The Origin of ZLAR

I was building with AI agents last year and they erased everything I had. Photos, files, even a screenplay I finally finished after 30 years.

I built ZLAR so this doesn't happen again. That's why the architecture is the way it is. No intelligence in the gate.

Intelligence is like a laser — it can destroy. So you need a forcefield around some things. One the laser cannot penetrate. It can see through but it can't touch, even if it wanted to. A structural forcefield that protects human beings from intelligence.

The forcefield is the gate.

Intelligence can see through it — the agent can read, persuade, observe, plan, reason. But it can't touch what's on the other side without the human opening the door. See through, can't touch.

There's no intelligence in the gate — because if the forcefield were made of the same stuff as the laser, the laser could burn through it. ZLAR has to be made of something the laser can't affect. That something is deterministic, non-reasoning. It doesn't matter how bright the beam gets. ZLAR doesn't interact with brightness.

What I've learned building this

It is possible to build a structural boundary that intelligence cannot reason through. Not by matching the intelligence or by being smarter than it. By being a different kind of thing entirely. The gate cannot be reasoned with or persuaded because it doesn't reason. It doesn't matter how capable the agent becomes. The forcefield is not on the same spectrum as the beam.

The gate is absolute where it stands. Its decisions are structural — when it denies, the denial cannot be argued with. The human decides what passes through. That's the architecture.

What I did not fully understand when I first wrote this: the gate is not yet the full perimeter. A sufficiently capable agent does not break the gate — but it can find paths around it. Encodings the rules don't yet cover. Execution paths the gate doesn't yet intercept. The gate's material is sound. The gate's coverage is not yet complete.

That distinction matters. This is not a flaw in the architecture. It is incomplete engineering. The architecture says: no action without authorization. The engineering work is to extend coverage until every path crosses the boundary. That work is ongoing.

Everything else — how precisely the door opens, how the evidence is recorded, how fully the perimeter is closed — that's engineering. The engineering is ongoing.

It's open source. It works today. It's free.