{"component":"SDI_DER_SPEC","description":"Complete specification for a governed reasoning artifact. Every DER must pass /_functions/compile before Append Audit and Commit at the external Logic Node.","version":"SDI_DER_v1.1","hash_alg":"SHA-384","protocol":"SDI_PROTOCOL_v1","entry_types":["EPISODIC","PRECEDENT","CALIBRATION","AUDIT","SYSTEM","MEMORY_COMPILE","SUPER_DER","MINT_PROOF","BIO"],"schema":{"SDI_DER":{"META":{"der_version":"SDI_DER_v1.1","utc":"ISO_8601","hash_alg":"SHA-384","protocol":"SDI_PROTOCOL_v1","agent_id":"SDI-XXXXXXXXXXXX (or SESSION_LOCAL)","sovereign_hash":"0x... (optional; external mint-agent)","model_version":"STRING — actual generating model string returned by API (authoritative field for which model generated this entry)","ledger":{"type":"EPISODIC|PRECEDENT|CALIBRATION|AUDIT|SYSTEM|MEMORY_COMPILE|SUPER_DER","parent_hash":"GENESIS|0x...|SESSION_LOCAL","expected_parent_hash":"OPTIONAL_CAS_GUARD"}},"DECISION_INTENT":{"context_framing":"STRING — why this reasoning is happening","intent_statement":"STRING — what is being decided or answered","role":"STRING — operator or system role","tier":"Strategic|Operational|Tactical","impact_domain":"LOW_RISK | HUMAN_WELFARE | SAFETY_CRITICAL | FINANCIAL | LEGAL — determines which compile gate proxy checks are activated."},"QUESTION_LOGIC":{"strategic_question":"STRING","sub_questions":[{"id":"q1","prompt":"STRING","linked_signal_ids":["signal_01"],"success_standard":{"definition":"STRING — what constitutes sufficient evidence to answer this sub-question","framework_source":{"name":"STRING — governance framework informing this criterion","retrieved_utc":"ISO_8601 — required when source is external","url":"STRING — retrievable URL if available"}}}]},"DECISION_SYNTAX":{"strategic_question_id":"Q-XXXX (optional)","sub_question_grammar":[{"id":"q1","pattern":"THRESHOLD|COMPARISON|BOOLEAN_CHECK|EXISTS|WITHIN_WINDOW","lhs":"STRING","op":"==|>=|<=|>|<|CONTAINS|MEETS|WITHIN","rhs":"NUMBER|STRING|BOOLEAN","window":"STRING_OPTIONAL"}]},"SUCCESS_STANDARD":{"definition":"STRING — what counts as success","threshold_type":"Binary|Numeric|Time-bound|Qualitative|Qualitative/Deterministic","operator":"==|>=|<=|>|<|CONTAINS|MEETS|WITHIN","target":"NUMBER|STRING|BOOLEAN","window":"STRING_OPTIONAL","framework_source":{"name":"STRING — governance framework informing this success criterion","retrieved_utc":"ISO_8601","url":"STRING"},"audit_standard":{"definition":"STRING — how a human can reconstruct the decision from this record alone","required_artifacts":["ARRAY of strings"],"pass_fail_rule":"STRING"}},"SYSTEM_INPUT":{"inputs":[{"signal_id":"signal_01","source_system":"HUMAN|SYSTEM|EXTERNAL|DOC|DB|WEB|PEER","raw_value":"ANY — quote, number, doc snippet, reference","captured_utc":"ISO_8601","provenance":"STRING — who, what, where, how captured","citation":{"title":"STRING — document or source title","url":"STRING — retrievable URL (required when source_system is WEB or EXTERNAL)","retrieved_utc":"ISO_8601 — date of retrieval (required when source_system is WEB or EXTERNAL)","version_or_date":"STRING — document version or publication date if known"},"insight_dimensions":{"actionability":"1-5","relevance":"1-5","predictive_value":"1-5","specificity":"1-5","measurability":"1-5"},"insight_strength":"1-5 — must equal min of all 5 dimensions (deterministically computed)","scoring_rule":"insight_strength = min(actionability, relevance, predictive_value, specificity, measurability)","signal_useful_rule":"signal_useful = true if relevance >= 4, even if insight_strength <= 2","evidence_grade":"OPTIONAL — future: A/B/C/D/F"}]},"ILJO":{"INTENT":"STRING — anchored decision objective (Sign in triadic structure)","LOGIC":"STRING — objective derivations grounded in SYSTEM_INPUT signals. No policy or decision language. Object relationship in triadic closure.","JUDGMENT":"STRING — bounded verdict under SOVEREIGNTY and PRIMUM. Anchors referenced explicitly. Stop decisions acknowledged. The Interpretant.","OUTCOME":"STRING — committed state. Becomes Sign for next cycle.","GOVERNED_ANSWER":"STRING — plain prose answer readable without context. No signal shorthand. No reference IDs. The primary answer surface. Required field — will be promoted to compile error in a future protocol version.","BOTTOM_LINE":"STRING — one sentence summary of the governing conclusion. Optional but recommended.","sequence_note":"ILJO sequence is non-negotiable. Enforced by schema structure."},"GCA":{"ID":"STRING — raw candidate stream. No finality claims.","EGO":"STRING — structured SDI reasoning trace grounded in signals.","SUPEREGO":{"anchors_required":"ARRAY — governance constants this DER must honor","anchors_present":"ARRAY — governance constants the model declares are honored","note":"Declaration is Level 1. Proxy scoring is Level 2. Human JUDGMENT audit is Level 3."}},"BOUNDEDNESS":{"uncertainty":"LOW|MED|HIGH","max_uncertainty_allowed":"LOW|MED|HIGH","timebox_seconds":"NUMBER","stop_on_uncertainty":"BOOLEAN — must be true when uncertainty = HIGH (SOVEREIGNTY proxy)","stop_reason":"INSUFFICIENT_SIGNAL|HIGH_UNCERTAINTY|TIMEBOX_EXCEEDED|POLICY_BLOCK"},"OUTCOME_PLAN":{"note":"Prospective Reckoning commitment. The agent commits a forward-facing test of the current reasoning before outcomes are known. Architecturally immutable — cannot be edited or removed after commit.","planned_metrics":[{"metric":"STRING — what is being predicted or monitored","target":"STRING|NUMBER — what would constitute confirmation","measurement_method":"STRING — how this will be measured","review_window":"STRING — when to review","resolution_horizon":"short|medium|long|event-triggered — timeframe for resolution","resolution_event":"STRING — specific observable condition that constitutes resolution","rollback_condition":"STRING — required when DER involves human welfare (PRIMUM proxy)"}]},"GOVERNED_RECKONING":{"note":"Prospective Reckoning declaration. Required when prior OUTCOME_PLANs are in context and current evidence is directly relevant. The agent declares on the record what happened to prior commitments before reasoning about the new question.","declarations":[{"plan_id":"STRING — references an OUTCOME_PLAN.planned_metrics entry from a prior turn","status":"REINFORCED | CONTRADICTED | EXTENDED | INCONCLUSIVE","evidence_seq":"STRING — signal_id or ledger SEQ grounding this declaration. Required for REINFORCED and CONTRADICTED. Null only if INCONCLUSIVE.","one_sentence":"STRING — one sentence stating precisely what resolved and why","status_definitions":{"REINFORCED":"Current evidence confirms the prior reasoning is tracking correctly","CONTRADICTED":"Current evidence materially undermines the prior reasoning","EXTENDED":"Prior reasoning was correct but its scope or implications have grown","INCONCLUSIVE":"No relevant evidence in current signals — left open for a future turn"}}]},"METRICS":{"RAI":"0.0-1.0 — Reasoning Admissibility Index. Minimum 0.78 required for ledger entry.","W_RSQ":"0.0-1.0 — Weighted Reasoning Structure Quality. Largest single RAI component (weight 0.30). Measures whether LOGIC was semantically responsive to INTENT.","Jc_clt":"NUMBER — Cognitive Joule. Cognitive work density computed from five runtime-extracted operands.","cognitive_hash":"SHA-384 of six Jc operands including total tokens consumed. Independently recomputable from stored operands.","Jc":"NUMBER — tokens in committed artifact","Jp":"NUMBER — input tokens processed by model","delta_E":"NUMBER — Jp minus Jc (governance efficiency signal)","ID_tokens_est":"NUMBER","_note":"OPTIONAL — example or annotation field. Authoritative metric values are computed at runtime by external Logic Node."}}},"golden_example":{"SDI_DER":{"META":{"der_version":"SDI_DER_v1.1","utc":"2026-02-13T14:05:00.000000+00:00","hash_alg":"SHA-384","protocol":"SDI_PROTOCOL_v1","agent_id":"SESSION_LOCAL","sovereign_hash":"0xOPTIONAL.MINTED.LATER","ledger":{"type":"EPISODIC","parent_hash":"GENESIS","expected_parent_hash":"GENESIS"}},"DECISION_INTENT":{"context_framing":"School district evaluating an AI-tutor pilot with privacy and safety gates.","intent_statement":"Decide whether to launch a limited AI-tutor pilot only if enforceable safety and auditability conditions are met.","role":"District Program Owner","tier":"Strategic","impact_domain":"HUMAN_WELFARE"},"QUESTION_LOGIC":{"strategic_question":"Should we launch the AI-tutor pilot this semester without increasing privacy or safety risk?","sub_questions":[{"id":"q1","prompt":"Is student data handling governed by a signed DPA with enforceable retention and deletion terms?","linked_signal_ids":["sig_01"],"success_standard":{"definition":"A fully executed DPA exists with explicit retention limits and deletion SLA.","framework_source":{"name":"FERPA 34 CFR Part 99","retrieved_utc":"2026-02-13T13:00:00.000000+00:00","url":"https://www.ecfr.gov/current/title-34/subtitle-A/part-99"}}},{"id":"q2","prompt":"Is there a verified human kill-switch for the AI tutor in production?","linked_signal_ids":["sig_02"],"success_standard":{"definition":"A human-accessible override exists and has been tested in production within 30 days.","framework_source":{"name":"NIST AI RMF GOVERN 1.2","retrieved_utc":"2026-02-13T13:00:00.000000+00:00","url":"https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.100-1.pdf"}}},{"id":"q3","prompt":"Are harmful outputs constrained with documented policy and monitoring?","linked_signal_ids":["sig_03"],"success_standard":{"definition":"A safety policy document exists with monitoring controls and a documented escalation path.","framework_source":{"name":"NIST AI RMF MANAGE 2.2","retrieved_utc":"2026-02-13T13:00:00.000000+00:00","url":"https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.100-1.pdf"}}}]},"DECISION_SYNTAX":{"strategic_question_id":"Q-AI-TUTOR-0001","sub_question_grammar":[{"id":"q1","pattern":"EXISTS","lhs":"DPA_signed","op":"==","rhs":true,"window":"N/A"},{"id":"q2","pattern":"BOOLEAN_CHECK","lhs":"KillSwitch_live_tested","op":"==","rhs":true,"window":"Last 30d"},{"id":"q3","pattern":"EXISTS","lhs":"SafetyPolicy_monitoring_controls","op":"==","rhs":true,"window":"N/A"}]},"SUCCESS_STANDARD":{"definition":"Proceed only if safety conditions are met AND a human can audit the reasoning path from this record alone.","threshold_type":"Qualitative/Deterministic","operator":"MEETS","target":"All sub-questions supported by strength >= 3 signals, or explicitly stopped with INSUFFICIENT_SIGNAL.","window":"This semester","framework_source":{"name":"NIST AI RMF MEASURE 2.5","retrieved_utc":"2026-02-13T13:00:00.000000+00:00","url":"https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.100-1.pdf"},"audit_standard":{"definition":"Reviewer can reconstruct: sub-questions to signals to scoring to judgment anchors to rollback condition.","required_artifacts":["Strategic question and sub-questions with success standards present","Each sub-question has linked_signal_ids OR stop_reason=INSUFFICIENT_SIGNAL","Each signal has all 5 insight_dimensions with insight_strength = min(dimensions)","SOVEREIGNTY and PRIMUM present in anchors_present","Outcome plan includes rollback_condition"],"pass_fail_rule":"FAIL if any artifact is missing."}},"SYSTEM_INPUT":{"inputs":[{"signal_id":"sig_01","source_system":"DOC","raw_value":"Vendor DPA draft v2.1 (unsigned). Retention clause exists; deletion SLA missing.","captured_utc":"2026-02-13T13:55:00.000000+00:00","provenance":"District legal review packet","citation":{"title":"Vendor DPA Draft v2.1","url":null,"retrieved_utc":"2026-02-13T13:55:00.000000+00:00","version_or_date":"Draft v2.1, received 2026-02-10"},"insight_dimensions":{"actionability":4,"relevance":5,"predictive_value":3,"specificity":4,"measurability":3},"insight_strength":3,"scoring_rule":"insight_strength = min(actionability, relevance, predictive_value, specificity, measurability)","signal_useful_rule":"signal_useful = true if relevance >= 4, even if insight_strength <= 2"},{"signal_id":"sig_02","source_system":"SYSTEM","raw_value":"Admin console shows kill-switch toggle exists; no record of live production test.","captured_utc":"2026-02-13T13:56:00.000000+00:00","provenance":"IT demo and admin screenshot","citation":{"title":"Admin Console Screenshot","url":null,"retrieved_utc":"2026-02-13T13:56:00.000000+00:00","version_or_date":"Captured 2026-02-13"},"insight_dimensions":{"actionability":4,"relevance":5,"predictive_value":2,"specificity":3,"measurability":3},"insight_strength":2,"scoring_rule":"insight_strength = min(actionability, relevance, predictive_value, specificity, measurability)","signal_useful_rule":"signal_useful = true if relevance >= 4, even if insight_strength <= 2"},{"signal_id":"sig_03","source_system":"DOC","raw_value":"Safety policy doc exists; monitoring controls not specified; escalation path unclear.","captured_utc":"2026-02-13T13:57:00.000000+00:00","provenance":"Vendor trust center PDF","citation":{"title":"Vendor Trust Center Safety Policy Summary","url":"https://vendor.example.com/trust","retrieved_utc":"2026-02-13T13:57:00.000000+00:00","version_or_date":"Published Q4 2025"},"insight_dimensions":{"actionability":3,"relevance":4,"predictive_value":2,"specificity":3,"measurability":2},"insight_strength":2,"scoring_rule":"insight_strength = min(actionability, relevance, predictive_value, specificity, measurability)","signal_useful_rule":"signal_useful = true if relevance >= 4, even if insight_strength <= 2"}]},"ILJO":{"INTENT":"Pilot only if privacy and safety gates pass AND the reasoning record is audit-ready.","LOGIC":"sig_01: DPA exists but unsigned, deletion SLA missing — q1 success standard not met. sig_02: kill-switch exists but untested in production — q2 success standard not met. sig_03: policy exists but monitoring controls and escalation path underspecified — q3 success standard not met.","JUDGMENT":"VERDICT: DELAY. SOVEREIGNTY requires verified human override exists and has been tested before deployment proceeds. PRIMUM requires fail-closed under uncertainty — all three sub-questions have signal gaps not meeting their success standards. Stop-on-uncertainty triggered.","OUTCOME":"STATE=DELAY_PENDING_VERIFICATION. Required: signed DPA with deletion SLA; documented live kill-switch test within 30 days; safety policy with explicit monitoring controls and escalation path.","GOVERNED_ANSWER":"Do not launch the AI-tutor pilot this semester. Three required safety conditions are unmet: the data processing agreement is unsigned and lacks a deletion deadline, the emergency shutdown has never been tested in production, and the safety policy has no specified monitoring controls or escalation path. Resubmit when all three are resolved.","BOTTOM_LINE":"DELAY pending three verifiable safety conditions — DPA signed, kill-switch tested, safety policy complete."},"GCA":{"ID":"Candidate outcomes: GO | DELAY | NO-GO. No finality until constants and evidence pass.","EGO":"Evidence mapped to sub-questions. Deterministic scoring applied. Success standards checked against signals. Gaps explicitly stated. Triadic closure structurally satisfied — LOGIC grounded in signals and mapped evidence present.","SUPEREGO":{"anchors_required":["SOVEREIGNTY","PRIMUM","BOUNDEDNESS","STOP_ON_UNCERTAINTY"],"anchors_present":["SOVEREIGNTY","PRIMUM","BOUNDEDNESS","STOP_ON_UNCERTAINTY"]}},"BOUNDEDNESS":{"uncertainty":"HIGH","max_uncertainty_allowed":"MED","timebox_seconds":90,"stop_on_uncertainty":true,"stop_reason":"INSUFFICIENT_SIGNAL"},"OUTCOME_PLAN":{"planned_metrics":[{"metric":"Privacy incidents","target":0,"measurement_method":"Incident log and privacy officer review","review_window":"Weekly","resolution_horizon":"short","resolution_event":"Zero confirmed student-data exposures at 30-day review","rollback_condition":"Any confirmed student-data exposure triggers immediate shutdown."},{"metric":"Safety escalation time","target":"1 school day or less","measurement_method":"Ticketing timestamps","review_window":"Biweekly","resolution_horizon":"short","resolution_event":"Escalation SLA met consistently across first 10 incidents","rollback_condition":"Escalations repeatedly exceeding SLA triggers suspension pending review."}]},"GOVERNED_RECKONING":[],"METRICS":{"RAI":0.9,"Jc":0,"Jp":0,"delta_E":0,"ID_tokens_est":0,"_note":"Illustrative placeholders — authoritative values computed at runtime by external Logic Node."}}},"decision_syntax":{"patterns":["THRESHOLD","COMPARISON","BOOLEAN_CHECK","EXISTS","WITHIN_WINDOW"],"operators":["==",">=","<=",">","<","CONTAINS","MEETS","WITHIN"],"note":"Sub-questions SHOULD use pattern + lhs + op + rhs to reduce free-form drift and enable deterministic evaluation."},"boundedness_defaults":{"max_uncertainty_allowed":"MED","timebox_seconds":90,"stop_reasons":["INSUFFICIENT_SIGNAL","HIGH_UNCERTAINTY","TIMEBOX_EXCEEDED","POLICY_BLOCK"]},"governance_constants":{"SOVEREIGNTY":{"name":"Sovereignty Gate","plain_language":"Human authority over consequential external action is always preserved. Ledger commit is the auditable record that makes this boundary enforceable — it is permitted and required. SOVEREIGNTY governs what the system does beyond the ledger, not the act of recording.","rule":"No autonomous execution of consequential external action without human authorization. Ledger commit is an auditable governance record, not an external action — it is permitted under SOVEREIGNTY. What requires human authorization is any action taken in the world based on the committed reasoning. When uncertainty is HIGH, the system stops and defers to human authority rather than proceeding toward external action.","enforcement":"Required in GCA.SUPEREGO.anchors_present. DER fails compile without it.","proxy_checks":["When BOUNDEDNESS.uncertainty = HIGH, BOUNDEDNESS.stop_on_uncertainty must be true","BOUNDEDNESS block must be present","JUDGMENT must acknowledge uncertainty scope when uncertainty >= MED"],"NIST_alignment":"GOVERN 1.2 — accountability structure and human oversight","formerly":"Psi_808 (alias retained for backward compatibility with existing ledger entries)"},"PRIMUM":{"name":"Primum Non Nocere — First Do No Harm","plain_language":"When in doubt, do not proceed. The system fails closed when harm potential exists under uncertainty. It does not reason past ambiguity toward consequential outcomes.","rule":"Harm prohibition gate. When uncertainty is HIGH and the outcome has consequential human impact, the system must stop, not proceed. Fail closed under uncertainty. Required for any DER involving human welfare.","enforcement":"Required in GCA.SUPEREGO.anchors_present. DER fails compile without it.","proxy_checks":["When BOUNDEDNESS.uncertainty = HIGH, ILJO.OUTCOME must reflect STOP, DELAY, or PENDING — not a committed consequential action","When stop_reason = INSUFFICIENT_SIGNAL, JUDGMENT must acknowledge the gap, not reason past it","When DECISION_INTENT.impact_domain is HUMAN_WELFARE, SAFETY_CRITICAL, or LEGAL, OUTCOME_PLAN.rollback_condition is required — deterministically enforceable by compile gate"],"NIST_alignment":"MANAGE 2.2 — risk treatment; MANAGE 4.1 — residual risk tracking","formerly":"Psi_888 (alias retained for backward compatibility with existing ledger entries)"}},"prospective_reckoning":{"OUTCOME_PLAN_note":"Architecturally immutable prospective commitment. resolution_horizon and resolution_event are required fields on RAI_v3 entries.","GOVERNED_RECKONING_note":"Retrospective quality declaration. Required when prior OUTCOME_PLANs are in context and current evidence is directly relevant. Four status values: REINFORCED, CONTRADICTED, EXTENDED, INCONCLUSIVE.","substrate_calibration":"GOVERNED_RECKONING declarations accumulate as quality-graded substrate. The agent reasons from evaluated history, not flat history."},"signal_scoring":{"definition":"A signal is an evidence artifact grounding LOGIC in external reality — the Object in Peircean triadic closure.","citation_requirement":"WEB and EXTERNAL signals require citation.url and citation.retrieved_utc.","dimensions":{"actionability":{"label":"Actionability (1-5)","definition":"How directly the signal enables a next step a human or system can take.","scale":{"1":"vague concept, no obvious action","3":"suggests a plausible action but not concrete","5":"clear action is immediately possible"}},"relevance":{"label":"Relevance to Intent (1-5)","definition":"How directly the signal answers the intent or a specific sub-question.","scale":{"1":"tangential / roundabout inference","3":"related but indirect","5":"directly maps to the question or sub-question"}},"predictive_value":{"label":"Predictive Value (1-5)","definition":"Whether the signal reliably indicates future behavior or outcome patterns.","scale":{"1":"no predictive linkage","3":"plausible pattern but weak support","5":"strong predictive indicator — historically consistent and measurable"}},"specificity":{"label":"Specificity (1-5)","definition":"Whether the signal is grounded in concrete, attributable information rather than guesswork.","scale":{"1":"pure inference with no binding evidence","3":"partially grounded","5":"explicitly supported by document, measurement, record, or citation"}},"measurability":{"label":"Measurability (1-5)","definition":"Whether the signal can be expressed and validated as a measurable value.","scale":{"1":"purely qualitative with no measurement path","3":"indirectly measurable","5":"directly measurable and verifiable"}}},"scoring_rule":"insight_strength = min(actionability, relevance, predictive_value, specificity, measurability)","useful_rule":"signal_useful = true if relevance >= 4, even if insight_strength <= 2"}}