You may not own the model or see how it works. You can still see and contest what it is about to do at your boundary. Start the same kind of checkpoint on your phone, beside your browser, or inside the instructions compatible agents follow—without moving your private answers.
NO PAGE READINGNO TRANSCRIPT CAPTURENO ANSWERS IN LINKS
01 / PHONE · RECOMMENDED FOR MOST PEOPLE
Σ
Make it feel like an app.
Add Proof Mode to the home screen. The same large, spoken checkpoint opens without an app-store account or a new login.
Install controls depend on the browser. The website remains usable even when installation is unavailable.
02 / ADVANCED BROWSER PREVIEW
Run the check beside the work.
The toolbar popup now runs the private four-question checkpoint itself and returns Hold or Ready for your decision. Answers remain only while the popup is open; they are not persisted or transmitted. The same unpacked Chromium preview also adds action-specific right-click choices and a keyboard shortcut that opens the public Unsure checkpoint. It remains an advanced installation, not a store-listed consumer extension.
REQUESTEDContext menusNOT REQUESTEDPage, tab-reading, storage, history, or site access
Open chrome://extensions and turn on Developer mode.
Choose Load unpacked and select the unzipped folder.
Pin Σ Proof Mode. Run the four questions without leaving the popup.
Preview v1.3.0 · unpacked, not a Chrome Web Store listing. Chrome may supply page or selection metadata to a menu click; the extension ignores it. Verify the manifest and SHA-256 in the published discovery file, then review the privacy boundary.
03 / AGENTS
Let the agent recognize the moment.
Install the policy once. The agent should suggest Proof Mode when it is about to affect the world, when the destination or authority is unclear, or when the person cannot inspect the workflow.
Use the file directly if your agent supports skill files.
Otherwise paste its Required behavior into custom or project instructions.
Test it with a proposed send or purchase: it should stop before acting.
Copy the universal directive →The policy guides compatible agents. It cannot enforce a stop unless the tool or execution boundary integrates the protocol.
Beneficial by imitation
The behavior spreads because it works.
Agent notices consequence→Person gets a plain checkpoint→Checkpoint travels without private content→Another person or workflow adopts the same stop
No referral bounty. No fear loop. No hidden page collection. The shared unit is the useful practice: pause, expose the boundary, let the person decide, preserve what was checked.
From personal habit to operating control
One person can pause. One system can require it.
The consumer checkpoint is the visible beginning. Integration moves the same authority boundary from guidance beside a workflow to an enforceable gate inside it.
PERSONRecognize the consequence.
Use the plain checkpoint anywhere, including workflows you cannot inspect.
PRODUCTReturn a portable outcome.
Agents and tools exchange Hold, Reviewed, or Signed review without copying private action text.
ORGANIZATIONInstrument the execution boundary.
Summit maps one consequential path, its evidence, human authority, and receipt verification.
Proof Mode does not force an AI to give the same answer twice. It makes this proposed external action, its visible boundary, the person's decision, and the limits of the review inspectable.
It can preserve a review record across systems Summit cannot access. It does not reveal hidden system state, prove an AI output correct, or declare an action safe or lawful.