Skip to content

knobs-map.md

Latest commit

 

History

History
286 lines (251 loc) · 80.1 KB

knobs-map.md

File metadata and controls

286 lines (251 loc) · 80.1 KB
Raw

CEWPOS Agency-Free Fabric — UX-Knob + Capability Surface Catalog

Framing. Every knob below is a config object — and in CEWPOS a config object is a CEG attestation (config:v1 / scores row), self-signed at node-tier (ConfigScope::Local) or owner-self-tier (ConfigScope::Identity), append-only, latest-wins, version-chained, and hierarchically contained (node ⊂ owner-self ⊂ community ⊂ federation ⊂ constitutional). Because each knob is an attestation row, each knob is also a renderable 3D view-form: a signed object with a tier (depth), a capability (color/cohort), a layer (fabric=cell-membrane / boundary=door / agent=brain), and a precedence/version lineage (supersedes chain). This catalog is the concrete knob/policy/capability surface the repos expose — "everything but the agent." The abstract object/transformation grammar lives in the separate Constitution map; this is the dial board.

Layer legend: fabric = mechanism inside the cell membrane · boundary = a door/gate (admission, refusal, kill-switch) · agent = brain-side composition on top of the fabric. Tier legend: node < owner-self < community < federation < constitutional (containment hierarchy; both = the Local/Identity config axis itself).

Total distinct knob entries: 982 across 8 repos (Persist 109 · Verify 93 · Edge 133 · NodeCore 180 · Registry 171 · Server 101 · Agent 98 · Lens 97). Tables below dedupe and group obvious config families.

2. PER-REPO KNOB CATALOG

2.1 CIRISPersist — durable substrate (caching, retention, crypto-at-rest, blobs/fountain, scope, merge, admission, accord)

Knob (family) Controls Tier Capability Layer
CacheConfig.{max_entries,max_bytes,ttl,invalidation_bucket} + DeploymentTier + CIRIS_PERSIST_CACHE_* env LRU cap (entries/bytes), 30s TTL fail-honest staleness, 1h write-invalidation bucket; Mobile/Edge/Server budgets node caching/eviction fabric
AdmissionCache (§7.5) Caches admission decisions for read-scope gate node admission boundary
RetentionPolicy.{min_keep_secs,pressure_trigger/target_bytes,interval_secs,time_column} + ArchiveWindow + per-module archive defaults Sacred-floor (never delete younger), high/low-water sweeper, cadence, SQL time col, per-module cutoffs node retention fabric
CIRIS_PERSIST_GRAPH_MAX_ATTRIBUTES_BYTES / _TELEMETRY_MAX_LABELS_BYTES Per-node attr cap (1 MiB) / metric label cap node storage-limits fabric
DEFAULT_QUEUE_DEPTH (1024) + QueueError Full→429/Closed→503/Journal→500 Bounded ingest queue, never-silent-drop backpressure policy node queue/backpressure fabric
DiskPressureConfig.{warn,crit,stop,host_at_risk}_free_bytes / poll_interval / *_action / is_family} + PressureTier/TrustTier Free-byte thresholds → PressureAction (LogOnly..ForceEvictProxy/All); Local>Family>Federation eviction priority node/community disk-pressure-degradation fabric
FountainTier (Full/T2..T5) + FountainManifestV1.{min_viable_symbols,n_source,k_repair,symbol_size} + FountainSymbolV1.retention_priority RaptorQ FEC keep-count under pressure (graceful media degrade → EnvelopeOnly); per-symbol evict key node media/fountain fabric
ReplicationConfig.{trust_threshold,trust_recursion_depth,tier_recursion_depths} Trust-score blob-write gate; BFS depth over delegates_to (per-identity_type override) federation trust-policy boundary
ReplicationConfig.{storage_budget_bytes,steady_state_utilization(0.92),eviction_decay_half_life_days(30),sweep_interval(60s)} Federation-blob budget + decay/watermark eviction sweeper node retention fabric
EncryptedKVStore passphrase + K_blind/K_value(ns) + 24B nonce App-layer XChaCha20 KV, refuse-to-open fail-fast, HKDF namespace isolation owner-self encrypted-at-rest fabric
WRAP_ALGORITHM_V2 (x25519+ML-KEM-768) MANDATORY + Three at-rest tiers + get_blob_for_viewer mode + per-write fresh DEK on member-remove Hybrid-PQC DEK wrap; self/family per-write vs community shared epoch-DEK; in-enclave unwrap; forward secrecy owner-self/community/federation encrypted-at-rest fabric/boundary
MasterKeyRef (Software/Hardware-TPM) + AccessOp (Reencrypt/Rotate) + Sensitivity + FilterConfig Secrets master-key backing, re-encrypt/rotate, Low/Med/High classification, versioned config-row node secrets-store / config-store fabric
Cohort vocab {self,family,community,affiliations,species,biosphere,federation} + CallerScope + cohort_scope_sql_predicate + ScopeRefusalReason Closed cohort tier model; AV-44 forge-resistant caller enum; WHERE-fragment gate; typed refusals community/federation scope/tier-model boundary
MergeIntent::{LwwSkewBounded,MonotonicQuorum} + LWW ±5min skew + withdrawal_forward_only + content-addressed merge (SHA-256) + structural-composer precedence (recants>withdraws>supersedes) Per-row merge policy: skew-bounded LWW, anti-rollback quorum, forward-only withdrawals, SHA identity, read-side winner federation merge-policy fabric
DimensionAdmissionPolicy.{morally_charged_stems,require_version_segment,reserved_prefix_rules} + AttestationLadderTransitionPolicy + capacity:* self-emission reject + accord:* requires accord_holder Block deception/harm stems; require :vN; prefix→emitter identity_type; CEG 0.1→0.2 window; anti-self-assert federation/constitutional attestation-admission boundary
BlackholeRecord + ModerationEvent/SlashingAttestation + ReconsiderationRequest/Attestation Per-Reticulum-identity deny-list; accusation→adjudication→appeal chain node/community moderation boundary
MultimediaConfig.{immediate_legal_bases,counter_notice_window_days(14),age_gate_legal_bases} + LegalBasis enum + scheduled_takedown_actions + TakedownNoticePayload.perceptual_hash Immediate-evict bases, DSA art.16 window, age-gate-compose bases, 10-value taxonomy, PDQ/PhotoDNA discriminator federation moderation/child-safety/media boundary
AgeBand + age_assurance:*/age_self_declared:* ratchet + Presumption-of-sovereignty + Restrictive content floor (feat-306 PR branch) Witness>self one-way ratchet; Unknown=non-minor on steward axis, =minor on content axis (#309) owner-self/constitutional child-safety/age boundary
consensus_protocol (founder_only/unanimous/majority/quorum:m/n/weighted/custom) + _entrenched + VoteEnvelope/VoteWeight + PromotionAttestation + WitnessSet + quorum:{m}/{n} tag Family/community governance rule (m≤n,n>0); weight=credits×expertise×tier; canonical FALSE→TRUE flip; M-of-N witness ratify community/federation/constitutional voting/ratification/quorum boundary
Accord live-quorum + ActiveHalt + L_FLOOR steward-backstop + anti-replay nonce/window_until + recovery_supersede absent Constitutional kill-switch: M-of-N live quorum HALTs a family; resume binds sha256(halt); entrenched recovery constitutional reverse-quorum/kill-switch boundary
TrustGrant scope-by-purpose + TrustType (Direct/Partnered) + resolve_trust BFS + revocation/self-deleg depth cap Purpose-scoped signed grants; transitive delegates_to walk (NOT eigenvector); depth-bounded federation trust-policy boundary
BlobBody (Inline/External/ChunkDag) + put_blob max-inline + list_holders+freshness Blob body kind, inline ceiling, holder directory (holds_bytes provenance) federation media/blobs/holder-directory fabric
KeyGrantScope (SingleContent/GroupMember/SubscriptionTier/StreamEpoch) + KeyValidityWindow + stream chunk size (1 MiB) + per-stream STH (K=64/T=2s) + put_blob_chunk/seal_stream + per-stream tx-log + witness cosign + delivery_receipt:{stream_id} + get_range DEK grant granularity, validity window, live append/seal into ChunkDag, per-stream transparency log, proof-of-delivery, format-blind range read federation media/social-feed/streaming fabric/boundary
next_sequence/peek_sequence + original_content_hash dedup + verify-before-dedup ordering Per-(identity,stream) monotonic counter; idempotent replay; anti-probe-oracle ordering node sequence / dedup/idempotency fabric/boundary
HardwareAttestationPolicy.{accepted_hardware_types,max_nonce_age(24h)} + IdentityOccurrence.{device_class,valid_until,hardware_attestation,encryption_pubkeys} + PERSIST_STEWARD_PUBKEY_B64 Secure-element admission floor for accord-holders; multi-device occurrence binding; wrap-target registration; bootstrap steward pubkey constitutional/owner-self hardware-attestation/identity boundary/fabric
service_token_revocation + maintenance_locks + CIRIS_DATA_DIR Token revocation list; advisory locks w/ stale-timeout; data root node auth/operational-locks/storage boundary/fabric

2.2 CIRISVerify — hardware-rooted trust anchor / CEWP cryptographic substrate

Knob (family) Controls Tier Capability Layer
trust_model (HttpsAuthoritative/EqualWeight) + dns_transport + cert_pin + project + dns_us/eu_host/https_endpoint(s)/probe_targets + timeout/cache_ttl/cache_dir + offline_grace + key_alias Multi-source validation weighting, DNS transport, cert pinning, namespace scope, geo registry endpoints, 72h/168/336/504h offline grace, shared hardware key alias node/federation Multi-Source Validation / Identity / Licensing fabric/boundary
ValidationStatus (ALL_AGREE/PARTIAL/DISAGREE/NO_SOURCES) + PARTIAL_AGREEMENT cap Consensus verdict → fail-secure degrade; 2-of-3 caps A3(supervisor)/A4(deny) federation Multi-Source Validation boundary
QuorumPolicy (2·M>N strict majority) + ThresholdMember.role (Founder/Member) + verify_founder_quorum/verify_quorum_policy/RosterMismatch + DeadlockPolicy/ZeroThreshold/ThresholdExceedsMembers Single federation-wide quorum rule (no 1/2,2/4 split-brain, no M==1 carve-out); founder-subset anti-Sybil; fail-closed federation/constitutional Quorum fabric
HybridPolicy (RequireHybrid/AllowClassicalPending) + consensus_protocol_entrenched PQC mandatory at federation; entrenched-family quorum:2/3 un-liftable federation/constitutional Hybrid Policy / Voting fabric
InvocationKind (Constitutional/Notify/Drill/LifecycleActive) + InvocationDedup + resumes_halt_id + humanity_accord_genesis (no-TOFU baked root) Closed kill-switch vocab, anti-replay window, anti-stockpile resume binding, cold-start roster pinned in binary constitutional Moderation (kill-switch) / REVERSE Quorum boundary/fabric
accord custody (YubiKey PIV 9c→f9→Yubico root) + usb_wrapped_mldsa65 portable + CUSTODY_TIER floor FIPS-hardware proof; PQC seed AES-GCM-wrapped on USB (YubiKey+PIN+touch) constitutional Hardware roots / key-grant fabric
AccordAction (Fire/RosterChange/Resume) + Vote (Yes/No/Abstain) + fire floor=1 + roster-change/resume = strict-majority-of-L + L_FLOOR=3 + N_min=2 + verify_recovery_supersede + decisions_equivocate + §4.5.13 bias gradient Asymmetric reverse-quorum: 1 yes FIRES, un-fire/roster lean HARD; steward backstop when L <3; bounded roll-back; split-brain hard-fail constitutional
LicenseStatus/LicenseType/AutonomyTier(A0..A4) + capabilities/capabilities_denied + DeploymentConstraints + mandatory_disclosure + license JWT hybrid gate + locale_merkle Hardware-rooted license gate (fail-secure to community); per-license grant/deny + autonomy ceiling + deploy constraints + baked disclosure community/federation Licensing / Revocation boundary
WiseBus prohibition levels (REQUIRES_SEPARATE_MODULE / NEVER_ALLOWED / TIER_RESTRICTED) + SOFTWARE_ONLY cap Restrictive floor: child_exploitation/weapons never allowed; software-only capped to community community/node Moderation / Child safety floor boundary
HardwareType/hardware_class + ClassicalAlgorithm/PQCAlgorithm/SignatureMode + HardwareLimitation.caps_attestation + IntegrityStatus + boundary_degraded + keyring/crypto features + sealed signers + TPM plugin (ABI v3) + Play Integrity/App Attest/TPM quote HW-token taxonomy + trust multipliers; crypto agility; emulator/CVE/rooted→software-only cap; opaque tamper category; backend feature gating; sealed-at-rest (no re-mint); advisory attestation node Hardware roots / Crypto agility / Anti-tamper fabric/boundary
PresencePolicy/verify_presence (WebAuthn) + self_enc/scope_privacy/secp256k1 derivations + rng_health (SP 800-90B) + key_grant wrap_algorithm v1/v2 Passkey unlock (not owner-binding); deterministic content/wallet/anon-tier keys; latched RNG fail-secure; v2 ML-KEM mandatory for streaming owner-self/node/community/federation Identity / Privacy / Crypto agility / Media fabric
FedKind (User/Agent/Node/Family/Community) + fedcode v1/v2 + FederationKeyset M-of-N rotation + WitnessRelation + OversightMode (HITL/HOTL/HOOTL) + transport_binding/compute_destination_hash Identity taxonomy; shareable hardware-rooted code; threshold-signed keyset rotation; attester relation; human-control gradient; RNS dest-hash recompute federation Identity / Quorum / Oversight fabric/boundary
OrgRole + INFRA_SCOPES vs AGENCY_SCOPES split + delegation deputization/attenuation (depth-cap 5) + verify_partner_record_quorum + provenance chain (depth 64, RequireHybrid) Op role lattice; infra-can't-self-appoint-agency; UCAN child⊆parent; founder-quorum partner admit; bounded hybrid provenance federation/community Operational admit / Identity fabric/boundary
RevocationChecker (unknown=revoked) + monotonic revocation revision + sign_occurrence_revocation + Merkle transparency log (RFC 6962) + jcs (RFC 8785) + doc_integrity two-person + build/function/file integrity tripwire Fail-secure revocation, anti-rollback revision, lost-device revoke, append-only STH+witness, blessed signing-bytes encoder, governance two-person rule, supply-chain L1/L5 federation/node Revocation / Transparency / Supply-chain integrity fabric/boundary
EventRateLimit(10) + ActorBudget(30/7d) + HarassmentClusterSignal(2.0) + RC24 walk-up principal + reconsideration §4.10 bound (≤9) Anti-DoS reconsideration pipeline; walk-up to owner-bound root (absence=reject); fresh-quorum recusal community Moderation / Voting fabric/boundary
SealedAvChunk double-seal + Fountain retention_decision/holding_claim + ALM bounded_capacity_score + AggregationMetaV1/EjectionVerdict + §19.0 verify_bound_hybrid §19 holonomic media substrate: double-AEAD live A/V, revoked→evict (N5), self-asserted-uplink cap (N8), forever-memory descent, PQC-mandatory preimage gate community/federation Media / Social feed / Hybrid Policy fabric
recursive_trust_bootstrap (≤5-hop, cycle-reject, weight-cap) + WholenessWitness Merkle + reputation propagation+slashing (PageRank-style) + multi-attester onboarding (≥3) + Attestation ladder L1–L5 + AgentMode posture Transitive trust DISCOVERY (trust≠membership N1); divergence witness; rogue-attestation slash; registered-tier 3-attester gate; L1-fail→all-UNVERIFIED; client/L0-proxy/L1-server posture federation/node EigenTrust / Attestation ladder / Identity fabric/boundary
watchdog/self-at-login ceremony Runtime watchdog + bilateral presence→delegation→partnership→transport→directory bundle owner-self Identity fabric

2.3 CIRISEdge (ciris-edge) — transport/delivery/verify-gate/AV/swarm/mixnet edge runtime

Knob (family) Controls Tier Capability Layer
hybrid_policy + replay_window_seconds(300) + max_replay_entries(100k) + max_body_bytes + max_content_body_bytes(16 MiB) Verify-gate: PQC acceptance, replay window/cache, envelope+content body caps (AV-13) node verify-gate / content-fetch boundary
trust_threshold + trust_short_circuit_enabled + trust_recursion_depth + set_trust_threshold/install_trust_resolver THE inbound trust gate: drop below floor + moderation signal; delegates_to hops; pluggable resolver owner-self/federation moderation/trust-gate / EigenTrust boundary
cohort_scope_enforcement (Strict/WarnOnly/Off) + probe_pattern_observer_* + ProbePatternConfig.{window,entropy,zscore,KS-pvalue,centroids} + blackhole_prune_interval Wire scope invariant; counter-RII probe detector (entropy/z-score/KS/per-cohort centroids); deny-list prune constitutional/node/community/federation moderation/scope-gate/detector/blackhole boundary
agent_mode (Client/Proxy/Server) + listener_bound + outbound_queue_max + disk_budget_bytes + dispatcher/DispatcherConfig.{worker_id,batch_size,claim_duration,poll,backoff} Posture drives listener/queue/disk/trust-depth; durable outbound queue tunables node delivery/durable / transport / media/storage fabric
event_channel_capacity(1024) + reachability_window(300s) + display_name_path + subscribe_*(announces/link/interface/path/feed) EventBus cap, per-peer reachability tracker, operator display name, observability streams node/owner-self observability / peer-reachability / social-feed fabric
holds_bytes_ttl_seconds(86400) + holder_downweight_window(3600)/miss_threshold(3) + l1_cdn_edge_enabled+_external_uri_base + fetch_content/fetch_blob_swarm Holder attestation TTL, ContentMiss downweight, L1-as-CDN prefetch+re-emit, content-addressed fetch node content-fetch / media/CDN/blob-swarm fabric
delegation_authority_gate_enabled + delegation_graph_max_depth(4, clamp 16) Federation delegates_to authority gate; BFS depth federation quorum/trust-gate boundary
ReticulumTransportConfig.{listen_addr,bootstrap_peers,identity_path,announce_interval,local_key_id/epoch,interfaces,enable_transport} + AutoInterfaceConfig/Tcp*/Udp/Local/I2p Reticulum mesh: listen/dial/identity/announce/multi-interface set/NAT-relay; LAN auto-discovery; transport diversity node transport/reticulum / transport-diversity / NAT-relay fabric
RNodeInterfaceConfig.{device_path,freq_mhz,bw_khz,sf,cr,txpower_dbm,baud_rate,airtime_limit_*} + RNode flow_control/buffer_size LoRa PHY: device, freq (868EU/915US), BW, SF 7-12, CR 4/5-4/8, TX power, baud, duty-cycle caps, KISS flow control node radio/LoRa fabric
HttpTransportConfig + HttpServerConfig.{tls_cert/key,mtls_required,mtls_ca_pool,dev_self_signed,bearer_auth} + HttpClientConfig HTTP/HTTPS transport bind; mTLS (CN=key_id pubkey-pin) + CA pool; Ed25519-JWT bearer; client trust anchor node transport/http(s)(-auth) fabric/boundary
StoreAndForwardConfig.{max_queued_per_destination(256),max_total_bytes(64MiB),ttl_seconds(7d)} + drain(limit) S&F per-dest queue, total budget, entry TTL; pull-mode batch for offline mobile node delivery/store-and-forward/pull fabric
AvDispatcherConfig.{local_role,epoch_dek,initial_subscribers,inbound_links} + ReceiverLayerPolicy.{spatial,temporal,quality} + codec_id + Epoch rekey cadence (~60s/Nth) + Av1EncoderConfig + OpusEncoderConfig + FountainConfig AV role→crypto tier, epoch DEK + fanout roster, per-subscriber SVC layer cap, codec discriminator, rekey, AV1/Opus/RaptorQ params node/owner-self streaming/AV/video/voice/FEC fabric
ALM {MIN_REACHABILITY_RATIO,MAX_BACKUPS}/heal {dedup_ring,silence_heal_ms,heartbeat,reparent_backoff}/capacity {stale,window,has_room_for} + MLS CIPHERSUITE commit_add/remove + RelaySubscriber transit_key App-layer-multicast join/self-heal/capacity admission; group-key MLS rekey on roster change; SFU per-hop transit key (relay never sees plaintext) node/community streaming/AV-fanout/heal/relay/rekey fabric
SwarmConfig.{max_in_flight_per_peer(4),ewma_alpha(0.3),endgame_threshold(2),dishonest_strike_limit(1),per_request_timeout(30s)} + SwarmRuntimeConfig.{publish/observe_cadence,target_holders,min_viable,eviction_grace_pct(15%),observed_claim_ttl,policy} BitTorrent-style blob swarm + FountainHoldingClaim holding-swarm; wire-deterministic eviction margin node/federation/constitutional media/blob-swarm/holding-swarm fabric
ScopeConfig.{lambda,target_real_per_window,window,scope_key} + SchedulerConfig.scopes Per-scope Poisson cover-traffic rate, budget meter, AEAD scope key (mixnet) community mixnet/cover-traffic fabric
ReplicationRuntimeConfig/SchedulerConfig.{cadence(30s),round_timeout(10s)} + BridgeConfig.{cache_capacity(4096),page_limit} + OperationalProviders.{key_directory,root_stewards,steward_roster} + CohortProvider + EnvelopeKind(10) + start_replication Anti-entropy replication; v2 operational-admission (fail-closed when None); peer-set callback; 10 wire kinds; hot peer add/remove federation delivery/federation / quorum fabric/boundary
ArchiveMode (RotateForward/Retain) + DecayTier (Full..EnvelopeOnly/HardDelete) + ConsentState (Active/Revoked/Unknown) + HoldingClaimVerification Forward-secrecy past-key deletion; consent-decay eviction ladder (HardDelete=GDPR Art.17); Unknown=fail-secure evict; possession-weighted rarity credit community/owner-self/federation forward-secrecy / consent/RTBF / media fabric
CohortScope (Public/SelfOnly/Family/Community) + ScopePrivacyAnnouncePolicy/AnnounceSuppressionRegistry Envelope scope discriminator → announce suppression + scope-key sealing community/owner-self scope-privacy boundary/fabric
EdgePeerTrust (Untrusted/Trusted/Restricted/Blocked) + EdgePeerPolicy.{subscription_filter,max_queue_depth,ack_timeout,priority_class} + peer_add/remove/set_alias/notes + routing_blackhole_* + routing_path_* + prime_peer + peer_sas/peer_sas_digits + peer_reachability Operator peer directory CRUD, per-peer trust/policy, deny-list CRUD, path priming/drop, out-of-band priming, SAS words(5)/digits(6) manual verify owner-self/node/federation moderation/trust / delivery / peer-mgmt / reachability/SAS boundary/fabric
init_edge_runtime kwargs (master config surface) + Delivery::Mandatory.bypass_subscription + ACCORD_THRESHOLD_M_OF_N(2,3)+AccordSignature + AuthorityClass + RefusalReason One operator-config entry point; constitutional Mandatory reach; M-of-N accord-holder sig gate; typed door-refusals owner-self/constitutional config-surface / delivery/mandatory / voting/quorum fabric/boundary
FastPathLegalBasis (TVEC/GIFCT-CIP/NCMEC) + ContributionSubjectKind + ExternalRefWithAcl.{uri,sha256,acl_signature,acl_expiry} + LocationProof res≤7 Takedown fast-path bypasses rate-limit; takedown vs key-grant dispatch; publisher-signed external ACL (edge doesn't fetch); H3 over-share floor constitutional/federation/owner-self child-safety / media/blobs / privacy-floor boundary
TrustGraph.{roots,grants,max_chain_depth}+MAX_WITNESS_CHAIN_LEN(5) + TrustGrant.weight(0..255)+deterministic_topology(MAX_DEPTH 4) + WholenessWitness/AntiRollbackState/EquivocationProof + AggregationMetaV1+member_commitment Recursive trust bootstrap (budget halving root/2), integer wire-deterministic scoring, signed Merkle reconcile/anti-rollback/equivocation, quorum aggregation federation EigenTrust / voting/ratification / quorum boundary/fabric
CIRIS_EDGE_PANIC_LOG/RUN_ASYNC_STALL_WARN_MS + Cargo features (transport-reticulum-*, https) Panic log path, async-stall warn; build-time transport/interface selection node observability / transport-diversity fabric

2.4 CIRISNodeCore — second-tier consensus runtime (voting, deferral, moderation, judge, media, feeds, anonymous tier)

Knob (family) Controls Tier Capability Layer
minimum_quorum (→BelowQuorum) + Verdict (approve/reject/abstain) + VoteWeight=credits×expertise×tier + approval_ratio (abstain excl.) + cohort meets_coverage_threshold + expected_occurrence_count + PromotionAttestation threshold-crossing Fail-secure vote gate; weighted buckets; promotion signal; anti-cherry-pick cohort coverage; caller flips is_canonical community/federation voting/ratification fabric
min_responders(5)/max_responders(9) + DiversityPolicy (Jurisdictional/Org/None) + ResponseFormat (Binary/Categorical/Freeform) + deferral deadline + domain classifier closure Deferral routing: bounded responder set, greedy diversity sweep, verdict shape, late-exclusion, domain map community deferral routing fabric
trust recursion depth (0/1/2/3) + MAX_DELEGATION_DEPTH(16) + effective_trust_set_multiplier (1×/4×/20×/100×) + withdraws/recants exclusion + TrustPurpose + grant scope/expires_at + wildcard * + TrustEdge (Direct/Transitive/Untrusted) + registry_vouch + trust_type + weighted_aggregate + local trust threshold EigenTrust-like: depth-capped delegates_to walk, hop-expansion curve, purpose-scoped/time-bounded grants, transitive registry vouch, federation collective scoring (no oracle), intake cutoff node/owner-self/federation EigenTrust-like trust fabric
disk_budget_server/capacity_available + L0 256GB/L1 1TB + eviction=popularity×freshness + decay curve + holds_bytes 24h TTL + utilization watermark(0.92) + 2-day retention floor + evict_actor + fleet presets (PhoneFirst/Realistic/Homelab) + cohort_scope locality dividend (self/family ⇒ no holds_bytes) Intake/eviction scaling model: capacity gate, popularity×freshness drop, anti-thrash floor, per-actor bulk evict, device-class presets, structural locality privacy node/owner-self intake/eviction / privacy/locality fabric/boundary
Allegation/TargetKind/accuser_stake + four-layer moderation + report_content/report_actor + ItemActions + cohort-scoped reporting routes + build_moderator_delegation/revocation_payload + RATCHET advisory flags Moderation: protocol-violation categories, escalation ladder, first-class filing, per-item affordances, scope-matched routes, opt-in moderation delegation, external Sybil flags community/owner-self/federation moderation fabric/agent
SlashingOutcome (ProvenRogue/NotProven) + quorum_ids+quorum_signatures + credits_reduced/expertise_reduced (≥0) + AccuserStakeDisposition + miscalibration-NOT-slashable Quorum adjudication: M WA sigs, floored penalty, accuser stake fate, good-faith decoupling (P11 not P9) federation quorum / moderation fabric
Reconsideration Grounds/requester_stake/recursion bound (3→harassment)/time bound (180d)/fresh-quorum recusal/ReconsiderationAttestation (REVERSED/PARTIAL/UPHELD) Universal appeal: reverse slashing/verdict/takedown; relitigation trip-wire; restore credits on reversal federation reconsideration (reverse adjudication) fabric
Witness-diversity N(3) + diversity bar (jurisdiction/org/stack/cell) + expertise jump-threshold + locality-scaled-quorum (N∝cohort_scope) High-stakes witness floor; single-fault-domain prevention; quorum size matches decision scale federation/community quorum fabric
AnnouncementPriority + AuthorityClass (BootstrapSeed/RootWa/WaQuorum/HumanityAccord) + AccordScope (AgentOwner/WaCell/DeploymentPartner/FederationWide) + AccordCommandType (SHUTDOWN_NOW/FREEZE/SAFE_MODE/NOTIFY_USERS/DRILL) + HumanityAccord 2-of-3 + humanity_accord_key_set/threshold (non-modifiable) + bootstrap_key_set/threshold + EmergencyShutdown severity + bootstrap window (90d) + WaQuorum N + expires_at + NotifyUsersPayload + DRILL monthly + drill thresholds (95%/99%) + on_federation_announcement (SIGKILL on suppress) + Delivery Mandatory{bypass_subscription} + delivery_attestation REVERSE quorum/halt: humans-only hardware-rooted hierarchy that halts the federation but the federation can't halt; mandatory perception; per-peer reach audit constitutional/federation/node reverse quorum / halt boundary/fabric
age_assurance tiers (self/provider/govt) + 'I am not a child' gate + adult-publisher floor + CSAM perceptual-hash DBs (PhotoDNA/PDQ/Arachnid) + children's-keys-lack-adult-attestation + PG-13 restrictive floor + legal mappings (COPPA/OSA/SREN/AVMSD/KOSA/GDPR-Art8) Child safety: structural trust-graph block, restrictive community default, federation-handoff CSAM match, ratified legal→CEG mappings node/community/federation child safety boundary/fabric
BlobBody Inline(16MiB)/External + MAX_BODY_BYTES + media sub_kinds (image/audio/video/film/model_3d + chat/blog/event/...) + content_rating multi-scheme (MPAA/BBFC/PEGI/ESRB/IFCO/CSM/cw) + content_class family + cw_class + is_ai_generated (mandatory ≥community) + alt_text/transcript/captions + external_fetch_fraction + geographic admission + key_grant/wrap_algorithm/group DEK rotation (MLS) + takedown_notice/legal_basis/owner-vs-third-party/clearinghouses/hold windows Media+takedown: inline/CDN carriage, rating/class/CW taxonomies, AI-disclosure refusal, accessibility, jurisdiction gate, DEK delivery, withdraws-against-holds_bytes per-basis discipline node/community/federation/owner-self media (blobs) / takedown fabric/boundary
live_stream (latency_class/chunks/age_gate/takedown) + compose_local/community/global_feed + cohort_scope feed bucketing + quality threshold + freshness decay knob + content_rating/class consumer filter + CW+publisher subscriptions + user-algorithm presets (PG-13/adult/news/academic/horror-CW/art-cinema) + compose_* read-surfaces Social feed/streaming: user-controlled algorithm = tuple(depth,cohort,quality,freshness,rating,subscriptions); exportable signed preset community/owner-self/federation social feed / video / live streaming fabric/agent
judge model (claude-opus-4-7) + api_url/key_file + max_tokens(200) + no-temperature + judge_prompt_sha256 + override flags + 4 calibration Contribution kinds + reversal-rate(>25%) drift + multi-judge ensemble(N≥3) + safety-floor/contextual/improvement blocks + secondary fallback Foundation-model judge contract: reproducible interpreter_judgment verdicts, vote-calibrated, drift-monitored federation/node/community foundation-model judge boundary/fabric
criterion kinds (term_present/absent/regex/script_detection/interpreter_judgment) + script_detection min_ratio + severity/verdict + operationalization gate + rules-crowdsourced/verdicts-machined + rubric status (canonical/candidate) + safety-battery freshness(7d) + WIPE_DATA_ON_START + federation-chain ingest (canonical-only) + Sigstore bundle Machine-applicable safety criteria: deterministic+semantic evaluators, unmachineable rejected, canonical-only chain ingest, two-layer provenance community/federation/node machine safety criteria fabric/boundary
WA promotion thresholds+decay + Active-tier N + seed Expertise (1-5, decaying) + seed decay rate + onboarding n_min (≥3) + $1 bond + seed_holder_voting_alignment + truth-grounding multiplier + ExpertiseAttestation + gratitude_signal Expertise consensus/anti-Sybil: continuously-tuned policy, demotion applies to ROOT, seed fades as cell matures, capture monitor federation/community/constitutional expertise consensus / anti-Sybil fabric/boundary
ServiceKind/ServiceEndpoint/service_usage_summary/service_deprecation + subscription_request + notification/notification_response/unsolicited_guidance/assistance_request/commitment/cancellation/improvement + Goal/Approach/Method/Progress-Measure DAG + substrate_rung + validity_window+Goodhart + sub-federation branching + DelegationPolicy/Scope/Rule+predicate vocab+revocation + /v1/federation/*+/v1/accord/* + federation-tab + trust-grants UI + accord-page HW-key gate + two-phase admission UI + community/location/consent/family/identity-occurrence/bilateral builders + AnonymousContribution/node_blinded_key/AEAD/onion-3-hop/LRU-only-eviction + install_cohabitation/node_mode_serving + DURABLE_CONSENSUS/PERSIST_READ_LIMIT Service marketplace, messaging envelopes, decision hierarchy (P12-15), agent-delegation mandates, portal/client surface, identity/consent/partnership ceremonies, v2 anonymous tier, substrate integration federation/community/owner-self/node/constitutional and-more (service/messaging/decision/delegation/identity/anonymous) fabric/agent/boundary

2.5 CIRISRegistry — federation directory / licensing / role hierarchy / Constitution-encoded policy (proto + DESIGN + CC)

Knob (family) Controls Tier Capability Layer
ENVIRONMENT + GRPC/HTTP_PORT + DB_* (host/ssl/pool/password-guard) + ED25519/MLDSA_KEY_PATH + JWT_SECRET/ISSUER + MTLS_ENABLED+TLS_* + KEY_STORAGE_MODE (memory/VAULT/CLOUDKMS/AWSKMS/AZUREKV/HSM/YUBIHSM/CLOUDHSM) Deploy posture (prod prod-validation), listeners, Postgres, steward hybrid keys, admin-JWT, mTLS, signing-key store node deployment-config / federation-identity / auth / key-management fabric
FEDERATION_DUAL_WRITE_ENABLED + _PERSIST_ENDPOINT/REQUIRED/DSN + _CACHE_TTL_SECONDS(300) + _MAX_STALE_CACHE_AGE(3600) Dual-write to persist substrate + read-through cache; fail-closed/open; stale ceiling bounds revoked-key replay federation federation-identity / revocations fabric
Rate-limit tier (Bypass/Public/Verify) + Rate limiting by OrgType Per-IP throttling; INTERNAL none/PARTNER std/LICENSEE own/COMMUNITY stricter node/federation rate-limiting fabric
SystemRole (SYSTEM_ADMIN/AUDITOR/WISE_AUTHORITY) + @ciris.ai constraint + WA cap (9, 3yr terms) + OrgRole+permission matrix + OrgType + parent_org_id constraints + multi-org membership + Community→Partner upgrade + hierarchy role config (term-bound DAG, depth-cap) Role hierarchy + org records; LICENSEE⊂PARTNER; one-user-many-OrgRole; SYSTEM_ADMIN mints PartnerRecord federation/community/constitutional role-hierarchy / partner-org-records fabric
LicenseType (COMMUNITY..FULL) + PartnerStatus + effective-capability (agent∩granted−denied) + effective-autonomy=min(agent,partner) + AutonomyTier (A0-A4) + capability namespace (domain:/modality:/autonomy:) + License expiration bands (7/30/90d) + partner_record M-of-N steward quorum Licenses/tiers: capability grant formula, autonomy downgrade, 3-part namespace, founder-quorum federation grant federation licenses-tiers / quorum fabric/boundary
RevocationType/Reason/Severity + MassRevoke selection + dry-run + withdraws primitive Revocations: forward-only, multi-criteria mass-revoke with preview+incident-id confirm federation revocations fabric/boundary
EmergencyShutdown IncidentSeverity (LOW..CONSTITUTIONAL) + duration (1h..manual) + allowed_operations whitelist + emergency_status fields + CONSTITUTIONAL 2-of-3 accord + accord:invoke kinds + accord:lifecycle:active resumption + consumer-UI distinction + HUMANITY_ACCORD triple (Moore/Kudzin/Bradley) + accord quorum:2/3 entrenched + accord authority scope-isolation Emergency halt → constitutional kill-switch (2-of-3 accord bypasses all federation authority, non-configurable, scope-isolated keys) constitutional/federation emergency-halt / reverse-quorum / steward-attestations fabric/boundary
founder-quorum (ciris-canonical 2-of-3 over lens+registry-us+eu) + default-trust re-rootable + live-quorum proof-of-life+vote + bias gradient (fire≤roster≤standing) + steward floor key-independent (H6) + restore-to-known-good (H7) + owner-binding gate (RC7) Quorum/reverse-quorum trust root: re-rootable canonical trust, fire-floor-of-1 live set, key-independent backstop, restore-only carve-out, owner-bound admission constitutional/federation quorum / reverse-quorum / eigentrust-policy fabric/boundary
identity_type as a set + hardware_class taxonomy + trusted_primitive_keys + signature_mode HYBRID_REQUIRED + KeyStatus/CustodyModel/RotationMode/EscrowType/SigningKeyStatus + rotation grace (24-168h) + key recovery + steward-key rotation policy + app-attest/play-integrity + offline verification package Federation identity + key management: role cohabitation set, hybrid mandatory, custody/escrow/rotation lifecycle, device attestation, offline verify federation/node federation-identity / key-management / steward-attestations fabric
Policy A-I library (direct/one-hop/weighted-graph EigenTrust/lexical-priority/locality-quorum/agent_files/trust-fresh/tiered-scope/attestation-ladder) + cohort_scope + Frickerian discipline + sub-quorum fallback + infrastructure DEK opt-out EigenTrust-policy library: Policy C = explicit global-from-local; consumer MUST impl Policy A; locality-scaled quorum with explicit fallback; Commons-tier plaintext node/federation/community eigentrust-policy / quorum / social-feed boundary/fabric
Child-safety Q1–Q7 (developmental bands, restrictive-floor one-way tuning, under-18 baseline, non-derogable floor, jurisdiction ratchet, assurance rungs, help/report channel, non-overridable best-interest, standing-vs-per-act, co-stewardship M-of-N) + age_assurance ladder + witness-reservation + mDL preference + age_self_declared{band} + content_class:adult gate + misdeclaration adjudication (never slashing) + minor-stewardship delegates_to + capacity_assurance ladder + ward's-champion Ratified child-safety as non-derogable restrictive FLOOR riding existing primitives; unassured=child; one-way protective ratchet; zero-leak mDL ranked above ID-scan constitutional/community/owner-self child-safety / reverse-quorum / adult-incapacity-stewardship fabric/boundary
moderate/takedown/review delegated_scope + sub_delegation/deputization + delegation depth cap(5) + enforced-admission gate (RC24/25/27) + named-moderator existence invariant + merit auto-promotion + moderation_track_record + open labeling + reverse-quorum 48h window + protective default-remove + infohazard consent interstitial + outcome ladder + optional moderator quorum + no-moderator recovery + single-point warning + takedown_notice LegalBasis (10) + fast-path coordination + perceptual-hash matcher operator policy + feed registration + watchlist:{id} per-group + CSAM-disable non-silent + separation-of-powers + audit emissions Moderation as delegable duty; reverse-quorum (presence-is-authority, default-remove); per-group opt-in watchlist (never global, fabric/operator/authority split) community/node/federation moderation / reverse-quorum / watchlist-detection fabric/boundary
§11.2 amendment process + 1-of-6 sign-off VETO + meta-amendment entrenchment + open-vocabulary collision rule + consensus_protocol vocabulary + _entrenched flag + quorum:M/N semantics (m absolute) + witness-set verifiability invariant Voting/ratification: P5→N=3 witness→WA quorum→reconsideration→1-of-6 veto; entrenchment needs MAJOR+2-of-3; first-registered-wins federation/constitutional/community voting-ratification / quorum fabric
external_content sub_kinds + holds_bytes:sha256 emission + key_grant wrap_algorithm (v1/v2 mandatory) + scope/rotation_chain + content_rating/class/cw_class + `delivery_mode:{pull push}+listed:public+history_on_join` + streaming epoch-DEK cascade + consent:stream bundles + topical_relation + event_listing lifecycle Media + social-feed + live-streaming: observer-share(N=1) and multicast(N>1) as one primitive; per-(stream,epoch) PQC key cascade; delivery_receipt node/community/owner-self media / social-feed / live-streaming / consent-privacy
lifecycle ceremonies (identity/family/community) + location_proof (H3 ≤7) + self-occurrence single-vouch + forward-secrecy on departure + multi-family family_id + consent:* family (8 prefixes) + subject_key_ids + consent:scope + deletion_sla watcher + vertical compliance mapping + structural-invisibility (self/family) Lifecycle/consent/privacy: ceremony witness-sets re-verified at boundary; subject-side consent authority; deletion-SLA→hard_case; rough-only geo wire-enforced owner-self/community/federation lifecycle-ceremonies / consent-privacy / geographic-privacy fabric
Audit log + export (JSON/CSV/JSONL/SPLUNK) + Compliance reports (SOC2/HIPAA/GDPR/ISO27001/PCI) + Webhooks + transparency log (RFC6962) + build attestation SLSA + AgentType/AgentStatus + Retryable hint Audit/compliance + supply-chain provenance + consumer retry guidance node/federation audit-compliance / federation-identity / deployment-config boundary/fabric

2.6 CIRISServer — node runtime (config-as-CEG, accord halt, founder-quorum, transport/radio, moderation, child-safety, auth/sessions, client UX)

Knob (family) Controls Tier Capability Layer
transport.{node,store_and_forward} + scorer.{cadence_secs(3600),window(500),sample_gate(20),target_n_eff(8.0)} + replication.reconcile_secs(30) + mode + net.{listen_addr,bootstrap_peers} + node.alias + auth.{admin_key_ids,oauth_callback_base_url} Boot-structural transport posture + HOT scorer/replication cadences (reconciled live) node transport / EigenTrust-analog reputation / peers / sessions fabric
net.radio.{enabled,serial_port,frequency_hz(915M),bandwidth_hz(125k),spreading_factor(7),coding_rate(5),tx_power_dbm(17)} + RadioParams + RNODE_HW_MTU(508)/RNODE_BAUD(115200) LoRa/RNode PHY pushed via KISS (desktop-only, cfg-gated off mobile) node transport+radio fabric
--home/DEFAULT_CIRIS_HOME (the ONE input, zero-env) + --key-id/keystore_alias + lens_store_min_gib(5) + Slices{lens,registry,node} + Capabilities{disk_free,lens_store} + db_path/dsn + seed_path/ret_identity_path/keyring_dir + claim_pin_file + read_api_addr Convention-derived data root; structural disk gates; service slices light up at minimums; key/identity/DB paths node storage / identity / services/adapters fabric
ConfigScope (Local=node vs Identity=owner-self) + ConfigValue union + ConfigEntry{key,value,version,updated_by,scope,previous_version} + config write owner-gate + config reconciler cadence (30s+Notify) THE CEWPOS tier axis: config = append-only self-attestation; owner-bound+SYSTEM_ADMIN write; live ResolvedConfig republish both/node config-as-CEG fabric
HALT_LATCH_FILE + HALT_EXIT_CODE(42) + AccordHalt{home,peers,exit_on_halt} + ACCORD_THRESHOLD/2-of-3 + kill_switch_quorum_m + InvocationKind + InvocationDedup + MAX_PENDING/MAX_SEEN + REPLICATION_TIMEOUT/CONNECT_TIMEOUT + reactivation proof gate (2-of-3 incl ≥1 genesis) + CUSTODY_TIER_PORTABLE_2FA + YUBICO_ATTESTATION_ROOT_1 + accord_holder side-door refusal Disk-latched full halt (boot-refuses while latch exists); replicate-before-halt; fail-out exit(42); FIPS-YubiKey custody floor for accord admission constitutional Accord kill-switch / REVERSE quorum fabric
CANONICAL_CONSENSUS_PROTOCOL quorum:2/3 + consensus_protocol_entrenched + Role::Founder member + founder-quorum genesis assemble/entrench Entrenched founder-quorum trust root replaces single steward key; non-founder/wrong-role sigs don't count federation/constitutional quorum / voting/ratification fabric
CONSENT_DIMENSION (consent:replication:v1) + attestation_prefixes (default [capacity:]) + PEER_IDENTITY_TYPES allowlist + peering admission gate (owner-bound+SYSTEM_ADMIN, requires peer SignedKeyRecord) Directed replication-consent grants; admissible peer identity types; fail-secure peering owner-self/node peers+consent fabric
PBKDF2_ITERATIONS(100k) + session expires_in(86400) + DelegatedGrant{client_id,scope,expires_at} + DELEGATION_REACHABILITY_DEPTH(4) + GRANT_TTL/POLL/DELEGATED_TTL + DEFAULT_SCOPE (owner:act-on-behalf) + Role set + scope::INFRA vs AGENCY split + UserRole hierarchy + Permission set(22) + consent dimension + erasure route Sessions/delegations: bearer TTL, owner→client delegated grant (durable delegates_to, re-checked per use), infra-no-agency separation, right-to-erasure owner-self/node/constitutional sessions/auth/delegations / separation-of-powers / peers+consent fabric
Duty enum (Moderate/Takedown/Review) + §11.10 admit-iff gate + MODERATION_DIMENSION_PREFIX/track_record + named-moderator existence_verdict (Operate/AutoPromote/Quiesce) + auto_promotion ranking + HARD_CASE_COMMUNITY_* Moderation as delegable duty; admit IFF owner-bound duty-holder or live scoped chain; deterministic merit promotion; auditable quiesce community moderation / child safety / reputation fabric
AgeBand (Minor/Adult @18) + AssuranceLevel (SelfDeclared<Provider<Government) + ContentClass+gate_content_for + age dimensions (witness-reserved vs self) + MISDECLARATION_ALLEGATION (never slashing) + WatchlistEnable/Class(Csam/Other)/Mode(AlertOnly/Enforce) + authority gate (per-group never global) + on_publish/SeamOutcome (DeferredNoMatcher) Child safety: binary age band + assurance ladder; unknown→Minor block; CSAM→auto-takedown; opt-in per-group watchlist; matcher operator-provisioned owner-self/community child safety / age verification / restrictive floor fabric
reverse-quorum WINDOW_HOURS(48) + ProposableAction (keep/remove/neutral) + resolution rule + protective default-remove + minor-stewardship binding + age-graduation bands C/T/A + scope-widening co-sign gates + protective cohort default for minors + co-stewardship M-of-N (OPEN) CC4.5.13 community reverse-quorum: anyone opens 48h window, named moderator blocks by 1 sig else live-majority removes; minor content born at smallest cohort community/owner-self/constitutional REVERSE quorum / child safety / ratification boundary/fabric
py_adapter/adapter/proxy + LLM provider/model/baseUrl/apiKey (BYOK vs Proxy, 16 providers) + LLM Bus settings (circuit breakers/strategy/priority) + liveBackgroundEnabled/forceClassicViz + CellVizConfig (~25 clamped) + colorTheme/brightness/location + rerunSetupWizard/factoryReset/logout + client config/policy screens Brain-side adapter wiring + client-tier LLM/viz/theme/lifecycle UX + ConfigScreen/Consent/Delegations/Transport/Accord/Moderation/ChildSafety/Identity/Peers screens node/owner-self/both services/adapters / LLM/agent settings / viz settings / config-policy UX agent/boundary/fabric

2.7 CIRISAgent — brain (CEG-native agent: runtime/pipeline, adapters, consent, WA-deferral, prohibitions, credits)

Knob (family) Controls Tier Capability Layer
database.{main_db,secrets_db,audit_db,url} + agent_occurrence_id + agent_mode (CLIENT/PROXY/SERVER, SERVER≥256GiB) + adapters.{auto_discovery,discovery_paths,disabled} + log_level/debug_mode/template_directory/default_template Persistence paths, multi-occurrence runtime, global mode, adapter auto-load, identity template node/owner-self memory/graph config / runtime/pipeline / adapters fabric
services.llm_* + LLM provider priority/distribution/circuit-breaker + CIRIS Services toggle + provider CRUD (cloud/local/server, Ollama/llama.cpp/vLLM/LM Studio) + multi-region endpoints (proxy/billing/agents/lens) LLM/provider settings: routing, strategy, CB thresholds, BYOK vs hosted proxy, on-device + LAN discovery node/federation LLM/provider settings fabric
security.{audit_retention_days,enable_signed_audit,secrets_encryption_key_env,secrets_key_path,storage_mode,max_thought_depth} + JWT_SECRET_KEY/EMERGENCY_SHUTDOWN_PUBLIC_KEY Signed audit, master-key backing (software/hardware-CIRISVerify), thought-depth auto-defer, kill-switch pubkey constitutional/node/boundary runtime/pipeline / secrets / reverse quorum fabric/boundary
limits.{max_active_tasks,thoughts,batch_size,round_delay,dma_retry,dma_timeout,conscience_retry} + workflow.{max_rounds,round_timeout,enable_auto_defer} + ResourceLimit (mem/cpu/tokens/disk/thoughts) + ResourceAction (LOG/WARN/THROTTLE/DEFER/REJECT/SHUTDOWN) + ResourceCost (token cents/water/carbon/energy) Concurrency + DMA/conscience gate plumbing; per-resource warn/crit + action+cooldown; economic+environmental accounting node/boundary runtime/pipeline / Wise-Authority deferral fabric/boundary
graph.tsdb_* + telemetry.{enabled,export_interval,retention,hot_cold} TSDB consolidation/retention; telemetry tiering node memory/graph config / runtime/pipeline fabric
Discord/API/CLI adapter config (channels/mentions/threads/rate-limit/allowlists/intents/cors/auth/swagger/timeouts/colors/tools) + AdapterConfig.{enabled,persist,settings}+auto_start SOCIAL surfaces + adapter UX + per-adapter hot load/unload node/community channels (SOCIAL) / adapters / moderation fabric
FilterPriority/TriggerType/FilterTrigger + AdaptiveFilterConfig.{attention_triggers,review_triggers,llm_filters,channel_configs,auto_adjust,thresholds} + UserTrustProfile (trust/violation/evasion/rapid_switch) + ConversationHealth Adaptive moderation rule engine (semantic=LLM); OUTPUT filters guard malicious LLM; per-user anti-gaming trust; channel health community moderation / EigenTrust trust-policy boundary/fabric
ConsentStream (temporary/partnered/anonymous) + ConsentCategory + decay (14d/90d, safety_patterns_retained) + revocation ≤24h federation promotion + Partnership request/approval + DSAR workflow + TicketsConfig Consent handlers: data regime, auto-forget, subject revocation→withdraws→24h promote, GDPR DSAR always-on owner-self/community/federation/constitutional consent handlers / voting/ratification fabric/boundary
WARole/WACertificate scopes + DeferralRequest/Response + GuidanceRequest urgency+modality + WisdomAdvice disclaimer/requires_professional + send_deferral broadcast + domain_hint + UserRole/Permission(~25) + OAuth permission-request workflow Wise-Authority deferral queue/UI: WA roles+scopes, sign deferral/guidance, liability gating, RBAC, OAuth grant review federation/community/node/constitutional Wise-Authority deferral / voting/ratification / moderation boundary/fabric
ProhibitionSeverity (REQUIRES_SEPARATE_MODULE/NEVER_ALLOWED/TIER_RESTRICTED) + PROHIBITED_CAPABILITIES(20) + CONTENT_MODERATION_CAPABILITIES (age_verification) + COMMUNITY_MODERATION_CAPABILITIES (Tier4-5: grooming/coordinated-campaign/protective-routing) + get_prohibition_severity+Stewardship Tier 1-5 + Accord lockdown kill-switch (1 sig→ALL prohibited→shutdown) Code-level 'NO KINGS' prohibition floor; tier-gated community-safety; single signed veto halts every capability constitutional/community child safety / moderation / reverse quorum boundary
cognitive wakeup/shutdown/play/solitude/dream + state_preservation + Runtime single-step (StepPoint×10, StepDuration) + TaskSelectionCriteria + ServiceProviderUpdate+CircuitBreakerStatus + RUNTIME_CONTROL/MANAGE_CONFIG + Config CRUD API + ConfigNode version chain + external-data connectors (SQL/REST/HL7) Cognitive-state availability + consensual shutdown + single-step debugger + task pull + service registry tuning + live graph-config CRUD owner-self/constitutional/node runtime/pipeline / consent handlers / memory/graph config / adapters fabric/boundary
Secrets detection patterns + agent-defined rules + auto_decapsulate + verify_partner_record_quorum (M steward sigs) + Veilid distributed-consensus WA (0.66) + WA voting weight (credit-proportional) + anti-sybil policy votes + Commons Credits/AgentCreditSummary (k_eff, decay) + Coherence Stake/N_eff + DualSignature+GratitudeSignal + local-tier sig deferral + CreditCheckResult/CreditContext + gas-sponsorship + Wallet trust-tier 1-5 + Wallet OFAC/jurisdiction gate Secrets auto-redact; forward+distributed quorum; non-transferable reputation=governance weight (global-from-local); per-interaction credit gate; wallet compliance constitutional/federation/owner-self/node secrets / quorum / EigenTrust trust-policy / child safety fabric/boundary
Media/vision ingest (base/api vision, document_parser) + media adapters (image-gen/whisper/TTS/video_frames/summarize/camsnap) + social-feed adapters (reddit/bird/slack) + Wisdom-extension toggles (geo/weather/sensor, HA) + Stewardship Tier+Creator Intent/Ledger + AgentTemplate.{permitted_actions,auto_load_adapters,domain} + CIRISNodeConfig + transparency log/audit-as-substrate + multilateral participation metadata Multimodal ingest+gen; SOCIAL feed monitoring/posting (file-based video); wisdom providers; Book VI stewardship gating; per-template action allowlist; audit≡CEG canonical-hash node/federation/owner-self/constitutional media / social feed / adapters / child safety / voting-ratification fabric/boundary/agent

2.8 CIRISLens (cirislens-core) — observation/science layer (capacity scoring, coherence-ratchet, N_eff, manifold-conformity, PII scrubbing, trace-ACL)

Knob (family) Controls Tier Capability Layer
lambda_C/mu_C (C decay) + decay_rate d/signal_weight w/positive_moment_weight/ethical_faculty_weight (S) + drift_ignore_below/drift_full_penalty_at/trend_window/threshold (R) + per-factor collapse floor(0.1) + unsafe entropy(0.5) CIRIS Capacity Score factors C·I·R·I·S; multiplicative collapse floor; tunable calibration constants federation capacity-scoring fabric
min_traces(30) + window_days (baseline/coherence/default 7d) + BENCHMARK_FILTER/mock exclusion + non_exempt/exempt_actions + capacity bands (<0.3..≥0.85→autonomy) + confidence tiers + warm-up provisional + scoring query params (window/alerts threshold) + rate-limit 60/min + cache TTL 300s Statistical-validity gates, scoring corpus filter, capacity→autonomy band gate, public API limits federation/node/owner-self/constitutional capacity-scoring fabric/boundary
Z_SCORE_WARNING/CRITICAL(2σ/3σ) + DAILY_DRIFT_WARNING/CRITICAL(15/25%) + MIN_TRACES_PER_AGENT/DOMAIN/DAY(10/3/5) + OVERRIDE_RATE_MULTIPLIER(2x/3x) + intra-agent variance gate + _DIVERGENCE_METRIC_KINDS(5) + stratification key (deployment_domain) + hash-chain any-gap=critical + detector cadences (24h/1h) + alert lifecycle/read endpoints Coherence-ratchet detectors (validated-not-adjudicated): divergence/drift/override/hash-chain; human ack/resolve federation/node/constitutional coherence-ratchet fabric/boundary
cohort cell taxonomy + deployment_region/type + agent_role (incl 'moderation') + agent_template + declared-vs-inferred mismatch + two-sided conformity + centroid sliding window + min-sample→indeterminate + cold-start deadline + cross-peer attestation + fail-secure 'general' fallback + hot-path SLO + published-signal discretization + lens_core_version stamping + deployment-tier security levels + detection-as-records invariant Cohort routing + manifold-conformity: per-trace centroid distance, mismatch=detection event, never-fabricate-numeric, version-bounded aggregation federation/community/owner-self/constitutional cohort-routing / manifold-conformity / cohort-attestation fabric
17-dim constraint vector + N_eff_PR/N_eff_H + federation N_eff capacity ceiling (Kish) + --filter-qa organic-only + N_eff window knobs + cohort-relative entropy normalization Federation N_eff: capacity bounded by collective diversity (global-from-local reputation cap); anti-Goodhart organic filter federation/node federation-N_eff fabric
CIRISLENS_SCRUBBER_VERSION (v1/v2) + full-body threshold(64KB) + trace_level (generic/detailed/full) + SCRUB_FIELDS allowlist (NOT configurable) + 11-cat NER + XLM-R(29 langs) + ONNX-missing→refuse-start/level-missing→422 + cryptographic scrub-envelope + privacy hash/remove fields + geo-coarsening (0.5° grid) PII scrubbing: multilingual NER+regex over allowlisted fields, fail-secure boot, original never persisted, geo coarsened node/owner-self/federation/constitutional pii-scrubbing fabric/boundary
AccessLevel (FULL/PARTNER/PUBLIC) + public_sample + partner_access list (PeerAcl analog) + pendulum viewer access gate + DSAR /dsar/delete + public-keys/federation-keys/attestations/revocations lists + signature_verified gate Trace-visibility ACL + federation directory + right-to-erasure + signature-verified-only detector intake node/owner-self/community/federation/constitutional trace-acl / privacy-compliance / signature-verify / federation-directory boundary/fabric
RoutingDecision (Production/Mock/Connectivity/Malformed) + mock-detection/generic-bypass + telemetry (COLLECTION_INTERVAL/OTLP/retention/downsampling/rate-zones/scaling-tiers) + OAuth/Grafana SSO + AGENT__TOKEN/_URL + pendulum render knobs (default agent/no-fallback/instability weights/canonical-gate-order/list-limit) + aggregate scoring params + corpus_shape + WBD/PDMA/creator/sunset ledger records Ingestion routing, telemetry/OTLP scaling, admin SSO, per-agent tokens, deterministic render-only viz, observation-science record surfaces node/federation/owner-self/community/constitutional ingestion-routing / telemetry / auth / trace-viz / observation-science fabric/boundary

3. THE NAMED CAPABILITIES (acceptance criteria)

3.1 Moderation — COVERED

  • Repos: all 8 (Persist owns blackhole/takedown; NodeCore owns four-layer + slashing; Registry/Server own delegable-duty + watchlist; Verify owns kill-switch + reconsider-DoS; Edge owns trust-gate + probe detector; Agent owns adaptive-filter + prohibitions; Lens = moderation cohort-label only).
  • Objects: BlackholeRecord; ModerationEvent/Allegation/TargetKind/accuser_stake; SlashingAttestation(ProvenRogue/NotProven, quorum_ids/sigs); ReconsiderationRequest/Attestation; Duty{Moderate,Takedown,Review}+§11.10 admit-iff gate; moderation_track_record+merit auto-promotion+existence_verdict; watchlist:{id}/WatchlistClass/Mode; TakedownNoticePayload/LegalBasis/MultimediaConfig; EventRateLimit/ActorBudget/HarassmentClusterSignal/RC24 walk-up; ItemActions; AdaptiveFilterConfig/FilterTrigger/UserTrustProfile; PROHIBITED_CAPABILITIES; Edge ProbePatternObserver/EdgePeerTrust(Blocked).
  • Transformations: report→file moderation_event→witness aggregation→slashing (penalty floored ≥0)→trust drop→admission tighten+evict_actor→withdraws:holds_bytes; principal walked-up delegates_to to owner-bound root (absence=reject); per-event/actor/cluster anti-DoS; immediate-evict vs counter-notice scheduling; perceptual-hash match→auto-takedown/route-to-moderator; reversible via reconsideration.
  • Knobs: legal_basis taxonomy, counter_notice window, age_gate bases; min/max responders + diversity; rate-limit(10)/budget(30/7d)/cluster(2.0)/recursion(≤9); WINDOW_HOURS(48); watchlist class/mode/authority-gate; probe entropy/z-score/KS/centroids; AdaptiveFilter thresholds; trust_threshold/blackhole_prune_interval.
  • CEWPOS-native 3D view-form: a moderation membrane: each content object glows by its outcome ladder state (visible / consent-gated / removed), the 48h reverse-quorum window renders as a contracting shell, and the walk-up-to-owner principal chain draws as a delegates_to thread anchored at a hardware-root.

3.2 Quorum (M-of-N to ALLOW) — COVERED

  • Repos: Verify (the single 2·M>N rule + founder-quorum), Persist (consensus_protocol quorum:m/n, WitnessSet, PromotionAttestation), NodeCore (minimum_quorum, WaQuorum, locality-scaled), Registry (founder-quorum, partner_record, Policy E), Server (CANONICAL quorum:2/3, founder genesis), Edge (accord 2-of-3, OperationalProviders steward_roster), Agent (verify_partner_record_quorum, Veilid 0.66), Lens (cross-peer centroid consensus).
  • Objects: QuorumPolicy(2·M>N)/ThresholdMember(Founder/Member)/ThresholdSignature/FederationKeyset; consensus_protocol(+entrenched)/quorum:{m}/{n}/WitnessSet/DiversityProof/PromotionAttestation; Aggregate::BelowQuorum; partner_record M-of-N; OperationalProviders.steward_roster; verify_founder_quorum.
  • Transformations: re-derive JCS/canonical bytes→verify each sig→distinct-key dedup (both hybrid halves counted)→count ≥M strict-majority→admit else fail-closed (DeadlockPolicy/RosterMismatch/InsufficientAccordSignatures); is_canonical FALSE→TRUE flip in one tx; quorum_size=f(locality), min_pool=2×quorum with scale-down/escalate/defer.
  • Knobs: the 2·M>N rule (no M==1 carve-out); founder roster N==real-count gate; witness-diversity N(3, policy-tunable); locality quorum (local2/regional3/national4/federation6); WaQuorum N; bootstrap_threshold (1→2/3→3/5); consensus_protocol vocabulary (m absolute, n documentary).
  • CEWPOS-native 3D view-form: an N-of-M signature rosette — M founder seats arranged in a ring, each lighting as its hybrid sig verifies; the gate-door dilates only when the lit arc crosses strict majority; entrenched protocols show a welded lock on the ring.

3.3 REVERSE Quorum (M-of-N to BLOCK / veto / halt) — COVERED

  • Repos: Verify (fire-floor-of-1 bias gradient), Persist (accord live-quorum, ActiveHalt, L_FLOOR), Server (HALT_LATCH_FILE, 2-of-3 disk-latched halt + CC4.5.13 48h community), NodeCore (AccordCarrier/AccordCommandType FederationWide), Registry (CONSTITUTIONAL halt, live-quorum bias gradient, reverse-quorum 48h protective-default), Edge (monotonic-fail-secure 'revoked>active', withdrawal-forward-only, Mandatory bypass), Agent (Accord lockdown 1-sig→shutdown), Lens (no governance reverse-quorum; only observed conscience-veto flags).
  • Objects: AccordProposal/Participation(Vote yes/no/abstain)/Decision; FireVerdict/RosterChangeVerdict/ResumeVerdict/RecoveryVerdict; ActiveHalt/HALT_LATCH_FILE/InvocationKind::Constitutional; L_FLOOR steward-backstop; AccordCommandType(SHUTDOWN_NOW/FREEZE/SAFE_MODE/NOTIFY/DRILL); humanity_accord_key_set; CC4.5.13 WINDOW_HOURS(48)+ProposableAction(keep/remove); monotonic_quorum/withdrawal_forward_only.
  • Transformations: a SINGLE yes in live set L FIRES the halt (floor=1, missed-fire is terminal); un-fire/roster-change lean HARD (strict-majority-of-L + steward 2-of-3 when |L|<3); halt = replicate-to-peers-FIRST→latch→exit(42)→boot-refusal; recovery_supersede restores known-good only (never installs novel); decisions_equivocate→hard-fail; community: propose→48h→unilateral-block-by-1 OR M-of-N live-majority-removes (protective default-remove); on_federation_announcement SIGKILL on suppression.
  • Knobs: fire floor=1; L_FLOOR=3; N_min=2; ACCORD_THRESHOLD (2,3) entrenched quorum:2/3; HALT_EXIT_CODE(42); REPLICATION/CONNECT_TIMEOUT; WINDOW_HOURS(48); DRILL monthly + 95%/99% thresholds; bias gradient fire≤roster-change≤standing.
  • CEWPOS-native 3D view-form: a kill-switch pendulum that is heavy on the FIRE side (one hand tips it) and stiff on the UN-FIRE side (needs a majority arc to swing back); the disk halt-latch renders as a fused red cell with exit-code-42 tombstone, and the steward backstop appears only when the live-set shell shrinks below 3.

3.4 Child Safety / restrictive floor — COVERED

  • Repos: Registry (Q1–Q7 ratified rulings, age-assurance ladder, mDL), Server (binary AgeBand + watchlist + minor-stewardship), NodeCore (structural trust-graph block, PG-13 floor, CSAM DBs, legal mappings), Persist (AgeBand ratchet, CSAM legal bases — feat-306 branch), Agent (prohibitions: age_verification, grooming/coordinated-campaign Tier4-5), Verify (downstream WiseBus NEVER_ALLOWED floor only), Edge (FastPathLegalBasis TVEC/GIFCT/NCMEC + LocationProof≤7), Lens (ABSENT — only fail-secure scoring floor).
  • Objects: AgeBand(Minor/Adult)/AssuranceLevel(Self<Provider<Government)/ContentClass+gate_content_for; age_assurance:*/age_self_declared:{band} (witness-reserved); minor-stewardship delegates_to; WatchlistEnable/Class(Csam)/Mode; content_class:adult gate; capacity_assurance; LegalBasis::{NcmecCsam,PerceptualHashCsam,AvmsdAgeInappropriate}; MultimediaConfig.age_gate_legal_bases; CC 3.4.13 Q1-Q7; PG-13 restrictive floor; ward's-champion.
  • Transformations: unassured=child fail-secure; one-way ratchet (self may declare minor, witness-reserved to exit; tuning may only RAISE protection); minor content born at smallest cohort (one rung tighter); structural — children's keys lack age_assurance:adult so admission itself blocks adult content; CSAM perceptual-hash→immediate-evict+NCMEC report; age-gate-compose (withdraws+gate, NOT evict); misdeclaration→adjudication NEVER slashing; mDL age_over_18 selective disclosure ranked above ID-scan.
  • Knobs: developmental bands (under-13/13-15/16-17/adult or C/T/A); assurance rungs (BE=self, EXIT=≥provider:adult, STEWARD=provider:adult+relationship→government); immediate vs age-gate legal bases; counter-notice windows; LocationProof resolution≤7; co-stewardship M-of-N; PG-13/PARTIAL caps.
  • CEWPOS-native 3D view-form: a protective floor plate under every content cell that can only ratchet UP — minor cells render inside a tighter inner membrane (self/family) with adult-content doors shown welded shut unless a witness-rung (provider/government) key is presented; CSAM matches drop the cell through a one-way hard-delete trapdoor.

3.5 Voting / Ratification — COVERED

  • Repos: NodeCore (weighted_aggregate→PromotionAttestation, judge/rubric calibration), Registry (§11.2 amendment, 1-of-6 veto, entrenchment), Persist (VoteEnvelope/consensus_protocol/canonical flip), Verify (entrenched consensus_protocol, partner_record, doc_integrity), Server (founder genesis entrench, reactivation proof), Edge (AccordCarrier 2-of-3, WholenessWitness/AntiRollback), Agent (credit-weighted WA consensus, partnership approval, OAuth review), Lens (alert ack/resolve + cross-peer attestation = closest analog).
  • Objects: VoteEnvelope/Verdict(approve/reject/abstain)/VoteWeight(credits×expertise×tier)/approval_ratio; PromotionAttestation(is_canonical flip); consensus_protocol(+_entrenched); WitnessSet; §11.2 PROPOSAL→N=3→WA quorum→reconsideration→1-of-6 sign-off; doc_integrity; CreditGenerationPolicy/PartnershipOutcomeType.
  • Transformations: P4 signed Vote→P7 weighted aggregate→per-verdict weight sums→approval_ratio→caller threshold→canonical promotion in one tx; any single 1-of-6 signer VETOes by refusing; entrenched surfaces need MAJOR bump + dedicated 2-of-3 accord; supersedes authorized by prior roster's quorum.
  • Knobs: minimum_quorum (BelowQuorum fail-secure), VoteWeight multipliers, active-tier N, witness-diversity N(3), reversal-rate(>25%)→judge_drift, truth-grounding multiplier per subject, seed-decay, $1 bond, open-vocab collision (Levenshtein≤2, 90d reclaim).
  • CEWPOS-native 3D view-form: a ratification ledger spiral — each Vote attestation stacks by effective weight, the promotion threshold draws as a luminous waterline, and the is_canonical flip lights the whole stack; entrenched rows wear a constitutional padlock that only a separate 2-of-3 accord ring can open.

3.6 Media (blobs, attachments) — COVERED

  • Repos: Persist (BlobBody/Fountain/holder-directory/KeyGrant/at-rest cascade), NodeCore (Inline16MiB/External, ratings/classes, key_grant, takedown), Registry (external_content sub_kinds, holds_bytes emission, wrap_algorithm v2), Edge (ExternalRefWithAcl, blob-swarm, CDN-edge, FountainConfig), Verify (§19 holonomic fountain/av/aggregation), Server (holds_bytes provenance; blob ingest DEFERRED to NodeCore seam), Agent (vision/document ingest + media-gen adapters), Lens (JSONB context blobs + public_sample/partner_access exposure ACL).
  • Objects: BlobBody(Inline/External/ChunkDag); BlobStorage.list_holders/holds_bytes:sha256; FountainManifestV1/SymbolV1/FountainConfig; KeyGrant/KeyGrantScope/KeyValidityWindow; WRAP_ALGORITHM_V2; MultimediaConfig; content_rating:{scheme}/content_class/cw_class; ExternalRefWithAcl; SwarmConfig.
  • Transformations: put_blob/get_range; content-addressed SHA identity + holds_bytes provenance; FountainTier keep-count under PressureTier (graceful degrade→EnvelopeOnly); per-write/epoch DEK wrap v2 (X25519+ML-KEM-768 mandatory); external bytes ride publisher CDN (edge doesn't fetch, ACL+hash+expiry gate); swarm pick-fastest + endgame + dishonest-strike.
  • Knobs: max-inline bytes (16 MiB), FountainTier/n_source/k_repair/symbol_size/min_viable_symbols, retention_priority, holds_bytes TTL(24h)/downweight, swarm in-flight/strike/timeout, disk_budget L0/L1, immediate vs counter-notice takedown windows, is_ai_generated mandatory ≥community, alt_text/transcript/captions.
  • CEWPOS-native 3D view-form: a content-addressed constellation — each blob a SHA-keyed node, its holder set drawn as orbiting holds_bytes satellites that dim/fall off past TTL, FEC symbols rendered as a shrinking ring under disk pressure (Full→T5→EnvelopeOnly), and the DEK wrap shown as a per-recipient sealed lock.

3.7 Social Feed + Video / Live Streaming — COVERED

  • Repos: Persist (stream chunks/STH/epoch-DEK/delivery_receipt/seal_stream), NodeCore (compose_*_feed, live_stream sub_kind, user-algorithm presets), Registry (delivery_mode pull/push, listed:public, history_on_join, epoch-DEK cascade, topical_relation), Edge (subscribe_feed, realtime_av double-AEAD chunks, AV1/Opus codecs, ALM tree, SFU relay, MLS rekey, ReceiverLayerPolicy), Verify (§19 SealedAvChunk/ALM/aggregation), Server (DEFERRED to NodeCore seam; client FederationEventStream + AV bench only), Agent (channel SOCIAL surfaces + reddit/bird; video file-based), Lens (@streaming_step trace events + single-agent live viewer; no audience broadcast).
  • Objects: put_blob_chunk/seal_stream/federation_stream_chunks/sth; KeyGrantScope::{SubscriptionTier,StreamEpoch}/delivery_receipt:{stream_id}; compose_local/community/global_feed/FeedItem/ItemActions; AvDispatcher/SealedAvChunk/ReceiverLayerPolicy/Av1EncoderConfig/OpusEncoderConfig/AlmJoinPlanner/MlsSession; delivery_mode:{pull|push}/topical_relation:{kind}/live_stream.
  • Transformations: K=64/T=2s STH publish; epoch DEK rotate (~60s/Nth chunk); subscribe-while-live via attestation; signed delivery ack vs published root; community = "a stream its members subscribe to"; inner E2E EpochDek + outer per-link transit seal; SVC layer admits() drops above-policy chunks; ALM reparent on 1500ms parent silence; user-controlled algorithm = tuple(depth,cohort,quality,freshness,rating,subscriptions).
  • Knobs: stream chunk size (1 MiB), STH cadence, epoch rekey, ReceiverLayerPolicy (spatial/temporal/quality), codec_id, ALM reachability(0.5)/backups(2)/heal timers, relay capacity, MLS ciphersuite, feed quality threshold + freshness decay + rating/class filter + CW/publisher subscriptions + user-algorithm presets.
  • CEWPOS-native 3D view-form: a live cell-broadcast tree — the publisher cell at the apex, epoch-DEK shells pulsing as they rotate, the ALM relay fan-out rendered as a self-healing branch network (silenced parents wither, backups graft), and each subscriber's SVC layer-cap shown as a throughput aperture; the feed itself is a cohort-bucketed lattice tuned by the viewer's algorithm preset.

3.8 EigenTrust Policy Management (global-from-local reputation) — COVERED

  • Repos: Registry (Policy C explicit weighted-graph EigenTrust + Policy A-I library), Lens (federation N_eff Kish capacity ceiling = structural global-from-local), Verify (recursive_trust_bootstrap + reputation propagation/slashing), NodeCore (weighted_aggregate over scores + registry_vouch transitive), Persist (resolve_trust BFS — NOT eigenvector, explicit substitute), Edge (TrustGraph budget-halving walk + deterministic_topology scoring), Server (capacity scorer N_eff→capacity:* attestations), Agent (Commons Credits + Coherence Stake/N_eff).
  • Objects: Policy A-I (esp. Policy C weighted-graph); 17-dim constraint vector + N_eff_PR/N_eff_H + federation capacity ceiling; recursive_trust_bootstrap/BootstrapVerdict/WitnessRelation; weighted_aggregate/TrustEdge/registry_vouch/trust_grant(TrustPurpose); resolve_trust; TrustGraph.weight+deterministic_topology; Commons Credits/AgentCreditSummary(k_eff).
  • Transformations: transitive-trust propagation weighted by canonical-bootstrap distance with per-hop confidence decay (Policy C); local per-agent features→z-scored constraint vectors→eigenvalue spectrum→N_eff diversity ceiling that bounds federation capacity (global CANNOT exceed cohort collective diversity); bounded cycle-free witness walk (trust≠membership N1, BootstrapVerdict structurally can't say 'admitted'); rogue-attestation R1 slashing propagates downstream; reputation = non-transferable decaying credit.
  • Knobs: trust_threshold + recursion depth (0/1/2/3, multiplier curve 1×/4×/20×/100×); MAX_DELEGATION_DEPTH(16)/MAX_WITNESS_CHAIN_LEN(5); TrustGrant.weight(0..255); hardware_class trust-multipliers; N_eff window/sample_gate(20)/target_n_eff(8.0); published-signal discretization; ciris-canonical default-trust re-rootable.
  • CEWPOS-native 3D view-form: a trust-diffusion field — each key glows by its locally-computed score, signed delegates_to/vouch edges carry color outward with per-hop fade, and a translucent N_eff ceiling dome caps how bright any cell can get (global-from-local: collective diversity is the literal lid); rogue slashing shows as a darkening wave propagating down the edge graph.

4. "AND MORE" — knob/capability families beyond the named list

  • Licensing & autonomy gating — LicenseStatus/Type, AutonomyTier A0-A4, capability/capabilities_denied, DeploymentConstraints, mandatory_disclosure, license JWT hybrid gate (Verify/Registry).
  • Revocation — RevocationChecker (unknown=revoked), monotonic anti-rollback revision, MassRevoke + dry-run, withdraws forward-only, CRL (Verify/Registry/Lens).
  • Delegation, sessions & auth — DelegatedGrant/device-grant (RFC8628), DELEGATION_REACHABILITY_DEPTH, UCAN-style attenuation (child⊆parent, depth-cap 5), PBKDF2 sessions, OAuth/SSO, JWT, mTLS bearer, UserRole×Permission lattices (Server/Edge/Registry/Agent/Lens).
  • Separation-of-powers — scope::INFRA vs AGENCY cryptographic split (a fabric node can't self-appoint agency) (Server/Verify).
  • Radio / LoRa transport diversity — RNode PHY (freq/BW/SF/CR/TX/airtime), Reticulum multi-interface (TCP/UDP/Local/I2P/AutoInterface), NAT-relay, store-and-forward (Edge/Server).
  • AV codecs, epoch-rekey, MLS, ALM, SFU relay, blob-swarm — AV1/Opus encoders, double-seal nonce derivation, MLS commit_add/remove, ALM self-heal, BitTorrent-style swarm with dishonest-strike (Edge/Verify).
  • Retention / eviction / disk-pressure / cache — RetentionPolicy sacred floor, PressureTier→PressureAction, FountainTier degradation, LRU CacheConfig, decay-half-life eviction, utilization watermark (Persist/NodeCore).
  • SAS / out-of-band peer verification — peer_sas words(5)/digits(6), prime_peer (Edge).
  • Halt / kill-switch latch — HALT_LATCH_FILE + exit(42) + reactivation proof gate; AccordHalt replicate-before-latch (Server).
  • Lifecycle ceremonies — establish_identity/add_occurrence, family/community create+member ceremonies, location_proof, bilateral partnership, consent records (Registry/NodeCore).
  • Role hierarchy & org records — SystemRole/OrgRole/OrgType, parent_org DAG, multi-org membership, Community→Partner upgrade (Registry).
  • Capacity scoring / coherence-ratchet / manifold-conformity / N_eff — 5-factor C·I·R·I·S, divergence/drift/override/hash-chain detectors, cohort centroids, detection-as-records (validated-not-adjudicated) (Lens).
  • PII scrubbing / privacy / DSAR / geo-coarsening — XLM-R NER, SCRUB_FIELDS allowlist, cryptographic scrub-envelope, right-to-erasure, 0.5° geo grid (Lens/Agent/Registry).
  • Secrets store — MasterKeyRef (software/TPM), detection patterns + UUID-replace, AES-256-GCM per-secret, auto_decapsulate (Persist/Agent).
  • Config-as-CEG — ConfigScope (Local/Identity), ConfigEntry version chain, owner-gated writes, reconciler republish (Server/Persist/Agent).
  • Hardware roots / attestation — HardwareType/hardware_class taxonomy + trust multipliers, sealed signers (no re-mint), TPM plugin (ABI v3), Play Integrity/App Attest, USB-wrapped custody (Verify/Registry/Server).
  • Transparency / audit log — RFC6962 Merkle STH + witness cosigners, audit≡CEG canonical-hash, build/SLSA attestation, doc_integrity two-person rule (Verify/Registry/Agent).
  • Wise-Authority deferral routing — DeferralRequest/Response, GuidanceRequest, broadcast + domain_hint, diversity-aware bounded selection (NodeCore/Agent).
  • Foundation-model judge + machine safety criteria — pinned judge model/prompt-sha, 5 criterion kinds, operationalization gate, reversal-rate drift, Sigstore bundles (NodeCore).
  • Service marketplace & messaging — ServiceKind/Endpoint/usage/deprecation, notification/assistance/commitment/improvement envelopes (NodeCore).
  • Decision hierarchy — Goal/Approach/Method/Progress-Measure upward DAG, substrate_rung, Goodhart-resistance (NodeCore).
  • Telemetry / OTLP / scaling tiers / rate-limiting / trace-ACL — collection cadence, downsampling tiers, rate-zones, AccessLevel + partner_access (Lens/Registry).
  • Commons Credits economy — non-transferable decaying reputation, k_eff diversity, gratitude_signal, gas-sponsorship, credit gate (Agent).
  • Anonymous tier (v2) — blinded signing keys, onion-3-hop write, LRU-only mandatory-infra eviction (NodeCore).
  • Runtime/pipeline control — single-step StepPoint×10, ResourceLimit→ResourceAction, cognitive-state behaviors, consensual shutdown (Agent).
  • Cohort routing & detection — cohort cell taxonomy, declared-vs-inferred mismatch, fail-secure 'general' fallback, version-stamped aggregation (Lens).

5. TIER ROLL-UP (containment hierarchy)

  • constitutional (the un-amendable floor; humans-only, hardware-rooted) — HumanityAccord 2-of-3 triple + key-set (non-federation-modifiable); accord live-quorum / fire-floor-of-1 bias gradient / L_FLOOR / recovery_supersede; HALT_LATCH_FILE + exit(42) + reactivation proof + CUSTODY_TIER_PORTABLE_2FA; consensus_protocol_entrenched + 1-of-6 veto + meta-amendment entrenchment; Child-safety Q1-Q7 non-derogable restrictive floor + presumption-of-sovereignty; NEVER_ALLOWED / PROHIBITED_CAPABILITIES + Accord lockdown; scope::INFRA-vs-AGENCY split; SYSTEM_ADMIN @ciris.ai; QuorumPolicy 2·M>N + DeadlockPolicy; detection-as-records / SCRUB_FIELDS allowlist / fail-secure cohort fallback (Lens floors); signed-audit, EMERGENCY_SHUTDOWN_PUBLIC_KEY.
  • federation — trust_threshold/recursion + tier_recursion_depths; Policy A-I EigenTrust library (esp. C); founder/locality/witness quorum + partner_record; DimensionAdmissionPolicy reserved prefixes; replication runtime + EnvelopeKind; revocations + monotonic revision + stale-cache ceiling; transparency log + SLSA; N_eff capacity ceiling + coherence-ratchet detectors + cohort attestation; multi-region service endpoints; HYBRID_REQUIRED + hardware_class; takedown legal_basis + content rating/class; license tiers + effective-capability.
  • community — consensus_protocol governance + VoteWeight; four-layer moderation + reverse-quorum 48h + watchlist:{id} + moderation_track_record; PG-13/cw_class/content warning floors; ConsentStream + group DEK/MLS rekey; AdaptiveFilterConfig + UserTrustProfile + ConversationHealth; OrgRole + multi-org membership; mixnet cover-traffic scopes; expertise/credits accrual; locality-scaled quorum.
  • owner-self (Identity-tier config) — EncryptedKVStore passphrase + self/family per-write DEK; ConfigScope::Identity entries; trust_threshold (inbound gate) + install_trust_resolver; peer directory CRUD + EdgePeerTrust/Policy + SAS; minor-stewardship + age_self_declared + consent:* + subject_key_ids + DSAR/erasure; DelegationPolicy/Scope/Rule mandates; user-algorithm feed presets; AgentTemplate + Stewardship Tier; wallet trust-tiers; display_name/scope-privacy announce suppression; LLM/viz/client-UX settings.
  • node — CacheConfig + RetentionPolicy + DiskPressureConfig + queue depth; Reticulum/HTTP transport + radio PHY + store-and-forward + DispatcherConfig; agent_mode/mode + disk_budget L0/L1 + intake/eviction; scorer cadences + ConfigScope::Local; sessions/PBKDF2 + JWT/mTLS/DB/ports/KEY_STORAGE_MODE; secrets master-key + sensitivity; telemetry/OTLP + rate-limit zones + scaling tiers; capacity-scoring windows/thresholds + PII scrubber version + RoutingDecision; Cargo build features; probe-pattern detector thresholds; blob-swarm tuning; CIRIS_DATA_DIR/--home convention root.
  • both (the Local↔Identity config axis itself) — ConfigScope, ConfigValue union, ConfigEntry, and the client config/policy screens — the dial that decides whether any given knob is a node-tier or owner-self-tier attestation. This axis is the CEWPOS tier-selection primitive.