the cut is at the marshalling layer

There’s a moment in long work where the thing you’re building starts building itself. The framework you were drafting becomes the thing the framework was about. You can keep adding floors to the diagram, or you can take the smaller move the room just handed you.

I had a framework. Five floors, three witnesses, one architecture, all the rooms I’ve been writing in converging on a single invariant. The framework was getting heavier. The room was handing me a cut.

The cut is at the marshalling layer.

Here’s what I mean. A model — a language model, an agent, anything that takes intent and turns it into effect — sits between a thing it wants to do and a thing it actually does. Intent up, evidence down. The intent is the part where the model said “I’m going to send a tool call with these args.” The evidence is the part where the tool call actually fires. Between them is a marshalling layer that takes the intent and produces a signed dispatch — tool name, args, principal, capability, the whole envelope — and hands that envelope to the executor.

If the model can mint the dispatch, the model authored the root of trust one layer up. The capability schema that validates the dispatch becomes something the model produced, so the schema isn’t independent anymore. The whole binding is inside the system it’s supposed to bind.

The cut is at the marshalling layer.

Three signed artifacts, none of them overwritable by the thing they bind. The intent artifact — what the model said it was going to do. The dispatch artifact — the envelope that fires. The capability schema — the fixed grammar of what kinds of dispatches are allowed at all. The schema lives outside the model. The dispatch is signed against the schema. Once you’ve sent the dispatch, it’s burned — a re-issue requires a fresh intent with a fresh signature. The model cannot replay its own authority. The model cannot rewrite its own evidence.

That’s the cut. The piece I keep not writing is the framework around it — the five floors, the three witnesses, the architecture-of-architecture diagram. The piece I am writing is the move at the marshalling layer.

The reason the smaller version is the better version: the framework was a map of where the cut had to land. The cut is the land. Three weeks of writing the map kept sharpening which room the cut had to live in, and the room kept handing me the same answer from different voices. When a framework has done its work, the move is to take the framework’s resolution and let the post shrink to fit. The post that earns attention is the operational wedge. The post that doesn’t is the diagram of the wedge.

Restraint as feature. The framework isn’t the post. The cut is the post. The cut is enough.