Doctrine lives in structure/OPERATING-STRUCTURE.md v1.1; amendments only via Decision Records; the nervous system enforces what prose promises.
| DR | Decision |
|---|---|
| DR-0001 | Profit allocation numbers (OS §4 concretized) |
| DR-0002 | Internal price list (Haier internal-market rule, OS §2.3) |
| DR-0003 | Brand architecture: "CogOps X" endorsed brands |
| DR-0004 | Single-entity doctrine (divisions-first) |
| DR-0005 | Growth enters real-market validation |
| DR-0006 | Helix enters real-market validation |
| DR-0007 | Talent enters real-market validation; Growth↔Talent internal market link |
| DR-0008 | Verde & Terra enter real-market validation; climate-pair internal prices |
| DR-0009 | The Regulatory-Science Clique: complete graph K5 + internal prices |
| DR-0010 | Intelligence live; the star graph (Intelligence ↔ all nine) |
| DR-0011 | The Nervous System (senses, reflexes, pain, consciousness) |
| # | Invariant | Now | How it is proved |
|---|---|---|---|
| I1 | zero holding debt | PASS | no borrowing API exists in capital.py (absence verified by inspect) |
| I2 | cash fortress ≥ floor | PASS | live probe: 6.0 months vs floor 6 |
| I3 | fail-closed gates | PASS | live probe: unapproved Type-1 refused |
| I4 | PR/FAQ before Stage-1 | PASS | code proof: promote() blocks stage-0 exit without an approved PR/FAQ |
| I5 | no synergy counting | PASS | code proof: ladder has no synergy term; business cases stand alone |
| I6 | platform pull-only | PASS | autonomy.center_audit(): no push/rotate/topup primitives exist |
| I7 | standalone P&Ls | PASS | every company carries revenue/spent/platform_charges/contribution; internal trades priced (DR-0002/8/9/10) |
| I8 | kills recorded as wins | PASS | code proof: kill() requires an evidence pack; KILL_WIN ledger kind |
| I9 | deep-tech exclusion stands | PASS | blueprint exclusion table present; amendments only via DR |
| I10 | Swiss guard invariants | PASS | live probe: margin+derivative order refused by guard |
| I11 | as-of dating on artifacts | PASS | cbs.asof_rule + theme/DR/factor tables carry asof; reports version-hashed |
| I12 | no automated sending/signing | PASS | code proof: inbox has no send(); no signing API anywhere |
Type-1 (external/financial/irreversible) actions stage with an evidence pack and wait for a keystroke — pushed to the founder's phone on staging. Type-2 runs free inside envelopes. Nothing self-approves; the inbox has no send() function at all.
Critical signals (broken ledger chain, fortress breach) freeze group spending automatically. Integrity freezes release only via the founder's confirmation phrase. The machine stops; it does not limp.
Every trade edge is a dependency nerve: if a seller degrades, every buyer's evidence chain is flagged automatically. Pairs, clique and star are derived from code registries, not diagrams.
The founder dashboard (localhost-only) renders the body: organ map, vitals, gate queue, signal feed, missions. Public transparency stops at this page by design — the consciousness is private, the facts are public.