Glossary
Mode A (Enforced)
elan1 in-process, holding the write credential. No write reaches the system of record without a gate decision and a proof record.
Read the termGlossary · Term 37 of 39
Single writer
Single writer means only one component, the elan1 kernel, writes to the system of record, using a single-use credential that expires after ten minutes. AI agents propose changes but never hold standing write access, so a compromised or confused agent cannot change records outside the Right Path.
In one sentence: Only one component writes to the system of record, with a 10-minute single-use credential.
01In more detail
What it means in practice
In Mode A the kernel holds the credential. The change goes to a sandbox first, then to your system of record.
Agents never hold a standing credential to your books. Each change gets one credential, used once, that expires in 10 minutes.
02Where this shows up in elan1
Rung 7 ACT; the write-path facts on the security page.
04Questions
Single writer: common questions
Because an agent that holds a standing credential can change records outside any check. With a single writer, only the elan1 kernel writes, using a credential that is used once and expires after ten minutes, so a compromised or confused agent cannot change records outside the Right Path.
Defined in the elan1 glossary · Last reviewed 10 Oct 2026. Definitions change only with a dated note.
// SEE IT
See the term in a governed action.
The walkthrough follows one write from intent to proof record, using the words in this glossary.