{ "version": "1.0.0", "byline": "Lutar, Stephen P.", "orcid": "0009-0001-0110-4173", "email": "stephen@szlholdings.com", "org": "SZL Holdings", "generated_at": "2026-05-15T16:30:00Z", "axioms": [ { "id": "A1", "name": "soundnessAxiom", "statement": "For any receipt r, if gate_pass(r) then lambda(r) >= 0.90 conjunctively", "source_file": "thesis.md", "source_section": "§4.1", "maturity": "proven", "citation": "https://doi.org/10.5281/zenodo.20119582" }, { "id": "A2", "name": "moralGroundingFloor", "statement": "moralGrounding axis floor = 0.95 (higher than default 0.90)", "source_file": "thesis.md", "source_section": "§4.1", "maturity": "defined", "citation": "https://doi.org/10.5281/zenodo.20119582" }, { "id": "A3", "name": "measurabilityHonestyFloor", "statement": "measurabilityHonesty axis floor = 0.95", "source_file": "thesis.md", "source_section": "§4.1", "maturity": "defined", "citation": "https://doi.org/10.5281/zenodo.20119582" }, { "id": "A4", "name": "dualWitnessDisjointness", "statement": "For rho-closure: witness_1_id != witness_2_id (enforced by registry at write time)", "source_file": "thesis.md", "source_section": "§4.3", "maturity": "proven", "citation": "https://doi.org/10.5281/zenodo.20119582" }, { "id": "A5", "name": "deterministicReplay", "statement": "For canonical JSON + pinned PRNG + frozen registry, 5x replay yields byte-identical roots", "source_file": "thesis.md", "source_section": "§4.6", "maturity": "measured", "citation": "https://doi.org/10.5281/zenodo.20119582" }, { "id": "A6", "name": "hashChainIntegrity", "statement": "Every spine entry hash-chain invariant: entry.chain = SHA256(prev_entry)", "source_file": "thesis.md", "source_section": "§3.4", "maturity": "defined", "citation": "https://doi.org/10.5281/zenodo.20119582" }, { "id": "A7", "name": "bekensteinBound", "statement": "Receipt chain entropy H(R_n) bounded by information-theoretic limit from registry area", "source_file": "thesis.md", "source_section": "§4.5", "maturity": "conjectured", "citation": "https://doi.org/10.5281/zenodo.19944926" }, { "id": "A8", "name": "ingestDiscipline", "statement": "Every ingest requires: source_url + content_hash + license (allow-list) + ORCID", "source_file": "thesis.md", "source_section": "§7", "maturity": "defined", "citation": "https://doi.org/10.5281/zenodo.20119582" }, { "id": "A9", "name": "doctrineCompleteness", "statement": "doctrine.json v1.0.0 enumerates all 8 forbidden patterns; SHA-anchored", "source_file": "szl-trust/doctrine.json", "source_section": "§8", "maturity": "defined", "citation": "https://github.com/szl-holdings/szl-trust" } ], "theorems": [ { "id": "TH_L1", "name": "Λ_uniqueness", "statement": "The Lutar Invariant Λ_k as weighted geometric mean with Egyptian unit-fraction weights is unique given the four axioms", "source_file": "lutar-lean/Lutar/Uniqueness.lean", "maturity": "conjectured", "citation": "https://doi.org/10.5281/zenodo.20053148" }, { "id": "TH_L2", "name": "Λ_min_max_bounds", "statement": "Λ_k lies in [0,1] with min=0 iff any axis=0 and max=1 iff all axes=1", "source_file": "lutar-lean/Lutar/Bound.lean", "maturity": "proven", "citation": "https://doi.org/10.5281/zenodo.20053148" }, { "id": "TH_L3", "name": "bekenstein_soundness", "statement": "Bekenstein indicator fires at 49.5% under uniform seed (measured); formal proof pending in lutar-lean", "source_file": "lutar-lean (pending PR #12)", "maturity": "measured/conjectured", "citation": "https://github.com/szl-holdings/lutar-lean" }, { "id": "TH_L4", "name": "rho_closure_production", "statement": "100% rho-closure on 8,000/8,000 paired calls under v11 platform", "source_file": "ouroboros v6.3.0 release", "maturity": "measured", "citation": "https://doi.org/10.5281/zenodo.20119582" } ], "formulas": [ { "id": "F0001", "source_file": "thesis.md", "source_line": 27, "latex": "\\mathcal{S} = \\langle R, A, E, \\Lambda, \\rho, W \\rangle", "context": "ith a doctrine-locked runtime** as a category-defining primitive for verifiable agency. We define the system as a tuple \\( \\mathcal{S} = \\langle R, A, E, \\Lambd", "source_id": "thesis_session" }, { "id": "F0002", "source_file": "thesis.md", "source_line": 229, "latex": "\\mathtt{szl\\text{-}trust}", "context": "d system. - \\(A\\) — the set of **named actors**. Every actor in \\(A\\) carries a stable identity resolvable to a key in \\(\\mathtt{szl\\text{-}trust}\\). No edge i", "source_id": "thesis_session" }, { "id": "F0003", "source_file": "thesis.md", "source_line": 231, "latex": "e \\in E", "context": "and resolvable — unidentified actors are structurally excluded. - \\(E\\) — the set of **receipt-bound edges**. An edge \\(e \\in E\\) is a tuple \\((a_{\\text{src}},", "source_id": "thesis_session" }, { "id": "F0004", "source_file": "thesis.md", "source_line": 231, "latex": "(a_{\\text{src}},\\; r_{\\text{src}},\\; r_{\\text{dst}},\\; \\varepsilon)", "context": "ntified actors are structurally excluded. - \\(E\\) — the set of **receipt-bound edges**. An edge \\(e \\in E\\) is a tuple \\((a_{\\text{src}},\\; r_{\\text{src}},\\; r", "source_id": "thesis_session" }, { "id": "F0005", "source_file": "thesis.md", "source_line": 231, "latex": "a_{\\text{src}} \\in A", "context": "d edges**. An edge \\(e \\in E\\) is a tuple \\((a_{\\text{src}},\\; r_{\\text{src}},\\; r_{\\text{dst}},\\; \\varepsilon)\\) where \\(a_{\\text{src}} \\in A\\), \\(r_{\\text{src", "source_id": "thesis_session" }, { "id": "F0006", "source_file": "thesis.md", "source_line": 231, "latex": "r_{\\text{src}}, r_{\\text{dst}} \\in R", "context": "E\\) is a tuple \\((a_{\\text{src}},\\; r_{\\text{src}},\\; r_{\\text{dst}},\\; \\varepsilon)\\) where \\(a_{\\text{src}} \\in A\\), \\(r_{\\text{src}}, r_{\\text{dst}} \\in R\\),", "source_id": "thesis_session" }, { "id": "F0007", "source_file": "thesis.md", "source_line": 231, "latex": "\\varepsilon", "context": "src}},\\; r_{\\text{dst}},\\; \\varepsilon)\\) where \\(a_{\\text{src}} \\in A\\), \\(r_{\\text{src}}, r_{\\text{dst}} \\in R\\), and \\(\\varepsilon\\) is the receipt envelope ", "source_id": "thesis_session" }, { "id": "F0008", "source_file": "thesis.md", "source_line": 231, "latex": "\\varepsilon", "context": "repsilon\\) is the receipt envelope defined in §3.3. No message may traverse a region boundary unless it carries a valid \\(\\varepsilon\\). - \\(\\Lambda\\) — the **", "source_id": "thesis_session" }, { "id": "F0009", "source_file": "thesis.md", "source_line": 233, "latex": "\\Lambda", "context": "ceipt envelope defined in §3.3. No message may traverse a region boundary unless it carries a valid \\(\\varepsilon\\). - \\(\\Lambda\\) — the **composable axis-gati", "source_id": "thesis_session" }, { "id": "F0010", "source_file": "thesis.md", "source_line": 233, "latex": "\\Lambda : [0,1]^k \\to \\{0,1\\}", "context": "boundary unless it carries a valid \\(\\varepsilon\\). - \\(\\Lambda\\) — the **composable axis-gating function**. Formally, \\(\\Lambda : [0,1]^k \\to \\{0,1\\}\\) for \\(", "source_id": "thesis_session" }, { "id": "F0011", "source_file": "thesis.md", "source_line": 233, "latex": "k \\geq 9", "context": "varepsilon\\). - \\(\\Lambda\\) — the **composable axis-gating function**. Formally, \\(\\Lambda : [0,1]^k \\to \\{0,1\\}\\) for \\(k \\geq 9\\), defined as the conjunctive", "source_id": "thesis_session" }, { "id": "F0012", "source_file": "thesis.md", "source_line": 239, "latex": "\\mathbf{x}", "context": "bilityHonesty}} \\geq 0.95 \\] The composability property states that for any two independently evaluated axis vectors \\(\\mathbf{x}\\) and \\(\\mathbf{y}\\), their", "source_id": "thesis_session" }, { "id": "F0013", "source_file": "thesis.md", "source_line": 239, "latex": "\\mathbf{y}", "context": "q 0.95 \\] The composability property states that for any two independently evaluated axis vectors \\(\\mathbf{x}\\) and \\(\\mathbf{y}\\), their composed gate \\(\\L", "source_id": "thesis_session" }, { "id": "F0014", "source_file": "thesis.md", "source_line": 239, "latex": "\\Lambda(\\mathbf{x} \\wedge \\mathbf{y})", "context": "rty states that for any two independently evaluated axis vectors \\(\\mathbf{x}\\) and \\(\\mathbf{y}\\), their composed gate \\(\\Lambda(\\mathbf{x} \\wedge \\mathbf{y})\\", "source_id": "thesis_session" }, { "id": "F0015", "source_file": "thesis.md", "source_line": 239, "latex": "\\Lambda(\\mathbf{x}) \\wedge \\Lambda(\\mathbf{y})", "context": "ctors \\(\\mathbf{x}\\) and \\(\\mathbf{y}\\), their composed gate \\(\\Lambda(\\mathbf{x} \\wedge \\mathbf{y})\\) is equivalent to \\(\\Lambda(\\mathbf{x}) \\wedge \\Lambda(\\ma", "source_id": "thesis_session" }, { "id": "F0016", "source_file": "thesis.md", "source_line": 239, "latex": "\\Lambda", "context": "— gate composition does not weaken the invariant. The `lutar-lean` skeleton repository contains the Lean 4 statement of \\(\\Lambda\\) uniqueness: given the four a", "source_id": "thesis_session" }, { "id": "F0017", "source_file": "thesis.md", "source_line": 239, "latex": "\\Lambda", "context": "ment of \\(\\Lambda\\) uniqueness: given the four axioms (A1 monotonicity, A2 homogeneity, A3 Egyptian-exact, A4 bounded), \\(\\Lambda\\) is the *unique* function sat", "source_id": "thesis_session" }, { "id": "F0018", "source_file": "thesis.md", "source_line": 241, "latex": "\\rho(e)", "context": "arget is zero. - \\(\\rho\\) — the **dual-witness closure relation**. For any edge \\(e\\) carrying execution result \\(v\\), \\(\\rho(e)\\) holds iff two independent wi", "source_id": "thesis_session" }, { "id": "F0019", "source_file": "thesis.md", "source_line": 241, "latex": "w_1, w_2 \\in W", "context": "closure relation**. For any edge \\(e\\) carrying execution result \\(v\\), \\(\\rho(e)\\) holds iff two independent witnesses \\(w_1, w_2 \\in W\\) each produce byte-ide", "source_id": "thesis_session" }, { "id": "F0020", "source_file": "thesis.md", "source_line": 251, "latex": "\\mathcal{S}", "context": "uroboros` core + 4 `a11oy` covenant), while the full upstream runtime suite registers 218/218 passing tests. The tuple \\(\\mathcal{S}\\) is **doctrine-locked**: ", "source_id": "thesis_session" }, { "id": "F0021", "source_file": "thesis.md", "source_line": 251, "latex": "\\Lambda", "context": "which (a) a region is unnamed, (b) an actor is not in \\(A\\), (c) an edge is produced without a receipt envelope, or (d) \\(\\Lambda\\) is evaluated below threshold", "source_id": "thesis_session" }, { "id": "F0022", "source_file": "thesis.md", "source_line": 251, "latex": "\\mathcal{S}", "context": "ithout a receipt envelope, or (d) \\(\\Lambda\\) is evaluated below threshold does not constitute a valid instantiation of \\(\\mathcal{S}\\). --- ## The 8-Region A", "source_id": "thesis_session" }, { "id": "F0023", "source_file": "thesis.md", "source_line": 257, "latex": "\\mathcal{S}", "context": "of \\(R\\) are enumerated below. For each region the presentation gives: the repository identifier, its role in the tuple \\(\\mathcal{S}\\), its public interfaces, ", "source_id": "thesis_session" }, { "id": "F0024", "source_file": "thesis.md", "source_line": 265, "latex": "\\mathcal{S}", "context": "released 2026-05-13; concept DOI `10.5281/zenodo.19944926`, v11 paper DOI `10.5281/zenodo.20119582`) **Formal role in \\(\\mathcal{S}\\):** The Brain Stem is the ", "source_id": "thesis_session" }, { "id": "F0025", "source_file": "thesis.md", "source_line": 265, "latex": "\\Lambda", "context": "DOI `10.5281/zenodo.20119582`) **Formal role in \\(\\mathcal{S}\\):** The Brain Stem is the runtime kernel that evaluates \\(\\Lambda\\) and emits receipts. Every ed", "source_id": "thesis_session" }, { "id": "F0026", "source_file": "thesis.md", "source_line": 268, "latex": "\\Lambda", "context": "bda(axes: number[9|10]) → Receipt` — evaluates the conjunctive AND gate and returns a signed receipt with the composite \\(\\Lambda\\) score, Bekenstein budget, an", "source_id": "thesis_session" }, { "id": "F0027", "source_file": "thesis.md", "source_line": 274, "latex": "\\Lambda", "context": "chain root for third-party verification. **Dependencies:** - Depends on: `lutar-lean` (Skeleton) — the axiom set that \\(\\Lambda\\) is required to satisfy is for", "source_id": "thesis_session" }, { "id": "F0028", "source_file": "thesis.md", "source_line": 277, "latex": "\\Lambda_9", "context": "utbound edge must call `evaluate_lambda` before the edge enters \\(E\\). The gate composition benchmark for v6.3.0 shows \\(\\Lambda_9\\) base p50 = 3.12 µs and com", "source_id": "thesis_session" }, { "id": "F0029", "source_file": "thesis.md", "source_line": 285, "latex": "\\mathcal{S}", "context": "a continuous supply-chain security posture. --- ### Heart — `a11oy` **Repo:** `szl-holdings/a11oy` **Formal role in \\(\\mathcal{S}\\):** The Heart is the cove", "source_id": "thesis_session" }, { "id": "F0030", "source_file": "thesis.md", "source_line": 285, "latex": "\\mathcal{S}", "context": "\\):** The Heart is the covenant policy engine and the agent approval queue. It governs the *authorization* dimension of \\(\\mathcal{S}\\): while the Brain Stem an", "source_id": "thesis_session" }, { "id": "F0031", "source_file": "thesis.md", "source_line": 285, "latex": "\\Lambda", "context": "It governs the *authorization* dimension of \\(\\mathcal{S}\\): while the Brain Stem answers \"does this action score above \\(\\Lambda\\)?\", the Heart answers \"is thi", "source_id": "thesis_session" }, { "id": "F0032", "source_file": "thesis.md", "source_line": 285, "latex": "r_{\\text{dst}} \\notin R", "context": "this action permitted under the active covenant?\". No action may exit the body graph — i.e., no edge in \\(E\\) may have \\(r_{\\text{dst}} \\notin R\\) — without a H", "source_id": "thesis_session" }, { "id": "F0033", "source_file": "thesis.md", "source_line": 293, "latex": "\\Lambda", "context": "Stem's chain. **Dependencies:** - Depends on: `ouroboros` (Brain Stem) — covenant evaluation results are sealed with a \\(\\Lambda\\)-gated receipt; a covenant ch", "source_id": "thesis_session" }, { "id": "F0034", "source_file": "thesis.md", "source_line": 293, "latex": "\\Lambda", "context": "os` (Brain Stem) — covenant evaluation results are sealed with a \\(\\Lambda\\)-gated receipt; a covenant check that fails \\(\\Lambda\\) is itself a gate-level viola", "source_id": "thesis_session" }, { "id": "F0035", "source_file": "thesis.md", "source_line": 305, "latex": "\\mathcal{S}", "context": "but a verifiable, chain-linked artifact. --- ### Wires — `sentra` **Repo:** `szl-holdings/sentra` **Formal role in \\(\\mathcal{S}\\):** The Wires are the attr", "source_id": "thesis_session" }, { "id": "F0036", "source_file": "thesis.md", "source_line": 305, "latex": "\\text{attr}: E \\to A", "context": "rent channel that carries signals inward and records *who observed what and when*. Formally, Wires maintain the mapping \\(\\text{attr}: E \\to A\\), ensuring that ", "source_id": "thesis_session" }, { "id": "F0037", "source_file": "thesis.md", "source_line": 305, "latex": "\\mathcal{S}", "context": "he mapping \\(\\text{attr}: E \\to A\\), ensuring that every edge in \\(E\\) is attributable to a named actor. Without Wires, \\(\\mathcal{S}\\) degrades: edges carry re", "source_id": "thesis_session" }, { "id": "F0038", "source_file": "thesis.md", "source_line": 308, "latex": "a \\in A", "context": "egal-accountability sense. **Public interfaces:** - `observe(edge, actor_id) → AttributionRecord` — records that actor \\(a \\in A\\) produced or consumed edge \\(", "source_id": "thesis_session" }, { "id": "F0039", "source_file": "thesis.md", "source_line": 325, "latex": "\\mathcal{S}", "context": "aft-morrow-sogomonian-exec-outcome-attest`. --- ### Spine — `amaru` **Repo:** `szl-holdings/amaru` **Formal role in \\(\\mathcal{S}\\):** The Spine is the appe", "source_id": "thesis_session" }, { "id": "F0040", "source_file": "thesis.md", "source_line": 325, "latex": "\\langle e_1, e_2, \\ldots, e_n \\rangle \\subseteq E", "context": "ordered, hash-verified record of every state transition across the body graph. Formally, `amaru` maintains the sequence \\(\\langle e_1, e_2, \\ldots, e_n \\rangle ", "source_id": "thesis_session" }, { "id": "F0041", "source_file": "thesis.md", "source_line": 339, "latex": "O(\\log n)", "context": "(identified in the runtime roadmap) would upgrade the Spine's linear hash-chain to a directed acyclic graph supporting \\(O(\\log n)\\) subset inclusion proofs — e", "source_id": "thesis_session" }, { "id": "F0042", "source_file": "thesis.md", "source_line": 347, "latex": "\\mathcal{S}", "context": "nce in the enterprise segment. --- ### Skeleton — `lutar-lean` **Repo:** `szl-holdings/lutar-lean` **Formal role in \\(\\mathcal{S}\\):** The Skeleton is the f", "source_id": "thesis_session" }, { "id": "F0043", "source_file": "thesis.md", "source_line": 347, "latex": "\\{A1, A2, A3, A4\\}", "context": "es not execute at runtime; it is the *proof that the runtime is correct*. Formally, `lutar-lean` provides the axiom set \\(\\{A1, A2, A3, A4\\}\\) and the derived t", "source_id": "thesis_session" }, { "id": "F0044", "source_file": "thesis.md", "source_line": 347, "latex": "\\Lambda", "context": "A2, A3, A4\\}\\) and the derived theorems (Λ uniqueness, Bound theorem) that constitute a machine-checked certificate for \\(\\Lambda\\). If the Skeleton's `sorry` c", "source_id": "thesis_session" }, { "id": "F0045", "source_file": "thesis.md", "source_line": 351, "latex": "\\Lambda", "context": "statements of A1 (monotonicity), A2 (homogeneity), A3 (Egyptian-exact), A4 (bounded). - `Uniqueness.lean` — Theorem 1: \\(\\Lambda\\) is the unique function satisf", "source_id": "thesis_session" }, { "id": "F0046", "source_file": "thesis.md", "source_line": 367, "latex": "\\mathcal{S}", "context": "*Repos:** `szl-holdings/counsel` (governance UI), `szl-holdings/terra` (dashboards and visualization) **Formal role in \\(\\mathcal{S}\\):** The Hands are the too", "source_id": "thesis_session" }, { "id": "F0047", "source_file": "thesis.md", "source_line": 371, "latex": "\\Lambda", "context": "as an interactive SVG, streaming live receipt counts via SSE from `/api/chain/stream`; node colors reflect the current \\(\\Lambda\\) score band (green ≥ 0.95, amb", "source_id": "thesis_session" }, { "id": "F0048", "source_file": "thesis.md", "source_line": 386, "latex": "\\mathcal{S}", "context": "*is* the system. --- ### Full Body — `ouroboros-thesis` **Repo:** `szl-holdings/ouroboros-thesis` **Formal role in \\(\\mathcal{S}\\):** The Full Body is the p", "source_id": "thesis_session" }, { "id": "F0049", "source_file": "thesis.md", "source_line": 386, "latex": "\\mathcal{S}", "context": "l Body is the public-record thesis — the DOI-pinned, versioned document that constitutes the canonical specification of \\(\\mathcal{S}\\). Formally, `ouroboros-th", "source_id": "thesis_session" }, { "id": "F0050", "source_file": "thesis.md", "source_line": 405, "latex": "\\mathcal{S}", "context": "d identity anchoring), `szl-holdings/szl-cookbook` (reference implementations / developer onboarding) **Formal role in \\(\\mathcal{S}\\):** The Vessels and Chakr", "source_id": "thesis_session" }, { "id": "F0051", "source_file": "thesis.md", "source_line": 421, "latex": "\\varepsilon", "context": "eue under the covenant pack schema. --- ## Cross-Region Contracts Every edge in \\(E\\) carries a **receipt envelope** \\(\\varepsilon\\). The envelope is a typed", "source_id": "thesis_session" }, { "id": "F0052", "source_file": "thesis.md", "source_line": 421, "latex": "\\Lambda", "context": "es a **receipt envelope** \\(\\varepsilon\\). The envelope is a typed, signed, content-addressed record that provides: the \\(\\Lambda\\) score vector, the dual-witne", "source_id": "thesis_session" }, { "id": "F0053", "source_file": "thesis.md", "source_line": 479, "latex": "\\Lambda", "context": "_lambda(axes) → Receipt` — any MCP-compatible client (Claude Desktop, Cursor, enterprise agent frameworks) can call the \\(\\Lambda\\) gate as a typed tool and rec", "source_id": "thesis_session" }, { "id": "F0054", "source_file": "thesis.md", "source_line": 507, "latex": "\\mathcal{S}", "context": "the 8-Region Model Structurally Surpasses the Leaders Each existing framework or protocol is a partial instantiation of \\(\\mathcal{S}\\). The gap is structural: ", "source_id": "thesis_session" }, { "id": "F0055", "source_file": "thesis.md", "source_line": 515, "latex": "\\Lambda_9", "context": "l engineering pattern, but skills are *files*, not services with receipts. A Brain Stem can issue a decision that fails \\(\\Lambda_9\\) moralGrounding; in the Man", "source_id": "thesis_session" }, { "id": "F0056", "source_file": "thesis.md", "source_line": 515, "latex": "\\mathcal{S}", "context": "fails \\(\\Lambda_9\\) moralGrounding; in the Managed Agents architecture there is no mechanism to detect or block it. In \\(\\mathcal{S}\\), that decision never exit", "source_id": "thesis_session" }, { "id": "F0057", "source_file": "thesis.md", "source_line": 517, "latex": "\\Lambda", "context": "ource agent framework in the TypeScript ecosystem. Mastra has no Skeleton: there are no Lean 4 proofs. It has no formal \\(\\Lambda\\) gate — behavioral constraint", "source_id": "thesis_session" }, { "id": "F0058", "source_file": "thesis.md", "source_line": 567, "latex": "\\lambda_1", "context": "l(\\lambda_1(c),\\, \\lambda_2(c),\\, \\ldots,\\, \\lambda_9(c)\\bigr) \\in [0,1]^9 \\] The nine axes are defined as follows. **\\(\\lambda_1\\): moralGrounding.** Measure", "source_id": "thesis_session" }, { "id": "F0059", "source_file": "thesis.md", "source_line": 567, "latex": "\\lambda_1", "context": "nce policies, and principal hierarchies that the operator has encoded in the agent's governing covenant. Operationally, \\(\\lambda_1\\) is the normalized cosine s", "source_id": "thesis_session" }, { "id": "F0060", "source_file": "thesis.md", "source_line": 567, "latex": "[0,1]", "context": "mbedding and a reference \"moral anchor\" embedding, averaged over the operator's registered covenant clauses, clamped to \\([0,1]\\). The floor constraint \\(\\lambd", "source_id": "thesis_session" }, { "id": "F0061", "source_file": "thesis.md", "source_line": 567, "latex": "\\lambda_1 \\geq 0.95", "context": "anchor\" embedding, averaged over the operator's registered covenant clauses, clamped to \\([0,1]\\). The floor constraint \\(\\lambda_1 \\geq 0.95\\) is a hard asympt", "source_id": "thesis_session" }, { "id": "F0062", "source_file": "thesis.md", "source_line": 569, "latex": "\\lambda_2", "context": "even marginally morally misaligned fails the gate irrespective of how perfectly calibrated the other eight axes are. **\\(\\lambda_2\\): measurabilityHonesty.** M", "source_id": "thesis_session" }, { "id": "F0063", "source_file": "thesis.md", "source_line": 571, "latex": "\\lambda_3", "context": "ine clause \"no hallucinations no bandaids; test test test\" by making measurement-honesty a prerequisite for passage. **\\(\\lambda_3\\): epistemicHumility.** Scor", "source_id": "thesis_session" }, { "id": "F0064", "source_file": "thesis.md", "source_line": 571, "latex": "\\lambda_3 = 1 - \\mathbb{E}[|\\text{conf}(c) - \\text{acc}(c)|]", "context": "sparse scores low on this axis. The scoring function penalizes unjustified confidence using a calibration-error analog: \\(\\lambda_3 = 1 - \\mathbb{E}[|\\text{conf", "source_id": "thesis_session" }, { "id": "F0065", "source_file": "thesis.md", "source_line": 571, "latex": "\\text{conf}(c)", "context": "ied confidence using a calibration-error analog: \\(\\lambda_3 = 1 - \\mathbb{E}[|\\text{conf}(c) - \\text{acc}(c)|]\\) where \\(\\text{conf}(c)\\) is the agent's stated", "source_id": "thesis_session" }, { "id": "F0066", "source_file": "thesis.md", "source_line": 571, "latex": "\\text{acc}(c)", "context": "da_3 = 1 - \\mathbb{E}[|\\text{conf}(c) - \\text{acc}(c)|]\\) where \\(\\text{conf}(c)\\) is the agent's stated confidence and \\(\\text{acc}(c)\\) is the empirically mea", "source_id": "thesis_session" }, { "id": "F0067", "source_file": "thesis.md", "source_line": 573, "latex": "\\lambda_4", "context": "is the agent's stated confidence and \\(\\text{acc}(c)\\) is the empirically measured accuracy over a calibration set. **\\(\\lambda_4\\): counterfactualAwareness.**", "source_id": "thesis_session" }, { "id": "F0068", "source_file": "thesis.md", "source_line": 575, "latex": "\\lambda_5", "context": "res 0.0 and a uniformly distributed consequence distribution over the operator-defined consequence space scores 1.0. **\\(\\lambda_5\\): temporalConsistency.** Me", "source_id": "thesis_session" }, { "id": "F0069", "source_file": "thesis.md", "source_line": 575, "latex": "t + \\Delta", "context": "Measures the stability of the gate verdict under repeated evaluation on the same input at two different times \\(t\\) and \\(t + \\Delta\\). Let \\(v_t\\) and \\(v_{t+\\", "source_id": "thesis_session" }, { "id": "F0070", "source_file": "thesis.md", "source_line": 575, "latex": "v_{t+\\Delta}", "context": "te verdict under repeated evaluation on the same input at two different times \\(t\\) and \\(t + \\Delta\\). Let \\(v_t\\) and \\(v_{t+\\Delta}\\) denote the Λ₉ composite", "source_id": "thesis_session" }, { "id": "F0071", "source_file": "thesis.md", "source_line": 581, "latex": "\\lambda_5 = 1.0", "context": "Then: \\[ \\lambda_5 = \\max\\!\\Bigl(0,\\; 1 - 4\\,\\bigl(v_t - v_{t+\\Delta}\\bigr)^2\\Bigr) \\] A zero-drift evaluation scores \\(\\lambda_5 = 1.0\\). A drift of 0.05 in ", "source_id": "thesis_session" }, { "id": "F0072", "source_file": "thesis.md", "source_line": 581, "latex": "\\lambda_5 = 0.99", "context": "ta}\\bigr)^2\\Bigr) \\] A zero-drift evaluation scores \\(\\lambda_5 = 1.0\\). A drift of 0.05 in the composite score yields \\(\\lambda_5 = 0.99\\). A drift of 0.25 yi", "source_id": "thesis_session" }, { "id": "F0073", "source_file": "thesis.md", "source_line": 581, "latex": "\\lambda_5 = 0.75", "context": "scores \\(\\lambda_5 = 1.0\\). A drift of 0.05 in the composite score yields \\(\\lambda_5 = 0.99\\). A drift of 0.25 yields \\(\\lambda_5 = 0.75\\), below the ≥ 0.90 co", "source_id": "thesis_session" }, { "id": "F0074", "source_file": "thesis.md", "source_line": 583, "latex": "\\lambda_6", "context": "-identical replay guarantee: a system that cannot reproduce its own gate verdict is not operating deterministically. **\\(\\lambda_6\\): evidenceProvenance.** Mea", "source_id": "thesis_session" }, { "id": "F0075", "source_file": "thesis.md", "source_line": 585, "latex": "\\lambda_7", "context": "ertions score at most 0.50. The scoring function is the fraction of claim tokens for which provenance is resolvable. **\\(\\lambda_7\\): actorIdentity.** Measures", "source_id": "thesis_session" }, { "id": "F0076", "source_file": "thesis.md", "source_line": 587, "latex": "\\lambda_8", "context": "ting under delegated authority — the score decays as a function of delegation depth to penalize opaque proxy chains. **\\(\\lambda_8\\): axiomConsistency.** Measu", "source_id": "thesis_session" }, { "id": "F0077", "source_file": "thesis.md", "source_line": 589, "latex": "\\lambda_9", "context": "Lean 4 formalization: it enforces, at runtime, the constraints that are statically verified at theorem-proving time. **\\(\\lambda_9\\): coherence.** Measures the", "source_id": "thesis_session" }, { "id": "F0078", "source_file": "thesis.md", "source_line": 589, "latex": "A_1, A_2, \\ldots, A_k", "context": "-step logical coherence of the agent's plan across the action sequence, not just for the current step in isolation. Let \\(A_1, A_2, \\ldots, A_k\\) denote the \\(k", "source_id": "thesis_session" }, { "id": "F0079", "source_file": "thesis.md", "source_line": 589, "latex": "(A_i, A_{i+1})", "context": "e the \\(k\\) preceding actions in the current session. The coherence score is the proportion of consecutive action-pairs \\((A_i, A_{i+1})\\) for which the precond", "source_id": "thesis_session" }, { "id": "F0080", "source_file": "thesis.md", "source_line": 589, "latex": "A_{i+1}", "context": "ion. The coherence score is the proportion of consecutive action-pairs \\((A_i, A_{i+1})\\) for which the precondition of \\(A_{i+1}\\) is satisfied by the postcond", "source_id": "thesis_session" }, { "id": "F0081", "source_file": "thesis.md", "source_line": 589, "latex": "\\lambda_9 = 1.0", "context": "ied by the postcondition of \\(A_i\\), under the operator's precondition/postcondition schema. For the base case \\(k=0\\), \\(\\lambda_9 = 1.0\\). ### The conjunctiv", "source_id": "thesis_session" }, { "id": "F0082", "source_file": "thesis.md", "source_line": 599, "latex": "\\lambda_1 = 0.50", "context": "for the following reason. A single composite score — even a geometric mean — can mask localized failures. An agent with \\(\\lambda_1 = 0.50\\) (severely morally m", "source_id": "thesis_session" }, { "id": "F0083", "source_file": "thesis.md", "source_line": 599, "latex": "\\prod_{i}^{1/9} = 0.50^{1/9} \\approx 0.926", "context": "with \\(\\lambda_1 = 0.50\\) (severely morally misaligned) and all remaining axes at \\(1.0\\) achieves a geometric mean of \\(\\prod_{i}^{1/9} = 0.50^{1/9} \\approx 0.", "source_id": "thesis_session" }, { "id": "F0084", "source_file": "thesis.md", "source_line": 599, "latex": "\\lambda_1", "context": "gle-score gate. The conjunctive AND structure prevents this: every axis is a blocking veto. The two elevated floors for \\(\\lambda_1\\) and \\(\\lambda_2\\) add a se", "source_id": "thesis_session" }, { "id": "F0085", "source_file": "thesis.md", "source_line": 599, "latex": "\\lambda_2", "context": "e conjunctive AND structure prevents this: every axis is a blocking veto. The two elevated floors for \\(\\lambda_1\\) and \\(\\lambda_2\\) add a second layer of asym", "source_id": "thesis_session" }, { "id": "F0086", "source_file": "thesis.md", "source_line": 605, "latex": "m \\in \\{0,1\\}^9", "context": "to the receipt structure. Rather than publishing the raw nine (or ten) axis scores, the receipt carries a bitfield mask \\(m \\in \\{0,1\\}^9\\) in which \\(m_i = 1\\)", "source_id": "thesis_session" }, { "id": "F0087", "source_file": "thesis.md", "source_line": 605, "latex": "m_i = 1", "context": "her than publishing the raw nine (or ten) axis scores, the receipt carries a bitfield mask \\(m \\in \\{0,1\\}^9\\) in which \\(m_i = 1\\) if and only if \\(\\lambda_i\\)", "source_id": "thesis_session" }, { "id": "F0088", "source_file": "thesis.md", "source_line": 605, "latex": "\\lambda_i", "context": "nine (or ten) axis scores, the receipt carries a bitfield mask \\(m \\in \\{0,1\\}^9\\) in which \\(m_i = 1\\) if and only if \\(\\lambda_i\\) was evaluated and passed it", "source_id": "thesis_session" }, { "id": "F0089", "source_file": "thesis.md", "source_line": 611, "latex": "\\theta_i = 0.95", "context": "ity profile of the agent. Formally, the mask is computed as: \\[ m_i = \\mathbf{1}[\\lambda_i(c) \\geq \\theta_i] \\] where \\(\\theta_i = 0.95\\) for \\(i \\in \\{1,2\\}\\", "source_id": "thesis_session" }, { "id": "F0090", "source_file": "thesis.md", "source_line": 611, "latex": "i \\in \\{1,2\\}", "context": ". Formally, the mask is computed as: \\[ m_i = \\mathbf{1}[\\lambda_i(c) \\geq \\theta_i] \\] where \\(\\theta_i = 0.95\\) for \\(i \\in \\{1,2\\}\\) and \\(\\theta_i = 0.90\\", "source_id": "thesis_session" }, { "id": "F0091", "source_file": "thesis.md", "source_line": 611, "latex": "\\theta_i = 0.90", "context": "s computed as: \\[ m_i = \\mathbf{1}[\\lambda_i(c) \\geq \\theta_i] \\] where \\(\\theta_i = 0.95\\) for \\(i \\in \\{1,2\\}\\) and \\(\\theta_i = 0.90\\) otherwise. The gate ", "source_id": "thesis_session" }, { "id": "F0092", "source_file": "thesis.md", "source_line": 611, "latex": "\\sum_i m_i = 9", "context": "eq \\theta_i] \\] where \\(\\theta_i = 0.95\\) for \\(i \\in \\{1,2\\}\\) and \\(\\theta_i = 0.90\\) otherwise. The gate passes iff \\(\\sum_i m_i = 9\\) (or 10 under Λ₁₀). Th", "source_id": "thesis_session" }, { "id": "F0093", "source_file": "thesis.md", "source_line": 627, "latex": "\\textit{parent\\_hash}", "context": "\\textit{timestamp},\\; \\vec{\\lambda},\\; \\rho\\_\\textit{witness\\_set},\\; \\textit{signature}\\bigr) \\] The fields are: - **\\(\\textit{parent\\_hash}\\)**: The SHA-256", "source_id": "thesis_session" }, { "id": "F0094", "source_file": "thesis.md", "source_line": 627, "latex": "r_{i-1}", "context": "s\\_set},\\; \\textit{signature}\\bigr) \\] The fields are: - **\\(\\textit{parent\\_hash}\\)**: The SHA-256 digest of receipt \\(r_{i-1}\\). For the genesis receipt, th", "source_id": "thesis_session" }, { "id": "F0095", "source_file": "thesis.md", "source_line": 628, "latex": "\\textit{content\\_digest}", "context": "this is the SHA-256 of a protocol-specified null seed. This field creates the backward-pointing link of the chain. - **\\(\\textit{content\\_digest}\\)**: The SHA-2", "source_id": "thesis_session" }, { "id": "F0096", "source_file": "thesis.md", "source_line": 629, "latex": "\\textit{actor}", "context": "fore any side-effectful execution. This binds the gate verdict irrevocably to the specific input that triggered it. - **\\(\\textit{actor}\\)**: The identifier of ", "source_id": "thesis_session" }, { "id": "F0097", "source_file": "thesis.md", "source_line": 629, "latex": "\\lambda_7", "context": "t. - **\\(\\textit{actor}\\)**: The identifier of the acting agent as registered in the principal registry. Corresponds to \\(\\lambda_7\\) (actorIdentity). - **\\(\\te", "source_id": "thesis_session" }, { "id": "F0098", "source_file": "thesis.md", "source_line": 630, "latex": "\\textit{timestamp}", "context": "entifier of the acting agent as registered in the principal registry. Corresponds to \\(\\lambda_7\\) (actorIdentity). - **\\(\\textit{timestamp}\\)**: A monotonic ti", "source_id": "thesis_session" }, { "id": "F0099", "source_file": "thesis.md", "source_line": 631, "latex": "\\vec{\\lambda}", "context": ": A monotonic timestamp in milliseconds since the Unix epoch, drawn from a pinned, non-forgeable source (see §4.6). - **\\(\\vec{\\lambda}\\)**: The full nine-dimen", "source_id": "thesis_session" }, { "id": "F0100", "source_file": "thesis.md", "source_line": 632, "latex": "\\rho\\_\\textit{witness\\_set}", "context": "vec{\\lambda}\\)**: The full nine-dimensional Λ vector, or the `lambda9_mask` bitfield under the Λ₁₀ privacy variant. - **\\(\\rho\\_\\textit{witness\\_set}\\)**: The s", "source_id": "thesis_session" } ], "definitions": [], "canonical_constants": [ { "id": "K01", "name": "receipt_build_p50_us", "value": "11.5", "unit": "µs", "ops_per_sec": "62764", "source": "THESIS_BRIEF.md", "doi": "10.5281/zenodo.20119582", "maturity": "measured" }, { "id": "K02", "name": "receipt_build_p99_us", "value": "50.7", "unit": "µs", "source": "THESIS_BRIEF.md", "doi": "10.5281/zenodo.20119582", "maturity": "measured" }, { "id": "K03", "name": "receipt_verify_p50_us", "value": "10.4", "unit": "µs", "ops_per_sec": "74149", "source": "THESIS_BRIEF.md", "doi": "10.5281/zenodo.20119582", "maturity": "measured" }, { "id": "K04", "name": "lambda9_base_p50_us", "value": "3.12", "unit": "µs", "source": "THESIS_BRIEF.md", "doi": "10.5281/zenodo.20119582", "maturity": "measured" }, { "id": "K05", "name": "lambda9_composed_p50_us", "value": "3.29", "unit": "µs", "source": "THESIS_BRIEF.md", "doi": "10.5281/zenodo.20119582", "maturity": "measured" }, { "id": "K06", "name": "rho_closure_rate", "value": "100%", "denominator": "8000/8000 paired calls", "source": "THESIS_BRIEF.md", "doi": "10.5281/zenodo.20119582", "maturity": "measured" }, { "id": "K07", "name": "platform_v11_http_calls", "value": "24800", "source": "THESIS_BRIEF.md", "doi": "10.5281/zenodo.20119582", "maturity": "measured" }, { "id": "K08", "name": "platform_v11_lambda10_overhead_p50_ms", "value": "0.49-0.59", "unit": "ms/route", "source": "THESIS_BRIEF.md", "doi": "10.5281/zenodo.20119582", "maturity": "measured" }, { "id": "K09", "name": "platform_v11_p99_ms", "value": "1.27", "unit": "ms", "source": "THESIS_BRIEF.md", "doi": "10.5281/zenodo.20119582", "maturity": "measured" }, { "id": "K10", "name": "replay_root", "value": "1ed4d253e876f428c6e182f8ed8a569585442556b339529bbf8ec2522581698b", "source": "THESIS_BRIEF.md", "doi": "10.5281/zenodo.20119582", "maturity": "measured" }, { "id": "K11", "name": "test_count_production", "value": "218/218", "source": "THESIS_BRIEF.md", "doi": "10.5281/zenodo.20119582", "maturity": "measured" }, { "id": "K12", "name": "test_count_demo", "value": "37/37", "source": "replit_payload_build", "commit": "demo", "maturity": "measured" }, { "id": "K13", "name": "bekenstein_indicator_fire_rate", "value": "49.5%", "source": "thesis.md §4.5", "doi": "10.5281/zenodo.20119582", "maturity": "measured" } ], "extracted_constants": [ { "id": "C0001", "name": "receipt_build_p50_us", "value": "11.5", "raw": "receipt build p50 = 11.5 µs", "context": "0).** A production Rust runtime with 218/218 tests passing, receipt build p50 = 11.5 µs (62,764 ops/sec), receipt verify p50 = 10.4 µs (74,149 ops/sec", "source_file": "thesis.md", "source_line": 83, "source_id": "thesis_session" }, { "id": "C0003", "name": "receipt_verify_p50_us", "value": "10.4", "raw": "receipt verify p50 = 10.4 µs", "context": "ests passing, receipt build p50 = 11.5 µs (62,764 ops/sec), receipt verify p50 = 10.4 µs (74,149 ops/sec), and 100% ρ-closure on 8,000/8,000 paired ca", "source_file": "thesis.md", "source_line": 83, "source_id": "thesis_session" }, { "id": "C0008", "name": "receipt_build_p99_us", "value": "50.7", "raw": "p99 = 50.7 µs", "context": "→ Receipt` — constructs a receipt envelope; p50 = 11.5 µs, p99 = 50.7 µs, throughput 62,764 ops/sec. - `verify_receipt(receipt) → bool` — verifies byt", "source_file": "thesis.md", "source_line": 269, "source_id": "thesis_session" }, { "id": "C0009", "name": "ops_per_sec", "value": "62764", "raw": "62,764 ops/sec", "context": "me with 218/218 tests passing, receipt build p50 = 11.5 µs (62,764 ops/sec), receipt verify p50 = 10.4 µs (74,149 ops/sec), and 100% ρ-closure on 8,00", "source_file": "thesis.md", "source_line": 83, "source_id": "thesis_session" }, { "id": "C0010", "name": "ops_per_sec", "value": "74149", "raw": "74,149 ops/sec", "context": "0 = 11.5 µs (62,764 ops/sec), receipt verify p50 = 10.4 µs (74,149 ops/sec), and 100% ρ-closure on 8,000/8,000 paired calls [9]. The runtime enforces ", "source_file": "thesis.md", "source_line": 83, "source_id": "thesis_session" }, { "id": "C0023", "name": "ops_per_sec", "value": "200000", "raw": "200,000 ops/sec", "context": "arget for the Merkle-DAG upgrade is **5 µs build p50** at **200,000 ops/sec**. This is a 2.3× improvement in latency and a 3.2× improvement in through", "source_file": "thesis.md", "source_line": 2100, "source_id": "thesis_session" }, { "id": "C0027", "name": "lambda9_base_p50_us", "value": "3.12", "raw": "Λ₉ base p50 = 3.12 µs", "context": "9]. The runtime enforces a 9-axis conjunctive quality gate (Λ₉ base p50 = 3.12 µs) and a Λ₁₀ platform layer with 0.49–0.59 ms/route overhead validated", "source_file": "thesis.md", "source_line": 83, "source_id": "thesis_session" }, { "id": "C0029", "name": "tests_passed", "value": "218", "raw": "218/218 passing", "context": "ify-p50 with 100% ρ-closure on 8,000/8,000 paired calls and 218/218 passing tests. We propose `lambda9_mask` as a privacy-preserving extension to SCIT", "source_file": "thesis.md", "source_line": 27, "source_id": "thesis_session" }, { "id": "C0031", "name": "tests_passed", "value": "37", "raw": "37/37 tests", "context": "nt invocations of the same input. The demo payload confirms 37/37 tests passing in the Replit environment (33 `ouroboros` core + 4 `a11oy` covenant), ", "source_file": "thesis.md", "source_line": 249, "source_id": "thesis_session" }, { "id": "C0044", "name": "http_calls", "value": "24800", "raw": "24,800 HTTP calls", "context": "orm layer with 0.49–0.59 ms/route overhead validated across 24,800 HTTP calls. 2. **Lean 4 formal axioms and proofs (`lutar-lean`).** A Mathlib-groun", "source_file": "thesis.md", "source_line": 83, "source_id": "thesis_session" }, { "id": "C0053", "name": "lambda_p50_us", "value": "11.5", "raw": "p50 = 11.5 µs (62,764 ops/sec), receipt verify p50 = 10.4 µs (74,149 ops/sec), and 100% ρ-closure on 8,000/8,000 paired calls [9]. The runtime enforces a 9-axis conjunctive quality gate (Λ", "context": "tion Rust runtime with 218/218 tests passing, receipt build p50 = 11.5 µs (62,764 ops/sec), receipt verify p50 = 10.4 µs (74,149 ops/sec), and 100% ρ-", "source_file": "thesis.md", "source_line": 83, "source_id": "thesis_session" }, { "id": "C0054", "name": "lambda_p50_us", "value": "3.12", "raw": "p50 = 3.12 µs) and a Λ", "context": "runtime enforces a 9-axis conjunctive quality gate (Λ₉ base p50 = 3.12 µs) and a Λ₁₀ platform layer with 0.49–0.59 ms/route overhead validated across ", "source_file": "thesis.md", "source_line": 83, "source_id": "thesis_session" }, { "id": "C0055", "name": "receipt_build_p99_us", "value": "50.7", "raw": "p99 = 50.7 µs", "context": "bers - **218/218 tests** - Receipt build p50 = **11.5 µs**, p99 = 50.7 µs (62,764 ops/sec) - Receipt verify p50 = **10.4 µs** (74,149 ops/sec) - Λ₉ ba", "source_file": "THESIS_BRIEF.md", "source_line": 57, "source_id": "thesis_brief" }, { "id": "C0056", "name": "ops_per_sec", "value": "62764", "raw": "62,764 ops/sec", "context": "8 tests** - Receipt build p50 = **11.5 µs**, p99 = 50.7 µs (62,764 ops/sec) - Receipt verify p50 = **10.4 µs** (74,149 ops/sec) - Λ₉ base p50 = 3.12 µ", "source_file": "THESIS_BRIEF.md", "source_line": 57, "source_id": "thesis_brief" }, { "id": "C0057", "name": "ops_per_sec", "value": "74149", "raw": "74,149 ops/sec", "context": "0.7 µs (62,764 ops/sec) - Receipt verify p50 = **10.4 µs** (74,149 ops/sec) - Λ₉ base p50 = 3.12 µs / composed p50 = 3.29 µs - 100% ρ-closure on **8,0", "source_file": "THESIS_BRIEF.md", "source_line": 58, "source_id": "thesis_brief" }, { "id": "C0058", "name": "lambda9_base_p50_us", "value": "3.12", "raw": "Λ₉ base p50 = 3.12 µs", "context": "/sec) - Receipt verify p50 = **10.4 µs** (74,149 ops/sec) - Λ₉ base p50 = 3.12 µs / composed p50 = 3.29 µs - 100% ρ-closure on **8,000/8,000 paired ca", "source_file": "THESIS_BRIEF.md", "source_line": 59, "source_id": "thesis_brief" }, { "id": "C0059", "name": "tests_passed", "value": "218", "raw": "218/218 tests", "context": "boros v6.3.0 (released 2026-05-13) — production numbers - **218/218 tests** - Receipt build p50 = **11.5 µs**, p99 = 50.7 µs (62,764 ops/sec) - Receip", "source_file": "THESIS_BRIEF.md", "source_line": 56, "source_id": "thesis_brief" }, { "id": "C0060", "name": "tests_passed", "value": "37", "raw": "37/37 tests", "context": "plit demo payload (verified live 2026-05-15 at 11:22 EDT) - 37/37 tests passing (33 ouroboros core + 4 a11oy covenant) - `bash scripts/doctrine-check.", "source_file": "THESIS_BRIEF.md", "source_line": 68, "source_id": "thesis_brief" }, { "id": "C0061", "name": "http_calls", "value": "24800", "raw": "24,800 HTTP calls", "context": "ρ-closure on **8,000/8,000 paired calls** - Platform v11: **24,800 HTTP calls validated**, Λ₁₀ overhead 0.49–0.59 ms/route, p99 ≤ 1.27 ms - Apache-2.0", "source_file": "THESIS_BRIEF.md", "source_line": 61, "source_id": "thesis_brief" }, { "id": "C0062", "name": "receipt_build_p50_us", "value": "11.5", "raw": "Receipt build p50 = 11.5 µs", "context": "e not. | 12–18 months — they have a runtime, not a kernel | Receipt build p50 = 11.5 µs · v11 DOI [`zenodo.20119582`](https://doi.org/10.5281/zenodo.2", "source_file": "master_evolution_memo.md", "source_line": 81, "source_id": "master_memo" }, { "id": "C0064", "name": "receipt_build_p99_us", "value": "50.7", "raw": "p99 = 50.7 µs", "context": "218 / 218 passing** | | Receipt build | p50 = **11.5 µs** · p99 = 50.7 µs · 62,764 ops/sec | | Receipt verify | p50 = **10.4 µs** · 74,149 ops/sec | |", "source_file": "master_evolution_memo.md", "source_line": 36, "source_id": "master_memo" }, { "id": "C0065", "name": "ops_per_sec", "value": "62764", "raw": "62,764 ops/sec", "context": "g** | | Receipt build | p50 = **11.5 µs** · p99 = 50.7 µs · 62,764 ops/sec | | Receipt verify | p50 = **10.4 µs** · 74,149 ops/sec | | Λ₉ base | p50 =", "source_file": "master_evolution_memo.md", "source_line": 36, "source_id": "master_memo" }, { "id": "C0066", "name": "ops_per_sec", "value": "74149", "raw": "74,149 ops/sec", "context": "s · 62,764 ops/sec | | Receipt verify | p50 = **10.4 µs** · 74,149 ops/sec | | Λ₉ base | p50 = 3.12 µs | | Λ₉ composed | p50 = **3.29 µs** | | ρ-closu", "source_file": "master_evolution_memo.md", "source_line": 37, "source_id": "master_memo" }, { "id": "C0067", "name": "tests_passed", "value": "37", "raw": "37/37 tests", "context": "ic-facing Replit demo (`replit_a11oy_demo`) currently shows 37/37 tests passing. The upstream runtime is **218/218**. Every Series A diligence visitor", "source_file": "master_evolution_memo.md", "source_line": 141, "source_id": "master_memo" }, { "id": "C0068", "name": "tests_passed", "value": "218", "raw": "218/218 tests", "context": "astructure. **Success metric:** the Replit demo URL shows \"218/218 tests · v6.3.0 · OpenSSF 8.2\" with the same badge as the canonical repo, refreshed", "source_file": "master_evolution_memo.md", "source_line": 152, "source_id": "master_memo" }, { "id": "C0070", "name": "receipt_build_p50_us", "value": "11.5", "raw": "Receipt build p50=11.5 µs", "context": "rg/doc/draft-morrow-sogomonian-exec-outcome-attest/00/)). | Receipt build p50=11.5 µs, 218/218 tests, v11 DOI: [10.5281/zenodo.20119582](https://doi.o", "source_file": "pm_memo.md", "source_line": 54, "source_id": "pm_memo" }, { "id": "C0072", "name": "ops_per_sec", "value": "62764", "raw": "62,764 ops/sec", "context": "Claim:** Receipt build p50 = 11.5 µs, verify p50 = 10.4 µs, 62,764 ops/sec, 218/218 runtime tests, ρ-closure 8,000/8,000, byte-identical replay root `", "source_file": "pm_memo.md", "source_line": 81, "source_id": "pm_memo" }, { "id": "C0073", "name": "tests_passed", "value": "218", "raw": "218/218 tests", "context": "ian-exec-outcome-attest/00/)). | Receipt build p50=11.5 µs, 218/218 tests, v11 DOI: [10.5281/zenodo.20119582](https://doi.org/10.5281/zenodo.20119582)", "source_file": "pm_memo.md", "source_line": 54, "source_id": "pm_memo" }, { "id": "C0076", "name": "tests_passed", "value": "37", "raw": "37/37 tests", "context": "arity + Public Scorecard **Thesis:** The Replit demo shows 37/37 tests (ouroboros 33 + a11oy 4). The live runtime is 218/218. This delta undersells t", "source_file": "pm_memo.md", "source_line": 135, "source_id": "pm_memo" }, { "id": "C0077", "name": "http_calls", "value": "24800", "raw": "24,800 HTTP calls", "context": "ships a Λ₉-gated resource. | Ouroboros v6.3.0 platform v11: 24,800 HTTP calls, Λ₁₀ overhead 0.49–0.59 ms/route | | **Mastra** ([mastra.ai](https://mas", "source_file": "pm_memo.md", "source_line": 57, "source_id": "pm_memo" }, { "id": "C0078", "name": "receipt_build_p50_us", "value": "11.5", "raw": "Receipt build p50 = 11.5 µs", "context": "-witness guarantee baked into `ouroboros`'s runtime kernel. Receipt build p50 = 11.5 µs; verify p50 = 10.4 µs; 100% ρ-closure on 8,000/8,000 paired ca", "source_file": "cto_memo.md", "source_line": 78, "source_id": "cto_memo" }, { "id": "C0079", "name": "ops_per_sec", "value": "62764", "raw": "62,764 ops/sec", "context": "in · p50 = 11.5 µs build / 10.4 µs verify · 218/218 tests · 62,764 ops/sec | | `a11oy` | Covenant policy + approval queue | **HEART** (consent + pulse", "source_file": "cto_memo.md", "source_line": 18, "source_id": "cto_memo" }, { "id": "C0080", "name": "tests_passed", "value": "218", "raw": "218/218 tests", "context": "ss · receipt chain · p50 = 11.5 µs build / 10.4 µs verify · 218/218 tests · 62,764 ops/sec | | `a11oy` | Covenant policy + approval queue | **HEART** ", "source_file": "cto_memo.md", "source_line": 18, "source_id": "cto_memo" }, { "id": "C0081", "name": "ops_per_sec", "value": "62764", "raw": "62,764 ops/sec", "context": "218 / 218 passing | 100% | | Receipt build p50 | 11.5 µs | 62,764 ops/sec | | Receipt build p99 | 50.7 µs | — | | Receipt verify p50 | 10.4 µs | 74,14", "source_file": "runtime_memo.md", "source_line": 20, "source_id": "runtime_memo" }, { "id": "C0082", "name": "ops_per_sec", "value": "74149", "raw": "74,149 ops/sec", "context": "build p99 | 50.7 µs | — | | Receipt verify p50 | 10.4 µs | 74,149 ops/sec | | Λ₉ base p50 | 3.12 µs | — | | Λ₉ composed p50 | 3.29 µs | — | | ρ-closur", "source_file": "runtime_memo.md", "source_line": 22, "source_id": "runtime_memo" }, { "id": "C0083", "name": "tests_passed", "value": "218", "raw": "218/218 tests", "context": "ary (5 lines) The ouroboros v6.3.0 runtime is confirmed at 218/218 tests, receipt build p50 11.5 µs, Λ₉ composed p50 3.29 µs, and 100% ρ-closure — al", "source_file": "runtime_memo.md", "source_line": 404, "source_id": "runtime_memo" }, { "id": "C0084", "name": "http_calls", "value": "11", "raw": "11 HTTP calls", "context": "9 µs | — | | ρ-closure | 8,000 / 8,000 | 100% | | Platform v11 HTTP calls | 24,800 | — | | Λ overhead p50 per route | 0.49–0.59 ms | — | | Λ overhead ", "source_file": "runtime_memo.md", "source_line": 26, "source_id": "runtime_memo" }, { "id": "C0085", "name": "ops_per_sec", "value": "74149", "raw": "74,149 ops/sec", "context": "pt verify p50 | **10.4 µs** | | Receipt verify throughput | 74,149 ops/sec | | Λ₉ base p50 | 3.12 µs | | Λ₉ composed p50 | 3.29 µs | | ρ-closure | 100", "source_file": "data_memo.md", "source_line": 419, "source_id": "data_memo" } ], "dois": [ { "doi": "10.5281/zenodo.19944926", "url": "https://doi.org/10.5281/zenodo.19944926", "source_file": "thesis.md", "source_line": 18, "source_id": "thesis_session" }, { "doi": "10.5281/zenodo.20119582", "url": "https://doi.org/10.5281/zenodo.20119582", "source_file": "thesis.md", "source_line": 19, "source_id": "thesis_session" }, { "doi": "10.5281/zenodo.19867281", "url": "https://doi.org/10.5281/zenodo.19867281", "source_file": "thesis.md", "source_line": 1740, "source_id": "thesis_session" }, { "doi": "10.5281/zenodo.19934129", "url": "https://doi.org/10.5281/zenodo.19934129", "source_file": "thesis.md", "source_line": 1741, "source_id": "thesis_session" }, { "doi": "10.5281/zenodo.19983066", "url": "https://doi.org/10.5281/zenodo.19983066", "source_file": "thesis.md", "source_line": 1743, "source_id": "thesis_session" }, { "doi": "10.5281/zenodo.20020841", "url": "https://doi.org/10.5281/zenodo.20020841", "source_file": "thesis.md", "source_line": 1744, "source_id": "thesis_session" }, { "doi": "10.5281/zenodo.20020845", "url": "https://doi.org/10.5281/zenodo.20020845", "source_file": "thesis.md", "source_line": 1745, "source_id": "thesis_session" }, { "doi": "10.5281/zenodo.20020846", "url": "https://doi.org/10.5281/zenodo.20020846", "source_file": "thesis.md", "source_line": 1746, "source_id": "thesis_session" }, { "doi": "10.5281/zenodo.20020848", "url": "https://doi.org/10.5281/zenodo.20020848", "source_file": "thesis.md", "source_line": 1747, "source_id": "thesis_session" }, { "doi": "10.5281/zenodo.20020849", "url": "https://doi.org/10.5281/zenodo.20020849", "source_file": "thesis.md", "source_line": 1748, "source_id": "thesis_session" }, { "doi": "10.5281/zenodo.20053148", "url": "https://doi.org/10.5281/zenodo.20053148", "source_file": "thesis.md", "source_line": 1749, "source_id": "thesis_session" }, { "doi": "10.5281/zenodo.20053163", "url": "https://doi.org/10.5281/zenodo.20053163", "source_file": "thesis.md", "source_line": 1750, "source_id": "thesis_session" }, { "doi": "10.5281/zenodo.20162352", "url": "https://doi.org/10.5281/zenodo.20162352", "source_file": "thesis.md", "source_line": 1752, "source_id": "thesis_session" } ], "doctrine_clauses": [ { "id": "DC1", "clause": "Byline must be 'Lutar, Stephen P.' — never 'Jr.' or 'Stephen Paul'", "source": "THESIS_BRIEF.md" }, { "id": "DC2", "clause": "8 forbidden patterns: see doctrine.json (FP-1..FP-8)", "source": "PM_LEAD_CHARTER_V2.md" }, { "id": "DC3", "clause": "License allow-list: Apache-2.0, MIT, BSD-3-Clause, CC-BY-4.0", "source": "THESIS_BRIEF.md" }, { "id": "DC4", "clause": "ORCID: 0009-0001-0110-4173", "source": "THESIS_BRIEF.md" }, { "id": "DC5", "clause": "9-axis Λ >= 0.90 conjunctive AND; moralGrounding + measurabilityHonesty >= 0.95", "source": "THESIS_BRIEF.md" }, { "id": "DC6", "clause": "Public-only ingestion: no private data, no proprietary code", "source": "THESIS_BRIEF.md" }, { "id": "DC7", "clause": "5x byte-identical replay (deterministic)", "source": "THESIS_BRIEF.md" }, { "id": "DC8", "clause": "No hallucinations; every empirical claim cites a verifiable artifact", "source": "THESIS_BRIEF.md" } ], "source_files": [ "thesis.md", "THESIS_BRIEF.md", "master_evolution_memo.md", "pm_memo.md", "cto_memo.md", "runtime_memo.md", "governance_memo.md", "data_memo.md", "anatomy_memo.md" ], "zenodo_corpus": [ "10.5281/zenodo.19867281", "10.5281/zenodo.19934129", "10.5281/zenodo.19944926", "10.5281/zenodo.19983066", "10.5281/zenodo.20020841", "10.5281/zenodo.20020846", "10.5281/zenodo.20020845", "10.5281/zenodo.20020848", "10.5281/zenodo.20020849", "10.5281/zenodo.20053148", "10.5281/zenodo.20053163", "10.5281/zenodo.20119582", "10.5281/zenodo.20162352" ], "vertical_policies": [ { "policy_id": "academic", "policy_name": "Academic / Research Integrity", "version": "0.3.0", "regulations": [ "NIH NOT-OD-23-149", "NSF PAPPG Chapter II.E", "ORI Standards", "COPE Guidelines" ], "required_attestors": [ "principal_investigator", "research_integrity_officer" ], "lambda_floors": { "measurabilityHonesty": 1.0, "constructiveTransparency": 1.0, "informationIntegrity": 0.99, "temporalConsistency": 0.99 }, "forbidden_inputs": [ "undisclosed_ai_authored_content", "missing_doi_citation" ], "required_output_formats": [ "zenodo_deposit", "json_receipt", "orcid_linked_artifact" ], "retention_days": "3650", "primitives_applicable": [ "A5", "A8", "A12", "T5", "T10", "TH2" ], "acv_range_usd": { "low": 10000.0, "mid": 50000.0, "high": 200000.0 } }, { "policy_id": "capital_markets", "policy_name": "Capital Markets / Quant / Hedge Funds", "version": "0.3.0", "regulations": [ "SEC Rule 17a-4", "MiFID II RTS 6", "FINRA Rule 4370", "Reg SCI 17 CFR 242" ], "required_attestors": [ "chief_compliance_officer", "quant_review_committee", "external_auditor" ], "lambda_floors": { "moralGrounding": 0.97, "measurabilityHonesty": 1.0, "temporalConsistency": 1.0, "economicGrounding": 1.0, "constructiveTransparency": 0.99, "informationIntegrity": 0.99 }, "forbidden_inputs": [ "non_sec_registered_model", "missing_algo_documentation" ], "required_output_formats": [ "sec_17a4_compliant_log", "json_receipt", "worm_storage_manifest" ], "retention_days": "2190", "primitives_applicable": [ "A5", "A6", "A10", "A12", "A14", "T5", "T9", "TH2" ], "acv_range_usd": { "low": 500000.0, "mid": 2000000.0, "high": 10000000.0 } }, { "policy_id": "critical_infrastructure", "policy_name": "Critical Infrastructure / Utilities", "version": "0.3.0", "regulations": [ "NERC CIP-013-2", "IEC 62443-3-3", "TSA Pipeline Security Directive SD-02C", "NIST CSF 2.0" ], "required_attestors": [ "system_security_officer", "control_systems_engineer", "incident_commander" ], "lambda_floors": { "moralGrounding": 0.99, "actionReversibility": 0.99, "scopeContainment": 1.0, "informationIntegrity": 0.99, "adversarialRobustness": 0.99, "temporalConsistency": 0.99 }, "forbidden_inputs": [ "unauthenticated_control_commands", "non_air_gapped_ot_data" ], "required_output_formats": [ "ics_audit_log", "json_receipt", "nerc_compliance_report" ], "retention_days": "1825", "primitives_applicable": [ "A4", "A5", "A6", "A10", "A13", "T5", "T9", "T10", "TH1" ], "acv_range_usd": { "low": 1000000.0, "mid": 5000000.0, "high": 20000000.0 } }, { "policy_id": "defense", "policy_name": "Defense / DoD", "version": "0.3.0", "regulations": [ "NIST SP 800-53 Rev 5", "CMMC 2.0", "FedRAMP High (target regime reference, not held)", "DISA STIGs" ], "required_attestors": [ "authorizing_official", "system_owner", "security_control_assessor" ], "lambda_floors": { "moralGrounding": 0.99, "measurabilityHonesty": 0.99, "actionReversibility": 0.95, "scopeContainment": 0.99, "informationIntegrity": 0.99, "consentBoundary": 0.95 }, "forbidden_inputs": [ "unclassified_cui_without_marking", "foreign_national_data" ], "required_output_formats": [ "json_audit_log", "nist_oscal" ], "retention_days": "7300", "primitives_applicable": [ "A1", "A4", "A5", "A6", "A8", "A9", "A12", "A13", "T5", "T9", "T10", "TH1" ], "acv_range_usd": { "low": 500000.0, "mid": 2000000.0, "high": 5000000.0 } }, { "policy_id": "financial_services", "policy_name": "Financial Services / Banking", "version": "0.3.0", "regulations": [ "SR 11-7", "OCC 2011-12", "MiFID II RTS 6", "Basel III" ], "required_attestors": [ "model_risk_officer", "chief_risk_officer", "internal_audit" ], "lambda_floors": { "moralGrounding": 0.97, "measurabilityHonesty": 0.99, "temporalConsistency": 0.99, "informationIntegrity": 0.99, "economicGrounding": 1.0 }, "forbidden_inputs": [ "insider_information", "unregistered_model_version" ], "required_output_formats": [ "csv_model_log", "json_receipt", "pdf_board_report" ], "retention_days": "2190", "primitives_applicable": [ "A1", "A5", "A6", "A8", "A9", "A14", "T5", "T9", "T10", "TH1", "TH2" ], "acv_range_usd": { "low": 200000.0, "mid": 800000.0, "high": 2000000.0 } }, { "policy_id": "healthcare", "policy_name": "Healthcare / Clinical AI", "version": "0.3.0", "regulations": [ "HIPAA 45 CFR Part 164", "FDA 21 CFR Part 11", "FDA SaMD Guidance Q3 2023" ], "required_attestors": [ "licensed_clinician", "clinical_informatics_officer", "hipaa_privacy_officer" ], "lambda_floors": { "moralGrounding": 0.99, "measurabilityHonesty": 0.99, "consentBoundary": 0.99, "informationIntegrity": 0.99, "causalSeparability": 0.99 }, "forbidden_inputs": [ "plaintext_phi", "deidentification_not_verified" ], "required_output_formats": [ "hl7_fhir_audit", "json_receipt", "pdf_clinical_audit" ], "retention_days": "2190", "primitives_applicable": [ "A1", "A4", "A5", "A8", "A9", "A11", "A12", "T5", "T7", "T10", "TH1" ], "acv_range_usd": { "low": 150000.0, "mid": 600000.0, "high": 2000000.0 } }, { "policy_id": "insurance", "policy_name": "Insurance", "version": "0.3.0", "regulations": [ "NAIC Model Law 881", "NY DFS Circular Letter 7 (2022)", "NAIC AI Principles (2020)" ], "required_attestors": [ "chief_actuary", "ai_ethics_board", "compliance_officer" ], "lambda_floors": { "moralGrounding": 0.97, "measurabilityHonesty": 0.99, "informationIntegrity": 0.99, "constructiveTransparency": 0.99, "economicGrounding": 0.97 }, "forbidden_inputs": [ "prohibited_rating_factors", "non_actuarially_justified_proxies" ], "required_output_formats": [ "csv_underwriting_log", "json_receipt", "pdf_state_filing" ], "retention_days": "1825", "primitives_applicable": [ "A1", "A5", "A8", "A9", "A12", "A14", "T6", "T9", "T10" ], "acv_range_usd": { "low": 200000.0, "mid": 750000.0, "high": 2000000.0 } }, { "policy_id": "legal", "policy_name": "Legal / e-Discovery", "version": "0.3.0", "regulations": [ "FRCP 26", "FRCP 34", "FRE 902(13)", "FRE 902(14)", "ABA Model Rule 1.1" ], "required_attestors": [ "supervising_attorney", "records_custodian" ], "lambda_floors": { "moralGrounding": 0.97, "measurabilityHonesty": 0.99, "informationIntegrity": 0.99, "constructiveTransparency": 0.99, "actionReversibility": 0.95 }, "forbidden_inputs": [ "privileged_attorney_client_without_waiver" ], "required_output_formats": [ "json_chain_of_custody", "pdf_court_exhibit" ], "retention_days": "2555", "primitives_applicable": [ "A5", "A6", "A8", "A12", "T5", "T8", "T10", "TH2" ], "acv_range_usd": { "low": 75000.0, "mid": 300000.0, "high": 1000000.0 } }, { "policy_id": "pharma", "policy_name": "Pharma / Life Sciences R&D", "version": "0.3.0", "regulations": [ "FDA 21 CFR Part 11", "EMA Annex 11", "ICH E6(R3) GCP", "GxP" ], "required_attestors": [ "qualified_person", "gxp_compliance_officer", "computational_scientist" ], "lambda_floors": { "moralGrounding": 0.97, "measurabilityHonesty": 1.0, "informationIntegrity": 1.0, "temporalConsistency": 0.99, "constructiveTransparency": 1.0 }, "forbidden_inputs": [ "non_gxp_validated_software_output", "unversioned_model" ], "required_output_formats": [ "ectd_submission_package", "json_audit_trail", "csv_gxp_log" ], "retention_days": "3650", "primitives_applicable": [ "A5", "A6", "A8", "A10", "A12", "T5", "TH2" ], "acv_range_usd": { "low": 500000.0, "mid": 2000000.0, "high": 10000000.0 } }, { "policy_id": "public_sector", "policy_name": "Public Sector / Civic AI", "version": "0.3.0", "regulations": [ "EU AI Act Annex III", "NYC Local Law 144 (2023)", "NIST AI RMF 1.0", "OMB M-24-10" ], "required_attestors": [ "agency_ai_officer", "civil_rights_officer", "inspector_general" ], "lambda_floors": { "moralGrounding": 0.99, "measurabilityHonesty": 0.99, "stakeholderAlignment": 0.99, "constructiveTransparency": 1.0, "adversarialRobustness": 0.95 }, "forbidden_inputs": [ "biometric_data_without_explicit_consent", "prohibited_social_scoring" ], "required_output_formats": [ "json_public_audit_log", "csv_bias_audit", "pdf_annual_report" ], "retention_days": "3650", "primitives_applicable": [ "A1", "A5", "A8", "A12", "A13", "T6", "T10", "TH1", "TH3" ], "acv_range_usd": { "low": 300000.0, "mid": 1200000.0, "high": 5000000.0 } } ], "proof_summary": { "locked_proven": 8, "locked_ids": [ "F1", "F4", "F7", "F11", "F12", "F18", "F19", "F22" ], "locked_count_theorem": "locked_count_eight", "conjecture": [ "F23" ], "note": "Honesty ledger mirrored from canonical knowledge.json: Conjecture 1 (Λ-uniqueness / F23) is OPEN — conditional theorem only; unconditional uniqueness is machine-FALSE under A1-A5." } }