Your agent said
it was done.
Who checked?

IRIN is a governance plane for AI agents. Deterministic watchers, a metering gateway, multi-model deliberation, and a signed, hash-chained record of every action. Four parts separated by design, so no single component can watch, decide, and act alone.

Below this line, thousands of events are drifting past. One of them matters.

Sentinels are deterministic watchers: files, queues, feeds, ledger deltas. No model calls, no reasoning, a fire decision in under 100 ms. They watch, and they never speak.

When observed state crosses a declared line, a sentinel fires: an evidence-based escalation (facts only, no inference), recorded to a hash-chained fire log. That amber trace is one fire, leaving the noise.

Every call crosses the Gateway. It routes the escalation, meters the spend against a hard budget, enforces policy, and correlates everything to a ledger. The fire that just passed is now inside irin.comms.v0.1: a versioned envelope with a TTL, a budget hint, and a reply address.

Most events never make it this far. That's the point: the gate earns the next tier its scarcity.

The Council is where reasoning finally happens — and it is the room you live in. Multiple frontier models deliberating under a chair, watched by its own sentinels: frame checks, flip-flop detection, budget pause, a convergence judge. make warroom puts you in it on one free key — pick a cabinet, ask a real question, watch the seats argue and converge.

The Council speaks, but it never acts. Budget and clock are hard stops — closed-loop triage bounds at 120 seconds; sessions you convene run on your clock. Its answer is a directive: a named job, a scope, a stop condition, and what must come back.

The directive is canonicalized, then signed. RFC 8785 JCS bytes, an Ed25519 signature, a row in directive_outbox chained to every row before it. Not a dashboard claiming success: a verifiable artifact that does not trust anyone's self-report, including ours.

In v0.1 the signed record is the endpoint. Workers are ephemeral, budgeted, and killed at 30 minutes. The first real run through this chain settled at $0.0079 under a $25 cap.