This model owns only the clocks, constraints, observables, and conservation rules needed to keep the story's consequential outcomes plausible. It is not a game system and does not decide character action.
## Concordance State
For each pilot/component, track ordinal state only:
- **Available action:** local motion, stop, separation, office acceptance/yield, unavailable.
- **Knowledge:** local body, shared operational state, inferred other state; never private memory.
For the assembly, track mechanical completion, shared sensory coherence, named crown, delegated offices with expiry, reversible separation map, phase conflict, AFTER access, and evidence provenance.
### Necessary Conditions
Mechanical assembly requires compatible collars, synchronized approach, safe velocity, power/thermal margin, and load-bearing components within mechanical limits. It can produce an articulated cluster without Concordance.
Stable Concordance additionally requires locally legible envelopes, represented refusals, one legible crown, visible and revocable delegated offices, sufficient separation map, and phase conflict below shear.
Full Concordance means a consequential whole-body act sustained while all five local persons retain assent/refusal and office boundaries. It does not mean perfect synchronization, total information, maximum power, permanent assembly, or absence of pain.
### Concordance Clocks
- Approach geometry spends correction authority and heat.
- Load-bearing collars turn ambiguity into joint strain.
- A whole-body emergency stop, separation request, certified mechanical overload, or two agreeing danger channels trigger automatic abort. A local movement refusal freezes only that commanded act and demands rerouting unless safe local geometry becomes impossible.
- Contradictory embodied commands can reach phase shear before mechanical safing when loads remain nominal.
- Pilot pain, cognition, vestibular stress, and thermal load accumulate locally.
- Damage and prolonged strain erode the reversible map.
- Hidden practice has one authorized return window; delay produces beacon, handoff, heat, and clerk evidence.
- Public failure, late simultaneous return, unusual wear, later improvement, export irregularity, and custody traffic accumulate separately into institutional suspicion.
### Concordance Conservation
- Crown remains singular. Delegation moves bounded work, not personhood or skill.
- Docking changes geometry, not ownership of pain, refusal, movement, or separation.
- Routing around refusal transfers load, time, heat, geometry, or injury to named bodies.
- Shared sensory state carries operational information, not biography, motive, attraction, or moral agreement.
- Component expertise remains local.
- Reversibility is a material reserve that maneuvers may spend.
- AFTER can act only through compatible connected substrate and cannot supply pilot assent or crown.
- Private traces, academy geometry, maintenance wear, and historical records retain distinct provenance.
### Resolution Rules
1. Overwritten boundary raises phase conflict; alignment may delay but cannot create stable Concordance.
2. Honored refusal freezes the local commanded act. Routing around it requires local presence, legible geometry, and accepted transferred load.
3. Separation begins on local request unless instant release would itself kill; crown then owns stabilization toward separation, never cancellation.
4. Emergency crown may re-center to the pilot physically able to stabilize altered geometry. It expires at first communicable ratification or refusal.
5. Planned transfer names holder, recipient, task/interval, assent, and return path.
6. Delegated offices receive only task inputs and expire on completion, recall, separation, or lost legibility.
7. Phase shear aborts shared embodiment while leaving bodily, hardware, and record residue.
8. Exact Aetheric thresholds remain variable; outcomes follow geometry, boundaries, load, and evidence rather than power level.
9. In the hidden trial, the four assenting pilots' accepted load transfer creates the viable asymmetric map. Existing learned shared timing—including AFTER's pre-verbal protective anticipation—catches and stabilizes the transition long enough for crown to re-center according to present physical competence. AFTER neither chooses Iri's refusal nor selects the crown recipient. Private traces show anomalous anticipatory timing and re-centering; attributing personhood remains interpretation.
## Hidden Trial Packet
The five are already authorized for a recovery rehearsal. Senn overlaps permitted lost-beacon shadow-lane legs within the return window. Iri explicitly refuses one movement. The others honor it, asymmetry invalidates the current balance solution, emergency crown slips, and private recorders preserve local traces. Academy systems retain co-location, lateness, heat, and later wear but cannot prove the event's constitutional meaning. The household learns that something transferable occurred without yet owning a theory.
## Institutional Selection
First-year formation, clinic, bay, welfare, scholarship, housing, and family-status streams remain separately owned. Formation faculty produce a Finalist recommendation after two terms. Kinship's clinical-selection board receives correlated copies under classified readiness authority, joins aptitude, somatic/esper indicators, relationship persistence, and leverage, and returns five candidate codes mapped to standardized Seats. Formation administration receives only the approved household and pedagogic rationale.
Clinic, scholarship, housing, component, and family offices separately confirm continuity. Vey may make student-specific welfare objections or delay movement; he cannot inspect the candidate model, substitute students, or cancel certification. No local worker performs an obviously unlawful act.
### Mika Chain
Lio files one clean first-year welfare account of Mika's protective faults. Intake creates an authenticated receipt and routes it to formation safety and clinic triage. Temporary fitness restriction removes Mika from the provisional Fist. Kinship receives existing correlated copies, recommends clinical preparatory extension and Tem's reassignment, and lets clinic, formation, scholarship, and housing offices perform narrower lawful acts. Vey sees the welfare summary and accepts the fast-aligned clinical account without asking enough. Privacy and placement rules make absence lawful-looking.
The later receipt proves welfare data crossed into external candidate handling. It does not prove Lio knew the destination or that any one office ordered disappearance.
## Investigation And Reveal Joins
Every major discovery requires at least two independently owned surfaces:
| Discovery | Required join | What remains uncertain |
| --- | --- | --- |
| Recurring Seats | public alumni/placement records plus gaps | why teams changed |
| Recomposition | Tem's obsolete code plus formation histories and candidate index | pedagogic, clinical, and experimental motives |
| Mika selected out | Lio receipt plus clinic metadata and Tem code | Mika's current state |
| Vesper bodies used | Quill's wear custody plus famous maneuver and executive-exclusion files | donor-pattern subjective state |
| Harrowglass chosen | physical recorder authentication plus Tem reconstruction and public history | full political context until later records join |
| AFTER continuous | repeated timing, embodied challenge history, distribution, and self-report | legal status and inaccessible memory |
| Constitutional capacities suppressed | cohort ledger plus Mika chain, hidden traces, and Calyx telemetry | whether every prior house reached them |
Public records, personal records, and pilot exports start the investigation. Vey opens ordinary records and sends bounded cross-office questions. Each request emits metadata. Kinship security correlates query patterns with deviation and Quill's hold, narrows exports, advances overhaul, questions Rhea, and requests a welfare account. Vey protects immediate discipline while confirming which files matter; he becomes helper, censor, and involuntary tracer without secretly designing the audit.
## Institutional Clocks
- **Formation review:** the eighty-two-percent failure requires a supervised recovery demonstration before full assembly clearance.
- **Clinical:** Iri's limit can protect refusal and furnish grounds for removal.
- **Component:** Quill's hold blocks refurbishment until a named custody transfer/work order overrides it and leaves evidence.
- **Recomposition:** requires converging formation and clinical findings. Vey can delay through welfare continuity and appeal, not cancel.
- **Purge:** suspect lattices are scheduled for post–Bright Ledger overhaul, when combat wear provides ordinary replacement cause.
- **Leak:** each cross-office request narrows future access.
- **Personhood:** a challenge can open review but cannot automatically stay maintenance or release hardware; filing before replication risks fragmentation.
- **Necro:** only the three Palisade receipts launch the contingency.
Kinship prefers recomposition over theatrical punishment: privileges, telemetry, bounded crisis, reassignment, and Seat substitution. Each individual exit preserves a real good while splitting the household differently.
## Vey Knowledge And Authority
At selection, Vey knows Kinship is coercive, Seats are managed, and the threat forecast is credible. During investigation, he learns Vesper is abnormally compartmented and that his queries are watched. At the bargain, he knows recomposition, overhaul, and strategic stakes are real. At Palisade, the unlisted Necro launch proves a branch bypassed his certification authority.
He may grant ordinary access, assign staff, delay discipline, issue welfare holds, request reassessment, preserve family contact, certify or withdraw academy fitness, open return/family routes, preserve signed records, and ask questions. He may not cancel recomposition, release hardware, stay overhaul by declaration, decide AFTER's personhood, see Necro process records, command Bright Ledger, revoke the contingency, or choose recovery destination.
## Bright Ledger State And Clock
Track seven coarse owners: medical supply, plant safety, evidence, political control, cadet geometry, persons, and escape capacity.
1. Serein's terrorism filing creates Compact jurisdiction while workers retain line stations, ledger access, charges, and tenders.
2. Plastics take the executive route, Lifers the medical corridor, sophomores radial collars. Each initially improves its assigned metric.
3. The corporate continuity office requires one custody/dispatch attestation every forty-five minutes. After two missed attestations and field confirmation that executive access remains unrestored, it certifies continuity failure at ninety minutes.
4. Halcyon exercises its existing option; escrow transfers contractual assets while plant, workers, contamination, and liabilities remain physically where they are.
5. Ledger excerpts indexed by Jas, worker explanation, Omi's authority audit, and Tem's provenance comparison make pre-occupation contamination and engineered jurisdiction legible over sustained work rather than instant genius.
6. Authorized seizure, worker charges, clinic lots, evacuation, and evidence converge into incompatible emergencies.
7. Full Concordance stabilizes occupied plant volumes, preserves the three curing lots' process conditions, opens evacuation and dispatch geometry, stops fresh casting, and spends AFTER. Worker-operated tenders physically carry people and all twenty-one lots out.
8. Three receipts converge: mission deviation, full Concordance outside Kinship control, and machine-person standing through unregistered infrastructure.
9. Each receipt owner may revoke only its own receipt. The sealed contingency requires all three signed revocations inside one hundred eighty seconds; owners see only their local channel until execution audit, so coordinated revocation is structurally improbable.
10. Necro activates from an unlisted deterrence tender already cold-staged at Serein's secured executive berth as sealed mission-continuity support. The receipts authorize local release rather than distant travel. Upper cadres receive isolation orders; Vey first sees the asset when it launches, withdraws certification, and begins transmission.
11. Local refusal breaks Vesper's predicted counter, destroys long-baseline tracking/synchronization relay, and permits worker-owned breakout.
12. Workers buy ninety minutes; Necro enters radiative repair before the eight-hour corridor boundary; the six reach Morrow Quay at hour twenty-eight and Saint Varo near hour thirty-four.
After tracking breaks, the cadets do not commit to Morrow Quay until they have changed vector among several medically plausible route nodes. Morrow transmits the pallet rendezvous and Saint Varo coordinates through a local delayed channel after authenticating the request. Recovery holds only the earlier estimate and must search Orison, worker docks, quarantine anchors, and repair sites rather than pre-positioning at the final node.
### Reader-Visible Clock Chain
Prose foregrounds only clocks characters act upon: two missed dispatch attestations execute Halcyon's option; three independent receipts execute Necro; the damaged relay creates one worker-purchased escape interval; medicine and heat create the Morrow deadline. Exact subordinate timings remain laboratory support unless a viewpoint must decide from them.
### Lot Conservation
Eighteen lots were sealed before occupation and three already curing. During Concordance the three curing lots retain process conditions and exposure sampling. Preauthorized lot-quality instruments, owned by the insurer's product-certification arm and accepting elected worker countersignatures, certify those three lots independently of the corporate continuity office's custody/dispatch failure finding. Exactly twenty-one lots leave to named clinics. No fresh casting begins.
### Evidence Partition
- Senn carries Vey's certification withdrawal and the external override chain.
- Omi carries custody and trigger receipts.
- Lio carries the forecast and medical-supply record.
- Tem carries cohort indices, provenance maps, and encrypted record shares.
- Iri carries authorized victim files and worker testimony indices.
- Worker tenders carry sterility-ledger mirrors and lot signatures.
No one possesses the whole chain. Authenticated indices and authorized records are public; encrypted full records remain split among independent custodians.
### Upper-Cadre Obligations
The Plastics' cleared executive route remains necessary for volatile-store isolation and contractor casualties. The Lifers' medical corridor remains necessary for evacuation and clinic lots. Isolation orders conflict with but do not erase those physical duties. Vara and Anik choose interpretations that preserve immediate lives while still closing cadet routes where doctrine permits. Their delayed pursuit is caused by owned obligations, not sudden sympathy.
### Worker Screen Cost
The screening tender exceeds certified thermal limits, damages its signature baffles, burns route standing by deviating from bonded medical traffic, and exposes its crew to license and kidnapping allegations. Ninety minutes is purchased through equipment life, insurance, and future livelihood.
- Every rescue and sensor act spends later heat and power.
- Refusal removes capacity and names redistributed cost.
- AFTER's substrate loss cannot spawn restoration.
- Executive entry admits Necro; worker dock authority creates escape.
- Defeating Vey or one relay cannot terminate Kinship, title, recovery jurisdiction, or suppression.
## Productive Uncertainty
Keep open Halcyon's anticipation of violence, donor-pattern pain effects on Necro, worker disagreement over lot completion, whether upper cadres could have interpreted lawful duties differently, which recovery authority reaches Saint Varo first, and whether public evidence protects or exposes victims.
Do not leave fuzzy what moved, who signed, who died, which authority acted, or what each POV could know.
@ -131,7 +131,7 @@ The six decline Orison, obey Morrow Quay's refusal, receive palletized stores, a
## Pursuit And Evidence
Disabling the exposed Necro relay destroys its long-baseline tracking and cross-component synchronization while leaving local reflexes and short-range pursuit intact. It follows through the worker screen for ninety minutes, accumulates asymmetric heat, then must enter radiative safe mode and replace or bypass the relay before the eight-hour corridor boundary. It broadcasts the cadets' last vector but cannot shadow or reacquire them directly. Vara and Anik keep their Fists on assigned corridor, casualty, and traffic obligations rather than abandoning civilians for a chase; field control later dispatches recovery along route estimates, too late to restore closed geometry.
Necro launches from an unlisted deterrence tender already cold-staged at Serein's secured executive berth under sealed mission-continuity cover. The three receipts authorize activation and local release, allowing immediate entry without implying prior knowledge of AFTER's assertion. Disabling the exposed relay destroys Necro's long-baseline tracking and cross-component synchronization while leaving local reflexes and short-range pursuit intact. It follows through the worker screen for ninety minutes, accumulates asymmetric heat, then must enter radiative safe mode and replace or bypass the relay before the eight-hour corridor boundary. It broadcasts the cadets' last vector but cannot shadow or reacquire them directly. Vara and Anik keep their Fists on assigned corridor, casualty, and traffic obligations rather than abandoning civilians for a chase; field control later dispatches recovery along route estimates, too late to restore closed geometry.
Jas's archive, worker signatures, Vey's withdrawal, and trigger receipts are independently replicated. No Figure holds the whole chain. Broadcast also exposes identities, timing, hardware, and AFTER. Clinic privacy offices can attack cohort evidence as unlawful disclosure; Kinship can authenticate records while disputing interpretation; corporations call plant evidence regulated theft.
- Local movement refusal and whole-body abort were conflated.
- AFTER's exact hidden-trial contribution was absent, leaving it either sovereign or irrelevant.
- Necro lacked physical prepositioning for immediate pursuit.
- Corporate continuity failure and lot-quality certification appeared to come from one contradictory insurer act.
- Recovery could pre-position at known refuge nodes after receiving the last vector.
- Laboratory timings threatened to become reader homework.
- Full Concordance appeared to transport workers and lots rather than stabilize the plant for tenders.
## Repairs
- Local refusal freezes one act; whole-body stop, separation, overload, or corroborated danger owns abort.
- Four pilots create the asymmetric map; learned timing including pre-verbal AFTER stabilizes it; present physical competence re-centers crown.
- Necro is cold-staged under sealed cover at Serein's executive berth.
- Corporate continuity and product-quality certification have separate scopes and instruments.
- Route commitment occurs only after tracking loss; Morrow shares rendezvous and Saint Varo coordinates through a local delayed channel among several plausible nodes.
- Prose exposes only the causal clocks characters act upon.
- Concordance stabilizes plant and process geometry; worker tenders transport people and lots.
## Verification
Independent Concordance, institutional, and Bright Ledger red-team rechecks returned clean.
Formalize only the clocks, observables, conservation rules, and robust outcome boundaries required to keep Concordance, institutional investigation, Bright Ledger, Necro, and escape causally honest.
## Artifact
- [[../Causal Model|Causal Model]]
## Decisions
- Concordance uses ordinal geometry, envelope, boundary, load, action, authority, reversibility, and evidence states rather than compatibility scores.
- Full Concordance is constitutional and consequential, not maximal synchronization.
- Major investigation reveals require joins across independently owned evidence.
- Kinship selection emerges from correlated lawful local records rather than one secret observation office.
- The insurer's ninety-minute certification threshold owns Halcyon's option trigger.
- The sealed Necro contingency allows one hundred eighty seconds for three mutually blind owners to revoke all receipts.
- Three curing lots retain full worker and insurer certification; no fresh casting occurs.
- Evidence is partitioned across five Figures and worker tenders.
- Upper-cadre rescue and safety obligations physically delay pursuit.
- The worker screen spends equipment life, licenses, insurance, and route standing.
## Character Deltas
None. The model constrains possible events and knowledge without advancing any Persona revision.
## Productive Uncertainty
Halcyon's expectation of violence, donor-pattern pain, worker disagreement, upper-cadre lawful alternatives, recovery arrival at Saint Varo, and evidence's protective/exposing effects remain open.
## Review Adjudication
Red-team blockers concerning refusal/abort, AFTER authority, Necro prepositioning, insurer scope, route secrecy, reader clock load, and tender transport were accepted and repaired. See [[Causal Red Team Review]].
## Gate
The model supports narrative plausibility without claiming to be the story. Missing exact Aetheric thresholds remain logged uncertainty rather than drafting blockers. Pass 4 is accepted.
- **Operator authority:** Autonomous continuation toward the complete story.
- **Length policy:** No target or ceiling.
@ -24,13 +24,14 @@
- [[Relationship Matrix]]
- [[Pass 02/Pass Report|Pass 2 Report]]
- [[Material Ledger]]
- [[Causal Model]]
## Open Work
- Pass 4 must keep its causal model coarse enough to serve scenes rather than replacing them.
- Pass 5 must audition materially different dramatic routes without reopening operator-locked outcomes.
- Calyx Persona history must replay in lived order while presentation projects reverse coordinates.
- The representative prose comparison must record honestly whether a minimal-ledger variant and independent readers are available.
## Next Inputs
Pass 4 consumes the accepted Pass 1–3 packet and formalizes only the clocks, observables, and conservation rules needed for Concordance, institutional response, Bright Ledger, and escape.
Pass 5 consumes the accepted Pass 1–4 packet and auditions materially different dramatic routes through the central engine before the full ladder freezes.
@ -24,6 +24,8 @@ The working **Necro Concord** can assemble reliably, tolerate punishing accelera
Its first operational authorization is a sealed **mission-continuity contingency**, not a discretionary academy punishment. Operation Bright Ledger triggers it when three receipts converge: the sophomore household departs certified mission geometry; achieves full Concordance outside Kinship control; and allows AFTER to assert operational standing through non-registered Palisade infrastructure. Each receipt can be described as loss of command integrity without acknowledging consciousness or refusal. Their conjunction executes a preauthorized launch; the emergency deterrence cell performs recovery rather than deciding personhood or danger after the fact.
For Bright Ledger, Necro travels cold inside an unlisted deterrence tender staged at Serein's secured executive berth under sealed mission-continuity cover. Local staff see a Compact support asset without receiving its configuration. The three receipts authorize activation and release from the already-cleared vector, which is why the machine can enter immediately and why Vey first learns the asset exists only when it launches.
The contingency activates automatically through Compact authority while the three cadet Fists are still committed in the warzone. It orders Vesper to isolate the sterility ledger, sever AFTER from plant and Figure substrates, force the sophomore Concord into recoverable components, and return surviving cadets to custody. The Necro Concord arrives after the living Concord has spent its thermal margin, medical reserves, ammunition, and much of AFTER saving the plant.
Its ceiling follows from its architecture. One executive model interprets the battlefield and directs five fixed somatic systems. It is brutally effective within rehearsed command envelopes and escalates unfamiliar problems through the same central model. It possesses the body plan of a federation and the decision cycle of an ordinary military robot.
Meta Vens