docs/ARCHITECTURE.md

# Architecture

```text
AI / application
     |
     v
Candidate Act
     |
     v
NON-EFFECTIVE
     |
     v
Protected Enforcement Domain
     |
     +--> Identity Vault ------> subject/resource binding + VI commitment
     +--> Relationship Vault --> resource ownership predicate
     +--> Purpose Vault -------> allowed operation / minimum data scope
     +--> Jurisdiction Vault --> destination predicate
     +--> Data Vault ----------> only approved attribute subset
     +--> Crypto/Policy state -> policy epoch / revocation inputs
     |
     v
Signed act-bound Validation Permit
     + workload proof-of-possession
     |
     v
Finality Sink
     |
     +--> exact act re-hash
     +--> signature / PoP verify
     +--> purpose / attrs / recipient / destination / epoch / nonce / sink verify
     +--> atomic replay consumption + effect record
     |
     v
FIRST USABLE EFFECT (modeled locally)
```

The application never receives the raw Virtual Identity secret. It receives only the minimum permitted data grant plus a signed permit that is useless without the bound workload key and exact Candidate Act.