Platform / DAX
DAXIs this physical action allowed to happen?
DAX places a permission boundary between a decision and an action that affects hardware, machinery, infrastructure or another physical system. It is fail-closed: if the check cannot complete, the action does not proceed.
Deterministic Action Execution · AU provisional 2026905506
What it returns
Categorical, not probabilistic. Where a lane cannot decide, it says so explicitly rather than returning a low-confidence answer that reads like a decision.
What it does
- Interposes a permission decision before execution, not after it.
- Fails closed. An unavailable check is recorded as unavailable, never as a pass.
- Records the permission decision and its basis before the action runs.
- Supports a human authorisation step where automation is inappropriate.
What it does not do
- It is not a safety-instrumented system and does not replace one.
- It does not certify that an action is physically safe.
- It governs permission, not the engineering of the system it protects.
The questions this layer gets asked in procurement
| Concern | Why it decides the deployment |
|---|---|
| Fail-closed behaviour | The single most important property. Verified explicitly. |
| Authorisation model | Who may override, and what record that leaves. |
| Latency budget | A permission boundary in a control path has a hard ceiling. |
| Blast radius | What happens to in-flight actions when the boundary is unavailable. |
What runs inside DAX
Each of these is a real implementation with code behind it. Status is labelled honestly, and nothing is listed as coming soon.
ExecutionGate
Open sourceFail-closed permission boundary for downstream use. The reference implementation of the DAX layer.
OrbitGate
Open sourceDeterministic verification for orbital and satellite claims, with benchmark artefacts.
FlightGate
ResearchEarly work applying action permission to flight-envelope and operational constraints.
See it against your own workflow
A pilot runs in shadow mode. It controls no production decision, and the acceptance criteria are agreed before it starts.