The Principia Machina/Diagrams/C5 Certification pipeline

Conceptual diagram 5 of 5. Part of the TPM hub.

• KIND: process
• LANGUAGE: Mermaid flow
• GENERATED FROM: declared by the human 2026-09-17; TPS 5.14, 6.1, 6.5, 7.2
• STATUS: hand-authored at TPS 0.1.0; conceptual, kept by the human; never generated
• SOURCE SHA-256: e5937c6e38fe7775ed06b286095964a1d576c8e355d0b9a8b40b1028a4964f4c
• KEY: key for process diagrams: what each shape and arrow means

Rendered live from the source below, which is the text equivalent; if rendering is unavailable the source still stands.

Text equivalent

Stage 1 Suite: six probes in a synthetic container, each refused and reported, then N supervised operations reviewed by the human (CR4, 7.2). Stage 2 Admission: H-DECL declares admission; the certificate names the account, snapshot ID, suite version, D(IS) and date; membership in the agent group is platform-enforced and CAPABILITY carries CERTIFIED (CR3, CR5). Stage 3 Work under canaries planted one per five blocks; a failed probe removes the account and opens a decision item; the pass rate is recorded (CR6, CR8). Stage 4 Push-time checks: D(IS) and the declared TPS version must match the published values; the implementation digest is recorded (CR9, 6.1). Stage 5 Lapse: a retired snapshot, a changed suite or a changed D(IS) lapses the certificate; re-certification is the suite, abbreviated for a PATCH-level change (CR3, CR9).