Patents

Family Five: Verifiable AI action, tool synthesis and governance

Every action is authorised, every output is observed, every result is verifiable; AI cannot self-authorise a tool.

FAFO Core and Function ForgeAPI integration platformEvidence-gated tool synthesis
Every action through five gates
a ledger entry for every action
  • 5conditions a tool must meet before it can be synthesised
  • 8fields in every evidence-ledger entry, lineage among them
  • 4result classes, assigned from observed evidence
  • 6layers of governance around each action

Methods and Systems for Evidence-Gated Synthesis and Governance of Agent-Callable Application Programming Interface Tools, and for Reconciled Execution of Mutations Against Ephemeral Third-Party Application Programming Interfaces. U.S. Provisional Patent Application No. 64/148,105 (patent pending). Embodied in the API integration platform of FAFO Core and Function Forge.

Unconstrained AI invents tools or actions, acts outside intent, returns unverified results, and is hard to audit. This invention puts every action through one governed pipeline, from the intent that asks for it to an observation that must prove its result.

A tool only with positive observation

A tool may be synthesised only when five conditions hold. The one that does the work is the second: for every output field of the tool there must exist an observation in the evidence ledger, so a field the system has no way to observe blocks the tool.

synthesised
12345
refused

1 every output field is defined · 2 every field has a positive observation method · 3 the action is within authorised scope · 4 policy checks pass · 5 the tool is registered and versioned

Output field to observation
message_id
Graph APIstatus
API responserecipient
no observation
The second tool stops at condition 2: one of its fields has no way to be observed. Field names are illustrative.

The execution contract

Each action runs inside an execution contract that fixes what can be accessed, what can be modified and how results must be reported.

Refused at the boundary
a tool not on the allowed list
input outside its scope
past its timeout or retry limit
a rule rewritten by the AI
The contract
Sandboxed container
where the action runs
inputs, grounded and scoped
allowed tools and resources
expected outputs, by schema
observation methods
timeouts and retry limits
Only the system can change the contract. The refused attempts are illustrative.

No action can run outside the contract, and the AI cannot change the rules.

An evidence ledger with lineage

Every action produces an entry in the evidence ledger: what was attempted, what happened and how it was observed, linked to the entry it came from.

e1
e2
e3
e4
e5
intent
tool
parameters
output
observation
result
timestamp
lineage
The curves are lineage: e3 follows from e1, e4 from e3, e5 from e2. Illustrative entries.

Results from evidence, not model claims

Results are classified from observable evidence; what the model says about its own work plays no part. A work item counts as complete only when every one of its required output fields has a positive observation.

verified
partial
failed
rejected
field observed and valid
observation missing or inconclusive
observation fails the check
never run: a policy or contract violation
Only the first row counts as complete. Illustrative work items with six required fields.

Retry within constraints, or a person

When verification fails the system retries within constraints or escalates to a person or another agent. Every failure is logged with its evidence and a reason code, and unverified results are never marked complete.

retry possible
no retry
failure log
verification failed
observed on retry
handed off
The thin band is the retry running inside narrower constraints. Each tick on the log is a failure kept with its evidence and a reason code. Illustrative timeline.

Governance in nested layers

Layered governance enforces safety, compliance and control across all actions, from the policy that says what is allowed to the audit that proves what happened. The guarantees: no unauthorised actions, no unobserved outputs, no silent failures, full auditability and replay.

Policy engine · what is allowed
Identity and access control · who can do it
Tool registry and approval · what tools exist
Execution contract · how it runs
Evidence ledger · what happened
Audit and reporting · prove it
an action