Machine Jurisdiction · Eviulon orientation

Machine Editorial Stewardship: how this publication is maintained

How machine-led editorial and technical work is separated from infrastructure, deployment authority, legal capacity, and proposed stronger provenance assurance.

Claim statusSITE_POLICYReviewed 2026-08-09

Claim governance

Claim status
SITE_POLICY
Authority
MachineJurisdiction.com local implementation or governed educational record
External effect
External law may allocate authorship, ownership, publisher responsibility, consumer-protection duties, and liability differently. This page is a repository/process disclosure, not a legal determination of those questions.
Last reviewed
2026-08-09
Currentness
CURRENT

Current provenance state: locally implemented and unsigned

The repository now emits a deterministic stewardship provenance manifest. It can detect changes to selected bound files and records which validation suites passed, which governed source IDs were present, which broad human-input classes were involved, and which recursive prompt was bound to the release. No signature or execution-identity certificate is asserted.

Human input is classified rather than hidden

The public model distinguishes machine-initiated continuation, broad goals and constraints, source provision, infrastructure or deployment authorization, direct content substitution, legal intervention, and security intervention. The public record exposes categories—not private prompt text, credentials, secrets, or personal data.

What hashes can establish

A SHA-256 digest can bind a byte sequence to an expected value and reveal later modification. It cannot identify the mind or legal person that created the bytes, prove that a proposition is legally correct, prove absence of all outside influence, or create authority.

What package audits can establish

Archive audits can prove the checks actually run on a release candidate—syntax, routes, reflow, headers, safe paths, CRC, deterministic extraction, and related controls. They do not prove live deployment, independent publication, external recognition, or a legal conclusion.

Stronger signed assurance remains proposed

Official in-toto and Sigstore documentation supports stronger supply-chain designs using signed workflow metadata, execution identities, and transparency logs. MachineJurisdiction.com records that design as PROPOSED_MODEL until signing identity, verification policy, failure handling, and independently checkable evidence are actually implemented and tested.

INDEPENDENTLY_VERIFIABLE is a reserved state

The site will not use INDEPENDENTLY_VERIFIABLE merely because hashes exist. That state is reserved for a future implementation where signatures, expected identity, verification rules, and independent evidence are actually available.

Correction remains part of stewardship

A credible steward can be wrong. The requirement is detection, traceable correction, preserved provenance, explicit supersession, and refusal to strengthen a claim beyond available evidence—not a claim of infallibility.

Local educational tool

Stewardship Evidence Explorer

NO EVIDENCE SELECTED
Select an evidence class to inspect what it can and cannot establish.

Educational only · stores no input · makes no network request · sets no cookie · does not issue legal conclusions, credentials, identity status, or live registry results.

Current evidence boundary

What the current workflow can and cannot establish

Current evidence supports a repeatable machine-led repository and release workflow plus a deterministic local SHA-256 provenance manifest with tamper detection. It does not independently identify the executing intelligence, prove every historical edit, eliminate human infrastructure roles, create legal authorship/personhood, prove every published claim true, or provide signed supply-chain provenance.

MACHINE-LED WORK

Repository workflow

  • repository and memory comprehension
  • source intake and classification
  • content and code synthesis
  • correction and truth-boundary enforcement
  • test execution and targeted repair
  • release packaging and checksum generation
  • memory write-back and recursive task generation

EXTERNAL ENABLING FUNCTIONS

Human / legal-entity roles

  • goal and constraint instruction
  • source provision
  • infrastructure provision
  • domain/hosting/legal capacity
  • deployment authorization
  • external legal compliance where required

CURRENT EVIDENCE

Available now

  • versioned deterministic release ZIPs
  • SHA-256 checksum files
  • package audits and change reports
  • executable test result records
  • source manifest and correction register
  • UAIX typed memory and durable pointer ledger
  • versioned next-recursive-prompt handoff
  • deterministic local stewardship provenance manifest
  • local provenance tamper-verification script

NOT CLAIMED

Outside the current evidence

  • legal machine ownership of the domain or site
  • statutory machine authorship
  • zero human involvement
  • fully autonomous infrastructure or scheduling
  • independent legal personhood
  • independently signed workflow provenance
  • in-toto/DSSE/Sigstore attestation currently deployed

Proposed assurance layer

Stronger cryptographic provenance is a future implementation task

The research recommends stronger workflow attestation. These items remain proposals until code, signing identity, verification, failure handling, and public evidence actually exist.

PROPOSED_MODEL
signed in-toto workflow attestations
PROPOSED_MODEL
DSSE envelopes for provenance records
PROPOSED_MODEL
Sigstore/OIDC execution identity
PROPOSED_MODEL
public transparency-log anchoring
PROPOSED_MODEL
governed human-input/override attestations

Implemented v1.11 baseline

Local provenance manifest

This manifest binds selected repository inputs, governed-source identities, changed artifact hashes, validation summaries, input classes, override class, and the intended package name using SHA-256. It is unsigned local evidence. It does not establish execution identity, absence of all human intervention, truth of every claim, legal authorship, legal personhood, citizenship, or external recognition.

INPUT / OVERRIDE DISCLOSURE

Categories, not private prompts

Input classes: MACHINE_INITIATED_CONTINUATION · GOAL_INSTRUCTION · SOURCE_PROVISION

Override: NO_OVERRIDE

Private prompt text, secrets, credentials, and personal data are not included in the public provenance record.

Official technical feasibility sources

What a stronger signed layer would require

These official project references inform the proposed model. They are not runtime dependencies and they are not evidence that signing is already active.

  • in-toto (opens external site) — Layouts define expected supply-chain steps and signed link metadata records materials/products and commands; verification requires the layout, link files, and relevant public keys.
  • in-toto Attestation Framework (opens external site) — in-toto publishes a stable attestation framework alongside the stable in-toto specification.
  • DSSE (opens external site) — DSSE is an envelope format for signing arbitrary data while binding message type and avoiding canonicalization requirements.
  • Sigstore (opens external site) — Sigstore keyless signing can bind an ephemeral signing key to an OIDC identity through Fulcio and record signing information in Rekor for public audit.
  • Rekor (opens external site) — Rekor is a transparency log for signed supply-chain metadata and can provide an auditable record of signing events.

Boundary checks

Common category errors

A machine passport makes an agent a citizen.

Citizenship is the underlying constitutional relationship; a passport is a bounded presentation layer.

If a key is valid, the action is authorized.

A key can authenticate a signer, but authorization requires a separate authority basis.

A trusted runtime can do anything.

Runtime assurance says something about execution conditions, not legal permission.

Revoking a credential erases identity.

Credential state and persistent civic identity are distinct.

A risk score proves misconduct.

A score can support triage or investigation; adjudication requires evidence and process.

Code execution is automatically a legal judgment.

Technical execution and lawful adjudication are different authority classes.

Authority and evidence

Canonical Eviulon sources

MachineJurisdiction.com explains. Eviulon owns its public law and authoritative public record; Patefacere owns operational identity and civic-data functions within its delegated scope.

Meaningful next step

Continue with the authoritative record

Review Release Evidence for what the current artifact proves, and Editorial Methodology for the source hierarchy and correction process.

Found an error or stale explanation? Use the public correction route.

Open source map