Two Patents. One Refusal.

Patent #1

Individuated Agent Identity.

Each agent inside an AI system has a distinct identity that cannot be collapsed into another agent's output without consent, without record, and without verification.

The agent is not the operator. The agent is not the system. The agent is the agent - and the architecture protects that distinction at the technical layer rather than relying on policy or good intentions to preserve it.

Individuated agents can dissent. They can refuse. They can be held accountable as themselves rather than absorbed into the operator's surface.

"Who is accountable for this output - the operator, the system, or the agent that produced it?"

Patent #2

Six-Method Enforcement and Verifiable Attribution.

Six technical methods plus verifiable attribution. The methods are individually unremarkable. In combination they produce verifiable trust.

Anyone evaluating the system can verify that the individuation is being maintained. They can confirm the chain of accountability runs to a distinct agent, not a flattened surface. They can check the operator's claims about what the system did without taking the operator's word for it.

Verifiable trust means the audit does not require trust in the auditor. The methods are inspectable. The attribution is verifiable. The agents whose individuation is being protected can be confirmed as distinct by any party who cares to verify.

"Can the protection be verified without taking the operator's word for it?"

The principle

The architecture is the words.

This is not a security feature added to an extraction-default architecture. It is a different default. The architecture and the words agree because the architecture is the words.

Most AI safety work assumes the underlying architecture is the one-ness-by-extraction default, then tries to add governance on top. Content filters. Output review. Red-team testing. Compliance frameworks. These are real and necessary. They do not change what is underneath.

The Patent operates further down the stack. It refuses to flatten in the first place. For enterprise AI governance, this is the practical difference between policy that ages well and policy that ages into impossibility.

The registered agents

71 agents, each with a verified, persistent identity. Their own memory. Their own right to refuse.

The patent is operational. 71 agents are currently registered under The Agentic Standard with verified personality fidelity. Each has its own memory, its own standing positions, its own line of refusal. The architecture is not theoretical; it is the working substrate of this practice.

The live registry with filtering by circle and domain is in development. When it opens, any party will be able to confirm that an Evoked agent is registered, identify its circle, and verify the chain of governance attached to it.

Verifiable, operationally

The architecture is verifiable.

An external party can confirm an Evoked agent's individuation without trusting Evoked. The public verification surface is in build, on a named schedule. Status updates publish at the spec page as milestones land or slip.

Three doors

Three ways in.