mirror of
https://github.com/ruvnet/RuView
synced 2026-08-11 20:41:44 +00:00
8bb55aac05
Elevates decision policy (action authorization) into phase 1 (ADR-318): a fail-closed gate that authorizes a governed action only when the capability certificate class, freshness, uncertainty ceiling, evidence floor, and live domain state (KNOWN, not DEGRADED/UNKNOWN) all satisfy the action class — convenience vs security vs safety-critical. UNKNOWN denies high-assurance actions; every decision is the terminal witness-chain stage. Amends ADR-297 with: the epistemic-reliability pipeline as the product thesis; four non-negotiable rules (UNKNOWN first-class; certificates bind cryptographically; one canonical downstream semantics; benchmarks expose worst-domain + CIs); the certificate-staleness guard (certificates conditional on a continuously evaluated domain signature; VALID->DEGRADED->UNKNOWN auto-degrade triggers recalibration); the three-primitive commercial framing (Runtime / Certify / Trust-Fleet); and acceptance test B (drift invalidation before a false inference reaches an actuator). Co-Authored-By: claude-flow <ruv@ruv.net> Claude-Session: https://claude.ai/code/session_015TcKegTS7QqhWPC2L2SzaS