Deontics

Asks What must hold before a claim is made?

What must, may and must not hold before a claim is made. This is the part of a model that stops it asserting more than it can support: the conditions attached to an obligation, and the honesty of saying so when they are not met.

In this model A Metric with no governed source says so rather than inheriting proof from a neighbouring calculation. A permission basis is a stated condition and never a record of an individual's consent.

Represented by

The engineering standards that state this foundation directly, among the works the commitments stand on.

• Data Privacy VocabularyW3C Data Privacy Vocabularies and Controls Community Group
• Shapes Constraint Language (SHACL)W3C

Commitments it asks for — 10

• enforcedDeclare measurement grain before calculation
• enforcedKeep audience eligibility, preference and permission basis distinct
• enforcedMake outcome quality, calculation method and attribution inspectable
• enforcedModel offer as the governed value exchange
• enforcedScope activation and calculation explicitly in time and geography
• enforcedA metric exists because a question needs it
• enforcedA commitment says whether the build proves it
• enforcedKnowledge enters as a term or an assertion, never as a new field
• enforcedA target is a level on a reading, due within a window
• enforcedA composition a reader manifests has an address, is held before it binds, and enters the ground only by proposal

What the build enforces — 11

• registry integritycalculation and projection integrity
  Formula inputs, metric composition, cardinality, and plan projections satisfy their declared contracts.
• registry integritydistinct definitions
  No two rows of different kinds are defined in the same words, and no definition restates a field the row already carries, so a distinction the model commits to is carried where a reader meets it and nothing the model knows is stored in two places at once.
• registry integrityadmission and shape
  Every kind has a valid shape and evidence class, and every row keeps the admission its kind allows: a record names its source, an exemplar names none, and a world record states the public reference it stands on.
• registry integritysemantic distinction
  Vocabulary, constructs, world records, and source-backed records cannot be substituted for one another.
• registry integritytyped relationships
  Every relationship has declared endpoint kinds and a governed cardinality.
• foundation integritygovernance classification
  Every rule declares whether a build check proves it; only an enforced rule names a check, every check is claimed by one, and no commitment or foundation states a count the model does not currently have.
• Every gate is claimed, and every claim resolvesGate coverage
  Every gate a commitment names is a check, a ring or an eval the law catalogs; and every gate the law catalogs is claimed by an enforced commitment, or says itself why nothing here can claim it.
• registry integritylicensed fields
  Every file conforms to the one declared schema before any other law runs: a row carries only the fields the model licenses, and every field has the type and, where the set is closed, the value the schema states, so material arriving from outside cannot introduce structure merely by arriving.
• registry integritytarget coherence
  A target sets a level for one KPI, quantifies one goal that KPI serves, and is due within one window; a campaign that pursues a target is measured by that target's KPI and supports that target's goal, so a target never promises a reading the campaign does not take or an outcome it does not claim.
• eval:enginethe engine agrees with itself
  The binder that runs while the graph is built and the binder that runs in a reader's browser find the same bindings: every pattern bound against the whole model to the same instances and the same rows in every role, the published example among them, and every view bound again from every row it answers from, row for row, and the port of the pattern law beside the browser's engine refuses every way a declared pattern can be broken exactly as the law does, and every question bound again from every row of its root kind finds an answer exactly where the build published one and nothing where it did not.
• ring:6the site ring
  The built site is the whole graph and nothing else: every page indexed, addressed by a label, self-contained and free of any private name; every structured-data identifier a subject the standards export wrote; every page unfurling to its own card, and every sitemap entry naming that card as its image; every journey with its SCXML twin; the sitemaps held to the graph; a graph under a megabyte. And the host held to the ground: the Worker serving the build as its assets and running first for every request; the allowlist and the redirect list it carries cut from the graph, every address the graph once answered to in the list with the status the law gives it and none of them a page; every endpoint served by the files it names; and the beacon sending to the collector's endpoint and nowhere else; every projection the law declares in the build, served by the files that say they serve it, and named in llms.txt; and the Worker reading the host's caching rules and owed headers from the law, writing none of its own; every answer a question carries a page where the walk is non-empty and nowhere else, its structured data naming exactly the rows the walk reached.