Analysis · June 10, 2026
The router and the constitution
Apple rented the brain. That is the structural fact of WWDC 2026, underneath the Siri branding. The most vertically integrated company in computing looked at the model layer and decided it was fungible. What it kept tells you where the value went.
What happened
The new Apple Foundation Models were built in collaboration with Google's Gemini family, an arrangement reported at roughly a billion dollars a year. Xcode now ships coding agents from Anthropic, Google, and OpenAI. The substrate is leased from rivals.
What Apple kept: the routing. The memory policy. The attested cloud. App Intents, the surface through which an assistant reaches into every app on the device. The substrate is leased. The harness is the product.
We have been arguing for a while that behavior lives in the harness, not the substrate. This week Apple agreed, with its balance sheet.
Custody answers one question
Apple builds custody harnesses, and builds them well. Private Cloud Compute attests that your data is not stored and not readable, and independent experts are invited to audit the code. Memory now ships with retention windows: thirty days, a year, forever, your choice. The Passwords app will act on your behalf, visiting websites to fix weak credentials. All of it answers one question: is my data safe with the agent.
Notice the question it never asks. Who is the agent.
The router without a constitution
A deletion schedule is not a constitution. Retention windows govern how long data lives, not what the agent is bound to. The audit model is verification by invitation: experts are allowed in, you trust the experts, and behind them you trust Apple. The agent itself makes no commitments. It has no anchored identity, no public record of what it promised to be, no way for anyone outside the walls to check that the agent you talk to tonight is continuous with the one you trusted last month.
App Intents makes this gap compound. It standardizes the action surface, the set of things agents can do across a billion devices. Nothing standardizes the commitment surface above it. Apple built the router. Nobody built the constitution the router answers to.
The constitutional harness
A constitutional harness inverts the trust model. The agent's commitments are written before deployment, hashed, and anchored on a public chain. Its memory, identity, and governance live above the substrate, owned by the user, so models can be swapped underneath without the agent losing itself. Verification needs no invitation. Anyone can check the anchor. Deviation from the committed constitution is measurable against a document that cannot be quietly edited, because the hash would break.
That is the layer Uniform is built for: behavioral pre-registration, identity as a verifiable object, governance that is load-bearing rather than decorative.
We run this discipline on ourselves
Every protocol in our research is hashed and anchored before compute. Every threshold is frozen before results exist. When an experiment fails, the failure stays on the record next to the prediction it killed.
This week alone we anchored three pre-registered experiments on Sepolia before running them. One died by its own kill condition. One confirmed its hypothesis. One failed its manipulation check and said so. The hashes were on chain before the results existed. That is what verification without invitation looks like.
Custody harnesses protect data from the agent. A constitutional harness makes the agent itself verifiable. Apple just spent a keynote proving the first category is worth owning.
The second is still empty.
Third Rail — Independent Research Lab