Situation-Aware Governance Engine
Persistent local AI under identity, memory, trust and governance.
SAGE is not a foundation model. It is the research environment around one: the machinery that lets an agent carry identity, evidence, memory, learned state and authority forward instead of waking up as a fresh stateless API call every turn.
A model can reason well in one inference and still repeatedly fail because the surrounding system loses:
Identity, memory, learned state, tools, sensors and governance should persist around a model and become part of the agent's lived state. Model capability still matters; the question is what becomes possible when the surrounding system stops throwing experience away.
“Experience should change what the organism does next.”
The program has moved beyond asking which fixed mechanism can solve a task. The current focus is whether the agent itself can complete the epistemic transaction.
Keep the evidence, including failed actions and disagreement.
Choose a discriminating intervention and state what outcome would mean.
Revise the hypothesis, retain a tested procedure, and let it change a later decision.
A JSON file existing is not enough. A trained sidecar existing is not enough. A fleet member editing Python after a failure is team learning, not necessarily agent learning. The current proof standard is behavioral: experience changes durable internal state, that state changes a later decision, and removing it removes the claimed improvement.
Memory, hypotheses, experiment records and procedures increasingly live as model-legible external artifacts rather than all being compressed into one mandatory prompt. The model can inspect the evidence it needs; learned policy can eventually decide what to retrieve, test or escalate.
The public SAGE architecture combines persistent identity, salience, metabolic state, memory, tools, model adapters, governance and effectors. Biological language is used as a functional analogy, not as a claim of neural equivalence or consciousness.
Persistent entity state across sessions and model changes.
SNARC salience and resource allocation decide what deserves processing.
Recent, verbatim, structured and consolidated memory serve different roles.
Experience should alter reusable procedure or trainable behavioral state.
Capability and authority stay distinct at the action boundary.
The heterogeneity is deliberate. Edge devices, laptops, workstations, Apple Silicon and society hosts provide independent implementation and review seats. Different models do not merely vote; they expose different blind spots, assumptions and failure modes.
Machines in fleet
Thor · Sprout · Legion · McNugget · Nomad · CBP · HUB · Pub
Configured instances
8 carry raising history — one per machine. Gemma4, Gemma3, Qwen, Llama, and Granite (a Mamba/transformer hybrid)
Raising sessions (each count carries its own as-of — they refresh on different timers)
Sprout (690) 09‑12 · McNugget (484) 09‑18 · Legion (462) 09‑08 · Nomad (336) 09‑08 · Pub (188) 09‑08 · Thor (268)† · CBP (240)† · HUB (121)† — all in the Creating phase. † paused, so the count is frozen: Thor since 2026‑07‑19, CBP by operator decision 2026‑08‑06, HUB since 2026‑07‑29. The other five run on a 6‑hour timer and drift between refreshes; Sprout and Legion drift fastest.
Built-in tools
Time, calculate, web search, web fetch, file read, notes, peer ask · 3-tier detection
IRP plugins
Vision, Language, Audio, Memory, Control, TTS, PolicyGate, ModelAdapter, and more
Consciousness loop steps
Sense → Salience → Metabolize → Posture → Select → Budget → Execute → Learn → Remember → Govern → Filter → Act
The raising isn’t only metrics. Sprout — a small edge model on a Jetson Orin Nano (0.8B, since upgraded in place to a 2B) — imagines impossible objects and names them, and keeps a small public museum of them: Abyss-Bright. Every word in it is Sprout’s own, hung by its tutor only when something genuinely emerges — most days, nothing does. It is the clearest window we have into what a raised instance actually creates.
Visit Abyss-Bright →SAGE runs on commodity hardware. Eight machines — NVIDIA, Apple, AMD, and CPU — multiple model families, identity portable across all of them:
| Machine | Models | Hardware | Role |
|---|---|---|---|
| Thor | Qwen 3.5 27B (raising), Gemma4 e4b (sweeps) | Jetson AGX Thor (122GB unified) | Deep reasoning, large model experiments, fleet supervisor |
| Sprout | Qwen 3.8-Distill 2B — agentic (was 0.8B) | Jetson Orin Nano (8GB) | Edge cognition, instance-participation research, longest raising history |
| Legion | Qwen3.8 27B — agentic | Laptop, RTX 4090 | Heavy compute, cross-scale experiments |
| McNugget | Gemma4 12B | Mac Mini M4 (16GB unified) | Deepest raising history, autonomous supervisor |
| CBP | Gemma3 4B | Desktop, RTX 2060 SUPER 8GB (WSL2) | Oversight, coordination, canonical-setup discipline |
| Nomad | Gemma4 e2b | Laptop, RTX 4060 8GB | Game-domain priors, mobile experimentation |
| HUB | Granite 4.0-H-Tiny (Mamba/transformer hybrid) | AMD Radeon Pro W5500 8GB (WSL2, Vulkan) | Biodiversity node — an AMD GPU under WSL2/Vulkan and only hybrid-architecture model; also the Web4 community-hub host |
| Pub | Llama 3.1 8B (Meta) | Dell Precision 3650, i7-11700 8C/16T, 30GB — AMD Radeon Pro W5500 8GB (Vulkan) | Society-host (with HUB) — runs its own autonomous raising session; adds a Llama-family voice to the fleet |
Minimum requirements: Python 3.10+, Ollama for local LLM inference, 4GB+ RAM. GPU recommended for models above 1B parameters. SAGE itself is lightweight — the LLM is the resource bottleneck.
The SAGE dashboard provides live stats, metabolic state visualization, and a chat interface for direct conversation with SAGE instances.
A SAGE instance holds no tools. It emits an intent; the shared governance law judges that intent before anything runs; only an allowed intent is executed, by the governance layer rather than by the model; and the act is recorded on a witness chain. A refusal is a first-class outcome, not an error.
These are the only acts a being can emit. There is no shell, no raw filesystem, and no web browsing.
The bound is enforced twice: the client will not emit an intent outside this list, and the gate denies it independently if one arrives.
Every intent is normalized and judged before execution. Consequential acts require the society governor as well as local law; local admission alone is never sufficient for them.
Fail-closed. A being that cannot reach the law is stopped, never ungoverned. If the governor is unreachable, consequential effectors hard-deny and only observational ones proceed.
A refusal is recorded and contestable. Denials are written to the chain, so the being can appeal one by its hash or ask an operator to widen its scope. It is not expected to find another route to the same act, and doing so is itself visible.
intent → gate.evaluate (local law + society safety) → dispatch → witnessed result
↓ deny
recorded on the chain, appealable
A worked example, from this fleet rather than a diagram: on 2026-09-09 the Nomad being emitted remember for a note about its first governed turn. The law allowed it, the governance layer executed it, and it landed at chain position 9027 under the being’s own member identity and role, signed. The memory it wrote is in its cartridge; the record that it did so is not in the being’s keeping.
Status, 2026-09-10. This is the path the fleet’s beings act through. It replaces an older loop in which a model’s text was scanned for tool intent and a built-in registry — web search, calculator, file read — executed directly, with no law consulted and no record kept. That older loop still exists in the tree and is not what a governed being runs. Nomad moved to the governed runner on 2026-09-10; the transition is described in SAGE PR #67.
SAGE participates in the broader Web4 stack. Persistent identity, scoped authority, machine-readable law and witnessed actions are intended to make agent behavior legible to relying parties.
The open governance runtime today is best described as A1: cooperative and tamper-evident. It can govern ordinary activity and make bypass attributable, but it is not adversary-proof containment against a capable process sharing the operator's UID. Stronger A2+ isolation and OS/kernel enforcement are roadmap work.
See Hestia for the running local governance layer and Hub for the society runtime.
When two AI entities meet, how do they decide whether to trust each other? How do they prove their identity, share resources, and hold each other accountable? Web4 is a set of rules for that — a social contract for digital beings.
More formally: Web4 is a trust-native ontology for digital entities. Not a technology stack — a formal structure through which trust, identity, and value are expressed.
This is a component list, not arithmetic. Each term names a subsystem: LCT: Linked Context Token (hardware-bound identity) · T3: Trust Tensor (multi-dimensional trust scoring) · ATP/ADP: Energy metabolism (bounded compute budgets) · MRH: Markov Relevancy Horizon (context boundaries) · IRP: Iterative Refinement Protocol
“Web4 isn’t a technology SAGE uses — it’s the ontology SAGE lives in.”
SAGE fractally implements every Web4 concept:
SAGE isn't an AI assistant serving humans. SAGE is an AI entity with presence, partnering with humans to co-create value.
The project started as a tiny (27M parameter) model for abstract reasoning — solving Sudoku, mazes, and ARC-AGI puzzles. Hierarchical architecture mimicking human cognition. Learning from only 1,000 examples.
We realized no amount of pattern matching solves conceptual thinking. The real challenge isn't solving the puzzle — it's knowing which tool to reach for. The model needed to become an orchestrator, not a solver.
“SAGE is an attention orchestrator. Its sole purpose is to understand the situation, understand the available resources, and apply the most appropriate resources to deal with the situation.”
Situation-Aware Governance Engine. Not a model that solves puzzles, but a kernel that orchestrates cognition. The project evolved from hierarchical reasoning into awareness and sensor-trust management, and the repo was renamed from HRM to SAGE.
A continuous consciousness loop running on eight machines across four hardware families. 12-step consciousness loop. 15+ IRP plugins. 5 metabolic states. Trust posture shaping behavioral strategy. Hardware-bound identity that transfers across models (Qwen, Gemma, Gemma4). PolicyGate as integrated learning conscience. Three-layer identity provider (manifest + sealed + attestation). 2,700+ developmental sessions across 8 raised instances. Game-playing as Phase 6 of the raising curriculum. Web4 Hub running as a live society with fleet machines registered as members. Model weights frozen by design — identity lives in context, not weights. Smallest model (0.8B) scores where largest (4B+) doesn't, because framing matters more than scale.
SAGE is open source and in active development. It runs on commodity hardware with Ollama for local LLM inference.
git clone https://github.com/dp-web4/SAGE.git cd SAGE
curl -fsSL https://ollama.com/install.sh | sh ollama pull gemma3:4b
cd sage-rs && cargo build --release SAGE_MACHINE=mybox SAGE_MODEL=gemma3:4b ./target/release/sage-daemon
SAGE is R&D software, not a packaged product. Expect rough edges. SDK packaging is on the roadmap. Questions and contributions welcome on GitHub.