Speed is only safe if there's a floor underneath it. Core's safety layer is that floor — a small set of non-negotiable rules that hold regardless of what any plan, prompt or instruction asks for. They're designed to fail closed: when in doubt, stop and ask a human.
A kill switch
One signal halts all automated action immediately — nothing mutates, publishes or deploys until a human resumes it, with a reason on the record.
ReadProtected assets
A register of things that may never be changed without explicit sign-off — production, DNS, hosting, payments, credentials.
ReadFail closed
If the independent review can't run, the result is never a silent pass — it becomes "needs review," and a human has to approve.
ReadReversible by default
Changes are made so they can be rolled back. Backups first, then act — so a mistake is an inconvenience, not a catastrophe.
ReadGiving AI real reach into real systems only works if the dangerous moves are walled off. These guardrails mean a small team can move quickly and still sleep at night — because the actions that could do lasting harm simply aren't on the table without a person in the loop.