Velos Systems - PEP-L4 / WireGate

Velos Systems registered PEP-L4 / WireGate v1.0.0 as a bare-metal, transport-neutral execution substrate for deterministic AI governance. The filing describes Linux kernel eBPF enforcement at Layer-4, compilation of upstream governance contracts into binary invariants, and packet interdiction before unauthorized state mutation reaches connected infrastructure. These are registrant-declared architectural claims preserved by the Exchange, not TA-14 certification or independent performance findings.

Naimatullah Afridi is the declared founder, author, current steward, and authority for the registered Velos Systems baseline. The submission states that Velos Systems is the creator and owner of the PEP-L4 WireGate architecture. Registration preserves that declaration and chronology without transferring authorship, ownership, licensing rights, or architectural sovereignty to TA-14.

Velos Systems is building a deterministic execution-floor architecture intended to receive an upstream governance contract and enforce consequence at Layer-4 through Linux eBPF. The registered description places the enforcement point at the transport boundary, where packet release can be allowed or interdicted before a downstream state mutation attaches to physical or networked infrastructure.

The registered v1.0.0 baseline declares deterministic T=0 interdiction at Layer-4 via Linux eBPF without user-space bypass paths. One current registrant-produced evidence item, velos-staging-manifest.json, is preserved with SHA-256 d9f042891290cf14822995a3847a47447a4d6dc932a7f6018976563ab8ced09b. Its evidence description references Layer-4 deterministic packet interdiction, eBPF TC_ACT_SHOT execution invariants, EU AI Act Article 14 alignment, and sub-4.0 microsecond runtime latency. Those evidence descriptions remain registrant-produced and have not been independently validated by TA-14.

TA-14 is paying attention because Velos addresses a distinct architectural seam: the point where an upstream determination must become enforceable before digital consequence leaves the host. That makes Velos a useful candidate for bounded interoperability work with upstream admissibility governance and downstream physical consequence controls without collapsing those layers into one architecture.

Registration establishes a dated, attributable, version-bound public baseline for Velos Systems PEP-L4 / WireGate v1.0.0 under TA-14-AIGR-000029. It preserves declared identity, claims, evidence, stewardship, ownership declaration, chronology, and public evidence route. Registration is not certification, endorsement, cybersecurity approval, regulatory approval, production validation, benchmark validation, or proof of universal non-bypass enforcement.

Velos now has a permanent Registry identity, one current registrant-produced evidence record, public chronology, and an institutional Governance Showcase profile. The proposed next governed work is a bounded interoperability demonstration examining the seam among TA-14 upstream admissibility, Velos Layer-4 execution interdiction, and Sovereign Kinetic as a separately governed physical-energy backstop. That demonstration is proposed work, not a completed finding, and each architecture must remain sovereign and version-bound.

The strongest next step is to freeze the participating baselines, define a narrow consequence-bearing proposition and explicit failure conditions, then test whether authority loss, evidence change, lease expiry, or another disqualifying condition is stopped at the appropriate layer. The resulting record should distinguish what each architecture actually demonstrated from what remains claimed, assumed, or outside scope.