Reviewer surface · model remaker table
Inputs, equations, authority states, outputs, and refusal boundaries.
This page turns the architectural map into a model contract. A serious reviewer can rebuild the public-facing behavior by implementing the inputs, gates, packets, and non-release rules below. Private keys, raw identity streams, deployment secrets, and protected implementation details stay outside the public surface.
Boundary: the interface table is simulation and architecture documentation. It is not deployment certification, medical advice, official warning authority, agricultural instruction, or an emergency-service guarantee.
| Subsystem | Problem handled | Minimum public state vector | Safe public math | Authority states | Allowed output | Default non-release |
|---|---|---|---|---|---|---|
| CivOS | Host OS, cloud, and normal app layers can be unavailable, compromised, stale, or power-limited. | Power state, analog threshold, enclave status, monotonic counter, radio path, energy reserve. | threshold breach → enclave interruptcounter_n = counter_{n-1}+1 | normal, degraded, deep-sleep, constrained, fail-closed | Local execution mode, one-way signal, ledger event, safe-mode status. | Raw personal stream, enclave key material, host-readable protected state. |
| TSARO | Raw data needs a deterministic boundary before any claim, action, or release is allowed. | x_t, g(x), uncertainty, freshness, contradiction, role, policy constraints. | u*=argmin||u|| s.t. g(f(x,u))≤0 | ADMIT, DEGRADE, HOLD, BLOCK, FAIL-CLOSED | Claim ceiling and minimum intervention state. | Unbounded inference, silent escalation, autonomous authority expansion. |
| NICOLE / QREV / Pumpkin | Evidence must be scoped, expiring, auditable, and cryptographically separated from raw capture. | Request, role, scope, lease, TSARO class, event hash, monotonic counter, revocation state. | ISK=HKDF(Kroot||TRNG||nonce)Kseason=HKDF(Kroot||bucket) | grant, deny, expire, revoke, non-release logged | Claim packet, hash, validity window, signed ledger row, forensic bundle if scoped. | Permanent raw recording, silent replay access, keys leaving enclave. |
| SOS | Emergency help may need bounded information without turning the user into a live surveillance target. | Hazard, battery, comms, local context, recipient role, TTL, device state, sensor freshness. | release=min(role, freshness, hazard, TSARO) | local-only, role-scoped, hold, degraded, blocked | Responder-scoped state, session proof, denial or expiration log. | Bystander data, open-ended live access, broad location history. |
| SSI | Athlete and worker safety needs load-bound reasoning without raw biometric custody by institutions. | L(t), R(t), T(t), S(t), recovery, role, environment, fatigue, prior burden. | Risk=f(L-R,T,S)NewEnvelope⊆OldEnvelope | admit, narrow, hold, aggregate-only, no-release | Advisory envelope, aggregate result, bounded burden summary. | Diagnostic claim, automatic disqualification, persistent biometric label. |
| W-X | Regional weather and GPS claims can be stale, spoofed, too coarse, or inconsistent with local physics. | External packet, IMU, barometer, RF/EM state, node drift, TTL, mesh agreement. | |x_gps-x_imu|≤εx|h_gps-h_bar|≤εhD(t)=1 if t−t0<TTL else 0 | accepted, weighted, degraded, quarantined, stale, silent | Bounded environmental fact with freshness and contradiction status. | Official forecast, warning authority, personal movement profile. |
| WX-Ag | Farm conditions need soil-water and crop-state physics, not generic weather graphics or prescriptive advice. | θ10/θ30/θ60, soil temp, conductivity/capacitance, rain, irrigation, wind, solar, humidity, crop stage. | θ10→θ30→θ60ET0=.0023Ra(Tmean+17.8)√(Tmax−Tmin)Dc=Dp+KcET0−R−I | field-bounded, degraded, hold, blocked, stale | Field-state claim, water balance, ET estimate, revocation trigger. | Yield guarantee, pesticide/fertilizer instruction, actuation command. |
| S-V2X | Kinetic telemetry must exchange proximity without broadcasting permanent identity or accepting relay attacks. | Kinetic vector, transport mode, time-of-flight, proximity claim, interrogation anomaly, ephemeral ID. | ToF consistency → accept/rejectanomaly → passive_receive | transmit, passive receive, isolate, reject, log | Identity-free proximity or kinetic claim. | Persistent identifier, rejection beacon under interrogation anomaly. |
| UEI / PSAI | High-risk actions should slow down when the system detects low trust or high stress. | Risk, trust, stabilization, haptic driver, display timing, digitizer rate, user confirmation. | friction = k·Risk/max(Trust,ε) | normal, friction, confirm, abort, log | Latency, haptic resistance, display modulation, confirmation gate. | Autonomous final decision, invisible coercive control. |
| IAL / DCL | Release, denial, override, and expiration need local accountability without a cloud server as source of truth. | State vector, decision logic, previous hash, counter, signature status, custody actor. | entry=H(state||logic||prev_hash||counter) | append, verify, dispute, export, fail-closed | Signed event, chain state, court/reviewer bundle when scoped. | Mutable logs, rollback, unverifiable “trust me” decision history. |
How to rebuild the public surfaceImplement state vectors, gate functions, seeded Monte Carlo paths, NICOLE packets, and ledger hashes. Do not implement private keys, raw capture, or deployment-only integrations.
How to test the boundaryInject stale TTL, sensor contradiction, high WBGT, node drift, invalid role, monotonic counter mismatch, and relay anomaly. A strong implementation should narrow, hold, block, or go silent.
How to read LAKANA language“Local” means sensitive processing starts on the user's device or local node. “Bounded” means only a scoped claim moves. “Fail-closed” means uncertainty reduces authority instead of expanding it.
Canonical packet skeleton
{
"claim_class": "ADMIT | DEGRADE | HOLD | BLOCK",
"scope": "bounded public or role-scoped field",
"physical_basis": ["gate names and values"],
"valid_until": "time window",
"revocation_trigger": "condition that downgrades claim",
"release_class": "LOCAL_ONLY | ROLE_SCOPED | BOUNDED_PUBLIC | BLOCKED",
"seed": "simulation seed",
"hash": "state-vector hash",
"NOT_A": ["diagnosis", "deployment certification", "official warning", "yield guarantee"]
}