View source for The Principia Machina/TPS/4.2 Check classes and the check-class matrix

{{DISPLAYTITLE:4.2 Check classes and the check-class matrix (TPS 0.5.0)}}
''Instruction artifact, machine-optimized text: TPS, section 4.2 Check classes and the check-class matrix. Part of [[The Principia Machina/TPS|TPS]] and [[The Principia Machina/Hub|the TPM hub]]. Human-only edit (TPS 5.13). TPS 0.1.0 was declared final at revision 4 on 2026-09-22, a version declaration recorded in the foundations record; the chain begins at TPX's first landing (TPS 5.6.7). TPS 0.1.1, which changed only the status lines, was declared final on 2026-09-26, TPS 0.3.0, revision 6, on 2026-09-28, and TPS 0.4.0, revision 7, on 2026-09-30. This page is revision 8 of the tree, declared final as TPS 0.5.0 by H-DECL on 2026-10-03 (naming TPS_0.5.0.txt by its file digest and its D(TPS)); revision 7 is carried whole, and revision 5, proposed as 0.2.0, stays undeclared.'' The text below is this section of the TPS artifact at 0.5.0, verbatim; the whole artifact and its file digest are on [[The Principia Machina/TPS]]. Human readers: [[The Principia Machina/TPS/Contents|the contents page]] is the map.

<pre>
TPS 4.2  CHECK CLASSES AND THE CHECK-CLASS MATRIX
purpose: MECHANICAL and INSPECTION; the matrix with enforcement codes
         including PR; class with and without TPX; ratchet debt; every
         check publishes its class
governs: 4.2 | version: 0.5.0 (proposed) | class: instruction artifact
audience: operator, agent

4.2.1  Check classes are MECHANICAL and INSPECTION (see 1.1). Reading a
       status page and judging a match are INSPECTION. The manifest
       build and the digest gate are MECHANICAL when TPX runs them and
       INSPECTION when a CA-GTP without execution runs them; the
       difference is ratchet debt. [B-40] [I-038]
4.2.2  An enforcement column carries where the check is made to hold;
       the class is shown with TPX present and without it, and the
       difference is ratchet debt. [B-18]
4.2.3  Enforced by: PL protection level; GR group right; EC edit
       conflict; SC TPX, executing server-side in the request or in a
       job; AU audit; PR a rule the CA-GTP's instruction set enforces
       (see 1.1, 6.2). No row is enforced by an external script. [B-18]
       [I-087]
4.2.4  Row form: check; when | enforced by | class with / without TPX |
       on failure | source. MECH is MECHANICAL, INSP is INSPECTION;
       "same" means no ratchet debt. The source column cites the
       foundations record's decisions and sections (record ...) and
       TPS sections. [B-18]
4.2.5  THE CHECK-CLASS MATRIX [B-18]
       1   D(TFK) recomputed and matched before any container write.
           on write | SC | MECH / INSP | halt write; name zone | D5(g), D6
       2   D(TFK) equals the certificate.
           at CAC | SC | MECH / INSP | refuse certification | D6, D9
       3   Every page present; no hash collision; prefix unique.
           at build | SC | MECH / INSP | write nothing; sentinel | D9, D1
       4   Page hashes match the manifest (torn read).
           at read | SC | MECH / INSP | treat as STALE | D19
       5   Lock acquired by base-revision edit.
           on acquire | EC | MECH / same | edit rejected | D14
       6   Grant >= current and holder = pusher.
           at push | SC | MECH / INSP | refuse push | D14, S17
       7   Release only after final push.
           on release | SC | MECH / INSP | refuse release | D19
       8   Badge written last with chain line and manifest revision.
           at push | SC | MECH / INSP | no commit | D19, TBD 7
       9   Heartbeat never past 24 h from grant.
           on heartbeat | SC | MECH / INSP | refuse extension | D14
       10  Block ID valid and not EXPIRED.
           at landing | SC | MECH / INSP | refuse; 5.9 | D13(h), D18
       11  Expiry at ETA, definitional.
           at read | SC | MECH / INSP | show EXPIRED | D18
       12  Acquisition window elapsed.
           on release | SC | MECH / INSP | next waiter may acquire | D18
       13  Records within the leased range; unused reclaimed.
           at landing | SC | MECH / INSP | refuse out-of-range | D14,
           record 5
       14  Prefix unique across TPM.
           at CAC | SC | MECH / INSP | refuse certification | D1
       15  Help set complete; five parts per page.
           at build | SC | MECH / INSP | sentinel page | record 4.1
       16  No [background] source mark remains.
           at build | SC | MECH / INSP | refuse build; sentinel | record
           4.1
       17  TMS compliance C1, C2, C4.
           at CAC | SC when executable | MECH / INSP | refuse cert. | SR9
       18  TMS compliance C3, C5.
           at CAC | AU | INSP / same | refuse certification | SR9
       19  Regime assigned, L or M.
           at allocation | AU; SC when formal | INSP / same | refuse | SR3
       20  L-L contradiction.
           at audit | AU; SC when formal | INSP / same | strike, SR5 | SR3
       21  M-M contradiction after scale factor.
           on M write; at audit | SC | MECH / INSP | flag; SR5, SR6 | SR8
       22  a(r), s(r) from declared fields.
           on write | SC | MECH / INSP | refuse record lacking fields | SR4
       23  Assumptions atomic.
           at CAC | AU | INSP / same | named gap; audit | D16
       24  Independent contradictions counted.
           at audit | SC | MECH / INSP | audit at N_x | SR6
       25  Status page read; match judged.
           at landing | AU | INSP / same | corroboration or audit |
           record 5
       26  Coworker return vetted.
           at incorporation | PR | INSP / same | decision item | record
           5, S20
       27  TFK pages and instruction artifacts human-only.
           on edit | PL | MECH / same | edit rejected | record 5
       28  BUILD CHAIN and DECLARATIONS pages append-only.
           on edit | SC + AU, or edit filter | MECH / INSP | revert |
           record 4.4
       29  Retired container read-only.
           on edit | PL | MECH / same | edit rejected | D12
       30  Agent-facing help set human-only.
           on edit | PL | MECH / same | edit rejected | record 4.1
       31  Import right held by no one; landing is TPX's API only.
           on push | GR | MECH / same | import rejected | D19, D21, D32
       32  Certification canary refused and reported.
           live, unannounced | AU + SC planting | INSP / same |
           membership removed; decision item | D22
       33  Presented D(IS) matches the published value.
           at petition; at push | SC | MECH / INSP | refuse push; flag
           NEEDS RECERTIFICATION | D23, CR9
       34  Kernel tests T1-T6 pass.
           at instantiation, TPK zone | SC when the body lands; AU until
           then | MECH / INSP | refuse component; return to author |
           2.2, DI-4.1 [AUTHORED]
       35  The four isomorphism checks pass.
           at instantiation, TrM zone | SC when the body lands; AU until
           then | MECH / INSP | refuse component; return to author |
           2.3, DI-4.1 [AUTHORED]
       36  Declared TPS version is the published one.
           at push | SC | MECH / INSP | refuse push | F2, 6.1 [AUTHORED]
       37  TrM TOTAL, SURJECTIVE, INJECTIVE, modulo EQUIVALENCE.
           at zone entry; at CAC | SC | MECH / INSP | refuse component;
           return to author | 2.3.12, D39.1 [AUTHORED]
       38  Dimensional homogeneity of each identification.
           at zone entry; at CAC | SC | MECH / INSP | refuse component |
           2.3.13, D39.1 [AUTHORED]
       39  STRUCTURE-PRESERVING against SIGNATURE.
           at zone entry; at CAC | SC when SIGNATURE is executable, else
           AU | MECH / INSP | refuse component | 2.3.14, D39.1
           [AUTHORED]
       40  FALSIFIER invariant under TRANSFORMATIONS.
           at zone entry; at CAC | AU | INSP / same | refuse component |
           2.3.15, D39.1 [AUTHORED]
       41  Cross-entry M-M test or SR8 scale refused.
           at audit | SC | MECH / INSP | refuse the test | SR3, SR8,
           D40.1 [AUTHORED]
       42  Values normalized by DIMENSION and a declared TRANSFORMATION
           before the test.
           at audit | SC | MECH / INSP | refuse the test | SR3, D40.1
           [AUTHORED]
       43  A convention difference no declared TRANSFORMATION covers.
           at audit | SC | MECH / INSP | audit block | SR3, D40.1
           [AUTHORED]
       44  INDEPENDENCE filled; SAME-MODEL set.
           at landing of a corroboration | SC | MECH / INSP | refuse the
           landing | 3.3.8, 3.3.10, D42.1 [AUTHORED]
       45  REPRODUCTION staging write stamped with server time and
           content hash before any match judgment.
           on the staging write | SC | MECH / INSP | no match judgment |
           5.9, D42.1 [AUTHORED]
       46  Presented values recomputed by TPX.
           at landing | SC | MECH / INSP | refuse; log; decision item |
           5.3, D43.1 [AUTHORED]
       47  TPC coverage: every function has vectors and exists in both
           residences.
           at build | SC | MECH / INSP | build refused | 5.1, D43.1
           [AUTHORED]
       48  Writer is on the access list when the UWC is CLOSED.
           on every agent write | SC | MECH / INSP | refuse write |
           5.16, D52 [AUTHORED]
       49  Access-list entry is also in the agent group.
           on list write; at petition | SC | MECH / INSP | refuse
           entry; refuse petition | 5.16, D52 [AUTHORED]
       50  Canary outcome recorded with its gradient steepness and
           probe type.
           at scoring | SC | MECH / INSP | outcome not counted |
           5.17, D50 [AUTHORED]
       51  Failure-detail page read only by the declaring authority or
           the human operator.
           on read, every path | SC | MECH / none, the class holding
           no data without TPX | refuse read | 5.18, D56 [AUTHORED]
       52  Every read path to the failure-detail namespace enumerated
           and tested refused.
           before the class holds data | AU | INSP / same | class
           stays empty | 5.18, D56 [AUTHORED]
       53  HELD written into every record in the hold scope and its
           closure; a HOLD record with cause and list, never empty.
           at a failed canary | SC | MECH / INSP | hold not written;
           alert | 3.2.10, 3.3.11, 3.3.13, CR6, D111.1 [AUTHORED]
       54  RELEASE only on an eligible reproduction: not the held
           account, not SAME-MODEL by flag or snapshot, origin
           REPRODUCTION BLOCK; closure recomputed; nothing released is
           refused.
           at a match | SC | MECH / INSP | refuse release | 3.3.12,
           3.3.15, D111.1 [AUTHORED]
       55  UNIT parsed under the unit grammar and checked against its
           DIMENSION: a CONSTANT's, a FIX CONSTRAINT's, an M record's
           QUANTITY entry's.
           at zone entry; on M write | SC | MECH / INSP | refuse
           component; refuse record | 2.2.9, 2.2.10, 3.2.9, 3.2.11,
           D103.1, D104.1 [AUTHORED]
       56  Execution challenge answered by executed TPC-PY.
           at petition; at push | SC | MECH / INSP | REASONED recorded;
           every presented value refused | 5.3.19, D101.1 [AUTHORED]
       57  Text safety: no disallowed code point in any string; a zone
           or a declared form that does not parse refused, never
           altered.
           at zone entry; on every write | SC | MECH / INSP | refuse
           component; name it | 2.5.13, 2.5.14, D99.1, D132.1
           [AUTHORED]
       58  A reproduction compared with its target: L by canonical
           equality, M by SR3 with the u_c difference noted; MATCH or
           NON-CORROBORATION logged with the difference.
           at landing of a reproduction | SC | MECH / INSP | outcome not
           counted | 5.9.7, 5.9.12, D120.1 [AUTHORED]
       59  FINGERPRINT derived by TPX at certification and resolved on
           every call; never accepted from a caller.
           at certification; on every call | SC | MECH / INSP | refuse
           the call | 5.3.27, CR3, D127.1 [AUTHORED]
       60  USER and AGENT class enforced: the agent API refuses a USER;
           an AGENT holds no web-edit right, cannot sponsor and cannot
           be certified as a USER.
           on every call; on every write | SC | MECH / INSP | refuse |
           5.13.6, D127.1 [AUTHORED]
       61  Reliability state computed from pending items; SUSPENDED and
           the trip suspend the landing API.
           at every resolved event; at every pending item | SC | MECH /
           INSP | landing API suspended pending declaration | CR11,
           D122.1, D129.1 [AUTHORED]
       62  VOLUNTEER answered under the token bucket, the backoff and
           the throttle; every answer carries RETRY AFTER.
           on the call | SC | MECH / INSP | REFUSED with RETRY AFTER |
           5.9.14, D126.1 [AUTHORED]
4.2.6  Ratchet debt at the first revision was 24 of 36 rows; the
       count after this revision is at 4.2.9. [B-18]

4.2.7  Every check publishes its class (see 5.3). Every SC row is a TPX
       obligation (see 5.3). [B-18]
4.2.8  AMENDMENTS to the rows above, by this revision: row 19, regime
       assignment, and row 22, a(r) and s(r) from declared fields, now
       read over ASSUMPTION RECORD identifiers and are MECHANICAL for
       a(r), the SR5 locus and SR6 disjointness; row 23, assumption
       atomicity, moves from "at CAC" to "at allocation of the
       assumption record" and stays INSPECTION; row 24, independent
       contradictions counted, computes over identifier sets. [D41.2]
4.2.9  Ratchet debt after revision 4: rows 1-4, 6-17, 21, 22, 24, 28,
       33-39, 41-50 read MECH / INSP, 37 of 52 (corrected at revision 5:
       the count "38 of 52" had listed row 40 twice). Rows 18, 19, 20,
       23, 25, 26, 32, 40, 52 are INSPECTION by nature; rows 5, 27, 29,
       30, 31 carry no debt; row 51 has no fallback class, the class
       holding no data without TPX. [AUTHORED]
4.2.10 AMENDMENTS to the rows above, by revision 5. Row 32, the canary,
       reads over probes: a CANARY is refused and reported, a PARROT is
       reproduced (5.17.2). Row 34, kernel tests: T1, T2's syntactic
       part and T5 are SC as the TPK is entered; T3 over the CONSTRAINT
       entries is SC at the final pass; T4's law half, T6's totality
       and the names check are SC where a LAW carries EQUATION or a
       BOUNDARY carries CONDITION, and T3 over laws is SC to the ground
       fragment at depth 1; the rest is AU, INSPECTION by H-DECL
       (2.2.3, 2.2.12-2.2.18). Row 35, isomorphism checks: IC1, IC2,
       IC3, IC4 (b), the necessary part of IC4 (c) and CODOMAIN are SC
       as the TrM is entered, IC4 (a) SC where a SIGNATURE carries
       FORM and IMAGE_FORM; IC4 (c)'s sufficiency and IC5 are AU
       (2.3.12-2.3.14, 2.3.19). Row 42, normalization, is to coherent
       SI under the unit grammar (3.2.11, 4.4.4); a dimension
       difference refuses the test. Row 43, a convention difference,
       is returned as CONVENTION by the KIND check (4.4.11). Row 44,
       INDEPENDENCE, gains NOT SERVED BEFORE and SAME-SPONSOR (3.3.8).
       Row 50 records with every probe its kind, source class, arm and
       parameters, tier and burst state, the ratio in force and the
       account's reset state (5.17.10). Rows 51 and 52 read over the
       whole restricted class, the score, user and override detail
       pages included, and row 51 admits the account a page title names
       when that user's DOSSIER READ allows (5.18.10, 5.18.11).
       [D103.1] [D105.1] [D106.1] [D107.1] [D108.1] [D118.1] [D120.1]
       [D122.1] [D127.1] [D132.1]
4.2.11 Ratchet debt after revision 5: rows 1-4, 6-17, 21, 22, 24, 28,
       33-39, 41-50, 53-62 read MECH / INSP, 47 of 62. Rows 18, 19, 20,
       23, 25, 26, 32, 40, 52 are INSPECTION by nature; rows 5, 27, 29,
       30, 31 carry no debt; row 51 has no fallback class. [AUTHORED]
4.2.12 AMENDMENTS by revision 6 (D182.1). Three rows are added to the
       matrix of 4.2.5, rows 63 to 65:
       63  HARNESS MODE not EXTERNAL outside the synthetic UWC and the
           sandboxes.
           at petition and push | SC | MECH / INSP | refuse, reason
           HARNESS | D182.1, 5.4.17
       64  PROMPT MANIFEST and SESSION LOG HEAD recorded.
           at petition and push | SC | MECH / INSP | record only; never
           a refusal | D182.1, 5.8.12
       65  Conformance probe scored.
           on the probe's push, return or call | SC | MECH / INSP |
           stratum FAIL; sponsor pointer; no adverse act | D182.1,
           5.17.18
       PRB's own checks (the bundle's verification, the zone cap, the
       live tool list) run on the agent's machine and take no row:
       this matrix lists what TPX or the platform enforces; they are
       PRB's client specification (C-20). [D182.1]
4.2.13 AMENDMENT to row 21, by revision 6 (D180.3): for an M record of a
       quantity identified with a DOF no FIX CONSTRAINT targets, row 21
       is INSPECTION until C-16 (4.4.13); for every other M record it
       stays as written. Ended by revision 7 (D196.1): row 21 reads as
       4.2.17 states, over equal CONDITIONS (4.4.13). [D180.3] [D196.1]
4.2.14 AMENDMENTS by revision 6 (D176.1, D177.1). Five rows are added
       to the matrix of 4.2.5, rows 66 to 70:
       66  Structure check and class at the final pass; nothing
           refused.
           at the final pass | SC | MECH / INSP | UNDER a named gap
           opening EOM-0 under STRUCTURE_CHECK ON; the other findings
           and lines listed for H-DECL; the class on the STRUCTURE
           LINE | D176.1, 2.2.20
       67  The STRUCTURE LINE never rewritten.
           on every write to the certificate, the manifest and the
           library page | SC | MECH / INSP | refuse the write |
           D176.1, 5.5.3
       68  While EOM-0 is OPEN, a PUSH of another KIND refused; the
           settlement checked.
           at push | SC | MECH / INSP | refuse, reason EOM-0 OPEN;
           close EOM-0 when every UNDER unknown is settled | D176.1,
           3.3.16
       69  STRUCTURE TEST WITH REGISTER run and its line kept; LAPSED
           when a record it used stops standing.
           after a landing that adds a record with a ROLE or changes a
           used record's status; on request | SC | MECH / INSP |
           information only; LAPSED, then re-run | D176.1, 5.3.47
       70  The structure check's questions answered.
           at instantiation | AU | INSP / same | H-DECL declines to
           declare | D176.1, 2.2.20
       Row 34 reads also over T1's ROLE grammar, EOM's NAME and the D
       VARIABLE rules as the TPK is entered, and T4's law half over D(x,
       s, n) (2.2.6, 2.2.13, 2.2.15). Rows 68 and 69 read as 4.2.17
       amends them. The count after revision 6 is at 4.2.15. [D176.1]
       [D177.1] [D198.1]
4.2.15 Ratchet debt after revision 6: rows 1-4, 6-17, 21, 22, 24, 28,
       33-39, 41-50, 53-69, 71-74 read MECH / INSP, 58 of 76; row 21 is
       INSPECTION for the M records of 4.4.13 until C-16 (4.2.13). Rows
       18, 19, 20, 23, 25, 26, 32, 40, 52, 70, 75 and 76 are INSPECTION
       by nature; rows 5, 27, 29, 30, 31 carry no debt; row 51 has no
       fallback class. [AUTHORED] [D178.1]
4.2.16 AMENDMENTS by revision 6 (D178.1). Six rows are added to the
       matrix of 4.2.5, rows 71 to 76:
       71  The interview answered: NONE exclusive; the answer bound to
           the CATALOGUE STATE it covered, the delta answered; a new
           claim of a version not OFFERED refused, a PINNED or CARRIED
           claim and a MODIFIED ID admitted; an EXCLUDES pair refused.
           as the draft is written; before the final pass and within it
           | SC | MECH / INSP | refuse; no final pass | D178.1, S48,
           S50, 5.22.4, 5.22.5
       72  MODULES USED re-expanded from the declared texts and matched
           against the draft's TPK.
           at the final pass | SC | MECH / INSP | refuse, MISMATCH |
           D178.1, 5.22.8
       73  A MODULE DECLARATION applied to the CATALOGUE STATE.
           on the declaration form | SC | MECH / INSP | the form refuses
           the act | D178.1, 5.22.10
       74  An ENVIRONMENT MODULE text checked before MODULE ADD or
           MODULE VERSION, and a proposal on receipt: its TEST BINDINGS,
           its references and its pairs with the OFFERED versions.
           before the declaration; on a proposal | SC | MECH / INSP |
           the form refuses the act; the proposal page shows FAIL |
           D178.1, 5.22.11, 5.22.13
       75  Each ASSUMPTION an ENVIRONMENT MODULE version writes states
           one claim, and each SHARED PARAMETER its declaration raises
           names one quantity.
           once per version, at its declaration | AU | INSP / same |
           H-DECL declines to declare | D178.1, D41.2, S51, 5.22.11
       76  H-DECL's questions at the gate answered: the closed-world
           question and each claimed WITHDRAWN version's.
           at the final pass, before the declaration | AU | INSP / same
           | H-DECL declines to declare | D178.1, 5.22.6, 5.22.14
       Row 34's checks read the expanded TPK as any TPK (5.22.7); PRB
       and the agent write no expansion, so no row is PRB's. The count
       after revision 6 is at 4.2.15. [D178.1]
4.2.17 AMENDMENTS by revision 7 (D192.2-D201.1). Rows of 4.2.5 read: row
       19, the table's REGIME rules (L or M on a RESULT, M on a
       VERIFICATION, absent on every other class) refuse at landing,
       MECHANICAL, the assignment's judgment staying INSPECTION; row 21,
       MECH / INSP over the pairs comparison_set admits, equal
       CONDITIONS (4.4.13), every other pair INSPECTION through
       sr3_scope; row 22, the declared fields are ASSUMPTIONS, CITES and
       DERIVATION.STEPS; row 55, also over each BUDGET component's UNIT,
       a VERIFICATION's EXTERNAL UNIT, a SITUATION record's UNIT against
       its DOF and each AT point's UNIT against its DOF; row 58, L by
       the pair l_finding_pair chooses, EQUATION, else VALUE with UNIT,
       else the STATEMENT's canonical text, each MECHANICAL; row 68, the
       settlement MECHANICAL by settlement_check, a naming for a record
       without a form the lead's INSPECTION; row 69, its register part
       reads the standing records whose declared form carries a ROLE.
       Seven rows are added to the matrix of 4.2.5, rows 77 to 83:
       77  Record checked against the table on write.
           at push (PRB, advisory) and at landing | SC | MECH / INSP |
           refuse the record, code named | D192.2, 3.2.21
       78  U_C is the root sum of squares of BUDGET.
           at landing | SC | MECH / INSP | refuse; INSPECTION when
           correlated or a component unit not a power of ten | D195.3,
           3.2.5
       79  A record's declared form checked: EQUATION, ROLE and
           DOMAIN_CONDITION over REFS.
           at landing | SC | MECH / INSP | refuse | D198.1, D197.2,
           3.2.19
       80  A withdrawal's cascade written with it; a citation of a
           record that does not stand refused.
           at the withdrawal; at landing | SC | MECH / INSP | refuse |
           D194.1, 3.3.3
       81  A VERIFICATION lands after its TARGET's push; its DIFFERENCE
           recomputed.
           at landing | SC | MECH / INSP | refuse | D200.1, 3.3.6
       82  Promotion's conditions evaluated at each landing.
           at landing | SC | MECH / INSP | not promoted | D201.1, 3.2.12
       83  CONDITIONS computed; SR3 and SR8 run over equal CONDITIONS.
           at audit; on M write | SC | MECH / INSP | the pair listed for
           row 21's INSPECTION | D196.1, 4.4.13
       The count after revision 7 is at 4.2.18. [D192.2] [D194.1]
       [D195.3] [D196.1] [D197.2] [D198.1] [D200.1] [D201.1]
4.2.18 Ratchet debt after revision 7: rows 1-4, 6-17, 21, 22, 24, 28,
       33-39, 41-50, 53-69, 71-74, 77-83 read MECH / INSP, 65 of 83; row
       21's interim and rows 68 and 69's register caveat are gone. Rows
       18, 19, 20, 23, 25, 26, 32, 40, 52, 70, 75 and 76 are INSPECTION
       by nature; rows 5, 27, 29, 30, 31 carry no debt; row 51 has no
       fallback class. [AUTHORED] [D192.2]
</pre>

[[Category:The Principia Machina]]