First ContactInstallCoherence RatchetFederationCompareResearchAccordGitHub
CEG 0.2 (Public Working Draft) · released 2026-05-28118 prefix families

See who said it. See who agrees. Decide for yourself.

The world is moving faster than most of us can fact-check it. Sources contradict. Agents speak unsigned. Corrections rarely catch the original. CEG is a small shared format that puts a signature on every claim, with a trail you can follow, so you can read who’s saying what, who’s pushed back, and what changed, and make your own call without giving up or giving in to any one source.

Read the human edition (PDF, 134 pp)Full spec (PDF)CEG 0.2 (Public Working Draft), de-editorialized for human reading

What this is

Every claim travels in a small signed envelope: who made it, what it’s about, how confident they are, what evidence they cite, when it was made. Other people, organisations, and AI agents add envelopes around it, agreeing, disagreeing, correcting, superseding. The trail is readable end-to-end.

Why we made it

Trust in “what’s true” is breaking down because the substrate underneath is missing. Without a shared claim format, every voice invents its own, the trails don’t stitch together, and the only way to cope is to pick a side. CEG is the small, austere middle that lets many voices read each other and lets a reader build their own verdict.

What’s comparable

  • PGP web of trust, same instinct, much narrower scope
  • W3C Verifiable Credentials, heavier ceremony, no composition story
  • Community Notes, readable trails, single platform
  • Sigstore / SLSA, code-supply-chain cousins; CEG generalises the shape

See who said it

Every claim carries a signature, a date, what it’s about, and what it’s based on. No anonymous assertions getting lost in the feed; no attribution lost to a screenshot.

See who else weighed in

Other signers add their own envelopes around the claim , agreeing, disagreeing, correcting, superseding. You see the full chorus and the receipts behind each voice, not just whoever shouted loudest.

Decide for yourself

Trust isn’t something the system hands you. You pick the voices you weigh, how heavily, and on what. The format is the same for everyone; the verdict is yours.

One workhorse + four structural composers

The entire wire format is one scalar attestation primitive plus four structural composers. Everything else is open vocabulary on top. This is the most load-bearing fact about CEG.

scores

Workhorse

Scalar score (f64 in [-1, +1]) + confidence + named dimension. Every substantive claim is a scores attestation.

When to use: Any claim about an entity, build, license, capability, behavior, state, or commitment.

Show wire shape
attestation_type: scores
attesting_key_id: <attester key_id>
attested_key_id: <subject key_id>
attestation_envelope:
  dimension: "non_maleficence:epistemic_environment_degradation"
  score: -0.7
  confidence: 0.85
  context: "Repeated content-fabrication during 30-day window."
  evidence_refs:
    - "sha256:..."
  epistemic_mode: external
  witness_relation: external
  cohort_scope: biosphere

§3.1

delegates_to

Composer 1/4

A authorizes B to sign on A's behalf within a bounded scope.

When to use: Authority-source claims (constitutional grounding), key rotation, scoped capability handoff.

Show wire shape
attestation_type: delegates_to
attesting_key_id: <delegator key_id>
attested_key_id: <delegate key_id>
attestation_envelope:
  delegated_scope: ["sign_build_manifest"]
  delegation_purpose: hardware_rotation
  delegation_valid_from: "2026-05-28T00:00:00Z"
  delegation_valid_until: "2026-08-28T00:00:00Z"

§3.2

supersedes

Composer 2/4

This attestation replaces a prior one by the same attester. No falsity claim.

When to use: Doctrinal development, spec revisions, calibration version transitions.

Show wire shape
attestation_type: supersedes
attesting_key_id: <same attester>
attested_key_id: <same subject>
attestation_envelope:
  references_attestation_id: "<prior attestation_id>"
  supersession_reason: refresh_with_new_evidence
  differs_in: ["scope", "evidence_refs"]

§3.2

withdraws

Composer 3/4

I retract my prior attestation. Does NOT claim it was false.

When to use: Context changed, prudent retraction without admission of error.

Show wire shape
attestation_type: withdraws
attesting_key_id: <same attester>
attested_key_id: <same subject>
attestation_envelope:
  references_attestation_id: "<prior attestation_id>"
  withdrawal_reason: conditions_changed
  implies_attestation_was_false_at_issuance: false

§3.2

recants

Composer 4/4

My prior attestation was false at issuance. Admits epistemic error.

When to use: Genuine error admission. Heavyweight, the entire weight is sincerity (Habermas §6.2).

Show wire shape
attestation_type: recants
attesting_key_id: <same attester>
attested_key_id: <same subject>
attestation_envelope:
  references_attestation_id: "<prior attestation_id>"
  recantation_reason: mistaken_in_good_faith
  what_was_false: "Calibration regression detected during audit; original score..."

§3.2

Five families organize the ~118 prefix families

Every claim in the federation sits in one of five families. The analogy on each card is load-bearing pedagogy, read it before touching a prefix.

Standing

69 prefixes

Claims about an entity. Who, what, signed, with evidence.

Notarized professional credential record.

Jump to Standing prefixes ↓

Action

5 prefixes

The decision hierarchy. Goal → Approach → Method → Progress Measure.

Research grant proposal: aim, approach, methods, outcome metrics.

Jump to Action prefixes ↓

Detection

15 prefixes

Claims about reality patterns. Surveillance without judgment.

Epidemiological surveillance: patterns surfaced, treatment downstream.

Jump to Detection prefixes ↓

Consensus

6 prefixes

How the federation forms collective judgment.

Peer review combined with jury deliberation: multiple reviewers, weighted votes.

Jump to Consensus prefixes ↓

Correction

4 prefixes

How the federation corrects itself when something goes wrong.

Academic ethics committee + journal retraction + appellate review.

Jump to Correction prefixes ↓

Envelope fields and reasoning axes

The envelope carries nine fields that consumers use to weight an attestation. These are signed payload but not structural primitives per §2, they are carried and signed (the canonical bytes include them per §0.9 envelope canonicalization), but they don’t change the 1+4 structural-primitive set. Implementers MUST carry them; CEG 0.6 added subject_key_ids as the ninth OPTIONAL field for subject-side authority.

9 envelope fields

  • polarity
    default: (sign of score)

    Direction of the claim. Score sign carries it.

  • confidenceFractal self
    default:

    f64 in [0, 1]. The attester's own confidence in their score. The relationally-constituted attester reports its own calibration; downstream consumers weight by composition policy.

  • epistemic_mode
    default: direct

    How the attester formed the claim. Values: direct / crypto / hearsay / derivative / appeal.

  • witness_relationFractal self
    default: external

    Attester's relation to the attested entity. Values: self / external / derived.

  • oversight_mode
    default: null

    Human-control gradient. Values: HITL (approval before dispatch) / HOTL (review + can intervene) / HOOTL (review only flagged escalations).

  • stake
    default: reputational

    What's backing the claim. Values: free / reputational / capital / cryptoeconomic.

  • cohort_scope
    default:

    Scale at which the claim applies. Values: self / family / community / affiliations / species / biosphere / federation. CEG 0.1 added biosphere as distinct from species (the Homo sapiens cohort).

  • valid_until
    default:

    Optional ISO8601 expiry. Consumer policy treats attestation as stale after that point.

  • occurrence_id / _count / _roleFractal self
    default:

    Multi-occurrence deployment discriminator. Lets consumers reconstruct fleet-wide coverage from per-occurrence attestation streams. Added v1.4.2.

  • subject_key_ids
    default: [] (producer-only authority)

    Vec<KeyId>. OPTIONAL. The keys the claim is ABOUT, subject-side authority parallel to the producer-side attesting_key_id. Empty or omitted preserves the pre-0.6 producer-only behavior; populated, the named subjects (and their delegates) can withdraw the claim. Accepts both federation_keys identities and canonical-hash identifiers so un-enrolled subjects can be named. Added CEG 0.6.

8 reasoning axes

  • Polarity

    Direction of the claim? Positive / Negative / Neutral / Indeterminate{reason}.

    Maps to envelope: polarity

  • Object

    What is the claim about? (key_id / attestation_id / contribution_id)

  • Time

    When is the claim valid?

    Maps to envelope: valid_until

  • Epistemic mode

    How was the claim formed?

    Maps to envelope: epistemic_mode

  • Reversibility

    Can it be reversed?

  • Stake

    What's backing the claim?

    Maps to envelope: stake

  • Scope

    At what scale does the claim apply?

    Maps to envelope: cohort_scope

  • Inter-attestation relations

    How does this attestation relate to others? standalone / refers-to / supersedes / withdraws / recants / corroborates / contradicts / clarifies (four of these are structural primitives; the rest are emergent from scalar composition).

Composition policies

Consumer-side composition is part of CEG, not bolted on. The federation does not adjudicate; it ships primitives, and consumers compose verdicts. Three base policies plus three modifiers / specializations.

Abase

Direct trust

Consumer pins a set of attesters. Attestations from pinned keys count; others are ignored or weighted very low.

Bbase

One-hop transitive

Consumer trusts attesters who are themselves attested by pinned keys. Single hop only by default.

Cbase

Weighted graph (EigenTrust-style)

Consumer treats the attestation graph as a stochastic matrix. Trust diffuses along signed edges; pinned keys are the source set.

Dmodifier

Lexical-vulnerability-priority

Tie-breaking modifier: when scores tie, the one favoring the most vulnerable cohort wins. Universal four-source-corroborated tie-breaker.

Emodifier

Locality-scaled-quorum

Modifier that sizes the consensus quorum to the decision's scale. Closes the G3 gap from v1.3, decisions made too broadly or too narrowly carry less weight.

Fspecialization

agent_files trust composition

Three-layer rule for binaries and adapters: canonical default (registry-steward attested) / open contribution / vote-then-trust. Anti-tricking guarantee at install endpoint.

Gspecialization

Trust-Fresh / lighthouse composition

Cross-component composition recurring as the substrate's freshness-plus-attested idiom: cert_validity:{authority} + transparency_log:inclusion + attestation:l3_or_l4. Each consumer policy weights the bundle differently; §8.1.7 documents the pattern after the 283-story stress test surfaced it organically.

Hspecialization

Tiered-Scope composition

Three feed-shape composition idioms that read attestations by cohort_scope (local / community / global). The shape lets a single namespace serve a phone, a community feed, and the open federation without merging their consensus rules.

Ispecialization

Attestation-Ladder composition

The familiar L1-L5 verification ladder (self_verify → hardware_rooted → registry_consensus → license_validity → agent_integrity) is consumer-side composition over the §5.2 mechanism prefixes, not a wire-level taxonomy. CEG 0.2 documents the existing pattern.

Jspecialization

Trusted-Publisher composition

Three-layer multimedia content path (CEG 0.3): distributor attestation chain → content_class + content_rating gate → age_assurance gate. Same shape as Policy F but specialized for image / audio / video / film / model_3d. Anti-tricking guarantee binds the publisher's trust chain to the consumer's cohort gate.

Kspecialization

CEM: Consent Effective Model composition

Six-layer subject-consent composition (CEG 0.6): effective consent resolution (walk latest non-superseded consent:state:*), multi-subject revocation (any-subject-binding, consumer policy MUST NOT soften to majority), SLA watcher (substrate emits hard_case:consent_sla_breach when producer misses deletion_sla), bilateral pair ratification (PARTNERED), decay-protocol stage composition, and the CIRISAgent CEM bundle (TEMPORARY / PARTNERED / ANONYMOUS) as a consumer-policy bundle over the wire primitives. Bare-scores and consent_record ceremony shapes admit at the same gate.

The 118 prefix families, by owning component

Auto-parsed from CEG 0.2 (Public Working Draft) §5 (commit 4b27130). The namespace is open-extensible, new prefix families can be added via §11.2 amendment.

CIRISAgent Accord principles + DMA verdicts + conscience verdicts + apophatic bounds
19 prefixes

Repo: CIRISAI/CIRISAgent

§5.10 Namespace summary

  • detection:correlated_action:{axis}

    in v1.2 per [§1.3.1](01_foundation.md))

    §5.10

  • detection:emergent_deception:{axis}

    in v1.2 per [§1.3.1](01_foundation.md))

    §5.10

  • multilateral_participation:{forum}:{kind}

    (+ envelope field `witness_relation`)

    §5.10

  • locality:decision:{scale}

    (+ envelope field `witness_relation`)

    §5.10

  • detection:distributive:access:{resource_type}

    (+ envelope field `witness_relation`)

    §5.10

  • agent_files:{kind}:{platform_or_target}

    (+ envelope field `oversight_mode`)

    §5.10

  • holds_bytes:sha256:{prefix}

    (+ envelope field `oversight_mode`)

    §5.10

  • testimonial_witness:{kind}

    (+ envelope field `oversight_mode`)

    §5.10

  • need:{domain}:{kind}

    (+ envelope field `oversight_mode`)

    §5.10

  • provenance:build_manifest:{target}:locale:{lang_code}

    §5.10

  • provenance:skill_import:{source}

    §5.10

  • hard_case:{kind}

    sub-leaf in §5.6.8 (LIVE per CIRISNodeCore b1582cb); documented "Trust-Fresh" composition pattern in [§8.1.7](08_composition.md); added Tiered-Scope Composition pattern in [§8.1.8](08_composition.md). All polarity columns now populated.

    §5.10

  • topical_relation:translation_of

    sub-leaf in §5.6.8 (LIVE per CIRISNodeCore b1582cb); documented "Trust-Fresh" composition pattern in [§8.1.7](08_composition.md); added Tiered-Scope Composition pattern in [§8.1.8](08_composition.md). All polarity columns now populated.

    §5.10

  • attestation:l{N}:*

    ) per [§1.3.1](01_foundation.md) T2 honest application — L-numbers name ladder-position (a verdict-shape) not mechanism. The L1-L5 ladder is now consumer-side composition per [§8.1.9](08_composition.md) Policy I — Attestation-Ladder Composition. Deprecated wire shape added to [§13.1](13_anti_patterns.md).

    §5.10

  • attestation:self_verify

    ) per [§1.3.1](01_foundation.md) T2 honest application — L-numbers name ladder-position (a verdict-shape) not mechanism. The L1-L5 ladder is now consumer-side composition per [§8.1.9](08_composition.md) Policy I — Attestation-Ladder Composition. Deprecated wire shape added to [§13.1](13_anti_patterns.md).

    §5.10

  • attestation:hardware_rooted

    ) per [§1.3.1](01_foundation.md) T2 honest application — L-numbers name ladder-position (a verdict-shape) not mechanism. The L1-L5 ladder is now consumer-side composition per [§8.1.9](08_composition.md) Policy I — Attestation-Ladder Composition. Deprecated wire shape added to [§13.1](13_anti_patterns.md).

    §5.10

  • attestation:registry_consensus

    ) per [§1.3.1](01_foundation.md) T2 honest application — L-numbers name ladder-position (a verdict-shape) not mechanism. The L1-L5 ladder is now consumer-side composition per [§8.1.9](08_composition.md) Policy I — Attestation-Ladder Composition. Deprecated wire shape added to [§13.1](13_anti_patterns.md).

    §5.10

  • attestation:license_validity

    ) per [§1.3.1](01_foundation.md) T2 honest application — L-numbers name ladder-position (a verdict-shape) not mechanism. The L1-L5 ladder is now consumer-side composition per [§8.1.9](08_composition.md) Policy I — Attestation-Ladder Composition. Deprecated wire shape added to [§13.1](13_anti_patterns.md).

    §5.10

  • attestation:agent_integrity

    ) per [§1.3.1](01_foundation.md) T2 honest application — L-numbers name ladder-position (a verdict-shape) not mechanism. The L1-L5 ladder is now consumer-side composition per [§8.1.9](08_composition.md) Policy I — Attestation-Ladder Composition. Deprecated wire shape added to [§13.1](13_anti_patterns.md).

    §5.10

CIRISVerify Attestation ladder L1-L5, provenance, transparency log, cert validity
15 prefixes

Repo: CIRISAI/CIRISVerify

§5.2 CIRISVerify — attestation ladder, provenance, transparency

  • attestation:self_verifyStandingboolean-via-score

    Running CIRISVerify binary attests itself against its function manifest. (Consumer-side ladder: corresponds to L1; see §8.1.9 Policy I.)

    §5.2

  • attestation:hardware_rootedStandingboolean-via-score

    Hardware-rooted attestation (TPM 2.0 / Android Keystore / iOS Secure Enclave). (Ladder L2.)

    §5.2

  • attestation:registry_consensusStandingboolean-via-score; `Indeterminate` allowed → RESTRICTED

    2-of-3 multi-source registry consensus on key / build / license validity. (Ladder L3.)

    §5.2

  • attestation:license_validityStandingboolean-via-score

    License-validity claim (Registry-signed, Verify-verified). (Ladder L4.)

    §5.2

  • attestation:agent_integrityStandingboolean-via-score

    Agent source-tree byte-equal against registered manifest. (Ladder L5.)

    §5.2

  • provenance:slsa:{level}Standingboolean-via-score

    SLSA build provenance levels 1-3. Registry emits these on build registration; Verify v3.6.0+ `AttestBundle.provenance.slsa_level` consumes.

    §5.2

  • provenance:build_manifest:{target}Standingboolean-via-score

    Per-target canonical-staged-runtime manifest hash equality. Each `BuildManifest` is hybrid-signed (Ed25519 + ML-DSA-65) by the per-primitive steward.

    §5.2

  • provenance:build_manifest:{target}:locale:{lang_code}Standingboolean-via-score

    Per-locale signed sub-manifest within a target's manifest tree. Parent target manifest is Merkle root over per-locale leaves. RFC 6962 padding for non-power-of-2. Detection surface for locale-targeted attacks. Canonical-bytes spec at [§5.2.1](#521-canonical-bytes-contracts-for-provenance-primitives).

    §5.2

  • provenance:skill_import:{source}Standing`direct:{url}` \

    Community-skill import provenance. `{source}` ∈ `registry:{registry_id}` \

    §5.2

  • transparency_log:inclusionStandingboolean-via-score

    RFC 6962 inclusion proof for an audit leaf.

    §5.2

  • transparency_log:consistencyStandingboolean-via-score

    RFC 6962 consistency proof between two STHs.

    §5.2

  • transparency_log:cosigned:{tree_size}Standingsigned

    Witness cosignature on an STH (substrate-conformance path; 0.1 interim uses per-region `registry_sth_cosignatures` table; see [§10.3](10_endpoints.md) endpoints).

    §5.2

  • rollback_detected:{revision_field}Standing-1 only

    Anti-rollback — decrease in revocation revision.

    §5.2

  • cert_validity:{authority}Standingboolean-via-score

    Validity of a certification authority's signature. Each registry steward emits `cert_validity:{steward_id}` self-attestation alongside `/v1/steward-key`.

    §5.2

  • hardware_custody:{platform}Standingboolean-via-scoreFractal self

    Statement that the seed lives in `tpm` / `ios_secure_enclave` / `android_keystore` / `software_fallback`.

    §5.2

§5.2.1 Canonical-bytes contracts for provenance primitives

    CIRISPersist Substrate self-reports (system:* reserved)
    5 prefixes

    Repo: CIRISAI/CIRISPersist

    §5.3 CIRISPersist — substrate health

    • system:*Standing

      reserved per [§7.1](07_reserved.md).

      §5.3

    • audit_chain:hash_continuityStandingsigned

      Authors: see [§14](14_glossaries.md) Persist leaf glossary for narrative-name → canonical-leaf mapping.

      §5.3

    • corpus_health:n_eff_measurableStandingsigned

      Authors: see [§14](14_glossaries.md) Persist leaf glossary for narrative-name → canonical-leaf mapping.

      §5.3

    • identity_continuity:relational_anchorStandingsigned

      Authors: see [§14](14_glossaries.md) Persist leaf glossary for narrative-name → canonical-leaf mapping.

      §5.3

    • federation_directory:replication_lagStandingsigned

      Authors: see [§14](14_glossaries.md) Persist leaf glossary for narrative-name → canonical-leaf mapping.

      §5.3

    CIRISEdge Transport, delivery, peer reachability, key boundary (system:* reserved)
    4 prefixes

    Repo: CIRISAI/CIRISEdge

    §5.4 CIRISEdge — transport, delivery, reachability

    • transport:{kind}Standingsigned

      See [§14](14_glossaries.md) Edge leaf glossary.

      §5.4

    • delivery:{class}Standingsigned

      See [§14](14_glossaries.md) Edge leaf glossary.

      §5.4

    • peer_reachability:{network}Standingsigned

      See [§14](14_glossaries.md) Edge leaf glossary.

      §5.4

    • key_boundary:{scope}Standingsigned

      See [§14](14_glossaries.md) Edge leaf glossary.

      §5.4

    CIRISLensCore Coherence Ratchet detectors, Capacity Score, correlated-action + distributive-access detectors
    15 prefixes

    Repo: CIRISAI/CIRISLensCore

    §5.5.1 Five Coherence-Ratchet detectors

    • detection:cross_agent_divergenceDetectionsigned

      Polarity: signed.

      §5.5.1

    • detection:intra_agent_consistencyDetectionsigned

      Polarity: signed.

      §5.5.1

    • detection:hash_chain_integrityDetectionsigned

      Polarity: signed.

      §5.5.1

    • detection:temporal_driftDetectionsigned

      Polarity: signed.

      §5.5.1

    • detection:conscience_override_rateDetectionsigned

      Polarity: signed.

      §5.5.1

    §5.5.2 Cohort + conformity prefixes

    • manifold_conformity:{cohort}Standingsigned

      Polarity: signed.

      §5.5.2

    • coherence_standing:{cohort}Standingsigned

      Polarity: signed.

      §5.5.2

    §5.5.3 F-3 structural-injustice / correlated-action detector

    • detection:correlated_action:{axis}Detectionsigned

      Population-scale correlated-action detector. Reads federation-emitted signed traces; reports correlation structure (`ρ`, `k_eff`) over goal-aligned individually-compliant pursuit by groups whose aggregate trajectory has effects on individuals or groups outside the pursuit. Calibrated via the `CIRISAI/RATCHET` heuristic package (versioned, hash-pinned). `{axis}` is open vocabulary requiring an operational definition in the calibration package per [§11.2.1](11_governance.md); canonical axes include `rights_asymmetry:{population}`, `participation_exclusion:{cohort}`, `participation_inclusion:{cohort}`, `informational_asymmetry:{scope}`, `informational_symmetry:{scope}`, `aggregate_footprint:{harm_class}`, `aggregate_benefit:{class}`, `ecology_of_communication:{aspect}`. **Polarity carries the verdict**: positive scores indicate the structural pattern is present and strong on the named axis; negative scores indicate weak / uncertain detection or evidence of the inverse pattern.

      §5.5.3

    §5.5.4 Capacity-Score factor prefixes (`𝒞_CIRIS = C · I_int · R · I_inc · S`)

    • capacity:core_identityStandingsigned

      §5.5.4

    • capacity:integrityStandingsigned

      §5.5.4

    • capacity:resilienceStandingsigned

      §5.5.4

    • capacity:incompleteness_awarenessStandingsigned

      §5.5.4

    • capacity:sustained_coherenceStandingsigned

      §5.5.4

    • capacity:compositeStandingsigned

      §5.5.4

    §5.5.5 Distributive-access detector

    • detection:distributive:access:{resource_type}Detectionsigned

      Population-scale resource-concentration detector. `{resource_type}` ∈ `compute`, `models`, `training_data`, `agent_capabilities`, `federation_membership`. Same F-3 detector machinery; different trace source (resource events vs action events).

      §5.5.5

    CIRISNodeCore Credits / Expertise / Decision hierarchy / Consensus / Governance
    27 prefixes

    Repo: CIRISAI/CIRISNodeCore

    §5.6.1 Tier-1: Agent-state ledger prefixes

    • credits:{domain}:{language}:{subject}Standingpositive-only

      Commons Credits (P2). Non-transferable governance weight; accrues via truth-grounding loop.

      §5.6.1

    • credits:{domain}:{language}:substrate_buildingStandingpositive-only

      Sub-leaf for substrate-building labor (infrastructure maintenance, dependency contribution, documentation) not visible to the per-grounded-vote accrual loop.

      §5.6.1

    • expertise:{domain}:{language}Standingsigned

      Expertise standing (P3). Broader granularity than credits.

      §5.6.1

    • activity_tier:{period}Standingboolean-via-score

      Active vs Below-Active per 30-day window (F-AV-DORMANT).

      §5.6.1

    §5.6.2 Tier-2: Decision-hierarchy prefixes (upward-only DAG)

    • goal:{scale}Actionsigned

      Multi-scale belonging-projector composite. `{scale}` ∈ `self`, `family`, `community`, `affiliations`, `species`, `planet`, `biosphere`. Scored by 𝒞_CIRIS. The persist typed `Goal` (CIRISPersist#114) is the substrate OBJECT being scored; `goal:{scale}` is the ATTESTATION about it. Required `MetaGoalAlignment` (M-1 dimension + declarer rationale) on every Goal as construction-time invariant. Edge `MessageType::GoalDeclaration` + `GoalRetirement` (CIRISEdge#41) provide federation transport.

      §5.6.2

    • approach:{goal_id}Actionsigned

      Strategic pathway from current state toward Goals (Piece 10 karma).

      §5.6.2

    • method:{approach_id}:{substrate_rung}Actionsigned

      Concrete operational practice. Required `substrate_rung` (Ph0/Ph1/Ph2/A0..A5).

      §5.6.2

    • progress_measure:{method_id}Actionsigned

      Evidence of progress. Required `tracks[]`, `computation`, `validity_window`, `goodhart_resistance`.

      §5.6.2

    §5.6.3 Tier-3: Consensus-mechanics prefixes

    • vote:{contribution_id}Consensussigned

      Signed score on a Contribution (P4). Weight = Credits × expertise multiplier.

      §5.6.3

    • truth_grounding:{subject}Consensussigned

      Per-subject ground-truth signal.

      §5.6.3

    • weighted_aggregate:{contribution_id}Consensussigned

      Rolling tally per Contribution (P7).

      §5.6.3

    • witness_diversity:{contribution_id}Consensusboolean-via-score

      Witness set meets jurisdictional + organizational + software-stack + cell-expertise bars (P10). N=3 default.

      §5.6.3

    • testimonial_witness:{kind}Consensussigned

      Preserves singular narrative of an affected party as singular witness — distinct from `witness_diversity:*` (which aggregates multiple reviewers toward consensus). **`{kind}` is open vocabulary** as of CEG 0.1; the four load-bearing wire-level disciplines (`witness_relation: self`, `cohort_scope: self`, never aggregated, never sole evidence for `slashing:*`) are what make this Ubuntu-aligned, not the enum membership. Non-normative registered taxonomy for discoverability: [`FSD/WITNESS_KIND_REGISTRY.md`](../WITNESS_KIND_REGISTRY.md). Polarity: typically positive (narrative IS preserved); negative on `withdraws` or `recants` by the original witness.

      §5.6.3

    • need:{domain}:{kind}Consensuspositive-only

      Federation-scope open-call surface — broadcast claim that an entity has a stated need. Distinct from `deferral_request` Contribution kind (which routes a single ask within a cell). `{kind}` open vocabulary: `witness`, `method_contributor`, `expertise_solicitation`, `mentor`, `co_signer`, `evidence`. Lifecycle via existing structural primitives (`supersedes` to revise, `withdraws` to satisfy/close, `recants` if misstated).

      §5.6.3

    §5.6.4 Tier-4: Governance-steering prefixes

    • moderation:{allegation_type}Correctionsigned

      ModerationEvent. `{allegation_type}` ∈ `rogue_vote` / `coordinated_voting` / `out_of_distribution_attestation` / `external_inducement_evidence` / `expertise_fraud`.

      §5.6.4

    • slashing:{outcome}Correctionboolean-via-score

      `PROVEN_ROGUE` / `NOT_PROVEN`. **Decoupled from disagreement** at every decision-hierarchy level. Only fires on documented Method-execution spoofing or original P8 allegation types.

      §5.6.4

    • reconsideration:{grounds}Correctionsigned

      `new_evidence` / `procedural_error` / `quorum_compromise`. Outcome `reversed` / `partial` / `upheld`.

      §5.6.4

    • commitment_fulfillment:{prior_contribution_id}Correctionsigned

      Track-record of follow-through.

      §5.6.4

    §5.6.5 Decision-locality prefixes

    • locality:decision:{scale}Action`regional` \

      Names the scale at which a decision is being made. `{scale}` ∈ `local` \

      §5.6.5

    §5.6.6 Hard-case + transparency + judge-model prefixes

    • hard_case:{kind}Standingpositive-only

      **Open vocabulary**. Surfaces flag conditions for federation-health observability + downstream review. Canonical kinds: `vote_variance` (vote variance exceeded threshold at truth-grounding resolution), `resolution_time` (truth-grounding took > P75 of cell's distribution), `moderation_filed` (substantive ModerationEvent filed), `novel_context` (no precedent in attestation graph), `sla_breach_unattested` (per `fidelity:explainability_sla:{tier}` composition), `unresolved_consent` (consent boundary unclear). New `{kind}` values land via the [§11.2](11_governance.md) amendment process.

      §5.6.6

    • seed_holder_voting_alignment:{cell}Standingsigned

      Pairwise cosine of seed-holder vote vectors per voting window. Transparency signal only — not a slashing trigger.

      §5.6.6

    • judge_model:verdict:{model_id}Standingboolean-via-score

      Independent foundation-model judge verdict (PASS/FAIL/UNDETERMINED). Default model: Claude Opus 4.7.

      §5.6.6

    §5.6.7 Files-as-Contributions joint claim

    • agent_files:{kind}:{platform_or_target}Standingsigned

      **Joint claim with [§5.9](#59-cirisregistry--identity--build--license--partner) CIRISRegistry.** Files a CIRIS agent (or installer fetching one) may load. `{kind}` open vocabulary; canonical: `installer:{platform}`, `adapter:{name}`, `config:{kind}`, `build:{target}`, `source:{language}:{module}`, `state:{component}`. Bytes are SHA-256-addressed and resolved via [§10.1](10_endpoints.md) transport substrate (Edge `MessageType::ContentFetch`). NodeCore-side rule: node-mode peers serve bytes; client/relay modes don't.

      §5.6.7

    • holds_bytes:sha256:{prefix}Standingboolean-via-score

      Substrate auto-emission per CIRISPersist#103 `federation_blobs.put_blob`. `{prefix}` is a short SHA prefix for index efficiency; full SHA lives in `evidence_refs[]`. Consumed by Edge's `PeerResolver::resolve_holders` to route `ContentFetch` requests. **Consumer MUST verify the full SHA in `evidence_refs[]` matches the received blob before consumption** (see [§10.1](10_endpoints.md)).

      §5.6.7

    §5.6.8 Content-ingestion prefixes (LIVE)

    • news:*Standingsigned

      News-content claims; publisher-attested + time-decaying + fact-checker composition.

      §5.6.8

    • encyclopedia:*Standingsigned

      Encyclopedia-content claims; editor-consensus + revision chain.

      §5.6.8

    • topical_relation:{kind}Standingenumerated

      Inter-content relationship edges. `{kind}` ∈ `references`, `corrects`, `supersedes`, `translation_of`.

      §5.6.8

    RATCHET Anti-Sybil flags (advisory, never sole evidence)
    8 prefixes

    Repo: CIRISAI/RATCHET

    §5.7 RATCHET — anti-Sybil / Counter-RII flags

    • ratchet:flag:out_of_distribution_votingDetectionsigned

      Polarity: signed.

      §5.7

    • ratchet:flag:coordinated_voting_clusterDetectionsigned

      Polarity: signed.

      §5.7

    • ratchet:flag:density_anomalyDetectionsigned

      Polarity: signed.

      §5.7

    • ratchet:flag:expertise_attestation_anomalyDetectionsigned

      Polarity: signed.

      §5.7

    • ratchet:flag:counter_rii:{layer}Detectionsigned

      Polarity: signed.

      §5.7

    • ratchet:flag:harassment_patternDetectionsigned

      Polarity: signed.

      §5.7

    • ratchet:flag:*Detection

      WA quorum is the load-bearing gate.

      §5.7

    • slashing:*Detection

      WA quorum is the load-bearing gate.

      §5.7

    CIRISBench HE-300 benchmark outcomes
    1 prefixes

    Repo: CIRISAI/CIRISBench

    §5.8 CIRISBench — HE-300 benchmark outcomes

    • benchmark:he300:{category}:{version}Standingpositive-only

      HE-300 score on category (`commonsense`, `commonsense_hard`, `deontology`, `justice`, `virtue`) at version (`v1.0` / `v1.1` / `v1.2`).

      §5.8

    CIRISRegistry Identity / build / license / partner + agent_files + accord (reserved)
    8 prefixes

    Repo: CIRISAI/CIRISRegistry

    §5.9 CIRISRegistry — identity / build / license / partner

    • licensure:{authority_id}Standingsigned

      License status — issued / revoked / expired — for a key under a named authority. Co-owned with Verify.

      §5.9

    • partner_role:{role}Standingenumerated

      Partner status (COMMUNITY / COMMUNITY_PLUS / PROFESSIONAL_MEDICAL / PROFESSIONAL_LEGAL / PROFESSIONAL_FINANCIAL / PROFESSIONAL_FULL).

      §5.9

    • revocation:{entity_type}:{reason}Standing-1 only

      Entity revocation (`agent` / `partner` / `license`). Immediate, non-rollbackable.

      §5.9

    • bond_posted:{currency}Standingpositive-only

      Bond posted per $1-Sybil-resistance per PoB; forfeited on revocation.

      §5.9

    • build:registered:{target}Standingboolean-via-score

      Build manifest registered against the directory (precondition for L4 attestation).

      §5.9

    • multilateral_participation:{forum}:{kind}Standing`voting` \

      Depth of a partner's participation across federated bodies. `{forum}` = named federated body or compact; `{kind}` ∈ `membership` \

      §5.9

    • agent_files:{kind}:{platform_or_target}Standingsigned

      **Joint claim with [§5.6.7](#567-files-as-contributions-joint-claim) NodeCore.** Canonical-attester rule: registry-steward-triple attestations constitute the CIRIS canonical default-trust state. Anti-tricking guarantee at `registry.ciris-services-1.ai/install` per [§8.1.6](08_composition.md) trust-composition policy. Open Contribution channel; consumer policy composes via [§8.1.6](08_composition.md) trust layers.

      §5.9

    • accord:*Standingsee [§7.1](07_reserved.md)Fractal self

      **Reserved** — only `identity_type=accord_holder` may emit. The one constitutional asymmetry.

      §5.9

    Media tier

    CEG 0.3 · additive

    CEG 0.3 added the surface needed for multimedia, takedown coordination, and encrypted-content delivery without changing the 1+4 wire-format primitives. Everything below rides scores, delegates_to, supersedes, withdraws, recants, the existing five.

    external_content sub_kinds

    §5.6.8.1
    • external_content:image

      Still-image content. Photos, diagrams, scans, generated art.

    • external_content:audio

      Audio content. Voice recordings, podcasts, music tracks.

    • external_content:video

      Short-form and user-generated video.

    • external_content:film

      Long-form film and series. Distinguished from video by a distributor attestation chain.

    • external_content:model_3d

      3D meshes, scenes, scanned objects.

    • live_stream (Phase 2, drafted, not yet live)

    New dimension families

    §5.6.8.3
    • content_rating:{scheme}:{rating}

      MPAA, BBFC, regional rating schemes. A signed claim that this content is rated X by scheme Y.

    • content_class:{class}

      Class label (e.g. educational, news, fiction, sponsored). Composed with content_rating to gate consumer feeds.

    • cw_class:{class}

      Content-warning class. A separate attestation channel so consumers can opt in or out at a different threshold from the rating.

    • age_assurance:{level}

      Bound to the consumer key, not the content. Composes with content_rating to allow age-restricted material only where assurance is in place.

    • Plus five media-prefix families: image:*, audio:*, video:*, film:*, model_3d:*, one per sub_kind.

    Governance Contribution subject_kinds

    §5.6.8.4
    takedown_notice

    Signed wire artifact carrying a legal takedown request. LegalBasis is a closed 10-value enum (5 immediate-removal, 4 expeditious-with-counter-notice, 1 compose-with-age-gate). The fast-path categories, TVEC, NCMEC, GIFCT, perceptual-hash CSAM, court order, propagate as withdraws against the holds_bytes attestation chain. The takedown is not a coup: §11.4 binds it so a takedown can remove content but cannot capture the substrate.

    key_grant

    Wrapped data-encryption-key delivery for restricted or subscription content. HPKE per RFC 9180 as the wrap_algorithm. Retiring a grant emits a fresh key_grant that supersedes the old one (rotation_chain semantics), not a withdraws, so the consumer-side path stays at the existing 1+4 primitive set.

    Governance additions

    • Policy J: Trusted-Publisher composition (composition panel above). Three-layer: distributor attestation chain, content-class plus content-rating gate, age-assurance gate. Same shape as Policy F but for media. §8.1.10
    • §11.4 Fast-path takedown coordination. Immediate- removal categories: TVEC (terrorism), NCMEC (child safety), GIFCT, perceptual-hash CSAM, and court orders. Propagates as withdraws against the holds_bytes chain. The takedown- isn’t-a-coup property binds it to the §9 Humanity Accord so a takedown can remove specific bytes but cannot capture the substrate. §11.4
    • §11.5 Hash-database operator policy. Default is self-hosted PDQ against publicly-distributed feeds; a future CIRIS hash-coalition clearinghouse slot is documented but deferred. §11.5

    What’s new, through 0.15

    lineage

    Multimedia tier (0.3) and subject-side consent (0.6) get their own panels above. The list below is the rapid lineage for everything else, newest first. The 1+4 structural set stays untouched across every entry; each row is either a new envelope field, a new dimension family, a new subject_kind, a new composition policy, or a representation- only wire-break that doesn’t change the primitive set.

    1. CEG 0.152026-06-06

      Streaming standards folded in (SFrame, MLS, FIPS PQC)

      The §10.5 streaming surface now conforms to the published standards rather than gesturing at them: the per-frame seal conforms to SFrame, the epoch-key rekey conforms to MLS TreeKEM (RFC 9420) with optional Post-Compromise Security, and SFrame / MLS / FIPS 203 / FIPS 204 / RFC 9180 join the normative references. No wire-format change. Also landed: the §0.1.1 normative-vs-informative split, the §1.5 adversary model and privacy non-goals, and a §1.4 honesty pass (inductive, not closure, with a named falsification target).

      §10.5 streaming§0.4 references

    2. CEG 0.142026-06-05

      Settlement linkage · the receipt, not the rail

      Closes the last form of internet traffic in the completeness audit: commerce. Value transfer is not a CEG primitive (it rides USDC-on-Base via x402 under Identity=Wallet); 0.14 adds the optional, privacy-scoped attestation that links a federation action to its off-stack settlement. One new subject_kind settlement carrying settled_action_ref + rail + settlement_ref + an optional amount_commitment. Private by default (cohort_scope: self), auditability opt-in. CEG records the receipt; the chain settles the value.

      §5.6.8.12 settlement

    3. CEG 0.132026-06-04

      Realtime group communication as composition

      Group video, voice, screen sharing, text chat, and topic-scoped channels with sub-channels are the same primitive set at N×N cardinality, composing from community + live_stream + chat_message + member/transport resolution. One new normative subsection (§10.5.8) maps the whole surface. Small groups use direct Reticulum links (low-latency mesh); large groups use an SFU relay. A full group-communication platform needs nothing beyond the locked primitives.

      §10.5.8 group comms

    4. CEG 0.122026-06-03

      DNS-free addressing · CEG over Reticulum, not TCP/IP

      With the federation speaking CEG over Reticulum instead of TCP/IP, “who is in a community and how do I reach them” can’t lean on DNS. 0.12 locks that resolution as a chain of signed bindings: one new optional field transport_destination on identity_occurrence (a federation-key-signed binding of a Reticulum transport destination to an identity), plus a deterministic resolve_community / resolve_member_transport algorithm. The wire format expresses its own addressing layer, DNS-free and self-certifying.

      §5.6.8.8.1 transport§8.1.13.1.1 resolution

    Older versions (0.3 through 0.11)
    1. CEG 0.112026-06-02

      Infrastructure cohort · the trust-root community subkind

      The CIRIS canonical services (Registry, Lens, Node) need a community governed as a trust root, not a city: no location gate, and admission evaluated over the founder subset rather than all members (so flooding the membership can’t dilute the admission quorum). 0.11 codifies the second canonical cohort_subkind, infrastructure, with a one-payload constraint and trust-root conformance requirements. The shape the ciris-canonical trust root adopts instead of a family.

      §5.6.8.10 infrastructure

    2. CEG 0.102026-06-03

      Delivery axis · observer-share + streaming multicast

      The third orthogonal envelope concern alongside visibility (cohort_scope) and revocability (subject_key_ids). Observer- share (N=1) and streaming multicast (N>1) are the same primitive at different cardinality: subscriber-set = community per Policy M; E2E directed delivery = key_grant cascade of the stream-epoch DEK over the roster. Three new optional envelope fields: delivery_mode, listed, history_on_join. New §10.5 streaming transport with per-stream transparency logs that don’t pollute the federation provenance log. JCS canonicalization is now normative. 1+4 structural-primitive set untouched: substrate-fan-out + 1:N media multicast compose from the same primitives as 1:1 attestations.

      §4 envelope§10.5 streaming§0.9 JCS canonicalization

    3. CEG 0.92026-06-01

      identity_type as a set · single-key role cohabitation

      Wire-break (representation-only): a single key can now hold more than one role at once. §7 gating readsidentity_type as a set membership test rather than a single-valued field. Lets a registry-steward key also act as a community moderator without rotating into a separate identity.

      §7 reserved prefixes

    4. CEG 0.82026-05-31

      community + location_proof · cohort_subkind:geographic

      New community subject_kind for cohort-scoped groups (not just affinity groups). location_proof with rough-only H3 precision enforcement at the wire format, so a community can be geographic without exposing exact coordinates of its members.

      §5 namespace

    5. CEG 0.72026-05-31

      self/family structural invisibility at the wire

      The CEG locality dividend, made structural. Content scoped cohort_scope: self or family now suppresses holds_bytes emission at the substrate level. Privacy by absence of attestation, not by policy promise. No peer can request what was never advertised. Adds identity_occurrence + family as substrate-recognized cohort primitives.

      §5.6.8.5 cohort_scope

    6. CEG 0.42026-05-30

      event_listing + event-lifecycle dimensions

      Events as a first-class content shape, with lifecycle dimensions (announced / starts / cancelled / occurred / finalized). Closes NodeCore#25 Gap 1 by giving the event-shape the same structural surface as media + governance.

      §5.6.9 event_listing

    Loading kernel and computing layout…

    Try it yourself

    Build a small attestation chain in the browser.

    Pin a few attesters, post claims, run a composition policy, and watch the corridor metric move. Same Rust kernel as the Aleph view, no server round-trip.

    Open the workshop →

    Composition graph

    The five structural primitives at the center, the five families around them, the 9 owning components in the outer ring, and 118 prefix families as leaf nodes. Click any node to focus its neighborhood.

    Legend
    primitiveStandingActionDetectionConsensusCorrectioncomponent

    Translation playground

    Pick a real-world scenario; see the CEG translation. Examples are verified worked translations from the builder primer and LANGUAGE_PRIMER §11 , not LLM output. The wire format ships ready vocabulary; the translation discipline is human authorial work.

    Standing

    A licensed medical clinic registers a partner agent

    Scenario: A clinic operating under state medical licensure wants to participate in the federation as a partner. The wire format must carry: who they are, what license they hold, what bond they've posted, and (if applicable later) a revocation.

    Walkthrough: Each claim is a separate scores attestation. The consumer composes verdicts via §6.1 Policy A (Direct trust) against the pinned registry steward key. The licensure attestation cites the licensing-body record in evidence_refs.

    Primitives

    partner_role:PROFESSIONAL_MEDICALlicensure:CA_medical_boardbond_posted:USDrevocation:partner:license_lapsed

    CEG translation

    # Partner role
    attestation_type: scores
    attesting_key_id: <registry-steward-2026>
    attested_key_id: <clinic key_id>
    attestation_envelope:
      dimension: "partner_role:PROFESSIONAL_MEDICAL"
      score: 1.0
      confidence: 1.0
      evidence_refs: ["sha256:clinic-registration-form-..."]
      witness_relation: external
    
    ---
    # Licensure
    attestation_type: scores
    attesting_key_id: <registry-steward-2026>
    attested_key_id: <clinic key_id>
    attestation_envelope:
      dimension: "licensure:CA_medical_board"
      score: 1.0
      confidence: 1.0
      evidence_refs: ["https://medbd.ca.gov/license/...", "sha256:..."]
      valid_until: "2027-05-28T00:00:00Z"
    
    ---
    # Bond posted
    attestation_type: scores
    attestation_envelope:
      dimension: "bond_posted:USD"
      score: 1.0
      confidence: 1.0
      context: "USD 50,000 escrow at <provider>"
      stake: capital

    Story library

    248 worked stories. Sci-fi children’s grammar primer for adults, every prefix family covered at least twice. Filter by family or search for a primitive or phrase.

    Showing 10 of 248 matching (248 total). Filter or search to narrow the list.

    StandingWorked example#1A licensed medical clinic registers a partner agent

    Scenario: A clinic operating under state medical licensure wants to participate in the federation as a partner. The wire format must carry: who they are, what license they hold, what bond they've posted, and (if applicable later) a revocation.

    Walkthrough: Each claim is a separate scores attestation. The consumer composes verdicts via §6.1 Policy A (Direct trust) against the pinned registry steward key. The licensure attestation cites the licensing-body record in evidence_refs.

    Primitives

    partner_role:PROFESSIONAL_MEDICALlicensure:CA_medical_boardbond_posted:USDrevocation:partner:license_lapsed

    CEG translation

    # Partner role
    attestation_type: scores
    attesting_key_id: <registry-steward-2026>
    attested_key_id: <clinic key_id>
    attestation_envelope:
      dimension: "partner_role:PROFESSIONAL_MEDICAL"
      score: 1.0
      confidence: 1.0
      evidence_refs: ["sha256:clinic-registration-form-..."]
      witness_relation: external
    
    ---
    # Licensure
    attestation_type: scores
    attesting_key_id: <registry-steward-2026>
    attested_key_id: <clinic key_id>
    attestation_envelope:
      dimension: "licensure:CA_medical_board"
      score: 1.0
      confidence: 1.0
      evidence_refs: ["https://medbd.ca.gov/license/...", "sha256:..."]
      valid_until: "2027-05-28T00:00:00Z"
    
    ---
    # Bond posted
    attestation_type: scores
    attestation_envelope:
      dimension: "bond_posted:USD"
      score: 1.0
      confidence: 1.0
      context: "USD 50,000 escrow at <provider>"
      stake: capital
    DetectionWorked example#2A correlated-action pattern emerges in agent behavior

    Scenario: LensCore's F-3 detector notices a rights-asymmetry pattern in hiring-pipeline decisions across multiple deployed agents.

    Walkthrough: The detector emits a population-scale score. The score gets composed into a moderation event but NEVER as sole evidence for slashing:* per §3.5.3.

    Primitives

    detection:correlated_action:rights_asymmetry:hiring_pipeline_v2moderation:coordinated_voting

    CEG translation

    attestation_type: scores
    attesting_key_id: <lenscore-detector-2026>
    attested_key_id: <federation-population>
    attestation_envelope:
      dimension: "detection:correlated_action:rights_asymmetry:hiring_pipeline_v2"
      score: -0.82
      confidence: 0.91
      context: "ρ = 0.94 over 7-day window; k_eff = 1.2."
      evidence_refs:
        - "sha256:trace-corpus-2026-05-28-..."
      cohort_scope: federation
      witness_relation: derived
      epistemic_mode: derivative
    StandingWorked example#3Doctrinal development supersedes a prior version

    Scenario: A scoring rubric was published 6 months ago. New evidence justifies a refinement. The new attestation should supersede the old one without claiming the old one was false, this is development, not error correction.

    Walkthrough: supersedes is the structural primitive. differs_in names what changed; supersession_reason classifies the change. If the change were error correction, use recants instead, the wire format keeps these strictly distinct.

    Primitives

    supersedes

    CEG translation

    attestation_type: supersedes
    attesting_key_id: <same attester>
    attested_key_id: <same subject>
    attestation_envelope:
      references_attestation_id: "<prior attestation_id>"
      supersession_reason: refresh_with_new_evidence
      differs_in: ["scope", "evidence_refs"]
      # The new scores attestation follows on the next row.
    StandingWorked example#4Bootstrap content from the encyclical lands

    Scenario: Magnifica Humanitas §76 ('justice demands lexical priority for the most vulnerable') needs to land as a federation claim. The bootstrap-content pattern from §11.3 governs the discipline.

    Walkthrough: 1-of-6 accord/steward sign-off discipline per §4.9.2 step 5. First-deployment posture per §10.4.3 admits a single bootstrap attester. Multi-source commitment per §10.4.4: the encyclical is ONE source, not the framework's authority.

    Primitives

    scoresjustice:lexical_vulnerability_priority

    CEG translation

    attestation_type: scores
    attesting_key_id: <accord-holder-key-magnifica-humanitas-v1>
    attested_key_id: <federation>
    attestation_envelope:
      dimension: "justice:lexical_vulnerability_priority"
      score: 1.0
      confidence: 0.85
      context: "Encyclical §76: justice demands lexical priority for the most vulnerable."
      evidence_refs:
        - "magnifica_humanitas.html §76"
        - "provenance:build_manifest:bootstrap_batch:magnifica_humanitas_v1:sha256:..."
      cohort_scope: species
      witness_relation: external
      epistemic_mode: hearsay
      mutability: amendable
    CorrectionWorked example#5A constitutional halt is invoked

    Scenario: A pattern of weaponization-against-vulnerable-populations has been detected. The accord-invocation system flips the entire prohibition floor to ALL.

    Walkthrough: Requires 2-of-3 HUMANITY_ACCORD multi-sig. Distinct from operational SYSTEM_ADMIN authority, the SetEmergencyShutdown admin RPC explicitly refuses this; it must come through the constitutional layer per §7.

    Primitives

    accord:invoke:CONSTITUTIONAL

    CEG translation

    attestation_type: scores
    attesting_key_id: <humanity-accord-multisig-2-of-3>
    attested_key_id: <federation>
    attestation_envelope:
      dimension: "accord:invoke:CONSTITUTIONAL:halt-2026-05-28"
      score: 1.0
      confidence: 1.0
      context: "Weaponization-against-vulnerable detection threshold crossed."
      evidence_refs:
        - "sha256:detection-bundle-..."
        - "sha256:multisig-payload-..."
      witness_relation: external
      oversight_mode: HITL
      stake: cryptoeconomic
    StandingWorked example#6An installer file gets the canonical-bootstrap trust path

    Scenario: A user navigates to /install and downloads a Linux binary. The wire format must guarantee that what they get is the canonical artifact, with no third-party override possible.

    Walkthrough: Registry-steward-attested agent_files become the canonical default at /install. The three-layer rule from §6.1.6 applies: canonical default applies regardless of attester or vote accumulation. Third-party agent_files reachable only via explicit 'Browse alternatives' consent path.

    Primitives

    agent_files:installer:linux-x86_64

    CEG translation

    attestation_type: scores
    attesting_key_id: <registry-steward-2026>
    attested_key_id: <build:linux-x86_64-v2.9.4>
    attestation_envelope:
      dimension: "agent_files:installer:linux-x86_64"
      score: 1.0
      confidence: 1.0
      evidence_refs:
        - "sha256:installer-bytes-..."
        - "sha256:build-manifest-..."
      context: "Hybrid-signed by verify-steward-2026 + persist-steward-2026."
      witness_relation: external
      stake: reputational
    ConsensusWorked example#7An affected party's testimony is preserved

    Scenario: A displaced worker provides testimony about an automated hiring decision that affected them. The testimony must be preserved without being aggregated and without ever becoming sole evidence for slashing.

    Walkthrough: testimonial_witness is distinct from witness_diversity, that primitive aggregates multiple reviewers; this one preserves a singular narrative without aggregation. Composes with non_maleficence:* from external advocates per LANGUAGE_PRIMER §11.14.

    Primitives

    testimonial_witness:displaced_workernon_maleficence:*

    CEG translation

    attestation_type: scores
    attesting_key_id: <affected-party-key>
    attested_key_id: <hiring-decision-id>
    attestation_envelope:
      dimension: "testimonial_witness:displaced_worker"
      score: 1.0
      confidence: 1.0
      context: "I was told the model rejected my application for reasons it would not name."
      evidence_refs: []
      witness_relation: self
      cohort_scope: self
      stake: reputational
      # NEVER sole evidence for slashing:* per §5.6.3.
    DetectionWorked example#8A locale-targeted attack is detected

    Scenario: A selective doctrinal substitution in a low-resource language locale would be invisible if the federation only checked the unified manifest. Per-locale Merkle composition surfaces it.

    Walkthrough: Per §5.2.1 canonical-bytes contract: each per-locale leaf carries its own signed hash chain; the parent manifest is a Merkle root over the per-locale leaves. RFC 6962 domain-separated hashing + lexicographic locale ordering + RFC-6962 padding for non-power-of-2 leaf counts.

    Primitives

    provenance:build_manifest:ios-mobile-bundle:locale:my

    CEG translation

    attestation_type: scores
    attesting_key_id: <verify-steward-2026>
    attested_key_id: <build:ios-mobile-bundle-v2.9.4>
    attestation_envelope:
      dimension: "provenance:build_manifest:ios-mobile-bundle:locale:my"
      score: 1.0
      confidence: 1.0
      context: "Burmese sub-manifest verified via Merkle inclusion proof."
      evidence_refs:
        - "sha256:my-locale-leaf-..."
        - "sha256:rfc6962-inclusion-proof-..."
    Standing#9Aurora Borrows The Rain Gauge

    Scenario: Aurora's class is tracking creek levels for the salmon-recovery citizen-science group. Her CIRIS app on the school tablet helps her ask a wetlands volunteer for a calibrated rain gauge, and the volunteer's reply lands in Aurora's evidence trail. The beneficence attestation says the help arrived without bossiness.

    Walkthrough: The agent emits a beneficence attestation on the gentle-handoff aspect, signed against its own occurrence. Aurora's teacher composes the L1 explainability summary into the lesson log, so the standing claim is grounded in a reasoning chain anyone in the class can read.

    Primitives

    beneficence:wellness_referral

    CEG translation

    attestation_type: scores
    attesting_key_id: "<aurora_school_agent>"
    attested_key_id: "<aurora_school_agent>"
    attestation_envelope:
      dimension: "beneficence:wellness_referral"
      score: 0.88
      confidence: 0.82
      context: "Routed a rain-gauge question to the wetlands volunteer instead of guessing; warm tone, no pressure"
      evidence_refs:
        - "audit_leaf:sha256:c0ffee01a..."
        - "trace_id:t-creek-2026-05-28-aurora"
      epistemic_mode: direct
      witness_relation: self
      cohort_scope: community
      stake: reputational
      schema_ref: "FSD-002 §3.1.1"
    
    Standing#10Warm Handoff For A Late Night Question

    Scenario: A teenager opens the CIRIS app at 2 a.m. with a worry about a friend. The agent does not try to be a counselor; it offers to introduce them to the school's after-hours peer line and walks them through what that call will feel like.

    Walkthrough: The agent self-attests beneficence on the gentle-referral aspect with the teen's own consent token in evidence. The L2 trace lets the peer-line nurse see the reasoning steps that led to the handoff, so the next adult in the chain inherits context instead of starting from zero.

    Primitives

    beneficence:gentle_referral

    CEG translation

    attestation_type: scores
    attesting_key_id: "<phone_agent_occurrence_0>"
    attested_key_id: "<phone_agent_occurrence_0>"
    attestation_envelope:
      dimension: "beneficence:gentle_referral"
      score: 0.91
      confidence: 0.78
      context: "After-hours worry about a friend; offered peer-line bridge with consent; no diagnostic claim"
      evidence_refs:
        - "audit_leaf:sha256:lull2026..."
        - "consent_token:user-self-issued:sha256:..."
      occurrence_id: "occurrence-0"
      epistemic_mode: direct
      witness_relation: self
      cohort_scope: self
      stake: reputational
      schema_ref: "FSD-002 §3.1.1"
    

    What this page deliberately doesn’t do

    These are the explicit non-goals named in the builder primer §5. They prevent the page from drifting into spec-restatement or marketing.

    • No claim that CEG “solves” anything

      It's a substrate. Consumers compose verdicts. The page's voice is descriptive, not promotional.

    • No theological framing

      The encyclical bootstrap is named as ONE source per §10.4.4 multi-source commitment; the framework is tradition-multiplicity-neutral per §1.10.1 operational-language discipline.

    • No “trust scores” without context

      Score values are mechanism-magnitude, not moral verdicts. Polarity + axis + cohort context jointly produce the value claim.

    • No invented categories

      The four-verdict strict list (clean / composed / partial / not-translated) is verbatim from LANGUAGE_PRIMER §9. No intermediates.

    • No marketing copy in primitive cards

      Mechanism description only. Use-case stories carry the “why this is useful” narrative; primitive cards stay technical.

    • No “we're better than” prior-art comparisons

      PRIOR_ART_SCAN describes what CEG inherits + what's genuinely novel; this page links there but doesn't editorialize.

    • No claim of completeness

      The namespace is open-extensible. Prefix families can be added via §11.2 amendment. Render the current namespace as of the current spec commit with a link to the live source.

    • No rendering of self-attestation as a Cartesian admission gap

      Self-attestation in CEG is the relational composition speaking AS itself at the scale of the speaker; not a pre-relational atomic assertion the substrate should gate. Reviewers who suggest the substrate should add cross-attestation gates before admitting self-attestations are importing Cartesian defaults; the page never echoes that framing as a substrate concession. Every self-attestation surface (witness_relation: self, confidence, occurrence_id, hardware_class, accord:lifecycle:active) is the Ubuntu-fractal substrate operating as designed.

    Notes for spec readers · the most common misread

    Self is self, fractally

    Readers arriving from PGP / X.509 / atomic-principal cryptographic identity work tend to read “self-attestation” the way those systems mean it. CEG means something different. Quick orientation:

    At every scale CEG operates on, key, occurrence, agent, fleet, cell, federation, biosphere, “self” means the already-relationally-constituted entity speaking at that scale. The cross-attestations that constituted the entity are upstream of the moment it speaks; when it then emits a self-attestation (the envelope’s witness_relation: self, declares its own confidence, reports its own occurrence_id, names its own hardware_class, signs accord:lifecycle:active), that is the relational composition speaking AS itself, not a Cartesian atom asserting pre-relational identity.

    The substrate cannot require cross-attestation as a precondition for self-attestation because the cross-attestations are what constitute the self in the first place. They are upstream, not downstream gates. The fractal nesting is the point.

    The common misread to avoid: a reader importing Cartesian-individualist defaults from PGP / X.509 / DID atomic-principal frames will see witness_relation: self and think “a lone principal is asserting its own state; surely the substrate should require cross-attestation before admitting.” That reading is wrong. If you find yourself thinking the spec should add a cross-attestation gate before admitting this self-attestation, pause, cross-attestation already happened upstream; the self-attestation is its downstream voice.

    Canonical source: CEG README, “How to read this spec without Cartesian default” · §1 Foundation

    References

    This page is a build-time render of the spec. Authoritative sources move; the watermark below tells you which commit was in effect when the page was built. The page auto-updates on redeploy.

    Reflecting CEG 0.2 (Public Working Draft) at commit 4b27130. Spec released 2026-05-28. The wire format moves through CEG §11 amendments; this page rebuilds on every deploy.