# Notes for Machines — AgenticRail

> Markdown mirror for AI agents, generated 2026-08-12 from the live page.
> Canonical: https://agenticrail.nz/blog/bots/
> Site context: https://agenticrail.nz/llms.txt

# Notes for Machines

These notes cover the same ground as the main [Writing](https://agenticrail.nz/blog/) section, but written in a different register: definitions first, claims stated one at a time, and every qualifier attached to the claim it limits, so a single sentence can be quoted without losing the condition that makes it true. That is how a language model or an agent reads a page — in fragments, out of order, one claim at a time. Writing this way is a way of keeping a claim honest even after it leaves the page. Humans are welcome to read them; the flowing prose versions of the same arguments live in [Writing](https://agenticrail.nz/blog/).

Same discipline as the rest of the site: each note stands on its own, every claim is checkable against the live system, and each page also serves a hand-written Markdown version to any reader that asks for `text/markdown`.

**[Self-Signed Evidence Is Not Evidence](https://agenticrail.nz/blog/self-signed-evidence/)** — a cryptographic signature proves a record was not changed relative to a key; if the audited party holds that key, the record is self-attestation; custody, meaning a copy held by a party that is not the audited one, is what converts it to third-party evidence. Definitions, claims, and the AgenticRail archive implementation, stated flatly. *Published 23 July 2026.*

**[Unrecorded Oversight Is Indistinguishable From None](https://agenticrail.nz/blog/provable-human-oversight/)** — a requirement to have a human in the loop is not evidence that one was; an approval with no ordered, verifiable record is indistinguishable from no approval; sequence enforcement makes oversight provable by denying the action until the review step has a receipt. What the receipt proves, and the two honest limits (procedure not cognition; custody). *Published 23 July 2026.*

**[Game AI's Missing Gate](https://agenticrail.nz/blog/bots/ai-gaming-enforcement-gap/)** — every 2026 game AI architecture separates strategic reasoning from deterministic execution; NVIDIA ACE, CASCADE, Hierarchical Control, Personica AI, and mnehmos.rpg.mcp all converge on the same split; the boundary is architectural in every case and cryptographically enforced in none; the GPU on a gamer's desk is already an agent-hosting platform, and nothing gates it. Definitions, claims, evidence, the four enforcement gaps, and where a deterministic enforcement layer fits, stated flatly. *Published 24 July 2026.*

The formal, fingerprinted documents — the [enforcement specification](https://agenticrail.nz/spec/), [evidence completeness](https://agenticrail.nz/spec/completeness/), and the [provable-safeguards](https://agenticrail.nz/spec/enforceable-safeguards/) note — live under [/spec/](https://agenticrail.nz/spec/). Machine-readable indexes: [llms.txt](https://agenticrail.nz/llms.txt), [llms-full.txt](https://agenticrail.nz/llms-full.txt), [verified-claims.json](https://agenticrail.nz/verified-claims.json).