Visible becomes usable
A claim that may be displayed is silently treated as analytical evidence.
OSOIX EXPERIMENTAL POLICY PROTOCOL · VERSION 1
Epistemic
Circuit Breaker
ECB-1RBP-1 says what a machine claim is. ECB-1 decides whether that claim may cross into a stronger decision context.
A missing requirement opens the circuit. Uncertainty is never converted into permission.
THE FAILURE MODE
Interfaces allow evidence to gain authority merely by moving downstream.
Research becomes advisory
A model output leaves a research context without fresh evidence or formal uncertainty.
Advisory becomes safety
A human-facing recommendation acquires safety meaning without observation or authority.
Authority is inferred
High-quality public data is mistaken for permission to command or control.
Three states. Failure is explicit.
CLOSED
The requested context is permitted within the declared RBP and ECB boundaries.
GUARDED
Use is bounded and requires every mandatory disclosure and restriction.
OPEN
Promotion is blocked by a hard boundary, missing evidence or absent authority.
NON-INHERITING CONTEXTS
Permission stops at every boundary.
Each context is evaluated independently. A lower-level allowance can never be carried upward.
PRESENTATION
Show the claim only while its RBP class, temporal basis and limitations remain visible.
RESEARCH
Use valid claims for non-operational analysis; UNKNOWN cannot become positive evidence.
ADVISORY
Require bounded freshness, evidence support and contradiction controls.
SAFETY-CRITICAL
Require observation basis, formal uncertainty, reconciliation and suitable authority.
COMMAND
Remain open until a separately authorised command architecture exists.
FAIL-CLOSED POLICY
Unknown is not approval.
ECB-1 opens the circuit when a required predicate cannot be evaluated. Missing source age, covariance, observation, reconciliation or authority is recorded as a denial reason and next-evidence requirement.
- Invalid capsule integrity
- Stale or unknown source age
- Unsupported projection
- Unreconciled contradiction
- Absent direct observation
- Absent command architecture
RBP-1CLAIM CAPSULE
ECB-1POLICY GATE
CONTEXTBLOCKED OR BOUNDED
Every denial explains what is missing.
{
"protocol": "osoix.ecb.v1",
"context": "advisory",
"circuitState": "OPEN",
"capsuleDigest": "...",
"claims": [{
"claimId": "claim:future-state",
"decision": "DENY",
"reasons": [
"Projected orbital state lacks formal uncertainty."
],
"missingEvidence": [
"Formal covariance or equivalent uncertainty state."
]
}],
"boundaries": {
"safetyApprovalGranted": false,
"commandAuthorityGranted": false,
"commandPath": false
}
}- Input
- Validated RBP-1 capsule
- Context
- Presentation through command
- Decision
- Allow, guarded, deny or not applicable
- Reason
- Deterministic policy explanation
- Next evidence
- What would close the circuit
- Integrity
- SHA-256 decision digest
A policy pass is not authority.
The circuit evaluates declared predicates, not the probability that a claim is true.
Availability and derivability are not converted into reliability percentages.
Even a satisfied predicate still requires external operational validation.
Command rights require a separate authorised architecture and cannot emerge from evidence quality.
FIRST LIVE PROFILE
Claim-promotion control inside OSOIX Mission Control.
The private implementation evaluates every claim in an Orbital Evidence Capsule, shows exactly where the promotion ladder opens, and identifies the evidence required to close it.