FOR ARCHITECTS

Build AI Systems You Can Reason About

Lakhowal is a deterministic enforcement layer, not a model wrapper. You deploy it once. Your predicates are logic. Your boundaries hold.

SYSTEM DESIGN

Core Architectural Principles

Causal Independence

The AI model and the enforcement boundary are causally independent. The model cannot know about LUIPM's decision. The decision cannot be influenced by the model's request.

Deterministic Evaluation

Given the same input action, LUIPM always produces the same decision. No randomness. No internal state drift. You can reason about the system.

Fail-Closed Default

On any predicate failure, the action is blocked. SAFE_STATE is the default. No compensations. No majority voting. Hard boundary.

Latency Budget

The 100ms latency budget is architectural, not aspirational. Each layer has a fixed latency ceiling. If a predicate exceeds its budget, the action is blocked.

Immutable Evidence

Every decision produces an ERTuple committed to the Hydra Ledger. The ledger is append-only. Chain integrity is cryptographically verified.

DEPLOYMENT TOPOLOGIES

Four Ways to Deploy Lakhowal

1. Inline Gateway

Lakhowal runs in-path between the AI model and your action system. Every action is evaluated before execution.

Latency: 5–100ms per action
Deployment: Network-level
Best for: Brownfield integrations, existing action systems

2. SDK-Wrapped

Your application imports the Lakhowal SDK and wraps AI action calls. Evaluation happens locally.

Latency: 5–100ms per action
Deployment: Application-level
Best for: Greenfield AI applications, tight coupling desired

3. Shadow Mode

Lakhowal runs as a non-blocking observer. Actions fire normally; permits are logged in parallel.

Latency: 0ms blocking latency
Deployment: Testing phase
Best for: Validation, tuning, risk assessment

4. Air-Gapped

Lakhowal runs in your VPC with no egress. Full computational autonomy. Highest assurance.

Latency: 5–100ms per action
Deployment: Isolated network
Best for: Regulated industries, air-gapped compliance

PREDICATE DEVELOPMENT

Writing Governance Logic

Predicate Interface

Predicates are functions that evaluate an action and return a boolean: permitted or denied. They can be written in Python, Go, JavaScript, or any JVM language.

predicate(action: Action) → bool
// True: permit. False: deny.

Testing in the Laboratory

Deploy your predicate to the Laboratory sandbox. Run historical action logs through it. See counterfactual permits. Tune logic without affecting production.

Deployment Options

Predicates can be deployed as:

  • Inline functions (compiled into LUIPM)
  • Remote services (called over gRPC)
  • Time-based policies (cron-scheduled updates)
  • External oracle calls (prices, ML predictions)

Versioning & Rollback

Predicates are versioned. You can enable/disable versions without redeployment. If a predicate starts denying too many actions, roll back instantly. Full history is immutable.

OBSERVABILITY

Monitoring & Profiling

Latency Distribution

Real-time histograms of evaluation latency (p50, p95, p99, p99.9). Identify slow predicates.

Permit Rate Tracking

How many actions are approved vs denied? By action type? By time of day? Spot drift in approval patterns.

Ledger Queries

Query the Hydra Ledger in real time. Understand causal chains. Debug permit decisions. Build compliance reports.

Integrity-Flux Tracking

I_φ trending up? Model reasoning is becoming unstable. Trending down? Reasoning is stabilizing. Use for anomaly detection.

NEXT STEPS

Build Your First Deployment

Step 1: Define Your Action Classes

What decisions will AI make? (e.g., approve_transfer, deny_loan, adjust_threshold). Each needs its own predicate set.

Step 2: Write Your First Predicate

Start simple: Is the action within policy bounds? Use the Laboratory to test and iterate.

Step 3: Deploy Shadow Mode

See what permits would be issued in production without blocking real actions. Build confidence in your predicates.

Step 4: Go Inline

Enable enforcement. Every action now passes through LUIPM. Boundaries hold. Evidence is immutable.

Ready to start building? The Laboratory is ready for your first predicate.

Access the Laboratory