Elnor Repo Reader

ELNOR REPO READER TEXT MIRROR
Original path: Memory Rebuild Docs/Stage_6_Charters/E1_E2_DOC81_Scope_Policy/Ratification.md
Source repo: /Users/OpenClaw1/Elnor/Elnor Specs
Git branch: main
Git commit: dbaa25962edc11ab30e8d4ca1715f9ae5bf77331
Generated: 2026-06-09T01:23:58.539Z

---

# E1/E2 / DOC81 — Scope & Policy Plane — Ratification Record

**Date:** 2026-06-08 · **Architect:** Will Brody · **Status:** RATIFIED (pending architect countersign + git commit)

## What is ratified
The **DOC81 Scope & Policy Plane** charter — `DOC81_Scope_Policy_Charter_Draft.md` (R3.1; 2,718 lines) — is ratified as the operative DOC81 member spec (family member **2 of 8**, the Memory Control Plane; ADQ-210/220) and the input to Stage 7 schema-body work. It is the scope-and-policy foundation every other plane consumes: DOC82/DOC83 gate writes/extraction on it, DOC84 caps delivery on it, DOC86 surfaces it, DOC87 must not overlap it, and EC executes all of it.

## Basis (the full chain — draft → multi-round red-team → ratification)
1. **Scaffolded** — `Charter_Opening_Brief.md` + `Charter_Input_Deck.md` (20 draft targets, OPA rows, ADQs, Skeletal fold-ins); architect-approved.
2. **Drafted** (Claude Code, R1) per `E1_E2_Drafting_Commission_Claude_Code.md`.
3. **Fidelity-audited** (CODEX) → 2 pre-red-team fixes: §7.3 PropA fold rebuilt row-body-accurate from `OPA_V3_18.md §6.25`; `AvailabilityDisposition` boundary returned to DOC86 (`E1_E2_CODEX_Audit_Fix_Record.md`).
4. **Design red-teamed** (3 models, independent) — Grok `MINOR_FIXES_THEN_RATIFY`, Claude `DESIGN_REVISION_NEEDED`, ChatGPT `DESIGN_REVISION_NEEDED` → adjudicated into the **33-cluster R1 card** (`E1_E2_Adjudication_Card.md`) with the §1-bis architect rulings R-1…R-5.
5. **Applied → R2** (Claude Code) per `E1_E2_R2_Application_Commission_Claude_Code.md`; **application-fidelity audited** (CODEX) → `FIXES_NEEDED`; B-1 (disclosure derivation/coherence ordering) + S-1 (branded-ID sweep) fixed + re-verified.
6. **Design red-teamed again** (Claude 3 rounds + ChatGPT 3 passes incl. a quantitative/function audit) → the **R2 card** (`E1_E2_R2_Adjudication_Card.md`); headline = the unified `PolicyEffectiveState` pipeline (V1) closing the disclosure-leak bug class structurally; clusters V2–V24 + the QF helper pack.
7. **Applied → R3** (Claude Code) per `E1_E2_R3_Application_Commission_Claude_Code.md`; **fidelity-audited** (orchestrator-direct; the CODEX bridge could not host a multi-minute run in the Cowork sandbox — `READY_FOR_DELTA_REVIEW`).
8. **Delta design re-reviewed** (scoped) — Claude + ChatGPT, **both `MINOR_FIXES_THEN_RATIFY`**; all four walked cases PASS, meta-test PASS, the A-B1 disclosure-leak class confirmed **structurally impossible** (not patched).
9. **Applied → R3.1** (orchestrator-direct, the delta fix set; `E1_E2_R3_Delta_Adjudication_Card.md`): D1 render-may-leave egress floor + action partition · D2 `local_file_export` seed · D3 `principal_scope` on both cache keys · D4 pipeline-helper definitions · D5 algebra hygiene · D6 self-contradictory-decision exclusion · D7 step-order prose. Verified (2,718 lines, fences balanced, no stale remnants).

## Architect rulings ratified (§1-bis R-1…R-5 — the controlling product posture; binding)
- **R-1 — internal-use-permissive / egress-gated.** Internal use of the user's own memories defaults to PERMITTED; the exhaustive internal-block list is exactly four bases (declared ethical wall; revoked/clawed-back source; sealed/PO material used outside its own matter; malformed-record containment). Privilege is an egress concern, not an internal barrier; legal holds block destruction only; privacy topics block collection only; cross-matter is relevance/contamination ranking + the send-time gate. **Confirmed executable** by the four walked cases.
- **R-2 — re-checks are silent; the only human-approval event is a wall-crossing.** Restamps run autonomously both directions (the send-time egress gate is the human checkpoint).
- **R-3 — notices are surface-keyed; walls are invisible.** Specific in-app for non-wall restrictions; generic in anything that can leave; walls produce no notice at all.
- **R-4 — privacy-topic ambiguity: don't save + reviewable** (no interrupting prompt).
- **R-5 — multi-principal readiness.** "Internal" = same principal or authorized principals; per-user restriction arrives in Phase-2 as a DOC5-produced decision source with no DOC81 schema change; principal keys are mandatory throughout (D3 hardened the cache keys).

## Fork / posture decisions ratified (decided in-card, architect-confirmed)
F1 (malformed axis floors that axis, not the action) · F2 (MIN-over-spanning equivalence + firewall guard) · F5 (destination crosswalk as constraint table) · F6/§13.4 (membrane disposition derived) · F7 (no `AvailabilityDisposition` on the UI export) · F9 (`ContaminationRiskMeasurement` DOC84-owned) · F10 (exactly 5 cascade planes) · **R-2 supersedes F8** (firewalled-only human authority) · **D6** (exclude a self-contradictory decision rather than bottom the object) · the §13.6 seed confirms (shipped thresholds `{0.85, 0.70}` + `{1.0, 0.0}` no-profile fallback; `local_file_export` floor `normal_policy_check` + attestation; traversal depth 16). Open items at R3.1: **0 `OPEN_FOR_ARCHITECT_REVIEW`** (§13.4/§13.5 resolved; §13.1/§13.2 confirmed).

## Discharge sweep (done 2026-06-08 — see the edited trackers/baseline)
- **Retired Names** += `PolicyStampScope` / `PolicyStampScopeRef` (collapsed into `PolicyStamp.scope_items`, V20/B-S6; lint `schema.policy_stamp_scope_ref_used`).
- **Owner Map** — DOC81-R3 additions block appended (the new R2/R3 DOC81-owned schemas + the line-83 repoint + `DomainPolicyThresholdsRef` + `ConservatismFloorEffect.effect_id`); `ContaminationRiskMeasurement` recorded DOC84-owned (one-owner).
- **Flatten Execution Ledger / RUN_STATE** — `current_stage` corrected to Stage 6 (was stale at 5R2b); E0 + E1/E2 recorded ratified; Stage 6 E1/E2 marked RATIFIED; `doc81_unblocks` records the seams for E3/E4 (DOC82), E5/E6 (DOC83), E7/E8 (DOC84), E_org (DOC87), E9 (DOC85), E10 (DOC86).
- **STAGE_6_CHARTER_INPUT_INDEX** — DOC81 status → ratified.
- **ADQ landings** — ADQ-213/304/308/310/313/315/316/317/406/PASS2-02 landed in DOC81 (no ADQ status changed; all resolved at Stage 4, consumed here).
- **OPA V4** — DOC81 ratification note (the 10 PropA rows + 2 E0-handed obligations landed §7; per-owner folding deferral stands).

## Deferred (recorded, not done here)
- **Stage 7** — NAMED-only schema **bodies** for DOC81's owned concepts (the executable function bodies behind the §3.0/§4.6/QF helpers); fixtures (Stage 8); lints (Stage 9).
- **Owner Map fine-grained per-row** expansion for every one of the ~30 new R2/R3 schemas → folded incrementally (the consolidated additions block is authoritative at ratification; per-row normalization rides the next baseline pass, as E0's per-owner folding did).
- An optional final NI-1 property-gate execution at Stage 8 (the R3.1 mechanical verification + both delta reviews' walked-case PASS cover the design layer).
- **SPEC_STATE** Core-Specs DOC81 row → deferred to DOC81 graduation to `Current Specs/DOC81…` / nightly spec-sync (DOC81 is a ratified charter, not yet an operative spec file; flatten status is tracked in RUN_STATE + the STAGE_6 index + the dashboard — matches the E0 handling).

## Architect sign-off
Ratified by **Will Brody** per the 2026-06-08 directive to apply the delta fix set and close out E1/E2. Both scoped delta reviews returned `MINOR_FIXES_THEN_RATIFY`; the fix set is applied and verified. Git commit is the architect's act.

`[ ] Countersigned (architect):` ______________________  `date:` __________

## Next
**E3/E4 — Knowledge / Source / Evidence (DOC82), the next charter pair.** DOC81 hands it: write-gating on `mutation_authority` + `ScopeResolutionResult`; the `EffectiveMemoryPolicy` meet; the 5-plane `CascadingSourceInvalidation` envelope; `AssertionRelationEdge` traversal scope-check policy (§8). High-risk slice → architect charter approval before drafting.