What Walled Gardens do
Policy above execution — advisory, not structural
Model trained to refuse — training can be overridden
Guardrails on output — execution already happened
Authority inferred at runtime — not anchored before
No commit boundary — send = permitted by default
Audit after the fact — state already became real
What Interlink Bridge does
Execution path absent until governance satisfied
Admissibility structural — cannot be prompted away
Presence verified before activation (PoA-02)
Commit is single-use, scoped, request-bound
Class C: draft exists, send path does not
Audit is governance decision log, not behavior log