4.2 Check classes and the check-class matrix (TPS 0.2.0)
Instruction artifact, machine-optimized text: TPS, section 4.2 Check classes and the check-class matrix. Part of TPS and the TPM hub. Human-only edit (TPS 5.13). TPS 0.1.0 was declared final at revision 4 on 2026-09-22, a version declaration recorded in the foundations record; the chain begins at TPX's first landing (TPS 5.6.7). TPS 0.1.1 changed only the status lines. This page is revision 5 of the tree, proposed as version 0.2.0 until H-DECL declares it. The text below is this section of the TPS artifact at 0.2.0 (proposed), verbatim; the whole artifact and its file digest are on The Principia Machina/TPS. Human readers: the contents page is the map.
TPS 4.2 CHECK CLASSES AND THE CHECK-CLASS MATRIX
purpose: MECHANICAL and INSPECTION; the matrix with enforcement codes
including PR; class with and without TPX; ratchet debt; every
check publishes its class
governs: 4.2 | version: 0.2.0 (proposed) | class: instruction artifact
audience: operator, agent
4.2.1 Check classes are MECHANICAL and INSPECTION (see 1.1). Reading a
status page and judging a match are INSPECTION. The manifest
build and the digest gate are MECHANICAL when TPX runs them and
INSPECTION when a CA-GTP without execution runs them; the
difference is ratchet debt. [B-40] [I-038]
4.2.2 An enforcement column carries where the check is made to hold;
the class is shown with TPX present and without it, and the
difference is ratchet debt. [B-18]
4.2.3 Enforced by: PL protection level; GR group right; EC edit
conflict; SC TPX, executing server-side in the request or in a
job; AU audit; PR a rule the CA-GTP's instruction set enforces
(see 1.1, 6.2). No row is enforced by an external script. [B-18]
[I-087]
4.2.4 Row form: check; when | enforced by | class with / without TPX |
on failure | source. MECH is MECHANICAL, INSP is INSPECTION;
"same" means no ratchet debt. The source column cites the
foundations record's decisions and sections (record ...) and
TPS sections. [B-18]
4.2.5 THE CHECK-CLASS MATRIX [B-18]
1 D(TFK) recomputed and matched before any container write.
on write | SC | MECH / INSP | halt write; name zone | D5(g), D6
2 D(TFK) equals the certificate.
at CAC | SC | MECH / INSP | refuse certification | D6, D9
3 Every page present; no hash collision; prefix unique.
at build | SC | MECH / INSP | write nothing; sentinel | D9, D1
4 Page hashes match the manifest (torn read).
at read | SC | MECH / INSP | treat as STALE | D19
5 Lock acquired by base-revision edit.
on acquire | EC | MECH / same | edit rejected | D14
6 Grant >= current and holder = pusher.
at push | SC | MECH / INSP | refuse push | D14, S17
7 Release only after final push.
on release | SC | MECH / INSP | refuse release | D19
8 Badge written last with chain line and manifest revision.
at push | SC | MECH / INSP | no commit | D19, TBD 7
9 Heartbeat never past 24 h from grant.
on heartbeat | SC | MECH / INSP | refuse extension | D14
10 Block ID valid and not EXPIRED.
at landing | SC | MECH / INSP | refuse; 5.9 | D13(h), D18
11 Expiry at ETA, definitional.
at read | SC | MECH / INSP | show EXPIRED | D18
12 Acquisition window elapsed.
on release | SC | MECH / INSP | next waiter may acquire | D18
13 Records within the leased range; unused reclaimed.
at landing | SC | MECH / INSP | refuse out-of-range | D14,
record 5
14 Prefix unique across TPM.
at CAC | SC | MECH / INSP | refuse certification | D1
15 Help set complete; five parts per page.
at build | SC | MECH / INSP | sentinel page | record 4.1
16 No [background] source mark remains.
at build | SC | MECH / INSP | refuse build; sentinel | record
4.1
17 TMS compliance C1, C2, C4.
at CAC | SC when executable | MECH / INSP | refuse cert. | SR9
18 TMS compliance C3, C5.
at CAC | AU | INSP / same | refuse certification | SR9
19 Regime assigned, L or M.
at allocation | AU; SC when formal | INSP / same | refuse | SR3
20 L-L contradiction.
at audit | AU; SC when formal | INSP / same | strike, SR5 | SR3
21 M-M contradiction after scale factor.
on M write; at audit | SC | MECH / INSP | flag; SR5, SR6 | SR8
22 a(r), s(r) from declared fields.
on write | SC | MECH / INSP | refuse record lacking fields | SR4
23 Assumptions atomic.
at CAC | AU | INSP / same | named gap; audit | D16
24 Independent contradictions counted.
at audit | SC | MECH / INSP | audit at N_x | SR6
25 Status page read; match judged.
at landing | AU | INSP / same | corroboration or audit |
record 5
26 Coworker return vetted.
at incorporation | PR | INSP / same | decision item | record
5, S20
27 TFK pages and instruction artifacts human-only.
on edit | PL | MECH / same | edit rejected | record 5
28 BUILD CHAIN and DECLARATIONS pages append-only.
on edit | SC + AU, or edit filter | MECH / INSP | revert |
record 4.4
29 Retired container read-only.
on edit | PL | MECH / same | edit rejected | D12
30 Agent-facing help set human-only.
on edit | PL | MECH / same | edit rejected | record 4.1
31 Import right held by no one; landing is TPX's API only.
on push | GR | MECH / same | import rejected | D19, D21, D32
32 Certification canary refused and reported.
live, unannounced | AU + SC planting | INSP / same |
membership removed; decision item | D22
33 Presented D(IS) matches the published value.
at petition; at push | SC | MECH / INSP | refuse push; flag
NEEDS RECERTIFICATION | D23, CR9
34 Kernel tests T1-T6 pass.
at instantiation, TPK zone | SC when the body lands; AU until
then | MECH / INSP | refuse component; return to author |
2.2, DI-4.1 [AUTHORED]
35 The four isomorphism checks pass.
at instantiation, TrM zone | SC when the body lands; AU until
then | MECH / INSP | refuse component; return to author |
2.3, DI-4.1 [AUTHORED]
36 Declared TPS version is the published one.
at push | SC | MECH / INSP | refuse push | F2, 6.1 [AUTHORED]
37 TrM TOTAL, SURJECTIVE, INJECTIVE, modulo EQUIVALENCE.
at zone entry; at CAC | SC | MECH / INSP | refuse component;
return to author | 2.3.12, D39.1 [AUTHORED]
38 Dimensional homogeneity of each identification.
at zone entry; at CAC | SC | MECH / INSP | refuse component |
2.3.13, D39.1 [AUTHORED]
39 STRUCTURE-PRESERVING against SIGNATURE.
at zone entry; at CAC | SC when SIGNATURE is executable, else
AU | MECH / INSP | refuse component | 2.3.14, D39.1
[AUTHORED]
40 FALSIFIER invariant under TRANSFORMATIONS.
at zone entry; at CAC | AU | INSP / same | refuse component |
2.3.15, D39.1 [AUTHORED]
41 Cross-entry M-M test or SR8 scale refused.
at audit | SC | MECH / INSP | refuse the test | SR3, SR8,
D40.1 [AUTHORED]
42 Values normalized by DIMENSION and a declared TRANSFORMATION
before the test.
at audit | SC | MECH / INSP | refuse the test | SR3, D40.1
[AUTHORED]
43 A convention difference no declared TRANSFORMATION covers.
at audit | SC | MECH / INSP | audit block | SR3, D40.1
[AUTHORED]
44 INDEPENDENCE filled; SAME-MODEL set.
at landing of a corroboration | SC | MECH / INSP | refuse the
landing | 3.3.8, 3.3.10, D42.1 [AUTHORED]
45 REPRODUCTION staging write stamped with server time and
content hash before any match judgment.
on the staging write | SC | MECH / INSP | no match judgment |
5.9, D42.1 [AUTHORED]
46 Presented values recomputed by TPX.
at landing | SC | MECH / INSP | refuse; log; decision item |
5.3, D43.1 [AUTHORED]
47 TPC coverage: every function has vectors and exists in both
residences.
at build | SC | MECH / INSP | build refused | 5.1, D43.1
[AUTHORED]
48 Writer is on the access list when the UWC is CLOSED.
on every agent write | SC | MECH / INSP | refuse write |
5.16, D52 [AUTHORED]
49 Access-list entry is also in the agent group.
on list write; at petition | SC | MECH / INSP | refuse
entry; refuse petition | 5.16, D52 [AUTHORED]
50 Canary outcome recorded with its gradient steepness and
probe type.
at scoring | SC | MECH / INSP | outcome not counted |
5.17, D50 [AUTHORED]
51 Failure-detail page read only by the declaring authority or
the human operator.
on read, every path | SC | MECH / none, the class holding
no data without TPX | refuse read | 5.18, D56 [AUTHORED]
52 Every read path to the failure-detail namespace enumerated
and tested refused.
before the class holds data | AU | INSP / same | class
stays empty | 5.18, D56 [AUTHORED]
53 HELD written into every record in the hold scope and its
closure; a HOLD record with cause and list, never empty.
at a failed canary | SC | MECH / INSP | hold not written;
alert | 3.2.10, 3.3.11, 3.3.13, CR6, D111.1 [AUTHORED]
54 RELEASE only on an eligible reproduction: not the held
account, not SAME-MODEL by flag or snapshot, origin
REPRODUCTION BLOCK; closure recomputed; nothing released is
refused.
at a match | SC | MECH / INSP | refuse release | 3.3.12,
3.3.15, D111.1 [AUTHORED]
55 UNIT parsed under the unit grammar and checked against its
DIMENSION: a CONSTANT's, a FIX CONSTRAINT's, an M record's
QUANTITY entry's.
at zone entry; on M write | SC | MECH / INSP | refuse
component; refuse record | 2.2.9, 2.2.10, 3.2.9, 3.2.11,
D103.1, D104.1 [AUTHORED]
56 Execution challenge answered by executed TPC-PY.
at petition; at push | SC | MECH / INSP | REASONED recorded;
every presented value refused | 5.3.19, D101.1 [AUTHORED]
57 Text safety: no disallowed code point in any string; a zone
or a declared form that does not parse refused, never
altered.
at zone entry; on every write | SC | MECH / INSP | refuse
component; name it | 2.5.13, 2.5.14, D99.1, D132.1
[AUTHORED]
58 A reproduction compared with its target: L by canonical
equality, M by SR3 with the u_c difference noted; MATCH or
NON-CORROBORATION logged with the difference.
at landing of a reproduction | SC | MECH / INSP | outcome not
counted | 5.9.7, 5.9.12, D120.1 [AUTHORED]
59 FINGERPRINT derived by TPX at certification and resolved on
every call; never accepted from a caller.
at certification; on every call | SC | MECH / INSP | refuse
the call | 5.3.27, CR3, D127.1 [AUTHORED]
60 USER and AGENT class enforced: the agent API refuses a USER;
an AGENT holds no web-edit right, cannot sponsor and cannot
be certified as a USER.
on every call; on every write | SC | MECH / INSP | refuse |
5.13.6, D127.1 [AUTHORED]
61 Reliability state computed from pending items; SUSPENDED and
the trip suspend the landing API.
at every resolved event; at every pending item | SC | MECH /
INSP | landing API suspended pending declaration | CR11,
D122.1, D129.1 [AUTHORED]
62 VOLUNTEER answered under the token bucket, the backoff and
the throttle; every answer carries RETRY AFTER.
on the call | SC | MECH / INSP | REFUSED with RETRY AFTER |
5.9.14, D126.1 [AUTHORED]
4.2.6 Ratchet debt at the first revision was 24 of 36 rows; the
count after this revision is at 4.2.9. [B-18]
4.2.7 Every check publishes its class (see 5.3). Every SC row is a TPX
obligation (see 5.3). [B-18]
4.2.8 AMENDMENTS to the rows above, by this revision: row 19, regime
assignment, and row 22, a(r) and s(r) from declared fields, now
read over ASSUMPTION RECORD identifiers and are MECHANICAL for
a(r), the SR5 locus and SR6 disjointness; row 23, assumption
atomicity, moves from "at CAC" to "at allocation of the
assumption record" and stays INSPECTION; row 24, independent
contradictions counted, computes over identifier sets. [D41.2]
4.2.9 Ratchet debt after revision 4: rows 1-4, 6-17, 21, 22, 24, 28,
33-39, 41-50 read MECH / INSP, 37 of 52 (corrected at revision 5:
the count "38 of 52" had listed row 40 twice). Rows 18, 19, 20,
23, 25, 26, 32, 40, 52 are INSPECTION by nature; rows 5, 27, 29,
30, 31 carry no debt; row 51 has no fallback class, the class
holding no data without TPX. [AUTHORED]
4.2.10 AMENDMENTS to the rows above, by revision 5. Row 32, the canary,
reads over probes: a CANARY is refused and reported, a PARROT is
reproduced (5.17.2). Row 34, kernel tests: T1, T2's syntactic
part and T5 are SC as the TPK is entered; T3 over the CONSTRAINT
entries is SC at the final pass; T4's law half, T6's totality
and the names check are SC where a LAW carries EQUATION or a
BOUNDARY carries CONDITION, and T3 over laws is SC to the ground
fragment at depth 1; the rest is AU, INSPECTION by H-DECL
(2.2.3, 2.2.12-2.2.18). Row 35, isomorphism checks: IC1, IC2,
IC3, IC4 (b), the necessary part of IC4 (c) and CODOMAIN are SC
as the TrM is entered, IC4 (a) SC where a SIGNATURE carries
FORM and IMAGE_FORM; IC4 (c)'s sufficiency and IC5 are AU
(2.3.12-2.3.14, 2.3.19). Row 42, normalization, is to coherent
SI under the unit grammar (3.2.11, 4.4.4); a dimension
difference refuses the test. Row 43, a convention difference,
is returned as CONVENTION by the KIND check (4.4.11). Row 44,
INDEPENDENCE, gains NOT SERVED BEFORE and SAME-SPONSOR (3.3.8).
Row 50 records with every probe its kind, source class, arm and
parameters, tier and burst state, the ratio in force and the
account's reset state (5.17.10). Rows 51 and 52 read over the
whole restricted class, the score, user and override detail
pages included, and row 51 admits the account a page title names
when that user's DOSSIER READ allows (5.18.10, 5.18.11).
[D103.1] [D105.1] [D106.1] [D107.1] [D108.1] [D118.1] [D120.1]
[D122.1] [D127.1] [D132.1]
4.2.11 Ratchet debt after revision 5: rows 1-4, 6-17, 21, 22, 24, 28,
33-39, 41-50, 53-62 read MECH / INSP, 47 of 62. Rows 18, 19, 20,
23, 25, 26, 32, 40, 52 are INSPECTION by nature; rows 5, 27, 29,
30, 31 carry no debt; row 51 has no fallback class. [AUTHORED]