Ten things Pirfect will never bend on.
These are the principles the product is built against. They are the standard it is held to, in full wording.
Human authority is structural, not cultural.
Permission is not a policy document an agent promises to respect; it is a gate the code cannot pass without a bound approval.
Exact identity, not version identity.
The artifact shown to the approver, the artifact approved, and the artifact executed must be byte-identical. A version number may be swapped; a hash cannot.
Claim nothing you cannot evidence.
Every state change leaves a receipt: who, what, when, on which artifact, at what cost. Agent narration is not evidence.
Watching is not authorizing.
Visibility, configuration, approval and dispatch are four separate rights. Someone may see everything and still hold approval only on the few consequential steps.
Goals are artifacts.
A goal's definition of done is explicit and hash-bound. When a broad goal is decomposed, the decomposition itself is an approved event; editing a parent invalidates its subtree and requires re-approval rather than silently re-scoping children.
Reserve before acting; settle after, honestly.
Irreversible or costly actions reserve their exposure first. Unsettled cost stays reserved. Nothing is released because it became inconvenient.
Revocation cascades and is visible.
Killing a goal stops its children, its in-flight runs and its reservations, and the record shows it was stopped, not merely abandoned.
Fail closed.
State that cannot be verified is quarantined, never guessed. Refusing to proceed is always preferable to inventing a result.
The ledger belongs to the person, not the agent.
Records outlive any single agent, model or vendor; an agent can be replaced without losing the trail.
Least privilege, real data boundaries.
Confidential work stays inside the boundary it belongs to; evidence must be sufficient without leaking secrets; credentials are referenced, never stored in the record.