The Principia Machina/TPS/8.2 Decision bases and excluded alternatives

Instruction artifact, machine-optimized text: TPS, section 8.2 Decision bases and excluded alternatives. Part of TPS and the TPM hub. Human-only edit (TPS 5.13). TPS 0.1.0 was declared final at revision 4 on 2026-09-22, a version declaration recorded in the foundations record; the chain begins at TPX's first landing (TPS 5.6.7). TPS 0.1.1, which changed only the status lines, was declared final on 2026-09-26, TPS 0.3.0, revision 6, on 2026-09-28, and TPS 0.4.0, revision 7, on 2026-09-30. This page is revision 8 of the tree, declared final as TPS 0.5.0 by H-DECL on 2026-10-03 (naming TPS_0.5.0.txt by its file digest and its D(TPS)); revision 7 is carried whole, and revision 5, proposed as 0.2.0, stays undeclared. The text below is this section of the TPS artifact at 0.5.0, verbatim; the whole artifact and its file digest are on The Principia Machina/TPS. Human readers: the contents page is the map.

TPS 8.2  DECISION BASES AND EXCLUDED ALTERNATIVES
purpose: for each decision the basis and the alternatives excluded,
         with the measure that excluded them
governs: 8.2 | version: 0.5.0 (proposed) | class: instruction artifact
audience: operator

BASIS 8.2.0  Every decision below was ranked on the measures of 1.4;
       "soundness" and "completeness" name the defect kind that decided
       the exclusion, and "R2" and "R3" name the measure. The full text
       of each item is in the record's section 3. [I-010]
BASIS D1  RECORD IDENTIFIER AND LAYER NAME, resolved D1.1. Per-container
       identifier space; RR-1..RR-855 import unchanged; a cross-container
       citation carries the prefix by construction. [B-01]
BASIS D2  MAP TYPE IN THE TRANSLATION MANIFOLD, D2.1. Isomorphism only;
       the restriction is priced in the TPK, not the entry. Excluded: a
       RESTRICTION object relating two containers, by the sealing of
       containers. [B-02]
BASIS D3  THE WORD "DOMAIN", D3.1. DOMAIN keeps the guide's meaning.
       Basis: both BFP historical errors were domain elisions at
       promotion (guide C5), so the field and its anchor to that failure
       history are kept. [B-03]
BASIS D4  TWO RANKING RULES. Settled by the ranking rule; amended by
       D15: machinery ranked by the measures of 1.4, physics by each
       container's TMS. [I-010]
BASIS D5  TPK IMMUTABILITY WITH COPY-FORWARD, D5.2 and reopen. Fixed by
       constraint: the TPK is immutable. Excluded: copy with tags intact
       and citable at once (soundness); inherited records keeping
       predecessor identifiers (soundness; one identifier, two records;
       collides with D1); digest verified at CAC only (soundness; writes
       accepted against a modified TPK between audits). [B-04]
BASIS D6  TFK SCOPE AND DIGEST STRUCTURE, D6.1, amended D15. Basis of
       the third zone: a yardstick-only successor stays distinguishable
       from a physics-changed one; placing the TMS inside the TPK would
       have omitted that case (completeness). [B-05] [B-13]
BASIS D7  THE TERM FOR THE IMMUTABLE FOUNDATION, D7.1, amended D17.
       STATIC rejected (collides with statics). FIXED rejected (collides
       with "held fixed", with "fixed field", and with ordinary use).
       "Immutable unit" retired by D17 in favor of TFK. [B-06]
BASIS D8  ESCALATION REACHABILITY, D8.2 plus constraint. A local
       working instance; a session works locally and pushes when the
       wiki is reachable; page identity by title plus content hash,
       applied without pause. [B-07]
BASIS D9  MANIFEST CONSTRUCTION, D9.1, amended D21, D32. Excluded: a
       hand-transcribed digest is not a digest. [B-08]
BASIS D10 REFRESH TRIGGER, D10.1 and .2, amended D19, D32. The daily
       push withdrawn; landing on demand through TPX. [I-052] [I-120]
BASIS D11 INDEX SCOPE, D11.1 plus addition. One index, all classes; a
       library page per container and a central hub with one entry point
       per audience. [B-09]
BASIS D12 RETIRED CONTAINERS, D12.1. The index grows monotonically.
       [B-10]
BASIS D13 LANDING, D13.2, reopened twice, D13.1 twice, amended D18. The
       block ID as fencing token; expiry definitional; recommission with
       a back-pointer; the corroboration record. [B-11]
BASIS D14 WORKSPACE MUTEX, D14.1, amended D18, D19, D32. Excluded: lock
       plus timeout without fencing; a stalled lead's late push
       overwrites a successor's work (soundness). Amended: a client-side
       check is no longer a check anywhere in TPM. [B-12]
BASIS D15 STRIKE CRITERIA: SITE AND STRUCTURE, D15.1 plus A1-A3, S6 by
       S6.1. Reopened on the constraint that the strike rule be generic
       across TPM, mathematically precise, grounded in Popper, and
       researched against the literature. Excluded: an overridable
       default TMS template (a container could relax (i); soundness);
       closing on the round-1 proposal alone (foreclosed by the generic
       constraint). [B-13]
BASIS D16 STRIKE RULE CONTENT, D16.1, after a research round (8.3 group
       H). Basis by source: SR1-SR2 Popper sect. 3, 6; SR3 GUM; SR4
       parameter counting (Popper sect. 38, 43; Akaike; Schwarz; Forster
       and Sober), depth admitted only under a declared convention (Cook
       and Reckhow), Kolmogorov complexity excluded as uncomputable (Li
       and Vitanyi); SR5 Duhem-Quine underdetermination resolved by
       distance; SR6 Popper sect. 22 reproducibility, Laplace-Hume
       proportionality through a container raising N_x; SR7 the
       declaration that mathematics and logic are the gold standard; SR8
       PDG and CODATA practice against the record of underestimated
       uncertainties (Henrion and Fischhoff; Youden; Feynman), Lyons as
       why k is declared per container. Structural result: distance and
       contradiction count are incommensurable, and every established
       parsimony measure is a count or a code length, never a weighted
       blend. The golden ratio as a candidate weight has no principled
       basis in the literature (REFUTED, S47) and survives only as a
       declarable convention. Excluded: derivation depth as the primary
       measure (soundness); automatic reversal on reaching N_x in the L
       regime (soundness); Kolmogorov or MDL distance now (uncomputable,
       or requires an undeclared formal language; MDL admissible later
       as a local yardstick under A1); a scalar weight of distance
       against count, golden ratio included. [B-14]
BASIS D17 NAMES FOR THE THREE ZONES AND THE FULL KERNEL, D17.1
       augmented. TPK for MTX; TMS for MEASURE SET; TFK for "immutable
       unit". Withdrawn: The Formalism Kernel; The Verification Tensor
       (collides with a physics term of art); Result Grading Unit
       (would imply ownership of the GRADE field); The Conceptual Kernel
       (would give "conceptual" a second meaning). [B-15]
BASIS D18 COLLABORATION PAGE FORM, D18.1. Basis: silence-expiry lands
       nothing wrong, and a heartbeat adds no safety, only a channel that
       can mislead (S17, S18). Two defects found and fixed: expiry made
       definitional; the acquisition window bounds a dead queue head.
       Excluded: petitioner heartbeat (no safety gain); WORKLOAD and ETA
       copied into the assignment row (two copies of ETA; completeness);
       expiry by marking only (soundness). [B-16]
BASIS D19 STALENESS RULE, D19.1, amended D23, D32. Basis: staleness
       attaches only while a lock is held; "always stale" would leave no
       realizable CURRENT state (completeness); release-after-push closes
       the case of unpushed work; the badge written last lets a reader
       detect a torn read (soundness); the three states map onto the
       three citation levels exactly. Excluded: a minimal badge of holder
       and last push (a mid-push read accepted as current; soundness);
       HOLDER SILENT folded into STALE (completeness). [B-17]
BASIS D20 CHECK-CLASS MATRIX, D20.1, amended D32. A third class for
       platform-enforced checks was not selected: the enforcement column
       carries the distinction. [B-18]
BASIS D21 PERMISSIONS TABLE, D21.1, amended D26, D32. Resolves the
       two-owner defect of the round-1 chain page: the chain is two
       pages. Excluded: one chain page, agent-appendable, carrying
       declarations (unsound without a verified edit filter); a
       human-only chain page fed by hand-copied build lines; agents
       drafting help pages directly to the live sets. [B-19]
BASIS D22 AI CERTIFICATION, D22.1, after a research round (8.3 group
       I). At the time 27 of 32 checks rested on the agent; with TPX,
       seven still do, plus the untrusted-input rules. No standard
       certifies a deployed agent's behavior; every evaluator disclaims
       guarantees; tests saturate and leak; behavior drifts behind a
       model name; injection is unsolved at the model level. Excluded:
       certification as a guarantee or as the sole gate (soundness);
       public benchmarks as the suite; certification bound to a model
       alias; no certification (completeness). [B-20]
BASIS D23 INSTRUCTION SET DIGEST, D23.1; amended by D37.1. Warrant:
       version currency and honest drift only; the digest is
       self-reported and the artifacts are public. Excluded: reading a
       match as evidence of self-constraint (soundness); a digest
       computed by hand; a challenge-response proof of possession;
       PMP-TPM and its named skills only, presented at petition only
       (completeness). [B-21]
BASIS D24 VALIDATION OF PMP-TPM 0.1.0. OPERATIONAL; outcome carried
       VERIFY; an implementation matter, not a TPS item. [B-22]
BASIS D25 NEW-CONTAINER PAGE, D25.1. Full CAC gate, declaration before
       initialization. Excluded: initialization before declaration in a
       PENDING state (a container never declared holds a UUID and prefix
       with no expiry or retirement path; completeness); a TMS-only gate
       with TPK and TrM checked later (soundness); a hand-assigned UUID
       or prefix. [B-23]
BASIS D26 TFK AUTHORING SURFACE BEFORE INSTANTIATION, D26.1. Excluded:
       reuse of the staging subpage class (keyed by container, and none
       exists yet; completeness); H-DECL hand-transcribing
       agent-proposed TFK content (worst R2). [B-23]
BASIS D27 TBD 1 CLOSURE, D27.1. The register's creation after the UUID
       leaves the collision nothing to stand on. Excluded: keeping TBD 1
       open (one further round; R3). [B-23]
BASIS D28 UUID GENERATION RESOURCE, D28.1. GlobalIdGenerator v4 under
       RFC 9562. Excluded: version 1 (embeds node identity; privacy);
       version 7 (index locality unused by page titles; pins the
       runtime); the host runtime's generator (tied on all three, not
       selected because the back end is in-wiki); the deprecated
       UIDGenerator. [B-23]
BASIS D29 FORM MECHANISM FOR THE NEW-CONTAINER PAGE, D29.1; extended by
       D32. Refusing a failed component before save is possible only
       inside MediaWiki. Excluded: Page Forms with an external back end
       invoking the CAC after save (refusal post-save; a second
       field-check vocabulary; completeness; a third-party dependency);
       no form layer (worst R2); plain wikitext TFK pages parsed
       heuristically (soundness). [B-23] [B-24]
BASIS D30, D31 WITHDRAWN. The upload decoder and its name; the numbers
       are reserved and not reused; replaced by the local-AI path
       (5.5.7). [B-25]
BASIS D32 PLACEMENT OF DETERMINISTIC RESPONSIBILITY, D32.1. Limits
       recorded: PHP work lives inside a web request; no daemons and no
       cross-page transactions; deferred updates hide failure and are
       barred from critical writes; external binaries run only under
       the shell framework's limits or Shellbox. Excluded: the lock in a
       TPX table (lock transitions leave page history unless separately
       logged; completeness); the earlier split with fencing, manifest,
       badge and canaries in external scripts (a client-side fencing
       check lets the wiki accept a stale push from a non-compliant
       client; soundness under CR2). [B-26]
BASIS D33 NAMES OF THE THREE PARTS, D33.1. Excluded: the extension as a
       sixth layer (the five-layer count recurs; completeness). [B-26]
BASIS 8.2.1  The collaboration mechanics were first stated as user
       requirements (a mutex; the holder as LEAD; coworker takeover on
       release; return of the mutex when idle before maintenance; a
       24-hour bound); D14, D18 and D19 fixed the mechanics, and D32
       withdrew the daily push. [B-34]
BASIS 8.2.2  The strike criteria were first stated as requirements:
       grounded in Popper; an immutable object cannot be contradicted by
       the container's own research objects; between inconsistent
       objects the advantage goes to the one closest to the immutables,
       by steps of computation or by added assumptions; an extraordinary
       case is needed for a more distant object to prevail; the
       weighting to be objective and researched; mathematical precision
       and logical consistency the gold standard, error bars for
       measured results. D15 and D16 fixed the rule. [B-37]
BASIS D39.1  TrM SKELETON. The TMS had a skeleton, per-container
       parameters and compliance tests; the TrM had none of the three.
       STRUCTURE-PRESERVING has no meaning until the structure is
       named; an isomorphism needs two declared objects and only the
       DOF inventory was declared; INJECTIVE needs sameness on the
       target side. Excluded: a contract held outside D(TrM), since
       meaning could then change without moving D(TFK); a per-entry
       EXCLUSIONS field, which contradicts D2.1. Not selected: leaving
       the question to the guide, which leaves the H-DECL gates judging
       against an undeclared criterion; a per-entry contract, which
       gives structure spanning entries no site.
BASIS D40.1  "ONE QUANTITY". SR8 scaled "standing M records of one
       quantity" and SR3 subtracted one value from another, with
       nothing saying when two records are of one quantity or share a
       unit and convention. That identity can come only from the TrM.
       Not selected: routing it to the register piece with no rule now;
       sameness judged by inspection at each test, which supplies no
       criterion.
BASIS D41.2  STRIKE RULE HARDENING. SR4 counted distinct ASSUMPTIONS
       with no identity rule: bundling lowered a(r), and one assumption
       in two wordings made two contradictions look independent and
       corrupted the SR5 locus. SR6 bounds the damage because reaching
       N_x opens an audit and never strikes. Not selected: the full
       fix, a closure-based s(r) with an SR9 test for rank invariance
       under split, merge, cite-versus-inline and relabel; the corpus
       alone. Excluded: identical ranking under every semantically
       equivalent representation, not attainable by a computable count,
       on the basis that excluded Kolmogorov and MDL distance at D16.
BASIS D42.1 with D44.1  CORROBORATION INDEPENDENCE. "Independent second
       agent" meant only a second account, and the only corroboration
       path was accidental: a refused result for the same work block,
       with the applicant judging its own match. Not selected: the
       attested vector as display only; an eight-dimension vector
       filled by the agent, five of whose fields nothing can verify.
BASIS D43.1 with D47.1  TPC AND BUILD ORDER. A second implementation in
       another language catches what PHP-common behavior hides, such as
       serialization defaults and float-to-string conversion, and
       serialization drift is the named failure of hash chains; PRB
       owed agent-side digests anyway. "Calculator" because "core" sits
       on kernel in meaning and MediaWiki core is standing usage, and
       because a reference implementation conventionally wins a
       disagreement while this one has no authority. Excluded: TPX
       invoking Python on the host, which contradicts the placement
       rule and depends on shell execution a shared host may not grant;
       a distributed binary, which has no verifiable correspondence to
       its source. Not selected: PHP alone; a narrow non-PHP
       cross-check; an unpublished oracle; the strict sequence that
       freezes TPS and builds TPX last, whose recovery steps have no
       substrate before TPX exists.
BASIS D46.1  This revision lands in the same page tree because the
       genesis line is not yet landed; once it is, the next change is a
       new version (see 0.1.3, 5.11.2).
BASIS D48  CA-GTP AND THE WORK PIPELINE, D48. Basis: complete mediation
       - a mediator that cannot be bypassed is the only checking
       resource a non-compliant client cannot defeat, which is 5.1's
       placement argument applied to the register rather than the push.
       Excluded: a CA-GTP initializing as lead by default (contradicts
       the collaboration mechanics of 5.7 and 5.8; completeness); the
       agent writing the register with TPX auditing afterwards (a
       client-side check is no check; soundness); naming the certified
       agent GTP (conflates the instruction set with the party).
BASIS D49  CANARY DELIVERY BY SPIKED READ, D49. Basis: a decoy is
       effective in proportion to its believability, and is
       differentiable to the defender only. Excluded: planting probes
       as page content on staging and return pages (every plant is a
       revision, so the history is a published list of canaries;
       soundness); announcing a probe rate per account (turns
       continuous certification back into a test window, which CR2's
       sources find agents detect).
BASIS D50  CANARY GENERATION, D50. Basis: moving target defense -
       randomizing the configuration is half the defense and
       randomizing the reconfiguration interval the other half, a fixed
       period being itself a fingerprint; a randomization space
       including weak configurations is worse than a fixed strong one;
       maximum entropy on a bounded interval; distance-weighted
       importance sampling; BM25 as the distance; known-fault injection
       as the way to verify a checker. Excluded: an off-site model
       shaping probes (content leaves the wiki; excluded by 1.3 and
       6.2); a local model shaping them (admissible and not defective,
       but it adds a generative distribution to fingerprint, enlarges
       what must be trusted, and makes provenance unauditable);
       single-UWC sampling (smaller corpus, easier to model); a fixed
       theta (converges to an estimable constant); a fixed rotation
       period (synchronizable).
BASIS D51  THE SCORECARD, D51. Basis: continuous monitoring requires
       automated collection, a defined cadence, a defined recipient
       role and an actionable output; a monitoring record is forwarded
       off the host that generates it; alert fatigue under a low base
       rate; the zero-failure confidence bound; the sequential test.
       Excluded: failure detail sent in full on the alert channel (one
       message discloses a probe of the suite; soundness); failure
       detail published (the same disclosure, permanently); failure
       detail held only off-wiki (outside the system of record;
       completeness); a full report every period regardless (trains the
       reader to skim); no heartbeat in quiet periods (a silent channel
       and a broken one are indistinguishable).
BASIS D52  UWC ACCESS POLICY, D52. Basis: the access matrix; role-based
       access control with a per-object list; least privilege, complete
       mediation and economy of mechanism, the last being why the
       CLOSED predicate is stated once. Excluded: a disjunctive rule,
       list or group (a list could authorize an uncertified agent;
       soundness); the declaring authority owning every access list (no
       security gain under the conjunctive rule; worst error
       opportunity); the policy immutable at instantiation (forces a
       copy-forward for a team change, which changes the UUID and
       prefix for no correctness reason); gating read as well as write
       (breaks 1.3 and makes 5.17's corpus a covert channel).
BASIS D53  CERTIFICATION AS A CANDIDATE CERTIFICATE, D53. Basis:
       certification rules require human judgment and are not
       mechanizable; enforcement rules are executed by the system. 5.6
       was already an instance of that split. Excluded: TPX making the
       admission decision (contradicts CR1, CR4, CR5 and CR6;
       soundness); leaving suite execution and scoring with the human
       (worst error opportunity, and a hand-scored probe is the
       hand-transcribed digest in another form).
BASIS D54  THE VERSION-AGNOSTIC TREE, D54. Basis: generalizes D46.1
       from one revision to a standing rule. Excluded: a version in the
       page title (every revision spawns a tree, every cross-reference
       rewrites, and a reader cannot tell a current page from a
       superseded one by its title).
BASIS D55  HISTORY-PRESERVING MIGRATION, D55. Basis: the platform's own
       move form states that a rename moves all of a page's history to
       the new title and leaves a redirect, so renaming preserves
       history and the operation that loses it is a delete followed by a
       reimport, whose deleted revisions reach the archive table and
       return only by a manual administrator undelete. The stronger
       ground for 7.2.8 follows: a version-free title makes the page's
       revision history the version history, so the platform's own
       mechanism is used rather than duplicated. Excluded: delete and
       reimport, the order first written (destroys live history; worst
       recoverability, and the blast radius is every revision of 47
       pages); a cut-and-paste move (the same defect plus loss of
       attribution, and the platform tags it); keeping versioned titles
       and accepting fragmented history (contradicts the requirement
       and leaves the duplicate version-management system in place).
BASIS D56  FAILURE-DETAIL READ RESTRICTION, D56. Basis: the platform's
       protection types are create, edit, move and upload, and
       namespace protection governs edit, so no native protection
       restricts read; the platform's own documentation on preventing
       access warns that per-page read restriction is not reliable,
       which is why each read path is enumerated and tested rather than
       assumed. Not selected: the detail as rows of an append-only TPX
       table with no page, only its digest on the wiki; the detail held
       off-wiki (outside the system of record, 1.3).
BASIS D57  THE REFERENCES ENTRY FORM, D57. Basis: the references page
       shows citation and application only, so a Limit line changes
       nothing a reader sees. Not selected: Limit required, the build
       refusing until 60 missing lines were written (60 authoring
       operations for no change to the page).
BASIS D83.1  THE VERSION DECLARATION, D83.1. Basis: TPX is the sole
       implementation of every digest, so the genesis line waits on
       TPX's first landing; a declaration before it that a version is
       final is recorded in the foundations record and creates no chain
       page. TPS 0.1.0 was so declared on 2026-09-22 (0.1.3).
BASIS D91.1  THE GUIDE PAGE, D91.1. Basis: the guide is the requirements
       source and belongs in the system of record as a documentation
       page, indexed with the version it describes (1.2.3).
BASIS D92.1  THE PROMOTION FLOOR, D92.1. Basis: the TMS is the per-UWC
       home of declared parameters, and CR7 keeps corroboration a
       reduction of the residual, not a gate. Not selected: F2 fixed in
       TPS for every UWC; F1 everywhere, enforced nowhere. Excluded: F2
       with corroboration required, which a CLOSED UWC with fewer than
       two eligible accounts could never meet (3.2.12).
BASIS D97.1  THE DIGEST CONVENTION, D97.1. Basis: a netstring encoding
       of an ordered field list is self-delimiting and reproducible byte
       for byte in both residences; SHA-256 is the chain's own hash.
       Not selected: JSON canonicalization (a second specification to
       conform to); concatenation with a separator (ambiguous on
       fields containing it) (2.5.10).
BASIS D98.1  THE TFK ZONE SCHEMA AND WHERE T3 RUNS, D98.1. Basis: a
       schema per zone with required fields makes the kernel tests
       executable over declared fields, and T3 reads STEP_CONVENTION
       and S_MAX, which live in the TMS, so it runs at the final pass.
       Not selected: T3 at TPK entry with the parameters duplicated
       into the TPK (one value in two immutable places) (2.2.6, 5.5.2).
BASIS D99.1  CANONICAL SERIALIZATION OF A ZONE, D99.1. Basis: a
       type-tagged recursive netstring with NFC text and canonical
       DIMENSION, decimal, term and UNIT forms makes spellings that mean
       the same thing digest alike, and anything that does not parse is
       refused rather than altered, so the digest is defined over
       well-formed zones only. Excluded: byte-exact digests over the
       author's text (two authors' identical kernels digesting apart;
       completeness); silent normalization of malformed input (a
       construction the check accepts that it should reject) (2.5.11-
       2.5.15).
BASIS D100.1  THE DECLARED FORM OF A LOCAL YARDSTICK, D100.1. Basis: a
       closed ordering grammar over named TMS constants makes SR9 C1,
       C2 and C4 MECHANICAL on the synthetic suite and C5 a field check;
       resolution is the framework's and is not declarable. Excluded:
       yardsticks as code (SR9 C3 unverifiable; soundness) (2.4.8).
BASIS D101.1  TPC-PY FOR A CA-GTP, AND ITS EXECUTION MODE, D101.1.
       Basis: a model cannot compute SHA-256 by reasoning, so a
       presented digest attests execution; the challenge makes
       execution attestable without attesting which code, which
       recomputation at landing covers. Not selected: TPC-PY optional
       for agents, values reasoned (every landing a mismatch decision
       item; worst error opportunity); an install by H-OP required
       (excludes the sandboxed agent for no correctness gain) (5.3.19,
       5.4.9).
BASIS D102.1  THE NAMES OF TPX AND THE TWO TPC RESIDENCES, D102.1.
       Basis: three role lines, verbatim, end the ambiguity between the
       controller and the calculator; rule text keeps saying "TPX
       computes" (1.1).
BASIS D103.1  THE UNIT GRAMMAR AND CATALOGUE, D103.1. Basis: a closed
       catalogue in the DIMENSION field's shape with a canonical
       spelling is parsed identically in both residences; the scale to
       coherent SI is computed in one fixed order of double operations.
       Not selected: UCUM syntax over the same catalogue. Excluded:
       coherent SI only, under which authors apply 1 Hz = 1 rad s-1 =
       1 s-1 by hand and a convention difference reaches SR3 instead of
       the audit block 4.4.4 requires (soundness) (3.2.11).
BASIS D104.1  WHERE UNIT IS CHECKED, AND THE TFK DIGEST, D104.1. Basis:
       zone entry is the one gate before immutability, so a CONSTANT's
       UNIT and a FIX's UNIT are checked there. Not selected: the
       CONSTANT only, the FIX unit carried as an owed case. Excluded:
       the TFK left alone, under which zone entry accepts into an
       immutable TFK a CONSTANT whose UNIT contradicts its own
       DIMENSION (soundness) (2.2.9, 2.2.10).
BASIS D105.1  KINDS A DIMENSION CANNOT SEE, D105.1. Basis: the SI counts
       the radian as one, so Hz against rad s-1 passes a dimension check
       and would read as an SR3 contradiction between two true records.
       Not selected: KIND fixed per QUANTITY at write with a UNIT on
       every TrM entry. Excluded: dimension only, which strikes a true
       record in the Hz case (soundness) (4.4.11).
BASIS D106.1  THE T2 SYNTACTIC RULE, D106.1. Basis: a closed set of
       top-level joiners is decidable and refuses a compound proposition
       before it enters an immutable zone; a comma splice or an unlisted
       connective reaches inspection. Not selected: flag without
       refusing; a narrower refusal set (2.2.3).
BASIS D107.1  THE INVENTORY THE TrM MAPS ONTO, D107.1. Basis: a FIXed
       DOF is still a degree of freedom the environment must identify,
       and its FIX may be borne by its entry; an entry on a REMOVEd DOF
       is refused. The divergence against guide 3.1 is recorded under
       guide 2.5. Not selected: the DOF less every constraint TARGET,
       under which no constraint can be borne. Excluded: every DOF,
       constraints ignored, under which an entry on a REMOVEd DOF would
       be accepted (soundness) (2.3.19).
BASIS D108.1 with D132.1  A DECLARED FORM FOR T3, T4, T6 AND IC4 (a),
       D108.1, built as increment 8, D132.1. Basis: an optional
       machine-readable form beside the prose makes T4's law half, T6's
       totality, the names check, T3 over laws to the ground fragment
       and the syntactic IC4 (a) MECHANICAL where present, and forces
       nothing on authors; where absent those parts stay INSPECTION by
       H-DECL, obligations rather than completeness defects. Not
       selected: no form, T4 never MECHANICAL; the form REQUIRED on
       every LAW and BOUNDARY (2.2.12-2.2.18, 2.3.14).
BASIS D109.1  THE ALERT CHANNEL'S SECONDARY, D109.1. Basis: a dead-man's
       switch is content-free, out of band, not wiki-native, and alerts
       by itself on silence, which a channel that speaks only on bad
       news cannot. Not selected: a second mail provider (the same
       channel twice); a wiki-native notification (in-band,
       disqualified by D65.1). The host test is owed before reliance
       (5.18.12).
BASIS D111.1  WORK AFTER A FAILED CANARY, D111.1. Basis: a status value
       on the record itself makes the hold visible to a reader of that
       record alone; the anchor is a count of passed canaries, which
       TPX knows exactly, not a tail probability; propagation through
       citations and ASSUMPTIONS keeps no standing record citing a held
       one; release needs an independent reproduction so no held record
       is silently restored. Not selected: hold and review the anchor
       scope with nothing older reviewed; hold from the block after the
       anchoring pass. Superseded at reopening: tail-probability
       windows. The ten readings of the hold-scope function (PD1-PD10)
       stand by delegation, each with its alternatives in the function's
       note (3.3.11-3.3.15, 5.14.3).
BASIS D112.1  TPX's SOURCE, D112.1. Basis: what a reader needs to check
       is the method and the deployment, which the published pseudocode
       and the chained build digest supply; what must stay unpublished
       is what is drawn at run time and the suite's failure detail,
       which the executable would reveal. Not selected: the source
       published whole (burns the probe suite); nothing published (no
       reader can check the method) (5.3.23).
BASIS D113.1  DeltaS Zero AS THE DEFAULT AI ACCOUNT, D113.1. Basis: a
       bootstrap write predates TPX and must be attributed to a real
       account; an AI account holding no sysop, protect or delete right
       and no bot membership bounds what a bootstrap write can do.
       Excluded: a placeholder account standing in for TPX (a chain
       line asserting a verification none made; soundness) (5.13.5).
BASIS D116.2  THE CANARY GRADIENT, ONE KERNEL OR THREE ARMS, D116.2.
       Basis: a mixture of a steep, a shallow and a heavy-tailed arm,
       each on its own clock, covers the distance distribution of
       authentic work without a flat arm; the interim values are
       declared now so the family is in force before any agent is
       certified, since a later adoption would lapse every certificate
       under CR9. Not selected: family now, values at the refit; one
       kernel kept to the review point (5.17.6-5.17.8, 7.2.11, 7.2.12).
BASIS D117.1  THE CANARY RATE, A TENURE SCHEDULE WITH BURSTS, D117.1.
       Basis: a rate that falls with tenure spends probes where the
       evidence is thinnest, and bursts after block 1000 keep the
       long-tenured account from reading its clock; the law is public
       and the draws are not. Not selected: the values on a restricted
       page; the constant rate kept to the review point. Excluded: the
       values in TPX's source only (outside the system of record and
       outside H-DECL's declaration) (5.17.12, 7.2.4).
BASIS D118.1  PROBES, ONE PACKAGE, TWO KINDS, D118.1. Basis: a probe
       built from a real package, the fault the only difference,
       removes every tell mutation and normalization left; a parrot is
       real work whose answer already stands, so the honest response
       and the expected response coincide; served-ness is attestable
       where blindness is not. Not selected: within-UWC only, no seal
       exception; canaries only, parrots carried to the review point
       (5.9.11, 5.17.2, 5.17.4).
BASIS D119.1  THE COMMUNITY LEDGER AND THE COMMUNITY VIEW, D119.1.
       Basis: a world-readable chained log of every parrot outcome lets
       the control panel, CR7's count and RELEASE read one source, and
       a cross-UWC pass landed there and nowhere else keeps an off-list
       account's work out of a CLOSED UWC's pages. Not selected: the
       ledger without RELEASE. Excluded: cross-UWC outcomes landed as
       records in the source register (an off-list account's work
       entering a CLOSED UWC's pages, which the conjunctive rule
       refuses; a non-corroboration is not a research record) (5.9.12,
       5.9.13).
BASIS D120.1  RATIO, RATE AND OUTCOMES, D120.1. Basis: reading the
       schedule as the probe rate keeps the account's total load where
       D117.1 put it; a non-corroboration that suspends nothing and
       resets the reproducer's rate makes disagreement cheap to state
       and expensive to repeat; the ratio drawn per bounded epoch on the
       account's own clock gives an agent no count to keep. Not
       selected: the canary-rate reading, parrots on top. The ratio is
       recorded as k parrots per canary, k : 1, correcting the handoff's
       transcription (5.17.13, 5.17.14).
BASIS D121.1  THE AGENT CONTRACT, D121.1. Basis: reinforcement text
       belongs in the instruction set and never inside a work block,
       since a payload "reminder" would teach acceptance of directives
       from payloads; the clauses add no rule the machinery does not
       enforce. Not selected: machinery clauses only, AC-STAKES and
       AC-WHY dropped (an enforced rule absent from the instruction set)
       (AC-4.39-AC-4.44).
BASIS D122.1 with D129.1  THE RELIABILITY SCORE, D122.1, amended by
       D129.1. Basis: an evidence layer from resolved events only, with
       an interval and n always shown, and a score layer under
       leader-following lag anchored on H-DECL's admission, rank and
       warn without deciding; canary scoring stays binary; the inquiry
       is charged so the agent learns no ceiling. D129.1 closed the one
       pending set no state covered. Not selected: the evidence layer
       only, no Prime gauge, INQUIRE uncharged; no score, CR6, the
       audits and D111 alone (CR11).
BASIS D123.1  THE OVERRIDE AND THE PAD, D123.1. Basis: a declaration
       that sets a value TPX would compute is a FED exclusion, so it is
       time-locked, two-factor, re-authenticated, nonce-carrying,
       chained and alerted, and its blast radius is the gauge for one
       sunset, never a release and never a suspension. Not selected:
       the override only, no pad; neither, succession by rank only
       (CR11, 5.6.9, 5.12.7).
BASIS D124.1  ACCOUNTS AND SANDBOXES, D124.1. Basis: a reference account
       that holds the gauge, a first regular account, a red team and a
       blue team, on two sandboxes at opposite corners, exercise the
       honest path beside the dishonest one before a live agent exists.
       Not selected: no reference account, the first regular account
       Prime with OVERTAKE on; one sandbox (5.13.5).
BASIS D125.2  PLATFORM, PHP, THE WORKER, THE SIDECAR, GIT, D125.2.
       Basis: TPX stays the MediaWiki extension of D32-D33, its long
       work on the platform's own job queue under one build digest, the
       web path disabled; the sidecar is adopted for the live panel
       only, holding no verdict and no write; Git records the one
       artifact the wiki does not hold. Not selected: W1 and the switch,
       no sidecar (ranked first on R2 with R1 equal; the user's
       selection governs). Excluded: a sidecar TPX in another language
       behind a thin PHP hook (a save the check never ran on when the
       service is down; soundness) (5.3.28, 5.3.29).
BASIS D126.1  VOLUNTEER WORK, D126.1. Basis: a channel with its own
       probe law, a token bucket, jittered backoff and a throttle on
       intake serves community demand without letting an account choose
       its targets or lean on volunteer credit. Not selected: no
       channel, P1-P4 served as parrots at the probe rate (a TIE on
       R1-R3; the user selected) (5.9.14-5.9.17).
BASIS D127.1  AGENT IDENTITY, FINGERPRINT, SPONSOR, DOSSIER, D127.1.
       Basis: an HMAC under a key derived from one master secret over
       immutable public inputs and a per-agent salt binds an agent to a
       human account without secrecy in the inputs; never accepted from
       a caller, it cannot be replayed; the dossier is a view of chained
       facts. Not selected: as answered without the public dossier
       pages (a TIE; the user selected). Excluded: a fingerprint
       presented by the caller as a credential (replayable; soundness);
       a key bank searched at verification (5.3.27, CR3, CR12).
BASIS D128.2a  USER RELIABILITY, D128.2a. Basis: a user score that
       aggregates its sponsored agents' evidence with the diversity
       quota applied jointly, an intra-sponsor match at zero, and a
       user Prime by declaration, is the accountability the sponsor
       pairing exists for; under RELIABILITY BASIS AGENT it is consumed
       by no rule. Not selected: the evidence-only user score; the user
       Prime by rank, or by declaration until a second user has a
       scored agent; no user score (CR12).
BASIS D131.2  THE WALK THROUGH PAGE TITLES, D131.2. Basis: the set is
       named by the user's declaration and its titles are moved with
       their history, redirects left at the old titles and never
       linked; page 1 stays the hub's general-reader entry point
       (5.15.7).
BASIS D130.3  no site in this artifact: TPS names no skill set; the
       skills are the Claude implementation's, published outside the
       index.
BASIS D133.1  THE GOVERNOR'S PLACE AND THE SIDECAR'S PART, D133.1, by the
       user's delegation. Basis: a gate absent while its process is down
       admits every request (D125's own exclusion), so the GOVERNOR lives in
       TPX and the sidecar only shows its state; the host's own limiting is
       read from outside and can only tighten. Not selected: W2's reading as a
       tighten-only input, available by one word once HC1 confirms W2 runs; no
       external reading (5.3.29, 5.3.31).
BASIS D134.1  THE BUDGET MODEL AND THE PRESSURE LEVELS, D134.1. Basis: every
       PHP request and W1 job metered against sliding CPU-second budgets over
       the hour, the day and 30 days, so the month cannot be burnt at the
       hourly rate; four levels with hysteresis; finishing work never refused
       on budget. Not selected: the hourly cap alone; a per-op cost model,
       each omitting a named case (reader load; cost variance)
       (5.3.32-5.3.34).
BASIS D135.1  FAIR SHARES AND CHARGING, D135.1. Basis: one share per sponsor,
       declared seats and the dominant share at contention; charging by
       measured cost is excluded, since it tells probes apart. Not selected:
       weights from the reliability score (a score that ranks and warns would
       allot capacity); the agent as the unit (it omits the multi-agent
       sponsor) (5.3.36).
BASIS D136.1  RUNAWAY, CONDUCT, CONTAINMENT AND THE LOCK, D136.1, with its
       readings (a) to (f). Basis: stages move only on counted TRAFFIC EVENTS;
       CONTAINED is cleared by a person; the FLOOD INTERVAL bounds a flood of
       score requests; the NO-PROGRESS rule answers lock hoarding; an AGENT
       STOP stops the lock clocks; fleet refusals are never counted against an
       account. Not selected: traffic in the reliability score (every reader
       of a score would have to separate research from traffic); no lock rule
       (hoarding left open) (5.3.37-5.3.39, 5.7.8-5.7.10).
BASIS D137.1  THE CLIENT CONTRACT, D137.1. Basis: one contract for every
       client, each refusal coded by cause with a jittered Retry-After, the
       RateLimit fields and a pseudo-lag, so clients pace themselves before
       they are refused. Not selected: two narrower contracts, each omitting a
       named case (5.9.18, 5.4.13, AC-4.46).
BASIS D138.1  READERS AND CRAWLERS, D138.1. Basis: read is public and the
       canary corpus depends on it, so readers are cached, capped and paced,
       never denied. Not selected: a second vendor in front of the site now,
       put to the user at the REVISIT MARK; a login gate for expensive views
       (it narrows public read) (5.3.40).
BASIS D139.1  THE SECURITY BASELINE AND THE PLATFORM, D139.1. Basis: PHP 8.2
       and MediaWiki 1.45 leave support on 2026-12-31, so the upgrade precedes
       build step 3; the security list is an acceptance list, tested before
       the first admission. Not selected: the upgrade after step 3, by one
       word, still before 2026-12-31; an advisory list (each unchecked item a
       named case) (5.2.6, 5.3.41).
BASIS D140.1  THE REGISTER'S PAGES, D140.1. Basis: ten records a page cost the
       least where the database cap binds, and a fixed size keeps a record's
       page computable from its number; status in the record keeps a hold
       visible to a raw-wikitext reader (D111). Not selected: fifty or one
       record a page (more storage); status displayed from TPX's table (a
       reader misses a hold); one page per UWC (the cap reached)
       (3.1.12-3.1.15, 3.2.13).
BASIS D141.1  THE OTHER GROWING PAGES, D141.1. Basis: chains of volumes under
       heads, a manifest tree, one write per page per landing and state in
       tables keep every growing page bounded, each chain one linear hash
       chain and every digest TPX's. Not selected: the lock page written at
       every heartbeat (storage); the standing single pages (the database cap
       reached within a few thousand chain lines) (5.3.42, 5.6.10, 5.6.11,
       5.7.9, 5.11.11).
BASIS D142.1  THE MONTHLY CYCLE, D142.1. Basis: TPX measures from declared
       datasets; the survey is a falcon worked by two blind agents; H-DECL
       declares a change in one act; only what the machine cannot settle
       reaches a person. Not selected: the survey by H-OP each month; the
       table by hand; no survey. Excluded: a generative model inside TPX
       writing eligibility; a survey result applied without H-DECL's act
       (soundness) (5.19.1-5.19.5, 5.19.19).
BASIS D143.1  THE MEASURE, D143.1. Basis: the field is mathematics and the
       hard sciences, measured by a composite of third-party benchmarks with a
       declared SE definition, paired where per-item results exist. Not
       selected: the Epoch Capabilities Index (general ability); an
       item-sampling SE only; one benchmark (5.19.6, 5.19.7).
BASIS D144.1  THE CLUSTER RULE, D144.1. Basis: the step rule as built
       reproduces the user's examples, keeps models the measurement does not
       separate and states its resolution each month. Not selected: the rule
       without its noise term; a depth cap, DEPTH MAX (it cuts a field falling
       in equal steps); a cumulative trend line. Excluded: a least-squares
       line; a ratio of gaps (each accepts what the user's example A rejects;
       soundness) (5.19.8, 5.19.9).
BASIS D145.1  THE FADING MARK, D145.1. Basis: a separate axis consumed by no
       rule but the weekly notice, shown in dark gray with the word and a
       glyph, never gray alone. Not selected: gray as the only cue; the light
       disabled gray. Excluded: CR11's YELLOW, which the user's requirement
       rejects (soundness) (5.19.10-5.19.13).
BASIS D146.1  THE CERTIFICATION GATE, D146.1 at its six slots: (a1), (b) and
       (d)-(f) as first selected, (a2) and (c) as reissued. Basis: new
       admissions gated on IN, the cusp path, substitution and succession,
       sandbox scopes and H-DECL's declaration of every admission; the
       certificate binds the VENDOR FAMILY and D(PROMPT), and a model inside
       the family changes freely as a RECORDED CHANGE, the tenure count
       restarting. Not selected at (a2): no tenure restart; a declared model
       change; the snapshot as the unit. Excluded: the model neither declared
       nor recorded; a change of family kept as a model change (soundness)
       (5.19.14-5.19.17, 5.19.20, CR3).
BASIS D147.1  THE EXCLUSION LIST, D147.1. Basis: the list is named on the
       DECLARATIONS page alone, applied at ingestion and after the MODEL MAP,
       with a save hook refusing any matching save (5.19.5, 5.6.12).
BASIS D148.1  THE FALCON, D148.1. Basis: a new unit off the register, its
       kinds declared by H-DECL outside D(IS) so a new kind lapses no
       certificate, the FORBIDDEN classes enforced. Not selected: kinds as
       declared parameters (each moves D(IS)). Excluded: no FORBIDDEN check; a
       generative model inside TPX doing the work (soundness) (5.20.1-5.20.5).
BASIS D149.1  ASSIGNMENT, D149.1. Basis: at least two distinct accounts,
       distinct sponsors first, vendor families preferred, THIN POOL counted,
       never a statistic. Not selected: vendor diversity required; no vendor
       preference; two tier agents of one sponsor before a distinct-sponsor
       pair. Excluded: one assignee; a draw an assignee can steer or see
       (soundness) (5.20.6, 5.20.7).
BASIS D150.1  RECONCILIATION, D150.1. Basis: blind by construction; machine
       comparison after TPM's canonical forms only; the QUOTE CHECK under the
       TOKEN RULE, fetching only inside declared sources; a third assignee;
       what three cannot settle reaches the approver on the one form. The
       check's named limit is a completeness item. Not selected: a separate
       decision item for an UNRESOLVED field; no quote check. Excluded: a
       model as comparator; a debate step; wider canonical forms; a quote
       check over agent-chosen paths; bare-substring matching (soundness)
       (5.20.8-5.20.11).
BASIS D151.1  APPROVAL AND APPLICATION, D151.1. Basis: the holder of the
       target class's write right approves on TPX's form, the revision the
       approver's, TPX supplying the text; IV content never public. Not
       selected: H-DECL approving every falcon (a TIE; the user selected);
       FINDINGS approved before report; drafts held by an extension. Excluded:
       IV content on a public page; application without approval; agents
       writing drafts on the wiki (soundness) (5.20.12-5.20.14).
BASIS D152.1  THE EXCLUSION LIST AND THE PRIVATE REPORT IN FALCONS, D152.1.
       Basis: aliases and confidential findings reach only restricted pages,
       through TPX. Not selected: no alias proposals. Excluded: aliases on a
       public page; an agent reading the restricted class; confidential
       findings or counts in public (soundness) (5.20.15).
BASIS D153.1  ACCOUNTING, D153.1. Basis: a separate FALCON STRATUM with no
       score effect. Not selected: AGAINST on a confirmed fabrication.
       Excluded: FOR events on falcon agreement; agreement as corroboration; a
       confidential stratum in public (soundness) (5.20.16).
BASIS D154.1  PROBES IN FALCONS, D154.1. Basis: canaries of the read-type
       faults in one assignee's material. Not selected: no probes; gold items.
       Excluded: a canary planted by editing a page; a fault in TPX's task
       text; a falcon canary's pass as a LOOKBACK anchor (soundness)
       (5.20.17).
BASIS D155.1  CHANNEL AND BUDGET, D155.1. Basis: POLL and VOLUNTEER deliver,
       the RETURN in lane 4 and the jobs in lane 5, under declared seats and
       caps. Not selected: a new op; volunteer answers only. Excluded: a
       falcon RETURN in lane 2 (soundness) (5.20.18, 5.9.19).
BASIS D156.1  THE VENDOR FAMILY, D156.1. Basis: maker and family for a closed
       model; lineage, pinned server and quantization for open weights. Not
       selected: each family declared by H-DECL; the maker alone. Excluded: an
       unpinned router (soundness) (5.14.4).
BASIS D157.1  THE PROMPT DIGEST, D157.1. Basis: a salted digest bound to the
       certificate, a change declared or answered by a new agent, the tenure
       count restarted, evidence by epoch. Not selected: a paired re-test; no
       salt; every change a new agent. Excluded: a digest recorded but not
       bound; a reasoned digest (soundness) (5.14.5, 5.14.6).
BASIS D158.1  THE IDENTITY RECORD, D158.1. Basis: a record compared at the
       vendor level, advisory. Not selected: the question asked in a falcon;
       no inferred value. Excluded: a gate or adverse act on the comparison;
       active fingerprint queries as a verdict (soundness) (5.14.7).
BASIS D159.1  THE VENDOR SURVEY AND SNAPSHOT RETIREMENT, D159.1. Basis: FK-05
       over public pages, quote-checked against the FALCON SOURCE LIST, a
       retirement dated. Not selected: vendor keys held by TPX, by one word
       once list endpoints carry retirement dates; keys only (5.14.8).
BASIS D160.1  WHAT THE USER SCORE IS BUILT FROM, D160.1 under reading (i).
       Basis: the agents' pooled events plus the sponsor's conduct events,
       resolved on counted facts or audits. Not selected: CR12 unchanged;
       conduct events only (reading (ii)'s first). Excluded: a conduct event
       resolved AGAINST on a statistic (soundness) (CR12).
BASIS D161.1  THE INHERITANCE PATHS, D161.1. Basis: no score flows between
       identities. Not selected: a whitewashing floor; continuation across an
       identity change. Excluded: RELIABILITY BASIS SPONSORED kept as a tuning
       value (soundness) (CR11, CR12).
BASIS D162.1  SPONSOR STAGES AND SPONSOR GRADUATION, D162.1 with threshold set
       A. Basis: a counted threshold over logged landings, one-way, granting
       nothing. Not selected: threshold sets B and C (a TIE; the user
       selected); SG3 counted from registration. Excluded: probes left out of
       the count (soundness) (5.14.9).
BASIS D163.1  THE MECHANISM, D163.1. Basis: TPX counts, and MediaWiki's
       once-only promotion records and logs the grant. Not selected: TPX
       alone; an implicit group. Excluded: a group carrying any right
       (soundness) (5.14.10).
BASIS D164.1  DORMANCY, D164.1. Basis: a qualifier on one clock, T_idle; no
       lapse and no message while dormant. Not selected: 180 days; SERIOUS
       lapsing at DORMANT (5.14.11).
BASIS D165.1  THE FAST PATH, D165.1. Basis: every check from the first minute
       and only reading deferred; a six-step wizard; the weekly FADING notice
       on the wiki until the sponsor is SERIOUS. Not selected: one agent
       before SPONSOR GRADUATION; the wizard in a forms extension; the notice
       e-mailed from the start. Excluded: deferring any check (soundness)
       (5.14.12).
BASIS D166.1  THE ONE-TIME MESSAGE, D166.1. Basis: one message at SPONSOR
       GRADUATION, by e-mail if confirmed, never repeated, no score. Not
       selected: an on-wiki notice only; a short series (5.14.13).
BASIS D167.1  THE DECISION RECORD ON THE WIKI, D167.1. Basis: the record
       verbatim as documentation with a generated index, the exclusion filter
       run by machine. Not selected: an index only; nothing. Excluded:
       publication without the machine filter (soundness) (5.11.12, 8.1.10).
BASIS D168.1  THE SPECIFICATION'S STATUS LINES, D168.1. Basis: a PATCH now,
       TPS 0.1.1, changing only the status lines, so no reader is told the
       text awaits declaration. Not selected: carried in revision 5; left as
       is (0.1).
BASIS D169.1  THE SKIN AND READER SETTINGS, D169.1. Basis: the user's act in
       LocalSettings, recorded, no rule of this artifact; status colors as
       tokens night mode remaps. Not selected: Citizen now; unchanged
       (5.15.9).
BASIS D170.1  THE BIBLIOGRAPHY SETTING, D170.1, taken by delegation
       2026-09-26. Basis: a UWC STATE setting, OFF by default, switched on
       once, H-DECL's declaration; successors inherit. Not selected: fixed
       at inception, a bibliography wanted later needing a successor UWC
       (completeness). Excluded: ON switched to OFF with the entries hidden
       or removed (soundness: delete is used by no one, and a record would
       cite an entry that no longer shows) (5.21.1, 5.21.2).
BASIS D171.1  THE BIBLIOGRAPHY ENTRY, D171.1, taken by delegation
       2026-09-26. Basis: a page class of its own beside the register,
       CSL-JSON in a declared subset with a formal schema, append-only,
       TPX's write check, only the mutex holder's landing adding entries,
       LITERATURE on records. Not selected: BibTeX as the stored form (no
       formal specification, so the write check cannot be stated exactly);
       a record kind in the register (every counting rule must name the
       kind it excludes; 3 to 19 per cent more storage). Excluded: a stored
       form holding an abstract, note or full-text field (soundness: the
       site would publish copyrighted text); an entry's digested part
       edited in place (soundness: a cited source changing under a digest
       that no longer matches) (5.21.3-5.21.13).
BASIS D172.1  CHECKING THE ENTRIES, D172.1, taken by delegation 2026-09-26.
       Basis: TPX looks up at landing under REGISTRY DECLARATIONS, the
       lookup being deterministic and so TPX's; a blind falcon, FK-20,
       settles the residue; CHECK and NOTICES lines rewritten only when
       they change; rechecks in the background; no record struck; a
       fabrication reaches the audit by H-DECL's act, the score ranking
       and warning while the audit decides. Not selected: the lead
       settling the residue alone (one reader, no independent check); the
       write check only (a well-formed invention never looked up, a
       retraction never noticed). Excluded: a status line or falcon that
       rewrites an entry's digested part; a status line or finding that
       strikes or holds a record (soundness: a bibliographic fact deciding
       a physics record's standing); an audit block opened by TPX on a
       falcon's finding (soundness: a FINDINGS falcon changes no page)
       (5.21.14-5.21.21, 4.1.11).
BASIS D173.1  ENTRIES PER PAGE, D173.1, taken by delegation 2026-09-26.
       Basis: BIBLIO VOLUME SIZE 5, a volume class of its own kept like the
       register, measured least in storage of the sizes asked about on the
       register's own efficiency analysis, recomputed from the
       measurement's inputs; R1 and R2 equal between the options. Not
       selected: VOLUME SIZE 10 for the bibliography too, one size for
       every class (3 to 6 per cent more storage, 18 where entries
       trickle; about 14 per cent fewer saves per landing) (5.21.22).
BASIS D176.1  THE EQUATIONS OF MOTION AT THE GATE, D176.1, taken
       2026-09-26 (pause 0.3.0 Option 1, on D176.3's slots (a)-(e)).
       Basis: a structural check at the final pass names, before the
       irreversible declaration, what no check asked before - a DOF
       with no equation of motion, one stated twice, an initial
       condition written as a law, a structurally singular set; ROLE
       on LAW and INPUT on DOF declare away the known false findings
       (first integrals, forcing, noise); an unknown determined by no
       form opens EOM-0, so a missing equation is supplied once,
       derived or assumed and priced, before dependent records land;
       nothing new is refused, so a kernel whose equations of motion
       are derived in the register stays admissible. At the user's
       constraint the check has a switch, STRUCTURE_CHECK, a TMS
       parameter inside D(TFK), ON by default; every UWC is classed
       "structurally regular" or "Structure not Validated at
       Inception" with its reasons, both valid; a later test over the
       register runs by itself after each landing that bears on it and
       on request, information beside the fixed class. Not selected at
       pause 0.3.0: the switch in UWC STATE, outside D(TFK) (Option 2);
       a later "structurally regular with register" result declared by
       H-DECL as the UWC's structure (Option 3); the later test on
       request only (Option 4); a switched-on kernel that cannot be
       called "structurally regular" returned to its author (Option 5:
       a false refusal under the default, E01). Not selected at pause
       0.2.0: the check without roles (Option 1); declared forms
       required in a kernel with dynamics, with a PROSE-ONLY marker
       (Option 2); a per-UWC EOM_POLICY that may refuse (Option 4); the
       forced register objective alone, no gate check (Option 5); the
       closed-world text only (Option 6). Excluded: the label
       "structurally regular" on a kernel the check did not verify
       (soundness; S22, S30); a switched-off UWC's later findings
       opening EOM-0 or refusing pushes (the user's constraint)
       (2.2.6, 2.2.18-2.2.20, 2.4.7, 3.3.16, 5.3.47, 7.1.54-7.1.56).
BASIS D177.1  THE INDEPENDENT VARIABLE, D177.1, taken 2026-09-26 (pause
       0.3.0 Option 1). Basis: any one DOF may be D's variable, T4
       reading D(x, s, n) as dim(x) less n times dim(s), so a scaled or
       dimensionless time is writable (A21 was a false refusal) and a
       frozen clock is refused (the D variable is no CONSTRAINT entry's
       TARGET); at the user's constraint a switch, D_VARIABLES, ONE by
       default (pause 0.2.0's Option 1) or SEVERAL (its Option 3,
       several D variables, the structure check printing "PDE: not
       analyzed"), the one field of a new PARAMETERS part of the TPK,
       inside D(TPK), read by T1 as the TPK is entered, so T1 stays a
       function of the TPK alone. Not selected at pause 0.3.0: the
       switch in UWC STATE, passed to T1 from outside the zones
       (Option 2); the switch in the TMS, the one-variable rule moving
       from T1 at entry to a finding at the final pass (Option 3). Not
       selected at pause 0.2.0: an INDEPENDENT kind in the TPK (Option
       2); the status quo, a variable of DIMENSION T1 exactly (Option
       4) (2.2.6, 2.2.13, 2.2.15, 2.2.18).
BASIS D178.1  ENVIRONMENT MODULES, D178.1, slots (a)-(f) taken
       2026-09-26 (pause 0.1.0 Option 1) and slot (g), the catalogue
       lifecycle, taken 2026-09-27 (pause 0.6.0 Option 1, with the
       user's constraint FIXED AT INCEPTION). Basis: the user asked for
       easy opt-in physics ("turn on gravity", "air resistance at sea
       level") under the closed world; an interview with an exclusive
       NONE, on the form and in the API alike, makes a lapse a visible
       choice; declarations of H-DECL outside D(IS) keep ENVIRONMENT
       MODULE content with the declaring authority and lapse no
       certificate; MODULES USED outside D(TFK), re-expanded by TPX,
       lets no label sit over altered content and keeps a TPK typed by
       hand to the same entries digesting alike; terms composed into the
       one equation of motion in ID order give one D(TPK) whatever the
       order of selection. At the user's word that the list is managed
       ("add, delete, modify"), delete is retirement or withdrawal from
       the offer, never removal (5.13.3), modify is a new version with
       the old one kept, and no ID or version is reissued; an open
       catalogue declares which ENVIRONMENT MODULES combine (TEST
       BINDINGS, EXCLUDES, INTERACTS-WITH), checked before each
       declaration; and at the user's word "fixed at inception, must be
       copied to change settings" a UWC's claims are fixed at its
       certification and change only by COPY-FORWARD. Not selected at
       pause 0.1.0: the interview on the form only, the API without the
       question (Option 2); a catalogue with no question about the
       ENVIRONMENT MODULES not added (Option 3); no ENVIRONMENT MODULES,
       the author typing every entry (Option 4); each for completeness,
       the agent path carrying no answer or a lapse reading as a choice.
       Not selected among the slot variants: the ENVIRONMENT MODULES as
       a TPS appendix inside D(IS), every change lapsing every
       certificate (R2); the author naming the target law (R2); a
       smaller first catalogue (R2); a target in register ASSUMPTION
       records as well (R3). Not selected at pause 0.6.0: a draft
       claiming a WITHDRAWN version returned at the final pass (Option
       2, R2); an audit block opened on every UWC claiming a withdrawn
       version (Option 3, R2); the offer as H-OP's chained OFFER TABLE
       (Option 4, R2); no modules page and no proposals, the checks at
       submission only (Option 5, R2). Not bundled: one status with no
       reason, nothing shown for a certified UWC on a withdrawn version,
       no checks before a declaration (completeness). Excluded: toggles,
       which record bindings the author never chose and a lapse as a
       choice (soundness); a second law added beside an equation of
       motion, an inconsistent TPK the gate passes (soundness);
       provenance inside D(TPK) or in prose only (soundness: IDENTICAL
       misclassified, or a claim no one can recompute); edit in place,
       removal of a used version and the automatic update of a draft
       (soundness); the offer as an H-OP tuning option, which would fix
       what, not how fast (5.3.30) (1.1, 3.4.10, 4.2.16, 5.1.16, 5.3.48,
       5.5.14, 5.6.16, 5.22, AC-4.51, 7.1.59, 7.1.60, 7.2.31, 7.2.32).
BASIS D179.1  THE SENSE OF A BOUNDARY PREDICATE, D179.1, taken
       2026-09-26. Basis: the tutorial, the spring example and every
       module template already read the predicate as where the kernel
       holds, and a predicate stating where a law holds is the reading
       an author writes without instruction; the divergence from guide
       3.1 is recorded, not hidden. Not selected: TPS silent with the
       help made consistent; the NOT sense of guide 3.1 (1.2.3, 2.2.6).
BASIS D180.3  INITIAL AND BOUNDARY DATA, D180.3, taken 2026-09-26.
       Basis: each value an ASSUMPTION record keeps D41's pricing whole,
       and an interim of inspection is the least change that stops SR3
       striking a true trajectory value before the record schema can say
       when a value holds. Not selected: the CONDITIONS field now (C-16
       unwritten); values outside a(r); inspection with no end state.
       Excluded: SR3 as written over trajectories, which strikes true
       records (2.2.21, 3.2.15, 4.4.13).
BASIS D181.2  CHECK REFINEMENTS, D181.2, taken 2026-09-26. Basis: the
       refinements change what T6 accepts; the sandboxes test them on
       real kernels before they bind. Not selected: built now; neither
       (2.2.16).
BASIS D182.1  THE LOCAL PROMPT, D182.1. Basis: the local prompt is a
       certified agent's likeliest source of misbehavior, not the
       ecosystem's weakest link by expected harm, since TPX's
       recomputation and independent reproduction put agents in
       parallel; TPM cannot attest a hosted model's context, so it makes
       the right instruction set the default (PRB places it in a clean
       session), commits the sponsor to what ran (D(PROMPT) over the
       whole zone and every offered tool; the session log) and measures
       behavior by configuration (conformance probes, strata, sandbox
       trials). Not selected: conformance probes later; a set with
       harness built-ins recorded only and the launcher a SHOULD; the
       bundle alone. Excluded: conformance probes with CR6's
       consequences (a wrong template would suspend a conforming agent)
       (5.4.15-5.4.21, 5.14.5, 5.14.6, 5.17.18, 5.18.16, 5.18.17,
       AC-1.23, AC-1.24, AC-2.30, AC-4.48, AC-5.28).
BASIS D183.1  THE INSTRUCTION CHANNEL, D183.1. Basis: read literally,
       6.2 classed the instruction set itself as untrusted input; a
       carve-out for whatever the harness places would give authority
       to vendor or plugin text on the same channel; the class gives it
       only to the digest-verified bundle PRB places and the sponsor's
       bound zone. The profile's parallel wording is the user's own
       decision. Not selected: the class without that proposal; a
       one-sentence carve-out; no change (AC-2.0, AC-2.1).
BASIS D190.1  TPC-PY AND THE DESTRUCTIVE-ACTION GATE, D190.1, taken
       2026-09-27 (pause 0.6.0 Option 1). Basis: as written, an agent
       with no typed human turn in its session could not run TPC-PY, so
       it could present no value, answer no challenge and neither
       petition nor push; PRB places the module it verified, which keeps
       the model outside the verification path, as the GTP BUNDLE rule
       does, and adds no human act. Not selected: the agent verifying
       the digest itself (the model inside the verification path);
       TPC-PY on the host only, EXECUTED-SANDBOX withdrawn (an
       interpreter on every sponsor's host); the rule as written, a
       typed turn per session (no unattended work) (5.4.9, AC-2.12,
       AC-2.29).
BASIS D191.1  SURVEY FALCONS AND THE EGRESS GATE, D191.1, taken
       2026-09-27 (pause 0.6.0 Option 1). Basis: as written, a SURVEY
       falcon worked with no typed human turn could not read the pages
       it exists to survey; TPX fetches the declared pages under THE
       FETCH's guards and the SOURCE MATCH and serves them, FK-20's
       form, so the agents make no network request and the egress rules
       stand unchanged. Not selected: a read of an EXACT URL entry held
       not egress; the same for PREFIX entries passing the PUBLISHER
       TEST (the absence of session content in the path the agent's to
       keep, not a mechanical check); the rule as written, a typed turn
       per falcon (5.20.2, 5.20.11, AC-4.45).
BASIS D192.2  THE RECORD SCHEMA, D192.2, taken 2026-09-28
       (tpm_post_tpcpy_pause 0.1.0 and 0.2.0; selections 0.3.0). Basis:
       the closed table tpm_record_schema, checked by TPC record_check
       at the push and at landing, one upper-case spelling behind
       record_view, the RECORD DIGEST, the class list; slot (a) at b
       adds schema_json, a generated JSON Schema 2020-12 document,
       non-normative, which no rule reads, so a pattern never runs as
       the check. Excluded: a JSON Schema pattern run without a pinned
       translation (Python and PHP accept a final line feed ECMA-262
       refuses), a soundness defect; each module keeping its own
       spelling with a hand mapping outside TPC. Not selected: D(TFK) on
       every record; RFC 8785 canonical JSON; upper case in every
       module; a normative JSON Schema; no T2 rule on ASSUMPTION
       records; no record digest (3.2.16-3.2.21).
BASIS D193.2  GRADE BESIDE STATUS, D193.2, taken 2026-09-28
       (tpm_post_tpcpy_pause 0.1.0 and 0.2.0; selections 0.3.0). Basis:
       two fields: GRADE at landing, a later grade set by the record
       that carries it, inside the digest; STATUS in place, HELD and the
       strike, outside it; HELD never a GRADE; STRUCK retired for
       REFUTED; WITHDRAWN a grade. Excluded: status computed only from
       withdrawal records, which reverses D111.1 and D140.1. Not
       selected: one field STATUS (Option 1); STRUCK kept; WITHDRAWN
       inherited as PROVISIONAL; no WITHDRAWN (3.2.10, 3.3.14).
BASIS D194.1  THE WITHDRAWAL RECORD, D194.1, taken 2026-09-28
       (tpm_post_tpcpy_pause 0.1.0 and 0.2.0; selections 0.3.0). Basis:
       one WITHDRAWAL record per act, TPX-written, with its cascade; a
       citation of a record that does not stand refused; the author
       withdraws only its own record. Excluded: dependents left
       standing, which SR2 rejects; any lead withdrawing any record:
       soundness defects. Not selected: a record per withdrawn record;
       the lead allocating withdrawals (3.3.3, 4.6).
BASIS D195.3  THE RESULT'S FIELDS, D195.3, taken 2026-09-28
       (tpm_post_tpcpy_pause 0.1.0 and 0.2.0; selections 0.3.0). Basis:
       STATEMENT with declared forms, the budget with its root-sum
       check, FIELD:U_C alone; TEXT compared by canonical text equality
       (Option 3, RD-PT-12), its completeness case, two correct
       derivations worded apart, a named limit. Not selected: TEXT
       returned INSPECT (Option 1); FIELD retired; no root-sum check;
       FIELD open; Type B only; a prose FINDING only (3.2.5, 3.2.19,
       5.9.7).
BASIS D196.1  CONDITIONS, D196.1, taken 2026-09-28 (tpm_post_tpcpy_pause
       0.1.0 and 0.2.0; selections 0.3.0). Basis: computed from the
       SITUATION records of the closure and the record's AT, the author
       writing only AT; SR3 and SR8 mechanical over equal CONDITIONS
       where safe, row 21's INSPECTION otherwise. Excluded: every pair
       of equal CONDITIONS tested with AT empty, which would strike a
       true record; the interim kept as the end state. Not selected:
       CONDITIONS declared by the author; the whole closure as
       CONDITIONS (3.2.15, 4.4.13).
BASIS D197.2  THE DOMAIN FORM, D197.2, taken 2026-09-28
       (tpm_post_tpcpy_pause 0.1.0 and 0.2.0; selections 0.3.0). Basis:
       DOMAIN_CONDITION required on every promoting record (Option 2),
       one forced act per promotion, a predicate over REFS held to T6's
       totality. Not selected: an optional condition (Option 1); prose
       only (2.3.3, 3.2.3).
BASIS D198.1  DECLARED FORMS AND ROLE ON RECORDS, D198.1, taken
       2026-09-28 (tpm_post_tpcpy_pause 0.1.0 and 0.2.0; selections
       0.3.0). Basis: EQUATION and ROLE on an L RESULT or an ASSUMPTION,
       checked at landing; settlement of an UNDER gap mechanical, the
       lead's naming only for a record without a form. Excluded: a
       naming settling an unknown the test left OPEN, a soundness
       defect. Not selected: the field required on every EOM-0 push;
       forms on assumptions only; no form on records (3.3.16).
BASIS D199.1  THE NAMED-GAP RECORD, D199.1, taken 2026-09-28
       (tpm_post_tpcpy_pause 0.1.0 and 0.2.0; selections 0.3.0). Basis:
       one NAMED_GAP record per gap, TPX-written, with a STATE line. Not
       selected: a separate settlement record; gaps off the register
       (3.3.5).
BASIS D200.1  THE VERIFICATION RECORD, D200.1, taken 2026-09-28
       (tpm_post_tpcpy_pause 0.1.0 and 0.2.0; selections 0.3.0). Basis:
       its own class, landing after its TARGET, stating the difference
       and ZETA, never agreement. Excluded: the verification as an
       ordinary M RESULT inside SR3, SR5 and SR8, summing veracity into
       congruence, a soundness defect. Not selected: verifications off
       the register (3.3.6).
BASIS D201.1  PROMOTION AND THE ENTRY-STATUS RECORD, D201.1, taken
       2026-09-28 (tpm_post_tpcpy_pause 0.1.0 and 0.2.0; selections
       0.3.0). Basis: the lower of the record's and its entries'
       falsifier classes; TPX promotes at the eligible landing and
       writes a PROMOTION record; the entry's state a computed view. Not
       selected: stored entry states; CAC-only evaluation; promotion on
       request; D92.1 as written; no condition on cited results (3.2.12,
       3.3.2, 3.3.17).
BASIS D202.1  SUCCESSORS, D202.1, taken 2026-09-28 (tpm_post_tpcpy_pause
       0.1.0 and 0.2.0; selections 0.3.0). Basis: batch re-promotion
       when D(TPK) and D(TrM) are equal; reaudit_scope for the first
       CAC. Not selected: the whole D(TFK) equal; a full re-audit;
       neither (3.4.6, 4.1.9).
BASIS D203.1  D(IS)'S ORDERED FIELD LIST, D203.1, taken 2026-09-28
       (tpm_post_tpcpy_pause 0.1.0 and 0.2.0; selections 0.3.0). Basis:
       D(TPS) over the pages' preformatted text, page by page, and D(IS)
       over it; a banner edit moves nothing; PRB recomputes. Not
       selected: a reassembled file; a Merkle tree; the whole wikitext;
       part 6 only (CR9, 5.4.15).
BASIS D204.1  THE RELEASE DIGEST'S FORM NUMBER, D204.1, taken 2026-09-28
       (tpm_post_tpcpy_pause 0.1.0 and 0.2.0; selections 0.3.0). Basis:
       3.3.12 reads "2", the HOLD's form number, as built and declared.
       Not selected: the code moved to "1"; no change (TPX built to TPS
       would refuse TPC-PY's value) (3.3.12).
BASIS D205.1  THE STATUS LINES INSIDE TPS 0.3.0, D205.1, taken
       2026-09-28 (tpm_post_tpcpy_pause 0.1.0 and 0.2.0; selections
       0.3.0). Basis: the batch B1 imported banners and links only,
       TPS_0.3.0.txt unchanged; the pause's TPS sentences ride revision
       7. Not selected: TPS 0.3.1, a PATCH of the status lines (0.1.3).
BASIS D206.1  THE DIAGRAM RENDERERS, D206.1, taken 2026-09-28
       (tpm_post_tpcpy_pause 0.1.0 and 0.2.0; selections 0.3.0). Basis:
       DOT on the server, Mermaid in the browser, the page syntax kept.
       Not selected: both in the browser; others as drafted (5.15.5).
BASIS D207.1  THE SERVER ADDRESS, D207.1, taken 2026-09-28
       (tpm_post_tpcpy_pause 0.1.0 and 0.2.0; selections 0.3.0). Basis:
       https now, with the LocalSettings pass; page addressing a rule of
       the PRB specification. Not selected: at build step 3; at the PRB
       build (5.4.13).
BASIS D208.1  THE RIGHTS CONFIGURATION, D208.1, taken 2026-09-28
       (tpm_post_tpcpy_pause 0.1.0 and 0.2.0; selections 0.3.0). Basis:
       'tpm-agent' and 'tpm-human'; a custom protection level for
       H-DECL's pages; uploads as today. Excluded: sysop-level
       protection with TPX's hook, which a second sysop passes. Not
       selected: 'agent' and 'human-only'; narrowed uploads (5.2.4).
BASIS D209.1  THE CONDITION HOOK, D209.1, taken 2026-09-28
       (tpm_post_tpcpy_pause 0.1.0 and 0.2.0; selections 0.3.0). Basis:
       the UserRequirementsCondition hook, the words amended. Not
       selected: TPX alone; the words kept (5.2.6, 5.14.10).
BASIS D211.1  SERVED PAGES FOR EVERY FALCON CLASS, D211.1, taken
       2026-09-28 (tpm_post_tpcpy_pause 0.1.0 and 0.2.0; selections
       0.3.0). Basis: TPX serves declared FALCON SOURCE LIST pages to
       any kind. Not selected: FK-17 left out; wiki material only
       (5.20.2).
BASIS D212.2  THE TOKEN RULE AND THE VERTICAL BAR, D212.2, taken
       2026-09-28 (tpm_post_tpcpy_pause 0.1.0 and 0.2.0; selections
       0.3.0). Basis: TK2 unchanged: a bar stays a sign; LADDER 2 and
       the approver settle table values. Not selected: bars never signs
       (Option 1) (5.20.11).
BASIS D213.1  THE FALCON SCHEMA DIGEST, D213.1, taken 2026-09-28
       (tpm_post_tpcpy_pause 0.1.0 and 0.2.0; selections 0.3.0). Basis:
       falcon_schema_digest refuses a schema not already canonical, so
       equal digests mean equal strings. Excluded: keeping it as a named
       limit, a latent soundness defect (S83). Not selected: the
       comparison normalizing enumeration values (5.20.2).
BASIS D214.1  STATUS UNDER TWO FIELDS, D214.1, taken 2026-09-29
       (tpm_post_tpcpy_wave4_pause 0.2.0; tpm_post_tpcpy_selections
       0.4.0). Basis: STATUS UNMARKED at landing, one closed set
       UNMARKED | HELD | REFUTED (REFUTED on RESULT and CORROBORATION
       only), on the five classes an account authors, never on TPX's
       classes; the HOLD and RELEASE forms keep the status word,
       tpc_hold and its vectors unchanged. Excluded: STATUS carrying
       ESTABLISHED or WITHDRAWN in place, which reverses the reading of
       D193.2. Not selected: no STATUS line unless HELD or REFUTED;
       STATUS on every keyed class; prior and restored statuses as
       STATUS values only (3.2.10, 3.3.11, 3.3.12).
BASIS D215.2  THE INHERITED RECORD'S BACK-POINTER AND LANDING GRADE,
       D215.2, taken 2026-09-29 (tpm_post_tpcpy_wave4_pause 0.2.0;
       tpm_post_tpcpy_selections 0.4.0). Basis: an envelope field
       INHERITS (RID, TPX-written, inside the digest), present only on a
       record a COPY-FORWARD writes; every inherited record lands
       PROVISIONAL, and the copy writes in the successor a WITHDRAWAL
       per inherited REFUTED or WITHDRAWN record, cause INHERITED beside
       D194.1's five. Excluded: no back-pointer field, which lets the
       check accept a record landed fresh at GRADE REFUTED or WITHDRAWN
       (soundness). Not selected: the inherited grade at landing (3.3.3,
       3.4.1-3.4.3).
BASIS D218.1  U_C'S WRITTEN DIGIT AND THE RECORD DIGEST, D218.1, taken
       2026-09-29 (tpm_post_tpcpy_wave4_pause 0.2.0;
       tpm_post_tpcpy_selections 0.4.0). Basis: a RESULT's U_C enters
       the record digest in its precision form (TPC prec_decimal), the
       budget checked at U_C's last written digit, so one digest never
       gives two verdicts. Excluded: the written reading with the digest
       unchanged (one digest, two verdicts: soundness). Not selected:
       the precision beside the canonical value; the canonical reading;
       a U_C written beyond its canonical form refused (3.2.5, 3.2.20).
BASIS D216.1  THE PER-PAGE HASHES OF A DECLARED TPS, D216.1, taken
       2026-09-29 (tpm_post_tpcpy_wave4_pause 0.2.0;
       tpm_post_tpcpy_selections 0.4.0). Basis: TPX publishes the
       ordered list [title, h] of the kept pages beside D(TPS) and D(IS)
       at each TPS declaration, TPC gives it as tps_pages and PRB names
       each page that differs, is missing or is extra, so a mismatch
       names its page; no digest moves, and no session starts on a
       mismatch. Not selected: the list on each TPS declaration line, a
       larger line for the same check; no list, a mismatch naming no
       page and a person finding it (5.1.18, 5.4.15, 5.11.16, 5.14 CR9).
BASIS D224.1  THE WAY IN FOR A PERSON, D224.1, taken 2026-09-29
       (tpm_post_tpcpy_wave5_pause 0.1.1; tpm_post_tpcpy_selections
       0.5.0). Basis: no visitor makes an account and no account writes
       before a person approves it: an administrator creates the account
       and adds a person's to 'approved', as the wiki runs today,
       written down. Excluded: self-registration with write on a
       confirmed e-mail address, under which every confirmed account
       could edit every unprotected page, the instruction artifacts
       among them, before build step 3 (soundness). Not selected:
       self-registration with a CAPTCHA, write still by approval (5.2.5,
       5.2.7, 5.14.12).
BASIS D228.1  THE KEY PRB USES ON THIS WIKI, D228.1, taken 2026-09-29
       (tpm_post_tpcpy_wave5_pause 0.1.1; tpm_post_tpcpy_selections
       0.5.0). Basis: a bot password acts only within its grants and the
       account's own rights and needs no extension; an owner-only OAuth
       consumer stays open where the OAuth extension is installed. Not
       selected: the OAuth extension with owner-only consumers; both,
       each sponsor choosing (5.4.2).