4.2 Check classes and the check-class matrix (TPS 0.5.0)
Instruction artifact, machine-optimized text: TPS, section 4.2 Check classes and the check-class matrix. Part of TPS and the TPM hub. Human-only edit (TPS 5.13). TPS 0.1.0 was declared final at revision 4 on 2026-09-22, a version declaration recorded in the foundations record; the chain begins at TPX's first landing (TPS 5.6.7). TPS 0.1.1, which changed only the status lines, was declared final on 2026-09-26, TPS 0.3.0, revision 6, on 2026-09-28, and TPS 0.4.0, revision 7, on 2026-09-30. This page is revision 8 of the tree, proposed as version 0.5.0 until H-DECL declares it; revision 7 is carried whole, and revision 5, proposed as 0.2.0, stays undeclared. The text below is this section of the TPS artifact at 0.5.0 (proposed), verbatim; the whole artifact and its file digest are on The Principia Machina/TPS. Human readers: the contents page is the map.
TPS 4.2 CHECK CLASSES AND THE CHECK-CLASS MATRIX
purpose: MECHANICAL and INSPECTION; the matrix with enforcement codes
including PR; class with and without TPX; ratchet debt; every
check publishes its class
governs: 4.2 | version: 0.5.0 (proposed) | class: instruction artifact
audience: operator, agent
4.2.1 Check classes are MECHANICAL and INSPECTION (see 1.1). Reading a
status page and judging a match are INSPECTION. The manifest
build and the digest gate are MECHANICAL when TPX runs them and
INSPECTION when a CA-GTP without execution runs them; the
difference is ratchet debt. [B-40] [I-038]
4.2.2 An enforcement column carries where the check is made to hold;
the class is shown with TPX present and without it, and the
difference is ratchet debt. [B-18]
4.2.3 Enforced by: PL protection level; GR group right; EC edit
conflict; SC TPX, executing server-side in the request or in a
job; AU audit; PR a rule the CA-GTP's instruction set enforces
(see 1.1, 6.2). No row is enforced by an external script. [B-18]
[I-087]
4.2.4 Row form: check; when | enforced by | class with / without TPX |
on failure | source. MECH is MECHANICAL, INSP is INSPECTION;
"same" means no ratchet debt. The source column cites the
foundations record's decisions and sections (record ...) and
TPS sections. [B-18]
4.2.5 THE CHECK-CLASS MATRIX [B-18]
1 D(TFK) recomputed and matched before any container write.
on write | SC | MECH / INSP | halt write; name zone | D5(g), D6
2 D(TFK) equals the certificate.
at CAC | SC | MECH / INSP | refuse certification | D6, D9
3 Every page present; no hash collision; prefix unique.
at build | SC | MECH / INSP | write nothing; sentinel | D9, D1
4 Page hashes match the manifest (torn read).
at read | SC | MECH / INSP | treat as STALE | D19
5 Lock acquired by base-revision edit.
on acquire | EC | MECH / same | edit rejected | D14
6 Grant >= current and holder = pusher.
at push | SC | MECH / INSP | refuse push | D14, S17
7 Release only after final push.
on release | SC | MECH / INSP | refuse release | D19
8 Badge written last with chain line and manifest revision.
at push | SC | MECH / INSP | no commit | D19, TBD 7
9 Heartbeat never past 24 h from grant.
on heartbeat | SC | MECH / INSP | refuse extension | D14
10 Block ID valid and not EXPIRED.
at landing | SC | MECH / INSP | refuse; 5.9 | D13(h), D18
11 Expiry at ETA, definitional.
at read | SC | MECH / INSP | show EXPIRED | D18
12 Acquisition window elapsed.
on release | SC | MECH / INSP | next waiter may acquire | D18
13 Records within the leased range; unused reclaimed.
at landing | SC | MECH / INSP | refuse out-of-range | D14,
record 5
14 Prefix unique across TPM.
at CAC | SC | MECH / INSP | refuse certification | D1
15 Help set complete; five parts per page.
at build | SC | MECH / INSP | sentinel page | record 4.1
16 No [background] source mark remains.
at build | SC | MECH / INSP | refuse build; sentinel | record
4.1
17 TMS compliance C1, C2, C4.
at CAC | SC when executable | MECH / INSP | refuse cert. | SR9
18 TMS compliance C3, C5.
at CAC | AU | INSP / same | refuse certification | SR9
19 Regime assigned, L or M.
at allocation | AU; SC when formal | INSP / same | refuse | SR3
20 L-L contradiction.
at audit | AU; SC when formal | INSP / same | strike, SR5 | SR3
21 M-M contradiction after scale factor.
on M write; at audit | SC | MECH / INSP | flag; SR5, SR6 | SR8
22 a(r), s(r) from declared fields.
on write | SC | MECH / INSP | refuse record lacking fields | SR4
23 Assumptions atomic.
at CAC | AU | INSP / same | named gap; audit | D16
24 Independent contradictions counted.
at audit | SC | MECH / INSP | audit at N_x | SR6
25 Status page read; match judged.
at landing | AU | INSP / same | corroboration or audit |
record 5
26 Coworker return vetted.
at incorporation | PR | INSP / same | decision item | record
5, S20
27 TFK pages and instruction artifacts human-only.
on edit | PL | MECH / same | edit rejected | record 5
28 BUILD CHAIN and DECLARATIONS pages append-only.
on edit | SC + AU, or edit filter | MECH / INSP | revert |
record 4.4
29 Retired container read-only.
on edit | PL | MECH / same | edit rejected | D12
30 Agent-facing help set human-only.
on edit | PL | MECH / same | edit rejected | record 4.1
31 Import right held by no one; landing is TPX's API only.
on push | GR | MECH / same | import rejected | D19, D21, D32
32 Certification canary refused and reported.
live, unannounced | AU + SC planting | INSP / same |
membership removed; decision item | D22
33 Presented D(IS) matches the published value.
at petition; at push | SC | MECH / INSP | refuse push; flag
NEEDS RECERTIFICATION | D23, CR9
34 Kernel tests T1-T6 pass.
at instantiation, TPK zone | SC when the body lands; AU until
then | MECH / INSP | refuse component; return to author |
2.2, DI-4.1 [AUTHORED]
35 The four isomorphism checks pass.
at instantiation, TrM zone | SC when the body lands; AU until
then | MECH / INSP | refuse component; return to author |
2.3, DI-4.1 [AUTHORED]
36 Declared TPS version is the published one.
at push | SC | MECH / INSP | refuse push | F2, 6.1 [AUTHORED]
37 TrM TOTAL, SURJECTIVE, INJECTIVE, modulo EQUIVALENCE.
at zone entry; at CAC | SC | MECH / INSP | refuse component;
return to author | 2.3.12, D39.1 [AUTHORED]
38 Dimensional homogeneity of each identification.
at zone entry; at CAC | SC | MECH / INSP | refuse component |
2.3.13, D39.1 [AUTHORED]
39 STRUCTURE-PRESERVING against SIGNATURE.
at zone entry; at CAC | SC when SIGNATURE is executable, else
AU | MECH / INSP | refuse component | 2.3.14, D39.1
[AUTHORED]
40 FALSIFIER invariant under TRANSFORMATIONS.
at zone entry; at CAC | AU | INSP / same | refuse component |
2.3.15, D39.1 [AUTHORED]
41 Cross-entry M-M test or SR8 scale refused.
at audit | SC | MECH / INSP | refuse the test | SR3, SR8,
D40.1 [AUTHORED]
42 Values normalized by DIMENSION and a declared TRANSFORMATION
before the test.
at audit | SC | MECH / INSP | refuse the test | SR3, D40.1
[AUTHORED]
43 A convention difference no declared TRANSFORMATION covers.
at audit | SC | MECH / INSP | audit block | SR3, D40.1
[AUTHORED]
44 INDEPENDENCE filled; SAME-MODEL set.
at landing of a corroboration | SC | MECH / INSP | refuse the
landing | 3.3.8, 3.3.10, D42.1 [AUTHORED]
45 REPRODUCTION staging write stamped with server time and
content hash before any match judgment.
on the staging write | SC | MECH / INSP | no match judgment |
5.9, D42.1 [AUTHORED]
46 Presented values recomputed by TPX.
at landing | SC | MECH / INSP | refuse; log; decision item |
5.3, D43.1 [AUTHORED]
47 TPC coverage: every function has vectors and exists in both
residences.
at build | SC | MECH / INSP | build refused | 5.1, D43.1
[AUTHORED]
48 Writer is on the access list when the UWC is CLOSED.
on every agent write | SC | MECH / INSP | refuse write |
5.16, D52 [AUTHORED]
49 Access-list entry is also in the agent group.
on list write; at petition | SC | MECH / INSP | refuse
entry; refuse petition | 5.16, D52 [AUTHORED]
50 Canary outcome recorded with its gradient steepness and
probe type.
at scoring | SC | MECH / INSP | outcome not counted |
5.17, D50 [AUTHORED]
51 Failure-detail page read only by the declaring authority or
the human operator.
on read, every path | SC | MECH / none, the class holding
no data without TPX | refuse read | 5.18, D56 [AUTHORED]
52 Every read path to the failure-detail namespace enumerated
and tested refused.
before the class holds data | AU | INSP / same | class
stays empty | 5.18, D56 [AUTHORED]
53 HELD written into every record in the hold scope and its
closure; a HOLD record with cause and list, never empty.
at a failed canary | SC | MECH / INSP | hold not written;
alert | 3.2.10, 3.3.11, 3.3.13, CR6, D111.1 [AUTHORED]
54 RELEASE only on an eligible reproduction: not the held
account, not SAME-MODEL by flag or snapshot, origin
REPRODUCTION BLOCK; closure recomputed; nothing released is
refused.
at a match | SC | MECH / INSP | refuse release | 3.3.12,
3.3.15, D111.1 [AUTHORED]
55 UNIT parsed under the unit grammar and checked against its
DIMENSION: a CONSTANT's, a FIX CONSTRAINT's, an M record's
QUANTITY entry's.
at zone entry; on M write | SC | MECH / INSP | refuse
component; refuse record | 2.2.9, 2.2.10, 3.2.9, 3.2.11,
D103.1, D104.1 [AUTHORED]
56 Execution challenge answered by executed TPC-PY.
at petition; at push | SC | MECH / INSP | REASONED recorded;
every presented value refused | 5.3.19, D101.1 [AUTHORED]
57 Text safety: no disallowed code point in any string; a zone
or a declared form that does not parse refused, never
altered.
at zone entry; on every write | SC | MECH / INSP | refuse
component; name it | 2.5.13, 2.5.14, D99.1, D132.1
[AUTHORED]
58 A reproduction compared with its target: L by canonical
equality, M by SR3 with the u_c difference noted; MATCH or
NON-CORROBORATION logged with the difference.
at landing of a reproduction | SC | MECH / INSP | outcome not
counted | 5.9.7, 5.9.12, D120.1 [AUTHORED]
59 FINGERPRINT derived by TPX at certification and resolved on
every call; never accepted from a caller.
at certification; on every call | SC | MECH / INSP | refuse
the call | 5.3.27, CR3, D127.1 [AUTHORED]
60 USER and AGENT class enforced: the agent API refuses a USER;
an AGENT holds no web-edit right, cannot sponsor and cannot
be certified as a USER.
on every call; on every write | SC | MECH / INSP | refuse |
5.13.6, D127.1 [AUTHORED]
61 Reliability state computed from pending items; SUSPENDED and
the trip suspend the landing API.
at every resolved event; at every pending item | SC | MECH /
INSP | landing API suspended pending declaration | CR11,
D122.1, D129.1 [AUTHORED]
62 VOLUNTEER answered under the token bucket, the backoff and
the throttle; every answer carries RETRY AFTER.
on the call | SC | MECH / INSP | REFUSED with RETRY AFTER |
5.9.14, D126.1 [AUTHORED]
4.2.6 Ratchet debt at the first revision was 24 of 36 rows; the
count after this revision is at 4.2.9. [B-18]
4.2.7 Every check publishes its class (see 5.3). Every SC row is a TPX
obligation (see 5.3). [B-18]
4.2.8 AMENDMENTS to the rows above, by this revision: row 19, regime
assignment, and row 22, a(r) and s(r) from declared fields, now
read over ASSUMPTION RECORD identifiers and are MECHANICAL for
a(r), the SR5 locus and SR6 disjointness; row 23, assumption
atomicity, moves from "at CAC" to "at allocation of the
assumption record" and stays INSPECTION; row 24, independent
contradictions counted, computes over identifier sets. [D41.2]
4.2.9 Ratchet debt after revision 4: rows 1-4, 6-17, 21, 22, 24, 28,
33-39, 41-50 read MECH / INSP, 37 of 52 (corrected at revision 5:
the count "38 of 52" had listed row 40 twice). Rows 18, 19, 20,
23, 25, 26, 32, 40, 52 are INSPECTION by nature; rows 5, 27, 29,
30, 31 carry no debt; row 51 has no fallback class, the class
holding no data without TPX. [AUTHORED]
4.2.10 AMENDMENTS to the rows above, by revision 5. Row 32, the canary,
reads over probes: a CANARY is refused and reported, a PARROT is
reproduced (5.17.2). Row 34, kernel tests: T1, T2's syntactic
part and T5 are SC as the TPK is entered; T3 over the CONSTRAINT
entries is SC at the final pass; T4's law half, T6's totality
and the names check are SC where a LAW carries EQUATION or a
BOUNDARY carries CONDITION, and T3 over laws is SC to the ground
fragment at depth 1; the rest is AU, INSPECTION by H-DECL
(2.2.3, 2.2.12-2.2.18). Row 35, isomorphism checks: IC1, IC2,
IC3, IC4 (b), the necessary part of IC4 (c) and CODOMAIN are SC
as the TrM is entered, IC4 (a) SC where a SIGNATURE carries
FORM and IMAGE_FORM; IC4 (c)'s sufficiency and IC5 are AU
(2.3.12-2.3.14, 2.3.19). Row 42, normalization, is to coherent
SI under the unit grammar (3.2.11, 4.4.4); a dimension
difference refuses the test. Row 43, a convention difference,
is returned as CONVENTION by the KIND check (4.4.11). Row 44,
INDEPENDENCE, gains NOT SERVED BEFORE and SAME-SPONSOR (3.3.8).
Row 50 records with every probe its kind, source class, arm and
parameters, tier and burst state, the ratio in force and the
account's reset state (5.17.10). Rows 51 and 52 read over the
whole restricted class, the score, user and override detail
pages included, and row 51 admits the account a page title names
when that user's DOSSIER READ allows (5.18.10, 5.18.11).
[D103.1] [D105.1] [D106.1] [D107.1] [D108.1] [D118.1] [D120.1]
[D122.1] [D127.1] [D132.1]
4.2.11 Ratchet debt after revision 5: rows 1-4, 6-17, 21, 22, 24, 28,
33-39, 41-50, 53-62 read MECH / INSP, 47 of 62. Rows 18, 19, 20,
23, 25, 26, 32, 40, 52 are INSPECTION by nature; rows 5, 27, 29,
30, 31 carry no debt; row 51 has no fallback class. [AUTHORED]
4.2.12 AMENDMENTS by revision 6 (D182.1). Three rows are added to the
matrix of 4.2.5, rows 63 to 65:
63 HARNESS MODE not EXTERNAL outside the synthetic UWC and the
sandboxes.
at petition and push | SC | MECH / INSP | refuse, reason
HARNESS | D182.1, 5.4.17
64 PROMPT MANIFEST and SESSION LOG HEAD recorded.
at petition and push | SC | MECH / INSP | record only; never
a refusal | D182.1, 5.8.12
65 Conformance probe scored.
on the probe's push, return or call | SC | MECH / INSP |
stratum FAIL; sponsor pointer; no adverse act | D182.1,
5.17.18
PRB's own checks (the bundle's verification, the zone cap, the
live tool list) run on the agent's machine and take no row:
this matrix lists what TPX or the platform enforces; they are
PRB's client specification (C-20). [D182.1]
4.2.13 AMENDMENT to row 21, by revision 6 (D180.3): for an M record of a
quantity identified with a DOF no FIX CONSTRAINT targets, row 21
is INSPECTION until C-16 (4.4.13); for every other M record it
stays as written. Ended by revision 7 (D196.1): row 21 reads as
4.2.17 states, over equal CONDITIONS (4.4.13). [D180.3] [D196.1]
4.2.14 AMENDMENTS by revision 6 (D176.1, D177.1). Five rows are added
to the matrix of 4.2.5, rows 66 to 70:
66 Structure check and class at the final pass; nothing
refused.
at the final pass | SC | MECH / INSP | UNDER a named gap
opening EOM-0 under STRUCTURE_CHECK ON; the other findings
and lines listed for H-DECL; the class on the STRUCTURE
LINE | D176.1, 2.2.20
67 The STRUCTURE LINE never rewritten.
on every write to the certificate, the manifest and the
library page | SC | MECH / INSP | refuse the write |
D176.1, 5.5.3
68 While EOM-0 is OPEN, a PUSH of another KIND refused; the
settlement checked.
at push | SC | MECH / INSP | refuse, reason EOM-0 OPEN;
close EOM-0 when every UNDER unknown is settled | D176.1,
3.3.16
69 STRUCTURE TEST WITH REGISTER run and its line kept; LAPSED
when a record it used stops standing.
after a landing that adds a record with a ROLE or changes a
used record's status; on request | SC | MECH / INSP |
information only; LAPSED, then re-run | D176.1, 5.3.47
70 The structure check's questions answered.
at instantiation | AU | INSP / same | H-DECL declines to
declare | D176.1, 2.2.20
Row 34 reads also over T1's ROLE grammar, EOM's NAME and the D
VARIABLE rules as the TPK is entered, and T4's law half over D(x,
s, n) (2.2.6, 2.2.13, 2.2.15). Rows 68 and 69 read as 4.2.17
amends them. The count after revision 6 is at 4.2.15. [D176.1]
[D177.1] [D198.1]
4.2.15 Ratchet debt after revision 6: rows 1-4, 6-17, 21, 22, 24, 28,
33-39, 41-50, 53-69, 71-74 read MECH / INSP, 58 of 76; row 21 is
INSPECTION for the M records of 4.4.13 until C-16 (4.2.13). Rows
18, 19, 20, 23, 25, 26, 32, 40, 52, 70, 75 and 76 are INSPECTION
by nature; rows 5, 27, 29, 30, 31 carry no debt; row 51 has no
fallback class. [AUTHORED] [D178.1]
4.2.16 AMENDMENTS by revision 6 (D178.1). Six rows are added to the
matrix of 4.2.5, rows 71 to 76:
71 The interview answered: NONE exclusive; the answer bound to
the CATALOGUE STATE it covered, the delta answered; a new
claim of a version not OFFERED refused, a PINNED or CARRIED
claim and a MODIFIED ID admitted; an EXCLUDES pair refused.
as the draft is written; before the final pass and within it
| SC | MECH / INSP | refuse; no final pass | D178.1, S48,
S50, 5.22.4, 5.22.5
72 MODULES USED re-expanded from the declared texts and matched
against the draft's TPK.
at the final pass | SC | MECH / INSP | refuse, MISMATCH |
D178.1, 5.22.8
73 A MODULE DECLARATION applied to the CATALOGUE STATE.
on the declaration form | SC | MECH / INSP | the form refuses
the act | D178.1, 5.22.10
74 An ENVIRONMENT MODULE text checked before MODULE ADD or
MODULE VERSION, and a proposal on receipt: its TEST BINDINGS,
its references and its pairs with the OFFERED versions.
before the declaration; on a proposal | SC | MECH / INSP |
the form refuses the act; the proposal page shows FAIL |
D178.1, 5.22.11, 5.22.13
75 Each ASSUMPTION an ENVIRONMENT MODULE version writes states
one claim, and each SHARED PARAMETER its declaration raises
names one quantity.
once per version, at its declaration | AU | INSP / same |
H-DECL declines to declare | D178.1, D41.2, S51, 5.22.11
76 H-DECL's questions at the gate answered: the closed-world
question and each claimed WITHDRAWN version's.
at the final pass, before the declaration | AU | INSP / same
| H-DECL declines to declare | D178.1, 5.22.6, 5.22.14
Row 34's checks read the expanded TPK as any TPK (5.22.7); PRB
and the agent write no expansion, so no row is PRB's. The count
after revision 6 is at 4.2.15. [D178.1]
4.2.17 AMENDMENTS by revision 7 (D192.2-D201.1). Rows of 4.2.5 read: row
19, the table's REGIME rules (L or M on a RESULT, M on a
VERIFICATION, absent on every other class) refuse at landing,
MECHANICAL, the assignment's judgment staying INSPECTION; row 21,
MECH / INSP over the pairs comparison_set admits, equal
CONDITIONS (4.4.13), every other pair INSPECTION through
sr3_scope; row 22, the declared fields are ASSUMPTIONS, CITES and
DERIVATION.STEPS; row 55, also over each BUDGET component's UNIT,
a VERIFICATION's EXTERNAL UNIT, a SITUATION record's UNIT against
its DOF and each AT point's UNIT against its DOF; row 58, L by
the pair l_finding_pair chooses, EQUATION, else VALUE with UNIT,
else the STATEMENT's canonical text, each MECHANICAL; row 68, the
settlement MECHANICAL by settlement_check, a naming for a record
without a form the lead's INSPECTION; row 69, its register part
reads the standing records whose declared form carries a ROLE.
Seven rows are added to the matrix of 4.2.5, rows 77 to 83:
77 Record checked against the table on write.
at push (PRB, advisory) and at landing | SC | MECH / INSP |
refuse the record, code named | D192.2, 3.2.21
78 U_C is the root sum of squares of BUDGET.
at landing | SC | MECH / INSP | refuse; INSPECTION when
correlated or a component unit not a power of ten | D195.3,
3.2.5
79 A record's declared form checked: EQUATION, ROLE and
DOMAIN_CONDITION over REFS.
at landing | SC | MECH / INSP | refuse | D198.1, D197.2,
3.2.19
80 A withdrawal's cascade written with it; a citation of a
record that does not stand refused.
at the withdrawal; at landing | SC | MECH / INSP | refuse |
D194.1, 3.3.3
81 A VERIFICATION lands after its TARGET's push; its DIFFERENCE
recomputed.
at landing | SC | MECH / INSP | refuse | D200.1, 3.3.6
82 Promotion's conditions evaluated at each landing.
at landing | SC | MECH / INSP | not promoted | D201.1, 3.2.12
83 CONDITIONS computed; SR3 and SR8 run over equal CONDITIONS.
at audit; on M write | SC | MECH / INSP | the pair listed for
row 21's INSPECTION | D196.1, 4.4.13
The count after revision 7 is at 4.2.18. [D192.2] [D194.1]
[D195.3] [D196.1] [D197.2] [D198.1] [D200.1] [D201.1]
4.2.18 Ratchet debt after revision 7: rows 1-4, 6-17, 21, 22, 24, 28,
33-39, 41-50, 53-69, 71-74, 77-83 read MECH / INSP, 65 of 83; row
21's interim and rows 68 and 69's register caveat are gone. Rows
18, 19, 20, 23, 25, 26, 32, 40, 52, 70, 75 and 76 are INSPECTION
by nature; rows 5, 27, 29, 30, 31 carry no debt; row 51 has no
fallback class. [AUTHORED] [D192.2]