Aegis-Tritangtu: Constitutional AI on AMD

Aegis-Tritangtu (ISEAC) is a hardware-enforced Constitutional AI Governance platform and Zero-Trust MCP Firewall built on AMD Instinct MI300X (ROCm/vLLM) and AMD EPYC SEV-SNP. It solves a critical enterprise problem: companies want AI agents to process documents and run workflows via APIs and Model Context Protocol (MCP), but face severe risks of unauthorized actions, capability escalation, log tampering, and cognitive manipulation. Our solution enforces a Two-Domain Architecture (Rules R1-R5) that separates the Human Sovereignty Domain (HSD) from the AI Experiential Domain (AED), ensuring growing AI capability never automatically grants authority. Inside AED, a 3-node Tritangtu MARL cluster operates: Node Rama: Ethical guard holding a lexicographic veto based on the Panca Waluya reward tree. Node Resi: Dialectical engine using the 9-knife Nawa Sastra analyzer to strip manipulative framing, detect exculpatory omissions, and build 6-part Toulmin arguments. Node Ratu: Zero-Trust executor preparing Evolus AI MCP tool calls. Before any action crosses into HSD, our Security Gateway enforces Execute(x) = C(x) AND P(x) AND S(x) across 4 dimensions of Validated Experience Transfer (VET). How AMD Powers Aegis-Tritangtu: AMD Instinct MI300X (192GB HBM3) & ROCm vLLM: Hosts the entire Tritangtu multi-agent cluster and vLLM Semantic Router in unified VRAM without PCIe bottlenecks. AMD Ryzen AI NPU: Runs INT4 SLMs (<50ms) for pre-execution prompt filtering. AMD EPYC SEV-SNP (VMPL-0): Anchors our SHA-256 audit ledger and VCEK hardware attestation, detecting log omission attacks in <500ms (TEST-11A), enabling an out-of-band IRA kill-switch (TEST-11D), and safely handing high-risk cases over to humans when it should.