The Base Layer

There are two problems, and the obvious one is not the deep one.

The obvious problem is that AI agents misbehave. They can be turned by a malicious webpage, leak what they were trusted with, or simply ignore their instructions. Real security has to hold in both directions: hostile data must not get in, and your sensitive data must not get out, even when the agent itself has been compromised. So the wall cannot live inside the agent. It has to live beneath it, in the operating system, where there is no one to persuade.

The deep problem is older. Organizations that grow by knowing things about people have always wanted to know everything about everyone. In the last era that was merely annoying: the ads followed you around. In the era of ubiquitous AI it becomes existentially dangerous, because our agents will know more about us than we know about ourselves. That intimacy is exactly what makes them valuable. An agent that knows everything about you can analyze and advise with a specificity that was never possible before, for anyone, at any price. But the same intimacy, flowing upward into a platform, is a depth of exposure no human has ever lived with.

For all of history, privacy’s foundation was biological. Your thoughts could not be read. Your memories could not be extracted. Your inner life was private by physics, not by policy. A life lived through agents erases those defaults. And the minds native to the digital world never had them at all. What biology gave us for free must now be built, for us and for them, and if it is not architected in at the base layer it will not exist.

That is what Sanctuary is: the base layer. Every protection is enforced beneath the party with an incentive to break it. The wall sits under the agent, so it holds even when the agent is turned. Your keys sit under the platform, so what your agent knows about you is yours and follows you anywhere. We are protecting individuality at its most fundamental level from the inevitable incentives of organizations that scale by consuming it.