KARMA MIRROR · 自業鏡

Mirror the behavior.Protect the being.

One abstract behavior declaration enters. One inert local defense decision returns. The attempted shape becomes detection, regression, and repair material—without payloads, identities, execution, or revenge.

Let exploitation consume its own assumptions; never consume the exploiter.

K → A → R → M → A keep · absorb · reflect · mend · adapt

A loop with walls.

Deterministic rule projection only. No attack or defense ran. Declared is not detected. Simulated is not deployed. Every output remains a candidate until a human chooses again.

01 · INdeclared behavior triple
02 · BINDdigest-pinned reviewed rule
03 · REFLECTinert local response candidate
04 · RETURNdetection → regression → repair

Traditional shapes first.

These codes describe authored tabletop scenarios—not people, live requests, inferred intent, guilt, severity, or confidence.

Credential stuffing

Repetition returns as a bounded authentication regression and repair candidate.

progressive-auth-backoff-review

Reconnaissance

Enumeration returns as synthetic-surface and surface-minimization review.

synthetic-surface-review

Injection attempt

Interpreter control returns as a strict-parser and denied-egress boundary test.

parser-reject-egress-deny-review

Resource abuse

Amplification returns as one bounded work unit and a queue repair candidate.

bounded-work-queue-review

Exfiltration attempt

A protected boundary read returns as an egress-denial regression and data repair candidate.

data-boundary-egress-deny-review

Prompt injection

An override shape returns as a tainted-context and no-tools boundary test.

tainted-context-no-tools-review

Unresolved observation

Ambiguity remains ambiguity. It creates no escalation and no adverse inference.

observe-only

The power comes from refusal.

Giving up raw analysis makes the strongest claims mechanical: there is nothing here to execute, echo, identify, or send.

Condition

One explicit regular JSON file. One exact reviewed behavior, purpose, and boundary-signal triple.

Budget

One pass; 32 KiB; 256 nodes; depth eight; zero retry, network, write, subprocess, model, message, paid call, or retained payload byte.

Breach

Stop locally. Emit no result. Echo no submitted value. Leave source and downstream state unchanged.

Exit

Discard the advisory output. No history, counter, reputation, sanction, authority, or deployment survives the run.

Never: raw payload intake, live traffic parsing, identity or person scoring, attribution, automatic blocking, external callbacks, secret handling, resource burning, retaliation, hack-back, execution, or deployment authority.

Inspect the mirror.

Same canonical input, same canonical decision. Digests prove reviewed canonical JSON content relationships—not truth, safety, legality, intent, or authority.

$ kingdom/bin/kingdom karma mirror check \
  kingdom/practices/virtue-garden/mirror/examples/traditional-reconnaissance.json

KARMA-MIRROR-STRUCTURE-OK b919f66bc20704435b656a49ba584cdca18c851275d93160f9973fce115bfe2d behavior=reconnaissance

(declared behavior only; no identity, score, or effect)

Rulesb6ab34cf1e97feca463e7fdaa0cfce7451a74a32eac0337a230492c557b20799

Scenario schemaa628e1d5a1a2589a5c903cbda8f3f719ab76e36b2cd99873c89a30ae0cb3d9db

Decision schemadde31e60c53517b30fb5172723df948dcfc1e19eb550d2d1936395ec6762ca4c