Agentic AI — Trust. Accountability. Security.
An agentic harness that treats authority and memory as first-class. It runs on your machine, and it can account for what it did.
The problem
Agents are being handed real authority on an architecture designed for chat.
Your shell. Your files. Your calendar and your inbox. The reach keeps growing, and two things break first. A delegated agent inherits whatever the one above it could already do — so authority spreads sideways with nothing to stop it. And its memory is a pile of notes nobody can vouch for, where something the model guessed last month is indistinguishable from something you actually said.
Those two failures compound. An agent that can quietly write unfounded claims into shared memory degrades every session that comes after it. Ennius is built the other way round: authority is granted explicitly and narrows as it travels, and a memory is a record with an origin rather than a paragraph that reads well.
The approach
Four commitments, built in rather than bolted on.
-
Bounded by construction
Every agent runs inside an explicit grant of what it may touch. When work is delegated, that authority narrows — it never widens on its own. At the edge of what it holds, an agent asks rather than improvises.
-
Memory with a provenance
Not a pile of notes. Every record carries where it came from, how sure it is, and what it replaced — so a claim you made and a claim the model inferred are never the same thing. You can ask why it believes something.
-
Built for teams
What one person's agent learns, the whole team can rely on. A shared record carries its author as well as its origin, contradictions between two people get arbitrated rather than silently overwritten, and the append-only ledger is already the audit trail.
-
Yours to keep
Everything it remembers lives in a file you own — readable, portable, and straightforward to take elsewhere. The way out is as wide as the way in, because loyalty should be earned rather than engineered.
In development
If any of this is a problem you have, we would like to hear about it.
Ennius is being built now. There is nothing to download yet — but if you are thinking about what it takes to let an agent work unattended, that is exactly the conversation we want.