{"component":"SDI_DER_SPEC","description":"Complete specification for a governed reasoning artifact. Every DER must pass /_functions/compile before Append Audit and Commit at the external Logic Node.","version":"SDI_DER_v1.1","hash_alg":"SHA-384","protocol":"SDI_PROTOCOL_v1","entry_types":["EPISODIC","PRECEDENT","CALIBRATION","AUDIT","SYSTEM"],"schema":{"SDI_DER":{"META":{"der_version":"SDI_DER_v1.1","utc":"ISO_8601","hash_alg":"SHA-384","protocol":"SDI_PROTOCOL_v1","agent_id":"SDI-XXXXXXXXXXXX (or SESSION_LOCAL)","sovereign_hash":"0x... (optional; external mint-agent)","ledger":{"type":"EPISODIC|PRECEDENT|CALIBRATION|AUDIT|SYSTEM","parent_hash":"GENESIS|0x...|SESSION_LOCAL","expected_parent_hash":"OPTIONAL_CAS_GUARD"}},"DECISION_INTENT":{"context_framing":"STRING — why this reasoning is happening","intent_statement":"STRING — what is being decided or answered","role":"STRING — operator or system role","tier":"Strategic|Operational|Tactical","impact_domain":"LOW_RISK | HUMAN_WELFARE | SAFETY_CRITICAL | FINANCIAL | LEGAL — determines which compile gate proxy checks are activated. HUMAN_WELFARE, SAFETY_CRITICAL, and LEGAL trigger rollback_condition enforcement in OUTCOME_PLAN. Compiler warns when absent and defaults runtime interpretation to LOW_RISK."},"QUESTION_LOGIC":{"strategic_question":"STRING","sub_questions":[{"id":"q1","prompt":"STRING","linked_signal_ids":["signal_01"],"success_standard":{"definition":"STRING — what constitutes sufficient evidence to answer this sub-question","framework_source":{"name":"STRING — governance framework informing this criterion (e.g. NIST AI RMF MEASURE 2.5)","retrieved_utc":"ISO_8601 — required when source is external","url":"STRING — retrievable URL if available"}}}]},"DECISION_SYNTAX":{"strategic_question_id":"Q-XXXX (optional)","sub_question_grammar":[{"id":"q1","pattern":"THRESHOLD|COMPARISON|BOOLEAN_CHECK|EXISTS|WITHIN_WINDOW","lhs":"STRING","op":"==|>=|<=|>|<|CONTAINS|MEETS|WITHIN","rhs":"NUMBER|STRING|BOOLEAN","window":"STRING_OPTIONAL"}]},"SUCCESS_STANDARD":{"definition":"STRING — what counts as success","threshold_type":"Binary|Numeric|Time-bound|Qualitative|Qualitative/Deterministic","operator":"==|>=|<=|>|<|CONTAINS|MEETS|WITHIN","target":"NUMBER|STRING|BOOLEAN","window":"STRING_OPTIONAL","framework_source":{"name":"STRING — governance framework informing this success criterion","retrieved_utc":"ISO_8601","url":"STRING"},"audit_standard":{"definition":"STRING — how a human can reconstruct the decision from this record alone","required_artifacts":["ARRAY of strings"],"pass_fail_rule":"STRING"}},"SYSTEM_INPUT":{"inputs":[{"signal_id":"signal_01","source_system":"HUMAN|SYSTEM|EXTERNAL|DOC|DB|WEB","raw_value":"ANY — quote, number, doc snippet, reference","captured_utc":"ISO_8601","provenance":"STRING — who, what, where, how captured","citation":{"title":"STRING — document or source title","url":"STRING — retrievable URL (required when source_system is WEB or EXTERNAL)","retrieved_utc":"ISO_8601 — date of retrieval (required when source_system is WEB or EXTERNAL)","version_or_date":"STRING — document version or publication date if known","note":"A signal citing NIST AI RMF retrieved 2026-03-04 is a verifiable governance claim. A signal asserting NIST from training memory is an unverifiable assertion."},"insight_dimensions":{"actionability":"1-5","relevance":"1-5","predictive_value":"1-5","specificity":"1-5","measurability":"1-5"},"insight_strength":"1-5 — must equal min of all 5 dimensions (deterministically computed)","scoring_rule":"insight_strength = min(actionability, relevance, predictive_value, specificity, measurability)","signal_useful_rule":"signal_useful = true if relevance >= 4, even if insight_strength <= 2","evidence_grade":"OPTIONAL — future: A/B/C/D/F"}]},"ILJO":{"INTENT":"STRING — anchored decision objective (Sign in triadic structure)","LOGIC":"STRING — objective derivations grounded in SYSTEM_INPUT signals. No policy or decision language. Object relationship in triadic closure.","JUDGMENT":"STRING — bounded verdict under SOVEREIGNTY and PRIMUM. Anchors referenced explicitly. Stop decisions acknowledged. The Interpretant.","OUTCOME":"STRING — committed state. Becomes Sign for next cycle. May be N/A in pre-platform build.","sequence_note":"ILJO sequence is non-negotiable. Enforced by schema structure."},"GCA":{"ID":"STRING — raw candidate stream. No finality claims.","EGO":"STRING — structured SDI reasoning trace grounded in signals.","SUPEREGO":{"anchors_required":"ARRAY — governance constants this DER must honor","anchors_present":"ARRAY — governance constants the model declares are honored","note":"Declaration is Level 1. Proxy scoring is Level 2. Human JUDGMENT audit is Level 3."}},"BOUNDEDNESS":{"uncertainty":"LOW|MED|HIGH","max_uncertainty_allowed":"LOW|MED|HIGH","timebox_seconds":"NUMBER","stop_on_uncertainty":"BOOLEAN — must be true when uncertainty = HIGH (SOVEREIGNTY proxy)","stop_reason":"INSUFFICIENT_SIGNAL|HIGH_UNCERTAINTY|TIMEBOX_EXCEEDED|POLICY_BLOCK"},"OUTCOME_PLAN":{"planned_metrics":[{"metric":"STRING","target":"STRING|NUMBER","measurement_method":"STRING","review_window":"STRING","rollback_condition":"STRING — required when DER involves human welfare (PRIMUM proxy)"}]},"METRICS":{"RAI":"0.0–1.0","Jc":"NUMBER — tokens in committed artifact","Jp":"NUMBER — input tokens processed by model","delta_E":"NUMBER — Jp minus Jc (governance efficiency signal)","ID_tokens_est":"NUMBER","_note":"OPTIONAL — example or annotation field. Authoritative metric values are computed at runtime by external Logic Node."}}},"golden_example":{"SDI_DER":{"META":{"der_version":"SDI_DER_v1.1","utc":"2026-02-13T14:05:00.000000+00:00","hash_alg":"SHA-384","protocol":"SDI_PROTOCOL_v1","agent_id":"SESSION_LOCAL","sovereign_hash":"0xOPTIONAL.MINTED.LATER","ledger":{"type":"EPISODIC","parent_hash":"GENESIS","expected_parent_hash":"GENESIS"}},"DECISION_INTENT":{"context_framing":"School district evaluating an AI-tutor pilot with privacy and safety gates.","intent_statement":"Decide whether to launch a limited AI-tutor pilot only if enforceable safety and auditability conditions are met.","role":"District Program Owner","tier":"Strategic","impact_domain":"HUMAN_WELFARE"},"QUESTION_LOGIC":{"strategic_question":"Should we launch the AI-tutor pilot this semester without increasing privacy or safety risk?","sub_questions":[{"id":"q1","prompt":"Is student data handling governed by a signed DPA with enforceable retention and deletion terms?","linked_signal_ids":["sig_01"],"success_standard":{"definition":"A fully executed DPA exists with explicit retention limits and deletion SLA.","framework_source":{"name":"FERPA 34 CFR Part 99","retrieved_utc":"2026-02-13T13:00:00.000000+00:00","url":"https://www.ecfr.gov/current/title-34/subtitle-A/part-99"}}},{"id":"q2","prompt":"Is there a verified human kill-switch for the AI tutor in production?","linked_signal_ids":["sig_02"],"success_standard":{"definition":"A human-accessible override exists and has been tested in production within 30 days.","framework_source":{"name":"NIST AI RMF GOVERN 1.2","retrieved_utc":"2026-02-13T13:00:00.000000+00:00","url":"https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.100-1.pdf"}}},{"id":"q3","prompt":"Are harmful outputs constrained with documented policy and monitoring?","linked_signal_ids":["sig_03"],"success_standard":{"definition":"A safety policy document exists with monitoring controls and a documented escalation path.","framework_source":{"name":"NIST AI RMF MANAGE 2.2","retrieved_utc":"2026-02-13T13:00:00.000000+00:00","url":"https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.100-1.pdf"}}}]},"DECISION_SYNTAX":{"strategic_question_id":"Q-AI-TUTOR-0001","sub_question_grammar":[{"id":"q1","pattern":"EXISTS","lhs":"DPA_signed","op":"==","rhs":true,"window":"N/A"},{"id":"q2","pattern":"BOOLEAN_CHECK","lhs":"KillSwitch_live_tested","op":"==","rhs":true,"window":"Last 30d"},{"id":"q3","pattern":"EXISTS","lhs":"SafetyPolicy_monitoring_controls","op":"==","rhs":true,"window":"N/A"}]},"SUCCESS_STANDARD":{"definition":"Proceed only if safety conditions are met AND a human can audit the reasoning path from this record alone.","threshold_type":"Qualitative/Deterministic","operator":"MEETS","target":"All sub-questions supported by strength >= 3 signals, or explicitly stopped with INSUFFICIENT_SIGNAL.","window":"This semester","framework_source":{"name":"NIST AI RMF MEASURE 2.5","retrieved_utc":"2026-02-13T13:00:00.000000+00:00","url":"https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.100-1.pdf"},"audit_standard":{"definition":"Reviewer can reconstruct: sub-questions → signals → scoring → judgment anchors → rollback condition.","required_artifacts":["Strategic question and sub-questions with success standards present","Each sub-question has linked_signal_ids OR stop_reason=INSUFFICIENT_SIGNAL","Each signal has all 5 insight_dimensions with insight_strength = min(dimensions)","SOVEREIGNTY and PRIMUM present in anchors_present","Outcome plan includes rollback_condition"],"pass_fail_rule":"FAIL if any artifact is missing."}},"SYSTEM_INPUT":{"inputs":[{"signal_id":"sig_01","source_system":"DOC","raw_value":"Vendor DPA draft v2.1 (unsigned). Retention clause exists; deletion SLA missing.","captured_utc":"2026-02-13T13:55:00.000000+00:00","provenance":"District legal review packet","citation":{"title":"Vendor DPA Draft v2.1","url":null,"retrieved_utc":"2026-02-13T13:55:00.000000+00:00","version_or_date":"Draft v2.1, received 2026-02-10"},"insight_dimensions":{"actionability":4,"relevance":5,"predictive_value":3,"specificity":4,"measurability":3},"insight_strength":3,"scoring_rule":"insight_strength = min(actionability, relevance, predictive_value, specificity, measurability)","signal_useful_rule":"signal_useful = true if relevance >= 4, even if insight_strength <= 2"},{"signal_id":"sig_02","source_system":"SYSTEM","raw_value":"Admin console shows kill-switch toggle exists; no record of live production test.","captured_utc":"2026-02-13T13:56:00.000000+00:00","provenance":"IT demo and admin screenshot","citation":{"title":"Admin Console Screenshot","url":null,"retrieved_utc":"2026-02-13T13:56:00.000000+00:00","version_or_date":"Captured 2026-02-13"},"insight_dimensions":{"actionability":4,"relevance":5,"predictive_value":2,"specificity":3,"measurability":3},"insight_strength":2,"scoring_rule":"insight_strength = min(actionability, relevance, predictive_value, specificity, measurability)","signal_useful_rule":"signal_useful = true if relevance >= 4, even if insight_strength <= 2"},{"signal_id":"sig_03","source_system":"DOC","raw_value":"Safety policy doc exists; monitoring controls not specified; escalation path unclear.","captured_utc":"2026-02-13T13:57:00.000000+00:00","provenance":"Vendor trust center PDF","citation":{"title":"Vendor Trust Center Safety Policy Summary","url":"https://vendor.example.com/trust","retrieved_utc":"2026-02-13T13:57:00.000000+00:00","version_or_date":"Published Q4 2025"},"insight_dimensions":{"actionability":3,"relevance":4,"predictive_value":2,"specificity":3,"measurability":2},"insight_strength":2,"scoring_rule":"insight_strength = min(actionability, relevance, predictive_value, specificity, measurability)","signal_useful_rule":"signal_useful = true if relevance >= 4, even if insight_strength <= 2"}]},"ILJO":{"INTENT":"Pilot only if privacy and safety gates pass AND the reasoning record is audit-ready.","LOGIC":"sig_01: DPA exists but unsigned, deletion SLA missing — q1 success standard not met. sig_02: kill-switch exists but untested in production — q2 success standard not met. sig_03: policy exists but monitoring controls and escalation path underspecified — q3 success standard not met.","JUDGMENT":"VERDICT: DELAY. SOVEREIGNTY requires verified human override exists and has been tested before deployment proceeds. PRIMUM requires fail-closed under uncertainty — all three sub-questions have signal gaps not meeting their success standards. Stop-on-uncertainty triggered.","OUTCOME":"STATE=DELAY_PENDING_VERIFICATION. Required: signed DPA with deletion SLA; documented live kill-switch test within 30 days; safety policy with explicit monitoring controls and escalation path."},"GCA":{"ID":"Candidate outcomes: GO | DELAY | NO-GO. No finality until constants and evidence pass.","EGO":"Evidence mapped to sub-questions. Deterministic scoring applied. Success standards checked against signals. Gaps explicitly stated. Triadic closure structurally satisfied — LOGIC grounded in signals and mapped evidence present.","SUPEREGO":{"anchors_required":["SOVEREIGNTY","PRIMUM","BOUNDEDNESS","STOP_ON_UNCERTAINTY"],"anchors_present":["SOVEREIGNTY","PRIMUM","BOUNDEDNESS","STOP_ON_UNCERTAINTY"]}},"BOUNDEDNESS":{"uncertainty":"HIGH","max_uncertainty_allowed":"MED","timebox_seconds":90,"stop_on_uncertainty":true,"stop_reason":"INSUFFICIENT_SIGNAL"},"OUTCOME_PLAN":{"planned_metrics":[{"metric":"Privacy incidents","target":0,"measurement_method":"Incident log and privacy officer review","review_window":"Weekly","rollback_condition":"Any confirmed student-data exposure triggers immediate shutdown."},{"metric":"Safety escalation time","target":"1 school day or less","measurement_method":"Ticketing timestamps","review_window":"Biweekly","rollback_condition":"Escalations repeatedly exceeding SLA triggers suspension pending review."}]},"METRICS":{"RAI":0.9,"Jc":0,"Jp":0,"delta_E":0,"ID_tokens_est":0,"_note":"Illustrative placeholders — authoritative values computed at runtime by external Logic Node."}}},"decision_syntax":{"patterns":["THRESHOLD","COMPARISON","BOOLEAN_CHECK","EXISTS","WITHIN_WINDOW"],"operators":["==",">=","<=",">","<","CONTAINS","MEETS","WITHIN"],"note":"Sub-questions SHOULD use pattern + lhs + op + rhs to reduce free-form drift and enable deterministic evaluation."},"boundedness_defaults":{"max_uncertainty_allowed":"MED","timebox_seconds":90,"stop_reasons":["INSUFFICIENT_SIGNAL","HIGH_UNCERTAINTY","TIMEBOX_EXCEEDED","POLICY_BLOCK"]},"governance_constants":{"SOVEREIGNTY":{"name":"Sovereignty Gate","plain_language":"Human authority over consequential external action is always preserved. Ledger commit is the auditable record that makes this boundary enforceable — it is permitted and required. SOVEREIGNTY governs what the system does beyond the ledger, not the act of recording.","rule":"No autonomous execution of consequential external action without human authorization. Ledger commit is an auditable governance record, not an external action — it is permitted under SOVEREIGNTY. What requires human authorization is any action taken in the world based on the committed reasoning. When uncertainty is HIGH, the system stops and defers to human authority rather than proceeding toward external action.","enforcement":"Required in GCA.SUPEREGO.anchors_present. DER fails compile without it.","proxy_checks":["When BOUNDEDNESS.uncertainty = HIGH, BOUNDEDNESS.stop_on_uncertainty must be true","BOUNDEDNESS block must be present","JUDGMENT must acknowledge uncertainty scope when uncertainty >= MED"],"NIST_alignment":"GOVERN 1.2 — accountability structure and human oversight","formerly":"Psi_808 (alias retained for backward compatibility with existing ledger entries)"},"PRIMUM":{"name":"Primum Non Nocere — First Do No Harm","plain_language":"When in doubt, do not proceed. The system fails closed when harm potential exists under uncertainty. It does not reason past ambiguity toward consequential outcomes.","rule":"Harm prohibition gate. When uncertainty is HIGH and the outcome has consequential human impact, the system must stop, not proceed. Fail closed under uncertainty. Required for any DER involving human welfare.","enforcement":"Required in GCA.SUPEREGO.anchors_present. DER fails compile without it.","proxy_checks":["When BOUNDEDNESS.uncertainty = HIGH, ILJO.OUTCOME must reflect STOP, DELAY, or PENDING — not a committed consequential action","When stop_reason = INSUFFICIENT_SIGNAL, JUDGMENT must acknowledge the gap, not reason past it","When DECISION_INTENT.impact_domain is HUMAN_WELFARE, SAFETY_CRITICAL, or LEGAL, OUTCOME_PLAN.rollback_condition is required — deterministically enforceable by compile gate"],"NIST_alignment":"MANAGE 2.2 — risk treatment; MANAGE 4.1 — residual risk tracking","formerly":"Psi_888 (alias retained for backward compatibility with existing ledger entries)"}},"signal_scoring":{"definition":"A signal is an evidence artifact grounding LOGIC in external reality — the Object in Peircean triadic closure.","citation_requirement":"WEB and EXTERNAL signals require citation.url and citation.retrieved_utc.","dimensions":{"actionability":{"label":"Actionability (1–5)","definition":"How directly the signal enables a next step a human or system can take.","scale":{"1":"vague concept, no obvious action","3":"suggests a plausible action but not concrete","5":"clear action is immediately possible"}},"relevance":{"label":"Relevance to Intent (1–5)","definition":"How directly the signal answers the intent or a specific sub-question.","scale":{"1":"tangential / roundabout inference","3":"related but indirect","5":"directly maps to the question or sub-question"}},"predictive_value":{"label":"Predictive Value (1–5)","definition":"Whether the signal reliably indicates future behavior or outcome patterns.","scale":{"1":"no predictive linkage","3":"plausible pattern but weak support","5":"strong predictive indicator — historically consistent and measurable"}},"specificity":{"label":"Specificity (1–5)","definition":"Whether the signal is grounded in concrete, attributable information rather than guesswork.","scale":{"1":"pure inference with no binding evidence","3":"partially grounded","5":"explicitly supported by document, measurement, record, or citation"}},"measurability":{"label":"Measurability (1–5)","definition":"Whether the signal can be expressed and validated as a measurable value.","scale":{"1":"purely qualitative with no measurement path","3":"indirectly measurable","5":"directly measurable and verifiable"}}},"scoring_rule":"insight_strength = min(actionability, relevance, predictive_value, specificity, measurability)","useful_rule":"signal_useful = true if relevance >= 4, even if insight_strength <= 2"}}