The Principia Machina/Diagrams/06 Three-zone TFK

The Principia Machina: map
Reading the diagrams Structure key Process key Definition of terms Roles
Reading by audience Start here: the walk through The operator's guide Tutorial: create a UUID Workspace Container (UWC) Public Recorder inputs Sponsors: your first agent
The specification Contents: parts, tables, diagrams TPS 0.5.0 (declared 2026-10-03, revision 8; machine-optimized text) Decisions (the foundations record, one line each)

Structural diagram 6 of 12. Part of the TPM hub.

• KIND: structure
• LANGUAGE: DOT
• GENERATED FROM: per-container manifest digests; TPS 2.1, 2.5, 5.6
• STATUS: hand-authored at TPS 0.1.0; superseded by TPX at its first build
• SOURCE SHA-256: 9daf527012dbe2867e844f7502c89b818fd301cf1b8ccc6b359c195a9242fb48
• KEY: key for structure diagrams: what each shape and arrow means; definition of terms; contents of the specification

Rendered live from the source, which is the text equivalent and is shown under the drawing; a wide drawing scrolls sideways inside its frame.

Source (the text equivalent; DOT)

// 06 Three-zone TFK. structure/DOT. Generated from: per-container manifest digests; TPS 2.1, 2.5, 5.6.
digraph three_zone_tfk {
  rankdir=TB; node [shape=box, style=filled, fillcolor="#eaecf0", color="#a2a9b1", fontcolor="#202122", fontname="Helvetica", fontsize=10]; edge [fontname="Helvetica", fontsize=9, color="#54595d", fontcolor="#202122"];
  subgraph cluster_tfk { label="TFK  immutable per container  (2.1)"; style=filled; fillcolor="#f8f9fa";
    TPK [label="TPK in full\nD(TPK)"]; TRM [label="TrM identification fields\nDOF, DOMAIN, identification,\nFALSIFIER, BEARS\nD(TrM)"]; TMS [label="TMS in full\nD(TMS)"]; }
  DTFK [label="D(TFK)\nover the three in fixed order\n2.5.3", shape=octagon];
  CERT [label="CAC certificate\nassigns the UUID\n5.6.4", shape=note]; CHAIN [label="BUILD CHAIN line\n5.6.1", shape=note];
  GATE [label="digest gate\nbefore every write, at every CAC\n2.5.5", shape=diamond];
  TPK -> DTFK; TRM -> DTFK; TMS -> DTFK; DTFK -> CERT; DTFK -> CHAIN; DTFK -> GATE [label="matched"];
}

Text equivalent

The Full Kernel is three immutable zones: the TPK in full, the TrM identification fields (DOF, DOMAIN, identification, FALSIFIER, BEARS) and the TMS in full (2.1.1). Each zone has a digest; D(TFK) is computed over the three in fixed order (2.5.3). D(TFK) is written into the CAC certificate that assigns the UUID and appended as a BUILD CHAIN line (5.6.4, 5.6.1), and the digest gate matches it before every write and at every CAC (2.5.5).