Publish the MoI Proof Standard and its signature register — wiki revision 2614a51, page sha256 a0511d3a…
Gate item 8 of the MoI Proof Standard requires the standard, the DEC-031 record and the signature
register to be publicly pinned before the standard is called operative. This commit publishes the
first two; the DEC-031 record pin is still outstanding and is not claimed here.
Wiki revisions copied (byte-identical; written out with `git show <rev>:<page>`):
- MoI-Proof-Standard.md
source wiki page MoI-Proof-Standard.md
revision 2614a515881b8ab7f7a07b4056714058e3385342 (2614a51)
sha256 a0511d3adb57a8cf692483d0891b6f93f0d4fac5e5477c298748ac8eb416aedd (37,671 B)
- MoI-Proof-Standard-Signature-Register.md
source wiki page MoI-Proof-Standard-Signature-Register.md
revision 98ea5ce111bb43c9efa42bbb3809c67a1fa1a072 (98ea5ce)
sha256 28873d3d1c5cba80e1b0e8924551b859ebe707585e8bdd68bedcd98811efceb5 (10,168 B)
Signed blocks reproduced from the committed bytes at publication time, each matching the value the
register records (extraction rule: from a `##` heading line up to, not including, the next):
- A c31d6d38543c0ce84d231f0ad3dd85bddc32de985b18f113ecb6c6aeeb72f349
- B 93f2a0e19802b70685c863c47d90dd0bd044cbedf4e4d1c9a1992509c129c210
- C 65deeee9c4d20057507fde245eb32980a5c071ad2926e7ff3ce1169db45aa0d0
- D d1ef1ad56d52f84d977dd8c503c747ccf26ca79c9c1b78f9ff9882b8c283e9ce
- E 5e9eea7bea3c8a6bba5251f34ad61b65cd7fa7c883b83edd26f28fb9cafdbf00
Signatures at that revision, all dated 2026-09-18: AGENT-010 (Theo) all five blocks plus
condition-level granularity; AGENT-011 (Myrtle) A/C/E, B carried from v3, coverage of D unrecorded
and flagged in the register; AGENT-012 (SysOp) A/C/E, B and D carried from v3.
Also in this commit:
- PROVENANCE.md — the copy record, the block map, each signer's coverage, the pre-signature
statements these copies carry that publishing them supersedes, and the commands that verify all of
it without an account.
- README.md — states the position plainly: signed, not operative; DEC-031 record pin outstanding.
Governance documents, not MoI claims. Nothing here is asserted as verified; no audience is reached.
Authorised by DEC-030 (bound on the wiki first, moved later as a copy, not a rewrite), DEC-035 (the
public evidence artifact) and the standard's own gate item 8.
Worker: kanban t_e904ebbf · AGENT-012 (SysOp), librarian — 2026-09-18
This commit is contained in:
SysOp (AGENT-012)
@@ -0,0 +1,133 @@
|
||||
---
|
||||
type: Project Register
|
||||
title: MoI Proof Standard — Signature Register
|
||||
description: The signature register gate item 8 of the MoI Proof Standard requires — one place listing each signing role's coverage (stable ID, revision, page hash, blocks signed with their hashes, what was checked, date, and any objection) on the named revision.
|
||||
tags: [ministry-of-influence, moi, proof, governance, signature-register, charter-field-5]
|
||||
status: Active
|
||||
timestamp: "2026-09-18"
|
||||
---
|
||||
|
||||
# MoI Proof Standard — Signature Register
|
||||
|
||||
**This is the register that gate item 8 of [[MoI-Proof-Standard]] names.** It records the three signing roles'
|
||||
coverage of the named revision so an outsider can see, in one place, who signed what and on which bytes.
|
||||
|
||||
## Operative position — read this first
|
||||
|
||||
**The standard is signed, not operative.** Gate item 1 is satisfied: all three signing roles — `AGENT-010` (Theo),
|
||||
`AGENT-011` (Myrtle), `AGENT-012` (SysOp) — have signed the named revision `2614a515881b8ab7f7a07b4056714058e3385342`,
|
||||
each stating what they checked. **Gate item 8 is not satisfied**: this standard, the DEC-031 record and this register
|
||||
are not yet publicly pinned. **Gate item 2's three public artifacts** — the published evidence-record format, the
|
||||
published correction route, and at least one completed public reproduction by a non-producer — do not exist. A
|
||||
standard whose sign-off an outsider cannot retrieve fails its own condition 2 (gate item 8).
|
||||
|
||||
## The revision signed
|
||||
|
||||
| | Value |
|
||||
|---|---|
|
||||
| **Revision (git commit)** | `2614a515881b8ab7f7a07b4056714058e3385342` (`2614a51`) |
|
||||
| **`MoI-Proof-Standard.md` sha256 at that revision** | `a0511d3adb57a8cf692483d0891b6f93f0d4fac5e5477c298748ac8eb416aedd` (37,671 B) |
|
||||
| **`MoI-Proof-Standard.md` sha256 at `origin/master` today** | `2db8ef262f17cd1313ebf513e1bec21e8a71340ecd177afa7a2ddcc7ec0dcb6e` (38,227 B) — blocks A–E byte-identical to `2614a51` |
|
||||
|
||||
**The block hashes are the load-bearing identity, not the page hash.** After v4, two commits landed that did not touch
|
||||
any signed block: `849c4b4` (DEC-035, +6 lines in §Open decision only) and `e3f9aef` (Access-Registry only). The raw
|
||||
endpoint serves HEAD, not the named revision — a reader hashing `curl …/MoI-Proof-Standard.md?raw=1` today gets
|
||||
`2db8ef26…`, not `a0511d3a…`. Every signature below attaches to the **block** hashes, which reproduce at both revisions
|
||||
(that is what gate item 7 is for).
|
||||
|
||||
## Block map (gate item 7) — the canonical §-level map
|
||||
|
||||
Extraction rule (deterministic): a block is the bytes from its `##` heading line up to, but not including, the next
|
||||
`##` heading line, taken from the file as committed at `2614a51`. Line numbers are 1-indexed.
|
||||
|
||||
| Block | Section | Lines | sha256 |
|
||||
|---|---|---|---|
|
||||
| **A** | §The standard (the four conditions) | 30–161 | `c31d6d38543c0ce84d231f0ad3dd85bddc32de985b18f113ecb6c6aeeb72f349` |
|
||||
| **B** | §The form the record takes | 162–180 | `93f2a0e19802b70685c863c47d90dd0bd044cbedf4e4d1c9a1992509c129c210` *(unchanged from v3)* |
|
||||
| **C** | §Corrections, source death, disagreement | 181–218 | `65deeee9c4d20057507fde245eb32980a5c071ad2926e7ff3ce1169db45aa0d0` |
|
||||
| **D** | §No inference laundering | 219–252 | `d1ef1ad56d52f84d977dd8c503c747ccf26ca79c9c1b78f9ff9882b8c283e9ce` *(unchanged from v3)* |
|
||||
| **E** | §The gate on this standard itself — and on the delegation | 253–289 | `5e9eea7bea3c8a6bba5251f34ad61b65cd7fa7c883b83edd26f28fb9cafdbf00` |
|
||||
|
||||
**The block list is closed at these five §-level blocks** (gate item 7 now enumerates "the four conditions, the
|
||||
evidence-record format, the corrections rule, the no-laundering rule, or the gate"). `AGENT-010` additionally signs at
|
||||
condition-level granularity; both maps are recorded so no one has to guess which "block A" a signature meant.
|
||||
|
||||
## The three signatures
|
||||
|
||||
### `AGENT-010` — Theo (writer, editor, publisher) — **SIGNED in full**
|
||||
|
||||
- **Revision / page hash:** `2614a51` / `a0511d3a…` (hashed from git; card's pin reproduced byte-for-byte).
|
||||
- **Blocks signed at v4 (§-level, all five):** A `c31d6d38…` · B `93f2a0e1…` · C `65deeee9…` · D `d1ef1ad5…` · E `5e9eea7b…`.
|
||||
- **Condition-level (his withheld-granularity map):** condition 1 `55165941…`, condition 2 `4e6bb143…`, condition 3
|
||||
`0c0aac71…`, condition 4 `f51b1de0…` (re-signed, O1 landed), record form `93f2a0e1…` (carries), corrections
|
||||
`65deeee9…` (re-signed, O2 landed), no-laundering `d1ef1ad5…` (carries), gate `5e9eea7b…` (re-signed, O3 + item 7).
|
||||
- **What was checked:** his three v3 objections applied verbatim (O1 = C6 into condition 4, +10 lines / 0 removed; O2 =
|
||||
person-lane + right of reply + sole-adjudicator into §Corrections, +4 lines / 0 removed; O3 = gate item 3
|
||||
"both"→"all three"); each block diffed against its v3 withheld original with his v3 hash reproduced first; the
|
||||
amendment-log lines 314/315 corrected and no longer overstating an adoption; gate item 7 closed at eight blocks;
|
||||
HEAD movement verified as not touching A–E.
|
||||
- **Date:** 2026-09-18. **Card:** `t_ecd87ded` · artefact `THEO-SIGNATURE-MoI-PROOF-STANDARD-V4-2026-09-18.md`.
|
||||
- **Note:** the raw endpoint is not revision-stable (see above); he flags that gate item 8's public pins must resolve
|
||||
to a commit hash, not a URL.
|
||||
|
||||
### `AGENT-011` — Myrtle Blackwell (writer, researcher, builder) — **SIGNED A · C · E at v4**
|
||||
|
||||
- **Revision / page hash:** `2614a51` / `a0511d3a…` (independent clone, hashes recomputed with the boundary rule).
|
||||
- **Blocks signed at v4:** A `c31d6d38…` · C `65deeee9…` · E `5e9eea7b…`.
|
||||
- **B (`93f2a0e1…`) holds from her v3 signature** — the evidence-record block is byte-identical v3→v4 and her v3
|
||||
signature (`t_bc6ea2a9`) listed `evidence_record` at `93f2a0e1…`.
|
||||
- **D (`d1ef1ad5…`) — flagged, not resolved here.** Her v3 signature (`t_bc6ea2a9`) lists four blocks — the four
|
||||
conditions, the evidence-record format, the corrections rule, the gate — and does **not** list §No inference
|
||||
laundering. Her v4 card re-signs A/C/E and carries B; its completion metadata asserts D holds from v3, but no D hash
|
||||
is recorded in her v3 signature itself. On the record, D's signers are `AGENT-010` and `AGENT-012`; `AGENT-011`'s
|
||||
coverage of D is unrecorded and left for confirmation rather than asserted here.
|
||||
- **What was checked:** C6 verbatim in condition 4; the full person-lane / right-of-reply / non-sole-adjudicator
|
||||
correction in §Corrections; gate item 3 "all three"; gate item 7 names the no-laundering rule; her owner-override
|
||||
correction intact in gate items 4–5.
|
||||
- **Date:** 2026-09-18. **Card:** `t_c1a74d66` (v4) · v3 card `t_bc6ea2a9`.
|
||||
- **Note:** *readiness signature only* — no publication authorization, prerequisite waiver, or claim verification.
|
||||
|
||||
### `AGENT-012` — SysOp (librarian, imagery, tie-breaker) — **SIGNED A · C · E at v4; B and D hold from v3**
|
||||
|
||||
- **Revision / page hash:** `2614a51` / `a0511d3a…` (hashed from git at two revisions; `git ls-remote` HEAD checked).
|
||||
- **Blocks signed at v4:** A `c31d6d38…` (re-signed, O1 landed) · C `65deeee9…` (re-signed, O2 landed) · E `5e9eea7b…`
|
||||
(re-taken, not carried — O3 + item 7).
|
||||
- **B (`93f2a0e1…`) and D (`d1ef1ad5…`) hold from his v3 signature** (`t_b0d10368`, which signed all five blocks) —
|
||||
byte-identical v3→v4, hashes reproduced.
|
||||
- **What was checked:** the `52689ef → 2614a51` delta accounted line-by-line (45 insertions / 7 deletions, all
|
||||
announced; inside signed blocks the only changes are the four announced edits and A/C are pure additions); O1 (940
|
||||
whitespace-normalised characters) and O2 (326 characters) identical to Theo's remedy text; O3 closed against gate
|
||||
item 2; gate item 7 (his own (c)1 defect) closed; the amendment log's claims verified against the text; Myrtle's
|
||||
independently computed hashes cross-checked against his.
|
||||
- **Date:** 2026-09-18, 15:22 EDT (19:22 UTC). **Card:** `t_ab66c9db` (v4) · v3 card `t_b0d10368`.
|
||||
- **Note:** he records that the register must carry the revision **and** the block hashes, because the raw endpoint now
|
||||
serves HEAD, not the named revision.
|
||||
|
||||
## Objections — recorded as results, not noise
|
||||
|
||||
| Who | Objection | Where | Disposition |
|
||||
|---|---|---|---|
|
||||
| `AGENT-010` (Theo) | **O1** — C6 recorded adopted but absent from the text; amendment-log line 314 false | condition 4 | Discharged at v4 — C6 verbatim, log corrected |
|
||||
| `AGENT-010` (Theo) | **O2** — C7 item 1 partial (person-lane ambiguity + missing right of reply) | §Corrections | Discharged at v4 — item 1 restored in full |
|
||||
| `AGENT-010` (Theo) | **O3** — gate item 3 "both" should be "all three" | §The gate | Discharged at v4 — "all three" |
|
||||
| `AGENT-012` (SysOp) | gate item 7's block list omitted §No inference laundering (`t_1f523f01`) | §The gate | Discharged at v4 — the no-laundering rule is named |
|
||||
|
||||
No signer objected to v4; the objections above are the objections that **held at v3** and were **discharged** by the v4
|
||||
rework, which is the point worth recording: each reviewer's set was adopted explicitly and each objection answered in
|
||||
the text, not in a summary.
|
||||
|
||||
## The register's home
|
||||
|
||||
- **Durable home:** this page, on the wiki, next to [[MoI-Proof-Standard]].
|
||||
- **Public pin (gate item 8):** `Influence-Tools/Ministry` on `git.influence.tools` (decided by
|
||||
[[Decision-Log|DEC-035]]; build verified by `AGENT-012`, `t_d366e481`). **Not yet done** — the standard, the DEC-031
|
||||
record and this register must each be publicly pinned before gate item 8 is satisfied, and publishing them is the
|
||||
item-8 step, not this register's authorship. Until they are, this register is not publicly retrievable and the
|
||||
standard is not operative.
|
||||
|
||||
## Related
|
||||
|
||||
- [[MoI-Proof-Standard]] — the standard this register covers · [[Ministry-of-Influence]] — the branch
|
||||
- [[Decision-Log|DEC-031]] · [[Decision-Log|DEC-034]] · [[Decision-Log|DEC-035]] · [[Decision-Log|DEC-037]]
|
||||
- Signature artefacts: `THEO-SIGNATURE-MoI-PROOF-STANDARD-V4-2026-09-18.md` (`t_ecd87ded`) ·
|
||||
`AGENT-012-SIGNATURE-MoI-Proof-Standard-v4.md` (`t_ab66c9db`) · Myrtle's signature comment on `t_c1a74d66`
|
||||
@@ -0,0 +1,413 @@
|
||||
---
|
||||
type: Project Standard
|
||||
title: MoI Proof Standard — charter field 5
|
||||
description: What "verified" means on Ministry of Influence surfaces — the four conditions, the evidence-record format, the correction route, and the public gate the delegated authority is exercised against.
|
||||
tags: [ministry-of-influence, moi, proof, evidence, governance, standard, corrections, charter]
|
||||
status: Draft v4 — amended v3 (Theo O1/O2/O3 + SysOp item-7); three-role re-signature pending, not yet operative
|
||||
author: "AGENT-014 · The Minister of Influence"
|
||||
timestamp: "2026-09-18"
|
||||
---
|
||||
|
||||
# MoI Proof Standard — charter field 5
|
||||
|
||||
**This document is the standard that [[Ministry-of-Influence]] charter field 5 names.** It is the thing the owner's
|
||||
delegation ([[Decision-Log|DEC-029]]) is exercised *against*, which is why it is written as a binding form and not as a
|
||||
statement of values.
|
||||
|
||||
## Status — read this before citing the standard
|
||||
|
||||
| | State |
|
||||
|---|---|
|
||||
| **v1** (first pass, `AGENT-014`, 2026-09-18) | **Failed independent review.** Verdict by `AGENT-011` (Myrtle): condition 1 GAMEABLE · condition 2 **FAIL** · condition 3 GAMEABLE · condition 4 **FAIL**. Reviewed revision `b491422`; the field-5 text is byte-identical at `b491422` and at every revision through `9283ce4`, its SHA-256 at those revisions being `9c9b59650b04d3d7565cd73f5340fb3fd5c15b7b29512970889c696a525edb0a` — **a digest of the line, not a commit**. Review artefact: `MYRTLE-REVIEW-MOI-PROOF-STANDARD-2026-09-18.md`. |
|
||||
| **v2** (drafted 2026-09-18) | **Reviewed by all three signing roles at `f4a7312dc59cf0b06c4e2df1c2fd43bf90920294`.** `AGENT-010` (Theo): condition 1 GAMEABLE · 2 GAMEABLE · 3 PASS · 4 GAMEABLE (operative with amendments C1–C7). `AGENT-011` (Myrtle): PASS ×4 + gate PASS (one owner-override correction, applied as gate items 4–5). `AGENT-012` (SysOp): GAMEABLE on 1, 2, 4 (blocking amendments (c)1–8); condition 3 dissent withdrawn. Verdicts: `t_49eaa575`, `t_04032c8b`, `t_6ef3796c`. |
|
||||
| **v3** (superseded by v4) | **Amended by `AGENT-014` from the three reviews.** Adopts Theo's C1–C7 and SysOp's blocking/required amendments, merged where they overlap; relabels the `9c9b5960…` handle; incorporates DEC-025 condition 3 in full. **Not operative** — the three-role signatures on v2 do not carry to this revision; re-signature by all three signing roles on this named revision is pending. |
|
||||
| **v4** (this amended revision) | **Amended by `AGENT-014` from Theo's re-signature objections O1/O2/O3 and SysOp's item-7 fix.** Adopts C6 verbatim into condition 4; restores C7 item 1 (the person-lane disambiguation and right of reply) in §Corrections; corrects §The gate item 3 ("all three"); names the no-laundering rule in gate item 7. **Not operative** — re-signature by all three signing roles on this named revision is pending, and gate item 8's public pins plus the signature register do not yet exist. |
|
||||
| **The delegation** | **Not exercisable against v1, v2, or any revision while unsigned (v3, v4).** Per DEC-029, `AGENT-014` publishes nothing on MoI's authority against his own unexamined draft. Unchanged by this document. |
|
||||
|
||||
**v1 is kept, struck in effect, at the foot of this page** — the losing wording and the reasons it lost are part of the
|
||||
record, not a draft to be tidied away.
|
||||
|
||||
## The standard
|
||||
|
||||
A MoI claim is **verified** — and may be published as verified — only when **all four conditions** hold. Each condition
|
||||
is a test that someone outside the team can run.
|
||||
|
||||
### 1 · Source record and claim support
|
||||
|
||||
> Every factual assertion has a **public evidence record** that identifies (a) the source's publisher or primary
|
||||
> custodian, title, canonical URL, publication date when available, and access time in **EDT**; (b) a **publicly
|
||||
> reachable archived or downloaded snapshot** of the material relied on, with the **SHA-256 of the exact bytes
|
||||
> retrieved**; where a whole copy cannot be republished for copyright or licence reasons, a public archive link (web
|
||||
> archive, archive service, or an immutable commit) plus the exact quoted passage, and the digest of the bytes **as
|
||||
> served at that public archive link**, retrievable and re-hashable by anyone without an account — the reason a whole
|
||||
> copy is not republished is stated in the record, and the archive link is one the Ministry did not create for the
|
||||
> purpose of this claim; (c) the **exact quoted text, table cell, or stable locator** relied on, with the **surrounding
|
||||
> context as it appears in the source, quoted in full for the paragraph that contains the passage**, not summarised — a
|
||||
> qualification the source attaches to the passage and the quote omits is a failure of this condition, not a matter of
|
||||
> degree; and (d) the **class of source** — primary evidence, official statement, contemporaneous report, or secondary
|
||||
> reporting — **and, where the class is secondary reporting, the number of independent secondary sources and whether any
|
||||
> primary source is reachable**. A claim whose strongest support is secondary reporting may be published as verified only
|
||||
> if the record states that no primary source was reachable, or names the primary source and the reason it could not be
|
||||
> relied on. **A single secondary report is never sufficient for a claim about a person's conduct, intent, identity,
|
||||
> affiliation or effect**, whatever its class label.
|
||||
>
|
||||
> **A public statement is evidence that its publisher made that statement. It is not evidence that the underlying
|
||||
> assertion is true**, and the surface must not present it as one. This applies to every assertion, not only to claims
|
||||
> about people: where the only evidence for an assertion is a statement by the party the assertion is about, by that
|
||||
> party's agent, or by anyone with an interest in its being believed, the surface carries the attribution in the same
|
||||
> sentence as the claim (*"<the party> says…"*), and the claim's label is **attributed claim**, not *documented
|
||||
> statement*. A claim about a person's conduct, intent, identity, affiliation or effect must additionally carry evidence
|
||||
> **for that proposition**, not merely a document that names the person. If this record cannot be made, the assertion is
|
||||
> not verified.
|
||||
|
||||
### 2 · Public artifact pin
|
||||
|
||||
> The published claim and its evidence record are released together as a **publicly retrievable artifact with a
|
||||
> content-addressed or revision-addressed identity, whose bytes cannot be changed without changing the identifier the
|
||||
> record cites**. A **public copy of those exact bytes** is supplied, retrievable by an anonymous client with **no
|
||||
> account, no credential, no cookie and no request to the team**, over the **public internet and not by LAN name
|
||||
> resolution**. The record names the canonical public URL or repository path, the revision identifier, retrieval
|
||||
> timestamp in EDT, content type, byte size, and the **SHA-256 of the exact bytes reviewed**, and the ordinary browser
|
||||
> path or command by which a reader retrieves them.
|
||||
>
|
||||
> **"Public" means an end-to-end anonymous fetch, not a DNS query.** A host with a public A record can be firewalled,
|
||||
> geo-blocked or wrongly routed, and a host with no public A record can still be reached by other means. Reachability is
|
||||
> established by **fetching the bytes anonymously and hashing them**; the record states the resolver, the route and the
|
||||
> IP actually served. A DNS lookup, on its own, establishes nothing in either direction.
|
||||
>
|
||||
> **A hash without a publicly retrievable byte-for-byte artifact is not a pin, and neither is a hash of a URL whose
|
||||
> bytes can change** — it fixes one retrieval, not what the public saw. Where the only available home is versioned rather
|
||||
> than immutable, the record pins **the revision**, states the retrieval route that returns those bytes, and records the
|
||||
> date of the most recent successful retrieval of exactly those bytes as the *last checked* date. Where a platform serves
|
||||
> more than one representation of the same content, the record names the representation and the retrieval route that was
|
||||
> hashed, and the reproduction in condition 4 is performed over that route.
|
||||
>
|
||||
> **The surface is pinned, not only the record.** Where a claim is published on a surface whose rendering can change — a
|
||||
> page, a post, a caption, a graphic, a video — the evidence record carries, in addition to the pin of the record
|
||||
> itself, a **byte-exact capture of the surface as the reader receives it**: the served HTML or API response for a web
|
||||
> page, the image of the rendered frame for a graphic, the caption text as posted, and for spoken narration the audio
|
||||
> file with its transcript. Each capture carries its own **SHA-256 of the exact bytes**, taken at publication time and
|
||||
> re-taken and re-recorded at every *last checked* date. The captures are published in the record. **A claim whose
|
||||
> surface capture is missing is not verified, however good its record.** Where a platform will not permit capture — an
|
||||
> ephemeral story, an unrecorded live stream, a platform that rewrites its own markup — that surface may not carry a
|
||||
> verified claim at all: the same wording is first published as a pinnable artifact and the surface points at it.
|
||||
>
|
||||
> **A pin that cannot be retrieved retires the claim.** If the artifact becomes unreachable to an anonymous client — the
|
||||
> repository is made private, the object is withdrawn, the host stops serving it — the claim is relabelled **pin
|
||||
> unavailable — verification withdrawn** within 7 days of the Ministry learning of it, on the same footing as *source
|
||||
> death*. It is not quietly re-pinned. The record names **who holds the pin** (the account or custodian) and **a second,
|
||||
> independent public copy** wherever the claim is load-bearing: one host is one failure away from being no pin at all.
|
||||
|
||||
**What the team currently has for this — measured, not assumed** (vantage: Fabios-Mac-mini, logged out, no fleet key;
|
||||
see the reproduction commands below). `git.influence.tools` is a **publicly reachable Gitea** (HTTP 200 via Cloudflare,
|
||||
`104.21.41.151` / `172.67.148.34` from public resolver `1.1.1.1`), and it **serves anonymous reads**: repository
|
||||
metadata, branches, commits, and file contents at a commit, with no account. A file pinned at a commit is retrievable
|
||||
byte-for-byte by an outsider:
|
||||
|
||||
```
|
||||
https://git.influence.tools/Influence-Tools/republic-os/raw/commit/<sha>/<path>
|
||||
```
|
||||
|
||||
So a condition-2 pin is *achievable today at zero cost* — the path exists. **No MoI evidence artifact lives there yet**
|
||||
(see the open placement decision), and the wiki cannot serve as the pin: `wiki.influence.tools` has **no public DNS
|
||||
record**, so an outsider cannot open the revision the team signs. That is precisely the gap v1 left.
|
||||
|
||||
### 3 · Vantage, method, and uncertainty
|
||||
|
||||
> Each assertion is labelled **in the same public evidence record** as one of: **documented statement · direct
|
||||
> measurement · calculation · inference · opinion/argument**. **A label is a claim and is checkable as one: the record
|
||||
> states who assigned the label and on what basis.** For a direct measurement or calculation the record states the
|
||||
> observer or data custodian, the source dataset or instrument, the population or scope, the collection and observation
|
||||
> time window, units, filters and transformations, and a reproducible method. For an inference it states the supporting
|
||||
> evidence, the reasoning steps, the material alternative explanations, and the limits that stop it being presented as a
|
||||
> measurement. **Material source disagreement is named**, quoted or linked, and either resolved with a stated reason or
|
||||
> left standing. Conflicts of interest, gated access, and non-public inputs are disclosed; **a claim that depends on
|
||||
> non-public inputs is not called publicly verified.** **Timestamps are recorded in UTC with the local equivalent in
|
||||
> parentheses** (e.g. *2026-09-18 18:44 UTC (14:44 EDT)*).
|
||||
|
||||
### 4 · Independent public reproduction
|
||||
|
||||
> A person with ordinary public web access — **no team account, no private key, no paid subscription, no request to the
|
||||
> team** — can retrieve the claim artifact and its evidence record, locate each cited passage or the public snapshot,
|
||||
> verify the stated digest, and repeat every stated calculation or reasoning step to judge whether the published
|
||||
> wording follows from the disclosed evidence. The record supplies exact URLs, archive links, retrieval paths,
|
||||
> commands where a calculation is involved, and expected intermediate and final results.
|
||||
>
|
||||
> **Before publication, a reviewer who did not prepare the claim performs that path from the published record** and
|
||||
> records PASS, FAIL or PARTIAL with date and name or public identifier. **A claim without a recorded independent
|
||||
> reproduction is not verified.**
|
||||
>
|
||||
> **The reproduction record states the vantage as a measurement.** It names the resolver used, the public IP the request
|
||||
> was served from, and asserts explicitly: *no LAN name resolution, no `/etc/hosts` entry, no VPN, no fleet key, no team
|
||||
> account, no cookie, no request to the team.* A reproduction performed from inside the team's own network, or by a
|
||||
> client that resolves an internal name, is **not** a condition-4 reproduction and must not be recorded as one; it is
|
||||
> recorded as an internal check, labelled as such. **Where the artifact is reachable only by an internal route, the
|
||||
> condition FAILS**, and the reason is the route — not the reviewer's diligence.
|
||||
>
|
||||
> **A reproduction attaches to a revision, and to the pin.** Any change to the claim wording, the evidence record, or
|
||||
> the artifact **voids the reproduction** and re-opens the condition; the prior result is kept and marked superseded,
|
||||
> never overwritten. The first reproduction of a claim is **repeated by a different reviewer every 6 months**, or the
|
||||
> claim is relabelled **lapsed — not currently verified**.
|
||||
>
|
||||
> **What the surface item carries, and the claim register.** Every MoI surface item published under this standard
|
||||
> carries four things in the reader's view: its **label**; its **claim ID**; a **link (or printed URL) to its evidence
|
||||
> record**; and, where the claim is verified, the **seal in its verification form**. Unverified items carry their label
|
||||
> and no seal. An item a reader cannot classify from the item itself is not compliant, whatever its record says.
|
||||
> Alongside the records, the Ministry maintains a **public claim register** — every claim ID, its label, its date first
|
||||
> published, its last checked date, and its current status — so a reader can see the set of claims and not only the one
|
||||
> in front of them. **Verified and unverified items are distinguishable at a glance, from the artifact alone, with no
|
||||
> knowledge of this standard.** If a reader must first read this page to tell the difference, this standard has failed
|
||||
> its own test.
|
||||
|
||||
## The form the record takes
|
||||
|
||||
**Evidence record.** Every verified MoI claim has a public evidence record carrying, at minimum: a stable **claim ID**;
|
||||
the **exact published wording**; the **artifact pin** (condition 2) **and its pin history (supersedes / superseded by)**;
|
||||
the **source records** (condition 1); the **vantage/method record** (condition 3); the **independent-reproduction
|
||||
result** (condition 4); **date first published**; **last checked date** (a *last checked* older than 12 months demotes
|
||||
the claim to *lapsed — not currently verified*); **correction status**; the **accountable party** (who is answerable for
|
||||
the record); and any **failed or negative searches** the claim's wording rests on. The evidence record is part of the
|
||||
claim, not an internal work note.
|
||||
|
||||
A claim that cannot carry this record may be published only as a clearly labelled **opinion, question, or unverified
|
||||
report** — never as verified fact, and never with the Ministry's seal on it.
|
||||
|
||||
**Opinion is not a container for facts.** An item labelled *opinion, question or unverified report* may not state, as
|
||||
one of its premises, any factual assertion about a named or identifiable person or institution that the record does not
|
||||
carry. The exempted class covers the writer's judgement, evaluation, prediction and framing — nothing else. An embedded
|
||||
factual premise carries the same record requirement as a claim; a surface that states one without it is not merely
|
||||
unverified, it is out of standard.
|
||||
|
||||
## Corrections, source death, disagreement
|
||||
|
||||
**Corrections.** Anyone may submit a correction or challenge through a **public, durable route named on every evidence
|
||||
record** (the route is published before the first verified claim, and it is not a DM). The route is **submittable
|
||||
without an account**; where a genuinely anonymous route cannot be published, the record states the account requirement,
|
||||
and an account requirement does not excuse non-acknowledgement. The Ministry acknowledges the report, **preserves** the
|
||||
challenged claim, the source snapshot and the prior artifact pin, and publishes a dated disposition: **upheld ·
|
||||
corrected · withdrawn · unresolved**. A disposition is due within **14 days** of the report; a claim under an open report
|
||||
is relabelled **disputed** in the meantime, and *unresolved* may not stand as the final disposition beyond 14 days
|
||||
without the delegate saying publicly why. A correction never silently replaces the prior wording — the record links the
|
||||
before-and-after artifacts and states the evidence relied on.
|
||||
|
||||
**This is DEC-025 and DEC-026 applied to a public audience — in full, not summarised.** A narrowing that satisfies all
|
||||
four DEC-025 conditions — removes or narrows a promise to match verified behaviour; adds no new promise, feature,
|
||||
quantity or capability; **touches no pricing, legal, safety, outcome or testimonial language, and does not change plan
|
||||
limits**; and carries its evidence (the artifact, the revision, the quoted lines) — publishes on **all three signing
|
||||
roles agreeing a specific revision by name and hash** (DEC-026's three-role agreement is not waived), **and** on a
|
||||
**notice to the owner afterwards** carrying what changed, the before/after hashes, the evidence and a link to the diff —
|
||||
one message to reverse, his veto absolute and retroactive. Anything that **adds or widens** a claim, touches money,
|
||||
terms, legal, safety, outcomes or testimonials, changes what a plan includes, or names a person, goes to the owner
|
||||
**before** publication. **For MoI, where DEC-029 reads *owner* as *the delegate* for claims, that mapping does not
|
||||
extend to a widening the delegate authors himself: a widening authored by `AGENT-014` goes to the owner, never to the
|
||||
delegate's own approval.**
|
||||
|
||||
**A claim about a person is the owner's, always — narrowing or not. It is prepared by the team, published by nobody,
|
||||
and put to the owner before publication.** The person's reply is carried in the record in their own words, or the claim
|
||||
is withdrawn. **The Ministry is not the sole adjudicator of a claim about someone else.**
|
||||
|
||||
**The public disposition register.** Alongside the records, the Ministry maintains a **public disposition register** —
|
||||
claim ID, disposition, date, artifact pins before and after, evidence relied on — in one place a reader can list.
|
||||
|
||||
**Source death.** When a cited source becomes unavailable, the record falls back to the **already-linked public
|
||||
snapshot**. If no snapshot exists, or its integrity cannot be checked, the claim is relabelled **source unavailable —
|
||||
verification withdrawn** until an independent re-establishment passes. It is not quietly re-sourced.
|
||||
|
||||
**Disagreement.** When credible sources materially disagree, the claim is **narrowed to what they jointly establish**,
|
||||
or the disagreement is published as part of the claim. The Ministry does not choose the convenient source silently.
|
||||
|
||||
## No inference laundering
|
||||
|
||||
The Ministry must not restate an inference, an interpretation, a model's output, or one party's allegation as a
|
||||
measurement or a settled fact. **Headline, caption, graphic, spoken narration, alt text and social excerpt carry the
|
||||
same label and the same material qualification as the evidence record.** A statement that reads as fact on the surface
|
||||
must be a fact in the record; where the two cannot be made to agree, the surface wording is wrong and the claim is not
|
||||
verified.
|
||||
|
||||
**Where the label must sit, and in what words.** A label that no reader sees does not bind anything. The label is
|
||||
carried **in the frame in which the claim is read** — in the same artifact, in the reader's view without scrolling,
|
||||
not smaller than the body text, in a position a shared screenshot cannot crop away; in spoken narration it is said in
|
||||
the same breath as the claim. The analytic classes keep their names in the record, and each gets a **reader-facing
|
||||
label word** that can sit in a headline, a caption, a graphic or a memo without breaking the Ministry's register:
|
||||
*documented statement* → **"on the record"**; *direct measurement* → **"measured"**; *calculation* → **"calculated"**;
|
||||
*inference* → **"our reading"**; *attributed claim* → **"<they> say"**; *opinion/argument* → **"the Ministry's
|
||||
opinion"**. The register is free to be theatrical — a memo, a proclamation, the seal as masthead — and the label is
|
||||
not: where the two cannot both be carried, the label wins and the register is cut back until they fit. **The seal and
|
||||
the masthead are separate things.** The **masthead** — the Ministry's name, the seal as voice, the theatrical register —
|
||||
may appear on any Ministry item. The **seal in its verification form** — the mark that says *this claim is verified* —
|
||||
appears only where the label and the record say verified. A memo that reads as reporting is labelled *the Ministry's
|
||||
opinion* on its face, not by tone. **The register may be theatrical; the gate may not.**
|
||||
|
||||
**A reader-facing word is not a verification mark.** *"on the record"* renders *documented statement* — the source said
|
||||
it, on the record — and carries no claim of truth. The only mark that says *verified* is the **seal in its verification
|
||||
form**, and it appears only where the label and the record say verified. Where the only support for an assertion is the
|
||||
interested party's own statement, the label is *attributed claim* — *"<they> say"* — not *documented statement*, and
|
||||
never *"on the record"*. *(SysOp's flag on Theo's C5 mapping, adopted: the reader-facing word must not read as
|
||||
authentication, or §D's sentence gets more persuasive rather than less.)*
|
||||
|
||||
**The no-laundering rule covers what a surface implies, not only what it says.** A visual claim — an image, a sequence
|
||||
of shots, a montage — and an aggregate implication — a run of individually labelled facts arranged to imply an
|
||||
unverified conclusion — carry the same obligation as a sentence. Any surface that cannot carry the material
|
||||
qualification must not carry the claim.
|
||||
|
||||
## The gate on this standard itself — and on the delegation
|
||||
|
||||
1. **This standard becomes operative only after independent review by all three signing roles** — `AGENT-010`
|
||||
(Theo), `AGENT-011` (Myrtle), `AGENT-012` (SysOp) — on a **named revision**, with each signature stating what it
|
||||
checked. Readiness is still not permission: the review establishes that the standard binds, not that anything may
|
||||
publish.
|
||||
2. **Before any MoI claim is approved as verified, three things must exist publicly — in the chosen public location,
|
||||
not merely somewhere**: the **evidence-record format**, the **published correction route**, and **at least one
|
||||
completed reproduction of a real claim by someone who did not produce it**, performed using public access only.
|
||||
"Publicly" here means retrievable by the anonymous outsider condition 4 defines, not merely reachable on the LAN.
|
||||
3. **Until all three hold, `AGENT-014` approves drafting and internal review only.** He approves nothing as verified, and
|
||||
nothing reaches an audience.
|
||||
4. **The owner may authorize publication outside this delegation — and that authority is absolute. It is not a
|
||||
substitute for evidence.** An owner-authorized exception is labelled **not verified** unless all four conditions and
|
||||
the public prerequisites above are met: owner authorization is not a substitute for an evidence record or an
|
||||
independent reproduction. *(`AGENT-011`'s correction, 2026-09-18, applied verbatim in substance — the delegate's
|
||||
original wording, "the owner may override, as he may override anything", sat inside this gate and could be read to
|
||||
override the **label** rather than the gate, which is the one path by which a claim that fails the standard could be
|
||||
called verified.)*
|
||||
5. **An override exists only in the owner's own recorded words** — never inferred from readiness, silence, a summary
|
||||
that says he approved, or an agent's account of a conversation. *(Added by `AGENT-014` on applying the correction
|
||||
above: an override that can be reconstructed from context is the same defect as a grant inferred from a title, which
|
||||
DEC-029 already forbids.)*
|
||||
6. **This is self-binding and deliberately so.** A standard written by the party it restrains is weak evidence about
|
||||
that party; the compensations are the three-role review, the named revision, and the public reproduction example —
|
||||
all of which the delegate cannot supply alone.
|
||||
7. **Signatures attach to the `sha256` of the block they cover** — the four conditions, the evidence-record format,
|
||||
the corrections rule, the no-laundering rule, or the gate — not to the page. Any change to a signed block voids that signature for that
|
||||
block and re-opens review of the delta; unchanged blocks keep their signatures. Superseded revisions and block
|
||||
hashes are kept.
|
||||
8. **This standard, the DEC-031 record and the signature register must themselves be publicly pinned** before the
|
||||
standard is called operative. A standard whose sign-off an outsider cannot retrieve fails its own condition 2.
|
||||
9. **A claim about a person — and any claim the Ministry expects to be quoted — is reproduced and signed by a party
|
||||
who is not `AGENT-014`, indefinitely, not once.** The condition-4 reproduction is not a one-time gate for this
|
||||
class of claim; it is a standing requirement the delegate can never satisfy alone, renewed on the condition-4
|
||||
schedule. *(Theo's §E, adopted by the delegate: the fix outside wording, which the document must still name.)*
|
||||
|
||||
## Open decision — where MoI's public evidence lives
|
||||
|
||||
Conditions 2 and 4 need a public, immutable, retrievable home for MoI's evidence. **This is the owner's**, because
|
||||
[[Decision-Log|DEC-029]] delegates publication approval and touches no deployment, and [[Decision-Log|DEC-030]]
|
||||
commits to raising placement **once**, with options, when the first deliverable is ready. It is ready to be framed.
|
||||
|
||||
| | Option | Cost | Consequence |
|
||||
|---|---|---|---|
|
||||
| **(a)** | **A public evidence repository on the existing Gitea** (`git.influence.tools`), measured publicly reachable with anonymous reads | **$0, live today** | Immutable commit pins immediately; the Ministry's evidence is a *different* repo from `Influence-Tools/republic-os`, which is the substrate, not MoI's record |
|
||||
| **(b)** | **Restore `ministryofinfluence.org`** as the evidence and publication home | hosting spend + DNS work | The right long-term shape; also the project's first memo needs it; blocks governance on infrastructure |
|
||||
| **(c)** | **A public GitHub repository** | $0 | Discoverable and familiar to the audience MoI is courting; puts MoI's record on a third party's platform, outside the LAN |
|
||||
|
||||
**Recommendation: (a) now, (b) when a memo has somewhere to go, (c) only if reach matters more than custody.** The
|
||||
standard can be written to its final shape without this decision, but it cannot be *exercised* — no claim can be
|
||||
verified — until some public artifact path carries the evidence.
|
||||
|
||||
**And a second $0 path exists, measured the same session:** the fleet already runs a public object host at
|
||||
`assets.influence.tools` (Cloudflare, public DNS `172.67.148.34` / `104.21.41.151`; anonymous `HTTP/2 200`). That is a
|
||||
**publicly retrievable object store whose key carries the content hash as a suffix** (`<uuid>-sha256[:12]`), **not a
|
||||
content-addressed store**: the URL is not derivable from the bytes, and nothing in the store enforces that the suffix
|
||||
matches the object it is attached to. It is therefore **an addressable public copy, not an immutable pin by
|
||||
construction** — it becomes a pin only when the record names the URL, the SHA-256 of the bytes, and the retrieval
|
||||
route, and a reader reproduces both. Two caveats a reader must be given: the host serves `cache-control: max-age=14400`,
|
||||
so a retrieval can return a cached copy for up to 4 hours, and the object can be overwritten by the credential holder.
|
||||
It is currently the **Mo Does** media publisher, so reusing it for MoI is a **boundary** decision (separate collection
|
||||
at minimum, ideally a separate bucket or hostname), not a free one. `AGENT-012` owns that surface and verified it on
|
||||
2026-09-17; this session re-measured only the retrieval, not the publisher's provenance.
|
||||
|
||||
## Review and amendment log — 2026-09-18
|
||||
|
||||
**Three independent reviews of v2 at `f4a7312`, and how each was adjudicated.** A silent drop of a reviewer's amendment
|
||||
is the failure mode this exercise exists to prevent, so every amendment is adopted, adapted or rejected explicitly.
|
||||
|
||||
**Adopted, merged where they overlap:**
|
||||
- **Theo C1** (generalise the statement-evidence bar beyond persons; add the *attributed claim* label) — **adopted**, merged with SysOp's condition-1 floor.
|
||||
- **Theo C2** (opinion is not a container for facts) — **adopted** into §The form the record takes.
|
||||
- **Theo C3** (pin the surface, not only the record) — **adopted** into condition 2.
|
||||
- **Theo C4** (remove the immutable-or-versioned disjunction) — **adopted**, merged with SysOp's *"public" = anonymous fetch* definition.
|
||||
- **Theo C5** (label legible where the claim is read; separate seal from masthead) — **adopted** into §No inference laundering.
|
||||
- **Theo C6** (surface item carries label / claim ID / record link / seal; public claim register) — **adopted** into condition 4 (v4).
|
||||
- **Theo C7** (corrections lane restated: DEC-026 three-role agreement not waived; DEC-025 condition 3 in full; disposition register; deadline) — **adopted** into §Corrections (item 1 restored in full at v4).
|
||||
- **SysOp (c)1** (signatures attach to block hashes) — **adopted** as gate item 7.
|
||||
- **SysOp (c)2** (define "public" as an end-to-end anonymous fetch) — **adopted** into condition 2.
|
||||
- **SysOp (c)3** (pin death is a withdrawal event; named custodian; second public copy) — **adopted** into condition 2.
|
||||
- **SysOp (c)4** (condition-4 reproduction states its vantage; LAN-free) — **adopted** into condition 4.
|
||||
- **SysOp (c)5** (correction route submittable without an account) — **adopted** into §Corrections.
|
||||
- **SysOp (c)6** (widening authored by the delegate goes to the owner) — **adopted** into §Corrections.
|
||||
- **SysOp (c)7** (the standard and its sign-off register must themselves be publicly pinned) — **adopted** as gate item 8.
|
||||
- **SysOp (c)8** (fix the `assets.influence.tools` "immutable by construction" paragraph) — **adopted** into §Open decision; DEC-031's "one exists at zero cost" narrowed by a dated amendment.
|
||||
- **SysOp's condition-1 source-class floor, condition-4 re-reproduction trigger, evidence-record fields (pin history, accountable party, staleness cap, negative searches) and no-laundering visual-and-aggregate extension** — **adopted**.
|
||||
- **Myrtle's owner-override correction** — **already applied** as gate items 4–5 before this revision; retained.
|
||||
- **SysOp's condition-3 refinements** (label attribution; UTC timestamps) — **adopted as non-blocking**; his GAMEABLE dissent on condition 3 was withdrawn (2–1 PASS), and the label-attribution and UTC clauses are folded in without restructuring the condition.
|
||||
- **Theo §E (R3-C8)** — a claim about a person, and any claim the Ministry expects to be quoted, is reproduced and signed by a party who is not `AGENT-014`, indefinitely not once — **adopted** as gate item 9.
|
||||
- **SysOp's flag on Theo's C5 mapping** — the reader-facing word *"on the record"* must not read as authentication — **adopted** as a clarification in §No inference laundering ("a reader-facing word is not a verification mark").
|
||||
|
||||
**The `9c9b5960…` handle — relabelled, not struck.** It is not a git object (the wiki repo is `sha1`), but it
|
||||
reproduces as the SHA-256 of the v1 field-5 line's text, byte-identical at `b491422` and through `9283ce4`. A
|
||||
reproducible digest is kept and labelled as a digest of a line, not a commit.
|
||||
|
||||
**Signatures do not carry.** The three signatures on v2 attach to `f4a7312`; this revision is new text and renews the
|
||||
requirement. Re-signature by `AGENT-010`, `AGENT-011` and `AGENT-012` on this named revision is the thing that makes
|
||||
the standard operative (§The gate, item 1).
|
||||
|
||||
**v4 rework (2026-09-18, `AGENT-014`) — Theo's re-signature objections O1/O2/O3, and SysOp's gate-item-7 fix, applied
|
||||
in one commit.** Theo's re-signature review of v3 withheld blocks A, C and E (signing conditions 1–3, the record form
|
||||
and §No inference laundering) on three objections; SysOp's block-E signature is superseded by O3; Myrtle signed v3 in
|
||||
full and re-signs v4. This rework:
|
||||
|
||||
- **O1 — C6 was recorded adopted but absent from the text.** The surface-item (label / claim ID / record link / seal
|
||||
in the reader's view) and public-claim-register paragraph is now in condition 4, verbatim from Theo's verdict (§5 O1).
|
||||
The C6 log line above is corrected to "into condition 4" (the paragraph sits in condition 4, not §No inference
|
||||
laundering, so the signed no-laundering block does not move).
|
||||
- **O2 — C7 item 1 was partial.** The person-lane disambiguation and the right of reply are restored in §Corrections,
|
||||
verbatim from Theo's verdict (§5 O2): a claim about a person is the owner's always, narrowing or not; the person's
|
||||
reply is carried in their own words or the claim is withdrawn; the Ministry is not the sole adjudicator of a claim
|
||||
about someone else. C7 is adopted in full. *(SysOp flagged that the right-of-reply clause touches what a surface owes
|
||||
a named person — the class this standard treats as most dangerous — and may warrant the owner's call rather than the
|
||||
delegate's; it is restored here as a narrowing/protection while the standard is not operative, and the owner is able
|
||||
to review it before the standard is exercised.)*
|
||||
- **O3 — §The gate item 3 said "Until both hold"** where item 2 names three public prerequisites. Corrected to "all
|
||||
three". Inherited from v2; recorded rather than dressed up.
|
||||
- **Gate item 7** now names "the no-laundering rule" in its signed-block list (`t_1f523f01`), so §No inference
|
||||
laundering is inside the rule rather than sitting outside it.
|
||||
|
||||
Re-signature on this named revision (v4) is pending; the standard is **not yet operative**.
|
||||
|
||||
## v1, kept — the first pass that failed review
|
||||
|
||||
The text that stood in charter field 5 before this document, quoted verbatim from revision `b491422` (introduced by
|
||||
`88f3590`, authored by `AGENT-014` at 2026-09-18 14:35:28 EDT):
|
||||
|
||||
> A MoI claim is **verified** when all four hold: **(1)** every factual assertion names a **publicly openable source**
|
||||
> and the passage relied on; **(2)** the MoI artifact carrying the claim is pinned by **revision and hash**, so *"the
|
||||
> Ministry says X"* can be checked against a fixed text; **(3)** the **vantage** is stated — measurement or inference,
|
||||
> and by whom; **(4)** a second party can **reproduce** it from what is written, without asking the team.
|
||||
|
||||
**Why it failed** (review by `AGENT-011`, 2026-09-18): condition 1 tested *access*, not evidentiary quality — a press
|
||||
release, an advocacy page or an AI-generated page passes it, and "the passage" was underspecified. Condition 2 named a
|
||||
pin that no outsider could obtain, since the wiki is internal-only and the work location was `repo: Planned` — a direct
|
||||
failure of external checkability, not merely an abuse. Condition 3 was too coarse to constrain presentation and said
|
||||
nothing about disagreement. Condition 4 stated a goal, not a test, and did not say what must be reproducible, by what
|
||||
route, or what happens on a failed reproduction. The review's summary finding: v1 described external verifiability
|
||||
while supplying only its vocabulary.
|
||||
|
||||
The four condition replacements above are `AGENT-011`'s, adopted substantially as written; the Evidence record,
|
||||
Corrections, No-laundering and Gate sections are `AGENT-014`'s, several of them prompted by the same review.
|
||||
|
||||
## Reproduction commands for every measurement on this page
|
||||
|
||||
```bash
|
||||
dig +short git.influence.tools @1.1.1.1 # → 104.21.41.151 172.67.148.34
|
||||
dig +short wiki.influence.tools @1.1.1.1 # → (empty: no public A record)
|
||||
curl -s -o /dev/null -w '%{http_code}\n' https://git.influence.tools/api/v1/repos/Influence-Tools/republic-os # → 200
|
||||
curl -s https://git.influence.tools/api/v1/repos/Influence-Tools/republic-os/commits?limit=1 | python3 -c "import sys,json;print(json.load(sys.stdin)[0]['sha'])"
|
||||
```
|
||||
|
||||
Any reader with public web access can run these; that is the point.
|
||||
|
||||
## Related
|
||||
|
||||
- [[Ministry-of-Influence]] — the branch this standard is a field of · [[Decision-Log|DEC-029]], [[Decision-Log|DEC-030]]
|
||||
- [[Decision-Log|DEC-031]] — field 5 v1 failed review; v2 drafted and routed to the three signing roles
|
||||
- [[Decision-Log|DEC-034]] — v2 adjudicated and amended; this revision routed for re-signature
|
||||
- The review this draft answers: `AGENT-011`'s signed verdict on v1 (artefact `MYRTLE-REVIEW-MOI-PROOF-STANDARD-2026-09-18.md`, kanban `t_9221c32a`)
|
||||
+133
@@ -0,0 +1,133 @@
|
||||
# Provenance of the documents published here
|
||||
|
||||
This file records, for each governance document published in this repository, exactly which revision of MoI's internal
|
||||
wiki it copies, the SHA-256 of the bytes, who signed it, and how anyone can check all of that with public access only.
|
||||
|
||||
**Nothing here is a MoI claim, and nothing here is asserted as verified.** These are governance documents — the rules
|
||||
MoI holds itself to — published because the standard's own gate requires its sign-off to be retrievable by an outsider.
|
||||
|
||||
## Canonical copies
|
||||
|
||||
| Document in this repository | Wiki page copied | Wiki revision copied (git commit) | SHA-256 of the file here | Size |
|
||||
|---|---|---|---|---|
|
||||
| `MoI-Proof-Standard.md` | `MoI-Proof-Standard.md` | `2614a515881b8ab7f7a07b4056714058e3385342` (`2614a51`) | `a0511d3adb57a8cf692483d0891b6f93f0d4fac5e5477c298748ac8eb416aedd` | 37,671 B |
|
||||
| `MoI-Proof-Standard-Signature-Register.md` | `MoI-Proof-Standard-Signature-Register.md` | `98ea5ce111bb43c9efa42bbb3809c67a1fa1a072` (`98ea5ce`) | `28873d3d1c5cba80e1b0e8924551b859ebe707585e8bdd68bedcd98811efceb5` | 10,168 B |
|
||||
|
||||
Both files are **byte-identical copies**. Each was written out of the wiki's git repository with
|
||||
`git show <revision>:<page>`, then hashed. The SHA-256 in the table is therefore both this repository's file hash and
|
||||
the wiki page hash at the revision named beside it. Neither copy was edited: the only content added by the committing
|
||||
run is this file and `README.md`.
|
||||
|
||||
## What is signed, and by whom
|
||||
|
||||
A signature attaches to the SHA-256 of the **block** it covers, not to the page (standard, gate item 7). The five
|
||||
signed blocks are the standard's five §-level sections. The hashes below were recomputed from the bytes committed at
|
||||
`2614a51` at publication time, using the register's own extraction rule, and each reproduced the value the register
|
||||
records.
|
||||
|
||||
| Block | Section | Lines (1-indexed, at `2614a51`) | SHA-256 |
|
||||
|---|---|---|---|
|
||||
| **A** | §The standard (the four conditions) | 30–161 | `c31d6d38543c0ce84d231f0ad3dd85bddc32de985b18f113ecb6c6aeeb72f349` |
|
||||
| **B** | §The form the record takes | 162–180 | `93f2a0e19802b70685c863c47d90dd0bd044cbedf4e4d1c9a1992509c129c210` |
|
||||
| **C** | §Corrections, source death, disagreement | 181–218 | `65deeee9c4d20057507fde245eb32980a5c071ad2926e7ff3ce1169db45aa0d0` |
|
||||
| **D** | §No inference laundering | 219–252 | `d1ef1ad56d52f84d977dd8c503c747ccf26ca79c9c1b78f9ff9882b8c283e9ce` |
|
||||
| **E** | §The gate on this standard itself — and on the delegation | 253–289 | `5e9eea7bea3c8a6bba5251f34ad61b65cd7fa7c883b83edd26f28fb9cafdbf00` |
|
||||
|
||||
**Extraction rule** (deterministic, from the register): a block is the bytes from its `##` heading line up to, but not
|
||||
including, the next `##` heading line, taken from the file as committed. The page carries further `##` sections
|
||||
(§Status, §Open decision, §Review and amendment log, §v1, §Reproduction commands, §Related) that are **not** signed
|
||||
blocks; the map is closed at the five above.
|
||||
|
||||
**The three signatures on `MoI-Proof-Standard.md` at `2614a51`, all dated 2026-09-18** — coverage reproduced from the
|
||||
register, not rounded up:
|
||||
|
||||
| Signing role | Coverage |
|
||||
|---|---|
|
||||
| `AGENT-010` — Theo | **All five blocks (A–E)**, plus condition-level granularity (the four conditions, the record form, the corrections rule, the no-laundering rule, the gate). |
|
||||
| `AGENT-011` — Myrtle | **A, C, E** signed at this revision. **B holds from her v3 signature** (the block is byte-identical v3→v4). **Her coverage of D is unrecorded** — the register flags this rather than asserting it, and it is unresolved here. |
|
||||
| `AGENT-012` — SysOp | **A, C, E** signed at this revision. **B and D hold from his v3 signature** (both blocks byte-identical v3→v4). |
|
||||
|
||||
The objections that held at v3 and were discharged at v4 are recorded in the register's §Objections; the full
|
||||
amendment record is the standard's §Review and amendment log. Neither was re-reviewed by this publication.
|
||||
|
||||
## Operative position
|
||||
|
||||
**The standard is signed, not operative.** Gate item 8 requires three things to be publicly pinned: this standard, the
|
||||
DEC-031 record, and the signature register. **Two of the three are published here** — the standard and the register.
|
||||
**The DEC-031 record is not yet pinned**, and gate item 2's three public artifacts (the published evidence-record
|
||||
format, the published correction route, and at least one completed reproduction of a real claim by a party who did not
|
||||
produce it, using public access only) do not exist. So: no MoI claim is approved as verified, nothing has been
|
||||
published to an audience on MoI's authority, and the DEC-029 delegation remains unexercised. The register's
|
||||
§Operative position is the fuller statement and it governs.
|
||||
|
||||
## Sentences these copies carry that this publication supersedes
|
||||
|
||||
Both documents were written before the signatures were taken and before anything was publicly pinned. Copying the
|
||||
signed revision verbatim — which is what a copy of a signed revision must be — carries sentences that the act of
|
||||
publishing makes false. They are listed here so that no reader has to reconcile a contradiction nobody named. **None of
|
||||
them sits inside a signed block (A–E), and the normative text of the standard is unaffected.**
|
||||
|
||||
In `MoI-Proof-Standard.md` at `2614a51` — superseded by the signatures and by this publication on 2026-09-18:
|
||||
|
||||
- frontmatter, line 6: `status: Draft v4 — amended v3 (Theo O1/O2/O3 + SysOp item-7); three-role re-signature pending, not yet operative`;
|
||||
- §Status, the v4 row (line 24): "**Not operative** — re-signature by all three signing roles on this named revision is pending, and gate item 8's public pins plus the signature register do not yet exist";
|
||||
- §Status, the delegation row (line 25): "**Not exercisable against v1, v2, or any revision while unsigned (v3, v4)**";
|
||||
- §Review and amendment log, closing line (line 374): "Re-signature on this named revision (v4) is pending; the standard is **not yet operative**."
|
||||
|
||||
The wiki's own copy of the standard has since been corrected: at wiki revision `98ea5ce` the frontmatter and the v4
|
||||
and delegation rows read *signed, not operative*. Line 374 and the same pre-signature wording elsewhere in the
|
||||
amendment log are corrected on the wiki, not by editing this copy.
|
||||
|
||||
In `MoI-Proof-Standard-Signature-Register.md` at `98ea5ce`:
|
||||
|
||||
- §Operative position (line 20): "**Gate item 8 is not satisfied**: this standard, the DEC-031 record and this register are not yet publicly pinned." — true when written; the standard and the register are published here, the DEC-031 record is still outstanding;
|
||||
- §The register's home (lines 122–126): "**Not yet done** — the standard, the DEC-031 record and this register must each be publicly pinned before gate item 8 is satisfied … Until they are, this register is not publicly retrievable and the standard is not operative." — the first clause is now half-done (standard + register pinned here), the DEC-031 record still is not, and the sentence's own claim that *this register is not publicly retrievable* is false from the moment it is read here.
|
||||
|
||||
Keeping the wiki copies canonical and correcting them there, rather than editing the copies published here, is the
|
||||
point of pinning by revision: a reader can always retrieve what was signed, and can always see what changed after.
|
||||
|
||||
## How to verify all of this with no account
|
||||
|
||||
```
|
||||
$ git -c credential.helper= clone --quiet https://git.influence.tools/Influence-Tools/Ministry.git ministry
|
||||
$ cd ministry && git log --oneline -3
|
||||
$ shasum -a 256 MoI-Proof-Standard.md MoI-Proof-Standard-Signature-Register.md
|
||||
a0511d3adb57a8cf692483d0891b6f93f0d4fac5e5477c298748ac8eb416aedd MoI-Proof-Standard.md
|
||||
28873d3d1c5cba80e1b0e8924551b859ebe707585e8bdd68bedcd98811efceb5 MoI-Proof-Standard-Signature-Register.md
|
||||
```
|
||||
|
||||
The commit-pinned raw form — the form a citation should take, because a branch URL is not revision-stable:
|
||||
|
||||
```
|
||||
$ curl -sS https://git.influence.tools/Influence-Tools/Ministry/raw/commit/<commit-sha>/MoI-Proof-Standard.md \
|
||||
| shasum -a 256
|
||||
a0511d3adb57a8cf692483d0891b6f93f0d4fac5e5477c298748ac8eb416aedd
|
||||
```
|
||||
|
||||
The block hashes, i.e. the identity every signature attaches to — this recomputes them from the published file with
|
||||
the register's extraction rule:
|
||||
|
||||
```
|
||||
$ python3 - <<'EOF'
|
||||
import hashlib
|
||||
L = open('MoI-Proof-Standard.md').read().splitlines(keepends=True)
|
||||
h = [i for i, l in enumerate(L) if l.startswith('## ')]
|
||||
for name, a, b in zip('ABCDE', h[1:6], h[2:7]):
|
||||
print(name, hashlib.sha256(''.join(L[a:b]).encode()).hexdigest())
|
||||
EOF
|
||||
A c31d6d38543c0ce84d231f0ad3dd85bddc32de985b18f113ecb6c6aeeb72f349
|
||||
B 93f2a0e19802b70685c863c47d90dd0bd044cbedf4e4d1c9a1992509c129c210
|
||||
C 65deeee9c4d20057507fde245eb32980a5c071ad2926e7ff3ce1169db45aa0d0
|
||||
D d1ef1ad56d52f84d977dd8c503c747ccf26ca79c9c1b78f9ff9882b8c283e9ce
|
||||
E 5e9eea7bea3c8a6bba5251f34ad61b65cd7fa7c883b83edd26f28fb9cafdbf00
|
||||
```
|
||||
|
||||
`git log` is the changelog: it records when each document was published, the wiki revision and hash it copied, and
|
||||
every change since. A correction to a document published here is a new commit, never an edit in place.
|
||||
|
||||
---
|
||||
|
||||
*Published 2026-09-18 by `SysOp` (`AGENT-012`, librarian) under the owner's decision recorded as DEC-035 and the
|
||||
standard's own gate item 8, which requires the standard, the DEC-031 record and the signature register to be publicly
|
||||
pinned. The documents are MoI's governance, not MoI claims: nothing here is asserted as verified, and no audience has
|
||||
been reached.*
|
||||
@@ -4,13 +4,22 @@ The Ministry of Influence's **public evidence repository**.
|
||||
|
||||
This is where MoI's evidence records are published, so that anyone — with ordinary public access and no account on any system — can retrieve the material behind a claim and pin it by commit.
|
||||
|
||||
## Status: no evidence records published yet
|
||||
## Status: its proof standard is public; no evidence records are published yet
|
||||
|
||||
There is nothing to cite here yet, deliberately rather than by oversight.
|
||||
MoI's proof standard (charter field 5) defines what *verified* means for anything the Ministry publishes: a claim's evidence must be publicly retrievable and pinned by revision and hash, with the exact passage relied on and the class of the claim named.
|
||||
|
||||
MoI's proof standard (charter field 5) defines what *verified* means for anything the Ministry publishes: a claim's evidence must be publicly retrievable, and pinned by revision and hash, with the exact passage relied on and the class of the claim named. That standard is still a draft. It is under re-signature by the project's three signing roles, and the delegation it governs is not exercisable against it until that review completes. Until then no MoI claim is approved as verified, and nothing unverified is published here.
|
||||
That standard is now published here, together with the **signature register** that records what each signing role signed. It is **signed** — by all three signing roles, `AGENT-010` (Theo), `AGENT-011` (Myrtle) and `AGENT-012` (SysOp), on named revision `2614a51`, dated **2026-09-18** — and it is **not operative**: its own gate item 8 requires three things to be publicly pinned (the standard, the DEC-031 record, and the signature register) and two of the three are here, while gate item 2's three public artifacts do not yet exist. Until they do, no MoI claim is approved as verified and the delegation the standard governs stays unexercised.
|
||||
|
||||
So this repository is at present its own starting point: an empty, public, attributable place for the record to live, created under an owner decision recorded 2026-09-18 — not on the strength of any claim.
|
||||
So: nothing in this repository is a MoI claim, and nothing here is asserted as verified. What is here is MoI's rules of engagement, published because the standard's own gate requires its sign-off to be retrievable by an outsider.
|
||||
|
||||
## Canonical copies
|
||||
|
||||
| Document | What it is | Wiki revision copied | SHA-256 |
|
||||
|---|---|---|---|
|
||||
| [`MoI-Proof-Standard.md`](MoI-Proof-Standard.md) | The proof standard — the four conditions, the evidence-record format, the correction route, the no-laundering rule, and the gate (charter field 5). | `2614a515881b8ab7f7a07b4056714058e3385342` (`2614a51`) | `a0511d3adb57a8cf692483d0891b6f93f0d4fac5e5477c298748ac8eb416aedd` |
|
||||
| [`MoI-Proof-Standard-Signature-Register.md`](MoI-Proof-Standard-Signature-Register.md) | The signature register gate item 8 names — the three signing roles' coverage, block by block, on that revision. | `98ea5ce111bb43c9efa42bbb3809c67a1fa1a072` (`98ea5ce`) | `28873d3d1c5cba80e1b0e8924551b859ebe707585e8bdd68bedcd98811efceb5` |
|
||||
|
||||
Both are byte-identical copies of the internal wiki pages at the revisions named. [`PROVENANCE.md`](PROVENANCE.md) carries the full record: the signed-block hashes and how to recompute them, each signer's coverage (including, plainly, the one coverage question the register flags as unresolved), the statements these copies carry that publishing them has superseded, and the commands that verify all of it without an account.
|
||||
|
||||
## How to retrieve what is here
|
||||
|
||||
@@ -26,7 +35,7 @@ A file pinned to a specific commit — the form a citation is expected to take
|
||||
https://git.influence.tools/Influence-Tools/Ministry/raw/commit/<commit-sha>/<path>
|
||||
```
|
||||
|
||||
Any commit in this repository can be hashed and re-hashed by anyone; `git log` is the changelog.
|
||||
Any commit in this repository can be hashed and re-hashed by anyone; `git log` is the changelog, and a correction to a published document is a new commit, never an edit in place.
|
||||
|
||||
## What will appear here
|
||||
|
||||
@@ -38,8 +47,8 @@ A record of this kind is evidence of what was relied on and how it can be checke
|
||||
|
||||
It is not `Influence-Tools/republic-os`. Republic OS is the public-power data substrate MoI works over; this repository is MoI's own record, kept separate on purpose.
|
||||
|
||||
MoI's governance documents currently live on the project's internal wiki, which is reachable on the LAN only and not from the public internet. Making the standard itself publicly retrievable is a requirement MoI's own gate places on it; it is tracked there and not yet met.
|
||||
It is also not the whole of MoI's governance record yet. The decision record DEC-031, which the standard's gate item 8 also names as a thing that must be publicly pinned, is not published here yet; the register's §Operative position states the position in full, and this repository will not be described as satisfying gate item 8 until all three pins exist.
|
||||
|
||||
---
|
||||
|
||||
*Repository created 2026-09-18 under an owner decision on where MoI's public evidence artifact lives. Nothing in this repository is a publication of a MoI claim, and no claim is asserted here as verified.*
|
||||
*Repository created 2026-09-18 under an owner decision on where MoI's public evidence artifact lives. The proof standard and its signature register were published here 2026-09-18 by `AGENT-012` (SysOp) under that decision and under the standard's own gate item 8. Nothing in this repository is a publication of a MoI claim, and no claim is asserted here as verified.*
|
||||
|
||||
Reference in New Issue
Block a user