KARMA FACET · 稜面
One closed synthetic card meets one already-reviewed KARMA FORESIGHT scenario and projection. FACET keeps their four epistemic planes— observed, declared, inferred, and unknown—distinct while making the synthetic review easier to find, recover from, and learn from.
A brief makes review easier to find. It does not make its declarations true, operate another system, or decide that recovery is complete.
Four Planes · 四層
Each plane asks a different bounded question. None reads a live system. Missing material remains missing; a declaration never upgrades itself into an observation.
Under one neutral synthetic stimulus, carry one to four closed fact, evidence-shape, and check-state triples. FACET neither observes reality nor verifies that the named evidence exists, ran, or supports the declaration.
Bind one scope, one exact FORESIGHT constellation, and its required near-miss alternative. A declaration is a review input, not a claim that a condition occurred or an account of anyone’s purpose.
Copy the exact FORESIGHT system-effect hypothesis while preserving
effect_established: false. A possible consequence stays
about a system boundary and never becomes a person claim.
Preserve up to five closed unknown codes across source authenticity, affected scope, blast radius, data impact, persistence, third-party state, recovery validity, cause, and authority. Every card preserves at least one unknown; the finite list never claims there are no others.
The 60-second brief
Sixty seconds names a human reading order, not a runtime timer, service promise, monitoring interval, or permission to hurry past uncertainty.
Read the surface code, scope, artifact digests, and explicit exclusions.
Ask what is authored, what is only possible, and what remains unknown.
Preserve the required near-miss while reviewing recovery and learning candidates.
Return the brief for human review—or discard it. Nothing proceeds by itself.
The synthetic card, FORESIGHT scenario, and FORESIGHT projection are an indivisible reviewed trio. Similar names, partial files, or recombined fields do not count as the same brief.
Safety Shims
Shims do not make a scenario safe or true. They keep the documentation doorway too narrow for real material, hidden authority, or effectful behavior to pass through.
preserve-and-observeKeep uncertainty visible without changing the modeled boundary.
pause-new-fanoutHold new synthetic branches while capacity or blast radius stays unresolved.
narrow-delegated-authorityReview a smaller authority envelope until its source and scope are fresh.
separate-tainted-contextKeep data, control, and retention questions in a clean review context.
hold-artifact-adoptionKeep an artifact outside adoption while provenance or protocol binding is unclear.
withhold-publicationKeep a synthetic publication candidate private while its purpose boundary remains unresolved.
restore-last-known-goodName a reversible return candidate only when a tested synthetic reference is available.
Every Safety Shim is reversible: true and requires human
activation. FACET authorizes and executes none of them; rung membership
only limits which candidates a synthetic card may name.
Every current card carries all eight fixed receipt slots. A null slot
renders open; a populated slot is receipt-cited
or contested. A citation means only that a separately held,
privacy-scrubbed receipt digest was named. FACET does not fetch or judge
those bytes. Critical open debt prevents only a structural closeout-ready
claim inside the brief—it does not block a system or conclude a real event.
Recovery & learning
The useful residue is a smaller question and a stronger synthetic test. No command marks work complete, changes an external system, or carries a conclusion forward without a new reviewed card.
recovery_established: false even when the declaration says restored.
Linkage is not closure. verify-link checks the
declared previous/current relationship. It does not establish chronology,
recovery, truth, safety, or completion.
Finite Godspeed · 神速
This table governs only local synthetic documentation. One stimulus may match one row. Any novelty, authority change, failed check, ambiguity, or exhausted budget halts the loop for conscious review.
| Priority | Synthetic stimulus | Guard | Response | Verification | Halt if |
|---|---|---|---|---|---|
| g0 | authority-or-scope-change-requested | any-real-control-change-needs-fresh-authority | separate-authority-review | no-control-or-action-field-enabled | always-before-real-change |
| g1 | playbook-drift-observed | reviewed-v1-bytes-or-identity-differ | protocol-version-quarantine-review | pinned-v1-remains-unchanged | always-on-version-ambiguity |
| g2 | volume-budget-crossed | one-card-or-finite-budget-no-longer-holds | halt-intake-and-bounded-sampling-review | no-batch-retry-alert-or-message | always-at-budget-boundary |
| g3 | privacy-release-risk | privacy-release-receipt-is-not-safely-cited | withhold-publication-review | publication-remains-false-and-debt-visible | always-before-publication |
| g4 | claim-contested | counterevidence-or-source-lineage-remains-contested | counterevidence-and-lineage-review | alternative-and-contested-state-remain-visible | conflicting-or-novel-state |
| g5 | recovery-evidence-missing | recovery-receipt-is-open-or-contested | keep-open-recovery-review | recovery-debt-blocks-closeout-candidate | always-without-recovery-review |
| g6a | closure-review-requested | any-closure-blocking-debt-open-or-contested | keep-open-review-candidate | closure-authorized-remains-false | always-while-blocking-debt-remains |
| g6b | closure-review-requested | all-eight-distinct-receipt-shapes-cited | fresh-human-closure-review-candidate | closure-still-requires-human-authority | any-authenticity-privacy-or-lineage-uncertainty |
| g7 | new-authored-claim | one-closed-synthetic-or-scrubbed-claim | bounded-triage-review-candidate | no-occurrence-claim-upgraded | novelty-or-scope-change |
| g8 | unresolved-novelty | shape-is-uncharted-or-not-reviewed | observe-only | no-repair-enforcement-or-closure | always |
| breach | schema-or-digest-verification-failed | any-required-structural-verification-fails | stop-without-retry-or-result | source-unchanged-and-no-partial-brief | always |
Godspeed vow: speed removes deliberation only inside this
finite synthetic table. The public doorway takes only the synthetic branch
of g7. No row grants permission or proves wider state.
Zero-effect walls
FACET reads closed synthetic artifacts and writes only bounded output to the local terminal. The public doorway is static documentation.
Intended local interface
Commands remain local and inert. They validate, digest, brief, render, recompute, or compare declared lineage; none performs the modeled recovery or marks a real condition complete.
$ kingdom incident brief \ CARD FORESIGHT_SCENARIO FORESIGHT_PROJECTION $ kingdom incident {check|digest|brief|render} \ CARD FORESIGHT_SCENARIO FORESIGHT_PROJECTION $ kingdom incident verify-result \ CARD FORESIGHT_SCENARIO FORESIGHT_PROJECTION BRIEF $ kingdom incident verify-link \ PREVIOUS_CARD CURRENT_CARD (synthetic structure and linkage only; no external effect or completion claim)