Expand description
The five-clause admissibility kernel (PSP-9 system 12, Paper III Definition 3.2).
The legacy check_admissibility is a useful scope checker, but it
hardcodes contract_ok and barrier_increment_ok to true and equates a
caller-supplied risk_cost with the debit. This module replaces that
shortcut: contract and barrier clauses come from registered evaluators,
and the barrier allowance and the risk debit are the same number —
BarrierWitness::certified_increment is Definition 3.2’s c_c in both
numeric clauses, so a budget can never be debited for an increment that
was never certified.
No durable effect may occur without a complete witness; an absent
clause is recorded as absent, never as true. Autonomous SrbnCertified
commitment requires all five clauses; ConfinementOnly and
HumanApproved activate only the named authority and deterministic
contract claims and never Theorems 3–5.
Structs§
- Barrier
Witness - Barrier-clause verdict (Paper III Def. 3.2 / Theorem 4).
- Candidate
State Witness - A content-addressed, provider-neutral witness of one candidate state.
- Candidate
Transition - A fully materialized candidate transition
Adm(x, p, x'). - Contract
Witness - Contract-clause verdict from a registered evaluator (
perspt-policyis invoked inside the runtime’s implementation). - Full
Admissibility Witness - The complete Definition 3.2 witness.
Enums§
- Admissibility
Profile - Which claims the completed witness activates.
- Clause
Id - The five clauses of Definition 3.2.
Traits§
- Barrier
Evaluator - Evaluates the barrier clause for a candidate transition.
- Contract
Evaluator - Evaluates the contract clause for a candidate transition.
Functions§
- check_
full_ admissibility - Evaluate all five clauses.
- promote
- Promote an allowed transition: one kernel transaction that decrements the call budget, debits the risk budget with exactly the certified increment, and records the spend (PSP-9 system 12).