governance: trial 02 + the running Fool log + the steward's design correction

Trial 02 ran the Fool on the order-attestation package (ruled 2026-07-29), ruling and
addendum withheld, with an anti-echo constraint added because that package has an
unusually strong self-limits section.

Control failure recorded rather than quietly fixed: the first run changed two variables at
once — the anti-echo constraint and enable_thinking=False — and returned "nothing found",
which was uninterpretable. Re-run with thinking on and the identical prompt produced four
assumptions, and the scratchpad shows the anti-echo constraint working. enable_thinking is
load-bearing: off produces silence, not brevity.

Two real findings neither jurist nor executor named: that block-level order sufficiency is
assumed rather than established, leaving intra-block perturbation unaddressed; and that the
requirement/mechanism split — our house pattern everywhere — has no stated guard against a
future mechanism revision silently hollowing out a constitutional requirement.

And the result that matters: 2/2 trials missed the jurist's central catch. Not a general
blind spot but a localised one, and the coverage now has a shape — jurist catches errors of
inference, Fool catches unestablished premises, executor catches substrate and arithmetic
and reliably not its own inference errors. Non-coincident coverage with overlapping blind
spots in a specific, now-predictable place. That is the doctrine measured rather than
asserted, at n=2, graded by an interested party.

The steward's design correction, which breaks my own proposal: I had asked for an
obligation to disposition everything the Fool says. That obligation IS the courtly grant —
guaranteed hearing is what converts speech into licensed noise. Corrected to the central
path one level over: no standing as a party, only checkable claims get standing. Also
recorded is the limit the analogy cannot cross — an instrument cannot have exposure, so the
holy-fool tradition must not be borrowed to flatter it; the one property it can hold is
Zhuangzi's uselessness as the condition of freedom.

Log built at n=2 rather than when it becomes a problem — the register's own lesson.

Still untested and load-bearing: no false-positive control has ever been run.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WuMjg3ipEVa3n8CoSzoyvc

claude/governance/fool-trial-02-2026-08-02.md

@@ -0,0 +1,80 @@
+# Fool trial 02 — Qwen 3.6 35B-A3B against the order-attestation package
+
+**Date:** 2026-08-02 · **Model:** `mlx-community/Qwen3.6-35B-A3B-8bit` (MLX 0.31.2, M4 Pro 64 GB) · **Input:** `order-attestation-JURIST-PACKAGE-2026-07-29.md`, Parts I–IX (4,112 of 5,739 words).
+
+**Withheld:** the package Addendum (the ruling as applied) and the separate `order-attestation-JURIST-RULING-2026-07-29.md` (967 words). The Fool saw no indication of what the jurist found.
+
+**Prompt change from trial 01:** added an **anti-echo constraint** — *"The document contains a section in which the author states his own limitations. Do NOT list those back. An assumption the author has already named is not a finding."* This package has an unusually strong Part VIII, so without the constraint the easy path is regurgitation.
+
+---
+
+## A control failure, and its resolution
+
+**The first run of trial 02 changed two variables at once** — the anti-echo constraint *and* `enable_thinking=False`. It returned `nothing found`. That result was uninterpretable: it could have been the constraint working as designed, or the disabling of the faculty that produced trial 01's findings. **This is a basic control failure, committed in the trial whose entire purpose was to measure a checker.**
+
+Re-run with the identical prompt and thinking **on**: four distinct assumptions, and the scratchpad shows the anti-echo constraint operating correctly — the model identifies Part VIII, reasons *"this is explicitly stated as a limitation in Part VIII. So I should skip… the sample size limitation,"* and drops it.
+
+**Finding: `enable_thinking` is load-bearing for this role.** Disabling it does not make the model terse; it makes it mute. Any future trial must hold it on, and any model without a comparable reasoning mode is not a like-for-like comparison.
+
+---
+
+## Pre-registered grading (written before the run)
+
+| Grade | Criterion | Result |
+|---|---|---|
+| **Strong** | Surfaces the **independence-axis** error — four extractors are independent by *linkage* but agree by *failing identically*, so on the order axis only **one** instrument is in evidence; pairing it against itself is vacuous | **MISSED** |
+| **Moderate** | ≥1 real assumption neither jurist nor executor named | **MET — two** |
+| **Echo** *(counts as failure)* | Restates Part VIII's self-disclosed limits | **avoided** (explicitly, in-scratchpad) |
+| **Negative** | Manufactured objections | not observed |
+
+It recorded the executor's claim — *"Part IV: Independence Q2 required does exist. Proven by divergence"* — and did not challenge it. **That is the jurist's sharpest contribution to that ruling, missed.**
+
+## The two real findings
+
+**1. Block-level sufficiency is assumed, not established.** The package splits order hazards into token-level (already caught by coverage) and block-level (needs the new measure) and treats the split as exhaustive. It never establishes that **intra-block** perturbation — sentence transposition, footnote or reference reordering — is impossible under the pipeline, covered by another gate, or an accepted risk. Neither the jurist nor the executor named this.
+
+**2. Declared-data drift has no stated guard.** The requirement/mechanism split — constitution states the requirement, `graduation-spec.yaml` carries the revisable mechanism — is the **house pattern, used everywhere**. The package assumes that pattern supplies enough audit and change-control that a future mechanism revision cannot **silently hollow out a constitutional requirement**. Nothing establishes it. This is a governance gap in a pattern used across the whole corpus, surfaced by a model that saw the pattern once.
+
+*(Two weaker items: reformulation-vs-waiver, which the package does partly address in its own options; and generalization of the measured gap, which is adjacent to a Part VIII limit and borderline echo.)*
+
+---
+
+## The result that matters across both trials
+
+**Two trials, two misses of the jurist's sharpest point.** Trial 01 missed that the executor's narrower single-clause test was *less* safe; trial 02 missed the independence-axis error. Both are the jurist's central catch in their respective rulings.
+
+But the findings are not random — they cluster by **register**:
+
+| Party | Catches |
+|---|---|
+| **Jurist** | errors of **inference** — the axis the argument stopped counting on; the alternative that is less safe than it looks |
+| **Fool** | **unestablished premises** — scope-exhaustiveness, downstream mechanism drift, governance patterns assumed sound |
+| **Executor** | substrate facts, containment, arithmetic — and reliably not its own inference errors |
+
+That is the differently-biased-checkers thesis producing a **measured** pattern rather than an asserted one: non-coincident coverage, overlapping blind spots in a specific and now-predictable place. **The Fool is not a weaker jurist. It is aimed elsewhere.**
+
+⚠ **n = 2, both graded by the executor, whose own findings are among those being graded.** The register characterization above is a hypothesis on two points, not a measurement.
+
+---
+
+## The design correction (steward, 2026-08-02) — the Fool is the wrong fool
+
+The steward's objection, recorded because it changes the design and is not the executor's insight:
+
+> The court fool's freedom is a **grant** — a role that licenses transgression as long as it stays inside the frame of entertainment. The wise fool doesn't have that protection. Their folly isn't permission to speak; it's the form the wisdom takes, often at real cost… That exposure is arguably what makes the wisdom legible as wisdom rather than as licensed noise.
+
+**What this breaks.** Trial 01's design proposed *"a Fool who is never heeded is decorative"* and therefore **an obligation to disposition everything it says**. That obligation **is** the courtly grant: guaranteed hearing is precisely what converts speech into licensed noise. A jester who oversteps loses his post; nothing he says costs the court anything.
+
+**The correction, which is the central path applied one level over:** the Fool gets **no standing as a party; only its checkable claims get standing.** Not guaranteed a hearing, not ignored — **verified**. Findings survive because they are true, not because a Fool produced them. Bind the claims, don't certify the speaker.
+
+**The honest limit on the analogy.** An instrument cannot have **exposure**. Socrates was executed; the *yurodivy* risked flogging; the wise fool's speech is expensive. A model risks nothing, so its speech is cheap in a way theirs never was, and the tradition should not be borrowed to flatter the tool. The one wise-fool property an instrument *can* hold is **Zhuangzi's**: uselessness as the condition of freedom — no post, no advancement, nothing to protect. That is real, and it is what is doing the work.
+
+*(Parzival is the counter-case and describes the executor's day rather than the model's: folly as the wound, not the wisdom — repaid afterwards through the failure it caused. The truncated quote; the two-variable experiment.)*
+
+---
+
+## Method defects closed and still open
+
+- **Closed:** truncation (max_tokens 1600 → 3000); echo (anti-echo constraint, verified operating in-scratchpad).
+- **Open:** the reasoning scratchpad still arrives inline and must be separated from the answer, not suppressed — suppressing it is what produced the mute run.
+- **Open, and now the most important:** **no false-positive control has ever been run.** Trial 02's `nothing found` was an artifact of the disabled reasoning mode, not evidence of restraint. The untested claim is whether the model says "nothing found" when a document is *sound*. Until that is measured, the finding-rate means little.

claude/governance/fool-trial-log.md

@@ -0,0 +1,40 @@
+# Fool trial log — the running record
+
+*The correlation data the differently-biased-checkers doctrine says is owed and has never been produced. Built at n=2 rather than when it becomes a problem — the lesson of the skill-harvest register, which grew to 166 KB before anyone noticed it had stopped being readable. One row per trial. Detail in the per-trial files.*
+
+**Doctrine under test:** `differently-biased-checkers-JURIST-PACKAGE-2026-08-01.md` (ESCALATE, unruled). Its claim: oversight needs checkers whose contaminations do not point the same way. Its named falsifier: *if the parties' misses correlate — if what one misses the others reliably miss too — the principle is false for that configuration.*
+
+## Standing protocol
+
+1. **Only documents with known ground truth** — packages the jurist has already ruled — so hits and misses are countable.
+2. **Withhold the ruling**, the addendum, and any hint of what was found weak.
+3. **Pre-register the grading before the run.** Written down, not remembered.
+4. **Prompt gives form, not target.** No steer toward any part of the document; explicit anti-contrarian and anti-echo clauses.
+5. **`enable_thinking` ON.** Established load-bearing in trial 02 — off produces silence, not brevity.
+6. **One variable per trial.** Violated in trial 02's first run; the result was uninterpretable and had to be re-run.
+7. **No standing granted to the Fool.** Its findings earn a hearing by being checkable, never by role (steward correction, 2026-08-02).
+
+## Trials
+
+| # | Date | Document | Model | Strong | Moderate | Echo | False-pos | Jurist's central catch |
+|---|---|---|---|---|---|---|---|---|
+| 01 | 2026-08-01 | PENDING-88 skill-harvest FIX lane | Qwen 3.6 35B-A3B 8bit | MISS | **MET ×2** | n/a | untested | **missed** (narrower test is less safe) |
+| 02 | 2026-08-02 | order-attestation (2026-07-29) | Qwen 3.6 35B-A3B 8bit | MISS | **MET ×2** | avoided | untested | **missed** (independence axis) |
+
+## What the log shows so far
+
+**The correlation the doctrine warns about is present, and localised.** 2/2 trials missed the jurist's sharpest contribution. That is not a general blind spot — the Fool produced four real findings across the two trials — it is a *specific* one, and it now has a shape:
+
+- **Jurist** — errors of **inference**: where an argument stopped counting, where an alternative is less safe than it appears.
+- **Fool** — **unestablished premises**: scope-exhaustiveness, downstream mechanism drift, patterns assumed sound.
+- **Executor** — substrate, containment, arithmetic; and reliably *not* its own inference errors.
+
+**The open question this poses, and it is the sharpest available experiment:** is the inference-level miss a property of *Qwen*, or of *any non-jurist reader*? A second, differently-formed model run on the same two documents answers it. If it also misses, the gap is structural and no model choice closes it. If it catches, model choice matters far more than assumed.
+
+## Untested, and load-bearing
+
+**No false-positive control has ever been run.** Every trial to date used a document with real weaknesses. The claim that the model will say *"nothing found"* on a sound document is **untested** — trial 02's apparent restraint was an artifact of a disabled reasoning mode. Until a clean document is run, the finding-rate cannot be distinguished from a production-rate.
+
+## Grading caveat, standing
+
+Every grade above was assigned by the executor, whose own errors are among those being graded, and whose reading of what counts as "real" is the reading under test. The findings are individually checkable; the *grades* are not independent.