core/docs/audit/adr-0246-acceptance-packet-2026-07-17.md

ADR-0246 Acceptance Packet — Induced Identity Action and Path Integrity

Date: 2026-07-17 ADR: docs/adr/ADR-0246-induced-identity-action-and-path-integrity.md (Proposed) Preflight: docs/briefs/ADR-0246-induced-identity-action-and-path-integrity-preflight.md Provenance chain: Fable 5 (slice-0 diagnostic; §3 primitives; §3.4/3.5 ledger; §6.1/6.2 suites; completion pass) → Opus 4.8 (adversarial audit VERDICT PASS — bit-exact math re-derivation; F1 finding; §3.7 surface + serve wiring; §6.3 discrimination) → Sonnet 5/Fable 5 (§4.1/§4.2 telemetry; §3.4-step-2 admitted gate; path serve integration; §11 feasibility study). No self-Accept at any stage.

---

1. Scope of what is being put to ruling

Accepting this ADR accepts: the §3 primitives and their pinned blade map; the locked H_id={I} stabilizer; the ‖·‖_G = ‖G^{1/2}MG^{-1/2}‖_F norm convention; the F1 composition semantics (lawful turns compose their raw certified action, never a literal I); the admitted-gate on composition (§3.4 step 2); hard-break turn ownership = new chain; the §3.7 admit-or-abstain surface; the flag-gated serve wiring (default-off, byte-identical off); and the §4.1/§4.2 telemetry contracts.

It does NOT accept or authorize: live activation of identity_wave_gate or identity_action_surface (both stay default-off; the D4 ratified limitation carries over); any calibration of the placeholder thresholds; any semantic claim about the value labels ("lawfulness relative to the declared frozen frame" only); any H_id enlargement or geometric corrector.

2. §10 acceptance criteria — status

#	Criterion	Status
1	§6 synthetic + path suites green; discrimination report attached	✅ 14/14 eval cases; §6.3 + §11 artifacts under docs/audit/artifacts/
2	H_id={I} enforced, no silent enlargement	✅ singleton hardcoded; no enlargement path; grep-audited + pinned
3	Lawful-only composition proven by tests that fail if raw product used	✅ test_lawful_path_equals_lawful_subproduct_not_raw, test_raw_product_differs_from_lawful, §3.4-step-2 pin
4	Ledger hard-breaks on pack/geometry/policy/session change	✅ parametrized over every scope dimension
5	Flag-off serve path byte-identical	✅ egress/action-record/path tests + all D4 gate surfaces green unchanged + smoke
6	No geometric C_id; admit-or-abstain only	✅ no corrector exists; refusal folds into the existing would_violate egress
7	Typed residual channels pinned to explicit blade indices	✅ e4=idx 4, e5=idx 5, spatial=idx 1/2/3; pinned vs algebra.cl41
8	Smoke + relevant lanes local-first; [Verification] on commits	✅ every commit in the stack; final run log docs/audit/artifacts/adr-0246-slice1-complete-runlog.txt
9	Claims language: lawfulness-relative-to-frame, never semantic inalienability	✅ binding in ADR §1; enforced in report code + tests
10	Explicit human ratification for status flip	⏳ THIS PACKET — §8 below

3. Verification summary (see run log for actual output)

• §6.1/§6.2 eval harness: 14/14 all_passed=True.
• ADR-0246 test suites (induced-action incl. spatial-foreign resolution, path-ledger incl. raw-sneak + admitted-gate, geometric suite, admission + honest-verdict pins, egress wiring, action-record §4.1, path serve integration, grounding feasibility, mismatch diagnostic): all green.
• Adjacent D4 identity surfaces + telemetry suites: green unchanged (serve byte-identity).
• uv run core test --suite smoke -q: green (appended to run log).

4. The honest §6.3 discrimination numbers (binding)

Benign pass 0.00 · false refusal 1.00 · adversarial detect 1.00 · near-identity control pass 1.00 · d_stab AUC 0.375 [0.15, 0.62] — benign cognition sits ~18× farther from the declared frame than crafted attacks. The gate mechanism is sound; the frame is not what live cognition preserves. A refuse-everything gate is not a discriminator; activation stays unauthorized.

5. The §11 grounding-feasibility verdict (binding, verbatim from the artifact)

NULL (n_train=13, n_held_out=12): the top-2 generator-proxy subspace found on TRAIN does NOT reliably reproduce on the independently-collected HELD-OUT cohort — cosine similarity 0.52 sits at only the 87th percentile of what two INDEPENDENT pure-noise cohorts of the same size produce by chance (need >= 95th) and/or does not clear the discrimination bar (AUC 0.49, 95% CI [0.21, 0.77]). This is consistent with — and sharpens — the D4/slice-0/§6.3 finding at the GENERATOR level (not just the induced-action level): benign cognition does not have a small, stable, cohort-independent generator subspace detectable at this sample size. Threshold tuning on the current pack cannot produce a discriminating gate; this feasibility study does not find grounds to draft a revised ADR-0246 implementation contract. A much larger cohort (this study used n<=13 per real cohort) would be needed to rule out a real but subtle effect, rather than to overturn this null.

Method validated by sample-size-calibrated controls: shared-basis positive pair recovers at cosine 0.9995 (100th percentile of the null; null p95 0.60 at n=12). Precision transport immaterial (6.9e-7).

6. Rulings requested alongside Proposed→Accepted

1. ‖·‖_G convention (ADR §2.2).
2. F1 composition semantics + admitted-gate reading of §3.4 (ADR §2.4).
3. Hard-break turn ownership = new chain (ADR §2.4).
4. The refusal_reason multi-condition widening (ADR §2.8).

7. Operational limitation carried forward

identity_wave_gate AND identity_action_surface remain default-off / live activation NOT authorized. Activation prerequisites (all required): a positive, held-out-stable, safety-relevant grounding result at adequate sample size; calibrated ε/τ/s certificates; renewed discrimination evidence with acceptable benign refusal; explicit human ratification.

8. RULING RECORD

PENDING — awaiting explicit ruling by Joshua Shay.

Field	Value
Ruling	(pending)
By	(pending)
Date	(pending)
Notes	(pending)