Bastion builds AI-native sovereign stack

This feels less like a product launch than a thesis about where agentic software is headed: capability-bound, signed, auditable, and owned end to end.

• –The upside is coherence: if the same trust model governs chat, code, and runtime, agents need less glue and fewer hidden permission hacks.
• –The risk is coupling: once identity and policy leak into client/runtime logic, every feature starts depending on every other feature unless the seams are real.
• –The repo’s scope, from protocol work to a browser engine and kernel ambitions, is exciting but also a coordination-tax magnet; discipline will matter more than raw ambition.
• –Having Juntos already live is the strongest signal here, because it gives one vertical slice real-world feedback while the rest of the stack keeps evolving.