{ "doc": "fix7-n-node-authority-model", "date": "2026-06-11", "host": "T1", "codex_consulted": false, "production_mutation": false, "authority_of_this_doc": "provisional-non-authority clarification / SSOT-input; seals/approves/invents nothing; PROPOSED items are not adopted", "final_status": "FIX7_N_NODE_MODEL_CLARIFIED_READY_FOR_NEXT_MACRO (carries material-contradiction finding MC-1/MC-2 on node numbering)", "companion_md": "knowledge/dev/laws/tool-kiem-thu/designs/fix7-n-node-authority-model-design-addendum-2026-06-11.md", "sources": { "S1_canonicalizer_ssot_rev3": {"path": "knowledge/dev/reports/architecture/t1-fix7-existing-system-refactor-execution-blueprint-2026-06-08/canonicalizer-fix7-canon-v1-ssot.md", "revision": 3, "sha256": "49c386a9b9666c09786fc4f89bc79776b6046eaee6f4da6d8537d2c753b734d0", "utf8_bytes": 38756, "authority": "SSOT-engineering", "defines_nodes": true}, "S2_blueprint_doc00": {"path": "knowledge/dev/reports/architecture/t1-fix7-existing-system-refactor-execution-blueprint-2026-06-08/00-readme-first.md", "authority": "NON_AUTHORITY_EXPLANATION", "defines_nodes": true}, "S3_authority_seal_encoder_spec": {"path": "knowledge/dev/laws/tool-kiem-thu/packets/fix7-authority-closure-2026-06-10/authority-seal-encoder-spec.md", "revision": 2, "encoder_sha256": "13344f92cafcaf0d07dcb21700bdb642f38b89351702e08080eacb0e957144b8", "authority": "packet-provisional-non-authority", "defines_nodes": true, "defines_provenance": true}, "S9_provenance_validation_report": {"path": "knowledge/dev/laws/tool-kiem-thu/reports/fix7-final-authority-seal-provenance-validation-report-2026-06-11.md", "authority": "report"}, "S10_codex_final_seal_reject": {"path": "knowledge/dev/reports/architecture/codex-fix7-final-authority-seal-n7-n8-p7-2026-06-10/00-readme-first.md", "status": "CODEX_FIX7_FINAL_AUTHORITY_SEAL_REJECT", "authority": "review-derived"}, "S13_blocker_ledger_rev7": {"path": "knowledge/dev/laws/tool-kiem-thu/checkpoints/fix7-recheck9-remaining-authority-blocker-ledger-2026-06-10.md", "revision": 7, "authority": "report"} }, "authoritative_edges_engineering": { "source": "S1 (copied byte-for-byte into S4 authority encoder)", "EDGES": {"N1": [], "N2": [], "N3": [], "N4": [], "N5": [], "N6": ["N1"], "N7": ["N2", "N3", "N4", "N5", "N6", "N1"], "N8": ["N2", "N5", "N6", "N7"], "N9_DIAG": []}, "LOAD_BEARING": ["N1", "N2", "N3", "N4", "N5", "N6", "N7", "N8"], "authority_layer_adds": {"P7": ["N2", "N7", "N8"]}, "has_cycle": false, "topological_seal_order": ["N1", "N2", "N3", "N4", "N5", "N6", "N7", "N8", "P7"], "cycle_guards": ["SEAL_HASH_GRAPH_CYCLE", "CYCLE_FORBIDDEN"] }, "nodes": [ {"id": "N1", "name": "normalized_active_content_sha256[d]", "role": "per-doc active-content digest", "domain_tag": "FIX7_DOC_NORMALIZED_CONTENT_V1", "deps": [], "consumers": ["N6", "N7(transitive)"], "data_type": "digest_per_doc", "authority_class": "engineering", "creator": "T1/canonicalizer", "t1_can_compute": true, "codex_can_author": false, "usable_in_real_n7": true, "provenance_allowed_real": ["ENGINEERING_VERIFIED_CANDIDATE", "OFFICIAL_PIN"], "status": "available_engineering_rehearsal_classed_in_lane", "confidence": "confirmed"}, {"id": "N2", "name_blueprint_S2": "active_corpus_membership_sha256", "name_authority_S3": "canonicalizer_sha256", "name_canonicalizer_code_S1": "UNLABELLED", "role": "bound leaf in N7/N8", "domain_tag": "membership=FIX7_ACTIVE_AUTHORITY_MEMBERSHIP_V1 | canonicalizer=raw_ssot_bytes_sha", "deps": [], "consumers": ["N7", "N8"], "data_type": "digest", "authority_class": "engineering", "creator": "T1/canonicalizer", "t1_can_compute": true, "codex_can_author": false, "usable_in_real_n7": true, "provenance_allowed_real": ["ENGINEERING_VERIFIED_CANDIDATE", "OFFICIAL_PIN"], "status": "CONTRADICTORY_LABEL_both_values_available", "confidence": "contradictory", "contradiction": "MC-1"}, {"id": "N3", "name": "marker_fence_registry_sha256", "role": "registry of markers/fences", "domain_tag": "FIX7_MARKER_FENCE_REGISTRY_V1", "deps": [], "consumers": ["N7"], "data_type": "digest", "authority_class": "engineering", "creator": "T1/canonicalizer", "t1_can_compute": true, "codex_can_author": false, "usable_in_real_n7": true, "provenance_allowed_real": ["ENGINEERING_VERIFIED_CANDIDATE", "OFFICIAL_PIN"], "status": "available_engineering_rehearsal_classed_in_lane", "confidence": "confirmed"}, {"id": "N4", "name": "superseded_boundary_sha256", "role": "superseded fence ranges", "domain_tag": "FIX7_SUPERSEDED_BOUNDARY_V1", "deps": [], "consumers": ["N7"], "data_type": "digest", "authority_class": "engineering", "creator": "T1/canonicalizer", "t1_can_compute": true, "codex_can_author": false, "usable_in_real_n7": true, "provenance_allowed_real": ["ENGINEERING_VERIFIED_CANDIDATE", "OFFICIAL_PIN"], "status": "available_engineering_rehearsal_classed_in_lane", "confidence": "confirmed"}, {"id": "N5", "name": "guard_set_sha256", "role": "guard-set digest (= N1 of doc 06)", "domain_tag_reserved": "FIX7_GUARD_SET_V1", "value_note": "value = per-doc content digest (cdig) of doc 06, not a distinct FIX7_GUARD_SET_V1 digest (G-IMPL-1)", "deps": [], "consumers": ["N7", "N8"], "data_type": "digest", "authority_class": "engineering", "creator": "T1/canonicalizer", "t1_can_compute": true, "codex_can_author": false, "usable_in_real_n7": true, "provenance_allowed_real": ["ENGINEERING_VERIFIED_CANDIDATE", "OFFICIAL_PIN"], "status": "available_engineering_rehearsal_classed_in_lane", "confidence": "confirmed"}, {"id": "N6", "name": "active_corpus_sha256", "role": "aggregate corpus proof over 10 active docs", "domain_tag": "FIX7_ACTIVE_AUTHORITY_CORPUS_V1", "deps": ["N1"], "consumers": ["N7", "N8"], "data_type": "corpus_proof_aggregate_digest", "authority_class": "engineering", "creator": "T1/canonicalizer", "t1_can_compute": true, "computed_candidate_on_record": "d777e87c73d3b62d36789d9343f346102e98dbf301f2c93f7608470b876b258c", "codex_can_author": false, "codex_owner_must_ratify": true, "usable_in_real_n7": "gated_by_SEAL_REAL_N6_NOT_AVAILABLE", "provenance_allowed_real": ["ENGINEERING_VERIFIED_CANDIDATE", "OFFICIAL_PIN"], "status": "candidate_computable_REHEARSAL_classed_standing_true_blocker", "blocker": "G-AUTH-1 / SEAL_REAL_N6_NOT_AVAILABLE", "confidence": "confirmed"}, {"id": "N7", "name": "envelope_manifest_sha256", "role": "binds engineering digests N1..N6 + approval-event A1/A2/A3/A5", "domain_tag": "FIX7_ACTIVE_AUTHORITY_ENVELOPE_MANIFEST_V1", "deps": ["N2", "N3", "N4", "N5", "N6", "N1"], "consumers": ["N8", "P7"], "data_type": "manifest_seal", "authority_class": "approval", "creator": "Codex(real)/encoder(rehearsal)", "t1_can_compute": false, "codex_can_author": true, "real_fn": "encode_real_n7", "provenance_required": {"corpus": "ENGINEERING_VERIFIED_CANDIDATE", "approval": "AUTHORITY_INPUT"}, "status": "rehearsal_only_real_path_gated", "blocker": "N7-INPUTS (A1/A2/A3/A5 + real N6)", "confidence": "confirmed"}, {"id": "N8", "name": "detached_seal_sha256", "role": "Codex detached seal over N7", "domain_tag": "FIX7_CODEX_DETACHED_SEAL_V1", "deps": ["N2", "N5", "N6", "N7"], "consumers": ["P7"], "data_type": "seal", "authority_class": "detached_seal", "creator": "Codex", "t1_can_compute": false, "codex_can_author": true, "real_fn": "encode_real_n8", "provenance_required": {"signer": "CODEX_AUTHORED"}, "status": "CODEX_ONLY_blocked_on_real_N7", "blocker": "N8-AUTH", "confidence": "confirmed"}, {"id": "N9", "name_blueprint_S2": "codex_checkpoint_content_sha256_excluding_seal", "name_canonicalizer_code_S1": "N9_DIAG (UNDEFINED_NAME)", "name_authority_S3": "ABSENT", "role": "diagnostic sink; consumed by nothing; not load-bearing; not carried into authority DAG", "domain_tag": null, "deps": [], "consumers": [], "data_type": "diagnostic_digest", "authority_class": "diagnostic", "creator": "system/Codex(diag)", "usable_in_real_n7": false, "status": "diagnostic_not_load_bearing_naming_inconsistent", "confidence": "contradictory", "contradiction": "MC-2"}, {"id": "P7", "name": "authority_seal_pin_sha256", "layer": "authority-only (IMPLEMENTATION_DERIVED, not in canonicalizer)", "role": "final authoritative pin of canonicalizer rev3 + Packet-V3 tree", "domain_tag": "FIX7_AUTHORITY_SEAL_PIN_V1", "deps": ["N2", "N7", "N8"], "consumers": [], "data_type": "official_pin_seal_document", "authority_class": "official_pin", "creator": "Codex", "t1_can_compute": false, "codex_can_author": true, "real_fn": "encode_real_p7", "prose_only_pin": "rejected SEAL_PROSE_ONLY_PIN_REJECTED", "status": "blocked_on_real_N7_and_N8", "blocker": "P7-PIN", "confidence": "confirmed"} ], "non_node_authority_inputs": { "A1": "approval_event_id (AUTHORITY_INPUT, Codex)", "A2": "approver_identity (AUTHORITY_INPUT, owner+Codex)", "A3": "approval_event_timestamp (AUTHORITY_INPUT, Codex)", "A5": "owner_blueprint_decision (AUTHORITY_INPUT, owner)", "A6": "= N7 output (envelope_manifest_sha256), not an input", "A4_removed": "old cyclic field (N7 binding N8) deleted in rev2 (CC-1)" }, "un_numbered_digest": { "membership_sha256": {"tag": "FIX7_ACTIVE_AUTHORITY_MEMBERSHIP_V1", "frozen_pin": "f2bda8effc7be19b54722828126b82d7d2d48bee5e5e5dc0c8f347ce210fe251", "labelled_N2_in": "S2_blueprint", "labelled_N1_in": "S3_authority_encoder", "unlabelled_in": "S1_canonicalizer_code", "note": "locus of MC-1"} }, "provenance_model": { "classes": ["ENGINEERING_VERIFIED_CANDIDATE", "REHEARSAL", "AUTHORITY_INPUT", "CODEX_AUTHORED", "OFFICIAL_PIN", "FORBIDDEN_FOR_REAL_SEAL"], "allow_list_corpus": ["ENGINEERING_VERIFIED_CANDIDATE", "OFFICIAL_PIN"], "allow_list_authority_signer": ["AUTHORITY_INPUT", "CODEX_AUTHORED", "OFFICIAL_PIN"], "reject_statuses": {"missing": "SEAL_PROVENANCE_MISSING", "unknown": "SEAL_PROVENANCE_UNKNOWN_CLASS", "rehearsal": "SEAL_PROVENANCE_REHEARSAL_BLOCKED", "forbidden": "SEAL_PROVENANCE_FORBIDDEN_CLASS", "no_real_n6": "SEAL_REAL_N6_NOT_AVAILABLE"}, "two_path_design": {"rehearsal_path": "encode_node (provenance-agnostic, never a real seal)", "real_path": "encode_real_n7/n8/p7 (provenance-gated)"} }, "contradictions": [ {"id": "MC-1", "nodes": ["N1", "N2"], "severity": "MATERIAL_non_exploitable", "summary": "N1=per-doc-content (S1/S2) vs N1=membership (S3); N2=membership (S2) vs N2=canonicalizer_sha256 (S3) vs unlabelled (S1)", "resolution_owner": "T1 propose + Codex/owner ratify", "blocks_seal_math": false, "blocks_safe_direction": true}, {"id": "MC-2", "nodes": ["N9"], "severity": "LOW", "summary": "N9 named codex_checkpoint_content_sha256_excluding_seal (S2) vs N9_DIAG unnamed (S1) vs absent (S3); all agree non-load-bearing sink", "resolution_owner": "T1 record in addendum", "blocks_seal_math": false}, {"id": "CC-1", "status": "RESOLVED", "summary": "historical N7->N8 cycle in early packet prose; removed rev2; CYCLE_FORBIDDEN enforces"} ], "gaps": [ {"id": "G-DOC-1", "class": "documentation", "actor": "T1 propose + Codex/owner ratify", "blocks_final_seal": false, "blocks_safe_direction": true, "detail": "no single canonical N-number->value table (MC-1)"}, {"id": "G-DOC-2", "class": "documentation", "actor": "T1", "blocks_final_seal": false, "detail": "N9 naming (MC-2)"}, {"id": "G-DOC-3", "class": "documentation_in_SSOT", "actor": "T1 propose + Codex ratify", "blocks_final_seal": false, "detail": "canonicalizer code does not comment N2 value"}, {"id": "G-IMPL-1", "class": "implementation_cosmetic", "actor": "T1", "blocks_final_seal": false, "detail": "FIX7_GUARD_SET_V1 tag reserved but N5 value = cdig of doc 06"}, {"id": "G-AUTH-1", "class": "authority_provenance", "actor": "owner/operator + Codex", "blocks_final_seal": true, "detail": "SEAL_REAL_N6_NOT_AVAILABLE; no real in-lane N1..N6 chain"}, {"id": "G-AUTH-2", "class": "authority", "actor": "Codex + owner", "blocks_final_seal": true, "detail": "A1/A2/A3/A5 + N8 signer/report + P7 ids not supplied"}, {"id": "G-OWNER-1", "class": "owner", "actor": "owner", "blocks_final_seal": true, "detail": "OWN-1 standing do-not-approve"} ], "blockers_blocking_final_seal": ["G-AUTH-1", "G-AUTH-2", "G-OWNER-1"], "contract_defects_remaining": [], "proposed_correction_not_adopted": { "note": "labels only; changes no edge/math/digest; MUST be ratified by Codex/owner before binding", "N1": "normalized_active_content_sha256[d]", "N2": "canonicalizer_sha256 (rev3)", "N3": "marker_fence_registry_sha256", "N4": "superseded_boundary_sha256", "N5": "guard_set_sha256 (= N1[doc06])", "N6": "active_corpus_sha256", "N7": "envelope_manifest_sha256", "N8": "detached_seal_sha256", "N9": "codex_checkpoint_content_sha256_excluding_seal (diagnostic sink, not in authority DAG)", "membership": "active_corpus_membership_sha256 (name it 'membership'; stop numbering it N1/N2)", "P7": "authority_seal_pin_sha256 (authority-layer only)" }, "next_macro_recommendation": "Reconcile N-number->value table (G-DOC-1/2/3) FIRST, then run real-N6-provenance macro (engineering half T1-doable), then Codex/owner authority seal (N7->N8->P7). See fix7-n-node-next-macro-recommendation-2026-06-11.md" }