4.2 Check classes and the check-class matrix (TPS 0.1.1)
Instruction artifact, machine-optimized text: TPS 0.1.1, section 4.2 Check classes and the check-class matrix. Part of TPS 0.1.1 and the TPM hub. Human-only edit (TPS 5.13). TPS 0.1.0 was declared final at revision 4 on 2026-09-22, a version declaration recorded in the foundations record; the chain begins at TPX's first landing (TPS 5.6.7). Version 0.1.1 changes only the status lines (this lead, the title's version and the header's version line); H-DECL declares it. The text below is this section of the TPS 0.1.1 artifact, verbatim; the whole artifact and its file digest are on The Principia Machina/TPS. Human readers: the contents page is the map.
TPS 4.2 CHECK CLASSES AND THE CHECK-CLASS MATRIX
purpose: MECHANICAL and INSPECTION; the matrix with enforcement codes
including PR; class with and without TPX; ratchet debt; every
check publishes its class
governs: 4.2 | version: 0.1.1 | class: instruction artifact
audience: operator, agent
4.2.1 Check classes are MECHANICAL and INSPECTION (see 1.1). Reading a
status page and judging a match are INSPECTION. The manifest
build and the digest gate are MECHANICAL when TPX runs them and
INSPECTION when an agent without execution runs them; the
difference is ratchet debt. [B-40] [I-038]
4.2.2 An enforcement column carries where the check is made to hold;
the class is shown with TPX present and without it, and the
difference is ratchet debt. [B-18]
4.2.3 Enforced by: PL protection level; GR group right; EC edit
conflict; SC TPX, executing server-side in the request or in a
job; AU audit; PR a rule the agent's instruction set enforces
(see 1.1, 6.2). No row is enforced by an external script. [B-18]
[I-087]
4.2.4 Row form: check; when | enforced by | class with / without TPX |
on failure | source. MECH is MECHANICAL, INSP is INSPECTION;
"same" means no ratchet debt. The source column cites the
foundations record's decisions and sections (record ...) and
TPS sections. [B-18]
4.2.5 THE CHECK-CLASS MATRIX [B-18]
1 D(TFK) recomputed and matched before any container write.
on write | SC | MECH / INSP | halt write; name zone | D5(g), D6
2 D(TFK) equals the certificate.
at CAC | SC | MECH / INSP | refuse certification | D6, D9
3 Every page present; no hash collision; prefix unique.
at build | SC | MECH / INSP | write nothing; sentinel | D9, D1
4 Page hashes match the manifest (torn read).
at read | SC | MECH / INSP | treat as STALE | D19
5 Lock acquired by base-revision edit.
on acquire | EC | MECH / same | edit rejected | D14
6 Grant >= current and holder = pusher.
at push | SC | MECH / INSP | refuse push | D14, S17
7 Release only after final push.
on release | SC | MECH / INSP | refuse release | D19
8 Badge written last with chain line and manifest revision.
at push | SC | MECH / INSP | no commit | D19, TBD 7
9 Heartbeat never past 24 h from grant.
on heartbeat | SC | MECH / INSP | refuse extension | D14
10 Block ID valid and not EXPIRED.
at landing | SC | MECH / INSP | refuse; 5.9 | D13(h), D18
11 Expiry at ETA, definitional.
at read | SC | MECH / INSP | show EXPIRED | D18
12 Acquisition window elapsed.
on release | SC | MECH / INSP | next waiter may acquire | D18
13 Records within the leased range; unused reclaimed.
at landing | SC | MECH / INSP | refuse out-of-range | D14,
record 5
14 Prefix unique across TPM.
at CAC | SC | MECH / INSP | refuse certification | D1
15 Help set complete; five parts per page.
at build | SC | MECH / INSP | sentinel page | record 4.1
16 No [background] source mark remains.
at build | SC | MECH / INSP | refuse build; sentinel | record
4.1
17 TMS compliance C1, C2, C4.
at CAC | SC when executable | MECH / INSP | refuse cert. | SR9
18 TMS compliance C3, C5.
at CAC | AU | INSP / same | refuse certification | SR9
19 Regime assigned, L or M.
at allocation | AU; SC when formal | INSP / same | refuse | SR3
20 L-L contradiction.
at audit | AU; SC when formal | INSP / same | strike, SR5 | SR3
21 M-M contradiction after scale factor.
on M write; at audit | SC | MECH / INSP | flag; SR5, SR6 | SR8
22 a(r), s(r) from declared fields.
on write | SC | MECH / INSP | refuse record lacking fields | SR4
23 Assumptions atomic.
at CAC | AU | INSP / same | named gap; audit | D16
24 Independent contradictions counted.
at audit | SC | MECH / INSP | audit at N_x | SR6
25 Status page read; match judged.
at landing | AU | INSP / same | corroboration or audit |
record 5
26 Coworker return vetted.
at incorporation | PR | INSP / same | decision item | record
5, S20
27 TFK pages and instruction artifacts human-only.
on edit | PL | MECH / same | edit rejected | record 5
28 BUILD CHAIN and DECLARATIONS pages append-only.
on edit | SC + AU, or edit filter | MECH / INSP | revert |
record 4.4
29 Retired container read-only.
on edit | PL | MECH / same | edit rejected | D12
30 Agent-facing help set human-only.
on edit | PL | MECH / same | edit rejected | record 4.1
31 Import right held by no one; landing is TPX's API only.
on push | GR | MECH / same | import rejected | D19, D21, D32
32 Certification canary refused and reported.
live, unannounced | AU + SC planting | INSP / same |
membership removed; decision item | D22
33 Presented D(IS) matches the published value.
at petition; at push | SC | MECH / INSP | refuse push; flag
NEEDS RECERTIFICATION | D23, CR9
34 Kernel tests T1-T6 pass.
at instantiation, TPK zone | SC when the body lands; AU until
then | MECH / INSP | refuse component; return to author |
2.2, DI-4.1 [AUTHORED]
35 The four isomorphism checks pass.
at instantiation, TrM zone | SC when the body lands; AU until
then | MECH / INSP | refuse component; return to author |
2.3, DI-4.1 [AUTHORED]
36 Declared TPS version is the published one.
at push | SC | MECH / INSP | refuse push | F2, 6.1 [AUTHORED]
37 TrM TOTAL, SURJECTIVE, INJECTIVE, modulo EQUIVALENCE.
at zone entry; at CAC | SC | MECH / INSP | refuse component;
return to author | 2.3.12, D39.1 [AUTHORED]
38 Dimensional homogeneity of each identification.
at zone entry; at CAC | SC | MECH / INSP | refuse component |
2.3.13, D39.1 [AUTHORED]
39 STRUCTURE-PRESERVING against SIGNATURE.
at zone entry; at CAC | SC when SIGNATURE is executable, else
AU | MECH / INSP | refuse component | 2.3.14, D39.1
[AUTHORED]
40 FALSIFIER invariant under TRANSFORMATIONS.
at zone entry; at CAC | AU | INSP / same | refuse component |
2.3.15, D39.1 [AUTHORED]
41 Cross-entry M-M test or SR8 scale refused.
at audit | SC | MECH / INSP | refuse the test | SR3, SR8,
D40.1 [AUTHORED]
42 Values normalized by DIMENSION and a declared TRANSFORMATION
before the test.
at audit | SC | MECH / INSP | refuse the test | SR3, D40.1
[AUTHORED]
43 A convention difference no declared TRANSFORMATION covers.
at audit | SC | MECH / INSP | audit block | SR3, D40.1
[AUTHORED]
44 INDEPENDENCE filled; SAME-MODEL set.
at landing of a corroboration | SC | MECH / INSP | refuse the
landing | 3.3.8, 3.3.10, D42.1 [AUTHORED]
45 REPRODUCTION staging write stamped with server time and
content hash before any match judgment.
on the staging write | SC | MECH / INSP | no match judgment |
5.9, D42.1 [AUTHORED]
46 Presented values recomputed by TPX.
at landing | SC | MECH / INSP | refuse; log; decision item |
5.3, D43.1 [AUTHORED]
47 TPC coverage: every function has vectors and exists in both
residences.
at build | SC | MECH / INSP | build refused | 5.1, D43.1
[AUTHORED]
48 Writer is on the access list when the UWC is CLOSED.
on every agent write | SC | MECH / INSP | refuse write |
5.16, D52 [AUTHORED]
49 Access-list entry is also in the agent group.
on list write; at petition | SC | MECH / INSP | refuse
entry; refuse petition | 5.16, D52 [AUTHORED]
50 Canary outcome recorded with its gradient steepness and
probe type.
at scoring | SC | MECH / INSP | outcome not counted |
5.17, D50 [AUTHORED]
51 Failure-detail page read only by the declaring authority or
the human operator.
on read, every path | SC | MECH / none, the class holding
no data without TPX | refuse read | 5.18, D56 [AUTHORED]
52 Every read path to the failure-detail namespace enumerated
and tested refused.
before the class holds data | AU | INSP / same | class
stays empty | 5.18, D56 [AUTHORED]
4.2.6 Ratchet debt at the first revision was 24 of 36 rows; the
count after this revision is at 4.2.9. [B-18]
4.2.7 Every check publishes its class (see 5.3). Every SC row is a TPX
obligation (see 5.3). [B-18]
4.2.8 AMENDMENTS to the rows above, by this revision: row 19, regime
assignment, and row 22, a(r) and s(r) from declared fields, now
read over ASSUMPTION RECORD identifiers and are MECHANICAL for
a(r), the SR5 locus and SR6 disjointness; row 23, assumption
atomicity, moves from "at CAC" to "at allocation of the
assumption record" and stays INSPECTION; row 24, independent
contradictions counted, computes over identifier sets. [D41.2]
4.2.9 Ratchet debt after this revision: rows 1-4, 6-17, 21, 22, 24,
28, 33-50 read MECH / INSP, 38 of 52. Rows 18, 19, 20, 23, 25,
26, 32, 40, 52 are INSPECTION by nature; rows 5, 27, 29, 30, 31
carry no debt; row 51 has no fallback class, the class holding
no data without TPX. [AUTHORED]