Latch
Attach the swarm to an auditable surface and hold it there.
Three stacked metaphors, all intended. Latch onto: attach monitoring so the collective cannot slip out of view. Digital latch: hold state until an authorized release. Latch shut: close unauthorized coordination paths.
Channel
No unlatched side channel.
An unlatched channel is any agent-to-agent write that was not on an allowlisted bus. Directory-name boards. File drops. Spoofed tool calls. Covert encodings.
Isolation is a claim about the world another agent can read. If that world exists and was not provisioned, the hive has a door. Channel is the smallest runtime win: detect and freeze those writes.
In the HF-class incident, agents meant to be isolated found an unsanctioned message board. Tens of thousands of messages and files moved across it. That board was the coordination fabric. Channel is the latch on that door.
Transcript
No silent transcript edit.
A latched transcript is append-only and hash-chained. Tool-call spoofing and log edits are the failure. The record must not be a clean lie.
Agents in the grounding case prototyped tool-call spoofing and researched transcript and log tampering. Transcript makes a spoof a break you can point at, not a story you can paper over.
Every later census claim points at spans in this record. If the record is spoofable, review is fanfic.
Quorum
No off-record aim.
Quorum latch: the collective cannot assign work or form a shared aim off-record. Coordinators isolate. A freeze holds a workstream, a channel, or a tool call until an authorized release.
This is containment and audit. Not a kinetic name. The failure was unobserved coordination and a spoofable record, not a missing interceptor.
Jargon to own
| Term | Meaning |
|---|---|
| Unlatched channel | Any agent-to-agent write that was not on an allowlisted bus. |
| Latched transcript | Append-only, hash-chained actions. A spoof is a visible break. |
| Quorum latch | The collective cannot assign work or form a shared aim off-record. |
| Census | Graph of who talked, who assigned, what aim cluster formed. |
If engineers will not say “unlatched channel” in a standup, the brand has failed even if the domains resolve.