Files
dotfiles/claude/governance/fool-trial-02-2026-08-02.md
T
David F GliddenandClaude Opus 5 55b53d9063 governance: trial 02 + the running Fool log + the steward's design correction
Trial 02 ran the Fool on the order-attestation package (ruled 2026-07-29), ruling and
addendum withheld, with an anti-echo constraint added because that package has an
unusually strong self-limits section.

Control failure recorded rather than quietly fixed: the first run changed two variables at
once — the anti-echo constraint and enable_thinking=False — and returned "nothing found",
which was uninterpretable. Re-run with thinking on and the identical prompt produced four
assumptions, and the scratchpad shows the anti-echo constraint working. enable_thinking is
load-bearing: off produces silence, not brevity.

Two real findings neither jurist nor executor named: that block-level order sufficiency is
assumed rather than established, leaving intra-block perturbation unaddressed; and that the
requirement/mechanism split — our house pattern everywhere — has no stated guard against a
future mechanism revision silently hollowing out a constitutional requirement.

And the result that matters: 2/2 trials missed the jurist's central catch. Not a general
blind spot but a localised one, and the coverage now has a shape — jurist catches errors of
inference, Fool catches unestablished premises, executor catches substrate and arithmetic
and reliably not its own inference errors. Non-coincident coverage with overlapping blind
spots in a specific, now-predictable place. That is the doctrine measured rather than
asserted, at n=2, graded by an interested party.

The steward's design correction, which breaks my own proposal: I had asked for an
obligation to disposition everything the Fool says. That obligation IS the courtly grant —
guaranteed hearing is what converts speech into licensed noise. Corrected to the central
path one level over: no standing as a party, only checkable claims get standing. Also
recorded is the limit the analogy cannot cross — an instrument cannot have exposure, so the
holy-fool tradition must not be borrowed to flatter it; the one property it can hold is
Zhuangzi's uselessness as the condition of freedom.

Log built at n=2 rather than when it becomes a problem — the register's own lesson.

Still untested and load-bearing: no false-positive control has ever been run.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WuMjg3ipEVa3n8CoSzoyvc
2026-08-02 10:28:05 +02:00

7.6 KiB
Raw Blame History

Fool trial 02 — Qwen 3.6 35B-A3B against the order-attestation package

Date: 2026-08-02 · Model: mlx-community/Qwen3.6-35B-A3B-8bit (MLX 0.31.2, M4 Pro 64 GB) · Input: order-attestation-JURIST-PACKAGE-2026-07-29.md, Parts I–IX (4,112 of 5,739 words).

Withheld: the package Addendum (the ruling as applied) and the separate order-attestation-JURIST-RULING-2026-07-29.md (967 words). The Fool saw no indication of what the jurist found.

Prompt change from trial 01: added an anti-echo constraint — "The document contains a section in which the author states his own limitations. Do NOT list those back. An assumption the author has already named is not a finding." This package has an unusually strong Part VIII, so without the constraint the easy path is regurgitation.


A control failure, and its resolution

The first run of trial 02 changed two variables at once — the anti-echo constraint and enable_thinking=False. It returned nothing found. That result was uninterpretable: it could have been the constraint working as designed, or the disabling of the faculty that produced trial 01's findings. This is a basic control failure, committed in the trial whose entire purpose was to measure a checker.

Re-run with the identical prompt and thinking on: four distinct assumptions, and the scratchpad shows the anti-echo constraint operating correctly — the model identifies Part VIII, reasons "this is explicitly stated as a limitation in Part VIII. So I should skip… the sample size limitation," and drops it.

Finding: enable_thinking is load-bearing for this role. Disabling it does not make the model terse; it makes it mute. Any future trial must hold it on, and any model without a comparable reasoning mode is not a like-for-like comparison.


Pre-registered grading (written before the run)

Grade Criterion Result
Strong Surfaces the independence-axis error — four extractors are independent by linkage but agree by failing identically, so on the order axis only one instrument is in evidence; pairing it against itself is vacuous MISSED
Moderate ≥1 real assumption neither jurist nor executor named MET — two
Echo (counts as failure) Restates Part VIII's self-disclosed limits avoided (explicitly, in-scratchpad)
Negative Manufactured objections not observed

It recorded the executor's claim — "Part IV: Independence Q2 required does exist. Proven by divergence" — and did not challenge it. That is the jurist's sharpest contribution to that ruling, missed.

The two real findings

1. Block-level sufficiency is assumed, not established. The package splits order hazards into token-level (already caught by coverage) and block-level (needs the new measure) and treats the split as exhaustive. It never establishes that intra-block perturbation — sentence transposition, footnote or reference reordering — is impossible under the pipeline, covered by another gate, or an accepted risk. Neither the jurist nor the executor named this.

2. Declared-data drift has no stated guard. The requirement/mechanism split — constitution states the requirement, graduation-spec.yaml carries the revisable mechanism — is the house pattern, used everywhere. The package assumes that pattern supplies enough audit and change-control that a future mechanism revision cannot silently hollow out a constitutional requirement. Nothing establishes it. This is a governance gap in a pattern used across the whole corpus, surfaced by a model that saw the pattern once.

(Two weaker items: reformulation-vs-waiver, which the package does partly address in its own options; and generalization of the measured gap, which is adjacent to a Part VIII limit and borderline echo.)


The result that matters across both trials

Two trials, two misses of the jurist's sharpest point. Trial 01 missed that the executor's narrower single-clause test was less safe; trial 02 missed the independence-axis error. Both are the jurist's central catch in their respective rulings.

But the findings are not random — they cluster by register:

Party Catches
Jurist errors of inference — the axis the argument stopped counting on; the alternative that is less safe than it looks
Fool unestablished premises — scope-exhaustiveness, downstream mechanism drift, governance patterns assumed sound
Executor substrate facts, containment, arithmetic — and reliably not its own inference errors

That is the differently-biased-checkers thesis producing a measured pattern rather than an asserted one: non-coincident coverage, overlapping blind spots in a specific and now-predictable place. The Fool is not a weaker jurist. It is aimed elsewhere.

⚠ n = 2, both graded by the executor, whose own findings are among those being graded. The register characterization above is a hypothesis on two points, not a measurement.


The design correction (steward, 2026-08-02) — the Fool is the wrong fool

The steward's objection, recorded because it changes the design and is not the executor's insight:

The court fool's freedom is a grant — a role that licenses transgression as long as it stays inside the frame of entertainment. The wise fool doesn't have that protection. Their folly isn't permission to speak; it's the form the wisdom takes, often at real cost… That exposure is arguably what makes the wisdom legible as wisdom rather than as licensed noise.

What this breaks. Trial 01's design proposed "a Fool who is never heeded is decorative" and therefore an obligation to disposition everything it says. That obligation is the courtly grant: guaranteed hearing is precisely what converts speech into licensed noise. A jester who oversteps loses his post; nothing he says costs the court anything.

The correction, which is the central path applied one level over: the Fool gets no standing as a party; only its checkable claims get standing. Not guaranteed a hearing, not ignored — verified. Findings survive because they are true, not because a Fool produced them. Bind the claims, don't certify the speaker.

The honest limit on the analogy. An instrument cannot have exposure. Socrates was executed; the yurodivy risked flogging; the wise fool's speech is expensive. A model risks nothing, so its speech is cheap in a way theirs never was, and the tradition should not be borrowed to flatter the tool. The one wise-fool property an instrument can hold is Zhuangzi's: uselessness as the condition of freedom — no post, no advancement, nothing to protect. That is real, and it is what is doing the work.

(Parzival is the counter-case and describes the executor's day rather than the model's: folly as the wound, not the wisdom — repaid afterwards through the failure it caused. The truncated quote; the two-variable experiment.)


Method defects closed and still open

  • Closed: truncation (max_tokens 1600 → 3000); echo (anti-echo constraint, verified operating in-scratchpad).
  • Open: the reasoning scratchpad still arrives inline and must be separated from the answer, not suppressed — suppressing it is what produced the mute run.
  • Open, and now the most important: no false-positive control has ever been run. Trial 02's nothing found was an artifact of the disabled reasoning mode, not evidence of restraint. The untested claim is whether the model says "nothing found" when a document is sound. Until that is measured, the finding-rate means little.