Proof

Reliability and governance archive: proof depth, not the pitch.

Governance is enforced at four deterministic boundaries: Authority, Attestation, Behavioral Constraint, and Physical Isolation.

Downloadable enforcement artifacts map to the four-layer governance stack, Authority Gate, Immutable Receipts, Drift Guard, and Gated Substrate, structured for SOC 2 AI, ISO 42001, and EU AI Act readiness.

Independently validated. Someone else's system attests to these. None of them rests on my own word.

Proctor was named a finalist in UiPath AgentHack 2026, Track 3 (UiPath Test Cloud). 31 finalists were selected from the 203 solutions that reached judging, and Track 3 accounted for 11 of them. Verify: UiPath Community Forum finalist announcement, dated 2026-07-20

A pull request authored by OrionArchitekton is merged into Arize-ai/openinference, a public repository with 1,113 stars. Verify: gh api repos/Arize-ai/openinference/pulls/3238 --jq '{merged,author:.user.login}' && gh api repos/Arize-ai/openinference --jq .stargazers_count

A pull request authored by OrionArchitekton is merged into punkpeye/fastmcp, a public repository with 3,236 stars. Verify: gh api repos/punkpeye/fastmcp/pulls/275 --jq '{merged,author:.user.login}' && gh api repos/punkpeye/fastmcp --jq .stargazers_count

Publicly reproducible. My own CI and releases. The claim is that you can re-run every check yourself, not that a third party audited it.

552 tests pass in CI across 8 public repositories: notary 159, reprise 92, schemafit 90, failclosed 59, mcp-context-budget 56, standing-questions 55, fork-around-find-out 39, orion-skills 2. Verify: for r in notary reprise schemafit failclosed mcp-context-budget standing-questions fork-around-find-out orion-skills; do id=$(gh run list -R OrionArchitekton/$r --branch main --limit 1 --json databaseId --jq '.[0].databaseId'); echo "== $r"; gh run view $id -R OrionArchitekton/$r --log | grep -aE '[0-9]+ passed|Tests [0-9]+ passed|Ran [0-9]+ test'; done

failclosed contains exactly 59 test definitions across its 3 test files, matching the 59 tests its CI run executes. Verify: for f in test_graphql_helpers.py test_parse_codex_output.py test_resolve_bot_threads.py; do gh api repos/OrionArchitekton/failclosed/contents/$f --jq .content | base64 -d | grep -cE '^[[:space:]]*def test_'; done

schemafit publishes 5 released versions on PyPI, 0.1.0 through 0.5.0, MIT licensed. Verify: curl -s https://pypi.org/pypi/schemafit/json | python3 -c "import json,sys;d=json.load(sys.stdin);print(sorted(d['releases']), d['info']['license'])"

mcp-context-budget publishes 1 released version on PyPI, 0.4.0, MIT licensed. Verify: curl -s https://pypi.org/pypi/mcp-context-budget/json | python3 -c "import json,sys;d=json.load(sys.stdin);print(sorted(d['releases']), d['info']['license'])"

Both published packages release through PyPI Trusted Publishing. Both release workflows request an OIDC id-token and reference no API-token secret. Verify: for r in schemafit mcp-context-budget; do echo "== $r"; curl -s https://raw.githubusercontent.com/OrionArchitekton/$r/main/.github/workflows/release.yml | grep -nE 'id-token|secrets\.'; done

The quality gates publicly fire rather than wave work through: reprise's CI history on main includes a push run where the Typecheck step failed the build, on 2026-07-26. Verify: curl -s https://api.github.com/repos/OrionArchitekton/reprise/actions/runs/30221340528 | python3 -c "import json,sys;r=json.load(sys.stdin);print(r['head_branch'],r['event'],r['created_at'][:10],r['conclusion'])"; curl -s https://api.github.com/repos/OrionArchitekton/reprise/actions/runs/30221340528/jobs | python3 -c "import json,sys;j=json.load(sys.stdin)['jobs'][0];print(j['name'],j['conclusion'],[s['name'] for s in j['steps'] if s['conclusion']=='failure'])"

failclosed's enforcement contract is runnable by any stranger: a fresh clone passes its 59-test suite, which includes tests asserting that unparseable and schema-invalid reviewer output blocks a MERGE_READY verdict. Verify: git clone --depth 1 https://github.com/OrionArchitekton/failclosed && cd failclosed && python3 -m pytest -q

The orion-skills library publicly catalogs 26 agent skills as individually readable SKILL.md files, read 2026-07-27. Verify: curl -s "https://api.github.com/repos/OrionArchitekton/orion-skills/git/trees/main?recursive=1" | grep -oE '"skills/[^"]*/SKILL.md"' | wc -l

Three repositories pin every third-party GitHub Action to a full commit SHA rather than a floating tag: notary, reprise, and fork-around-find-out. Each has exactly one workflow file, so the check covers all of them. Verify: for r in notary reprise fork-around-find-out; do echo "== $r"; gh api repos/OrionArchitekton/$r/contents/.github/workflows --jq '.[].name'; gh api repos/OrionArchitekton/$r/contents/.github/workflows/ci.yml --jq .content | base64 -d | grep 'uses:'; done

Published work and live surfaces. Self-published and self-hosted. These establish volume, recency, and that the systems serve live. None of it is reach, endorsement, or third-party review.

43 individually addressable articles are self-published on danmercede.com: 34 essays under /thoughts and 9 long-form guides under /guides, each enumerated in the public sitemap, read 2026-07-27. Verify: curl -s https://www.danmercede.com/sitemap.xml | grep -oE 'danmercede.com/(thoughts|guides)/' | sort | uniq -c

40 articles are published on dev.to under the danmercede account, dated 2026-06-20 through 2026-07-24, and 37 of the 40 declare a rel=canonical URL pointing back to danmercede.com or danmercede.online, read 2026-07-27. Verify: curl -s "https://dev.to/api/articles?username=danmercede&per_page=200" | python3 -c "import json,sys;a=json.load(sys.stdin);print(len(a),min(x['published_at'][:10] for x in a),max(x['published_at'][:10] for x in a),sum(1 for x in a if str(x.get('canonical_url')).startswith(('https://www.danmercede.com/','https://www.danmercede.online/'))))"

The Hashnode publication danmercede.hashnode.dev carries 32 published posts, and all 32 declare a canonical URL pointing back to danmercede.com or danmercede.online, read 2026-07-27. Verify: curl -s -X POST https://gql-beta.hashnode.com -H 'Content-Type: application/json' -d '{"query":"query{publication(host:\"danmercede.hashnode.dev\"){posts(first:50){totalDocuments edges{node{canonicalUrl}}}}}"}' | python3 -c "import json,sys;p=json.load(sys.stdin)['data']['publication']['posts'];print(p['totalDocuments'],sum(1 for e in p['edges'] if str(e['node']['canonicalUrl']).startswith(('https://www.danmercede.com/','https://www.danmercede.online/'))))"

A public speaker profile exists on Sessionize, listing speaking topics across AI governance and agentic systems. A self-managed profile, not third-party recognition. Verify: https://sessionize.com/dan-mercede/

Each of the 19 product pages under danmercede.com/works serves live with its own product title, asserted against an expected-title map rather than a status code. Verify: set -euo pipefail; while IFS='|' read -r s want; do got=$(curl -sL --fail --show-error https://www.danmercede.com/works/$s/ | grep -o 'title>[^<]*' | head -1); case "$got" in *"$want"*) echo "OK $s";; *) echo "FAIL $s: $got"; exit 1;; esac; done <<'EOF' agent-demo-video|automated, narrated, captioned demo videos algorithm-reviews|a review whose reviewing is reviewable codex-rule-ledger|evidence-bound audits for Codex runs engram|a memory engine for AI agents failclosed|Fail-closed merge admission control fork-around-find-out|speculative execution for agent safety invisible-hand|an agent economy where on-chain settlement localfiscal|Local-first private receipt mcp-context-budget|enforce MCP tool-surface budgets notary|the context lie detector orion-skills|skills for Claude Code plainspeak|AI that reads the fine print proctor|behavioral regression testing for AI agents quorum|the decision memory for your Slack workspace rekindle|your abandoned side project misses you reprise|check what you already generated schemafit|Lint LLM structured-output standing-questions|ask a live stream once whisperways|noise-aware eVTOL flight corridors EOF

danmercede.online, the public raw working log, lists 117 dated entries in its sitemap, read 2026-07-27. Verify: curl -sL https://www.danmercede.online/sitemap.xml | grep -cE '/[0-9]{4}-[0-9]{2}-[0-9]{2}-'

Six of the shipped tools serve live public demos, read 2026-07-27: Reprise, Fork Around & Find Out, Standing Questions, Quorum, Notary, and Engram. Verify: set -euo pipefail; while IFS='|' read -r u want; do got=$(curl -sL --fail --show-error https://$u | grep -o 'title>[^<]*' | head -1); case "$got" in *"$want"*) echo "OK $u";; *) echo "FAIL $u: $got"; exit 1;; esac; done <<'EOF' reprise-murex.vercel.app|Reprise fork-around-find-out.vercel.app|speculative execution for agent safety standing-questions.vercel.app|Standing Questions quorum-slack-agent.vercel.app|Quorum notary-replay.vercel.app|Notary engram.orionbot.online|a memory engine for AI agents EOF

Orion Intelligence Agency, the consulting lane I operate, publishes 15 individually addressable insight articles on its live site, each listed in the public sitemap, read 2026-07-27. Verify: curl -s https://www.orionintelligenceagency.com/sitemap-0.xml | grep -c 'insights/'

OIA's case-studies page publishes anonymized engagement shapes under an explicit disclaimer: Not invented guarantees. They show how we work, not promised metrics. Verify: curl -s https://www.orionintelligenceagency.com/case-studies | sed 's/<[^>]*>/ /g' | tr -s ' ' | grep -oE 'Not invented guarantees|These are anonymized engagement shapes|They show how we work, not promised metrics' | sort -u

Five primary pages of the OIA site (home, about, services, contact, and case-studies) each disclose the operating entity: Orion Intelligence Agency, LLC, founded 2025 in Ohio. Disclosure on my own site, not an independent registry record. Verify: for p in "" about services contact case-studies; do printf '/%s: ' "$p"; curl -s "https://www.orionintelligenceagency.com/$p" | grep -c 'Orion Intelligence Agency, LLC, founded 2025 in Ohio'; done

What this page does not claim. The limits are part of the evidence. A proof page that lists only wins is marketing.

Self-run CI is not third-party review. The test counts above come from my own pipelines. Reproducibility is the claim; independent audit is not.

6 of the 14 tool repositories ship no CI at all: engram, proctor, agent-demo-video, invisible-hand, plainspeak, and whisperways. Verify: for r in failclosed orion-skills schemafit mcp-context-budget engram notary proctor reprise agent-demo-video invisible-hand plainspeak standing-questions whisperways fork-around-find-out; do printf "%s " "$r"; gh api repos/OrionArchitekton/$r/contents/.github/workflows --jq '[.[].name]|join(",")' 2>/dev/null || echo "NO CI"; done

Fork Around & Find Out was submitted to Daytona HackSprint #5 and won no prize. It appears in the public project gallery with no winner badge. Verify: Daytona HackSprint #5 Devpost project page

Invisible Hand is listed on the SwarmHack gallery with judging locked and no award, prize, or placement. Verify: tokens& SwarmHack project page

No paying-customer outcomes are published here. The reference architectures on this page are illustrative patterns, not engagement records, and each download opens by saying so.

No third-party editorial placement exists to date. Every article above is self-published or syndicated under my own canonical URLs, and no conference talk has been delivered to date.

Source: Proctor was named a finalist in UiPath AgentHack 2026 Source: A pull request authored by OrionArchitekton is merged into A Source: A pull request authored by OrionArchitekton is merged into p Source: 552 tests pass in CI across 8 public repositories: notary 15 Source: failclosed contains exactly 59 test definitions across its 3 Source: schemafit publishes 5 released versions on PyPI Source: mcp-context-budget publishes 1 released version on PyPI Source: Both published packages release through PyPI Trusted Publish Source: Both published packages release through PyPI Trusted Publish Source: The quality gates publicly fire rather than wave work throug Source: failclosed's enforcement contract is runnable by any strange Source: The orion-skills library publicly catalogs 26 agent skills a Source: Three repositories pin every third-party GitHub Action to a Source: Three repositories pin every third-party GitHub Action to a Source: Three repositories pin every third-party GitHub Action to a Source: 43 individually addressable articles are self-published on d Source: 40 articles are published on dev Source: The Hashnode publication danmercede Source: A public speaker profile exists on Sessionize Source: Each of the 19 product pages under danmercede Source: danmercede Source: Six of the shipped tools serve live public demos Source: Six of the shipped tools serve live public demos Source: Six of the shipped tools serve live public demos Source: Six of the shipped tools serve live public demos Source: Six of the shipped tools serve live public demos Source: Six of the shipped tools serve live public demos Source: Orion Intelligence Agency Source: Orion Intelligence Agency Source: OIA's case-studies page publishes anonymized engagement shap Source: Five primary pages of the OIA site (home Source: Five primary pages of the OIA site (home Source: Five primary pages of the OIA site (home Source: Five primary pages of the OIA site (home Source: Five primary pages of the OIA site (home Source: 6 of the 14 tool repositories ship no CI at all: engram Source: Fork Around & Find Out was submitted to Daytona HackSprint # Source: Invisible Hand is listed on the SwarmHack gallery with judgi