing under qualified engineers' control. Pack contents and readiness vary by architecture and controlled version.
5. The Common Substrate
As the portfolio developed, recurring enforcement needs became apparent: declaring authorized boundaries, evaluating proposed actions, recording control evidence, and enforcing a defined response to violations. SafeWave's Common Substrate program examines and validates how much of this foundation can be reused across different stacks.
Start from reusable control and verification mechanisms where evidence supports their applicability.
Add only the specialized SafeWave protections justified by the system's risks and consequences.
Integrate existing customer safeguards and newly developed components, then validate the combined result.
This modular approach is intended to reduce duplicated work and accelerate implementation without implying that every system needs all 36 components.
6. Validation and deeper enforcement
SafeWave has conducted staged engineering verification and independent challenge against carefully bounded claims, including work on the Common Substrate and post-compromise authority containment. A passed test supports its specified claim and limits; it does not establish that every component is proven in every production environment.
The intended starting point is software execution control. For high-consequence systems, SafeWave has also mapped candidate pathways toward stronger protection in operating systems and hypervisors, trusted execution environments, secure elements, firmware, embedded controllers, programmable logic, security processors and potentially silicon.
Mapped pathways are not manufactured implementations. The correct enforcement depth must be determined for each application through feasibility analysis, partner engineering and independent validation.
7. What the program produced
SafeWave's portfolio now comprises 36 architectures, grouped into four System Containment Layers, five Protocol Enforcement Layers, 26 Core Enforcement Substrates and one Protected-Environment Architecture. The architecture is accompanied by patent applications and related filings, detailed engineering records, assessment instruments and technical briefs.
A browser-local AI Risk Questionnaire and an optional Free Confidential Assessment Report, based on submitted answers, help identify vulnerabilities, priorities and possible protections without an obligation to license SafeWave technology.
Engineering Toolboxes allow customers and qualified partners to evaluate relevant specifications, arrange licensing and implement risk-matched controls alongside their own systems.
The architecture and substantial engineering have been developed. Real-world implementation, integration, independent evaluation and deployment-specific validation remain necessary.
The development history explains how the architecture took shape. The Engineering Toolbox Catalogue and free assessment pathway show how an organization can identify its risks and evaluate appropriate protections.