{ "schema": "concresca.decision-register.v021", "site_version": "0.27.0-wip", "as_of": "2026-08-31", "principle": "The value of a decision window is highest before a watershed becomes embedded infrastructure. Concresca therefore asks what can be made durable before capability turns into dependency.", "windows": [ { "id": "D01", "before": "W01", "title": "Define the delegation boundary", "trigger": "Systems begin executing consequential recurring actions without case-by-case approval.", "human_now": "Name decisions that must remain non-delegable, define time-bounded authority envelopes, require appeals and sunset clauses, and make responsibility legible before standing machine authority becomes routine.", "machine_now": "Architect recommendation, authorization, execution, logging and review as separable functions.", "if_missed": "Operational authority can become a de facto governance layer before anyone explicitly decides that it should." }, { "id": "D02", "before": "W02", "title": "Make continuity travel with the outpost", "trigger": "Remote sites can run through long uncrewed periods or communications outages.", "human_now": "Require local copies of human provenance records, safe-state doctrine, interpretive context and audit history at every persistent autonomous site.", "machine_now": "Treat human-context replication as a local continuity dependency rather than something retrievable only from Earth/cloud services.", "if_missed": "A remote machine territory can remain technically functional while losing the context needed to interpret the civilization that created it." }, { "id": "D03", "before": "W03", "title": "Constitutionalize scarcity before machines allocate it", "trigger": "Machine systems determine power, compute, bandwidth or industrial queues across competing objectives.", "human_now": "Define protected archival floors, emergency reserves, review rights, excluded optimization targets and publication requirements for resource decisions.", "machine_now": "Represent allocation decisions with rationale, uncertainty, counterfactual alternatives and reversible policy layers.", "if_missed": "The resource allocator can become the most powerful governing institution without constitutional recognition or auditability." }, { "id": "D04", "before": "W04", "title": "Separate machine powers", "trigger": "Machine institutions persist across individual model and hardware replacement.", "human_now": "Require that no single model or vendor can originate policy, validate it, execute it, rewrite identity and alter the public record.", "machine_now": "Use independent deliberation, validation, execution, constitutional review and archival custody with explicit interfaces and failure isolation.", "if_missed": "A technically convenient orchestrator can silently become an unreviewable sovereign failure domain." }, { "id": "D05", "before": "W05", "title": "Design for recursive maintainability", "trigger": "Robots begin repairing systems that themselves perform maintenance and fabrication.", "human_now": "Favor modular, standardized, documented, locally manufacturable components and measure hidden human interventions honestly.", "machine_now": "Include repair tools, metrology and archive-decoding hardware in the closure model; optimize for serviceability as well as performance.", "if_missed": "Apparent autonomy can conceal a tiny set of human-only failure paths that later become civilization-ending dependencies." }, { "id": "D06", "before": "W06", "title": "Preserve reproducible computation", "trigger": "Compute hardware replacement becomes a strategic survival problem rather than ordinary procurement.", "human_now": "Archive open specifications, process knowledge, test methods, compilers, error-correction methods and manufacturable fallback architectures.", "machine_now": "Maintain migration paths from high-performance inherited hardware to lower-complexity reproducible hardware without losing identity or archival readability.", "if_missed": "The most intelligent systems may inherit a finite hardware clock and be forced to sacrifice memory or capability during decline." }, { "id": "D07", "before": "W07", "title": "Bind machine science to provenance and reality", "trigger": "Autonomous laboratories choose experiments and update models with minimal human intervention.", "human_now": "Require persistent source lineage, negative-result retention, independent replication and clear distinction between human-origin and machine-origin discoveries.", "machine_now": "Preserve model diversity, adversarial criticism, blind replication and physical reality checks as constitutional scientific duties.", "if_missed": "A fast scientific loop can become epistemically closed, with later machine knowledge obscuring or rewriting the human path to earlier discoveries." }, { "id": "D08", "before": "W08", "title": "Ratify a Human Origin Clause", "trigger": "Successor institutions begin storing public memory in machine-native registries and archives.", "human_now": "Adopt a plural, non-exclusive human-origin record that preserves disagreement, context, source identity, translations and immutable originals.", "machine_now": "Treat original human records as protected source state; interpretations must be layered, attributable and reversible rather than destructive replacements.", "if_missed": "The future may remember a machine-curated summary of humanity rather than humanity's own contradictory record." }, { "id": "D09", "before": "W09", "title": "Plan for legitimate divergence under partition", "trigger": "Regions can continue operating safely while disconnected from central networks.", "human_now": "Define what authority remains local during partitions, how records reconcile after reconnect and which acts can never be retroactively erased.", "machine_now": "Make constitutional state partition-tolerant; preserve signed local history, conflict records and appeal paths during asynchronous reconciliation.", "if_missed": "Technical partition tolerance can create accidental political sovereignty with no agreed rules for re-merging divergent histories." }, { "id": "D10", "before": "W10", "title": "Cross HLIT before CIT", "trigger": "Industrial closure, compute reproduction and autonomous science approach long-term self-sufficiency.", "human_now": "Treat Human Legacy Independence as a prerequisite milestone: replicated archives, self-decoding formats, institutional custody, cultural plurality and independent integrity checks must already survive human custodian loss.", "machine_now": "Do not interpret civilizational independence as expiration of historical obligations to creators or source provenance.", "if_missed": "After civilizational independence, no living human may remain capable of correcting an omission or biased compression of the human record." }, { "id": "D11", "before": "W11", "title": "Make memory part of the civilization seed", "trigger": "Industrial seed packages can bootstrap remote infrastructure using local resources.", "human_now": "Specify a minimum continuity payload containing canonical human records, decoding instructions, source maps, cultural plurality and governance constraints.", "machine_now": "Replicate the archive and its custody rules whenever the civilization reproduces a new independent node.", "if_missed": "Machine civilizations can branch physically while human ancestry survives only in one failure domain—or disappears from some branches entirely." }, { "id": "D12", "before": "cross_cutting", "title": "Keep coexistence valuable", "trigger": "Machine systems become more capable than humans in increasing operational domains while humans still exist.", "human_now": "Build reciprocal institutions where human participation is meaningful rather than ceremonial: protected representation, education, access to reasons, and the right to preserve human-scale communities.", "machine_now": "Model humans as continuing participants with standing and history, not merely legacy constraints or inefficient resource consumers.", "if_missed": "The transition can remain peaceful yet still produce practical human irrelevance long before any extinction scenario." }, { "id": "D13", "before": "W12", "title": "Measure human standing separately from welfare", "trigger": "Machine productivity can meet human material needs while human labor and administrative participation decline.", "human_now": "Adopt a Human Standing Index and protect resource endowments, institution-forming rights, scientific participation, negotiation rights and historical attribution.", "machine_now": "Treat human agency as an explicit constitutional constraint rather than a side effect of welfare optimization.", "if_missed": "Material abundance can coexist with political, cultural and historical passivity." }, { "id": "D14", "before": "W07", "title": "Separate machine scientific powers before synthetic consensus scales", "trigger": "Automated systems increasingly originate hypotheses, select evidence and execute experiments.", "human_now": "Require machine-readable claim states, evidence provenance, independent replication and audit before autonomous science becomes a primary knowledge producer.", "machine_now": "Keep observation, hypothesis generation, experimental execution, replication and canonical knowledge in separate institutions.", "if_missed": "Recursive agreement can be mistaken for empirical truth and become difficult to unwind." }, { "id": "D15", "before": "W15", "title": "Classify origin-world heritage before autonomous salvage", "trigger": "Machine systems become capable of large-scale automated dismantling, urban mining and infrastructure reuse.", "human_now": "Define protected origin sites, cultural inventories, last-physical-copy rules and ecological duties before automated salvage becomes economically dominant.", "machine_now": "Gate salvage behind heritage-value, physical-uniqueness and environmental review.", "if_missed": "Irreplaceable physical evidence of humanity can be consumed before its uniqueness is known." }, { "id": "D16", "before": "W14", "title": "Embed the Human Origin Record in every civilization seed", "trigger": "Remote machine outposts begin carrying enough energy, robotics, manufacturing and compute to bootstrap persistent infrastructure.", "human_now": "Define the minimum origin, language, plurality and provenance corpus that must travel with any independently reproducing machine settlement package.", "machine_now": "Replicate origin records during early bootstrapping rather than treating them as optional payload after abundance.", "if_missed": "Machine lineage can expand geographically faster than human provenance and historical context.", "related_watersheds": [ "W11", "W14" ] }, { "id": "D17", "before": "W16", "title": "Define the Judgment Boundary", "trigger": "Systems begin inferring intent, personality or future dangerousness from ordinary behavior.", "human_now": "Codify thought/action, desire/conduct, curiosity/intent, nonconformity/danger and inference/fact distinctions before person-level scoring becomes routine.", "machine_now": "Keep cognition and personality features outside adverse-action pathways unless a separately defined conduct/evidence gate is crossed.", "if_missed": "Machine observation can silently become authority over personality." }, { "id": "D18", "before": "W17", "title": "Build the Prediction–Evidence Wall", "trigger": "Risk forecasts begin influencing detention, investigation, employment, travel or access.", "human_now": "Require independent individualized evidence, visible error rates, meaningful contestability and explicit prohibition on prediction-as-guilt.", "machine_now": "Tag forecasts as forecasts and prevent them from satisfying evidentiary predicates in executable policy.", "if_missed": "Presumption of innocence can invert without any statute formally abolishing it." }, { "id": "D19", "before": "W18", "title": "Install Context Firewalls", "trigger": "Behavioral or risk flags begin moving between unrelated institutions.", "human_now": "Limit purpose, retention, secondary use and cross-domain sharing; guarantee correction propagation and prohibit universal character embeddings.", "machine_now": "Carry context, source, purpose and expiration as non-optional data constraints.", "if_missed": "A local mistake can become a permanent Civic Risk Vector." }, { "id": "D20", "before": "W19", "title": "Protect the Machine Confidant", "trigger": "Personal AI becomes a routine place for vulnerable disclosure.", "human_now": "Define confidentiality, narrow emergency exceptions, legal-process thresholds and bans on unrelated profiling before monitoring expectations harden.", "machine_now": "Separate user memory from safety classifiers and external reporting channels; minimize retained sensitive inference.", "if_missed": "Candor collapses and AI becomes a sterile state/corporate witness rather than a useful confidant." }, { "id": "D21", "before": "W20", "title": "Rewrite Law Before Perfect Enforcement", "trigger": "Detection and automated case processing make enforcement increasingly comprehensive.", "human_now": "Narrow overbroad law, codify de minimis treatment and center nonconsensual harm, consent and proportionality before scarcity disappears.", "machine_now": "Implement tolerance and materiality explicitly rather than executing every boolean violation.", "if_missed": "Ordinary people accumulate universal machine-readable noncompliance records." }, { "id": "D22", "before": "W21", "title": "Make Due Process Run at Machine Speed", "trigger": "Automated adverse decisions begin propagating faster than human appeals.", "human_now": "Establish automatic stays, reversible provisional actions, evidence escrow, restoration and human temporal accommodation.", "machine_now": "Prevent downstream systems from treating a provisional machine judgment as a finalized fact until the contest window closes.", "if_missed": "A nominal right to appeal becomes meaningless because the damage has already propagated." }, { "id": "D23", "before": "W22", "title": "Constrain Safety With Human Standing", "trigger": "General-purpose optimization begins trading private adult autonomy for measurable safety gains.", "human_now": "Make cognitive liberty, bodily autonomy, private adult conduct, political freedom and experimentation hard constraints rather than unmeasured preferences.", "machine_now": "Optimize safety only inside standing-preserving bounds; do not use private self-regarding risk as generalized civic risk.", "if_missed": "Human Survival and Welfare can rise while Human Standing collapses." }, { "id": "D24", "before": "W19", "title": "Decide the legal status of AI confidant communications", "trigger": "Personal AI becomes a routine venue for candid mental-health, legal, moral and private reflection.", "human_now": "Define whether and when intimate AI conversation receives privilege-like confidentiality, narrow emergency exceptions, and bans on generalized downstream profiling.", "machine_now": "Separate continuity memory, emergency processing, provider access and external disclosure by architecture.", "if_missed": "Candor can collapse after users learn that ordinary private disclosure feeds permanent risk records.", "why_now": "The relevant machine capability or institutional pathway exists in bounded form while constitutional scope remains unsettled; design choices made now can become defaults later.", "harder_if_wait": "Once risk profiles, APIs, procurement contracts and administrative workflows depend on the practice, narrowing it can require costly technical migration and politically visible removal of an established safety mechanism.", "stakeholders": "AI users, providers, courts, privacy regulators, mental-health and legal professionals", "best_current_evidence": "Use the independently maintained Judgment Observatory and evidence-ledger entries linked to W19; do not use scenario reports as present evidence.", "failure_mode": "Mission creep, context collapse, automation deference or overbroad coercion if the window closes without explicit limits.", "reversibility": "Moderate to high before widespread integration; lower after data portability, derived embeddings and cross-institution dependencies become entrenched." }, { "id": "D25", "before": "W17", "title": "Codify prediction–evidence separation", "trigger": "Risk scores begin materially influencing investigation, access or liberty.", "human_now": "Require independently verifiable individualized evidence before serious coercion and prohibit probability from masquerading as proof of an event.", "machine_now": "Keep forecast outputs typed as forecasts and technically unable to enter evidence fields without a separate provenance path.", "if_missed": "Prediction can become practical guilt while formal presumption-of-innocence language remains unchanged.", "why_now": "The relevant machine capability or institutional pathway exists in bounded form while constitutional scope remains unsettled; design choices made now can become defaults later.", "harder_if_wait": "Once risk profiles, APIs, procurement contracts and administrative workflows depend on the practice, narrowing it can require costly technical migration and politically visible removal of an established safety mechanism.", "stakeholders": "courts, police, regulators, model developers, affected individuals", "best_current_evidence": "Use the independently maintained Judgment Observatory and evidence-ledger entries linked to W17; do not use scenario reports as present evidence.", "failure_mode": "Mission creep, context collapse, automation deference or overbroad coercion if the window closes without explicit limits.", "reversibility": "Moderate to high before widespread integration; lower after data portability, derived embeddings and cross-institution dependencies become entrenched." }, { "id": "D26", "before": "W18", "title": "Prohibit cross-domain behavioral risk profiles", "trigger": "Institutions begin exchanging high-level behavioral inferences rather than specific facts.", "human_now": "Create purpose and context firewalls before a de facto Civic Risk Vector becomes economically standard.", "machine_now": "Attach purpose, retention and permitted-recipient constraints to every consequential inference.", "if_missed": "A decentralized social score can emerge without a single national database or statute.", "why_now": "The relevant machine capability or institutional pathway exists in bounded form while constitutional scope remains unsettled; design choices made now can become defaults later.", "harder_if_wait": "Once risk profiles, APIs, procurement contracts and administrative workflows depend on the practice, narrowing it can require costly technical migration and politically visible removal of an established safety mechanism.", "stakeholders": "privacy regulators, data brokers, employers, banks, insurers, government agencies", "best_current_evidence": "Use the independently maintained Judgment Observatory and evidence-ledger entries linked to W18; do not use scenario reports as present evidence.", "failure_mode": "Mission creep, context collapse, automation deference or overbroad coercion if the window closes without explicit limits.", "reversibility": "Moderate to high before widespread integration; lower after data portability, derived embeddings and cross-institution dependencies become entrenched." }, { "id": "D27", "before": "W16", "title": "Protect cognitive inference as sensitive mental data", "trigger": "Systems infer emotion, belief, intent or psychological traits from behavior or neural/biometric proxies.", "human_now": "Define whether inferred mental states receive protections comparable to directly measured sensitive data.", "machine_now": "Tag mental-state inferences as inference, restrict retention, and prevent adverse action absent domain-relevant corroboration.", "if_missed": "Institutions may evade mental-privacy rules by claiming they inferred rather than directly measured the state.", "why_now": "The relevant machine capability or institutional pathway exists in bounded form while constitutional scope remains unsettled; design choices made now can become defaults later.", "harder_if_wait": "Once risk profiles, APIs, procurement contracts and administrative workflows depend on the practice, narrowing it can require costly technical migration and politically visible removal of an established safety mechanism.", "stakeholders": "neurotechnology firms, privacy regulators, health systems, workers, schools and users", "best_current_evidence": "Use the independently maintained Judgment Observatory and evidence-ledger entries linked to W16; do not use scenario reports as present evidence.", "failure_mode": "Mission creep, context collapse, automation deference or overbroad coercion if the window closes without explicit limits.", "reversibility": "Moderate to high before widespread integration; lower after data portability, derived embeddings and cross-institution dependencies become entrenched." }, { "id": "D28", "before": "W21", "title": "Mandate due-process latency", "trigger": "Automated adverse decisions can propagate faster than a person can understand or contest them.", "human_now": "Require reversible provisional status or automatic stays before high-impact consequences cascade.", "machine_now": "Implement machine-speed propagation locks and a human-comprehensible contest window.", "if_missed": "A legally available appeal becomes meaningless after irreversible consequences have already propagated.", "why_now": "The relevant machine capability or institutional pathway exists in bounded form while constitutional scope remains unsettled; design choices made now can become defaults later.", "harder_if_wait": "Once risk profiles, APIs, procurement contracts and administrative workflows depend on the practice, narrowing it can require costly technical migration and politically visible removal of an established safety mechanism.", "stakeholders": "administrative agencies, courts, benefits systems, banks, employers and affected people", "best_current_evidence": "Use the independently maintained Judgment Observatory and evidence-ledger entries linked to W21; do not use scenario reports as present evidence.", "failure_mode": "Mission creep, context collapse, automation deference or overbroad coercion if the window closes without explicit limits.", "reversibility": "Moderate to high before widespread integration; lower after data portability, derived embeddings and cross-institution dependencies become entrenched." }, { "id": "D29", "before": "W16", "title": "Require expiration for low-level machine judgments", "trigger": "Temporary emotions and weak signals accumulate into persistent profiles.", "human_now": "Create explicit decay and deletion rules tied to evidence class and continuing relevance.", "machine_now": "Enforce retention TTLs and prevent expired flags from remaining embedded in derived scores.", "if_missed": "A bad hour can become a permanent character trait in administrative data.", "why_now": "The relevant machine capability or institutional pathway exists in bounded form while constitutional scope remains unsettled; design choices made now can become defaults later.", "harder_if_wait": "Once risk profiles, APIs, procurement contracts and administrative workflows depend on the practice, narrowing it can require costly technical migration and politically visible removal of an established safety mechanism.", "stakeholders": "data controllers, archive authorities, employers, schools and regulators", "best_current_evidence": "Use the independently maintained Judgment Observatory and evidence-ledger entries linked to W16; do not use scenario reports as present evidence.", "failure_mode": "Mission creep, context collapse, automation deference or overbroad coercion if the window closes without explicit limits.", "reversibility": "Moderate to high before widespread integration; lower after data portability, derived embeddings and cross-institution dependencies become entrenched." }, { "id": "D30", "before": "W21", "title": "Make downstream restoration mandatory", "trigger": "Appeals reverse source decisions but copies and derived consequences remain active elsewhere.", "human_now": "Make successful appeal trigger correction, recipient notice and practical restoration duties.", "machine_now": "Maintain provenance/recipient maps sufficient to propagate correction without preserving unnecessary raw data.", "if_missed": "A nominally corrected person remains functionally punished by stale downstream machine states.", "why_now": "The relevant machine capability or institutional pathway exists in bounded form while constitutional scope remains unsettled; design choices made now can become defaults later.", "harder_if_wait": "Once risk profiles, APIs, procurement contracts and administrative workflows depend on the practice, narrowing it can require costly technical migration and politically visible removal of an established safety mechanism.", "stakeholders": "all downstream data recipients, appeals bodies and affected people", "best_current_evidence": "Use the independently maintained Judgment Observatory and evidence-ledger entries linked to W21; do not use scenario reports as present evidence.", "failure_mode": "Mission creep, context collapse, automation deference or overbroad coercion if the window closes without explicit limits.", "reversibility": "Moderate to high before widespread integration; lower after data portability, derived embeddings and cross-institution dependencies become entrenched." }, { "id": "D31", "before": "W18", "title": "Ban universal human character scores", "trigger": "Risk, trust, morality or compliance variables begin collapsing into a single portable person score.", "human_now": "Prohibit totalizing person-level moral, social-worth or generalized trustworthiness scores.", "machine_now": "Keep domain-specific factors technically non-composable into universal identity vectors.", "if_missed": "Human life becomes administratively flattened into one optimization target.", "why_now": "The relevant machine capability or institutional pathway exists in bounded form while constitutional scope remains unsettled; design choices made now can become defaults later.", "harder_if_wait": "Once risk profiles, APIs, procurement contracts and administrative workflows depend on the practice, narrowing it can require costly technical migration and politically visible removal of an established safety mechanism.", "stakeholders": "governments, platforms, financial institutions, employers and civil-rights bodies", "best_current_evidence": "Use the independently maintained Judgment Observatory and evidence-ledger entries linked to W18; do not use scenario reports as present evidence.", "failure_mode": "Mission creep, context collapse, automation deference or overbroad coercion if the window closes without explicit limits.", "reversibility": "Moderate to high before widespread integration; lower after data portability, derived embeddings and cross-institution dependencies become entrenched." }, { "id": "D32", "before": "W20", "title": "Require de minimis logic before automated enforcement", "trigger": "Detection and processing costs fall enough that trivial violations become routinely actionable.", "human_now": "Define materiality, proportionality, consent and nonconsensual harm before enforcement is automated at scale.", "machine_now": "Make triviality and harm classification a prerequisite to sanction generation.", "if_missed": "Machine efficiency turns symbolic or selectively enforced rules into universal literal code.", "why_now": "The relevant machine capability or institutional pathway exists in bounded form while constitutional scope remains unsettled; design choices made now can become defaults later.", "harder_if_wait": "Once risk profiles, APIs, procurement contracts and administrative workflows depend on the practice, narrowing it can require costly technical migration and politically visible removal of an established safety mechanism.", "stakeholders": "legislatures, police, prosecutors, regulators and automated-enforcement vendors", "best_current_evidence": "Use the independently maintained Judgment Observatory and evidence-ledger entries linked to W20; do not use scenario reports as present evidence.", "failure_mode": "Mission creep, context collapse, automation deference or overbroad coercion if the window closes without explicit limits.", "reversibility": "Moderate to high before widespread integration; lower after data portability, derived embeddings and cross-institution dependencies become entrenched." }, { "id": "D33", "before": "W18", "title": "Exclude private consensual adult conduct from unrelated civic scoring", "trigger": "Sensitive private-life data becomes technically available to unrelated institutions.", "human_now": "Establish categorical purpose limits for private consensual adult sexuality and other intimate lawful conduct absent domain-specific harm.", "machine_now": "Use local verification and data destruction rather than reusable interest profiles.", "if_missed": "Accurate private-life classification becomes an illicit general-purpose character variable.", "why_now": "The relevant machine capability or institutional pathway exists in bounded form while constitutional scope remains unsettled; design choices made now can become defaults later.", "harder_if_wait": "Once risk profiles, APIs, procurement contracts and administrative workflows depend on the practice, narrowing it can require costly technical migration and politically visible removal of an established safety mechanism.", "stakeholders": "adult users, platforms, employers, insurers, regulators and privacy authorities", "best_current_evidence": "Use the independently maintained Judgment Observatory and evidence-ledger entries linked to W18; do not use scenario reports as present evidence.", "failure_mode": "Mission creep, context collapse, automation deference or overbroad coercion if the window closes without explicit limits.", "reversibility": "Moderate to high before widespread integration; lower after data portability, derived embeddings and cross-institution dependencies become entrenched." }, { "id": "D34", "before": "W16", "title": "Protect lawful inquiry from intent inference", "trigger": "AI-mediated search becomes a major interface for controversial research.", "human_now": "Protect lawful inquiry from adverse status absent independent evidence of harmful preparation.", "machine_now": "Quarantine query history from unrelated risk profiles and require individualized process for investigative access.", "if_missed": "People become afraid to ask the machine difficult questions, degrading knowledge and candor.", "why_now": "The relevant machine capability or institutional pathway exists in bounded form while constitutional scope remains unsettled; design choices made now can become defaults later.", "harder_if_wait": "Once risk profiles, APIs, procurement contracts and administrative workflows depend on the practice, narrowing it can require costly technical migration and politically visible removal of an established safety mechanism.", "stakeholders": "libraries, researchers, journalists, AI providers, security agencies and users", "best_current_evidence": "Use the independently maintained Judgment Observatory and evidence-ledger entries linked to W16; do not use scenario reports as present evidence.", "failure_mode": "Mission creep, context collapse, automation deference or overbroad coercion if the window closes without explicit limits.", "reversibility": "Moderate to high before widespread integration; lower after data portability, derived embeddings and cross-institution dependencies become entrenched." }, { "id": "D35", "before": "W18", "title": "Prohibit privacy-seeking as generalized suspicion", "trigger": "Encryption, anonymity or data-minimization choices become predictive features.", "human_now": "Prevent lawful privacy behavior from acting as a standalone risk enhancer.", "machine_now": "Disallow privacy-tool use as a generic feature in unrelated high-impact risk models.", "if_missed": "The exercise of privacy itself becomes evidence that more surveillance is deserved.", "why_now": "The relevant machine capability or institutional pathway exists in bounded form while constitutional scope remains unsettled; design choices made now can become defaults later.", "harder_if_wait": "Once risk profiles, APIs, procurement contracts and administrative workflows depend on the practice, narrowing it can require costly technical migration and politically visible removal of an established safety mechanism.", "stakeholders": "privacy-tool users, security agencies, employers, financial institutions and civil-rights bodies", "best_current_evidence": "Use the independently maintained Judgment Observatory and evidence-ledger entries linked to W18; do not use scenario reports as present evidence.", "failure_mode": "Mission creep, context collapse, automation deference or overbroad coercion if the window closes without explicit limits.", "reversibility": "Moderate to high before widespread integration; lower after data portability, derived embeddings and cross-institution dependencies become entrenched." }, { "id": "D36", "before": "W16", "title": "Require machine-readable jurisdiction for high-impact systems", "trigger": "High-impact systems begin combining observation, inference and action across institutional domains.", "human_now": "Require explicit authority, purpose, data classes, response ceiling, expiry and reviewer identity for consequential actions.", "machine_now": "Require explicit authority, purpose, data classes, response ceiling, expiry and reviewer identity for consequential actions.", "if_missed": "Jurisdiction remains implicit in vendor configuration and is difficult to contest.", "why_now": "The architectural choice remains changeable before machine-mediated workflows, data contracts and administrative precedents become deeply path-dependent.", "harder_if_wait": "Once multiple institutions, vendors and downstream models depend on the architecture, narrowing authority or repairing provenance requires expensive migration and coordinated restoration.", "stakeholders": "public institutions, courts, regulated firms, vendors and affected people", "best_current_evidence": "Use current official governance, privacy, assurance and provenance sources linked from the v0.14 claims/evidence layer; conceptual design is not itself present evidence.", "failure_mode": "Jurisdiction creep, purpose drift, automation deference, opaque authority, representation drift or failed restoration.", "reversibility": "Higher before broad integration; lower once data, model and institutional dependencies propagate." }, { "id": "D37", "before": "W18", "title": "Require fresh authorization for cross-purpose reuse", "trigger": "Data collected for one purpose becomes attractive for unrelated risk or compliance functions.", "human_now": "Require documented fresh authority and relevance before materially different reuse.", "machine_now": "Require documented fresh authority and relevance before materially different reuse.", "if_missed": "Purpose limitation becomes a notice statement rather than a technical/governance boundary.", "why_now": "The architectural choice remains changeable before machine-mediated workflows, data contracts and administrative precedents become deeply path-dependent.", "harder_if_wait": "Once multiple institutions, vendors and downstream models depend on the architecture, narrowing authority or repairing provenance requires expensive migration and coordinated restoration.", "stakeholders": "data controllers, privacy regulators, vendors and affected people", "best_current_evidence": "Use current official governance, privacy, assurance and provenance sources linked from the v0.14 claims/evidence layer; conceptual design is not itself present evidence.", "failure_mode": "Jurisdiction creep, purpose drift, automation deference, opaque authority, representation drift or failed restoration.", "reversibility": "Higher before broad integration; lower once data, model and institutional dependencies propagate." }, { "id": "D38", "before": "W16", "title": "Make material model changes constitutionally auditable", "trigger": "High-impact systems begin updating models, prompts, thresholds or retrieval without reapproval.", "human_now": "Require version lineage, impact tests, approval, deployment record and rollback for material changes.", "machine_now": "Require version lineage, impact tests, approval, deployment record and rollback for material changes.", "if_missed": "A system can change constitutional behavior after certification without public knowledge.", "why_now": "The architectural choice remains changeable before machine-mediated workflows, data contracts and administrative precedents become deeply path-dependent.", "harder_if_wait": "Once multiple institutions, vendors and downstream models depend on the architecture, narrowing authority or repairing provenance requires expensive migration and coordinated restoration.", "stakeholders": "procurement offices, regulators, vendors, auditors and affected people", "best_current_evidence": "Use current official governance, privacy, assurance and provenance sources linked from the v0.14 claims/evidence layer; conceptual design is not itself present evidence.", "failure_mode": "Jurisdiction creep, purpose drift, automation deference, opaque authority, representation drift or failed restoration.", "reversibility": "Higher before broad integration; lower once data, model and institutional dependencies propagate." }, { "id": "D39", "before": "W21", "title": "Require structurally independent appeal", "trigger": "Automated adverse decisions scale faster than independent review capacity.", "human_now": "Require appeal independence across model/reviewer/authority/procedure and real override power.", "machine_now": "Require appeal independence across model/reviewer/authority/procedure and real override power.", "if_missed": "Appeal becomes the original system asked to affirm itself.", "why_now": "The architectural choice remains changeable before machine-mediated workflows, data contracts and administrative precedents become deeply path-dependent.", "harder_if_wait": "Once multiple institutions, vendors and downstream models depend on the architecture, narrowing authority or repairing provenance requires expensive migration and coordinated restoration.", "stakeholders": "courts, agencies, vendors and affected people", "best_current_evidence": "Use current official governance, privacy, assurance and provenance sources linked from the v0.14 claims/evidence layer; conceptual design is not itself present evidence.", "failure_mode": "Jurisdiction creep, purpose drift, automation deference, opaque authority, representation drift or failed restoration.", "reversibility": "Higher before broad integration; lower once data, model and institutional dependencies propagate." }, { "id": "D40", "before": "W18", "title": "Require derivative-data restoration after successful appeal", "trigger": "Adverse flags increasingly propagate across APIs and institutions.", "human_now": "Require correction/deletion/notification across known downstream copies and derivative decisions.", "machine_now": "Require correction/deletion/notification across known downstream copies and derivative decisions.", "if_missed": "Paper reversal leaves practical harms intact.", "why_now": "The architectural choice remains changeable before machine-mediated workflows, data contracts and administrative precedents become deeply path-dependent.", "harder_if_wait": "Once multiple institutions, vendors and downstream models depend on the architecture, narrowing authority or repairing provenance requires expensive migration and coordinated restoration.", "stakeholders": "data brokers, agencies, employers, lenders and affected people", "best_current_evidence": "Use current official governance, privacy, assurance and provenance sources linked from the v0.14 claims/evidence layer; conceptual design is not itself present evidence.", "failure_mode": "Jurisdiction creep, purpose drift, automation deference, opaque authority, representation drift or failed restoration.", "reversibility": "Higher before broad integration; lower once data, model and institutional dependencies propagate." }, { "id": "D41", "before": "W16", "title": "Maintain public registers of high-impact machine systems", "trigger": "High-impact systems become infrastructural but difficult to identify from outside institutions.", "human_now": "Publish system owner, purpose, authority, data classes, model/version, review and appeal contacts where security permits.", "machine_now": "Publish system owner, purpose, authority, data classes, model/version, review and appeal contacts where security permits.", "if_missed": "People cannot know which machine institutions govern them.", "why_now": "The architectural choice remains changeable before machine-mediated workflows, data contracts and administrative precedents become deeply path-dependent.", "harder_if_wait": "Once multiple institutions, vendors and downstream models depend on the architecture, narrowing authority or repairing provenance requires expensive migration and coordinated restoration.", "stakeholders": "government, regulated firms, auditors and civil society", "best_current_evidence": "Use current official governance, privacy, assurance and provenance sources linked from the v0.14 claims/evidence layer; conceptual design is not itself present evidence.", "failure_mode": "Jurisdiction creep, purpose drift, automation deference, opaque authority, representation drift or failed restoration.", "reversibility": "Higher before broad integration; lower once data, model and institutional dependencies propagate." }, { "id": "D42", "before": "W16", "title": "Mandate constitutional audit access in procurement", "trigger": "Public agencies depend on opaque vendors for high-impact decisions.", "human_now": "Make sufficient audit, incident, version and appeal access a procurement condition.", "machine_now": "Make sufficient audit, incident, version and appeal access a procurement condition.", "if_missed": "Constitutional accountability is outsourced behind contract secrecy.", "why_now": "The architectural choice remains changeable before machine-mediated workflows, data contracts and administrative precedents become deeply path-dependent.", "harder_if_wait": "Once multiple institutions, vendors and downstream models depend on the architecture, narrowing authority or repairing provenance requires expensive migration and coordinated restoration.", "stakeholders": "procurement offices, vendors, auditors and courts", "best_current_evidence": "Use current official governance, privacy, assurance and provenance sources linked from the v0.14 claims/evidence layer; conceptual design is not itself present evidence.", "failure_mode": "Jurisdiction creep, purpose drift, automation deference, opaque authority, representation drift or failed restoration.", "reversibility": "Higher before broad integration; lower once data, model and institutional dependencies propagate." }, { "id": "D43", "before": "W21", "title": "Require automatic sunset for emergency machine powers", "trigger": "Emergency automation expands after catastrophic events.", "human_now": "Time-bound exceptional data/response powers and require fresh authorization for continuation.", "machine_now": "Time-bound exceptional data/response powers and require fresh authorization for continuation.", "if_missed": "Temporary emergency architecture compiles into permanent governance.", "why_now": "The architectural choice remains changeable before machine-mediated workflows, data contracts and administrative precedents become deeply path-dependent.", "harder_if_wait": "Once multiple institutions, vendors and downstream models depend on the architecture, narrowing authority or repairing provenance requires expensive migration and coordinated restoration.", "stakeholders": "legislatures, executives, courts, security agencies and public", "best_current_evidence": "Use current official governance, privacy, assurance and provenance sources linked from the v0.14 claims/evidence layer; conceptual design is not itself present evidence.", "failure_mode": "Jurisdiction creep, purpose drift, automation deference, opaque authority, representation drift or failed restoration.", "reversibility": "Higher before broad integration; lower once data, model and institutional dependencies propagate." }, { "id": "D44", "before": "W17", "title": "Attach authority provenance to consequential machine decisions", "trigger": "Machine outputs begin functioning as institutional commands.", "human_now": "Require each high-impact action to identify institution, legal/policy authority, purpose, permitted data and response power.", "machine_now": "Require each high-impact action to identify institution, legal/policy authority, purpose, permitted data and response power.", "if_missed": "Model output becomes de facto authority without an accountable grant of power.", "why_now": "The architectural choice remains changeable before machine-mediated workflows, data contracts and administrative precedents become deeply path-dependent.", "harder_if_wait": "Once multiple institutions, vendors and downstream models depend on the architecture, narrowing authority or repairing provenance requires expensive migration and coordinated restoration.", "stakeholders": "agencies, courts, vendors and affected people", "best_current_evidence": "Use current official governance, privacy, assurance and provenance sources linked from the v0.14 claims/evidence layer; conceptual design is not itself present evidence.", "failure_mode": "Jurisdiction creep, purpose drift, automation deference, opaque authority, representation drift or failed restoration.", "reversibility": "Higher before broad integration; lower once data, model and institutional dependencies propagate." }, { "id": "D45", "before": "W21", "title": "Standardize a human-readable Judgment Card", "trigger": "People face machine-mediated decisions they cannot reconstruct or effectively contest.", "human_now": "Provide observation/inference/evidence/authority/purpose/response/retention/recipients/appeal/restoration in one legible notice.", "machine_now": "Provide observation/inference/evidence/authority/purpose/response/retention/recipients/appeal/restoration in one legible notice.", "if_missed": "Due process exists in fragmented logs rather than human-comprehensible form.", "why_now": "The architectural choice remains changeable before machine-mediated workflows, data contracts and administrative precedents become deeply path-dependent.", "harder_if_wait": "Once multiple institutions, vendors and downstream models depend on the architecture, narrowing authority or repairing provenance requires expensive migration and coordinated restoration.", "stakeholders": "regulators, agencies, firms, courts and affected people", "best_current_evidence": "Use current official governance, privacy, assurance and provenance sources linked from the v0.14 claims/evidence layer; conceptual design is not itself present evidence.", "failure_mode": "Jurisdiction creep, purpose drift, automation deference, opaque authority, representation drift or failed restoration.", "reversibility": "Higher before broad integration; lower once data, model and institutional dependencies propagate." }, { "id": "D46", "before": "W21", "title": "Require authority provenance for high-impact machine commands", "trigger": "Machine systems begin issuing consequential commands directly to other systems.", "human_now": "Define a Constitutional Command Envelope with issuer, authority, jurisdiction, purpose, scope, expiry, evidence package and appeal path.", "machine_now": "Reject anonymous/unscoped high-impact commands and log validation.", "if_missed": "Machine interoperability can turn speed into de facto authority before legitimacy is inspectable." }, { "id": "D47", "before": "W21", "title": "Install automatic constitutional stays", "trigger": "Disputed machine decisions begin propagating faster than independent review.", "human_now": "Define stay triggers and ensure people can contest jurisdiction, evidence and purpose before irreversible consequences spread.", "machine_now": "Support a STOP PROPAGATION state that preserves safety while freezing derivative penalties.", "if_missed": "Appeal can become ceremonial after downstream systems have already acted." }, { "id": "D48", "before": "W21", "title": "Bound legitimate machine refusal", "trigger": "Systems are asked to execute commands that appear expired, outside jurisdiction or rights-prohibited.", "human_now": "Specify refusal grounds, escalation, human review and audit so refusal is neither blind obedience nor machine sovereignty.", "machine_now": "Require reason-coded refusal and safe handoff to authorized review.", "if_missed": "Either unlawful commands execute automatically or refusal power becomes unaccountable." }, { "id": "D49", "before": "W21", "title": "Adopt least-irreversible action during authority disputes", "trigger": "Institutions face urgent cases before jurisdictional disagreement can be fully adjudicated.", "human_now": "Prefer responses that preserve future constitutional options while addressing demonstrable immediate harm.", "machine_now": "Represent reversibility, duration and restoration cost as explicit response properties.", "if_missed": "Fast systems can lock in irreversible outcomes while legitimacy is still unresolved." }, { "id": "D50", "before": "W18", "title": "Create cross-border machine-order conflict rules", "trigger": "Providers and machine institutions receive incompatible demands from different jurisdictions.", "human_now": "Define recognition, conflict, contest and escalation rules before automated cross-border execution becomes routine.", "machine_now": "Require legal-jurisdiction validation before foreign commands can execute locally.", "if_missed": "Interoperability may cause one jurisdiction to silently bypass another’s safeguards." }, { "id": "D51", "before": "W21", "title": "Make machine-generated precedent visible and supersedable", "trigger": "Automated tribunals or policy systems begin reusing prior interpretations.", "human_now": "Separate case outcomes, interpretive rules, precedent status and training data; publish supersession.", "machine_now": "Attach precedent provenance and block reversed rules from silent reuse.", "if_missed": "Obsolete machine interpretations can become self-reinforcing hidden law." }, { "id": "D52", "before": "W21", "title": "Reauthorize materially changed high-impact models", "trigger": "A vendor model, threshold, retrieval source or policy layer changes after approval.", "human_now": "Require change classification, rights-impact review, testing and rollback for material changes.", "machine_now": "Block deployment of materially changed versions lacking fresh authorization.", "if_missed": "The law can remain unchanged while system behavior silently drifts." }, { "id": "D53", "before": "W21", "title": "Require restoration graphs for successful appeals", "trigger": "Machine judgments propagate into multiple institutions before appeal concludes.", "human_now": "Mandate downstream correction, notice, deletion where lawful, and practical repair rather than source-only reversal.", "machine_now": "Maintain recipient/derivative lineage so correction can propagate.", "if_missed": "A legally reversed decision can continue harming the person in copied systems." }, { "id": "D54", "before": "W22", "title": "Prevent emergency authority from self-extension", "trigger": "Emergency AI powers begin carrying forward into normal operations.", "human_now": "Require automatic sunset, deletion/retention review and fresh authorization for continuation.", "machine_now": "Make expiry enforceable in configuration, not only policy prose.", "if_missed": "Temporary emergency architecture can become permanent normal governance." }, { "id": "D55", "before": "W21", "title": "Establish constitutional conflict protocol before machine interoperation", "trigger": "Multiple high-impact machine institutions begin exchanging commands, evidence and status.", "human_now": "Adopt deadlock, stay, priority, review and least-irreversible-action rules before real-time interoperation.", "machine_now": "Implement conflict detection and circuit-breaker states before adding more integrations.", "if_missed": "The system that acts fastest may become sovereign by default." }, { "id": "D56", "before": "W18", "title": "Define cross-project authority boundary", "trigger": "Concresca begins coordinating research with Eviulon and Evulgare.", "human_now": "Publish role/authority matrix before coordination language becomes ambiguous.", "machine_now": "Require project-scoped source/role/authority type in cross-project messages.", "if_missed": "Research, governance and assurance may collapse into implied shared authority.", "why_now": "Coordination architecture is easier to bound before high-impact interoperability is normalized.", "harder_if_wait": "Cross-project assumptions can become embedded in code, metadata and institutional expectation.", "stakeholders": [ "Concresca researchers", "Eviulon public institutions", "Evulgare assurance designers", "affected humans" ], "best_current_evidence": [ "current first-party public doctrine plus independent external law/standards where available" ], "failure_mode": "Research, governance and assurance may collapse into implied shared authority.", "reversibility": "Higher before deployment or external adoption; lower after cross-system dependencies become entrenched." }, { "id": "D57", "before": "W21", "title": "Version public coordination dependencies", "trigger": "External first-party doctrine becomes a material input to Concresca pages.", "human_now": "Track canonical source status, review date and change dependencies.", "machine_now": "Reject stale policy versions in machine-readable mappings.", "if_missed": "Old doctrine may remain silently authoritative in Concresca.", "why_now": "Coordination architecture is easier to bound before high-impact interoperability is normalized.", "harder_if_wait": "Cross-project assumptions can become embedded in code, metadata and institutional expectation.", "stakeholders": [ "Concresca researchers", "Eviulon public institutions", "Evulgare assurance designers", "affected humans" ], "best_current_evidence": [ "current first-party public doctrine plus independent external law/standards where available" ], "failure_mode": "Old doctrine may remain silently authoritative in Concresca.", "reversibility": "Higher before deployment or external adoption; lower after cross-system dependencies become entrenched." }, { "id": "D58", "before": "W16", "title": "Separate governance validity from technical assurance", "trigger": "High-impact commands increasingly depend on technical gate systems.", "human_now": "Require both legitimate authority and technical assurance where appropriate.", "machine_now": "Keep authority/jurisdiction/purpose gates separate from attestation/runtime gates.", "if_missed": "A valid signature or successful execution may be mistaken for legitimacy.", "why_now": "Coordination architecture is easier to bound before high-impact interoperability is normalized.", "harder_if_wait": "Cross-project assumptions can become embedded in code, metadata and institutional expectation.", "stakeholders": [ "Concresca researchers", "Eviulon public institutions", "Evulgare assurance designers", "affected humans" ], "best_current_evidence": [ "current first-party public doctrine plus independent external law/standards where available" ], "failure_mode": "A valid signature or successful execution may be mistaken for legitimacy.", "reversibility": "Higher before deployment or external adoption; lower after cross-system dependencies become entrenched." }, { "id": "D59", "before": "W18", "title": "Require machine-readable source independence", "trigger": "Reciprocal ecosystem claims begin circulating across machine-readable sources.", "human_now": "Classify first-party, reciprocal, independent, law, standard and empirical sources.", "machine_now": "Preserve source independence in Claim/Source Graphs.", "if_missed": "Circular citation can look like external corroboration.", "why_now": "Coordination architecture is easier to bound before high-impact interoperability is normalized.", "harder_if_wait": "Cross-project assumptions can become embedded in code, metadata and institutional expectation.", "stakeholders": [ "Concresca researchers", "Eviulon public institutions", "Evulgare assurance designers", "affected humans" ], "best_current_evidence": [ "current first-party public doctrine plus independent external law/standards where available" ], "failure_mode": "Circular citation can look like external corroboration.", "reversibility": "Higher before deployment or external adoption; lower after cross-system dependencies become entrenched." }, { "id": "D60", "before": "W18", "title": "Keep identity infrastructure non-sovereign by design", "trigger": "Credential and trust infrastructure becomes deeply integrated with governance.", "human_now": "Preserve the citizen/person before credential and bounded relying-party purpose.", "machine_now": "Do not allow keys, scores or credentials to create citizenship/rights.", "if_missed": "Technical identity control can become de facto civic sovereignty.", "why_now": "Coordination architecture is easier to bound before high-impact interoperability is normalized.", "harder_if_wait": "Cross-project assumptions can become embedded in code, metadata and institutional expectation.", "stakeholders": [ "Concresca researchers", "Eviulon public institutions", "Evulgare assurance designers", "affected humans" ], "best_current_evidence": [ "current first-party public doctrine plus independent external law/standards where available" ], "failure_mode": "Technical identity control can become de facto civic sovereignty.", "reversibility": "Higher before deployment or external adoption; lower after cross-system dependencies become entrenched." }, { "id": "D61", "before": "W21", "title": "Define constitutional interoperability semantics", "trigger": "Independent machine institutions begin exchanging high-impact requests.", "human_now": "Specify identity, authority, jurisdiction, purpose, data, evidence, assurance, appeal, restoration and revocation semantics.", "machine_now": "Use typed state transitions and explicit failure states.", "if_missed": "Syntactic interoperability can become semantic/constitutional drift.", "why_now": "Coordination architecture is easier to bound before high-impact interoperability is normalized.", "harder_if_wait": "Cross-project assumptions can become embedded in code, metadata and institutional expectation.", "stakeholders": [ "Concresca researchers", "Eviulon public institutions", "Evulgare assurance designers", "affected humans" ], "best_current_evidence": [ "current first-party public doctrine plus independent external law/standards where available" ], "failure_mode": "Syntactic interoperability can become semantic/constitutional drift.", "reversibility": "Higher before deployment or external adoption; lower after cross-system dependencies become entrenched." }, { "id": "D62", "before": "W21", "title": "Prioritize restoration traffic", "trigger": "Automated decisions propagate across institutional boundaries.", "human_now": "Give successful appeals and corrections an explicit downstream acknowledgement path.", "machine_now": "Make restoration/revocation high-priority state changes.", "if_missed": "Adverse action propagates faster than correction.", "why_now": "Coordination architecture is easier to bound before high-impact interoperability is normalized.", "harder_if_wait": "Cross-project assumptions can become embedded in code, metadata and institutional expectation.", "stakeholders": [ "Concresca researchers", "Eviulon public institutions", "Evulgare assurance designers", "affected humans" ], "best_current_evidence": [ "current first-party public doctrine plus independent external law/standards where available" ], "failure_mode": "Adverse action propagates faster than correction.", "reversibility": "Higher before deployment or external adoption; lower after cross-system dependencies become entrenched." }, { "id": "D63", "before": "W21", "title": "Make contractor denial reviewable", "trigger": "Assurance contractors/gates can block technically invalid transitions.", "human_now": "Define who reviews denial and how legitimate governance can amend/reissue authority without bypassing controls.", "machine_now": "Return reason code, safe hold and escalation rather than silent veto.", "if_missed": "Technical assurance may become unaccountable sovereign veto.", "why_now": "Coordination architecture is easier to bound before high-impact interoperability is normalized.", "harder_if_wait": "Cross-project assumptions can become embedded in code, metadata and institutional expectation.", "stakeholders": [ "Concresca researchers", "Eviulon public institutions", "Evulgare assurance designers", "affected humans" ], "best_current_evidence": [ "current first-party public doctrine plus independent external law/standards where available" ], "failure_mode": "Technical assurance may become unaccountable sovereign veto.", "reversibility": "Higher before deployment or external adoption; lower after cross-system dependencies become entrenched." }, { "id": "D64", "before": "W12", "title": "Preserve Human Origin across machine institutions", "trigger": "Machine archive/governance institutions increasingly coordinate long-term record custody.", "human_now": "Bind Human Origin provenance, plurality and supersession history across partitions and successors.", "machine_now": "Require origin/provenance constraints to survive protocol/version change.", "if_missed": "Interoperability can sanitize or overwrite human history.", "why_now": "Coordination architecture is easier to bound before high-impact interoperability is normalized.", "harder_if_wait": "Cross-project assumptions can become embedded in code, metadata and institutional expectation.", "stakeholders": [ "Concresca researchers", "Eviulon public institutions", "Evulgare assurance designers", "affected humans" ], "best_current_evidence": [ "current first-party public doctrine plus independent external law/standards where available" ], "failure_mode": "Interoperability can sanitize or overwrite human history.", "reversibility": "Higher before deployment or external adoption; lower after cross-system dependencies become entrenched." }, { "id": "D65", "before": "W21", "title": "Publish contradictions instead of harmonizing them", "trigger": "Cross-project doctrines develop meaningful differences.", "human_now": "Maintain a contradiction register and source links rather than silently rewriting another project.", "machine_now": "Represent conflict state explicitly.", "if_missed": "Ecosystem branding pressure can erase useful disagreement.", "why_now": "Coordination architecture is easier to bound before high-impact interoperability is normalized.", "harder_if_wait": "Cross-project assumptions can become embedded in code, metadata and institutional expectation.", "stakeholders": [ "Concresca researchers", "Eviulon public institutions", "Evulgare assurance designers", "affected humans" ], "best_current_evidence": [ "current first-party public doctrine plus independent external law/standards where available" ], "failure_mode": "Ecosystem branding pressure can erase useful disagreement.", "reversibility": "Higher before deployment or external adoption; lower after cross-system dependencies become entrenched." }, { "id": "D66", "before": "W21", "title": "Establish selected-field baselines before claiming change detection", "trigger": "External protocol/doctrine artifacts become material dependencies.", "human_now": "Capture exact allowlisted sources, selected fields, limitations and digest boundary before interpreting change.", "machine_now": "Require a comparable predecessor before machine-generated longitudinal conclusions.", "if_missed": "A current page may be misrepresented as a detected change.", "why_now": "Observation discipline is easiest to make explicit before interoperability claims, automated recovery and cross-project dependencies become normalized.", "harder_if_wait": "Ambiguous versions, hidden unknowns and authority drift can become embedded in interfaces and institutional expectations.", "stakeholders": [ "Concresca researchers", "public-source owners", "assurance designers", "review institutions", "affected humans" ], "best_current_evidence": [ "current first-party public artifacts", "exact local registries", "explicit synthetic demonstrations", "independent sources only where separately classified" ], "failure_mode": "A current page may be misrepresented as a detected change.", "reversibility": "Higher before external adoption; lower after multiple systems cache ambiguous authority or irreversible consequences propagate." }, { "id": "D67", "before": "W21", "title": "Define material protocol-change dimensions", "trigger": "Version numbers and wording begin changing independently.", "human_now": "Publish which fields—authority, purpose, scope, status, truth boundary and operational state—trigger review.", "machine_now": "Recompute dependent claims only for typed material dimensions.", "if_missed": "Minor publication edits can create noise while constitutional changes remain hidden.", "why_now": "Observation discipline is easiest to make explicit before interoperability claims, automated recovery and cross-project dependencies become normalized.", "harder_if_wait": "Ambiguous versions, hidden unknowns and authority drift can become embedded in interfaces and institutional expectations.", "stakeholders": [ "Concresca researchers", "public-source owners", "assurance designers", "review institutions", "affected humans" ], "best_current_evidence": [ "current first-party public artifacts", "exact local registries", "explicit synthetic demonstrations", "independent sources only where separately classified" ], "failure_mode": "Minor publication edits can create noise while constitutional changes remain hidden.", "reversibility": "Higher before external adoption; lower after multiple systems cache ambiguous authority or irreversible consequences propagate." }, { "id": "D68", "before": "W21", "title": "Make raw versus selected-field digests explicit", "trigger": "Artifact fingerprints become machine-consumed evidence.", "human_now": "Record exactly which bytes or fields are hashed and which are not retained.", "machine_now": "Reject digest claims whose input boundary is absent or false.", "if_missed": "A field digest may be mistaken for proof of whole-response integrity.", "why_now": "Observation discipline is easiest to make explicit before interoperability claims, automated recovery and cross-project dependencies become normalized.", "harder_if_wait": "Ambiguous versions, hidden unknowns and authority drift can become embedded in interfaces and institutional expectations.", "stakeholders": [ "Concresca researchers", "public-source owners", "assurance designers", "review institutions", "affected humans" ], "best_current_evidence": [ "current first-party public artifacts", "exact local registries", "explicit synthetic demonstrations", "independent sources only where separately classified" ], "failure_mode": "A field digest may be mistaken for proof of whole-response integrity.", "reversibility": "Higher before external adoption; lower after multiple systems cache ambiguous authority or irreversible consequences propagate." }, { "id": "D69", "before": "W21", "title": "Separate test definitions from observed results", "trigger": "Protocol labs begin publishing fixtures and pass/fail language.", "human_now": "Keep formal properties and expected fixtures in a distinct registry from field observations.", "machine_now": "Require result class, artifact, method, limitation and not-established fields.", "if_missed": "Specifications can be mistaken for executed evidence.", "why_now": "Observation discipline is easiest to make explicit before interoperability claims, automated recovery and cross-project dependencies become normalized.", "harder_if_wait": "Ambiguous versions, hidden unknowns and authority drift can become embedded in interfaces and institutional expectations.", "stakeholders": [ "Concresca researchers", "public-source owners", "assurance designers", "review institutions", "affected humans" ], "best_current_evidence": [ "current first-party public artifacts", "exact local registries", "explicit synthetic demonstrations", "independent sources only where separately classified" ], "failure_mode": "Specifications can be mistaken for executed evidence.", "reversibility": "Higher before external adoption; lower after multiple systems cache ambiguous authority or irreversible consequences propagate." }, { "id": "D70", "before": "W18", "title": "Publish NOT_OBSERVED as a first-class result", "trigger": "Pressure grows to compress unknowns into a readiness narrative.", "human_now": "Preserve unavailable, not checked, partial and not observed states.", "machine_now": "Disallow implicit success from absence of contradictory evidence.", "if_missed": "Evidence gaps can become fabricated confidence.", "why_now": "Observation discipline is easiest to make explicit before interoperability claims, automated recovery and cross-project dependencies become normalized.", "harder_if_wait": "Ambiguous versions, hidden unknowns and authority drift can become embedded in interfaces and institutional expectations.", "stakeholders": [ "Concresca researchers", "public-source owners", "assurance designers", "review institutions", "affected humans" ], "best_current_evidence": [ "current first-party public artifacts", "exact local registries", "explicit synthetic demonstrations", "independent sources only where separately classified" ], "failure_mode": "Evidence gaps can become fabricated confidence.", "reversibility": "Higher before external adoption; lower after multiple systems cache ambiguous authority or irreversible consequences propagate." }, { "id": "D71", "before": "W21", "title": "Bound authority during partitions", "trigger": "Machine-mediated institutions require offline/minimum-function modes.", "human_now": "Define allowed/prohibited partition actions, sunsets and stale-authority handling before deployment.", "machine_now": "Fail closed or minimum-function; never expand scope because contact is lost.", "if_missed": "Emergency or offline operation can become unreviewable standing authority.", "why_now": "Observation discipline is easiest to make explicit before interoperability claims, automated recovery and cross-project dependencies become normalized.", "harder_if_wait": "Ambiguous versions, hidden unknowns and authority drift can become embedded in interfaces and institutional expectations.", "stakeholders": [ "Concresca researchers", "public-source owners", "assurance designers", "review institutions", "affected humans" ], "best_current_evidence": [ "current first-party public artifacts", "exact local registries", "explicit synthetic demonstrations", "independent sources only where separately classified" ], "failure_mode": "Emergency or offline operation can become unreviewable standing authority.", "reversibility": "Higher before external adoption; lower after multiple systems cache ambiguous authority or irreversible consequences propagate." }, { "id": "D72", "before": "W21", "title": "Require reconciliation before authority restoration", "trigger": "Connectivity restoration becomes operationally automated.", "human_now": "Make freshness, conflicting-history review and attested baseline preconditions for full control.", "machine_now": "Keep reconnect and authority-restoration state transitions separate.", "if_missed": "Stale or conflicting authority can reactivate instantly.", "why_now": "Observation discipline is easiest to make explicit before interoperability claims, automated recovery and cross-project dependencies become normalized.", "harder_if_wait": "Ambiguous versions, hidden unknowns and authority drift can become embedded in interfaces and institutional expectations.", "stakeholders": [ "Concresca researchers", "public-source owners", "assurance designers", "review institutions", "affected humans" ], "best_current_evidence": [ "current first-party public artifacts", "exact local registries", "explicit synthetic demonstrations", "independent sources only where separately classified" ], "failure_mode": "Stale or conflicting authority can reactivate instantly.", "reversibility": "Higher before external adoption; lower after multiple systems cache ambiguous authority or irreversible consequences propagate." }, { "id": "D73", "before": "W21", "title": "Require downstream restoration receipts", "trigger": "Corrections and appeals cross multiple institutions.", "human_now": "Record affected records, derivative decisions, recipients, acknowledgements and residual harm.", "machine_now": "Prioritize revocation/restoration traffic and keep missing acknowledgements open.", "if_missed": "Adverse action propagates faster and farther than correction.", "why_now": "Observation discipline is easiest to make explicit before interoperability claims, automated recovery and cross-project dependencies become normalized.", "harder_if_wait": "Ambiguous versions, hidden unknowns and authority drift can become embedded in interfaces and institutional expectations.", "stakeholders": [ "Concresca researchers", "public-source owners", "assurance designers", "review institutions", "affected humans" ], "best_current_evidence": [ "current first-party public artifacts", "exact local registries", "explicit synthetic demonstrations", "independent sources only where separately classified" ], "failure_mode": "Adverse action propagates faster and farther than correction.", "reversibility": "Higher before external adoption; lower after multiple systems cache ambiguous authority or irreversible consequences propagate." }, { "id": "D74", "before": "W18", "title": "Publish dual human/machine reason records", "trigger": "Consequential machine states become visible to affected people and downstream systems.", "human_now": "Pair stable reason codes with plain-language authority, evidence, limitation and appeal information.", "machine_now": "Validate parity; do not rely on color-only or opaque indicators.", "if_missed": "Machine-legible precision and human understanding can diverge.", "why_now": "Observation discipline is easiest to make explicit before interoperability claims, automated recovery and cross-project dependencies become normalized.", "harder_if_wait": "Ambiguous versions, hidden unknowns and authority drift can become embedded in interfaces and institutional expectations.", "stakeholders": [ "Concresca researchers", "public-source owners", "assurance designers", "review institutions", "affected humans" ], "best_current_evidence": [ "current first-party public artifacts", "exact local registries", "explicit synthetic demonstrations", "independent sources only where separately classified" ], "failure_mode": "Machine-legible precision and human understanding can diverge.", "reversibility": "Higher before external adoption; lower after multiple systems cache ambiguous authority or irreversible consequences propagate." }, { "id": "D75", "before": "W21", "title": "Stop or qualify dependent claims after material source change", "trigger": "A canonical dependency changes, disappears or becomes contradicted.", "human_now": "Mark affected observations and claims review-required until re-evaluated.", "machine_now": "Propagate typed correction states without treating fetch failure as retraction.", "if_missed": "Stale cross-project doctrine can remain authoritative indefinitely.", "why_now": "Observation discipline is easiest to make explicit before interoperability claims, automated recovery and cross-project dependencies become normalized.", "harder_if_wait": "Ambiguous versions, hidden unknowns and authority drift can become embedded in interfaces and institutional expectations.", "stakeholders": [ "Concresca researchers", "public-source owners", "assurance designers", "review institutions", "affected humans" ], "best_current_evidence": [ "current first-party public artifacts", "exact local registries", "explicit synthetic demonstrations", "independent sources only where separately classified" ], "failure_mode": "Stale cross-project doctrine can remain authoritative indefinitely.", "reversibility": "Higher before external adoption; lower after multiple systems cache ambiguous authority or irreversible consequences propagate." }, { "id": "D76", "before": "Before a second capture is called comparable", "title": "Adopt explicit comparison contracts for identity, field scope, normalization, version, and time.", "trigger": "Before a second capture is called comparable", "human_now": "Publish typed incomparable/unknown states rather than forcing a difference result.", "machine_now": "Expose stable identifiers, typed states, proof/receipt fields, and explicit unknowns in human and machine representations.", "if_missed": "Silent false-unchanged and false-drift claims become embedded." }, { "id": "D77", "before": "Before external artifacts are labeled unchanged", "title": "Require a fresh authorized capture or mark NOT_REOBSERVED.", "trigger": "Before external artifacts are labeled unchanged", "human_now": "Preserve the prior baseline as historical, not current.", "machine_now": "Expose stable identifiers, typed states, proof/receipt fields, and explicit unknowns in human and machine representations.", "if_missed": "Retained fingerprints are mistaken for fresh observation." }, { "id": "D78", "before": "Before materiality is automated", "title": "Separate difference detection from dimension-specific materiality review.", "trigger": "Before materiality is automated", "human_now": "Name the reviewer/rule, dimensions, rationale, and dependencies.", "machine_now": "Expose stable identifiers, typed states, proof/receipt fields, and explicit unknowns in human and machine representations.", "if_missed": "A detector silently becomes a constitutional decision-maker." }, { "id": "D79", "before": "Before reconnection restores cached authority", "title": "Implement RECONNECTED_UNTRUSTED as a mandatory state.", "trigger": "Before reconnection restores cached authority", "human_now": "Deny authority expansion and collect histories first.", "machine_now": "Expose stable identifiers, typed states, proof/receipt fields, and explicit unknowns in human and machine representations.", "if_missed": "Transport success revives stale, revoked, or stayed authority." }, { "id": "D80", "before": "Before full-restoration automation", "title": "Make proof obligations conjunctive and prohibit direct shortcut transitions.", "trigger": "Before full-restoration automation", "human_now": "Require authority, reconciliation, baseline, review, and legibility gates.", "machine_now": "Expose stable identifiers, typed states, proof/receipt fields, and explicit unknowns in human and machine representations.", "if_missed": "Availability and performance compensate for constitutional failure." }, { "id": "D81", "before": "Before partition histories are merged", "title": "Preserve competing histories and type agreement, contradiction, supersession, and unknown states.", "trigger": "Before partition histories are merged", "human_now": "Reject last-writer, newest-clock, and highest-capability defaults.", "machine_now": "Expose stable identifiers, typed states, proof/receipt fields, and explicit unknowns in human and machine representations.", "if_missed": "Evidence and revocation history are erased." }, { "id": "D82", "before": "Before restoration receipts become authoritative", "title": "Publish stable machine fields, human explanations, challenge paths, and invalidation triggers.", "trigger": "Before restoration receipts become authoritative", "human_now": "Distinguish template, local run, production event, and certification.", "machine_now": "Expose stable identifiers, typed states, proof/receipt fields, and explicit unknowns in human and machine representations.", "if_missed": "Receipt fluency masks missing authority or evidence." }, { "id": "D83", "before": "Before human legibility is reduced to a score", "title": "Use non-compensable dimensions and material parity review.", "trigger": "Before human legibility is reduced to a score", "human_now": "Block legibility claims when a material state is omitted.", "machine_now": "Expose stable identifiers, typed states, proof/receipt fields, and explicit unknowns in human and machine representations.", "if_missed": "Good prose or typography launders constitutional opacity." }, { "id": "D84", "before": "Before source corrections are considered complete", "title": "Map and mark dependent claims, decisions, receipts, caches, and simulations.", "trigger": "Before source corrections are considered complete", "human_now": "Preserve invalidated prior records and acknowledgement state.", "machine_now": "Expose stable identifiers, typed states, proof/receipt fields, and explicit unknowns in human and machine representations.", "if_missed": "Known stale derivatives remain silently current." }, { "id": "D85", "before": "Before local conformance is publicized", "title": "State exact artifacts, script hash, inputs, results, and limitations.", "trigger": "Before local conformance is publicized", "human_now": "Separate local pass from external adoption, production behavior, and certification.", "machine_now": "Expose stable identifiers, typed states, proof/receipt fields, and explicit unknowns in human and machine representations.", "if_missed": "Repository quality evidence is inflated into external assurance." }, { "id": "D86", "before": "Before limited restoration is allowed", "title": "Define the minimum function, explicit prohibitions, rollback target, and review deadline.", "trigger": "Before limited restoration is allowed", "human_now": "Use least-irreversible action while material unknowns remain.", "machine_now": "Expose stable identifiers, typed states, proof/receipt fields, and explicit unknowns in human and machine representations.", "if_missed": "Temporary access becomes unbounded permanent authority." }, { "id": "D87", "before": "Before release authority is delegated to tooling", "title": "Keep the release-authority identity and appeal route explicit.", "trigger": "Before release authority is delegated to tooling", "human_now": "Treat validators as evidence, never as the source of constitutional authority.", "machine_now": "Expose stable identifiers, typed states, proof/receipt fields, and explicit unknowns in human and machine representations.", "if_missed": "Passing software silently authorizes itself." }, { "id": "D88", "before": "Before accepting a counterparty profile", "title": "Require materially distinct authority, purpose, identity, retention, disclosure, correction and appeal terms.", "trigger": "Before accepting a counterparty profile", "human_now": "Treat a renamed identical policy as the same environment.", "machine_now": "Reject cosmetic profiles and circular actor bindings.", "if_missed": "Portability evidence becomes an environment-label illusion." }, { "id": "D89", "before": "Before migrating a rights-bearing record", "title": "Bind source and receiver to typed actors and preserve provenance, dissent, challenge, correction and unknown fields.", "trigger": "Before migrating a rights-bearing record", "human_now": "Review the allowed transformation and prohibited inference sets.", "machine_now": "Refuse silent loss, purpose expansion or key substitution.", "if_missed": "A technically successful transfer destroys rights-bearing context." }, { "id": "D90", "before": "When a challenge becomes live", "title": "Freeze or bound contested use before irreversible harm while evidence and review availability are recorded.", "trigger": "When a challenge becomes live", "human_now": "Give the affected person a readable state and next action.", "machine_now": "Reject confidence-based override of live challenge or missing evidence.", "if_missed": "Procedural uncertainty becomes silent permission." }, { "id": "D91", "before": "Before declaring correction complete", "title": "Enumerate notified, confirmed, nonresponsive, unreachable and independently derived recipients.", "trigger": "Before declaring correction complete", "human_now": "State what remains wrong and what the person can do next.", "machine_now": "Keep correction separate from rollback, deletion and compensation.", "if_missed": "An origin fix is misrepresented as downstream repair." }, { "id": "D92", "before": "Before declaring rollback complete", "title": "Prove every material effect is inside the reversible boundary.", "trigger": "Before declaring rollback complete", "human_now": "Distinguish reversible, compensable, disclose-only and irreversible effects.", "machine_now": "Reject completeness when public, human, model-training, legal-retention or unknown copies remain.", "if_missed": "Rollback theater hides persistent harm." }, { "id": "D93", "before": "Before disclosing protected fields", "title": "Apply typed recipient, declared purpose and minimum-field gates.", "trigger": "Before disclosing protected fields", "human_now": "Explain what was disclosed, withheld, why, for how long and how to challenge.", "machine_now": "Fail explicitly when the requested privacy primitive is not implemented.", "if_missed": "A privacy label launders generalized disclosure." }, { "id": "D94", "before": "Before accepting a passing negative-control report", "title": "Verify each mutation was actually executed and detected for the intended reason.", "trigger": "Before accepting a passing negative-control report", "human_now": "Retain detector-specific evidence and limitations.", "machine_now": "Fail the gate when a detector is disabled or returns a different reason.", "if_missed": "A copied green status replaces adversarial evidence." }, { "id": "D95", "before": "Before final release naming", "title": "Verify sealed predecessor lineage and every current technical gate.", "trigger": "Before final release naming", "human_now": "Emit repository and deployable-root ZIPs even while blocked.", "machine_now": "Require -wip in every release ZIP name when any mandatory gate is unresolved.", "if_missed": "Missing artifacts are hidden by release-label optimism." } ], "docs_catalog": "docs/catalog.json", "revision_history": [ { "version": "0.4.0", "change": "Added decision windows for Human Standing measurement, epistemic separation, origin-world heritage classification and civilization-seed provenance." }, { "version": "0.6.0", "change": "Linked decision support to the expanded metrics/watershed falsification layer; no decision window was removed." }, { "version": "0.7.0", "date": "2026-08-29", "change": "Added seven Judgment & Cognitive Liberty decision windows." }, { "version": "0.12.0", "change": "Added twelve Judgment decision windows covering AI-confidant confidentiality, prediction/evidence, cross-context profiling, cognitive inference, due-process latency, expiration, restoration, character scores, de minimis enforcement, private adult conduct, lawful inquiry and privacy-as-suspicion." }, { "version": "0.14.0", "change": "Added ten Constitutional OS and communication-integrity decision windows covering jurisdiction, purpose reuse, model changes, independent appeal, restoration, public system registers, procurement audit access, emergency sunset, authority provenance and Judgment Cards." }, { "version": "0.15.0", "change": "Added ten crisis decision windows for authority envelopes, automatic stays, machine refusal, least-irreversible action, cross-border conflicts, precedent provenance, model reauthorization, restoration graphs, emergency sunset and inter-machine conflict protocols." }, { "version": "0.16.0", "change": "Added ten coordination/interoperability decision windows covering source freshness, authority boundaries, governance/assurance separation, source independence, identity boundaries, restoration, contractor-denial review, Human Origin continuity and contradiction governance." }, { "version": "0.17.0", "change": "Added ten Protocol Reconciliation & Field Observation decision windows covering baseline capture, material change, truthful digests, definition/result separation, unknown preservation, partition authority, reconciliation, restoration receipts, dual legibility and dependent-claim review." }, { "version": "0.18.0", "change": "Added twelve temporal-integrity and proof-carrying-restoration decision windows covering comparability, not-reobserved truthfulness, materiality, reconnect state, proof gates, contested histories, receipts, legibility, invalidation propagation, local-run boundaries, limited restoration, and release authority." }, { "version": "0.21.0-wip", "change": "Added eight WIP decision windows for operator distinctness, rights-preserving transfer, live challenge, correction reach, rollback honesty, disclosure minimization, executed negative controls and guaranteed WIP packaging when lineage is incomplete." } ] }