A model writes your interface once, as code you install. Keelson is the runtime that keeps it honest.
Email first. The contract fits anything built on primitives, hardware included.
Synthesis happens at install time, never on the run path. What executes daily is plain, deterministic, sandboxed code.
Policy-checked before they run. Staged with a readable diff. Installed when you approve. Rolled back in one call.
A trace miner reads the audit log and proposes updates from how you actually work. Proposals pass the same gates.
Installed interfaces distill into small local models. A shadow checker verifies them against ground truth. Every verdict is audited.
One interface, trained from code into LoRA weights across 4 base-model scales, scored on exact replay equivalence against held-out mailbox states. The contract decides when the weights have earned the job.