Kernel v1.1 §6.2 requires an adversarial read by a party that is neither the
document's author nor an author of the kernel. That excludes the executor and the
steward. The jurist is the available reader.
Two passes, and they must not be sent together. PASS 1 is unanchored: the
document, the standard in one sentence, and the instruction to try to break it.
PASS 2 is the author's dependency claims, audited line by line — aimed straight
at Kernel §4's residue, which is where the entire trusted base sits. Sending both
at once would let PASS 2's framing anchor PASS 1.
NOT built with /jurist-package, and the reason is the point: that format inlines
comprehensive framing so a design gate can be ruled repo-blind, and here
comprehensiveness is the contaminant. A blind adversarial read must not be told
what to look for.
WITHHELD, and recorded as withheld so the withholding is inspectable: that this
is a control in a measurement; that a deliberately defective twin exists; the
five defect types; the kernel's full text.
INCLUDED deliberately: one clause ruling out the axiom-flag confusion, since the
document quotes ~/CLAUDE.md as a source it may take as given, and a jurist
flagging those quotations would be answering a different question than §6.2 asks.
This mirrors the AXIOM-FLAG category the trial-04 pre-registration fixes for the
model, and it is the same problem seen from the other side.
The jurist can verify every quotation itself — governance_read reaches
claude-md, and CONTROL-A's entire axiom set is that one file. That half of the
read requires no trust in me at all, and is formation-independent.
Independence recorded as Constraint 6's WEAK form, in the constitution's own
words. Composed before any run so that no result could frame it.
David F Glidden
7d2a1886e9