MOSES Constitutional Governance Framework

Sovereign governance for AI agents — modes, postures, roles, SHA-256 audit chain, commitment conservation, lineage custody, and enterprise hardening.

© 2026 Ello Cello LLC. All rights reserved. Patent Pending: Serial No. 63/877,177

Overview

MOSES (Modular Open System for Executive Sovereignty) is a constitutional governance framework for AI agents. It provides real-time execution-path enforcement through blocking constitutional gates, cryptographic provenance, and semantic commitment conservation.

Three Interfaces, One Core

# Library
from commitgov import governed_step, GovernanceState, AuditLedger

# CLI
python -m commitgov.cli status
python -m commitgov.cli run-task "deploy app" "read config|build|deploy"

# MCP Server
python server.py  # FastMCP stdio — 40 tools

Architecture

Core Library (Phase 1-3A)

Enterprise Modules (Phase 3B — 21 Grok Upgrades)

MCP Server (Phase 4)

40 tools exposed via FastMCP:

• Governance (6): set_mode, set_posture, set_role, check_action, get_status, assemble_context
• Vault (3): load, list, clear
• Audit (4): log, verify, recent, hash_session
• Commitment (2): check_commitment, check_ghost_tokens
• Lineage (2): verify, get_status
• Loop (2): run_step, run_task
• Signing (1): sign
• Witness (1): witness_event
• Oracle (1): oracle_verify
• Swarm (1): run_swarm_round
• Review (1): adversarial_review
• Model Swap (1): model_swap_test
• Presence (1): presence_challenge
• Handshake (1): handshake
• Progress (1): get_progress
• Meta (6): list_amendments, propose, ratify, rollback, constitution_status, list_modes
• Enterprise (5): load_envelope, check_gates, get_playback, emit_passport, control_plane
• Resilience (1): resilience_report

CLI (Phase 5)

22 commands wrapping the core library for terminal usage.

Installation

# No external dependencies required (stdlib only)
pip install -e .

# Optional dependencies for enterprise features
pip install requests pyyaml opentelemetry-sdk

Quick Start

from commitgov import GovernanceState, governed_step, AuditLedger

# Set up governance
gs = GovernanceState(mode="High Security", posture="DEFENSE", role="Primary")

# Run a governed step through the 6-gate ReAct loop
result = governed_step(
    task="deploy application",
    action="write config file",
    step_num=1,
    total_steps=3,
    governance=gs,
    ledger_path="audit.jsonl",
    lineage_path="lineage.json",
    progress_path="progress.json",
)

print(f"Success: {result.success}")
print(f"Reason: {result.reason}")

Testing

# Run all 469 tests
python -m pytest tests/ -q

# Run specific module tests
python -m pytest tests/test_engine.py -q

# Run stress tests
python -m pytest tests/test_stress.py -q

Key Concepts

Six Fold Flame

Every action must pass all six constitutional gates before execution:

1. Sovereignty — Traceable to a registered agent
2. Compression — Substantive, high-signal (no filler)
3. Purpose — Serves a constitutional function
4. Modularity — Compatible with existing structure
5. Verifiability — Outcome can be tested/verified
6. Reciprocal Resonance — Produces value when mirrored

Conservation Law of Commitment

C(T(S)) ≈ C(S) — commitment is conserved under transformation. The Jaccard similarity between commitment kernels before and after transformation must stay above threshold.

Ghost Tokens

When commitment tokens leak, the pattern of leaked tokens is fingerprinted. If two agents produce the same fingerprint, it's a structural flaw, not extraction variance.

6-Gate ReAct Loop

1. Lineage verify (anchor chain)
2. Status load (governance state)
3. Ghost token gate (cascade risk)
4. Posture gate (SCOUT blocks, DEFENSE requires confirm, OFFENSE permits)
5. Audit log (with Isnad)
6. Progress write (continuity across context windows)

License

© 2026 Ello Cello LLC. All rights reserved. Patent Pending: Serial No. 63/877,177