pki.sgit.ai / insurance

Insurance for agents

A pivot: the foundation of the risk approach moves from risk acceptance to the insurance policy, because the delta between what an agent can do and what it is authorised to do is where the insurance lives. Eight memos are being recorded on it. This is where they are read into something buildable.

stage 1 — rating without money

A rating engine that emits levels rather than currency is not a regulated activity, needs no carrier and no loss history, and is therefore buildable today. Money is stage 2. See GM-D38.

A level nobody can recompute is exactly the theatre a premium would have prevented. Every rating ships its derivation. See GM-D39.

Settled: The level scale is 1–5 (GM-D54, the project lead, 31 Aug). Coarse on purpose: currency implies loss data nobody has, 1–100 implies resolution the inputs cannot support, and a band is arguable where a decimal is not.

Two stages, and only one of them is insurance

Stage 1 — the ratingStage 2 — the policy
ProducesA level, and its derivationA premium, and a promise to pay
Risk transferredNoneTo a carrier
Regulated activityNoYes — authorisation, capital, conduct rules
Needs loss historyNo — a relative ordering needs no absolute scaleYes, and none exists for agents anywhere
Buildable hereTodayNot by this estate, and not soon

Everything in this folder is stage 1. Calling it insurance would be the first dishonesty: it transfers no risk and promises no payout. What it does is tell an operator that this placement is several levels worse than that one, and which single change moves it.

The memos

Each is filed verbatim as a brief before it is read, because a transcript outranks any summary of it. The count below is computed from the manifest, never typed.

Recorded as eight; the project lead added two more, so it is ten — now all processed. The count on the hub is a CLAIM, so it was corrected here rather than quietly adjusted, and the build gate that refuses more processed memos than the manifest expects fired on the ninth, which is what it is for. Each memo is filed verbatim as a brief before it is read; the doctrine says which memo it came from, and where a memo and a document disagree the memo wins. The pivot briefing (—) precedes the series and is not counted in it. All eleven readings were audited against their transcripts at v0.33.82; the corrections are recorded in the documents themselves rather than appended, and as GM-D81 to GM-D85. The series was called complete at ten and reopened by memo 11 on 1 September — the second time it has been declared finished and grown. The v0.33.82 gate fired on doctrine 10's own 'the last of the series' label when memo 11 was filed; a document should not assert the future. Memo 12 on 2 September asked for something operational and got it: the push policy, the first MVP, run against this estate's own releases before its doctrine was written.
—
The pivot briefing: the delta is where the insurance lives — the pivot briefing, which precedes the series of eight

The policy replaces the acceptance at the foundation; the insurer as the acceptor of last resort filling the register's acceptor:null; the two-insurances split; parametric as the payout shape; the loss event named as the missing primitive.

the brief, rendered → raw
1
Insurance without money first: the rating is the product

Money decoupled from rating, which dissolves the regulatory blocker; micro-policies as the scale insurance never reached; the placement variables; the questionnaire as a declared-fact collector; the quasi-currency as the adoption path. Also contradicts memo 0 on why the pivot is honest, and the contradiction is answered rather than smoothed.

the brief, rendered → raw
2
The ecosystem without the money: insurance as a go-live gate

The industry's roles taken without its money, because the roles are what separate the rater from the party that wants to ship; the rating as a gate on go-live rather than a report, which requires a threshold and a decomposition; reinsurance named as the fractal's precedent; and the control-to-premium loop, which the workbench already computes.

the brief, rendered → raw
3
Who pays for the delta nobody chose, and the rating that moves overnight

The accountability question, answered as a taxonomy: the delta divides by who could have closed it — elective (the operator's), structural (the platform's finest grain), defect (a vulnerability, temporary). Platform granularity named as a library artefact and the one public good here. The rating made a function of the world as well as the twin, with independent freshness. And the estate's own measurement found holed: nothing measures commit authorship.

the brief, rendered → raw
4
Why insurance — and the cautionary tale is cyber insurance itself

The justification, carrying its own counter-example: cyber insurance grew on quantification nobody could check and hurt both sides at once — which is the empirical case for this folder's rule. Insurance's real virtue is that it DEMANDS trustworthy data rather than merely using it. And the enforcement tier is identified as an impact-reduction measure: the quantity security has never been able to articulate.

the brief, rendered → raw
5
Not in line: the schemas are the product, and the scale is one to five

The commercial position and the first SETTLED decision. The level scale is 1–5. The project sits outside the line — schemas, flows, connectors, evidence — never the carrier and never the execution broker, which forecloses it ever being a boundary itself. And openness is load-bearing rather than generous: with no money at stake, an attackable public method is the only honesty mechanism left.

the brief, rendered → raw
6
The broker market is driven by insurance, and a broker must carry its own

The broker market's commercial case is the level reduction it produces — and the broker's own policy is what stops that being apparent authority in the vendor channel. Corrects an earlier framing: a broker changes the grant's TOPOLOGY rather than narrowing it, adding a party with reach of its own, so the net may be positive and deployment topology is a rating variable. Names the case the delta taxonomy could not hold — granularity that exists but is impractical — and fixes it with a cost-to-close dimension rather than a fourth class.

the brief, rendered → raw
7
The policy is a signed statement, and the relying party is the boundary

How it works with the primitives the estate already has. policy/v0 turns out to be a mandate-shaped statement issued by a rater — one more type, no new register machinery. A policy does not sign; its subject signs and the policy establishes what that is worth. And the handshake relocates enforcement to the RELYING PARTY, who is outside the requesting agent's grant — the first mechanism in this pivot that can reach tier boundary, resolving the limit memo 5 recorded.

the brief, rendered → raw
8
The world model: an MVP that explains rather than calculates

The last memo, and it SPECIFIES the MVP rather than requesting one — correcting the shape the site agent had proposed for four releases. The first MVP is an explainer, not a calculator: an instrument answers a question somebody already knows how to ask, an explainer creates the person who can ask it. Cost needs assets, and stage 1 needs asset class rather than asset value. Insurer, underwriter and claim join the actor set. And the load-bearing requirement: a world must show its own emptiness, because a polished simulation is the most effective mechanism yet devised for making a demonstration look like a product.

the brief, rendered → raw
9
Make your agents insurable — and the first fact this pivot would produce

The positioning, and the first item in this series that would produce an EXTERNAL fact rather than a position — the pivot has seventy-one decisions and no evidence. Also the mapping that upgrades a rule: the declared-versus-measured gap is the shape of material non-disclosure, so the card-versus-twin gap decides voidability rather than merely worsening a level. And the survey specified as measure.py pointed at a market: dated, re-runnable, evidence-classed, where unknown is never absent.

the brief, rendered → raw
10
The schemas, the clocks, and a warranty is a fact with a maximum age

Two memos in one — the interfaces, then time. A warranty is defined precisely as a fact plus a maximum age, failing three ways (false, stale, unknown) with unknown on the same side as false — the opposite of the rating rule, and deliberately so. Cover is continuous, which adds a third clock beside the policy interval and twin freshness. Metering uses is sound where metering checks is not, but a usage-boxed policy needs an in-line counter this project is not. And the reframe: an API is operated, a schema is implemented, so the policy lifecycle ships as documents and appends rather than as an API surface.

the brief, rendered → raw
11
The resource pool: a grant that depletes, and the first loss data this pivot can have

Consumption as a SECOND AXIS beside capability: a resource pool is a grant that DEPLETES, carrying a remaining no existing node has. The first real pooling mechanism in the pivot — variance absorption in a currency that is not money, so no carrier and no authorisation. A budget overage is a loss event that is already recorded by somebody else, which is the first loss data this estate can obtain and lets loss-event/v0 be drafted against a real instance. Resolves GM-D78's collision (the counter exists, run by the supplier for billing) and finds doctrine 07's first mover (the supplier has a reason to refuse: it is paying). Corrected: the memo says the pool defines the grant, and it does not — a pool bounds volume, never reach, and the cheapest catastrophic action is cheap.

the brief, rendered → raw
12
The claim is the draw: money as a metric, and a push budget Claude can run today

The money in a policy is a metric for what the claim buys, so pay the claim in the resource itself: a draw on the pool IS the claim, paid in bytes or tokens, settled by the check in milliseconds because trigger, cover and payment are fields of one document. A worked policy with all four excess-of-loss parts for two resources, a pool shared per repository so pooled fate is deliberate, and 'let Claude manage it' read honestly as a SETTING. And the first MVP: insurance/push-policy, whose first finding is that twelve of twelve site releases would have been refused, because the release stamps the version into every page.

the brief, rendered → raw
13
The enforcement ladder: six levels, a measured assurance, and a catch above the hook is an incident

One policy walked up every place it can be enforced: nothing, a prompt, a skill, a git hook, the destination, out-of-band verification. The levels are the tier test refined, with detection as a tier the test had not named. Assurance per level is measured from the ledger's catch rate on ordinary work, never asserted. A catch above the hook is an incident rather than a volume event: no draw, a different policy, escalation, a candidate for suspension. And level five, replaying git against the ledger, is the control that turns a setting into a detector; built the same day and run over the eleven commits since the hook: no catch.

the brief, rendered → raw

The doctrine

Derived from the memos, naming which memo each part came from. The markdown under insurance/src/ is the source of truth; these pages render it.

What this is, and the rule it runs onfrom memos 0–1

The body of work, its two stages, and the one rule that keeps a rating from becoming theatre.

The rating: what is scored, from what evidence, and what must never mergefrom memo 1

The ratable unit is a placement, not an agent; inputs carry their evidence channel; measured and declared never merge; unknown is never absent.

The ecosystem and the gate: who rates, what it gates, and the tier the gate itself hasfrom memo 2

The roles are the integrity mechanism; the rating gates go-live rather than reporting; and a gate that overstates its own tier is worse than none. Removing the payout removes one channel of moral hazard and opens another; and a rider read as an endorsement is an append, which the register has done since v0.1.26.

Who pays, and the rating that moves: delta by who could close it, and the world as an inputfrom memo 3

Only the delta an operator could have closed is theirs; platform granularity is a library artefact; and a rating states what changed and which way, never a multiplier. Memo 3 also asked whether a model vendor would carry a policy against its own mistakes — the same argument memo 6 later made about brokers, three memos early.

Why insurance, and what broke it last timefrom memo 4

Cyber insurance is the warning, not the model — and its failure is the empirical case for this folder's rule. The enforcement tier ranks REACHABILITY, which is the neighbouring quantity to the impact reduction the memo asked for, not the same one.

Not in line: the position, the scale, and what it foreclosesfrom memo 5

The scale is 1–5, settled. The project supplies schemas rather than standing in the line — which means it can never itself be a boundary.

The broker market: who backs the claim, and what a broker actually changesfrom memo 6

A broker's claimed reduction is computed by the method, not the broker — and a broker moves exposure as well as removing it, so the net may be positive.

The policy as a statement: the handshake, and where the boundary finally sitsfrom memo 7

A policy is a mandate-shaped statement; a key signs and the policy says what that is worth; and the relying party is where this pivot can finally reach a boundary.

The world model: the MVP, and the rule that keeps it honestfrom memo 8

The first MVP explains rather than calculates — and the world it renders must show its own emptiness, because a polished simulation makes a demonstration look like a product.

Make them insurable: the positioning, and the survey that would test itfrom memo 9

The first thing here that could be wrong in a way the world would correct — plus the guard-rail that stops “make them insurable” becoming “make them look insurable”.

The schemas and the clocks: a warranty is a fact with a maximum agefrom memo 10

A warranty fails three ways and unknown counts as failure; cover runs on three clocks; and the deliverable is documents and appends, not an API.

The resource pool: a grant that depletesfrom memo 11

Consumption is a second axis the corpus never had; a pool bounds volume and never reach; and a budget overage is the first loss event this pivot can actually observe, because somebody else already meters it.

The claim is the draw: money as a metric, and the first MVPfrom memo 12

A draw on the pool is a claim paid in the resource and settled by the check itself; the pool is shared per repository; the skill is a setting and says so; and the first MVP's first finding is about this estate.

The enforcement ladder: six levels, a measured assurance, and a catch above the hook is an incidentfrom memo 13

Six levels of enforcement on the three tiers, with detection as a fourth; assurance per level measured from the ledger; a catch above the hook is an incident; and reconciliation against git as the maintainer's job, built and run the same day.

The MVPs

The push policybuilt · a setting, not a boundary

A budget on pushes per day and bytes per push with a shared daily pool: a policy document, a checker that measures what git would send, an append-only ledger, a hook shipped and not installed, and a skill that makes Claude the enforcement point. First finding: twelve of twelve site releases would have been refused.

The dev pack

The insurance ecosystem packdraft-1 · step 1 built and run

The pack the fourth v0.33.62 brief specifies, written 3 September after the nine-item inventory: three vaults, a policy object generic on unit, a ledger that is only ever added to, git hooks as the enforcement point, Claude hooks as instrumentation, and a room of five cards. Step 1 is built: a 400 KB commit refused by git, the eleventh commit of the day recorded as a draw, a push outside the mandate refused. It supersedes nothing here; it generalises the push policy's verdict to any unit at commit and at push, and pins the signed mandate by hash.

What it consumes

Nothing here starts from scratch — the rating's inputs are documents this estate already publishes: the measured grant (the twin), the signed mandate, the delta with its acceptor: null, the enforcement tier computed in the workbench, and the fixture-or-real class read from the register before any signature.

What this does not prove