Security

Build fleet trust from attributable changes: give every mutation an owner, a signed history position, scoped authority, and an observable decision. An agent fleet can move quickly while each trust transition remains explainable. Roundhouse provides the fleet loop and the concrete trust surface.

• Roundhouse security — trust ratchet, canary evidence, privilege boundaries, and named residuals.
• Trust ratchet — the parent-position rule and membership classes.
• Attack shapes — concrete outcomes and honest residuals.

The Railyard repository provides the companion delivery-control evidence and review trail beside the Roundhouse security surface.