diff --git a/docs/assets/robotics-policy-prover/action-governance-architecture.svg b/docs/assets/robotics-policy-prover/action-governance-architecture.svg new file mode 100644 index 00000000..91a441f4 --- /dev/null +++ b/docs/assets/robotics-policy-prover/action-governance-architecture.svg @@ -0,0 +1,105 @@ + + Practical architecture for governing an AI agent's physical actions + An AI agent runs inside a sandboxed agent runtime. Every proposed plan or short-horizon action passes through a deterministic action-admission prover that returns deny, allow, or allow with constraints. Admitted contracts reach either a simulation or a real-world robot, where dedicated controllers retain responsibility for low-level control. Changing world state feeds admission and runtime enforcement. + + + + + + + + + + + + A practical boundary between an AI agent and physical effects + The agent operates inside a sandbox; the runtime admits each proposed plan or action before it reaches a simulator or robot. + + + + Sandboxed agent runtime + The agent can plan and use granted tools, but cannot bypass the action gateway. + + + + 1 + AI agent + Frontier model + Goal decomposition + Planning + replanning + Tool and action requests + + + + plan / + action + + + + 2 + Action admission + prover + Inspect plan / short-horizon action + Evaluate invariants with Rust + Z3 + Return constraints + runtime obligations + + DENY → structured evidence for replanning + ALLOW / CONSTRAIN → admitted contract + + + violation · counterexample · admissible bound + + + + admitted + contract + + + + 3 + Action environment + The same admitted contract governs + simulated or physical effects. + + + Simulation + Three.js · Isaac Sim · MuJoCo + repeatable research + testing + + or + + + Real world + Robot · controller · sensors + low-level control stays local + + + + Changing world state + human distance · occupancy · sensor freshness · object class · remaining budget + Fresh observations can deny, narrow, pause, or revoke an action as conditions change. + + + + + + + admitted action path + + denied action returns to the agent; no external effect + diff --git a/docs/assets/robotics-policy-prover/openshell-robotics-prover-demo.mp4 b/docs/assets/robotics-policy-prover/openshell-robotics-prover-demo.mp4 new file mode 100644 index 00000000..b2c943b6 Binary files /dev/null and b/docs/assets/robotics-policy-prover/openshell-robotics-prover-demo.mp4 differ diff --git a/docs/assets/robotics-policy-prover/policy-latency-scaling.svg b/docs/assets/robotics-policy-prover/policy-latency-scaling.svg new file mode 100644 index 00000000..a0614c9c --- /dev/null +++ b/docs/assets/robotics-policy-prover/policy-latency-scaling.svg @@ -0,0 +1,85 @@ + +Policy-prover latency scaling benchmark +The top chart shows measured p50, p95, and p99 policy-decision latency for allow, deny, and constrain outcomes across three to forty-eight waypoints. The lower chart shows the slowest measured p95 policy latency as a percentage of several illustrative agent inference scenarios. + + + +Policy admission stays in the millisecond range +Release-mode, in-process benchmark · 5,000 samples per case after 1,000 warm-up decisions +Decision latency (ms) + +0.00 + +0.48 + +0.96 + +1.44 + +1.92 + +2.40 + + +3 +6 +12 +24 +48 +Waypoints in proposed path + + + + + + + + + + + + + + + + + + + + + + +allow + +deny + +constrain +p95 line · p50–p99 band · geometry checks + Z3 setup/checking + +Planning-loop context +Sensitivity analysis only: illustrative inference time + slowest measured policy p95. Model inference was not measured in this run. +100 ms + + +1.89% +250 ms + + +0.75% +500 ms + + +0.38% +1,000 ms + + +0.19% +2,000 ms + + +0.09% +slowest p95: 1.886 ms +Platform: NVIDIA DGX Spark (GB10, 20-core Arm), Ubuntu 24.04 · power mode uncontrolled + diff --git a/docs/assets/robotics-policy-prover/robotics-policy-prover-hero.png b/docs/assets/robotics-policy-prover/robotics-policy-prover-hero.png new file mode 100644 index 00000000..405ecb70 Binary files /dev/null and b/docs/assets/robotics-policy-prover/robotics-policy-prover-hero.png differ diff --git a/docs/dev-notes/index.md b/docs/dev-notes/index.md index f0cc7b8a..34b5a78f 100644 --- a/docs/dev-notes/index.md +++ b/docs/dev-notes/index.md @@ -31,10 +31,44 @@ hide: Latest from the team -