A certified simple controller that provably takes over when the learned policy is unverified.
The AI-Native S.M.A.R.T. Generator Master Blueprint — eight layers (L0→L7), one control stack, wired to both machines. Telemetry rises in microseconds; control descends the same path.
Category: A · methodology · Plugs into: L1 / L4 · Horizon: FOAK · Status: on the roadmap — not yet built
What it is
The Simplex architecture pairs a high-performance but hard-to-verify AI controller with a simple, formally verified baseline controller, and a decision module that switches to the baseline whenever the state nears the boundary of the verified-safe region.
The method
A verified recovery controller plus switching logic proven to keep the state inside the safe set: the AI runs in the performance region, the certified baseline runs in the safety region.
Why it matters
It lets Kronos deploy powerful, imperfectly-verified models without betting safety on them — the certified fallback is always underneath. Plugs into L1 (the switch) and L4 (the baseline).