Grant the boundary once. Let the OS hold the line.
Skyra is a runtime for coding agents. A person grants an agent a Horizon once: an explicit set of what it may invoke. After that the agent works, and extends itself, without asking, because the operating system enforces the Horizon on every call and nothing an agent says can widen it. Every step is a hash-chained record, so a run can be replayed and checked byte for byte.
A run is a chain of records.
Codex is asked a question, calls a tool inside its Horizon, and answers. Each box is one committed record: what state the system was in, and the first characters of the hash it is stored under.
- genesisthe room…
- invokecodex…
- invokeecho…
- return"hello"…
- resolvecodex resumes…
- returnthe answer…
- resolvethe room…
No step asks for approval. A step that reaches past the Horizon becomes a fault, which is recorded too. On the Verify page your browser re-derives every one of these records with the same code that produced them, then lets you change a byte and watch the check fail.