Explicit scope
Goals, projects, accounts, tools, time, and external effects remain bounded by a scope the user can understand.
TRUST / GOVERNANCE
Autonomy grows.
Control stays human.
EvoForge is designed so important work remains bounded, observable, interruptible, attributable, and recoverable as agents become more capable.
01 / TRUST CONTRACTWHAT THE USER KEEPS
Power must remain legible.
Security is not a hidden claim about implementation. It is a set of product behaviors users should be able to see and rely on.
Observable work
Important progress, waiting states, decisions, outcomes, and failures are surfaced without requiring the user to guess.
Human interruption
Users can pause, redirect, reject, or stop high-agency work instead of waiting for the system to release control.
Attribution + recovery
Results stay connected to the work that produced them, and failures preserve a clear route to inspect, resume, or reverse.
02 / AUTHORITYIMPACT DEFINES RISK
The same action can carry a different consequence.
Governance should consider the target, sensitivity, reversibility, and external impact of work, not only the name of the action.
FIG.02 / AUTONOMY RADIUSCAPABILITY MUST NOT OUTRUN TRUST
03 / RECOVERYFAILURE IS PART OF WORK
Failure should stop the action, not erase the work.
Reliable autonomy does not mean never failing. It means preserving completed work, showing current reality, and offering a trustworthy continuation path.
Preserve progress
Completed and verified work remains distinguishable from unfinished or uncertain work.
Reconcile reality
Before continuing, the system checks what changed instead of assuming the old environment still exists.
Explain the choice
Users can see why retrying, replanning, asking for help, or stopping is the appropriate next move.
Reverse when possible
Changes preserve an understandable path back wherever the underlying action permits it.