Thunderline is designed to put consequential agent actions through a 4-tier capability gate (:read, :mutate, :admin, :execute) and emit a sealed receipt bound to a persisted lineage edge for every authorised action. The hermetic WASM execution cell for untrusted code is architected with zero imports and bounded fuel. Architecture is published at /security for engineering review.
