The Register Interface: Every Edge Carries A Verification Badge
Summary
The interface, and a tested result that sharpens the whole thesis. Every line in a register is a claim by somebody about somebody, so the design primitive is a badge on each edge — who can verify it, by what method, at what cost, when it was last checked, and the answer, with five result states because denied, unreachable and never-checked are three different situations. A policy then becomes a saved query that must return no rows, and the badge on the constrained edge decides whether that policy is enforcement or instrumentation. The surface question was tested inside a running rented session rather than argued: the surface is named precisely by environment variables, no attestation device of any kind is present, and nothing is signed — so the surface is knowable to the agent and unprovable to anybody else.
Key concepts
- Nobody is a legitimate badge value — an edge no party can check is a correctly rendered fact, and hiding it makes everything look equally solid
- A policy is a query that must return empty — checkable, explainable, and it dates itself
- Handing the session a secret makes it worse — a secret proves possession, not location — the bootstrap trap pattern exactly
- The gap is distribution, not knowledge — the vendor records the surface and has no way to tell a third party in checkable form
Key ideas
- Attestation from nothing is a hardware problem; signing a record you already hold, for a named relying party, is a product decision.
- The register's most valuable page will be the one listing every edge that nobody can check.
- The session that tested the question runs on the surface reported as having no audit coverage at all.
- The narrower, dated tripwire: no vendor issues a signed third-party-verifiable statement naming a session's surface. Anybody who shows one refutes it.
On this site
Folded into the MVP pack as change-control entry C10; the badge vocabulary and the policy-as-query are queued as the register's interface layer.