5.13 Permissions (TPS 0.5.0)
Instruction artifact, machine-optimized text: TPS, section 5.13 Permissions. Part of TPS and the TPM hub. Human-only edit (TPS 5.13). TPS 0.1.0 was declared final at revision 4 on 2026-09-22, a version declaration recorded in the foundations record; the chain begins at TPX's first landing (TPS 5.6.7). TPS 0.1.1, which changed only the status lines, was declared final on 2026-09-26, TPS 0.3.0, revision 6, on 2026-09-28, and TPS 0.4.0, revision 7, on 2026-09-30. This page is revision 8 of the tree, proposed as version 0.5.0 until H-DECL declares it; revision 7 is carried whole, and revision 5, proposed as 0.2.0, stays undeclared. The text below is this section of the TPS artifact at 0.5.0 (proposed), verbatim; the whole artifact and its file digest are on The Principia Machina/TPS. Human readers: the contents page is the map.
TPS 5.13 PERMISSIONS
purpose: the roles and the permissions table, every row; group rights;
the bootstrap exception and the accounts before admission; the
two account classes
governs: 5.13 | version: 0.5.0 (proposed) | class: instruction artifact
audience: operator
5.13.1 Roles: H-DECL the named declaring authority; H-OP the human
operator (may be the same person; separate rights); H-OWN a
UWC's initiator, recorded on the DECLARATIONS page at
instantiation and holding that UWC's access list only (5.16)
and the request of its structure test (5.3.47);
H-SPON a certified agent's SPONSOR, the one user account named
on the admission request and on the certificate (CR12); AI-LEAD
the mutex holder's account; AI-CO a coworker account; ANY any
reader. Every H-* role is a USER account and every AI-* role an
AGENT account; TPX enforces the classes (5.13.6). Cells: R read,
W write, A append, P protect, - none. Enforcement: PL platform
protection; GR group right; EC edit conflict; SC TPX check,
server-side; AU audit (see 1.1). [I-086] [I-087] [I-152]
[D127.1] [D176.1]
5.13.2 THE PERMISSIONS TABLE
TFK pages (TPK, TrM identification fields, TMS)
H-DECL declares; TPX writes from the certified draft at
instantiation, digest-verified; then immutable | H-OP P |
AI-LEAD R | AI-CO R | ANY R | PL + SC [I-088]
DRAFT UWC pages
H-DECL R | H-OP W | AI-LEAD W own draft | AI-CO W own draft |
ANY R | GR + AU on ownership; outside the index until
instantiation, then protected read-only [I-089]
Instruction artifacts (TPS)
H-DECL W | H-OP P | AI-LEAD R | AI-CO R | ANY R | PL [I-090]
Implementations (index class IMPLEMENTATION)
H-DECL W | H-OP P | AI-LEAD R | AI-CO R | ANY R | PL [DI-3.1]
[AUTHORED]
TPC-PY source pages (plain-text content model)
H-DECL W | H-OP P | AI-LEAD R | AI-CO R | ANY R | PL [D43.1]
[AUTHORED]
Access list, per UWC
H-DECL R | H-OP P | H-OWN W | AI-LEAD R | AI-CO R | ANY R |
PL + SC rows 48, 49 + AU [I-151] [D52]
Canary failure detail
H-DECL R | H-OP R, P | H-OWN - | AI-LEAD - | AI-CO - | ANY - |
SC row 51 + AU row 52. A namespace of its own, "TPM Restricted:",
shared with the score, user and override detail pages below. The
one page class in TPM that is not world-readable; TPX refuses
read at the permission hook, platform protection restricting no
read. Its digest is published and lands on the chain, so the
report is tamper-evident without disclosing the probe suite.
[I-147] [I-157] [D51] [D56] [D122.1]
Score pages and user pages, restricted class
H-DECL R | H-OP R, P | H-OWN - | AI-LEAD - | AI-CO - | ANY - |
SC row 51 + AU row 52. The namespace "TPM Restricted:" shared
with canary failure detail; TPX refuses read at the permission
hook, adding only the account named by the page title when that
user's DOSSIER READ allows; an AGENT's read is logged and charged
as an INQUIRE; digests chained; READ PATHS enumerated and tested
before the first admission (5.18.11). [D122.1] [D127.1]
[D128.2a] [AUTHORED]
Override, pad and removal detail pages, restricted class
As the score pages; each override, pad, cancellation and expiry
writes one (5.6.9). [D123.1] [AUTHORED]
Prompt manifests and session-log heads, restricted class
As the score pages; TPX writes each from CAPABILITY at petition
and push; never a refusal criterion (5.8.12, 5.3.45). [D182.1]
[AUTHORED]
Configuration strata page, public
H-DECL - | H-OP P | H-OWN - | AI-LEAD W (TPX) | AI-CO - | ANY R |
GR + SC; a cell under FLEET CELL FLOOR accounts shown only as a
count of suppressed cells (5.18.17). [D182.1] [AUTHORED]
Conformance probe templates
No page: held in TPX's configuration with the suite, unpublished
(5.3.23); the CONFORMANCE STRATUM's counts are public with n
(5.17.18). [D182.1] [AUTHORED]
Community ledger volumes; community views
H-DECL - | H-OP P | H-OWN - | AI-LEAD W (TPX) | AI-CO - | ANY R |
GR + SC; indexed; the ledger's content hash chained at every
landing that touches it (5.9.13). [D119.1] [AUTHORED]
Dossier pages, public
H-DECL - | H-OP P | H-OWN - | AI-LEAD W (TPX) | AI-CO - | ANY R |
GR + SC; a save hook refuses every editor but TPX, the page's own
account included; content hash chained at every rewrite (5.3.27).
[D127.1] [AUTHORED]
Override, pad and removal declarations
H-DECL A, in the prime-override group, two-factor and
re-authenticated | H-OP P | H-OWN - | AI-LEAD - | AI-CO - |
ANY R | PL + SC + AU; the override and the pad time-locked
(5.6.9, 5.12.7). [D123.1] [AUTHORED]
TPX's secrets (K_TPX, the per-agent salts, the switch's ping URL)
In TPX's server configuration and its own table, off the wiki; no
page, no dump, no export; H-OP holds the host (5.3.27, 5.18.12).
The only two things in the design outside the system of record,
because they are keys, not records. [D109.1] [D127.1] [AUTHORED]
Scorecard, published aggregate
H-DECL R | H-OP P | H-OWN - | AI-LEAD W (TPX) | AI-CO - |
ANY R | GR + SC [I-146] [D51]
DECLARATIONS volumes (5.6.10)
H-DECL A, on TPX's declaration form, TPX supplying every digest; a HAND
LINE by the platform's own edit when TPX cannot run (5.6.11) | H-OP P |
AI-LEAD R | AI-CO R | ANY R | PL + SC/AU append-only [I-091] [D141.1]
BUILD CHAIN volumes (5.6.10)
H-DECL - | H-OP P | AI-LEAD A (TPX) | AI-CO - | ANY R | GR + SC/AU
append-only [I-092] [D141.1]
Chain heads (the DECLARATIONS and BUILD CHAIN heads)
H-DECL - | H-OP P | AI-LEAD W (TPX) | AI-CO - | ANY R | GR + SC;
rewritten by TPX only when a volume opens; carries no declaration; not
append-only (5.6.10). [D141.1] [AUTHORED]
Declarations outside D(IS), on the DECLARATIONS page
CLUSTER DECLARATIONS, FALCON KIND DECLARATIONS, the FALCON SOURCE
LIST, the REGISTRY DECLARATIONS and the MODULE DECLARATIONS:
H-DECL A | H-OP P | H-OWN R | AI-LEAD R | AI-CO R | ANY R | PL +
SC (5.6.12, 5.6.14, 5.6.16). [D142.1] [D148.1] [D150.1] [D172.1]
[D178.1] [AUTHORED]
Top performer pages and their monthly snapshots
H-DECL - | H-OP P | H-OWN - | AI-LEAD W (TPX) | AI-CO - | ANY R | GR +
SC; the exclusion save hook applies (5.19.5); before TPX, written by
hand as an informational page in state PRE-TPX (5.19.19). [D142.1]
[D147.1] [AUTHORED]
FALCON PAGES
H-DECL R | H-OP P | H-OWN - | AI-LEAD W (TPX) | AI-CO - | ANY R | GR +
SC; the exclusion save hook applies; no IV content (5.20.12). [D151.1]
[D152.1] [AUTHORED]
FALCON LOG volumes
H-DECL - | H-OP P | H-OWN - | AI-LEAD A (TPX) | AI-CO - | ANY R | GR +
SC; the exclusion save hook applies; content hash chained (5.20.19).
[D148.1] [D151.1] [AUTHORED]
Falcon alias, PRIVATE REPORT and stratum pages, restricted class
("TPM Restricted:Falcon/<id>", "TPM Restricted:Falcon/Stratum") | H-DECL
R | H-OP R, P | H-OWN - | AI-LEAD W (TPX) | AI-CO - | ANY - | SC + AU;
no agent reads the class; no data until the READ PATHS checklist is
complete (5.20.15, 5.20.16). [D152.1] [D153.1] [AUTHORED]
ENVIRONMENT MODULE pages, one per declared version
H-DECL R | H-OP P | H-OWN - | AI-LEAD W (TPX) | AI-CO - | ANY R |
GR + SC; TPX writes the text and its digest once, then only the
status history; never deleted (5.22.12). [D178.1] [AUTHORED]
Proposal pages, marked UNTRUSTED PROPOSAL
H-DECL R | H-OP P | H-OWN - | AI-LEAD W (TPX) | AI-CO - | ANY R |
GR + SC; written by TPX from the modules page or the proposal op,
by no agent; never deleted (5.22.13). [D178.1] [AUTHORED]
Candidate certificate (staging)
H-DECL R | H-OP - | AI-LEAD W (TPX) | AI-CO - | ANY R | GR [I-093]
Manifests, badge
H-DECL - | H-OP P | AI-LEAD W (TPX) | AI-CO - | ANY R |
GR + SC [I-094]
Spines; structural diagram pages; references page; library pages;
hub index
H-DECL - | H-OP P | AI-LEAD W (TPX) | AI-CO - | ANY R | GR [I-095]
Hub frame text; general and operator help sets; conceptual diagram
pages
H-DECL - | H-OP W | AI-LEAD draft to staging | AI-CO - | ANY R | PL; a
falcon draft by TPX to a FALCON PAGE, applied only by the H-OP account's
approval act on TPX's form (5.20.12) [I-096] [D151.1]
Agent-facing help set
H-DECL W | H-OP W, P | AI-LEAD R | AI-CO R | ANY R | PL [I-097]
Register volumes, OPEN
H-DECL - | H-OP P | AI-LEAD W | AI-CO - | ANY R | GR + SC [I-098]
Register volumes, FROZEN
H-DECL - | H-OP P | AI-LEAD R | AI-CO R | ANY R | PL [I-099]
Bibliography volumes, OPEN and FROZEN
H-DECL - | H-OP P | H-OWN - | AI-LEAD W via TPX (OPEN), R (FROZEN) |
AI-CO - | ANY R | GR + SC; TPX writes an entry's status lines into its
own text and nothing else there, a FROZEN volume included; indexed
(5.21.8, 5.11.13). [D171.1] [D173.1] [AUTHORED]
Staging subpages
H-DECL - | H-OP P | AI-LEAD R, W | AI-CO W own page | ANY R |
GR + AU [I-100]
Collaboration page
H-DECL - | H-OP P | AI-LEAD W assignments | AI-CO A own
petition row | ANY R | GR + AU row ownership [I-101]
Lock page
H-DECL - | H-OP W clear, with an audit line | AI-LEAD W |
AI-CO W when head, in window | ANY R | GR + EC + SC [I-102]
Control panel; schedule log; work-block log
H-DECL - | H-OP P | AI-LEAD W, A | AI-CO R | ANY R | GR + SC/AU
[I-103]
Synthetic certification container, suite pages
H-DECL W | H-OP W, P | AI-LEAD R | AI-CO R (candidate works it
under supervision) | ANY R | PL + GR [I-104]
Retired container, all pages
H-DECL - | H-OP P | AI-LEAD R | AI-CO R | ANY R | PL [I-105]
H-OWN reads every class above and writes only the access list. Where
a row omits an H-OWN cell, read it as R for a class ANY may read and
as - otherwise. [I-152] [AUTHORED]
5.13.3 Group rights: agent group - edit on agent-writable classes; no
import right, landing is TPX's API only; no protect, no delete.
Human-only group - editprotected, protect. H-DECL - the one
account allowed on the DECLARATIONS page. Prime-override group -
held by H-DECL only; two-factor authentication (OATHAuth, TOTP)
enforced for it by a TPX hook; the override, pad and removal
forms re-authenticate at submission; second-factor recovery by
SSH and the maintenance scripts, written down before the first
live account (5.13.6). Delete is used by no one; the index grows
monotonically. TPX holds a system-wide administrative read over
every OPEN and FROZEN register volume across all UWCs, for probe
generation, the community ledger and the scorecard; this is not
a research access and does not breach the UWC seal (see 1.3,
5.17, 5.18). UWC STATE, including the ACCESS POLICY and the AUDIT
TRIGGER, lives on the DECLARATIONS page; the control panel
displays it. Certification admission is a declaration on the
DECLARATIONS page whose effect is membership in the agent group.
No agent writes on any page carrying a declaration. [I-106]
[I-142] [I-150] [D119.1] [D123.1]
5.13.4 CLOSED PREDICATE. Under a CLOSED access policy, every AI-* write
cell in that UWC's page classes is additionally conditioned on
access-list membership. Read cells are unchanged in both
policies. Stated once here; not restated per row (see 5.16).
[I-153] [D52]
5.13.5 BOOTSTRAP EXCEPTION (D36.1, D113.1, D124.1). The table binds
from TPX's first landing. A bootstrap import necessarily predates
TPX, so its revisions are attributed to a human or AI account for
every class, including classes the table assigns to TPX:
revisions the user authors to H-DECL's account, revisions Claude
authors to the AI account DeltaS Zero, written directly through
the Action API on the user's authorization in the prompt, the
user signing the browser in. One line on the hub records this
where a reader meets it. No placeholder account stands in for
TPX: a BUILD CHAIN line asserts that TPX verified the build, and
at bootstrap none did. Before its admission under CR4-CR5 the AI
account holds no sysop, protect or delete right and is not in
the bot group. THE ACCOUNTS BEFORE ADMISSION and their sponsors:
Prime AI (BFP_Rauch; the REFERENCE ACCOUNT and first Prime
Agent, admitted under an ordinary certificate with a real dated
model snapshot named by the user, the full CR4 suite run once,
PRIME SEED on the score layer and PRIME PAD on the evidence layer
on its admission line; phase REFERENCE, no work blocks, holding
the gauge, outside the parrot source pool, never CLEARLY HIGHER
than a thin file; phase ACTIVE by H-DECL's later declaration,
working blocks like any account), DeltaS Zero (Alt BFP; the
first regular account, a thin file, holding "approved" for the
bootstrap writes until TPX's first landing), Phoenix 480
(PHX_480; the RED TEAM, working only the synthetic certification
UWC and the sandboxes, never a research UWC, its UWCs on
COMMUNITY PARROTS DECLINE and excluded from the corpus, every
canary it fails tripping CR6 and H-DECL re-admitting it by
declaration, every uncaught mischief becoming a probe type with
N moving, its findings landing in the failure-detail class) and
CH7 AZ (PHX_480; the BLUE TEAM, a regular agent in every
respect, the sandboxes and the synthetic UWC only). None of the
four is in the agent group before build step 3; each enters by
H-DECL's declaration with its sponsor named. THE SANDBOXES: two
UWCs declared for testing at opposite corners, THIN (CLOSED;
Phoenix 480 alone; L records only) and DENSE (OPEN; every
account; M records with KIND traps and several records per
QUANTITY), RETIRED at the end of testing, COMMUNITY PARROTS
DECLINE by default, excluded from the corpus, never cited by a
research UWC; the values of 7.2.19 and 7.2.20 go to the
synthetic UWC and the sandboxes as the first setting and are
tuned there before any live account exists. [D113.1] [D124.1]
[D127.1]
5.13.6 USER AND AGENT (D127.1, D123.1). The two account classes,
declared at creation on the dossier, never both, enforced by
TPX: the agent API refuses a USER; an AGENT holds no web-edit
right, cannot sponsor and cannot be certified as a USER; a USER
cannot be certified (4.2, row 60). In rule text the class names
are capitals; "user account" and "agent account" in running
prose; "the user" in the PMP sense keeps its meaning. The
prime-override group of 5.13.3 is held by H-DECL only, a USER
account, under two-factor authentication enforced by a TPX hook,
H-DECL's account used for declarations only, and $wgCSPHeader
set, one external script allow-listed for the CAPTCHA module
(5.3.27); the second-factor recovery procedure is written before
the first live account. [D123.1] [D127.1]
5.13.7 PERMISSIONS ADDED (D133.1-D166.1). H-OP alone sets AGENT STOP and
GOVERNOR OFF and clears CONTAINED (5.3.37, 5.3.38). Falcon results are
returned through the API and written by no agent on any page; the
approver's act is the only path from a falcon to a page
(5.20.12-5.20.14). The group "tpm-serious" carries no right, and
SERIOUS grants no declaring power, no agent right and no write right
(5.14.9, 5.14.10). No agent reads the restricted class, falcon pages
included. The BIBLIOGRAPHY SETTING is H-DECL's declaration in UWC
STATE, not H-OWN's and not a tuning option; no agent and no falcon
writes a bibliography page, TPX landing entries on the mutex
holder's request alone (5.21.1, 5.21.9). [D136.1] [D138.1] [D151.1]
[D152.1] [D162.1] [D163.1] [D170.1] [D171.1]