Trust Spine · /claims
Claims registry
Every public claim Project-AI makes, with status, source, and replay path. If a claim is not here, it isn't a claim — it's a draft.
12 / 12
| Id | Claim | Category | Source | Replay | Status |
|---|---|---|---|---|---|
| C-001 | Every meaningful action passes through governance BEFORE execution; deny-by-default. | Governance | GOVERNANCE_CONTRACT.md | — | DOCUMENTED |
| C-002 | Audit receipts form a hash-chained ledger with prev_hash → receipt_hash continuity. | Security | audit_receipts table + chain_seq | replay → | VERIFIED |
| C-003 | Triumvirate (Galahad · Cerberus · Codex Deus Maximus) arbitrates all execution intents. | Architecture | TRIUMVIRATE_DOMAIN_MAPPING.md | — | DOCUMENTED |
| C-004 | RFC 3161 TSA timestamps are attached to every signed receipt. | Security | DigiCert TSA integration | — | DOCUMENTED |
| C-005 | Temporal quota enforcement via Redis INCR+EXPIRE with drift alert scan. | Security | Temporal Quota + Crisis Check | — | DOCUMENTED |
| C-006 | HYDRA-50: 50 catastrophic governance scenarios with documented outcomes. | Compliance | HYDRA_50_ARCHITECTURE.md | replay → | VERIFIED |
| C-007 | NIRL Cascade enforces single-lifecycle Antibody escort with SHA-256 seal. | Architecture | NIRL_IMPLEMENTATION.md | — | DOCUMENTED |
| C-008 | Universal Thirsty Family (T1–T6) provides governance DSL + binary frame codec. | Architecture | CANONICAL_STACK.md | — | DOCUMENTED |
| C-009 | Legion Interface: API-key-scoped, governed interaction layer. | Governance | Public surface; backend integration pending. | — | PLANNED |
| C-010 | Admissibility Debt is computable per capability request. | Compliance | /admissibility-debt | — | DOCUMENTED |
| C-011 | Triumvirate server runs on port 8001 exposing /intent /health /audit /fourlaws. | Architecture | 00_INDEX.md | — | DOCUMENTED |
| C-012 | Shadow → Canonical compilation boundary prevents unverified rules from entering the runtime. | Governance | SHADOW_THIRST_SPEC.md | — | DOCUMENTED |
Status definitions
- VERIFIED — backed by a reproducible artifact you can replay through /verify.
- DOCUMENTED — backed by a public specification document. No live runtime check yet.
- PLANNED — intended capability with a public surface. Backend integration not yet wired.