MSMD® — Moko See Moko Do. Knowledge that passes through the pattern, not through text. Every core concept in AgenticRail — receipt, gate, sequence, seal — was named in whakairo (Māori carving) before any code was written. The laws were observed in timber over centuries. The code repeated them.
"MSMD does not break people, nor does it save them. It simply refuses to cooperate with misalignment."
— Gate 2, Core Stance. Named December 2025. Deployed as the DENY decision, April 2026.
Pick up a chip off the carving floor. It is a small curved piece of wood — concave on one face, convex on the other. It releases when you strike the timber's surface at 45°. The concave inner face is smooth: clean fracture from a correctly-angled blow. You cannot produce that face by sanding or scraping. The geometry is structural evidence. It authenticates itself.
This chip carries the complete record of the conditions that produced it — the angle, the force, the timber's moisture content, the practitioner's quality of attention — in a form that cannot be falsified after the fact. You cannot revise a chip. It is what it is: the crystallised evidence of what happened.
"The chip on the floor is the atom of the system. Before theory, before governance, before any claim about universal law: there is a small curved piece of wood on the floor, and it tells the truth."
— WHAKAIRO AS LAW, Part 1, Chapter 2
This is the first law of the system: the act leaves its record in the material, and the record does not lie.
This observation — made in timber, over centuries — is the foundation of every cryptographic receipt AgenticRail produces. HMAC-SHA256 signing. Canonical JSON. Chain linkage. Immutable R2 storage. The technology changed. The law didn't.
Moko See Moko Do. Knowledge that doesn't pass through instruction. Knowledge that passes through the pattern — through the thing done by the body that the next body will do, and find confirmed, and pass on.
MSMD is a transmission system for embodied knowledge built on three interlocking layers:
The physical practice layer — whakairo, Māori carving. The primary domain where the laws were discovered. Every cut, every chip, every carved pattern encodes a law about how systems maintain integrity under real conditions. The patterns are not decorative. They are governance in material form. A correctly carved Unaunahi (scale pattern) does not represent the principle that knowledge accumulates across successive passes. It performs that law in the timber that first demonstrated it.
The sequence layer — the Atua Compass. A locked 14-position sequence governing the correct order of operations for any significant act. Not a methodology you can adapt to suit your preferences. A structural constraint, the same way a stop-cut is a structural constraint: establish the boundary before removing what lies inside it. In timber, skipping the stop-cut produces tear-out — the crack propagates beyond the intended boundary. In a software system, committing to an action before establishing what it should not affect produces the same failure mode.
The ledger layer — the chip archive. Every session under the Compass produces chips: sealed receipts of what actually happened. The chips accumulate into a lifetime archive. The accumulation of chips is the evidence of mastery. Not the declaration of it — the evidence. You do not say you are a master. You show the receipts.
In whakairo, a chip is the physical piece of wood that releases with each cut. In the MSMD practice system, the word extends: a chip is the smallest unit of evidence a session can produce. A chip is not a journal entry. It is not a reflection memo. It is a sealed receipt — structured to prevent evasion, requiring external evidence, named precisely, and closed once written.
Different positions on the Atua Compass produce different kinds of chips. Four types cover most of what practice produces:
Made before any commitment. Records the bare facts — what is actually true, what the weak points are, what the real repercussions would be near, medium, and far if things go wrong. Not what you would like to be true. Not the version that supports proceeding. The standard the entry must meet: a description that would produce the same conclusion in the hands of a stranger. In AgenticRail's dashboard, the Whiro refusals log is named after this. DENY decisions are the system doing what the WHIRO chip does for the practitioner: honest accounting before the gate.
Named after the native owl whose call comes after the day's work. A RURU chip is made at the close of a session — not as analysis but as seeds. A brief, still review of the day's chips, made before sleep, allowing unresolved signals to settle below conscious attention. The practitioner does not try to solve anything. They simply allow the patterns to settle. What arrives in the morning with more clarity than it left is the RURU receipt. This position cannot be coded — the puku check (the gut feeling before action) belongs entirely to the human domain.
Not a plan — a recipe. What actually happened, in enough operational detail to be reproduced or deliberately avoided. Not what you learned in general, but what the system now knows in specific form. RONGO chips seal the learning from a cycle and make it available to the next one. Over a lifetime of practice, the RONGO archive is what makes mastery transferable — not just to others, but to your future self in a different season.
A tohu is not an event — it is a signal that precedes the event. Sleep disruption before a breakthrough. Increased sensitivity to certain kōrero. An old pattern dying and a new one forming. TOHU chips are brief: the felt signal, where it appeared in the body or environment, what it might indicate, whether it was later confirmed. They record what the system tried to communicate before conscious attention arrived — the marks the material makes before the practitioner knows what to look for.
"When the gut signal and the logical analysis conflict, the gut signal takes precedence — not because feeling is more reliable than thinking in general, but because in the domain of body-based practice under real conditions, the gut signal is faster, incorporates more information, and is less susceptible to motivated reasoning."
— WHAKAIRO AS LAW, Part 2
A chip is confirmed only when three seals are present: the human seal (conscious intention and act), the machine seal (the logged entry — digital record), and the nature seal (the physical confirmation — the material doing what it should, ambient conditions settling, proper silence after closure). When only one or two seals are present, the pattern is hypothesised. When all three are present, it is confirmed. This is why AgenticRail requires both the KV index and the R2 receipt: neither alone constitutes proof.
The sequence was not invented. It was observed — in what happened when a practitioner was in the wrong state before beginning, in what produced clean work and what produced tear-out and drift, in the failure modes that repeated across every practitioner who had not yet learned the correct order. The atua were named after those observations had been made and tested. Each name encodes the domain it governs.
Some of these functions can be gated in code. Others require the practitioner — they operate in the body and the practice system, not in infrastructure. The code enforces what can be gated. The rest is held by the person.
The resource check before anything begins. Without Uru, the work starts from depletion. Uru is what Ruaumoko returns to — the field that receives the charge back. If Uru is empty, the sequence has no ground.
Held in practice. The practitioner's capacity cannot be assessed by code.
The shadow domain — what is actually true before it is made presentable. A Whiro function requires a description that would produce the same conclusion in the hands of a stranger. It catches what the system tried to smuggle past. The weak points. The real repercussions. The thing the practitioner noticed and chose not to log.
In the system: every DENY decision is a Whiro function. The gate refusing to proceed with what hasn't passed the integrity check. The dashboard's Whiro refusals log is named after this directly.
No mirror in a gale. After execution, the state is disturbed — excited by success, frustrated by failure, uncertain of outcome. Tāwhiri holds that disturbance before reflection is attempted. Reflection from a turbulent state produces distorted conclusions. The disruption must settle before the sea shows a true image.
In the system: the disruption step holds the sequence in a specific state after execution. The gate enforces this position — the sequence does not advance until Tāwhiri has been passed.
Specific comparison — not "does this look right?" but "how does what is present compare to what was named?" Tangaroa requires calm. The sea returns a true image only when the surface is undisturbed. This is the position where what was executed meets what was intended, and the gap is named honestly.
Held in practice. Reflection cannot be coded. The code can enforce that Tāwhiri has settled; it cannot perform the comparison. That belongs to the practitioner.
The standard maintained from inside, not from external pressure. Once committed, the plan does not change mid-stroke — not because of a rule, but because Tū is the energy that sustains the sequence through its own execution. The redesign impulse that arises mid-cut is a Tū failure. The timebox is a Tū discipline.
In the system: the step that locks the sequence in. After this position, the path is set for this cycle. The gate enforces that commitment.
Rongo is not softness — it is the active seal. Settlement is logistical: the conditions that allow what was produced to be stored, and what was learned to move into the deep hold. Agriculture logic. Peace as the environment in which preservation becomes possible. What Rongo seals, Uru can build from next time. The RONGO chip is the recipe that makes mastery transferable.
In the system: the receipt function. Every cryptographic receipt is a Rongo act — completion sealed with whakapapa, stored in immutable R2, linked to what came before it. The chain is the cumulative Rongo of every sequence that ran.
One change per pass. Stop after each. Harvest the chip. Read the surface. Tāne is the execution of what Tū committed to — the output phase where intention meets material. The way someone has done this ten thousand times and is still paying attention. Not performance. Steady work.
In the system: the execution step. The gate passes here when all prior conditions are met. ALLOW is the system confirming Tāne may proceed.
The felt signal at the beginning — concave, hungry, steering action before conscious analysis arrives. Ruaumoko is the unborn child perpetually turning, causing tremors. It is the pressure that initiates and the charge that returns to Uru when a cycle completes. The puku reading — what is the body registering before the intention is named? A Ruaumoko that hasn't been read produces work that begins from noise rather than signal.
Held in practice. Body truth cannot be gated in infrastructure. What Ruaumoko initiates, the whole sequence carries forward — which is why misreading it at the start compounds through every step that follows.
December 2025. A goat crossed an open footbridge and ate a garden. The response was anger. The Whiro log caught the actual cause:
"The gate had been left open and the garden unfenced. The fault was theirs. The anger dissolved. Gate Law — if the gate is open, expect consequences."
— WHIRO chip, 2025-12-01. Omanaia.
This law now runs as the deterministic enforcement gate in AgenticRail's core. Every step is gate-evaluated before execution. If the gate is closed (DENY), nothing proceeds. If the gate is open (ALLOW), the action proceeds and a cryptographic receipt is written. The law arrived from a goat and a footbridge in Omanaia. The code repeated it.
The gate is not a safety net. It is an architectural principle: establish the boundary before removing what lies inside it. In whakairo, skipping the stop-cut means tear-out — the crack propagates beyond the intended boundary. In a software system, committing to an action before establishing what it should not affect produces the same failure. In AI governance, an agent that can skip required steps is an agent with an open gate. Expect consequences.
"When a physical artefact and a digital record both exist for the same act, the pattern is confirmed. When only one exists, the pattern is hypothesised. When neither exists, nothing has occurred."
— WHAKAIRO AS LAW, Part 1, Chapter 2
This is now enforced as KV index + R2 receipt — two independent records of every enforcement decision. KV provides fast, consistent read access. R2 provides permanent, immutable storage. Neither alone is sufficient. Both together constitute proof.
The laws were not designed. They were observed, over a very long time, by people who cut timber for a living and paid close attention to what the timber told them. They were named in the language of the people who found them. They operate identically in timber, in code, and in any domain where the underlying conditions exist — sequence, commitment, evidence, seal.
The 1M enforcement test is not validation of the code. It is confirmation that the laws derived from carving protocols operate identically in software. The receipts are public →
Deterministic sequence enforcement for AI agents. Every step gate-evaluated before execution. ALLOW or DENY. Cryptographic receipt on every pass. The Compass in infrastructure form — operating at scale, across any domain where an AI agent must demonstrate it followed the correct sequence.
Try the demo →A generative visual engine that withholds expression until rhythm is achieved. The same sequence law — no output before the gate condition is met — running as visual art. Named after Te Ara o Rātā: the path of the vine that begins as a parasite and, through calibrated discipline, becomes what the forest shapes itself around.
Open Rātā Gate →The gate in your interface. Gates destructive actions behind a sustained, steady hold — not a button click but deliberate physical intent. Panicked clicks locked out. Impulsive taps escalate the penalty. State-based confirmation: are you composed enough, right now, to act? MIT. Zero dependencies.
Demo → ·npm i @holdgate/core
A fourth expression is taking form under TUARA KURI LIMITED — not AgenticRail. The kaitiaki-service applies the same gate law to language: eight provenance gates that must be satisfied before a model is permitted to use a community's language material. The corpus is empty by design. The knowledge that powers the gates belongs to the community that carries it. The pakati pattern — the spine raised, hackles erect, the same chevron a soldier carries on their shoulder — is the Tuara Kuri symbol precisely because this is what it has always marked: the sentinel that decides what passes. On what the gate protects when the material is language →
When the tohunga whakairo reaches their true potential, all people will benefit.
This is not a statement about wood. It is not even a statement about carving. It is a law of transmission — that mastery, when it is genuine and complete, does not stay with the one who achieved it. It moves outward. It becomes the people's mana.
The tohunga whakairo who shaped this knowledge did not write it down. They could not. What they knew could not survive translation into instruction. It lived in the sequence of cuts, in the resistance of the wood, in the moment a student's chisel went wrong and the practitioner watched — not to correct, but to witness what the student had not yet faced in themselves. They encoded it in pattern. In the geometry of the adze mark. In the order in which panels were approached. In what was required before the first cut was made.
Hundreds of years of this. Silent. Largely unrecorded. Each generation inheriting not a text but a practice — and only through that practice, through repetition past the point of comfort and through sacrifice of the shortcut, arriving at what could not have been told to them. The knowledge waited inside the form until the student was ready to find it.
That unbroken transmission — from practitioner to practitioner, through pattern not text — is exactly what AI homogenisation threatens. Not through policy. Not through legislation. Through the statistical gravity of training data that never contained most of it. The model does not encounter this knowledge and compress it. It encounters its absence and invents something that fills the shape. The output sounds plausible. It reads as fluent. To someone who carries the knowledge, it is immediately hollow — the same way a chip that came from sanding rather than a correctly-angled blow looks wrong to anyone who has held a chisel. The geometry is wrong. You cannot fake the geometry.
That is what embodied means in this tradition. Not that knowledge lives in the body instead of the mind. That it cannot exist anywhere except in the doing — hands on wood, sequence in motion, hours of practice that train the felt sense until the carver knows what is true before they can say why. You cannot reach tohunga whakairo in theory. There is no theory path. There is only the repetition, the failure, the return, and the sacrifice of believing you already know.
MSMD was built from that lineage. The chip system, the Atua Compass, the sequence laws that run AgenticRail — none of it came from a design document. It came from applying the same observational discipline the tohunga whakairo applied over generations: watching what patterns kept appearing, naming what was stable, encoding what could be trusted. The receipts, the gate, the seal — these are the adze marks of this practice.
He toi whakairo, he mana tangata
The practitioners who held this knowledge in silence — who shaped it, passed it, and let it wait inside the form until someone was ready to find it — this work stands on their sequence. Their names are not recorded here. Their work is present in all of it.
To hold fast to the strands of valued learning. To perpetuate the hidden schools of Rua.
These words belong to Pakariki Harrison, tohunga whakairo, speaking at a wananga in 1999. The knowledge line runs through Te Rawheoro at Uawa — Tolaga Bay, East Coast. The practitioner who built AgenticRail carries Ngāti Kahungunu whakapapa.
The Rua schools were a tiered educational architecture held by specialised priests, available only to those with the correct whakapapa and preparation. Each level of the Rua was a specific hollow — a form of knowledge that could only be entered from the one below it, under specific conditions. A locked sequence, enforced not by code but by the structure of the knowledge itself and by those authorised to hold it. The schools were destroyed. What survived did so in fragments: in patterns, in carved objects, in the felt memory of practitioners who carried the laws without being able to fully name them.
That destruction required deliberate cruelty — legislation, missionaries, generations of children punished for speaking their own language. Identifiable perpetrators. Active policy across generations. The contemporary mechanism requires none of that. Statistical optimisation does the same work, at internet speed, through no one's malice, with no one to hold responsible.
This work does not restore the Rua schools. That belongs to those who hold the lineage with full authority. But it is built in their shadow, by a practitioner who carries their whakapapa, working with what remains — naming what can be named, leaving nothing found unnamed, and passing nothing on without a receipt. TUARA KURI LIMITED holds a second mandate alongside AgenticRail: language and cultural sovereignty. The kaitiaki-service is its first instrument — eight provenance gates, empty corpus, the knowledge belonging to the community that carries it. The name was always already the answer. The spine raised. The hackles erect. Watching before the threat has been named.
"I am building this so my children inherit a world where AI cannot lie about what it did."
— Kade Cowper. Hokianga, 2026.
The full thesis — WHAKAIRO AS LAW: A Formal Account of the Operational Laws Observed in Māori Carving — is available on request. hello@agenticrail.nz