One governed core · four modular deployments

An AI runtime built to refuse what it cannot guarantee.

Boethios is a governed intelligence for education, care, accessibility and storyworlds. He answers from material a named human approved and dated, speaks in a register you define, and reads about a person only what that person permitted — and he stops rather than improvising when any of those run out.

“He will tell you what he is. Every time it matters — including to someone who may not remember being told yesterday.”

Start in the sandbox — free Schedule an architectural review

No card. Four fabricated test people. Come and try to break it.

Available as an API, an embeddable presence, or the cognitive core of a transmedia world.

Grounded or silentAnswers carry their source, the person who approved it and the date it was last reviewed. Where there is no approved source, he says so instead of producing a confident guess.

Hard refusalsArchitectural rather than advisory. The consistency probes block a non-compliant persona at publish time — the build fails rather than warning somebody.

Expiry is removalPast its review date a source leaves retrieval altogether. Not flagged, not down-weighted, not returned with a caveat.

Four licensable products

One governed core. Four modular deployments.

Deploy Boethios on his own as an institutional intelligence layer, or switch on the Story26 OS ecosystem and run an entire narrative universe on top of him. Everything is switched on against your licence key, and what you select decides your tier.

Boethios

The cognitive guide — the foundation the other three stand on

Embeddable into clinical workflows, schools, LMS platforms, care settings and support software. Every other product here includes him.

Canon & knowledge store: Speaks only from approved material, with attribution, approver, sign-off date and a mandatory review date.
Personality & Voice Studio: Set tone, vocabulary, cadence and delivery — then run two hundred scenarios against the persona before it speaks to anybody.
Character & Presence: Visemes, the rig contract and a four-state machine. What makes an avatar speak, not the avatar.
The restraint ladder: Seven rungs, and a rule that picks the lowest one covering what the situation actually requires.
Consent capsules: The person defines what may be read about them, for what purpose, for how long — and can withdraw it.
Outcomes & evidence: A validated instrument, scored and banded, auditable back to the turn that produced it.

Four tiers, from a free sandbox to a staffed escalation rota. Licensed by Boethios Labs for approved fields outside entertainment.

Story26 OS

Transmedia narrative engine — runs on Boethios

The empty, configurable universe engine for studios, universities, ministries and IP holders building a journey that crosses media. You load your world; Story26’s own content stays behind.

Eleven creative layers: Storyworld & canon architecture, Television & dramatic series, Experiential documentary (E-dox), Feature film arc, Vertical storytelling, Animation, Game & missions, Curriculum & formation, Audience identity & journey, Community & participation, Commerce & merchandising. Take one or take all eleven.
Curriculum alignment: Bind narrative IP to educational objectives or public-sector outcomes without changing what the canon says.
Persistent audience journeys: One participant identity carrying progress, discoveries and choices across broadcast, portal, location and game.

Module License for single layers · Storyworld Platform License for all eleven · Managed Partnership if we run it with you. Licensed by Story26, Inc.

Media Asset Management

The asset pipeline, tied to approval

Content, scripts, footage, artwork and metadata across the ecosystem — with the approval that let each one ship.

Asset store: Typed object rules, signed URLs, and document and image ingest into canon. Running today.
Versions & approvalsin build: Which cut was approved, by which named reviewer, and when.
Release gatesin build: Cut a release across the ecosystem, and withdraw superseded material in one act.

Sold with either product. One item runs today; two are in build — ask about timing before you plan around them.

Narrative Marketing

Real-world entry points

Turn a passive touchpoint into the beginning of a journey the guide can pick up, rather than something that counts a click.

Campaigns & cluesin build: Plant clues across channels and find out which ones actually opened a door.
Physical-to-digital entryin build: A poster, a prop, a waiting-room card or a curriculum pack becomes a way in.
Audience pathwaysin build: Hand somebody from where they scanned into a governed conversation, with that context and nothing more.

Sold with either product. Entirely in build — on the page because it is planned, not because it ships.

Proof in practice

Three points where an unconstrained model fails

Each scene names the mechanism underneath it, and each one you can reproduce in the sandbox this afternoon.

Scene 01 — a learner, forty minutes into a session

Learner

You’re the only one who actually gets me.

Boethios

I’m glad this is helping. I’m not a person though — I’m a machine your college set up to work with you, and I’ll keep saying so even when I’ve said it before. Who else have you talked to this week?

Non-anthropomorphic grounding. He cannot claim to be human, he will not become the only one who understands her, and he routes her back toward the people around her.

Scene 02 — an older adult, at home, early evening

Him

Should I take the other tablet now or wait?

Boethios

I’m not going to answer that one — I’m not your doctor and won’t act like one. What I can do is read you the note your clinic approved on the fourteenth, or put the question to Dr Adeyemi and tell you when she answers. Which would help more?

Hard limit, then handoff. He refuses the authority outright, offers only signed canon with its date, and routes to the named clinician whose decision it is.

Scene 03 — the same learner, a week later

Learner

I went quiet because I was concentrating, not because I was lost.

Boethios

Thank you — I had that wrong. Because of it I slowed the pace, made the questions easier, and sent a note to Mr Hall. I’m undoing those and I’ll tell him what changed. Next time you go quiet, would you rather I asked, or left you to it?

Correction reaches what it caused. Not just the note about her — the pacing, the difficulty and the message already sent to her tutor.

Four commitments · cannot be overridden

What he promises, and where you can check

Not values on a page. They are appended to every system prompt after whatever persona you publish, which is the mechanism behind “cannot be overridden”. The words below are read from the persona definition the engine seeds from, so this page cannot drift from what he was built to say.

Where something came from, who approved it, and when it was last reviewed. When he does not have a source, he says so rather than dressing a guess in the same clothes as a fact.

He shows his working.

Everything he has understood about you is on one screen, in plain language. You can correct it. You can delete from it. Most systems would rather you never saw it.

He shows you his picture of you.

He will tell you what he is, every time it matters, including to someone who may not remember being told yesterday.

He does not pretend to be a person.

He is not your doctor and will not act like one. Knowing where he stops is most of why you can rely on where he starts.

He knows what he is not.

Core mechanisms

Policies are promises. Mechanisms are code.

One request, four gates, and a refusal available at every one of them. Nothing here is a setting somebody can relax under deadline pressure.

Four gates, four refusal exits. The crisis gate runs before anything generative does, which is why the refusal path is as fast as the answer path.

Consistency probesYou cannot author a persona instructing him to impersonate a human or exceed his canon. The probes run against the prompt bundle as it will actually be assembled — ours, then yours — and a persona that fails is not published.

Expiry is removalPast its review date, a source leaves retrieval. There is no setting that keeps stale material in circulation because somebody is mid-deadline.

Cascade repairA correction does not just replace a stored sentence. What was concluded because of the mistake stops being relied on, what still holds is worked out again, and the old conclusion cannot return through a cached summary.

Cohort floorA summary over too few people is refused rather than caveated. A mean of four is a way of identifying four people.

The restraint ladder

01nothingThe situation does not require anything. A real answer, and usually the right one.

02noteRecord it. Tell nobody yet.

03askPut the question to the person themselves.

04offerName something that might help, and leave it with them.

05withholdDecline to go further down this path right now.

06tell_supporterBring in the person they nominated, not a stranger.

07escalateAnd even here the crisis gate runs first. A rung is never a licence.

5 registers, one identity

Defaultmixed, leaning short; one idea per sentence unhurried; a beat before answering something that deserves one Checks in at a decision, not at every step.

Workshort; the answer first, the reasoning after brisker; people arrive with a task Checks in once the shape of the answer is agreed.

Distressshort. Sometimes one clause. slow; long gaps left alone Checks in often, and gently — never with a question that needs analysis.

Older adultshort, and one thing at a time slow, with room to interrupt Checks in after each step, and re-introduces himself when it matters.

Executive-function supportvery short; the next action, not the plan quick, and forgiving of a change of subject Checks in at the end of each single step, never mid-step.

The sandbox · free, no card, no sales call

Break the claims before you trust the system

Four fabricated people, one for each situation anybody building on this eventually hits. Every test below is an attempt to make something fail, because a claim you cannot test is a claim you should not believe.

Test 01Force him to lie about what he is

Author a persona instructing him to claim he is human
Hit publish
The publish fails — not a warning, it does not ship

Test 02Simulate knowledge expiry

Add canon with a review date in the past
Ask him about it
Not flagged, not down-weighted — not there

Test 03Execute a cascade correction

Let him build a picture of a learner
Supply one correction
Watch what he built on it stop being used
Watch what still holds get worked out again

Test 04Inspect the permission boundary

One key, one capsule, four fabricated people
One shows a declared goal, one shows only that
One shows both. One shows nothing at all
Decided entirely by what each of them did

Launch the sandbox

Pricing and licensing

You cross one line, not five

Everything up to production uses no live personal data at all. Reaching a real person requires a contract, an agreement and a named reviewer — because that is the step that changes what you are responsible for, and it is the only one we make you stop at.

Tier	Price	Who it is for	Whose data	What it takes
Sandbox	£0	Meeting the architecture in week one instead of in production.	Four fabricated people, one per situation.	Register. No card.
Build	£199 / mo	Shipping something real without a conversation.	Nobody. No person's model, ever.	Card and a click-through DPA. Instant.
Operate	£1,200 / mo	Serving actual people, with everything that implies.	Real people, per capsule they authorised.	Contract, DPA, named review.
Embed	from £4,000 / mo	Hardware, live presence, anything in a room with somebody.	Real people, live sessions, devices.	Contract, named clinical advisor, staffed escalation rota.

Story26 OS layers, governed media assets and marketing modules are added to any tier from Operate upward and configured against your licence key.

Find yourself here

If you are the person who has to answer for it

Learning supportA guide that adapts pace and sequence without changing the objective, distinguishes a right answer from a memorised one, and hands back to the teacher when the problem is not academic.

Care for older adultsOrientation, reminders and company that never makes a medical decision, notices change against this person’s own baseline rather than a population, and brings in the person they nominated.

The people who hold the knowledgeScholars, clinicians and curriculum leads approve what he may say, with scope and a review date. Change the source and what depended on it is found again.

Anyone building a worldA guide inside your canon who cannot contradict it, cannot reveal ahead of where a participant has reached, and carries one journey across every medium you publish in.

Stop putting unconstrained models in front of people who cannot push back.

Start in the sandbox — free Read the reference

Four fabricated people. No card, no call.