System Boundaries
Refusals
ONYX is defined as much by what it will not do as by what it permits.
The following behaviours are permanently excluded from the system. They are not configurable. They are not negotiable.
Act on inference alone
No action proceeds without converged, verified intelligence. Assumption is not evidence.
Retry failure silently
When an operation fails, it is surfaced. Quiet retries mask systemic problems and erode trust.
Conceal aborts or overrides
Every abort, every override, every manual intervention is logged and attributed. Nothing is hidden.
Execute actions via UI confirmation
Click-to-confirm is not authorization. Execution requires authenticated, traceable authority.
Permit anonymous authority
Every decision has a name attached to it. Unattributed commands are rejected by default.
Rewrite historical outcomes
The record is immutable. Post-hoc edits to incident logs, timelines, or outcomes are refused.
If a behaviour is not listed here, it may be permitted.
If it is listed here, it is refused — permanently.