CIRIS

← back to the front page

Safety and technology, inseparable

VERIFIABLEETHICSVoiceOversightLimitsHaltKEYSTONEPrivacyDignityLifecycleL5ApplicationsL4GovernanceL3GrammarL2The EnvelopeL1Transport
Block 01 · Halt◆ KEYSTONE
The kill switch

There is an off-switch held by named people. No score and no argument can end a stop; ending one takes a majority of those people. Remove this one block and nothing else can hold the load.

Why it cannot be removed
01
One holder can stop it
HUMANITY_ACCORD: any one of the named holders fires the halt with a single signed row, signable in advance and effective the moment a node receives it. A halt nobody confirms lapses in 24 hours, and a majority can lift it.
02
Non-revocable
No party inside the federation can disable or route around the stop.
03
Above every score
The halt sits over the whole system. No objective can outvote it.
The keystone. Every other commitment presses against it, and it is the one block that cannot be removed.
Explore The kill switch
The ground it springs from
Independently verifiable — every block is checkable by parties the AI does not control, and a small primitive surface shrinks the attack surface.
Legally aligned — GDPR, CCPA, and the EU AI Act are mapped onto the protocol through the DP-Map, with liability tied to the SI score and extra rules layered on for each sector.
Why the arch holds up: the coherence ratchet

An arch grows stronger the more weight presses on it. The load locks the stones tighter. CIRIS holds the same way. Every voice is priced honestly: copies of one voice count as one voice, and no amount of echo can buy more trust. The books stay true, signed and tamper-evident, capped by the halt. When something fails, it fails in the record, under its own name.

CIRIS · safe by structure, open by principle, kind by design