Building a Governed Local AI Application

Problem

A useful AI interface can quietly promote fluent interpretation into institutional state. The application needed to preserve source evidence, constrain privileged transitions, retain correction lineage, and survive export and restoration without allowing model output to approve itself.

Intervention

A typed interface was placed above a constrained Rust transition boundary and bundled SQLite store. After the first design passed only 7 of 35 structural attacks, the storage kernel gained database constraints, authenticated append-only records, anchored exports, collision-safe restore, owner-only storage, runtime model checks, and fail-closed migration behavior.

Observed result

The corrected reference kernel passed its original and expanded adversarial corpora. A public-safe Harbor Room fixture reproduced accept, reject, defer, supersession, export, and restore without exposing private institutional state.