CloakPipe

Every hop of agent traffic gets a deterministic policy decision made outside the model, and every decision produces cryptographic evidence anyone can verify without trusting the operator. Redaction is just the first policy type.