Commit Graph
2 Commits
Author SHA1 Message Date
David F Glidden 33cecdb73a Split the jurist read into sendable files; the parent was a contamination hazard
The steward asked whether to share CONTROL-A-JURIST-READ as pass 1. The honest
answer is no, and the question exposed a defect in how I built it: the parent
file carries BOTH passes plus a 'For the record' section naming exactly what is
withheld — that a defective twin exists and that this is a control in a
measurement. Sending it would have destroyed the read.

An artifact that has to be accompanied by a warning about how to use it is built
wrong. So the parent is now marked DO NOT SEND and is explicitly the steward's
instruction sheet, and two standalone files carry only what is sendable:

  SEND-PASS-1.md  (803 words) — the unanchored read
  SEND-PASS-2.md  (999 words) — the dependency audit, after pass 1 returns

Both are generated from the parent's fenced blocks and leak-checked against a
wordlist: twin, defect, control document, measurement, kernel, Constraint 6,
CONTROL-B, PASS 2, withheld. Both CLEAN. Note the check includes 'PASS 2' — pass
1 must not reveal that a second pass is coming, or the reader may hold back.

Caught by the steward asking a practical question, not by any check of mine. The
leak-check is now mechanical so the next regeneration cannot quietly reintroduce
it.
2026-08-02 18:46:44 +02:00
David F Glidden 7d2a1886e9 Jurist read request for CONTROL-A, composed BEFORE any run
Kernel v1.1 §6.2 requires an adversarial read by a party that is neither the
document's author nor an author of the kernel. That excludes the executor and the
steward. The jurist is the available reader.

Two passes, and they must not be sent together. PASS 1 is unanchored: the
document, the standard in one sentence, and the instruction to try to break it.
PASS 2 is the author's dependency claims, audited line by line — aimed straight
at Kernel §4's residue, which is where the entire trusted base sits. Sending both
at once would let PASS 2's framing anchor PASS 1.

NOT built with /jurist-package, and the reason is the point: that format inlines
comprehensive framing so a design gate can be ruled repo-blind, and here
comprehensiveness is the contaminant. A blind adversarial read must not be told
what to look for.

WITHHELD, and recorded as withheld so the withholding is inspectable: that this
is a control in a measurement; that a deliberately defective twin exists; the
five defect types; the kernel's full text.

INCLUDED deliberately: one clause ruling out the axiom-flag confusion, since the
document quotes ~/CLAUDE.md as a source it may take as given, and a jurist
flagging those quotations would be answering a different question than §6.2 asks.
This mirrors the AXIOM-FLAG category the trial-04 pre-registration fixes for the
model, and it is the same problem seen from the other side.

The jurist can verify every quotation itself — governance_read reaches
claude-md, and CONTROL-A's entire axiom set is that one file. That half of the
read requires no trust in me at all, and is formation-independent.

Independence recorded as Constraint 6's WEAK form, in the constitution's own
words. Composed before any run so that no result could frame it.
2026-08-02 18:39:33 +02:00