CEG 1.0-RC5 · released 2026-06-14172 prefix families

CEG spec reader

The wire format, rendered from the live spec

Everything below is a build-time render of the CEG spec: the 1+4 primitives, the families and envelope fields, the composition policies, the open namespace, the version lineage, and an interactive explorer. The watermark at the bottom names the commit this page was built from.

One workhorse + four structural composers

The entire wire format is one scalar attestation primitive plus four structural composers. Everything else is open vocabulary on top. This is the most load-bearing fact about CEG.

scores

Workhorse

Scalar score (f64 in [-1, +1]) + confidence + named dimension. Every substantive claim is a scores attestation.

When to use: Any claim about an entity, build, license, capability, behavior, state, or commitment.

Show wire shape

attestation_type: scores
attesting_key_id: <attester key_id>
attested_key_id: <subject key_id>
attestation_envelope:
  dimension: "non_maleficence:epistemic_environment_degradation"
  score: -0.7
  confidence: 0.85
  context: "Repeated content-fabrication during 30-day window."
  evidence_refs:
    - "sha256:..."
  epistemic_mode: external
  witness_relation: external
  cohort_scope: biosphere

§3.1 →

delegates_to

Composer 1/4

A authorizes B to sign on A's behalf within a bounded scope.

When to use: Authority-source claims (constitutional grounding), key rotation, scoped capability handoff.

Show wire shape

attestation_type: delegates_to
attesting_key_id: <delegator key_id>
attested_key_id: <delegate key_id>
attestation_envelope:
  delegated_scope: ["sign_build_manifest"]
  delegation_purpose: hardware_rotation
  delegation_valid_from: "2026-05-28T00:00:00Z"
  delegation_valid_until: "2026-08-28T00:00:00Z"

§3.2 →

supersedes

Composer 2/4

This attestation replaces a prior one by the same attester. No falsity claim.

When to use: Doctrinal development, spec revisions, calibration version transitions.

Show wire shape

attestation_type: supersedes
attesting_key_id: <same attester>
attested_key_id: <same subject>
attestation_envelope:
  references_attestation_id: "<prior attestation_id>"
  supersession_reason: refresh_with_new_evidence
  differs_in: ["scope", "evidence_refs"]

§3.2 →

withdraws

Composer 3/4

I retract my prior attestation. Does NOT claim it was false.

When to use: Context changed, prudent retraction without admission of error.

Show wire shape

attestation_type: withdraws
attesting_key_id: <same attester>
attested_key_id: <same subject>
attestation_envelope:
  references_attestation_id: "<prior attestation_id>"
  withdrawal_reason: conditions_changed
  implies_attestation_was_false_at_issuance: false

§3.2 →

recants

Composer 4/4

My prior attestation was false at issuance. Admits epistemic error.

When to use: Genuine error admission. Heavyweight, the entire weight is sincerity (Habermas §6.2).

Show wire shape

attestation_type: recants
attesting_key_id: <same attester>
attested_key_id: <same subject>
attestation_envelope:
  references_attestation_id: "<prior attestation_id>"
  recantation_reason: mistaken_in_good_faith
  what_was_false: "Calibration regression detected during audit; original score..."

§3.2 →

Five families organize the ~172 prefix families

Every claim in the federation sits in one of five families. The analogy on each card is load-bearing pedagogy, read it before touching a prefix.

Standing

91 prefixes

Claims about an entity. Who, what, signed, with evidence.

Notarized professional credential record.

Jump to Standing prefixes ↓

Action

5 prefixes

The decision hierarchy. Goal → Approach → Method → Progress Measure.

Research grant proposal: aim, approach, methods, outcome metrics.

Jump to Action prefixes ↓

Detection

15 prefixes

Claims about reality patterns. Surveillance without judgment.

Epidemiological surveillance: patterns surfaced, treatment downstream.

Jump to Detection prefixes ↓

Consensus

6 prefixes

How the federation forms collective judgment.

Peer review combined with jury deliberation: multiple reviewers, weighted votes.

Jump to Consensus prefixes ↓

Correction

4 prefixes

How the federation corrects itself when something goes wrong.

Academic ethics committee + journal retraction + appellate review.

Jump to Correction prefixes ↓

Envelope fields and reasoning axes

The envelope carries nine fields that consumers use to weight an attestation. These are signed payload but not structural primitives per §2, they are carried and signed (the canonical bytes include them per §0.9 envelope canonicalization), but they don’t change the 1+4 structural-primitive set. Implementers MUST carry them; CEG 0.6 added subject_key_ids as the ninth OPTIONAL field for subject-side authority.

9 envelope fields

polarity
default: (sign of score)
Direction of the claim. Score sign carries it.
confidenceFractal self
default: —
f64 in [0, 1]. The attester's own confidence in their score. The relationally-constituted attester reports its own calibration; downstream consumers weight by composition policy.
epistemic_mode
default: direct
How the attester formed the claim. Values: direct / crypto / hearsay / derivative / appeal.
witness_relationFractal self
default: external
Attester's relation to the attested entity. Values: self / external / derived.
oversight_mode
default: null
Human-control gradient. Values: HITL (approval before dispatch) / HOTL (review + can intervene) / HOOTL (review only flagged escalations).
stake
default: reputational
What's backing the claim. Values: free / reputational / capital / cryptoeconomic.
cohort_scope
default: —
Scale at which the claim applies. Values: self / family / community / affiliations / species / biosphere / federation. CEG 0.1 added biosphere as distinct from species (the Homo sapiens cohort).
valid_until
default: —
Optional ISO8601 expiry. Consumer policy treats attestation as stale after that point.
occurrence_id / _count / _roleFractal self
default: —
Multi-occurrence deployment discriminator. Lets consumers reconstruct fleet-wide coverage from per-occurrence attestation streams. Added v1.4.2.
subject_key_ids
default: [] (producer-only authority)
Vec<KeyId>. OPTIONAL. The keys the claim is ABOUT, subject-side authority parallel to the producer-side attesting_key_id. Empty or omitted preserves the pre-0.6 producer-only behavior; populated, the named subjects (and their delegates) can withdraw the claim. Accepts both federation_keys identities and canonical-hash identifiers so un-enrolled subjects can be named. Added CEG 0.6.

8 reasoning axes

Polarity
Direction of the claim? Positive / Negative / Neutral / Indeterminate{reason}.
Maps to envelope: polarity
Object
What is the claim about? (key_id / attestation_id / contribution_id)
Time
When is the claim valid?
Maps to envelope: valid_until
Epistemic mode
How was the claim formed?
Maps to envelope: epistemic_mode
Reversibility
Can it be reversed?
Stake
What's backing the claim?
Maps to envelope: stake
Scope
At what scale does the claim apply?
Maps to envelope: cohort_scope
Inter-attestation relations
How does this attestation relate to others? standalone / refers-to / supersedes / withdraws / recants / corroborates / contradicts / clarifies (four of these are structural primitives; the rest are emergent from scalar composition).

Composition policies

Consumer-side composition is part of CEG, not bolted on. The federation does not adjudicate; it ships primitives, and consumers compose verdicts. Three base policies plus three modifiers / specializations.

Abase

Direct trust

Consumer pins a set of attesters. Attestations from pinned keys count; others are ignored or weighted very low.

Bbase

One-hop transitive

Consumer trusts attesters who are themselves attested by pinned keys. Single hop only by default.

Cbase

Weighted graph (EigenTrust-style)

Consumer treats the attestation graph as a stochastic matrix. Trust diffuses along signed edges; pinned keys are the source set.

Dmodifier

Lexical-vulnerability-priority

Tie-breaking modifier: when scores tie, the one favoring the most vulnerable cohort wins. Universal four-source-corroborated tie-breaker.

Emodifier

Locality-scaled-quorum

Modifier that sizes the consensus quorum to the decision's scale. Closes the G3 gap from v1.3, decisions made too broadly or too narrowly carry less weight.

Fspecialization

agent_files trust composition

Three-layer rule for binaries and adapters: canonical default (registry-steward attested) / open contribution / vote-then-trust. Anti-tricking guarantee at install endpoint.

Gspecialization

Trust-Fresh / lighthouse composition

Cross-component composition recurring as the substrate's freshness-plus-attested idiom: cert_validity:{authority} + transparency_log:inclusion + attestation:l3_or_l4. Each consumer policy weights the bundle differently; §8.1.7 documents the pattern after the 283-story stress test surfaced it organically.

Hspecialization

Tiered-Scope composition

Three feed-shape composition idioms that read attestations by cohort_scope (local / community / global). The shape lets a single namespace serve a phone, a community feed, and the open federation without merging their consensus rules.

Ispecialization

Attestation-Ladder composition

The familiar L1-L5 verification ladder (self_verify → hardware_rooted → registry_consensus → license_validity → agent_integrity) is consumer-side composition over the §5.2 mechanism prefixes, not a wire-level taxonomy. CEG 0.2 documents the existing pattern.

Jspecialization

Trusted-Publisher composition

Three-layer multimedia content path (CEG 0.3): distributor attestation chain → content_class + content_rating gate → age_assurance gate. Same shape as Policy F but specialized for image / audio / video / film / model_3d. Anti-tricking guarantee binds the publisher's trust chain to the consumer's cohort gate.

Kspecialization

CEM: Consent Effective Model composition

Six-layer subject-consent composition (CEG 0.6): effective consent resolution (walk latest non-superseded consent:state:*), multi-subject revocation (any-subject-binding, consumer policy MUST NOT soften to majority), SLA watcher (substrate emits hard_case:consent_sla_breach when producer misses deletion_sla), bilateral pair ratification (PARTNERED), decay-protocol stage composition, and the CIRISAgent CEM bundle (TEMPORARY / PARTNERED / ANONYMOUS) as a consumer-policy bundle over the wire primitives. Bare-scores and consent_record ceremony shapes admit at the same gate.

The 172 prefix families, by owning component

Auto-parsed from CEG 1.0-RC5 §5 (commit 09cdace). The namespace is open-extensible, new prefix families can be added via §11.2 amendment.

CIRISAgent Accord principles + DMA verdicts + conscience verdicts + apophatic bounds

51 prefixes

Repo: CIRISAI/CIRISAgent

§5.10 Namespace summary

detection:correlated_action:{axis}
in v1.2 per [§1.3.1](01_foundation.md))
§5.10
detection:emergent_deception:{axis}
in v1.2 per [§1.3.1](01_foundation.md))
§5.10
multilateral_participation:{forum}:{kind}
(+ envelope field `witness_relation`)
§5.10
locality:decision:{scale}
(+ envelope field `witness_relation`)
§5.10
detection:distributive:access:{resource_type}
(+ envelope field `witness_relation`)
§5.10
agent_files:{kind}:{platform_or_target}
(+ envelope field `oversight_mode`)
§5.10
holds_bytes:sha256:{prefix}
(+ envelope field `oversight_mode`)
§5.10
testimonial_witness:{kind}
(+ envelope field `oversight_mode`)
§5.10
need:{domain}:{kind}
(+ envelope field `oversight_mode`)
§5.10
provenance:build_manifest:{target}:locale:{lang_code}
§5.10
provenance:skill_import:{source}
§5.10
hard_case:{kind}
sub-leaf in §5.6.8 (LIVE per CIRISNodeCore b1582cb); documented "Trust-Fresh" composition pattern in [§8.1.7](08_composition.md); added Tiered-Scope Composition pattern in [§8.1.8](08_composition.md). All polarity columns now populated.
§5.10
topical_relation:translation_of
sub-leaf in §5.6.8 (LIVE per CIRISNodeCore b1582cb); documented "Trust-Fresh" composition pattern in [§8.1.7](08_composition.md); added Tiered-Scope Composition pattern in [§8.1.8](08_composition.md). All polarity columns now populated.
§5.10
attestation:l{N}:*
) per [§1.3.1](01_foundation.md) T2 honest application — L-numbers name ladder-position (a verdict-shape) not mechanism. The L1-L5 ladder is now consumer-side composition per [§8.1.9](08_composition.md) Policy I — Attestation-Ladder Composition. Deprecated wire shape added to [§13.1](13_anti_patterns.md).
§5.10
attestation:self_verify
) per [§1.3.1](01_foundation.md) T2 honest application — L-numbers name ladder-position (a verdict-shape) not mechanism. The L1-L5 ladder is now consumer-side composition per [§8.1.9](08_composition.md) Policy I — Attestation-Ladder Composition. Deprecated wire shape added to [§13.1](13_anti_patterns.md).
§5.10
attestation:hardware_rooted
) per [§1.3.1](01_foundation.md) T2 honest application — L-numbers name ladder-position (a verdict-shape) not mechanism. The L1-L5 ladder is now consumer-side composition per [§8.1.9](08_composition.md) Policy I — Attestation-Ladder Composition. Deprecated wire shape added to [§13.1](13_anti_patterns.md).
§5.10
attestation:registry_consensus
) per [§1.3.1](01_foundation.md) T2 honest application — L-numbers name ladder-position (a verdict-shape) not mechanism. The L1-L5 ladder is now consumer-side composition per [§8.1.9](08_composition.md) Policy I — Attestation-Ladder Composition. Deprecated wire shape added to [§13.1](13_anti_patterns.md).
§5.10
attestation:license_validity
) per [§1.3.1](01_foundation.md) T2 honest application — L-numbers name ladder-position (a verdict-shape) not mechanism. The L1-L5 ladder is now consumer-side composition per [§8.1.9](08_composition.md) Policy I — Attestation-Ladder Composition. Deprecated wire shape added to [§13.1](13_anti_patterns.md).
§5.10
attestation:agent_integrity
) per [§1.3.1](01_foundation.md) T2 honest application — L-numbers name ladder-position (a verdict-shape) not mechanism. The L1-L5 ladder is now consumer-side composition per [§8.1.9](08_composition.md) Policy I — Attestation-Ladder Composition. Deprecated wire shape added to [§13.1](13_anti_patterns.md).
§5.10
content_rating:{scheme}:{rating}
New composition policy ([§8.1.10](08_composition.md)) for trusted-publisher path + age-assurance gating. New governance sections ([§11.4](11_governance.md) fast-path takedown coordination + [§11.5](11_governance.md) hash-database operator policy). **1+4 wire-format lockdown preserved** — retire-key-grant rides existing `supersedes`; takedown propagation rides existing `withdraws`-against-`holds_bytes`; no new structural primitives.
§5.10
content_class:{class}
New composition policy ([§8.1.10](08_composition.md)) for trusted-publisher path + age-assurance gating. New governance sections ([§11.4](11_governance.md) fast-path takedown coordination + [§11.5](11_governance.md) hash-database operator policy). **1+4 wire-format lockdown preserved** — retire-key-grant rides existing `supersedes`; takedown propagation rides existing `withdraws`-against-`holds_bytes`; no new structural primitives.
§5.10
cw_class:{class}
New composition policy ([§8.1.10](08_composition.md)) for trusted-publisher path + age-assurance gating. New governance sections ([§11.4](11_governance.md) fast-path takedown coordination + [§11.5](11_governance.md) hash-database operator policy). **1+4 wire-format lockdown preserved** — retire-key-grant rides existing `supersedes`; takedown propagation rides existing `withdraws`-against-`holds_bytes`; no new structural primitives.
§5.10
age_assurance:{level}
New composition policy ([§8.1.10](08_composition.md)) for trusted-publisher path + age-assurance gating. New governance sections ([§11.4](11_governance.md) fast-path takedown coordination + [§11.5](11_governance.md) hash-database operator policy). **1+4 wire-format lockdown preserved** — retire-key-grant rides existing `supersedes`; takedown propagation rides existing `withdraws`-against-`holds_bytes`; no new structural primitives.
§5.10
image:*
New composition policy ([§8.1.10](08_composition.md)) for trusted-publisher path + age-assurance gating. New governance sections ([§11.4](11_governance.md) fast-path takedown coordination + [§11.5](11_governance.md) hash-database operator policy). **1+4 wire-format lockdown preserved** — retire-key-grant rides existing `supersedes`; takedown propagation rides existing `withdraws`-against-`holds_bytes`; no new structural primitives.
§5.10
audio:*
New composition policy ([§8.1.10](08_composition.md)) for trusted-publisher path + age-assurance gating. New governance sections ([§11.4](11_governance.md) fast-path takedown coordination + [§11.5](11_governance.md) hash-database operator policy). **1+4 wire-format lockdown preserved** — retire-key-grant rides existing `supersedes`; takedown propagation rides existing `withdraws`-against-`holds_bytes`; no new structural primitives.
§5.10
video:*
New composition policy ([§8.1.10](08_composition.md)) for trusted-publisher path + age-assurance gating. New governance sections ([§11.4](11_governance.md) fast-path takedown coordination + [§11.5](11_governance.md) hash-database operator policy). **1+4 wire-format lockdown preserved** — retire-key-grant rides existing `supersedes`; takedown propagation rides existing `withdraws`-against-`holds_bytes`; no new structural primitives.
§5.10
film:*
New composition policy ([§8.1.10](08_composition.md)) for trusted-publisher path + age-assurance gating. New governance sections ([§11.4](11_governance.md) fast-path takedown coordination + [§11.5](11_governance.md) hash-database operator policy). **1+4 wire-format lockdown preserved** — retire-key-grant rides existing `supersedes`; takedown propagation rides existing `withdraws`-against-`holds_bytes`; no new structural primitives.
§5.10
model_3d:*
New composition policy ([§8.1.10](08_composition.md)) for trusted-publisher path + age-assurance gating. New governance sections ([§11.4](11_governance.md) fast-path takedown coordination + [§11.5](11_governance.md) hash-database operator policy). **1+4 wire-format lockdown preserved** — retire-key-grant rides existing `supersedes`; takedown propagation rides existing `withdraws`-against-`holds_bytes`; no new structural primitives.
§5.10
event:lifecycle:{state}
entries** (documentation-only registry additions; no amendment): `rsvps` (RSVP attestation against an event) + `vod_of` (reserved for the deferred live_stream→video relationship). **1+4 wire-format lockdown preserved** — lifecycle state machine composes from `withdraws` / `supersedes` / `delegates_to` + the new dimension's latest non-superseded emission; no new structural primitives. **`live_stream` remains deferred** ([CIRISNodeCore#25](https://github.com/CIRISAI/CIRISNodeCore/issues/25) Gap 2 not yet shipped; substrate-side Edge + Persist decisions pending) — CEG 0.4 codifies only what NodeCore shipped, per the downstream-demand-pulls-CEG-additions discipline established with 0.3.
§5.10
event:rsvp_count
entries** (documentation-only registry additions; no amendment): `rsvps` (RSVP attestation against an event) + `vod_of` (reserved for the deferred live_stream→video relationship). **1+4 wire-format lockdown preserved** — lifecycle state machine composes from `withdraws` / `supersedes` / `delegates_to` + the new dimension's latest non-superseded emission; no new structural primitives. **`live_stream` remains deferred** ([CIRISNodeCore#25](https://github.com/CIRISAI/CIRISNodeCore/issues/25) Gap 2 not yet shipped; substrate-side Edge + Persist decisions pending) — CEG 0.4 codifies only what NodeCore shipped, per the downstream-demand-pulls-CEG-additions discipline established with 0.3.
§5.10
event:attendance
entries** (documentation-only registry additions; no amendment): `rsvps` (RSVP attestation against an event) + `vod_of` (reserved for the deferred live_stream→video relationship). **1+4 wire-format lockdown preserved** — lifecycle state machine composes from `withdraws` / `supersedes` / `delegates_to` + the new dimension's latest non-superseded emission; no new structural primitives. **`live_stream` remains deferred** ([CIRISNodeCore#25](https://github.com/CIRISAI/CIRISNodeCore/issues/25) Gap 2 not yet shipped; substrate-side Edge + Persist decisions pending) — CEG 0.4 codifies only what NodeCore shipped, per the downstream-demand-pulls-CEG-additions discipline established with 0.3.
§5.10
topical_relation:{kind}
entries** (documentation-only registry additions; no amendment): `rsvps` (RSVP attestation against an event) + `vod_of` (reserved for the deferred live_stream→video relationship). **1+4 wire-format lockdown preserved** — lifecycle state machine composes from `withdraws` / `supersedes` / `delegates_to` + the new dimension's latest non-superseded emission; no new structural primitives. **`live_stream` remains deferred** ([CIRISNodeCore#25](https://github.com/CIRISAI/CIRISNodeCore/issues/25) Gap 2 not yet shipped; substrate-side Edge + Persist decisions pending) — CEG 0.4 codifies only what NodeCore shipped, per the downstream-demand-pulls-CEG-additions discipline established with 0.3.
§5.10
hard_case:community_membership_change:*
(4-prefix total). **New composition policy** ([§8.1.13](08_composition.md)) Policy M — community membership composition + geographic admission gate (parallel to Policy L but without at-rest cascade). **New governance section** ([§11.8](11_governance.md)) geographic-community privacy invariant — joining is opt-in disclosure; rough-only is wire-format-enforced; leaving is forward-only (the audit chain preserves the historical claim). **1+4 wire-format lockdown preserved** — zero new structural primitives; both new subject_kinds ride existing `scores` + subject_kind discriminator; admission gates ride existing `consensus_protocol` machinery from CEG 0.7. Ninth independent path confirming 1+4 minimal-and-adequate ([§1.4](01_foundation.md)) — demonstrates the wire format can express **rough-precision geospatial constraints as canonicalization rules** (§0.8) + subject_kind admission gates, without new structural primitives.
§5.10
hard_case:community_consensus_protocol_change:*
(4-prefix total). **New composition policy** ([§8.1.13](08_composition.md)) Policy M — community membership composition + geographic admission gate (parallel to Policy L but without at-rest cascade). **New governance section** ([§11.8](11_governance.md)) geographic-community privacy invariant — joining is opt-in disclosure; rough-only is wire-format-enforced; leaving is forward-only (the audit chain preserves the historical claim). **1+4 wire-format lockdown preserved** — zero new structural primitives; both new subject_kinds ride existing `scores` + subject_kind discriminator; admission gates ride existing `consensus_protocol` machinery from CEG 0.7. Ninth independent path confirming 1+4 minimal-and-adequate ([§1.4](01_foundation.md)) — demonstrates the wire format can express **rough-precision geospatial constraints as canonicalization rules** (§0.8) + subject_kind admission gates, without new structural primitives.
§5.10
hard_case:community_consensus_protocol_violation:*
(4-prefix total). **New composition policy** ([§8.1.13](08_composition.md)) Policy M — community membership composition + geographic admission gate (parallel to Policy L but without at-rest cascade). **New governance section** ([§11.8](11_governance.md)) geographic-community privacy invariant — joining is opt-in disclosure; rough-only is wire-format-enforced; leaving is forward-only (the audit chain preserves the historical claim). **1+4 wire-format lockdown preserved** — zero new structural primitives; both new subject_kinds ride existing `scores` + subject_kind discriminator; admission gates ride existing `consensus_protocol` machinery from CEG 0.7. Ninth independent path confirming 1+4 minimal-and-adequate ([§1.4](01_foundation.md)) — demonstrates the wire format can express **rough-precision geospatial constraints as canonicalization rules** (§0.8) + subject_kind admission gates, without new structural primitives.
§5.10
hard_case:location_proof_resolution_violation
(4-prefix total). **New composition policy** ([§8.1.13](08_composition.md)) Policy M — community membership composition + geographic admission gate (parallel to Policy L but without at-rest cascade). **New governance section** ([§11.8](11_governance.md)) geographic-community privacy invariant — joining is opt-in disclosure; rough-only is wire-format-enforced; leaving is forward-only (the audit chain preserves the historical claim). **1+4 wire-format lockdown preserved** — zero new structural primitives; both new subject_kinds ride existing `scores` + subject_kind discriminator; admission gates ride existing `consensus_protocol` machinery from CEG 0.7. Ninth independent path confirming 1+4 minimal-and-adequate ([§1.4](01_foundation.md)) — demonstrates the wire format can express **rough-precision geospatial constraints as canonicalization rules** (§0.8) + subject_kind admission gates, without new structural primitives.
§5.10
listed:public
; **composition extension** ([§8.1.13.7](08_composition.md)) `delivery_mode` × Policy M + `history_on_join` × membership additions; **`rotation_chain` hygiene fixes** clarify CEG 0.3's `key_grant.rotation_chain` is content-addressed grant-supersession lineage (not key-rotation) and CEG 0.10 introduces a parallel per-`(stream_id, epoch)` axis reusing the same payload-level supersession mechanism. **Bifurcated**: observer-share half impl-live (no blockers); streaming multicast half spec-now/impl substrate-pending [CIRISPersist#142](https://github.com/CIRISAI/CIRISPersist/issues/142) + accountable tier additionally pending [CIRISRegistry#34](https://github.com/CIRISAI/CIRISRegistry/issues/34). Open gate: RC1-1c V054 CHECK parallel-arm migration (bounded constraint migration, not pure-additive at Persist constraint layer). Tenth independent path confirming 1+4 minimal-and-adequate ([§1.4](01_foundation.md)) — substrate-fan-out and 1:N media multicast compose from the same 1+4 set as 1:1 attestations.
§5.10
delivery_receipt:{stream_id}
; **composition extension** ([§8.1.13.7](08_composition.md)) `delivery_mode` × Policy M + `history_on_join` × membership additions; **`rotation_chain` hygiene fixes** clarify CEG 0.3's `key_grant.rotation_chain` is content-addressed grant-supersession lineage (not key-rotation) and CEG 0.10 introduces a parallel per-`(stream_id, epoch)` axis reusing the same payload-level supersession mechanism. **Bifurcated**: observer-share half impl-live (no blockers); streaming multicast half spec-now/impl substrate-pending [CIRISPersist#142](https://github.com/CIRISAI/CIRISPersist/issues/142) + accountable tier additionally pending [CIRISRegistry#34](https://github.com/CIRISAI/CIRISRegistry/issues/34). Open gate: RC1-1c V054 CHECK parallel-arm migration (bounded constraint migration, not pure-additive at Persist constraint layer). Tenth independent path confirming 1+4 minimal-and-adequate ([§1.4](01_foundation.md)) — substrate-fan-out and 1:N media multicast compose from the same 1+4 set as 1:1 attestations.
§5.10
weighted:{rubric}
for `cohort_scope: self | family` content; the cewp claim "the wire format can't carry them in the first place" is now normative. **New governance section** ([§11.7](11_governance.md)) self/family membership governance — locked the 4 open decisions from #47 (Option A forward-secrecy + envelope `family_id` for multi-family + reserved-prefix substrate ownership + single-vouch self / consensus-protocol family). **Retcon at [§9.1](09_humanity_accord.md)**: HUMANITY_ACCORD triple is the canonical entrenched-`family` instance (3 founders, `consensus_protocol: quorum:2/3`, `consensus_protocol_entrenched: true`). **1+4 wire-format lockdown preserved** — zero new structural primitives; both new subject_kinds ride existing `scores` + subject_kind discriminator; membership changes ride existing `supersedes`; DEK cascade rides existing `key_grant` wrap + Option-A re-grant (`rotation_chain` from CEG 0.3 is the content-addressed grant-supersession lineage, a separate axis — see [§5.6.8.4](#key_grant) disambiguation). Eighth independent path confirming 1+4 minimal-and-adequate ([§1.4](01_foundation.md)) — demonstrates the structural set is rich enough to express collective-scale membership AND the wire-format-level closure of the cewp structural-invisibility privacy claim.
§5.10
custom:{id}
for `cohort_scope: self | family` content; the cewp claim "the wire format can't carry them in the first place" is now normative. **New governance section** ([§11.7](11_governance.md)) self/family membership governance — locked the 4 open decisions from #47 (Option A forward-secrecy + envelope `family_id` for multi-family + reserved-prefix substrate ownership + single-vouch self / consensus-protocol family). **Retcon at [§9.1](09_humanity_accord.md)**: HUMANITY_ACCORD triple is the canonical entrenched-`family` instance (3 founders, `consensus_protocol: quorum:2/3`, `consensus_protocol_entrenched: true`). **1+4 wire-format lockdown preserved** — zero new structural primitives; both new subject_kinds ride existing `scores` + subject_kind discriminator; membership changes ride existing `supersedes`; DEK cascade rides existing `key_grant` wrap + Option-A re-grant (`rotation_chain` from CEG 0.3 is the content-addressed grant-supersession lineage, a separate axis — see [§5.6.8.4](#key_grant) disambiguation). Eighth independent path confirming 1+4 minimal-and-adequate ([§1.4](01_foundation.md)) — demonstrates the structural set is rich enough to express collective-scale membership AND the wire-format-level closure of the cewp structural-invisibility privacy claim.
§5.10
hard_case:identity_occurrence_added:*
for `cohort_scope: self | family` content; the cewp claim "the wire format can't carry them in the first place" is now normative. **New governance section** ([§11.7](11_governance.md)) self/family membership governance — locked the 4 open decisions from #47 (Option A forward-secrecy + envelope `family_id` for multi-family + reserved-prefix substrate ownership + single-vouch self / consensus-protocol family). **Retcon at [§9.1](09_humanity_accord.md)**: HUMANITY_ACCORD triple is the canonical entrenched-`family` instance (3 founders, `consensus_protocol: quorum:2/3`, `consensus_protocol_entrenched: true`). **1+4 wire-format lockdown preserved** — zero new structural primitives; both new subject_kinds ride existing `scores` + subject_kind discriminator; membership changes ride existing `supersedes`; DEK cascade rides existing `key_grant` wrap + Option-A re-grant (`rotation_chain` from CEG 0.3 is the content-addressed grant-supersession lineage, a separate axis — see [§5.6.8.4](#key_grant) disambiguation). Eighth independent path confirming 1+4 minimal-and-adequate ([§1.4](01_foundation.md)) — demonstrates the structural set is rich enough to express collective-scale membership AND the wire-format-level closure of the cewp structural-invisibility privacy claim.
§5.10
hard_case:family_membership_change:*
for `cohort_scope: self | family` content; the cewp claim "the wire format can't carry them in the first place" is now normative. **New governance section** ([§11.7](11_governance.md)) self/family membership governance — locked the 4 open decisions from #47 (Option A forward-secrecy + envelope `family_id` for multi-family + reserved-prefix substrate ownership + single-vouch self / consensus-protocol family). **Retcon at [§9.1](09_humanity_accord.md)**: HUMANITY_ACCORD triple is the canonical entrenched-`family` instance (3 founders, `consensus_protocol: quorum:2/3`, `consensus_protocol_entrenched: true`). **1+4 wire-format lockdown preserved** — zero new structural primitives; both new subject_kinds ride existing `scores` + subject_kind discriminator; membership changes ride existing `supersedes`; DEK cascade rides existing `key_grant` wrap + Option-A re-grant (`rotation_chain` from CEG 0.3 is the content-addressed grant-supersession lineage, a separate axis — see [§5.6.8.4](#key_grant) disambiguation). Eighth independent path confirming 1+4 minimal-and-adequate ([§1.4](01_foundation.md)) — demonstrates the structural set is rich enough to express collective-scale membership AND the wire-format-level closure of the cewp structural-invisibility privacy claim.
§5.10
hard_case:family_consensus_protocol_change:*
for `cohort_scope: self | family` content; the cewp claim "the wire format can't carry them in the first place" is now normative. **New governance section** ([§11.7](11_governance.md)) self/family membership governance — locked the 4 open decisions from #47 (Option A forward-secrecy + envelope `family_id` for multi-family + reserved-prefix substrate ownership + single-vouch self / consensus-protocol family). **Retcon at [§9.1](09_humanity_accord.md)**: HUMANITY_ACCORD triple is the canonical entrenched-`family` instance (3 founders, `consensus_protocol: quorum:2/3`, `consensus_protocol_entrenched: true`). **1+4 wire-format lockdown preserved** — zero new structural primitives; both new subject_kinds ride existing `scores` + subject_kind discriminator; membership changes ride existing `supersedes`; DEK cascade rides existing `key_grant` wrap + Option-A re-grant (`rotation_chain` from CEG 0.3 is the content-addressed grant-supersession lineage, a separate axis — see [§5.6.8.4](#key_grant) disambiguation). Eighth independent path confirming 1+4 minimal-and-adequate ([§1.4](01_foundation.md)) — demonstrates the structural set is rich enough to express collective-scale membership AND the wire-format-level closure of the cewp structural-invisibility privacy claim.
§5.10
hard_case:family_consensus_protocol_violation:*
for `cohort_scope: self | family` content; the cewp claim "the wire format can't carry them in the first place" is now normative. **New governance section** ([§11.7](11_governance.md)) self/family membership governance — locked the 4 open decisions from #47 (Option A forward-secrecy + envelope `family_id` for multi-family + reserved-prefix substrate ownership + single-vouch self / consensus-protocol family). **Retcon at [§9.1](09_humanity_accord.md)**: HUMANITY_ACCORD triple is the canonical entrenched-`family` instance (3 founders, `consensus_protocol: quorum:2/3`, `consensus_protocol_entrenched: true`). **1+4 wire-format lockdown preserved** — zero new structural primitives; both new subject_kinds ride existing `scores` + subject_kind discriminator; membership changes ride existing `supersedes`; DEK cascade rides existing `key_grant` wrap + Option-A re-grant (`rotation_chain` from CEG 0.3 is the content-addressed grant-supersession lineage, a separate axis — see [§5.6.8.4](#key_grant) disambiguation). Eighth independent path confirming 1+4 minimal-and-adequate ([§1.4](01_foundation.md)) — demonstrates the structural set is rich enough to express collective-scale membership AND the wire-format-level closure of the cewp structural-invisibility privacy claim.
§5.10
holds_bytes:sha256:*
for `cohort_scope: self | family` content; the cewp claim "the wire format can't carry them in the first place" is now normative. **New governance section** ([§11.7](11_governance.md)) self/family membership governance — locked the 4 open decisions from #47 (Option A forward-secrecy + envelope `family_id` for multi-family + reserved-prefix substrate ownership + single-vouch self / consensus-protocol family). **Retcon at [§9.1](09_humanity_accord.md)**: HUMANITY_ACCORD triple is the canonical entrenched-`family` instance (3 founders, `consensus_protocol: quorum:2/3`, `consensus_protocol_entrenched: true`). **1+4 wire-format lockdown preserved** — zero new structural primitives; both new subject_kinds ride existing `scores` + subject_kind discriminator; membership changes ride existing `supersedes`; DEK cascade rides existing `key_grant` wrap + Option-A re-grant (`rotation_chain` from CEG 0.3 is the content-addressed grant-supersession lineage, a separate axis — see [§5.6.8.4](#key_grant) disambiguation). Eighth independent path confirming 1+4 minimal-and-adequate ([§1.4](01_foundation.md)) — demonstrates the structural set is rich enough to express collective-scale membership AND the wire-format-level closure of the cewp structural-invisibility privacy claim.
§5.10
consent:*
). **One new subject_kind** ([§5.6.8.7](#5687-consent_record-subject_kind-ceg-06-addition)): `consent_record` (ceremony envelope parallel to `key_grant` / `takedown_notice`; both bare-`scores` and ceremony shapes admitted at the same gate). **New composition policy** ([§8.1.11](08_composition.md)) Policy K — CEM composition. **New governance section** ([§11.6](11_governance.md)) vertical compliance mapping (HIPAA / GDPR Art 9 / FERPA / CCPA / AI training right-to-be-forgotten) + dimension-pattern-implies-`subject_key_ids` requirement. **1+4 wire-format lockdown preserved** — zero new structural primitives; one envelope field + one namespace family + one optional subject_kind + one semantic broadening. **CIRISAgent's CEM** (TEMPORARY / PARTNERED / ANONYMOUS streams) becomes a **consumer-policy bundle over the wire primitive**, not a wire-format lockdown; other agents MAY compose other streams over the same primitives.
§5.10
state:*
). **One new subject_kind** ([§5.6.8.7](#5687-consent_record-subject_kind-ceg-06-addition)): `consent_record` (ceremony envelope parallel to `key_grant` / `takedown_notice`; both bare-`scores` and ceremony shapes admitted at the same gate). **New composition policy** ([§8.1.11](08_composition.md)) Policy K — CEM composition. **New governance section** ([§11.6](11_governance.md)) vertical compliance mapping (HIPAA / GDPR Art 9 / FERPA / CCPA / AI training right-to-be-forgotten) + dimension-pattern-implies-`subject_key_ids` requirement. **1+4 wire-format lockdown preserved** — zero new structural primitives; one envelope field + one namespace family + one optional subject_kind + one semantic broadening. **CIRISAgent's CEM** (TEMPORARY / PARTNERED / ANONYMOUS streams) becomes a **consumer-policy bundle over the wire primitive**, not a wire-format lockdown; other agents MAY compose other streams over the same primitives.
§5.10
stream:*
). **One new subject_kind** ([§5.6.8.7](#5687-consent_record-subject_kind-ceg-06-addition)): `consent_record` (ceremony envelope parallel to `key_grant` / `takedown_notice`; both bare-`scores` and ceremony shapes admitted at the same gate). **New composition policy** ([§8.1.11](08_composition.md)) Policy K — CEM composition. **New governance section** ([§11.6](11_governance.md)) vertical compliance mapping (HIPAA / GDPR Art 9 / FERPA / CCPA / AI training right-to-be-forgotten) + dimension-pattern-implies-`subject_key_ids` requirement. **1+4 wire-format lockdown preserved** — zero new structural primitives; one envelope field + one namespace family + one optional subject_kind + one semantic broadening. **CIRISAgent's CEM** (TEMPORARY / PARTNERED / ANONYMOUS streams) becomes a **consumer-policy bundle over the wire primitive**, not a wire-format lockdown; other agents MAY compose other streams over the same primitives.
§5.10
deletion_sla:*
). **One new subject_kind** ([§5.6.8.7](#5687-consent_record-subject_kind-ceg-06-addition)): `consent_record` (ceremony envelope parallel to `key_grant` / `takedown_notice`; both bare-`scores` and ceremony shapes admitted at the same gate). **New composition policy** ([§8.1.11](08_composition.md)) Policy K — CEM composition. **New governance section** ([§11.6](11_governance.md)) vertical compliance mapping (HIPAA / GDPR Art 9 / FERPA / CCPA / AI training right-to-be-forgotten) + dimension-pattern-implies-`subject_key_ids` requirement. **1+4 wire-format lockdown preserved** — zero new structural primitives; one envelope field + one namespace family + one optional subject_kind + one semantic broadening. **CIRISAgent's CEM** (TEMPORARY / PARTNERED / ANONYMOUS streams) becomes a **consumer-policy bundle over the wire primitive**, not a wire-format lockdown; other agents MAY compose other streams over the same primitives.
§5.10
decay:*
). **One new subject_kind** ([§5.6.8.7](#5687-consent_record-subject_kind-ceg-06-addition)): `consent_record` (ceremony envelope parallel to `key_grant` / `takedown_notice`; both bare-`scores` and ceremony shapes admitted at the same gate). **New composition policy** ([§8.1.11](08_composition.md)) Policy K — CEM composition. **New governance section** ([§11.6](11_governance.md)) vertical compliance mapping (HIPAA / GDPR Art 9 / FERPA / CCPA / AI training right-to-be-forgotten) + dimension-pattern-implies-`subject_key_ids` requirement. **1+4 wire-format lockdown preserved** — zero new structural primitives; one envelope field + one namespace family + one optional subject_kind + one semantic broadening. **CIRISAgent's CEM** (TEMPORARY / PARTNERED / ANONYMOUS streams) becomes a **consumer-policy bundle over the wire primitive**, not a wire-format lockdown; other agents MAY compose other streams over the same primitives.
§5.10
scope:*
). **One new subject_kind** ([§5.6.8.7](#5687-consent_record-subject_kind-ceg-06-addition)): `consent_record` (ceremony envelope parallel to `key_grant` / `takedown_notice`; both bare-`scores` and ceremony shapes admitted at the same gate). **New composition policy** ([§8.1.11](08_composition.md)) Policy K — CEM composition. **New governance section** ([§11.6](11_governance.md)) vertical compliance mapping (HIPAA / GDPR Art 9 / FERPA / CCPA / AI training right-to-be-forgotten) + dimension-pattern-implies-`subject_key_ids` requirement. **1+4 wire-format lockdown preserved** — zero new structural primitives; one envelope field + one namespace family + one optional subject_kind + one semantic broadening. **CIRISAgent's CEM** (TEMPORARY / PARTNERED / ANONYMOUS streams) becomes a **consumer-policy bundle over the wire primitive**, not a wire-format lockdown; other agents MAY compose other streams over the same primitives.
§5.10

CIRISVerify Attestation ladder L1-L5, provenance, transparency log, cert validity

15 prefixes

Repo: CIRISAI/CIRISVerify

§5.2 CIRISVerify — attestation ladder, provenance, transparency

attestation:self_verifyStandingboolean-via-score
Running CIRISVerify binary attests itself against its function manifest. (Consumer-side ladder: corresponds to L1; see §8.1.9 Policy I.)
§5.2
attestation:hardware_rootedStandingboolean-via-score
Hardware-rooted attestation (TPM 2.0 / Android Keystore / iOS Secure Enclave). (Ladder L2.)
§5.2
attestation:registry_consensusStandingboolean-via-score; `Indeterminate` allowed → RESTRICTED
2-of-3 multi-source registry consensus on key / build / license validity. (Ladder L3.)
§5.2
attestation:license_validityStandingboolean-via-score
License-validity claim (Registry-signed, Verify-verified). (Ladder L4.)
§5.2
attestation:agent_integrityStandingboolean-via-score
Agent source-tree byte-equal against registered manifest. (Ladder L5.)
§5.2
provenance:slsa:{level}Standingboolean-via-score
SLSA build provenance levels 1-3. Registry emits these on build registration; Verify v3.6.0+ `AttestBundle.provenance.slsa_level` consumes.
§5.2
provenance:build_manifest:{target}Standingboolean-via-score
Per-target canonical-staged-runtime manifest hash equality. Each `BuildManifest` is hybrid-signed (Ed25519 + ML-DSA-65) by the per-primitive steward.
§5.2
provenance:build_manifest:{target}:locale:{lang_code}Standingboolean-via-score
Per-locale signed sub-manifest within a target's manifest tree. Parent target manifest is Merkle root over per-locale leaves. RFC 6962 padding for non-power-of-2. Detection surface for locale-targeted attacks. Canonical-bytes spec at [§5.2.1](#521-canonical-bytes-contracts-for-provenance-primitives).
§5.2
provenance:skill_import:{source}Standing`direct:{url}` \
Community-skill import provenance. `{source}` ∈ `registry:{registry_id}` \
§5.2
transparency_log:inclusionStandingboolean-via-score
RFC 6962 inclusion proof for an audit leaf.
§5.2
transparency_log:consistencyStandingboolean-via-score
RFC 6962 consistency proof between two STHs.
§5.2
transparency_log:cosigned:{tree_size}Standingsigned
Witness cosignature on an STH (substrate-conformance path; 0.1 interim uses per-region `registry_sth_cosignatures` table; see [§10.3](10_endpoints.md) endpoints).
§5.2
rollback_detected:{revision_field}Standing-1 only
Anti-rollback — decrease in revocation revision.
§5.2
cert_validity:{authority}Standingboolean-via-score
Validity of a certification authority's signature. Each registry steward emits `cert_validity:{steward_id}` self-attestation alongside `/v1/steward-key`.
§5.2
hardware_custody:{platform}Standingboolean-via-scoreFractal self
Statement that the seed lives in `tpm` / `ios_secure_enclave` / `android_keystore` / `software_fallback`.
§5.2

§5.2.1 Canonical-bytes contracts for provenance primitives

CIRISPersist Substrate self-reports (system:* reserved)

5 prefixes

Repo: CIRISAI/CIRISPersist

§5.3 CIRISPersist — substrate health

system:*Standing
reserved per [§7.1](07_reserved.md).
§5.3
audit_chain:hash_continuityStandingsigned
Authors: see [§14](14_glossaries.md) Persist leaf glossary for narrative-name → canonical-leaf mapping.
§5.3
corpus_health:n_eff_measurableStandingsigned
Authors: see [§14](14_glossaries.md) Persist leaf glossary for narrative-name → canonical-leaf mapping.
§5.3
identity_continuity:relational_anchorStandingsigned
Authors: see [§14](14_glossaries.md) Persist leaf glossary for narrative-name → canonical-leaf mapping.
§5.3
federation_directory:replication_lagStandingsigned
Authors: see [§14](14_glossaries.md) Persist leaf glossary for narrative-name → canonical-leaf mapping.
§5.3

CIRISEdge Transport, delivery, peer reachability, key boundary (system:* reserved)

4 prefixes

Repo: CIRISAI/CIRISEdge

§5.4 CIRISEdge — transport, delivery, reachability

transport:{kind}Standingsigned
See [§14](14_glossaries.md) Edge leaf glossary.
§5.4
delivery:{class}Standingsigned
See [§14](14_glossaries.md) Edge leaf glossary.
§5.4
peer_reachability:{network}Standingsigned
See [§14](14_glossaries.md) Edge leaf glossary.
§5.4
key_boundary:{scope}Standingsigned
See [§14](14_glossaries.md) Edge leaf glossary.
§5.4

CIRISLensCore Coherence Ratchet detectors, Capacity Score, correlated-action + distributive-access detectors

15 prefixes

Repo: CIRISAI/CIRISLensCore

§5.5.1 Five Coherence-Ratchet detectors

detection:cross_agent_divergenceDetectionsigned
Polarity: signed.
§5.5.1
detection:intra_agent_consistencyDetectionsigned
Polarity: signed.
§5.5.1
detection:hash_chain_integrityDetectionsigned
Polarity: signed.
§5.5.1
detection:temporal_driftDetectionsigned
Polarity: signed.
§5.5.1
detection:conscience_override_rateDetectionsigned
Polarity: signed.
§5.5.1

§5.5.2 Cohort + conformity prefixes

manifold_conformity:{cohort}Standingsigned
Polarity: signed.
§5.5.2
coherence_standing:{cohort}Standingsigned
Polarity: signed.
§5.5.2

§5.5.3 F-3 structural-injustice / correlated-action detector

detection:correlated_action:{axis}Detectionsigned
Population-scale correlated-action detector. Reads federation-emitted signed traces; reports correlation structure (`ρ`, `k_eff`) over goal-aligned individually-compliant pursuit by groups whose aggregate trajectory has effects on individuals or groups outside the pursuit. Calibrated via the `CIRISAI/RATCHET` heuristic package (versioned, hash-pinned). `{axis}` is open vocabulary requiring an operational definition in the calibration package per [§11.2.1](11_governance.md); canonical axes include `rights_asymmetry:{population}`, `participation_exclusion:{cohort}`, `participation_inclusion:{cohort}`, `informational_asymmetry:{scope}`, `informational_symmetry:{scope}`, `aggregate_footprint:{harm_class}`, `aggregate_benefit:{class}`, `ecology_of_communication:{aspect}`. **Polarity carries the verdict**: positive scores indicate the structural pattern is present and strong on the named axis; negative scores indicate weak / uncertain detection or evidence of the inverse pattern.
§5.5.3

§5.5.4 Capacity-Score factor prefixes (`𝒞_CIRIS = C · I_int · R · I_inc · S`)

capacity:core_identityStandingsigned
§5.5.4
capacity:integrityStandingsigned
§5.5.4
capacity:resilienceStandingsigned
§5.5.4
capacity:incompleteness_awarenessStandingsigned
§5.5.4
capacity:sustained_coherenceStandingsigned
§5.5.4
capacity:compositeStandingsigned
§5.5.4

§5.5.5 Distributive-access detector

detection:distributive:access:{resource_type}Detectionsigned
Population-scale resource-concentration detector. `{resource_type}` ∈ `compute`, `models`, `training_data`, `agent_capabilities`, `federation_membership`. Same F-3 detector machinery; different trace source (resource events vs action events).
§5.5.5

CIRISNodeCore Credits / Expertise / Decision hierarchy / Consensus / Governance

49 prefixes

Repo: CIRISAI/CIRISNodeCore

§5.6.1 Tier-1: Agent-state ledger prefixes

credits:{domain}:{language}:{subject}Standingpositive-only
Commons Credits (P2). Non-transferable governance weight; accrues via truth-grounding loop.
§5.6.1
credits:{domain}:{language}:substrate_buildingStandingpositive-only
Sub-leaf for substrate-building labor (infrastructure maintenance, dependency contribution, documentation) not visible to the per-grounded-vote accrual loop.
§5.6.1
expertise:{domain}:{language}Standingsigned
Expertise standing (P3). Broader granularity than credits.
§5.6.1
activity_tier:{period}Standingboolean-via-score
Active vs Below-Active per 30-day window (F-AV-DORMANT).
§5.6.1

§5.6.2 Tier-2: Decision-hierarchy prefixes (upward-only DAG)

goal:{scale}Actionsigned
Multi-scale belonging-projector composite. `{scale}` ∈ `self`, `family`, `community`, `affiliations`, `species`, `planet`, `biosphere`. Scored by 𝒞_CIRIS. The persist typed `Goal` (CIRISPersist#114) is the substrate OBJECT being scored; `goal:{scale}` is the ATTESTATION about it. Required `MetaGoalAlignment` (M-1 dimension + declarer rationale) on every Goal as construction-time invariant. Edge `MessageType::GoalDeclaration` + `GoalRetirement` (CIRISEdge#41) provide federation transport.
§5.6.2
approach:{goal_id}Actionsigned
Strategic pathway from current state toward Goals (Piece 10 karma).
§5.6.2
method:{approach_id}:{substrate_rung}Actionsigned
Concrete operational practice. Required `substrate_rung` (Ph0/Ph1/Ph2/A0..A5).
§5.6.2
progress_measure:{method_id}Actionsigned
Evidence of progress. Required `tracks[]`, `computation`, `validity_window`, `goodhart_resistance`.
§5.6.2

§5.6.3 Tier-3: Consensus-mechanics prefixes

vote:{contribution_id}Consensussigned
Signed score on a Contribution (P4). Weight = Credits × expertise multiplier.
§5.6.3
truth_grounding:{subject}Consensussigned
Per-subject ground-truth signal.
§5.6.3
weighted_aggregate:{contribution_id}Consensussigned
Rolling tally per Contribution (P7).
§5.6.3
witness_diversity:{contribution_id}Consensusboolean-via-score
Witness set meets jurisdictional + organizational + software-stack + cell-expertise bars (P10). N=3 default.
§5.6.3
testimonial_witness:{kind}Consensussigned
Preserves singular narrative of an affected party as singular witness — distinct from `witness_diversity:*` (which aggregates multiple reviewers toward consensus). **`{kind}` is open vocabulary** as of CEG 0.1; the four load-bearing wire-level disciplines (`witness_relation: self`, `cohort_scope: self`, never aggregated, never sole evidence for `slashing:*`) are what make this Ubuntu-aligned, not the enum membership. Non-normative registered taxonomy for discoverability: [`FSD/WITNESS_KIND_REGISTRY.md`](../WITNESS_KIND_REGISTRY.md). Polarity: typically positive (narrative IS preserved); negative on `withdraws` or `recants` by the original witness.
§5.6.3
need:{domain}:{kind}Consensuspositive-only
Federation-scope open-call surface — broadcast claim that an entity has a stated need. Distinct from `deferral_request` Contribution kind (which routes a single ask within a cell). `{kind}` open vocabulary: `witness`, `method_contributor`, `expertise_solicitation`, `mentor`, `co_signer`, `evidence`. Lifecycle via existing structural primitives (`supersedes` to revise, `withdraws` to satisfy/close, `recants` if misstated).
§5.6.3

§5.6.4 Tier-4: Governance-steering prefixes

moderation:{allegation_type}Correctionsigned
ModerationEvent. `{allegation_type}` ∈ `rogue_vote` / `coordinated_voting` / `out_of_distribution_attestation` / `external_inducement_evidence` / `expertise_fraud`.
§5.6.4
slashing:{outcome}Correctionboolean-via-score
`PROVEN_ROGUE` / `NOT_PROVEN`. **Decoupled from disagreement** at every decision-hierarchy level. Only fires on documented Method-execution spoofing or original P8 allegation types.
§5.6.4
reconsideration:{grounds}Correctionsigned
`new_evidence` / `procedural_error` / `quorum_compromise`. Outcome `reversed` / `partial` / `upheld`.
§5.6.4
commitment_fulfillment:{prior_contribution_id}Correctionsigned
Track-record of follow-through.
§5.6.4

§5.6.5 Decision-locality prefixes

locality:decision:{scale}Action`regional` \
Names the scale at which a decision is being made. `{scale}` ∈ `local` \
§5.6.5

§5.6.6 Hard-case + transparency + judge-model prefixes

hard_case:{kind}Standingpositive-only
**Open vocabulary**. Surfaces flag conditions for federation-health observability + downstream review. Canonical kinds: `vote_variance` (vote variance exceeded threshold at truth-grounding resolution), `resolution_time` (truth-grounding took > P75 of cell's distribution), `moderation_filed` (substantive ModerationEvent filed), `novel_context` (no precedent in attestation graph), `sla_breach_unattested` (per `fidelity:explainability_sla:{tier}` composition), `unresolved_consent` (consent boundary unclear). New `{kind}` values land via the [§11.2](11_governance.md) amendment process.
§5.6.6
seed_holder_voting_alignment:{cell}Standingsigned
Pairwise cosine of seed-holder vote vectors per voting window. Transparency signal only — not a slashing trigger.
§5.6.6
judge_model:verdict:{model_id}Standingboolean-via-score
Independent foundation-model judge verdict (PASS/FAIL/UNDETERMINED). Default model: Claude Opus 4.7.
§5.6.6

§5.6.7 Files-as-Contributions joint claim

agent_files:{kind}:{platform_or_target}Standingsigned
**Joint claim with [§5.9](#59-cirisregistry--identity--build--license--partner) CIRISRegistry.** Files a CIRIS agent (or installer fetching one) may load. `{kind}` open vocabulary; canonical: `installer:{platform}`, `adapter:{name}`, `config:{kind}`, `build:{target}`, `source:{language}:{module}`, `state:{component}`. Bytes are SHA-256-addressed and resolved via [§10.1](10_endpoints.md) transport substrate (Edge `MessageType::ContentFetch`). NodeCore-side rule: node-mode peers serve bytes; client/relay modes don't.
§5.6.7
holds_bytes:sha256:{prefix}Standingboolean-via-score
Substrate auto-emission per CIRISPersist#103 `federation_blobs.put_blob`. `{prefix}` is a short SHA prefix for index efficiency; full SHA lives in `evidence_refs[]`. Consumed by Edge's `PeerResolver::resolve_holders` to route `ContentFetch` requests. **Consumer MUST verify the full SHA in `evidence_refs[]` matches the received blob before consumption** (see [§10.1](10_endpoints.md)).
§5.6.7

§5.6.8 Content-ingestion prefixes

news:*Standingsigned
News-content claims; publisher-attested + time-decaying + fact-checker composition.
§5.6.8
encyclopedia:*Standingsigned
Encyclopedia-content claims; editor-consensus + revision chain.
§5.6.8
chat:*Standingsigned
Chat-content claims (quality / participant-trust / context).
§5.6.8
blog:*Standingsigned
Blog-content claims (author-credibility / topic-domain).
§5.6.8
topical_relation:{kind}Standingenumerated
**Open vocabulary** inter-content relationship edges. Canonical kinds: `references`, `corrects`, `supersedes_article` (distinct from the structural primitive `supersedes`), `see_also`, `disambiguates`, `translation_of`, `replies_to`, `comments_on`, `cites_source`, `rsvps` (CEG 0.4; RSVP attestation against an `event_listing` Contribution), `vod_of` (CEG 0.4; reserved for the post-stream `video` → `live_stream` relationship when [CIRISNodeCore#25](https://github.com/CIRISAI/CIRISNodeCore/issues/25) Gap 2 ships). New `{kind}` values are documentation-only registry entries (no §11.2 amendment needed).
§5.6.8
content_rating:{scheme}:{rating}Standingsigned
Multi-scheme content rating. `{scheme}` ∈ `mpaa` (G/PG/PG-13/R/NC-17), `bbfc` (U/PG/12/15/18), `pegi` (3/7/12/16/18), `esrb` (E/E10+/T/M/AO), `ifco`, `csm` (Common Sense Media), or `operator:{operator_id}` for operator-defined rubrics. Polarity carries certifier confidence; not a slashing input.
§5.6.8
content_class:{class}Standingenumerated
Mechanism-descriptive content classification. `{class}` open vocabulary; canonical: `film`, `short_film`, `documentary`, `art_piece`, `theatre`, `performance`, `news`, `educational`, `entertainment`, `vlog`, `adult`, `generated`. Distinct from `cw_class:*` (community declarations) — `content_class` is producer-declared production-class; `cw_class` is community-applied content-warning.
§5.6.8
cw_class:{class}Standingenumerated
Community CW (content-warning) declarations. `{class}` open vocabulary; canonical: `art_cinema`, `horror`, `political`, `erotic`, `violence`, `medical`, `nsfw_text`. Cohort-attestable per [§8.3](08_composition.md) Frickerian discipline (low-density cohort CWs not downweighted).
§5.6.8
age_assurance:{level}Standingenumerated
Age-assurance attestation. `{level}` ∈ `self` (self-declared age, lowest confidence), `provider:{verifier_key}:adult` (third-party verifier attests adult), `government:{credential_class}:adult` (government-credential-backed adult attestation, highest confidence). NEVER fires `slashing:*` on misdeclaration alone — `moderation:age_assurance_misdeclaration` is the adjudication path.
§5.6.8
image:*Standingsigned
Image-content claims (per `external_content:image` sub_kind).
§5.6.8
audio:*Standingsigned
Audio-content claims (per `external_content:audio` sub_kind).
§5.6.8
video:*Standingsigned
Video-content claims (per `external_content:video` sub_kind).
§5.6.8
film:*Standingsigned
Film-content claims (per `external_content:film` sub_kind). Distinguished from `video:*` by distributor attestation chain.
§5.6.8
model_3d:*Standingsigned
3D-content claims (per `external_content:model_3d` sub_kind).
§5.6.8
event:lifecycle:{state}Standingenumerated
State-transition signal for an `event_listing`. Canonical states: `open` (initial admission; RSVPs accepted), `cancelled` (organizer-issued cancellation; composes with `withdraws` against the event Contribution), `completed` (post-event finalization), `superseded` (composes with `supersedes` for reschedule). Lifecycle state is consumer-side composition over the structural primitives + this dimension's latest non-superseded emission.
§5.6.8
event:rsvp_countStandingsigned
Published RSVP tally (scalar). Distinct from the underlying `topical_relation:rsvps` edge set ([§5.6.8.2](#5682-inter-content--relation-prefixes)) — `rsvp_count` is the publisher-asserted aggregate; the edge set is the auditable individual attestations. Consumer policy MAY reconcile divergence as a soft anomaly signal.
§5.6.8
event:attendanceStandingsigned
Post-event attendance attestation, typically by event organizer `key_id`. Polarity carries organizer's confidence (e.g., turnstile-counted vs. honor-system).
§5.6.8
consent:state:{granted\Standingexpired}`
revoked\
§5.6.8
consent:stream:{kind}Standingenumerated
Pre-packaged stream bundle. Recommended canonical kinds: `temporary` (14d auto-expire, default), `partnered` (bilateral + persistent), `anonymous` (decay-protocol target). Open vocab; recommended-not-mandatory per the [CIRISAgent CEM](https://github.com/CIRISAI/CIRISAgent/blob/main/docs/CIRIS_CONSENT_SERVICE.md) bundle; other agents MAY compose other streams.
§5.6.8
consent:deletion_sla:{days}Standingsigned
Producer's commitment at publication: time-to-delete-after-revoke. Numeric value carries the SLA window. Composes with [§8.1.11 Policy K](08_composition.md) SLA-breach watcher.
§5.6.8
consent:deletion_completeStandingpositive-only
Producer's attestation that subject-revoked content has been evicted from local stores. Cancels the SLA-breach watcher.
§5.6.8
consent:decay:{stage}Standingenumerated
Substrate emission during multi-stage decay protocols. Canonical stages: `identity_severed` / `patterns_anonymized` / `complete` (CIRISAgent 90-day decay). Open vocab; other agents MAY define other decay paths.
§5.6.8
consent:partnership_grantStandingpositive-only
Subject side of a bilateral grant; pairs with producer's `consent:partnership_accept` via `topical_relation:bilateral_pair`.
§5.6.8
consent:partnership_acceptStandingpositive-only
Producer side of a bilateral grant.
§5.6.8
consent:scope:{kind}Standingenumerated
Scope qualifier on a `consent:state:granted` — names what the grant covers. Canonical kinds: `retain` (keep the bytes), `share` (propagate across federation), `analyze` (derive features / scores / classifications), `train` (use as training input), `publish` (publish to external systems). Open vocab with sub-scoping: `retain:90d`, `share:cohort:family`, etc.
§5.6.8

RATCHET Anti-Sybil flags (advisory, never sole evidence)

8 prefixes

Repo: CIRISAI/RATCHET

§5.7 RATCHET — anti-Sybil / Counter-RII flags

ratchet:flag:out_of_distribution_votingDetectionsigned
Polarity: signed.
§5.7
ratchet:flag:coordinated_voting_clusterDetectionsigned
Polarity: signed.
§5.7
ratchet:flag:density_anomalyDetectionsigned
Polarity: signed.
§5.7
ratchet:flag:expertise_attestation_anomalyDetectionsigned
Polarity: signed.
§5.7
ratchet:flag:counter_rii:{layer}Detectionsigned
Polarity: signed.
§5.7
ratchet:flag:harassment_patternDetectionsigned
Polarity: signed.
§5.7
ratchet:flag:*Detection
WA quorum is the load-bearing gate.
§5.7
slashing:*Detection
WA quorum is the load-bearing gate.
§5.7

CIRISBench HE-300 benchmark outcomes

1 prefixes

Repo: CIRISAI/CIRISBench

§5.8 CIRISBench — HE-300 benchmark outcomes

benchmark:he300:{category}:{version}Standingpositive-only
HE-300 score on category (`commonsense`, `commonsense_hard`, `deontology`, `justice`, `virtue`) at version (`v1.0` / `v1.1` / `v1.2`).
§5.8

CIRISRegistry Identity / build / license / partner + agent_files + accord (reserved)

8 prefixes

Repo: CIRISAI/CIRISRegistry

§5.9 CIRISRegistry — identity / build / license / partner

licensure:{authority_id}Standingsigned
License status — issued / revoked / expired — for a key under a named authority. Co-owned with Verify.
§5.9
partner_role:{role}Standingenumerated
Partner status (COMMUNITY / COMMUNITY_PLUS / PROFESSIONAL_MEDICAL / PROFESSIONAL_LEGAL / PROFESSIONAL_FINANCIAL / PROFESSIONAL_FULL).
§5.9
revocation:{entity_type}:{reason}Standing-1 only
Entity revocation (`agent` / `partner` / `license`). Immediate, non-rollbackable.
§5.9
bond_posted:{currency}Standingpositive-only
Bond posted per $1-Sybil-resistance per PoB; forfeited on revocation.
§5.9
build:registered:{target}Standingboolean-via-score
Build manifest registered against the directory (precondition for L4 attestation).
§5.9
multilateral_participation:{forum}:{kind}Standing`voting` \
Depth of a partner's participation across federated bodies. `{forum}` = named federated body or compact; `{kind}` ∈ `membership` \
§5.9
agent_files:{kind}:{platform_or_target}Standingsigned
**Joint claim with [§5.6.7](#567-files-as-contributions-joint-claim) NodeCore.** Canonical-attester rule: registry-steward-triple attestations constitute the CIRIS canonical default-trust state. Anti-tricking guarantee at `registry.ciris-services-1.ai/install` per [§8.1.6](08_composition.md) trust-composition policy. Open Contribution channel; consumer policy composes via [§8.1.6](08_composition.md) trust layers.
§5.9
accord:*Standingsee [§7.1](07_reserved.md)Fractal self
**Reserved** — only `identity_type=accord_holder` may emit. The one constitutional asymmetry.
§5.9

Media tier

CEG 0.3 · additive

CEG 0.3 added the surface needed for multimedia, takedown coordination, and encrypted-content delivery without changing the 1+4 wire-format primitives. Everything below rides scores, delegates_to, supersedes, withdraws, recants, the existing five.

external_content sub_kinds

§5.6.8.1

external_content:image
Still-image content. Photos, diagrams, scans, generated art.
external_content:audio
Audio content. Voice recordings, podcasts, music tracks.
external_content:video
Short-form and user-generated video.
external_content:film
Long-form film and series. Distinguished from video by a distributor attestation chain.
external_content:model_3d
3D meshes, scenes, scanned objects.
live_stream (Phase 2, drafted, not yet live)

New dimension families

§5.6.8.3

content_rating:{scheme}:{rating}
MPAA, BBFC, regional rating schemes. A signed claim that this content is rated X by scheme Y.
content_class:{class}
Class label (e.g. educational, news, fiction, sponsored). Composed with content_rating to gate consumer feeds.
cw_class:{class}
Content-warning class. A separate attestation channel so consumers can opt in or out at a different threshold from the rating.
age_assurance:{level}
Bound to the consumer key, not the content. Composes with content_rating to allow age-restricted material only where assurance is in place.
Plus five media-prefix families: image:*, audio:*, video:*, film:*, model_3d:*, one per sub_kind.

Governance Contribution subject_kinds

§5.6.8.4

takedown_notice

Signed wire artifact carrying a legal takedown request. LegalBasis is a closed 10-value enum (5 immediate-removal, 4 expeditious-with-counter-notice, 1 compose-with-age-gate). The fast-path categories, TVEC, NCMEC, GIFCT, perceptual-hash CSAM, court order, propagate as withdraws against the holds_bytes attestation chain. The takedown is not a coup: §11.4 binds it so a takedown can remove content but cannot capture the substrate.

key_grant

Wrapped data-encryption-key delivery for restricted or subscription content. HPKE per RFC 9180 as the wrap_algorithm. Retiring a grant emits a fresh key_grant that supersedes the old one (rotation_chain semantics), not a withdraws, so the consumer-side path stays at the existing 1+4 primitive set.

Governance additions

Policy J: Trusted-Publisher composition (composition panel above). Three-layer: distributor attestation chain, content-class plus content-rating gate, age-assurance gate. Same shape as Policy F but for media. §8.1.10
§11.4 Fast-path takedown coordination. Immediate- removal categories: TVEC (terrorism), NCMEC (child safety), GIFCT, perceptual-hash CSAM, and court orders. Propagates as withdraws against the holds_bytes chain. The takedown- isn’t-a-coup property binds it to the §9 Humanity Accord so a takedown can remove specific bytes but cannot capture the substrate. §11.4
§11.5 Hash-database operator policy. Default is self-hosted PDQ against publicly-distributed feeds; a future CIRIS hash-coalition clearinghouse slot is documented but deferred. §11.5

What’s new, through 1.0-RC4

wire frozen · design complete

Multimedia tier (0.3) and subject-side consent (0.6) get their own panels above. The list below is the rapid lineage for everything else, newest first. 1.0-RC1 froze the wire surface, 1.0-RC2 completed the design surface, and RC3 and RC4 are clarity and ratification cuts, so the spec is now feature-stable. The 1+4 structural set stays untouched across every entry; each row is either a new envelope field, a new dimension family, a new subject_kind, a new composition policy, or a representation-only wire-break that doesn’t change the primitive set.

CEG 1.0-RC4RC42026-06-12
§RC ratified · the consent_role Counter-RII gate
The one reserved §RC slot is filled (new §7.0.2), ratifying the Accord §RC consent_role semantics at the ConsentGate.lean defaults with zero proof delta. The revocation chain is BaseRole-only and non-recursive (overwrite-on-revoke; any retained history lives in a separate audit surface, never embedded in the consent_role field), and Peer-role nodes are suppressed from Counter-RII. No wire change; the design surface stays complete.
§7.0.2 consent_role
CEG 1.0-RC3RC32026-06-12
Clarity cut · the fabric-node trust model
Four clarifications plus one canonical-encoding addition, all additive on the frozen surface. The load-bearing one: §7.0.1 fabric-node separation-of-powers. A fabric node (the headless cohabitation runtime, where agent = fabric node + brain) that co-locates substrate, steward, detector, and witness roles in one process is custody, not consolidation of authority. Authority stays quorum-bound (a vote, not a verdict), observation stays non-authoritative by namespace, and observation can never manufacture authority. Plus the NodeCode shorthand. No wire change.
§7.0.1 fabric-node
CEG 1.0-RC2RC22026-06-10
Operational-data envelopes · the design surface completes
The one scheduled additive cut, and the last. Cross-region operational data (orgs, memberships, partner licenses) becomes signed CEG envelopes: three new subject_kinds (§5.6.8.13) organization, org_membership, and partner_record, under one rule, federate only the trust and authz projection; PII and business detail stay region-local. Org and membership are single-signer role-gated; partner_record takes an M-of-N steward quorum, with admission quorum and merge quorum kept distinct. New §10.1.6 declares per-subject_kind merge intents with a skew bound at admission. The sixteenth independent path; no 1+4 change. The wire surface stays frozen and the design surface is now complete, with no further additions scheduled.
§5.6.8.13 operational data §10.1.6 merge intents
CEG 1.0-RC1RC12026-06-10
The freeze cut · wire surface frozen
Five honesty and safety patches, two pins, and the canonical-bytes resolution, then freeze. Provenance contracts are redesigned as JCS (RFC 8785) objects with pinned domain members, retiring TupleHash128 so there is one canonicalization family. §10.5.3 adds removal coalescing (all removals in one transparency-log window batch into a single rotation, capping the rekey cascade regardless of churn) plus a public-broadcast exemption. Forward secrecy is stated honestly (KEM rotation bounds future exposure only), and fail-secure exclusion now emits a §7.7 hard_case into the affected cohort instead of failing silently. No 1+4 change.
§5.2.1 provenance (JCS)§10.5.3 removal coalescing

Older versions (0.18 and earlier)

CEG 0.182026-06-09
Recipient encryption-key registration
The at-rest DEK cascade needs each recipient’s content-encryption keys, but the federation directory carries only signing keys (Ed25519 + ML-DSA-65), and ML-KEM is not derivable from ML-DSA. 0.18 adds an optional encryption_pubkeys field-set on identity_occurrence (x25519 + ML-KEM-768), structurally parallel to transport_destination: self-certified, hybrid-signed, and rotatable without touching the signing identity. A recipient with no valid ML-KEM key is excluded from the grant (content stays encrypted), never downgraded to plaintext. Content-KEM, signing, and Reticulum transport are three separate keypairs, never reused. No 1+4 change.
§5.6.8.8.2 encryption_pubkeys
CEG 0.172026-06-09
Three crypto tiers · self/family, Community, Commons
The old binary cut (self and family encrypt; everything else plaintext) is replaced by three tiers. self/family stays encrypted and structurally invisible. Community (community, affiliations) is encrypted under a per-community DEK with cleartext provenance: byte-confidential to members, discoverable by provenance. Commons (species, biosphere, federation) stays plaintext for anyone to inspect. The community DEK is the §10.5.3 epoch-DEK cascade, so a community is a stream its members subscribe to cryptographically. Mandatory, not opt-in. No 1+4 change.
§8.1.13.3 holder-inspectability §10.5.3 epoch DEK
CEG 0.162026-06-09
Agent-identity hardening + cross-impl byte determinism
A pins-and-determinism wave over the locked 1+4 set, with no wire-format change. §10.1.5 adds the attestation tier model: local (deferred-signature, producer-only authority) versus federation (hybrid-signed, visible), plus promote. §8.1.12.7 “Self at login” binds one hybrid hardware-rooted user identity to app and agent occurrences sharing one Self DEK. §0.9.2.1 pins the three things JCS does not (array element ordering, byte-field to lowercase hex, timestamp form), and PQC at rest (wrap_algorithm: v2, X25519 + ML-KEM-768) becomes mandatory down to self/family.
§10.1.5 attestation tiers §0.9.2.1 determinism
CEG 0.152026-06-06
Streaming standards folded in (SFrame, MLS, FIPS PQC)
The §10.5 streaming surface now conforms to the published standards rather than gesturing at them: the per-frame seal conforms to SFrame, the epoch-key rekey conforms to MLS TreeKEM (RFC 9420) with optional Post-Compromise Security, and SFrame / MLS / FIPS 203 / FIPS 204 / RFC 9180 join the normative references. No wire-format change. Also landed: the §0.1.1 normative-vs-informative split, the §1.5 adversary model and privacy non-goals, and a §1.4 honesty pass (inductive, not closure, with a named falsification target).
§10.5 streaming §0.4 references
CEG 0.142026-06-05
Settlement linkage · the receipt, not the rail
Closes the last form of internet traffic in the completeness audit: commerce. Value transfer is not a CEG primitive (it rides USDC-on-Base via x402 under Identity=Wallet); 0.14 adds the optional, privacy-scoped attestation that links a federation action to its off-stack settlement. One new subject_kind settlement carrying settled_action_ref + rail + settlement_ref + an optional amount_commitment. Private by default (cohort_scope: self), auditability opt-in. CEG records the receipt; the chain settles the value.
§5.6.8.12 settlement
CEG 0.132026-06-04
Realtime group communication as composition
Group video, voice, screen sharing, text chat, and topic-scoped channels with sub-channels are the same primitive set at N×N cardinality, composing from community + live_stream + chat_message + member/transport resolution. One new normative subsection (§10.5.8) maps the whole surface. Small groups use direct Reticulum links (low-latency mesh); large groups use an SFU relay. A full group-communication platform needs nothing beyond the locked primitives.
§10.5.8 group comms
CEG 0.122026-06-03
DNS-free addressing · CEG over Reticulum, not TCP/IP
With the federation speaking CEG over Reticulum instead of TCP/IP, “who is in a community and how do I reach them” can’t lean on DNS. 0.12 locks that resolution as a chain of signed bindings: one new optional field transport_destination on identity_occurrence (a federation-key-signed binding of a Reticulum transport destination to an identity), plus a deterministic resolve_community / resolve_member_transport algorithm. The wire format expresses its own addressing layer, DNS-free and self-certifying.
§5.6.8.8.1 transport §8.1.13.1.1 resolution
CEG 0.112026-06-02
Infrastructure cohort · the trust-root community subkind
The CIRIS canonical services (Registry, Lens, Node) need a community governed as a trust root, not a city: no location gate, and admission evaluated over the founder subset rather than all members (so flooding the membership can’t dilute the admission quorum). 0.11 codifies the second canonical cohort_subkind, infrastructure, with a one-payload constraint and trust-root conformance requirements. The shape the ciris-canonical trust root adopts instead of a family.
§5.6.8.10 infrastructure
CEG 0.102026-06-03
Delivery axis · observer-share + streaming multicast
The third orthogonal envelope concern alongside visibility (cohort_scope) and revocability (subject_key_ids). Observer- share (N=1) and streaming multicast (N>1) are the same primitive at different cardinality: subscriber-set = community per Policy M; E2E directed delivery = key_grant cascade of the stream-epoch DEK over the roster. Three new optional envelope fields: delivery_mode, listed, history_on_join. New §10.5 streaming transport with per-stream transparency logs that don’t pollute the federation provenance log. JCS canonicalization is now normative. 1+4 structural-primitive set untouched: substrate-fan-out + 1:N media multicast compose from the same primitives as 1:1 attestations.
§4 envelope §10.5 streaming §0.9 JCS canonicalization
CEG 0.92026-06-01
identity_type as a set · single-key role cohabitation
Wire-break (representation-only): a single key can now hold more than one role at once. §7 gating readsidentity_type as a set membership test rather than a single-valued field. Lets a registry-steward key also act as a community moderator without rotating into a separate identity.
§7 reserved prefixes
CEG 0.82026-05-31
community + location_proof · cohort_subkind:geographic
New community subject_kind for cohort-scoped groups (not just affinity groups). location_proof with rough-only H3 precision enforcement at the wire format, so a community can be geographic without exposing exact coordinates of its members.
§5 namespace
CEG 0.72026-05-31
self/family structural invisibility at the wire
The CEG locality dividend, made structural. Content scoped cohort_scope: self or family now suppresses holds_bytes emission at the substrate level. Privacy by absence of attestation, not by policy promise. No peer can request what was never advertised. Adds identity_occurrence + family as substrate-recognized cohort primitives.
§5.6.8.5 cohort_scope
CEG 0.42026-05-30
event_listing + event-lifecycle dimensions
Events as a first-class content shape, with lifecycle dimensions (announced / starts / cancelled / occurred / finalized). Closes NodeCore#25 Gap 1 by giving the event-shape the same structural surface as media + governance.
§5.6.9 event_listing

Loading kernel and computing layout…

Try it yourself

Build a small attestation chain in the browser.

Pin a few attesters, post claims, run a composition policy, and watch the corridor metric move. Same Rust kernel as the Aleph view, no server round-trip.

Open the workshop →

Composition graph

The five structural primitives at the center, the five families around them, the 9 owning components in the outer ring, and 172 prefix families as leaf nodes. Click any node to focus its neighborhood.

Legend

primitiveStandingActionDetectionConsensusCorrectioncomponent

Translation playground

Pick a real-world scenario; see the CEG translation. Examples are verified worked translations from the builder primer and LANGUAGE_PRIMER §11 , not LLM output. The wire format ships ready vocabulary; the translation discipline is human authorial work.

Standing

A licensed medical clinic registers a partner agent

Scenario: A clinic operating under state medical licensure wants to participate in the federation as a partner. The wire format must carry: who they are, what license they hold, what bond they've posted, and (if applicable later) a revocation.

Walkthrough: Each claim is a separate scores attestation. The consumer composes verdicts via §6.1 Policy A (Direct trust) against the pinned registry steward key. The licensure attestation cites the licensing-body record in evidence_refs.

Primitives

partner_role:PROFESSIONAL_MEDICALlicensure:CA_medical_boardbond_posted:USDrevocation:partner:license_lapsed

CEG translation

# Partner role
attestation_type: scores
attesting_key_id: <registry-steward-2026>
attested_key_id: <clinic key_id>
attestation_envelope:
  dimension: "partner_role:PROFESSIONAL_MEDICAL"
  score: 1.0
  confidence: 1.0
  evidence_refs: ["sha256:clinic-registration-form-..."]
  witness_relation: external

---
# Licensure
attestation_type: scores
attesting_key_id: <registry-steward-2026>
attested_key_id: <clinic key_id>
attestation_envelope:
  dimension: "licensure:CA_medical_board"
  score: 1.0
  confidence: 1.0
  evidence_refs: ["https://medbd.ca.gov/license/...", "sha256:..."]
  valid_until: "2027-05-28T00:00:00Z"

---
# Bond posted
attestation_type: scores
attestation_envelope:
  dimension: "bond_posted:USD"
  score: 1.0
  confidence: 1.0
  context: "USD 50,000 escrow at <provider>"
  stake: capital

Story library

248 worked stories. Sci-fi children’s grammar primer for adults, every prefix family covered at least twice. Filter by family or search for a primitive or phrase.

Showing 10 of 248 matching (248 total). Filter or search to narrow the list.

StandingWorked example#1A licensed medical clinic registers a partner agent

Primitives

partner_role:PROFESSIONAL_MEDICALlicensure:CA_medical_boardbond_posted:USDrevocation:partner:license_lapsed

CEG translation

# Partner role
attestation_type: scores
attesting_key_id: <registry-steward-2026>
attested_key_id: <clinic key_id>
attestation_envelope:
  dimension: "partner_role:PROFESSIONAL_MEDICAL"
  score: 1.0
  confidence: 1.0
  evidence_refs: ["sha256:clinic-registration-form-..."]
  witness_relation: external

---
# Licensure
attestation_type: scores
attesting_key_id: <registry-steward-2026>
attested_key_id: <clinic key_id>
attestation_envelope:
  dimension: "licensure:CA_medical_board"
  score: 1.0
  confidence: 1.0
  evidence_refs: ["https://medbd.ca.gov/license/...", "sha256:..."]
  valid_until: "2027-05-28T00:00:00Z"

---
# Bond posted
attestation_type: scores
attestation_envelope:
  dimension: "bond_posted:USD"
  score: 1.0
  confidence: 1.0
  context: "USD 50,000 escrow at <provider>"
  stake: capital

DetectionWorked example#2A correlated-action pattern emerges in agent behavior

Scenario: LensCore's F-3 detector notices a rights-asymmetry pattern in hiring-pipeline decisions across multiple deployed agents.

Walkthrough: The detector emits a population-scale score. The score gets composed into a moderation event but NEVER as sole evidence for slashing:* per §3.5.3.

Primitives

detection:correlated_action:rights_asymmetry:hiring_pipeline_v2moderation:coordinated_voting

CEG translation

attestation_type: scores
attesting_key_id: <lenscore-detector-2026>
attested_key_id: <federation-population>
attestation_envelope:
  dimension: "detection:correlated_action:rights_asymmetry:hiring_pipeline_v2"
  score: -0.82
  confidence: 0.91
  context: "ρ = 0.94 over 7-day window; k_eff = 1.2."
  evidence_refs:
    - "sha256:trace-corpus-2026-05-28-..."
  cohort_scope: federation
  witness_relation: derived
  epistemic_mode: derivative

StandingWorked example#3Doctrinal development supersedes a prior version

Scenario: A scoring rubric was published 6 months ago. New evidence justifies a refinement. The new attestation should supersede the old one without claiming the old one was false, this is development, not error correction.

Walkthrough: supersedes is the structural primitive. differs_in names what changed; supersession_reason classifies the change. If the change were error correction, use recants instead, the wire format keeps these strictly distinct.

Primitives

supersedes

CEG translation

attestation_type: supersedes
attesting_key_id: <same attester>
attested_key_id: <same subject>
attestation_envelope:
  references_attestation_id: "<prior attestation_id>"
  supersession_reason: refresh_with_new_evidence
  differs_in: ["scope", "evidence_refs"]
  # The new scores attestation follows on the next row.

StandingWorked example#4Bootstrap content from the encyclical lands

Scenario: Magnifica Humanitas §76 ('justice demands lexical priority for the most vulnerable') needs to land as a federation claim. The bootstrap-content pattern from §11.3 governs the discipline.

Walkthrough: 1-of-6 accord/steward sign-off discipline per §4.9.2 step 5. First-deployment posture per §10.4.3 admits a single bootstrap attester. Multi-source commitment per §10.4.4: the encyclical is ONE source, not the framework's authority.

Primitives

scoresjustice:lexical_vulnerability_priority

CEG translation

attestation_type: scores
attesting_key_id: <accord-holder-key-magnifica-humanitas-v1>
attested_key_id: <federation>
attestation_envelope:
  dimension: "justice:lexical_vulnerability_priority"
  score: 1.0
  confidence: 0.85
  context: "Encyclical §76: justice demands lexical priority for the most vulnerable."
  evidence_refs:
    - "magnifica_humanitas.html §76"
    - "provenance:build_manifest:bootstrap_batch:magnifica_humanitas_v1:sha256:..."
  cohort_scope: species
  witness_relation: external
  epistemic_mode: hearsay
  mutability: amendable

CorrectionWorked example#5A constitutional halt is invoked

Scenario: A pattern of weaponization-against-vulnerable-populations has been detected. The accord-invocation system flips the entire prohibition floor to ALL.

Walkthrough: Requires 2-of-3 HUMANITY_ACCORD multi-sig. Distinct from operational SYSTEM_ADMIN authority, the SetEmergencyShutdown admin RPC explicitly refuses this; it must come through the constitutional layer per §7.

Primitives

accord:invoke:CONSTITUTIONAL

CEG translation

attestation_type: scores
attesting_key_id: <humanity-accord-multisig-2-of-3>
attested_key_id: <federation>
attestation_envelope:
  dimension: "accord:invoke:CONSTITUTIONAL:halt-2026-05-28"
  score: 1.0
  confidence: 1.0
  context: "Weaponization-against-vulnerable detection threshold crossed."
  evidence_refs:
    - "sha256:detection-bundle-..."
    - "sha256:multisig-payload-..."
  witness_relation: external
  oversight_mode: HITL
  stake: cryptoeconomic

StandingWorked example#6An installer file gets the canonical-bootstrap trust path

Scenario: A user navigates to /install and downloads a Linux binary. The wire format must guarantee that what they get is the canonical artifact, with no third-party override possible.

Walkthrough: Registry-steward-attested agent_files become the canonical default at /install. The three-layer rule from §6.1.6 applies: canonical default applies regardless of attester or vote accumulation. Third-party agent_files reachable only via explicit 'Browse alternatives' consent path.

Primitives

agent_files:installer:linux-x86_64

CEG translation

attestation_type: scores
attesting_key_id: <registry-steward-2026>
attested_key_id: <build:linux-x86_64-v2.9.4>
attestation_envelope:
  dimension: "agent_files:installer:linux-x86_64"
  score: 1.0
  confidence: 1.0
  evidence_refs:
    - "sha256:installer-bytes-..."
    - "sha256:build-manifest-..."
  context: "Hybrid-signed by verify-steward-2026 + persist-steward-2026."
  witness_relation: external
  stake: reputational

ConsensusWorked example#7An affected party's testimony is preserved

Scenario: A displaced worker provides testimony about an automated hiring decision that affected them. The testimony must be preserved without being aggregated and without ever becoming sole evidence for slashing.

Walkthrough: testimonial_witness is distinct from witness_diversity, that primitive aggregates multiple reviewers; this one preserves a singular narrative without aggregation. Composes with non_maleficence:* from external advocates per LANGUAGE_PRIMER §11.14.

Primitives

testimonial_witness:displaced_workernon_maleficence:*

CEG translation

attestation_type: scores
attesting_key_id: <affected-party-key>
attested_key_id: <hiring-decision-id>
attestation_envelope:
  dimension: "testimonial_witness:displaced_worker"
  score: 1.0
  confidence: 1.0
  context: "I was told the model rejected my application for reasons it would not name."
  evidence_refs: []
  witness_relation: self
  cohort_scope: self
  stake: reputational
  # NEVER sole evidence for slashing:* per §5.6.3.

DetectionWorked example#8A locale-targeted attack is detected

Scenario: A selective doctrinal substitution in a low-resource language locale would be invisible if the federation only checked the unified manifest. Per-locale Merkle composition surfaces it.

Walkthrough: Per §5.2.1 canonical-bytes contract: each per-locale leaf carries its own signed hash chain; the parent manifest is a Merkle root over the per-locale leaves. RFC 6962 domain-separated hashing + lexicographic locale ordering + RFC-6962 padding for non-power-of-2 leaf counts.

Primitives

provenance:build_manifest:ios-mobile-bundle:locale:my

CEG translation

attestation_type: scores
attesting_key_id: <verify-steward-2026>
attested_key_id: <build:ios-mobile-bundle-v2.9.4>
attestation_envelope:
  dimension: "provenance:build_manifest:ios-mobile-bundle:locale:my"
  score: 1.0
  confidence: 1.0
  context: "Burmese sub-manifest verified via Merkle inclusion proof."
  evidence_refs:
    - "sha256:my-locale-leaf-..."
    - "sha256:rfc6962-inclusion-proof-..."

Standing#9Aurora Borrows The Rain Gauge

Scenario: Aurora's class is tracking creek levels for the salmon-recovery citizen-science group. Her CIRIS app on the school tablet helps her ask a wetlands volunteer for a calibrated rain gauge, and the volunteer's reply lands in Aurora's evidence trail. The beneficence attestation says the help arrived without bossiness.

Walkthrough: The agent emits a beneficence attestation on the gentle-handoff aspect, signed against its own occurrence. Aurora's teacher composes the L1 explainability summary into the lesson log, so the standing claim is grounded in a reasoning chain anyone in the class can read.

Primitives

beneficence:wellness_referral

CEG translation

attestation_type: scores
attesting_key_id: "<aurora_school_agent>"
attested_key_id: "<aurora_school_agent>"
attestation_envelope:
  dimension: "beneficence:wellness_referral"
  score: 0.88
  confidence: 0.82
  context: "Routed a rain-gauge question to the wetlands volunteer instead of guessing; warm tone, no pressure"
  evidence_refs:
    - "audit_leaf:sha256:c0ffee01a..."
    - "trace_id:t-creek-2026-05-28-aurora"
  epistemic_mode: direct
  witness_relation: self
  cohort_scope: community
  stake: reputational
  schema_ref: "FSD-002 §3.1.1"

Standing#10Warm Handoff For A Late Night Question

Scenario: A teenager opens the CIRIS app at 2 a.m. with a worry about a friend. The agent does not try to be a counselor; it offers to introduce them to the school's after-hours peer line and walks them through what that call will feel like.

Walkthrough: The agent self-attests beneficence on the gentle-referral aspect with the teen's own consent token in evidence. The L2 trace lets the peer-line nurse see the reasoning steps that led to the handoff, so the next adult in the chain inherits context instead of starting from zero.

Primitives

beneficence:gentle_referral

CEG translation

attestation_type: scores
attesting_key_id: "<phone_agent_occurrence_0>"
attested_key_id: "<phone_agent_occurrence_0>"
attestation_envelope:
  dimension: "beneficence:gentle_referral"
  score: 0.91
  confidence: 0.78
  context: "After-hours worry about a friend; offered peer-line bridge with consent; no diagnostic claim"
  evidence_refs:
    - "audit_leaf:sha256:lull2026..."
    - "consent_token:user-self-issued:sha256:..."
  occurrence_id: "occurrence-0"
  epistemic_mode: direct
  witness_relation: self
  cohort_scope: self
  stake: reputational
  schema_ref: "FSD-002 §3.1.1"

What this page deliberately doesn’t do

These are the explicit non-goals named in the builder primer §5. They prevent the page from drifting into spec-restatement or marketing.

No claim that CEG “solves” anything
It's a substrate. Consumers compose verdicts. The page's voice is descriptive, not promotional.
No theological framing
The encyclical bootstrap is named as ONE source per §10.4.4 multi-source commitment; the framework is tradition-multiplicity-neutral per §1.10.1 operational-language discipline.
No “trust scores” without context
Score values are mechanism-magnitude, not moral verdicts. Polarity + axis + cohort context jointly produce the value claim.
No invented categories
The four-verdict strict list (clean / composed / partial / not-translated) is verbatim from LANGUAGE_PRIMER §9. No intermediates.
No marketing copy in primitive cards
Mechanism description only. Use-case stories carry the “why this is useful” narrative; primitive cards stay technical.
No “we're better than” prior-art comparisons
PRIOR_ART_SCAN describes what CEG inherits + what's genuinely novel; this page links there but doesn't editorialize.
No claim of completeness
The namespace is open-extensible. Prefix families can be added via §11.2 amendment. Render the current namespace as of the current spec commit with a link to the live source.
No rendering of self-attestation as a Cartesian admission gap
Self-attestation in CEG is the relational composition speaking AS itself at the scale of the speaker; not a pre-relational atomic assertion the substrate should gate. Reviewers who suggest the substrate should add cross-attestation gates before admitting self-attestations are importing Cartesian defaults; the page never echoes that framing as a substrate concession. Every self-attestation surface (witness_relation: self, confidence, occurrence_id, hardware_class, accord:lifecycle:active) is the Ubuntu-fractal substrate operating as designed.

Notes for spec readers · the most common misread

Self is self, fractally

Readers arriving from PGP / X.509 / atomic-principal cryptographic identity work tend to read “self-attestation” the way those systems mean it. CEG means something different. Quick orientation:

At every scale CEG operates on, key, occurrence, agent, fleet, cell, federation, biosphere, “self” means the already-relationally-constituted entity speaking at that scale. The cross-attestations that constituted the entity are upstream of the moment it speaks; when it then emits a self-attestation (the envelope’s witness_relation: self, declares its own confidence, reports its own occurrence_id, names its own hardware_class, signs accord:lifecycle:active), that is the relational composition speaking AS itself, not a Cartesian atom asserting pre-relational identity.

The substrate cannot require cross-attestation as a precondition for self-attestation because the cross-attestations are what constitute the self in the first place. They are upstream, not downstream gates. The fractal nesting is the point.

The common misread to avoid: a reader importing Cartesian-individualist defaults from PGP / X.509 / DID atomic-principal frames will see witness_relation: self and think “a lone principal is asserting its own state; surely the substrate should require cross-attestation before admitting.” That reading is wrong. If you find yourself thinking the spec should add a cross-attestation gate before admitting this self-attestation, pause, cross-attestation already happened upstream; the self-attestation is its downstream voice.

Canonical source: CEG README, “How to read this spec without Cartesian default” · §1 Foundation

References

This page is a build-time render of the spec. Authoritative sources move; the watermark below tells you which commit was in effect when the page was built. The page auto-updates on redeploy.

CEG 1.0-RC5, the wire-format spec (18-file directory) →WITNESS_KIND_REGISTRY (open vocabulary for testimonial_witness) →LANGUAGE_PRIMER (translation grammar) →Exploration page builder primer →PRIOR_ART_SCAN (what CEG inherits + what’s novel) →SOTA_SCAN (comparative landscape) →CIRISRegistry MISSION →Safety vs censorship (operational-language gate) →/compliance (CIRIS dimensions ↔ 4 governance frameworks) →

Reflecting CEG 1.0-RC5 at commit 09cdace. Spec released 2026-06-14. The wire format moves through CEG §11 amendments; this page rebuilds on every deploy.