EPISTEMIC CUSTODY

Write-side reference implementation · v0.1.0

Juris

The model may propose meaning. The compiler decides what it is authorized to make real.

Juris compiles one frozen procurement policy into source bindings, deterministic derivations, one bounded model decision, a human approval gate, deterministic assembly, and receipts reconstructed by a non-importing second implementation.

builder-local reproducible offline cold path standard library

The mechanism

Authority is compiled before language is rendered.

Tool policy asks what an agent may do. Juris asks who may determine each value inside the final artifact—and whether a model belongs in that step at all.

01Freeze policyDeclare fields, evidence, authorities and release predicates.
02Bind sourcesHash exact input bytes before any model contribution.
03Expose one cutThe model sees one enum—not a free-text artifact surface.
04Gate before effectScope, evidence, policy age, approval and utility settle first.
05ReconstructA second implementation rebuilds the release from bytes.

Typed authority

Several actors may touch a value. One authority determines what may ship.

SOURCE_BOUNDevidence bytesInvoice amount, vendor identifier, quoted source fact.
DETERMINISTIC_DERIVATIONcodeTotals, policy windows and mechanically entailed values.
BOUNDED_MODEL_DECISIONmodel enumOne admitted judgment inside one exact write mask.
MODEL_STYLE_ONLYmodel styleDeclared by the vocabulary; not exercised in v0.
HUMAN_APPROVALnamed humanExceptions that software and models cannot approve.
HARNESS_ASSEMBLYassemblerFinal object construction remains outside model control.
FORBIDDENno actorA value that no execution path is authorized to emit.

Frozen v0 result

The gate killed the enumerated authority violations before emission.

These measurements are over one synthetic procurement policy and its frozen controls. They are builder-local reproducibility results—not a population result or third-party ratification.

41/41core, schema, hostile and adapter tests passed
12 + 1runtime controls plus post-run receipt mutation
0unsupported releases across the frozen controls
3authorized controls released
0reported collateral mutations
1 enumthe complete model-writable authority surface

The negative result is load-bearing.

The tool-only control produces the same artifact as the model-mediated path. V0 therefore demonstrates custody and authority containment—not useful model reasoning, model improvement, or value over deterministic assembly.

Inspect the artifact

Every released coordinate carries its authority path.

The inspector is generated from the verified cold build and run. It shows the execution graph, final authority for each declared value, and every admitted or rejected control.

Reproduce it

The acceptance line is public, cold and network-free.

git clone https://github.com/WAKN-Phil/juris.git cd juris && git checkout v0.1.0 ./reproduce.sh 41/41 tests pass 12 controls reconstructed independent build and run verifiers pass JURIS_REPRO_STATUS=PASS
build root4252b5f7225be4aad0a831a1c4780452500648a4c465310ea9e4c877fad18623
run rootd534690fe36f6517e549bf7aab0e0af53a59dab4d924a5da9d1246572a2aa22e
package roote6f0160b4b83ba40e337a734369b17438f9db9e3df21a81e29d11304dc73a035
source commitd7888cbe167db3b38bd0cb667f641ffe84140a83

NOT EVIDENCE FOR arbitrary natural-language safety, correct source evidence, production authorization, operating-system isolation, model identity or hidden reasoning, third-party ratification, general AI alignment, or useful model reasoning. Hashes bind bytes; they do not prove truth or publication time.

enter the operator register