core/docs/adr/ADR-0216-motor-verdict-lowering.md
Shay 54e6bfc0d0
docs: reorganize docs landscape
Implements the 4-phase documentation reorganization master plan.

- Consolidation: Merged brief/, handoff/, planning/, and decisions/ into briefs/, handoffs/, plans/, and adr/ respectively (101 ADRs relocated)
- Root Cleanup: Relocated HANDOFF-gpt55-*.md and key top-level docs (runtime_contracts.md, etc.) to canonical folders. Added superseded alerts.
- Indices & Navigation: Created docs/README.md navigation document, docs/sessions/README.md index, docs/adr/README.md index
- Note: Also includes prior commit adding ADR-0200+ corpus hygiene governance (ADR-0225, dependency map, backfilled cross-references)
2026-06-30 16:59:36 -07:00

2.4 KiB

ADR-0216: Motor Verdict Lowering Prerequisite

Status: Proposed Date: 2026-06-06 Domains: sensorium/efferent.py, sensorium/registry.py, future motor packs Depends on: ADR-0198, ADR-0211

Context

ADR-0198 added the ModalityRegistry.decode() efferent path and intentionally left real motor emission fail-closed. The current DefaultEfferentGate checks capability and vector shape only; it does not lower a motor versor into the safety, ethics, and tool-scope verdicts required for real action.

Decision

No physical motor decode is authorized until a dedicated implementation provides a verdict-enforcing gate:

(32,) motor versor
  -> MotorActionIntent
  -> authority + safety + ethics + tool-scope verdicts
  -> admit/refuse before SurfaceDecoder.decode()

MotorActionIntent is a semantic action predicate bundle, not an actuator command. A VerdictEnforcingEfferentGate must expose enforces_action_verdicts=True and fail closed on absent authority, absent verdict coverage, or any refusal.

Non-Goals

  • No actuator driver.
  • No robot interface.
  • No trajectory executor.
  • No sandbox opt-in on a physical path.
  • No ObservationFrame or CRDT write for emitted motor commands.

Required Proof

  • The gate refuses before decoder invocation on missing authority or failed verdicts.
  • Traces include hashes, authority hash, policy hash, and verdict only.
  • No decoded command payload, trajectory, ndarray, or bytes object enters traces.
  • Physical action remains disabled until a later motor decoder ADR and lab safety contract.

Governance Cross-Reference (ADR-0225)

This late-corpus ADR is governed by ADR-0225:

  • Safety boundaries: changes must preserve ADR-0027/0028/0029 identity and safety-pack boundaries; no identity, safety, or policy mutation is implied unless explicitly reviewed.
  • Versor closure: runtime field paths must preserve versor_condition(F) < 1e-6; this ADR does not authorize hidden normalization or hot-path drift repair.
  • Reconstruction-over-storage: evidence must remain reconstructive and content-addressed rather than duplicating opaque state.
  • Replay-equivalence: serving, teaching, promotion, or checkpoint changes require a named deterministic replay / byte-equivalence gate.
  • Mutation standing: any durable corpus, pack, policy, or epistemic-status mutation remains reviewed, proposal-only until accepted, or proof-carrying as applicable.