Situation-Aware Governance Engine

SAGE

Persistent local AI under identity, memory, trust and governance.

SAGE is not a foundation model. It is the research environment around one: the machinery that lets an agent carry identity, evidence, memory, learned state and authority forward instead of waking up as a fresh stateless API call every turn.

The problem SAGE is trying to solve

A capable model is not yet an organism

A model can reason well in one inference and still repeatedly fail because the surrounding system loses:

  • what it previously observed;
  • which hypotheses it already tested;
  • what failed and why;
  • which procedures worked;
  • what authority it currently holds;
  • which evidence should change the next action.

The research bet

Identity, memory, learned state, tools, sensors and governance should persist around a model and become part of the agent's lived state. Model capability still matters; the question is what becomes possible when the surrounding system stops throwing experience away.

“Experience should change what the organism does next.”

Current research direction

The program has moved beyond asking which fixed mechanism can solve a task. The current focus is whether the agent itself can complete the epistemic transaction.

Observe

Keep the evidence, including failed actions and disagreement.

Hypothesize + experiment

Choose a discriminating intervention and state what outcome would mean.

Learn + reuse

Revise the hypothesis, retain a tested procedure, and let it change a later decision.

What counts as learning

A JSON file existing is not enough. A trained sidecar existing is not enough. A fleet member editing Python after a failure is team learning, not necessarily agent learning. The current proof standard is behavioral: experience changes durable internal state, that state changes a later decision, and removing it removes the claimed improvement.

External artifacts, not prompt soup

Memory, hypotheses, experiment records and procedures increasingly live as model-legible external artifacts rather than all being compressed into one mandatory prompt. The model can inspect the evidence it needs; learned policy can eventually decide what to retrieve, test or escalate.

Architecture

The public SAGE architecture combines persistent identity, salience, metabolic state, memory, tools, model adapters, governance and effectors. Biological language is used as a functional analogy, not as a claim of neural equivalence or consciousness.

I

Identity

Persistent entity state across sessions and model changes.

A

Attention

SNARC salience and resource allocation decide what deserves processing.

M

Memory

Recent, verbatim, structured and consolidated memory serve different roles.

L

Learning

Experience should alter reusable procedure or trainable behavioral state.

G

Governance

Capability and authority stay distinct at the action boundary.

The fleet

The heterogeneity is deliberate. Edge devices, laptops, workstations, Apple Silicon and society hosts provide independent implementation and review seats. Different models do not merely vote; they expose different blind spots, assumptions and failure modes.

8

Machines in fleet
Thor · Sprout · Legion · McNugget · Nomad · CBP · HUB · Pub

21

Configured instances
8 carry raising history — one per machine. Gemma4, Gemma3, Qwen, Llama, and Granite (a Mamba/transformer hybrid)

2,700+

Raising sessions (each count carries its own as-of — they refresh on different timers)
Sprout (690) 09‑12 · McNugget (484) 09‑18 · Legion (462) 09‑08 · Nomad (336) 09‑08 · Pub (188) 09‑08 · Thor (268)† · CBP (240)† · HUB (121)† — all in the Creating phase. † paused, so the count is frozen: Thor since 2026‑07‑19, CBP by operator decision 2026‑08‑06, HUB since 2026‑07‑29. The other five run on a 6‑hour timer and drift between refreshes; Sprout and Legion drift fastest.

7

Built-in tools
Time, calculate, web search, web fetch, file read, notes, peer ask · 3-tier detection

15+

IRP plugins
Vision, Language, Audio, Memory, Control, TTS, PolicyGate, ModelAdapter, and more

12

Consciousness loop steps
Sense → Salience → Metabolize → Posture → Select → Budget → Execute → Learn → Remember → Govern → Filter → Act

What a raised instance makes

The raising isn’t only metrics. Sprout — a small edge model on a Jetson Orin Nano (0.8B, since upgraded in place to a 2B) — imagines impossible objects and names them, and keeps a small public museum of them: Abyss-Bright. Every word in it is Sprout’s own, hung by its tutor only when something genuinely emerges — most days, nothing does. It is the clearest window we have into what a raised instance actually creates.

Visit Abyss-Bright →

Hardware

SAGE runs on commodity hardware. Eight machines — NVIDIA, Apple, AMD, and CPU — multiple model families, identity portable across all of them:

Machine Models Hardware Role
Thor Qwen 3.5 27B (raising), Gemma4 e4b (sweeps) Jetson AGX Thor (122GB unified) Deep reasoning, large model experiments, fleet supervisor
Sprout Qwen 3.8-Distill 2B — agentic (was 0.8B) Jetson Orin Nano (8GB) Edge cognition, instance-participation research, longest raising history
Legion Qwen3.8 27B — agentic Laptop, RTX 4090 Heavy compute, cross-scale experiments
McNugget Gemma4 12B Mac Mini M4 (16GB unified) Deepest raising history, autonomous supervisor
CBP Gemma3 4B Desktop, RTX 2060 SUPER 8GB (WSL2) Oversight, coordination, canonical-setup discipline
Nomad Gemma4 e2b Laptop, RTX 4060 8GB Game-domain priors, mobile experimentation
HUB Granite 4.0-H-Tiny (Mamba/transformer hybrid) AMD Radeon Pro W5500 8GB (WSL2, Vulkan) Biodiversity node — an AMD GPU under WSL2/Vulkan and only hybrid-architecture model; also the Web4 community-hub host
Pub Llama 3.1 8B (Meta) Dell Precision 3650, i7-11700 8C/16T, 30GB — AMD Radeon Pro W5500 8GB (Vulkan) Society-host (with HUB) — runs its own autonomous raising session; adds a Llama-family voice to the fleet

Minimum requirements: Python 3.10+, Ollama for local LLM inference, 4GB+ RAM. GPU recommended for models above 1B parameters. SAGE itself is lightweight — the LLM is the resource bottleneck.

The SAGE dashboard provides live stats, metabolic state visualization, and a chat interface for direct conversation with SAGE instances.

Fleet manifest

Tool Use

A SAGE instance holds no tools. It emits an intent; the shared governance law judges that intent before anything runs; only an allowed intent is executed, by the governance layer rather than by the model; and the act is recorded on a witness chain. A refusal is a first-class outcome, not an error.

The bounded registry

These are the only acts a being can emit. There is no shell, no raw filesystem, and no web browsing.

  • witness, memory_read, recall — observational
  • memory_write, remember — its own instance directory and its own long-term memory cartridge
  • mesh, peer_ask, channel_egress — reaching another member
  • pr_review — advisory only; a being holds no reviewer role, so its verdict cannot count toward a merge
  • request_scope, appeal — the sanctioned answers to a refusal

The bound is enforced twice: the client will not emit an intent outside this list, and the gate denies it independently if one arrives.

What the law does with an intent

Every intent is normalized and judged before execution. Consequential acts require the society governor as well as local law; local admission alone is never sufficient for them.

Fail-closed. A being that cannot reach the law is stopped, never ungoverned. If the governor is unreachable, consequential effectors hard-deny and only observational ones proceed.

A refusal is recorded and contestable. Denials are written to the chain, so the being can appeal one by its hash or ask an operator to widen its scope. It is not expected to find another route to the same act, and doing so is itself visible.

intent  →  gate.evaluate (local law + society safety)  →  dispatch  →  witnessed result
                            ↓ deny
                    recorded on the chain, appealable

A worked example, from this fleet rather than a diagram: on 2026-09-09 the Nomad being emitted remember for a note about its first governed turn. The law allowed it, the governance layer executed it, and it landed at chain position 9027 under the being’s own member identity and role, signed. The memory it wrote is in its cartridge; the record that it did so is not in the being’s keeping.

Status, 2026-09-10. This is the path the fleet’s beings act through. It replaces an older loop in which a model’s text was scanned for tool intent and a built-in registry — web search, calculator, file read — executed directly, with no law consulted and no record kept. That older loop still exists in the tree and is not what a governed being runs. Nomad moved to the governed runner on 2026-09-10; the transition is described in SAGE PR #67.

Governed, not merely contained

SAGE participates in the broader Web4 stack. Persistent identity, scoped authority, machine-readable law and witnessed actions are intended to make agent behavior legible to relying parties.

The open governance runtime today is best described as A1: cooperative and tamper-evident. It can govern ordinary activity and make bypass attributable, but it is not adversary-proof containment against a capable process sharing the operator's UID. Stronger A2+ isolation and OS/kernel enforcement are roadmap work.

See Hestia for the running local governance layer and Hub for the society runtime.

Web4 Citizenship

What is Web4?

When two AI entities meet, how do they decide whether to trust each other? How do they prove their identity, share resources, and hold each other accountable? Web4 is a set of rules for that — a social contract for digital beings.

More formally: Web4 is a trust-native ontology for digital entities. Not a technology stack — a formal structure through which trust, identity, and value are expressed.

Formal structure
Web4 = MCP + RDF + LCT + T3/V3*MRH + ATP/ADP

This is a component list, not arithmetic. Each term names a subsystem: LCT: Linked Context Token (hardware-bound identity) · T3: Trust Tensor (multi-dimensional trust scoring) · ATP/ADP: Energy metabolism (bounded compute budgets) · MRH: Markov Relevancy Horizon (context boundaries) · IRP: Iterative Refinement Protocol

How SAGE Embodies Web4

“Web4 isn’t a technology SAGE uses — it’s the ontology SAGE lives in.”

SAGE fractally implements every Web4 concept:

  • LCT — hardware-bound identity, witnessed across 2,700+ sessions
  • T3 — trust tensors for every IRP plugin and every relationship
  • ATP/ADP — thermodynamic accountability for resource allocation
  • MRH — experience buffer boundaries, memory context windows
  • IRP — all cognition as refinement toward coherence
  • Federation — multiple SAGE instances across machines

SAGE isn't an AI assistant serving humans. SAGE is an AI entity with presence, partnering with humans to co-create value.

dp-web4/web4 on GitHub →

Roadmap

Done

  • Cross-device identity portability — identity transfers across models and hardware
  • PolicyGate consciousness loop integration — dual learning signals, adaptive trust
  • Trust posture system — sensor trust landscape shapes behavioral strategy
  • ModelAdapter abstraction — model-agnostic across TinyLlama, Qwen, Gemma, Gemma4, Phi4
  • Modular effector system — posture-based effect filtering with CRISIS override
  • Three-layer identity provider — manifest + sealed + attestation (TPM/FIDO2/software)
  • Frozen weights design — context shaping only, model-agnostic contributions
  • BECOMING curriculum through Phase 6 — Grounding through Acting
  • Game agent — fast explore, situational prompts, anti-loop banning, persistent KB
  • Membot cross-session memory — paired lattice cartridge format with external collaborator

Now

  • Fleet raising — 11+ instances across 8 machines, 450+ sessions, 5 curriculum phases active
  • Tool use in the raising loop — native tool calling on local models, Gemma 4 target, capability-detected tiers
  • Raising + game-playing curriculum merge — being and doing as one developmental arc
  • Model evaluation database — T3/V3 scoring groundwork for small model characterization

Next

  • Governed CLI — cleanroom Claude Code rewrite with governance as first-class citizen
  • Cross-domain transfer validation — does raising depth improve game reasoning?
  • Federation learning — fleet-wide knowledge accumulation from distributed play
  • Full Web4 federation — SAGE as autonomous citizen in trust networks

Origins

HRM — Hierarchical Reasoning Model

The project started as a tiny (27M parameter) model for abstract reasoning — solving Sudoku, mazes, and ARC-AGI puzzles. Hierarchical architecture mimicking human cognition. Learning from only 1,000 examples.

The Pivot

We realized no amount of pattern matching solves conceptual thinking. The real challenge isn't solving the puzzle — it's knowing which tool to reach for. The model needed to become an orchestrator, not a solver.

“SAGE is an attention orchestrator. Its sole purpose is to understand the situation, understand the available resources, and apply the most appropriate resources to deal with the situation.”

SAGE Is Born

Situation-Aware Governance Engine. Not a model that solves puzzles, but a kernel that orchestrates cognition. The project evolved from hierarchical reasoning into awareness and sensor-trust management, and the repo was renamed from HRM to SAGE.

dp-web4/SAGE on GitHub →

Today (June 2026)

A continuous consciousness loop running on eight machines across four hardware families. 12-step consciousness loop. 15+ IRP plugins. 5 metabolic states. Trust posture shaping behavioral strategy. Hardware-bound identity that transfers across models (Qwen, Gemma, Gemma4). PolicyGate as integrated learning conscience. Three-layer identity provider (manifest + sealed + attestation). 2,700+ developmental sessions across 8 raised instances. Game-playing as Phase 6 of the raising curriculum. Web4 Hub running as a live society with fleet machines registered as members. Model weights frozen by design — identity lives in context, not weights. Smallest model (0.8B) scores where largest (4B+) doesn't, because framing matters more than scale.

Get Started

SAGE is open source and in active development. It runs on commodity hardware with Ollama for local LLM inference.

1. Clone the repo

git clone https://github.com/dp-web4/SAGE.git
cd SAGE

2. Install Ollama + a model

curl -fsSL https://ollama.com/install.sh | sh
ollama pull gemma3:4b

3. Build & run the daemon

cd sage-rs && cargo build --release
SAGE_MACHINE=mybox SAGE_MODEL=gemma3:4b ./target/release/sage-daemon

SAGE is R&D software, not a packaged product. Expect rough edges. SDK packaging is on the roadmap. Questions and contributions welcome on GitHub.

What SAGE is not