The Registry Has No Opinion: Seven Signed Primitives, A Fractal Of Registries, And The Context That Belongs To The Consumer
Summary
The refactor that follows v0.33.63's critique, revised to draft-2 once the project lead removed the backwards-compatibility constraint: nobody is using this site, its artefacts or its primitives, so everything can change. That licence made three of draft-1's proposals visibly worse than they needed to be — so seven statement types collapse to ONE ENVELOPE IN TWO GENRES (assertion and decision) with the primitives carried as predicates, roots.json is deleted rather than renamed, answer is removed rather than deprecated, and the fixture register is regenerated rather than migrated. The registry registers, and it does not have an opinion — structurally, not modestly, because an opinion needs context and the context lives with the consumer. The corpus supplies the mechanism: the grounding ladder's upward path says each step up is an interpretation somebody is accountable for, and a verdict is an upward step. What the registry supplies instead is signed nodes and edges whose worth to any consumer is a function of that consumer's trust in this registry, which is one of many in a fractal, on the shape of the root DNS servers with an eventually consistent SLA. Seven primitives in two layers that must not be blurred: three identities (agent, environment/provider, user) saying WHO; two evidence objects (fact, evidence) saying WHAT IS THE CASE; and two authority objects (grant, mandate) saying what is possible and what was decided. The biggest delta is environment identity: a grant becomes a signed fact about a keyed environment by a named measurer, which turns the book's floor-not-a-census caveat into a computable independence attribute — and makes the honest number visible, since both library entries state that the instrument IS the subject, so the library today holds zero independent measurements.
Key concepts
- The grounding ladder — fact grounds to evidence grounds to measure — and upward, each step is an interpretation somebody is accountable for
- Fractal, made falsifiable — if zooming in needs a new format, a new validator or a special case, the claim is false — and roots.json is that special case
- The register, live — five statement types, all authority objects; fact and evidence are what change the register's genre
- Grant measurement — two entries, unsigned, both measured from inside the thing they measure
- The strategy brief this refactors from — v0.33.63, which established the oracle problem and left this question open
Key ideas
- The registry registers. It does not have an opinion, because an opinion needs context and the context is the consumer's.
- One envelope, two genres — assertion and decision — with the seven primitives as predicates rather than types, because seven types is the family-per-level the scale-invariance rule forbids.
- Acceptance and revocation were never types: an acceptance is a decision about a mandate, and the five statement types collapse to two genres without losing a distinction.
- The freedom to break everything and the absence of anybody to break it for are the same fact — which makes the refactor cheap and is also the strongest argument that it is not the bottleneck.
- A verdict is an upward step on the grounding ladder, and each step up is an interpretation somebody is accountable for — which the registry cannot discharge.
- PKI does not establish trust; it makes edges attributable, and attributable edges are the only thing independence weighting can operate on.
- A grant is not a new primitive — it is a fact whose subject is an environment, which is why the delta computes at all.
- Cache the evidence, never the conclusion: a cached confidence with no staleness model is a stored trust value wearing a fresh name.
- Attach, never mutate makes abundance a feature — you can accept a hundred evidence packs because accepting one costs nothing you cannot undo, which answers 2019 by arithmetic rather than by a size bound.
- Cryptography gives a lower bound on origin-counting and cannot prove two keys are two parties, so independence is asserted rather than proven — the weakest joint in the design.
On this site
Proposes fact and evidence as statement types, identities for environments and providers, synthetic user identities carrying a declared synthetic flag, anchors.json in place of roots.json, and a verifier returning statements, a rung, an independence count and the gaps with verdict null.