Ankayma

One enforcement of the framework, running. A description of the mechanism.

The essay argues that the accountability framework for AI agents already exists, and that the one genuinely new requirement is enforcement at agent speed. An argument like that owes the reader an existence proof: not a paper design, but something that runs. Ankayma is that proof. What follows describes the mechanism — how each of the four insurability conditions is met in practice.

Zone isolation

Zones are isolated as a blind private mesh (WireGuard, zero-trust). The design is blind by construction: a compromised node sees no map of the network and holds no standing route to any neighbor. The path to a critical zone does not exist by default — it is created for the life of an approved short-term grant and disappears when the grant expires. An agent that has taken over a node has nowhere to go: no topology to read, no persistent route to follow.

Authentication the agent cannot forge

Crossing a zone boundary requires two things an agent cannot fabricate: a hardware identity, and a human. Approval is bound to hardware-backed authentication — FaceID, TouchID, or a YubiKey — so a grant exists only if a specific person, on a specific device, produced it. Software alone, however capable, cannot mint a crossing.

Tamper-proof grants, third-party monitored

Every grant is tamper-proof: it cannot be edited or deleted after the fact, and it is monitored by a third party rather than the operator alone. This is what turns "the AI did it" from an excuse into a checkable fact — the record answers who granted this authority, within what bounds, and signed by whom. A record that cannot be rewritten is also the precondition for any external party to price the risk at all.

A ceiling per zone

Each zone carries its own ceiling — the maximum loss if the entire zone is lost. Ceilings are stated in advance and bounded by the isolation itself: an agent cannot reach effects outside its zone, so the zone's ceiling is the worst case, not a hope. Summed against the capital behind them, the ceilings make the system's exposure a number rather than an estimate.

None of this claims to be the best way. It is one way — evidence that the four conditions can be met by something that runs, and that the question "can this be built" is closed. The framework belongs to everyone; Ankayma is one enforcement of it.