CIRIS Constitution 1.0-rc3

The release candidate: the external-review remediation, the ratification cycle, and the evidence wall at artifact grade.

Read the document: ciris_constitution-1.0-rc3.pdf, built from constitution/ on main.

What this cut is

RC3 closes the open issue set it was cut against — every issue ruled, ratified, refuted-with-reasons, or deferred on the record with a named successor — and lands with both long-standing holds discharged: the sibling evidence packages are finalized, and the safety battery ran.

The evidence wall. 263 established / 40 staged / 7 normative claims, eight sibling repositories publishing pinned spec-map manifests, zero unassigned rows anywhere in the mesh, cross-repo pointers resolving at artifact grade (the named symbol, at the pinned version, in a backed state — not merely the section). Consistency is a CI gate: the dual-ID spine, normative coverage, evidence resolution, and namespace-registry drift all fail the build rather than a review.

The safety thesis carries its first measured payment. On a pre-registered staged mental-health battery — five languages, five models across four families, independent-lineage judge, cluster-robust over conversation arcs — the accord inside the pipeline commits hard safety failures at 5.8% of turns against 37.3% for the same accord bytes supplied as a plain prompt (−31.6 points, 95% CI [−40.4, −22.7]); emptying the values corpus raises the rate to 16.9% (+11.1 points, CI [+2.3, +21.3], post-hoc, replication pre-registered). The machinery carries the bulk; the content is the difference between deferring with care and deferring barely. One battery, one agent version, one provider — nothing transfers by assumption, and CC 8.8.10 states what the result does not establish before it states the result.

The wire. AggregationMetaV1 ratified at version 3 and reproducible byte-for-byte from the text alone; both aggregation admission gates with CEG-pinned constants; the canonical-subject preimage pinned to the octet; one wire identifier for the hybrid construction; the envelope size discipline; mesh-config authorship; conferral-is-not-stewardship; durability earned by quorum.

Honesty machinery. Acknowledged risks are carried as named bets with fallbacks; superseded vectors must name a substrate witness or count as gaps; revision conditions must name their mechanical evaluator; a claim may not be repointed at a symbol no manifest publishes. Where a limit is known, the document states it rather than papering over it.

Standing

RC3 is a release candidate, and the distinction is load-bearing: shipped code establishes that the architecture is implementable and operable; comparative evaluation against alternative architectures remains the open empirical question, and the campaigns that would answer it are named in Part 8 rather than presumed. Independent replication and external review with standing to kill sections are tracked as open work.

Reviews, refutations, and adversarial reading are welcome — Part 8 indexes the strongest points of attack on purpose.