L0→L5 Authority & Evidence Stack
Authority propagates downward from L0 (human root). Evidence flows upward, PQC-signed at every layer. Click a layer.
L5
Immutable Evidence
COLD archive · OEP bundles · Forensic verification
L4
Execution Gate
Governance Receipt · Adaptive Veto Machine · ATF compliance check
L3
Runtime Continuity
RCR · CES scoring · HALT protocol · 8 RGC invariants
L2
Temporal Admissibility
TAR · Session bounds · TTL enforcement · nanosecond precision
L1
Delegation
Delegation Receipt · Scope · MAR enforcement · Trust Lattice
L0
Human Authority Root
Agent Identity Receipt · TIER-1 registration · budget = 100.0
L0 — Human Authority Root
TIER-1 Human Principal
Agent Identity Receipt (AIR) — PQC-signed binding of AID to authority budget and ML-DSA-65 public key
authority_budget = 100.0 — maximum authority; this is the chain root
chain_root_id — every DR in the lattice carries this identifier, tracing back here
TIER-1 registration — only Tier-1 principals may be chain roots (ATF-INV-003)
Key invariants at this layer
ATF-INV-003 — chain traces to TIER-1 human root
ATF-INV-002 — AIR signed with ML-DSA-65
RCR Continuity Lifecycle
CES determines the continuity status at every runtime snapshot. HALT is a protocol invariant — not a configuration option. Click a state.
NOMINAL
CES ≥ 75
Normal execution
→
MONITORING
50–74
Increased sampling
→
WARNING
25–49
Alert operator
→
CRITICAL
10–24
Reauth required
→
HALT
CES < 10
Execution ceases
NOMINAL — CES ≥ 75
Session health is strong. All four CES components (temporal, budget, context, integrity) are collectively above the nominal threshold. Normal execution proceeds. RCR is committed and signed. Next sample at standard interval.
CES formula: T×0.30 + B×0.30 + D×0.20 + I×0.20 — fixed by RGC-INV-001. Not runtime-configurable. HALT threshold fixed at 10.0 by RGC-INV-003.
Evidence Archive Pipeline (EAP)
Evidence moves HOT→WARM→COLD→ARCHIVE. Tier transitions are one-directional (ELR-INV-002). Every transition requires cryptographic proof (ELR-INV-004).
HOT
≤ 90 days
Active executions
Real-time access
Redis + DB
Full query support
Real-time access
Redis + DB
Full query support
WARM
90 days – 1 year
Recent evidence
Compressed store
Hours latency
Merkle-indexed
Compressed store
Hours latency
Merkle-indexed
COLD
1 – 7 years
Archived evidence
Merkle-chained blocks
Days latency
OEP-exportable
Merkle-chained blocks
Days latency
OEP-exportable
ARCHIVE
Indefinite
OEP bundles
Regulator delivery
Self-contained
No platform needed
Regulator delivery
Self-contained
No platform needed
HOT
TTL expired · volume threshold→
WARM
retention window→
COLD
regulatory export request→
ARCHIVE
EAP invariants: EAP-INV-001 (append-only) · EAP-INV-005 (Merkle completeness) · ELR-INV-002 (tier ordering) · EAP-INV-003 (block signing)
MAR Delegation Chain
Authority budget can only decrease through the chain (ATF-INV-001). Every node is PQC-signed. Any party can verify the chain offline with only the root public key.
TIER-1HUMAN-harold-nunes-001100.0chain root
TIER-2AID-FINANCE-3A7F9B2C1D4E5F6A75.0≤ 100.0 ✓ ATF-INV-001
TIER-3AID-FINANCE-7B8C9D0E1F2A3B4C50.0≤ 75.0 ✓ ATF-INV-001
TIER-4AID-FINANCE-2C3D4E5F6A7B8C9D20.0≤ 50.0 ✓ ATF-INV-001
Every DR in the chain carries chain_root_id = HUMAN-harold-nunes-001. A regulator can verify the full chain starting from any DR, working backwards to the root — no platform access required (ATF-INV-006).