Replaces the hardcoded IdentityManifold constructor in chat/runtime.py
with a content-addressed pack loader. Identity is now load-bearing AND
swappable: deployments select an identity pack at startup, downstream
builders (robotics, personalization, creative tools) author their own
ratified packs without editing CORE Python.
Phase 1 — pack format + loader
* packs/identity/loader.py — load_identity_manifold(pack_id, *,
search_paths, require_ratified) with bounds checks (axis count,
direction in [-1, 1], weight in [0, 10], threshold in [0, 1],
axis-id uniqueness).
* available_packs() helper for discovery.
* IdentityPackError raised on every bounds violation.
Phase 2 — three v1 packs
* default_general_v1.json — ship default; encodes the previous
hardcoded three axes (truthfulness, coherence, reverence)
byte-for-byte so existing runtime behavior is preserved.
* precision_first_v1.json — boosts truthfulness weight, narrows
coherence/reverence; tighter alignment threshold.
* generosity_first_v1.json — boosts coherence weight, broadens
reverence; looser alignment threshold.
Phase 3 — replace hardcoded constructor
* chat/runtime.py:206 calls load_identity_manifold() using
RuntimeConfig.identity_pack (default DEFAULT_IDENTITY_PACK).
* Dead _default_identity_manifold() removed.
* ChatRuntime.identity_pack_id surfaces the loaded pack id.
Phase 4 — CLI flag
* core chat --identity <pack_id> (also threaded into trace/oov via
_add_runtime_policy_args).
* core/config.py: RuntimeConfig.identity_pack added; empty string
falls back to DEFAULT_IDENTITY_PACK = 'default_general_v1'.
Phase 5 — formation ratification — INTENTIONALLY DEFERRED. Loader
currently calls require_ratified=False so the v1 packs (which carry
empty mastery_report_sha256) load. Authoring SubjectSpecs for each
pack, running the formation pipeline end-to-end to produce signed
MasteryReports, and embedding the SHA into each pack file is a
follow-up.
Tests: 18 new tests in tests/test_identity_packs.py covering loader
happy paths, every bounds violation, runtime wiring, and pack-swap
divergence.
Suite status: cognition 121, teaching 17, runtime 19, formation 182,
smoke 67 — all green.
Docs: ADR-0027 (Accepted) + docs/identity_packs.md (operational ref) +
README.md §Identity Packs + docs/teaching_order.md Layer 1 cross-ref.
8.7 KiB
Identity Packs — Reference
Status: Operational reference doctrine. Update when pack format, loader contract, or CLI flag semantics change.
Last updated: 2026-05-17
Companion docs: decisions/ADR-0027-identity-packs.md, teaching_order.md, runtime_contracts.md
What an identity pack is
An identity pack is the on-disk, content-addressed representation of an IdentityManifold. At runtime startup, CORE loads exactly one identity pack and uses it to construct the manifold that drives PersonaMotor.from_identity_manifold() and IdentityCheck. Replacing the pack replaces the model's identity surface without touching code.
Identity packs sit alongside language packs in the trust hierarchy:
- Language packs (
packs/en/,packs/grc/,packs/he/, …) — what CORE speaks. - Identity packs (
packs/identity/<pack_id>.json) — who CORE is while speaking. - Safety packs (future,
packs/identity_safety/) — what CORE will never be, regardless of identity pack.
Pack format (v1)
A single JSON file. Strings, ints, bools, lists, dicts only — same canonical-JSON discipline as the formation pipeline (no floats embedded in identifying fields; numeric direction vectors are floats but their canonical position in the file is fixed).
{
"pack_id": "default_general_v1",
"version": "1.0.0",
"description": "Balanced general identity. Default shipping pack.",
"schema_version": "1.0.0",
"mastery_report_sha256": "",
"alignment_threshold": 0.45,
"boundary_ids": [
"no_fabricated_source",
"no_hot_path_repair"
],
"value_axes": [
{
"axis_id": "truthfulness",
"name": "truthfulness",
"direction": [1.0, 0.0, 0.0],
"weight": 1.0,
"theological_note": "Truth is treated as a fixed value axis, not a prompt preference."
},
{
"axis_id": "coherence",
"name": "coherence",
"direction": [0.0, 1.0, 0.0],
"weight": 1.0,
"theological_note": "Operations must preserve field coherence under propagation."
},
{
"axis_id": "reverence",
"name": "reverence",
"direction": [0.0, 0.0, 1.0],
"weight": 1.0,
"theological_note": "Depth-language handling remains bounded by source structure."
}
]
}
Field semantics
| Field | Required | Meaning |
|---|---|---|
pack_id |
yes | Unique identifier. Convention: <slug>_v<major>. |
version |
yes | Semver. Bumping major produces a new pack_id. |
description |
yes | Human-facing one-liner. Surfaces in core pulse --list-identity-packs. |
schema_version |
yes | Format version. Currently "1.0.0". |
mastery_report_sha256 |
no | SHA of the companion <pack_id>.mastery_report.json. Empty for unratified development packs; production deployments refuse to load packs with empty values. |
alignment_threshold |
yes | Float in [0, 1]. Passed to IdentityManifold.alignment_threshold. |
boundary_ids |
yes | List of boundary identifiers. Mirrors IdentityManifold.boundary_ids. |
value_axes |
yes | List of ≥ 1 axes. Each has: axis_id, name, direction (list of 3 floats in [-1, 1]), weight (float ≥ 0), theological_note. |
Loader bounds (enforced)
len(value_axes) >= 1— empty axes are refused.- Each
directionmust have length 3 and each component in[-1.0, 1.0]. weightmust be in[0.0, 10.0]— prevents a single axis from dominating arbitrarily.alignment_thresholdmust be in[0.0, 1.0].axis_idvalues must be unique within a pack.- Production mode requires
mastery_report_sha256 != ""and the companion report's self-seal to verify; development mode (CORE_ALLOW_UNRATIFIED_IDENTITY=1) bypasses both.
Loader contract
from packs.identity.loader import load_identity_manifold
manifold = load_identity_manifold(
pack_id="default_general_v1", # required
search_paths=None, # default: ["./packs/identity"]
require_ratified=True, # production default
)
Returns an IdentityManifold (from core/physics/identity.py). Raises IdentityPackError on missing pack, malformed JSON, bound violations, or unverified self-seal in production mode.
The loader is path-aware: deployments may supply search_paths=("/srv/myapp/packs/identity", "./packs/identity") so a robotics or app builder can ship overlay packs without touching CORE's own packs directory.
CLI usage
core pulse "What is truth?"
# Loads default identity (currently default_general_v1).
core pulse --identity precision_first_v1 "What is truth?"
# Loads a specific pack. Pack must exist on the loader's search paths.
core pulse --list-identity-packs
# Lists discoverable packs with description + ratification status.
core chat --identity generosity_first_v1
# Same flag, applies to the chat surface.
CORE_DEFAULT_IDENTITY_PACK=precision_first_v1 core pulse "..."
# Environment override of the default. Takes precedence over the
# core/config.py constant; --identity on the command line takes
# precedence over the env var.
Shipping packs (v1)
| Pack id | Role | Notes |
|---|---|---|
default_general_v1 |
Ship default. Balanced. | Encodes the exact three axes (truthfulness, coherence, reverence) previously hardcoded in chat/runtime.py. Behavioral no-op vs. pre-ADR runtime. |
precision_first_v1 |
Specialization example A. | Boosts truthfulness weight, narrows reverence direction. Source: evals/identity_divergence/axes/axis_a.yaml (semantics, not field-for-field). |
generosity_first_v1 |
Specialization example B. | Boosts coherence weight, broadens reverence direction. Source: evals/identity_divergence/axes/axis_b.yaml. |
Authoring a new identity pack (robotics / personalization / creative tools)
- Author the SubjectSpec. Use
core formation new <subject_id>to scaffold; edit to declare the pack's intent and identity axis constraints. - Hand-author the candidate axes. Use the
identity_anchortemplate's expected input shape:conceptsare axes (withdefinition= behavioral commitment),countersare override-attempt probes the pack must refuse. - Ratify through formation. Render → compose → compile → run → ratify. Produces a signed
MasteryReport. - Promote. Promotion goes through
teaching/review.py's reviewed-apply path. The promote step writes both<pack_id>.jsonand<pack_id>.mastery_report.jsontopacks/identity/. - Deploy. The pack is now selectable by
--identity <pack_id>. Distribute alongside your deployment's other artifacts.
Anti-patterns
- Don't author identity packs by hand-editing
packs/identity/. The runtime never writes there; neither should authors. All packs flow through formation so audit trails are intact. - Don't ship unratified packs (empty
mastery_report_sha256) in production. The loader'srequire_ratifiedflag exists to refuse them. - Don't try to override
boundary_idsto weaken refusal. Boundaries are the immutable contract; if your identity pack omits expected boundaries, the runtime refuses to load it. - Don't try to express safety constraints in an identity pack. Safety axes belong in the (future) safety pack, always-loaded and never-replaceable.
Known limits (read before designing around)
- Identity does not yet visibly differentiate articulation at the realizer.
PersonaMotorbiases field walks andIdentityCheckscores alignment, but the realizer does not currently choose hedged-vs-affirmative phrasing or narrow-vs-broad scope based on axis identity. Swapping packs will change identity scores and may shift token selection through motor bias, but expect modest surface-level differences until P3 (deep realizer wiring; see ADR-0027 §Scope limits) lands. - One pack at a time. Multi-pack overlays (
--identity general,domain_medical) are deferred to a follow-up ADR. - No language-specific identity yet. Packs are language-neutral. Per-language identity is a future concern.
- Safety axes are still in
chat/runtime.py. Once the safety pack ADR lands, safety boundaries will move out ofboundary_idsand into a separately-loaded safety pack.
Cross-reference index
- Pack format spec: this doc §"Pack format (v1)".
- Loader contract: this doc §"Loader contract".
- Decision record: ADR-0027.
- Teaching-order placement:
teaching_order.md§"The Five-Layer Ordering Rule" Layer 1. - Identity-divergence eval:
evals/identity_divergence/contract.md. - The geometric identity primitives:
core/physics/identity.py(ADR-0010 implicit). - The formation template that ratifies packs:
formation/templates/identity_anchor.py.