Verified Compute Fabric is an open reference architecture for limiting what a breach can do. It assumes any workload or AI agent can be compromised, and grants authority only through short leases tied to fresh evidence of what is running. Checks are enforced outside the workload, every grant expires, revocation reaches every enforcement point, and recovery stays out of reach. The goal is to make the damage a compromised system can do a number you can compute and test.