Signed
Does not ship
ah.ttl + not-ah.ttl
Stopdrift
Nothing is built or run unless the model names it. When anything disagrees with the model, it does not ship.
Nothing is built or run unless the model names it. When anything disagrees with the model, it does not ship.
An example. The intent says one thing and the code says another. Line 2 of the code says iad02, where the intent says cmh01, so this change does not ship.
Say what you intend in plain language, and sign it.
Behavior, tests, code and the model are each checked against the signed intent.
When anything disagrees with the model, it does not ship.
Every change is signed and hashed. The hash goes on a public log we cannot edit, starting with Rekor.
We build Drift King to stop drift. Nothing is built or run unless the model names it.
Intent comes first. We write what we intend in plain language, and we sign it. Behavior, tests, code and the model are projections of that intent. Each one is checked against it.
The model is the only place facts live: ah.ttl, and the not-ah.ttl it requires. When anything disagrees with the model, it does not ship.
Every change is signed and hashed. The hash goes on a public log we cannot edit, starting with Rekor.
We keep it small. If the model does not need it, we do not add it.
What we do not do: we do not edit a signed intent. A new intent is a new letter, signed again.
Signed: Lead Architect, Drift King
Signed by the lead architect on 2026-09-28, DocuSign envelope 1e69220d-5145-8177-814d-e2cb509f1cbe.
Read the letter · As signed in DocuSign (PDF), sha256 9cbedc4f52c396994af03b2f60c41c251f76dee1b658cd82ce3f29ebadefe1a3
Everything Drift King does traces back to one signed page. Start there.