Vortex Runtime Decision Architecture — Version 0.1

Abstract

Vortex Runtime Decision Architecture defines a runtime security architecture for evaluating and enforcing actions before they produce external effects. The architecture separates three independent security planes: Evidence, Authority, and Consequence. Rather than collapsing these dimensions into a generalized trust or risk score, Vortex preserves their semantics throughout policy evaluation and runtime enforcement. The specification defines architectural principles, runtime decision flow, security properties, failure modes, audit requirements, and the relationship between Vortex and external authority systems. A central security property is that evidence may support a decision but must never manufacture execution authority. Authorization is explicit and scoped, missing authority fails closed, consequence remains independent from evidence confidence, and material runtime changes require revalidation at the execution boundary. Version 0.1 establishes the initial public specification of the Vortex Runtime Decision Architecture.