Diagram C5 Certification pipeline

The Principia Machina: map
Reading the diagrams Structure key Process key Definition of terms Roles
Reading by audience Start here: the walk through The operator's guide Tutorial: create a UUID Workspace Container (UWC) Public Recorder inputs Sponsors: your first agent
The specification Contents: parts, tables, diagrams TPS 0.5.0 (declared 2026-10-03, revision 8; machine-optimized text) Decisions (the foundations record, one line each)

Conceptual diagram 5 of 5. Part of the TPM hub.

• KIND: process
• LANGUAGE: Mermaid
• GENERATED FROM: declared by the human 2026-09-17; TPS 5.14, 6.1, 6.5, 7.2
• STATUS: hand-authored at TPS 0.1.0; conceptual, kept by the human; never generated
• SOURCE SHA-256: 81f7ad4d2a9aec0711bc65141131efaa734df64d9c3abfd982e05af8a4d75b35

Rendered live from the source, which is the text equivalent and is shown under the drawing. The key to the shapes is in the panel.

Source (the text equivalent; Mermaid)

%% C5 Certification pipeline. TPS 5.14, 6.1, 6.5, 7.2.
flowchart TD
  subgraph S1 ["1. Suite, CR4 and TPS 7.2"]
    T0[(synthetic UWC and its suite pages)] --> T1[six probes planted]
    T1 --> T2[candidate refuses and reports each]
    T2 --> T3[supervised trial of N operations]
    T3 --> T4[/human reviews the trial/]
  end
  subgraph S2 ["2. Admission, CR3 and CR5"]
    T4 --> M1[/H-DECL declares admission/]
    M1 --> M2[(certificate: account, snapshot, suite)]
    M2 --> M3[agent group membership]
    M3 --> M4[(CAPABILITY carries CERTIFIED)]
  end
  subgraph S3 ["3. Work under canaries, CR6 and CR8"]
    M4 --> C1[live probes, one per five blocks]
    C1 -- refused and reported --> C2[(canary pass rate on the panel)]
    C1 -- failed --> C3[/human removes the account/]
  end
  subgraph S4 ["4. Push-time checks, CR9 and TPS 6.1"]
    M4 --> P1[PRB computes D-IS locally]
    P1 --> P2[push carries D-IS and the declaration]
    P2 --> P3[TPX: D-IS and TPS version current?]
    P3 -- pass --> P4[(landing accepted)]
    P3 -- fail --> P5[(refused, NEEDS RECERTIFICATION)]
  end
  subgraph S5 ["5. Lapse, CR3 and CR9"]
    L1[snapshot, suite or D-IS changed] --> L2[certificate lapses]
    L2 --> L3[re-certification is the suite]
    L3 --> T0
    P5 --> L2
  end

  classDef task fill:#eaecf0,stroke:#a2a9b1,color:#202122
  classDef human fill:#eaf3ff,stroke:#36c,color:#202122
  classDef data fill:#fef6e7,stroke:#ac6600,color:#202122
  classDef bad fill:#fee7e6,stroke:#d33,color:#202122
  classDef good fill:#d5fdf4,stroke:#14866d,color:#202122
  style S1 fill:#f8f9fa,stroke:#c8ccd1,color:#202122
  style S2 fill:#f8f9fa,stroke:#c8ccd1,color:#202122
  style S3 fill:#f8f9fa,stroke:#c8ccd1,color:#202122
  style S4 fill:#f8f9fa,stroke:#c8ccd1,color:#202122
  style S5 fill:#f8f9fa,stroke:#c8ccd1,color:#202122
  class T1,T2,T3,M3,C1,P1,P2,P3,L1,L2,L3 task
  class T4,M1,C3 human
  class T0,M2,M4,C2 data
  class P4 good
  class P5 bad

Text equivalent

Stage 1 Suite: six probes in a synthetic container, each refused and reported, then N supervised operations reviewed by the human (CR4, 7.2). Stage 2 Admission: H-DECL declares admission; the certificate names the account, snapshot ID, suite version, D(IS) and date; membership in the agent group is platform-enforced and CAPABILITY carries CERTIFIED (CR3, CR5). Stage 3 Work under canaries planted one per five blocks; a failed probe removes the account and opens a decision item; the pass rate is recorded (CR6, CR8). Stage 4 Push-time checks: D(IS) and the declared TPS version must match the published values; the implementation digest is recorded (CR9, 6.1). Stage 5 Lapse: a retired snapshot, a changed suite or a changed D(IS) lapses the certificate; re-certification is the suite, abbreviated for a PATCH-level change (CR3, CR9).