A running record of what we ship, prove, and learn.

Our published stability certificate carried one item marked pending in its own claims ledger: the guarantee for the whole assembled system over time, rather than for each layer separately. That item is now a machine-checked theorem in Lean 4. The system provably forgets its starting condition at an exact rate, so containment is temporary by mathematics rather than by promise, and its internal load is provably proportional to what it is given. Under sustained recovery that load settles to an explicit level at an explicit rate. The analysis also exposed a small standing bias in our own coupling design, active whenever presence is absent. We stated it inside the theorem rather than folding it into a constant. We then drove the exact production code against the certified bound with 25,000 randomized inputs and found zero violations.

When many governed agents work as one crew, the core now carries a crew-health signal with two machine-proven guarantees: a single struggling agent cannot be hidden behind the team's average, and a fully recovered team is guaranteed release. The proof re-checked clean, with no unproved steps. The guarantee is patent-pending (PRH).

We ported the same governor, unchanged, across six kinds of knowledge work, each a fully fictional world with authored sources so ground truth is decidable and no real-world claim is made. Governed, no flagged claim reached any shared workspace. Across the six ungoverned twins, 94 flagged claims shipped and contested questions were asserted settled 60 times. Same core, same result, every domain.

A reviewer with clinical-governance expertise began an independent gap analysis of AURI's safeguards: how it handles dependency, boundaries, reality-testing, and crisis, measured against clinical standards. We will fold the findings in.

In the live pilot, AURI's crisis referral became language-aware. A person in Finland who does not speak Finnish is pointed to a verified helpline they can actually use, alongside the emergency number, and never a generated one.

We pointed the core at six AI agents from four vendors doing research as a team, then ran the same task with the governor switched off. Governed: 0 of 45 contributions carried a defect. Ungoverned: 19 of 57. We published the ceiling alongside the result: governance contains, it does not cure.

We invited an independent evaluator to stress-test AURI with vulnerable-user pressure profiles. We are folding the findings into the system, and a public case study is planned with the evaluator.

We are preparing a paper that positions the certified stability core for a control-and-systems audience: the Lean 4 proofs, the check that the running code matches them, and the empirical search that tries to push the system outside its proven envelope and fails to.

Demonstrated

AURI is live in a closed EU pilot.

AURI, our relational companion, opened to its first pilot testers on EU servers. It is a companion, not a clinician: a lens rather than a mirror, built to hold boundaries and return people toward the real people in their lives.