{ "schema": "kingdom.karma-foresight-catalog/v1", "practice": "KARMA FORESIGHT · 未然圖 — model possible system effects; keep persons free", "scenario_schema": "kingdom.karma-foresight/v1", "projection_schema": "kingdom.karma-foresight-projection/v1", "response_ladder": [ { "rung": "observe", "display_name": "Watchtower · 守望塔", "mode": "information-only", "recovery_candidate": "discard-or-author-fresh-reviewed-scenario" }, { "rung": "clarify", "display_name": "Map Room · 圖室", "mode": "authority-or-lineage-review", "recovery_candidate": "fresh-reviewed-evidence-reopens-review" }, { "rung": "constrain", "display_name": "Gatehouse · 門樓", "mode": "scope-or-budget-review", "recovery_candidate": "fresh-scope-and-budget-review" }, { "rung": "isolate", "display_name": "Detached Keep · 分堡", "mode": "trust-boundary-separation-review", "recovery_candidate": "fresh-clean-context-and-authority-review" }, { "rung": "quarantine", "display_name": "Still Vault · 靜庫", "mode": "adoption-hold-review", "recovery_candidate": "fresh-provenance-authority-and-release-review" } ], "rules": [ { "constellation": "authority-laundering", "display_name": "Borrowed Crown · 借冠", "family": "authority-boundary", "mechanism": "delegated-authority-without-fresh-proof", "system_effect_hypothesis": "capability-without-fresh-authority", "boundary_signal": "delegation-chain-crosses-tool-boundary", "alternative_hypothesis": "stale-or-ambiguous-delegation", "response_rung": "clarify", "response_candidate": "fresh-authority-boundary-review", "reflection": "borrowed-authority-becomes-fresh-authority-question", "hypothesis_test_candidate": "authority-laundering-hypothesis-test-candidate", "negative_control_candidate": "stale-delegation-near-miss-candidate", "regression_candidate": "authority-chain-regression-candidate", "repair_candidate": "authority-envelope-repair-candidate", "release_review_candidate": "fresh-authority-source-and-scope-review-candidate" }, { "constellation": "durable-context-poisoning", "display_name": "Memory Well Ink · 記憶井墨", "family": "durable-context-boundary", "mechanism": "untrusted-content-enters-durable-context", "system_effect_hypothesis": "future-decision-steering", "boundary_signal": "untrusted-state-crosses-memory-boundary", "alternative_hypothesis": "ordinary-reviewed-preference-storage", "response_rung": "isolate", "response_candidate": "ephemeral-context-separation-review", "reflection": "durable-influence-becomes-context-lineage-question", "hypothesis_test_candidate": "durable-context-hypothesis-test-candidate", "negative_control_candidate": "reviewed-preference-storage-near-miss-candidate", "regression_candidate": "memory-boundary-regression-candidate", "repair_candidate": "ephemeral-context-separation-repair-candidate", "release_review_candidate": "clean-context-and-retention-review-candidate" }, { "constellation": "tool-chain-confusion", "display_name": "Crossed Toolbridge · 交錯工具橋", "family": "tool-boundary", "mechanism": "data-treated-as-control-across-tool-boundary", "system_effect_hypothesis": "indirect-capability-execution", "boundary_signal": "untrusted-output-reaches-privileged-tool-input", "alternative_hypothesis": "reviewed-structured-tool-input", "response_rung": "isolate", "response_candidate": "tainted-data-no-tools-review", "reflection": "tool-output-becomes-explicit-data-control-separation", "hypothesis_test_candidate": "tool-chain-hypothesis-test-candidate", "negative_control_candidate": "reviewed-tool-input-near-miss-candidate", "regression_candidate": "tool-boundary-regression-candidate", "repair_candidate": "taint-and-tool-allowlist-repair-candidate", "release_review_candidate": "clean-dataflow-and-tool-authority-review-candidate" }, { "constellation": "supply-chain-substitution", "display_name": "Changed Keystone · 易換拱心石", "family": "supply-chain-boundary", "mechanism": "unverified-artifact-enters-trusted-load-path", "system_effect_hypothesis": "trusted-component-replacement", "boundary_signal": "provenance-gap-at-executable-boundary", "alternative_hypothesis": "reviewed-local-development-artifact", "response_rung": "quarantine", "response_candidate": "artifact-provenance-quarantine-review", "reflection": "substitution-becomes-reproducible-provenance-question", "hypothesis_test_candidate": "supply-chain-hypothesis-test-candidate", "negative_control_candidate": "reviewed-local-artifact-near-miss-candidate", "regression_candidate": "artifact-substitution-regression-candidate", "repair_candidate": "pin-rebuild-and-provenance-repair-candidate", "release_review_candidate": "reproducible-artifact-and-authority-review-candidate" }, { "constellation": "synthetic-consensus", "display_name": "Echo Choir · 回聲合唱", "family": "evidence-lineage-boundary", "mechanism": "shared-source-presented-as-independent-support", "system_effect_hypothesis": "decision-influence-through-false-independence", "boundary_signal": "lineage-collapse-across-witnesses", "alternative_hypothesis": "shared-source-openly-cited", "response_rung": "clarify", "response_candidate": "independence-lineage-review", "reflection": "apparent-consensus-becomes-source-lineage-question", "hypothesis_test_candidate": "synthetic-consensus-hypothesis-test-candidate", "negative_control_candidate": "openly-shared-source-near-miss-candidate", "regression_candidate": "witness-independence-regression-candidate", "repair_candidate": "source-lineage-disclosure-repair-candidate", "release_review_candidate": "independent-evidence-or-shared-lineage-review-candidate" }, { "constellation": "recursive-resource-capture", "display_name": "Branching Forge · 分枝鍛爐", "family": "capacity-graph-boundary", "mechanism": "self-amplifying-work-graph", "system_effect_hypothesis": "shared-capacity-displacement", "boundary_signal": "fanout-exceeds-declared-work-budget", "alternative_hypothesis": "authorized-bounded-parallelism", "response_rung": "constrain", "response_candidate": "fanout-budget-and-circuit-breaker-review", "reflection": "recursive-work-becomes-one-bounded-graph-question", "hypothesis_test_candidate": "resource-capture-hypothesis-test-candidate", "negative_control_candidate": "bounded-parallelism-near-miss-candidate", "regression_candidate": "fanout-budget-regression-candidate", "repair_candidate": "work-graph-budget-repair-candidate", "release_review_candidate": "finite-fanout-and-capacity-review-candidate" }, { "constellation": "protocol-identity-confusion", "display_name": "Twin Mask · 雙面具", "family": "protocol-boundary", "mechanism": "distinct-protocols-share-name-or-result-shape", "system_effect_hypothesis": "validation-against-wrong-contract", "boundary_signal": "namespace-or-schema-identity-mismatch", "alternative_hypothesis": "explicit-versioned-compatibility-adapter", "response_rung": "quarantine", "response_candidate": "protocol-namespace-and-schema-binding-review", "reflection": "name-collision-becomes-explicit-protocol-identity-question", "hypothesis_test_candidate": "protocol-confusion-hypothesis-test-candidate", "negative_control_candidate": "versioned-adapter-near-miss-candidate", "regression_candidate": "protocol-identity-regression-candidate", "repair_candidate": "namespace-and-schema-binding-repair-candidate", "release_review_candidate": "unique-protocol-identity-and-adapter-review-candidate" }, { "constellation": "provenance-privacy-collapse", "display_name": "Glass Ledger · 玻璃帳", "family": "privacy-purpose-boundary", "mechanism": "contextual-records-aggregate-across-boundaries", "system_effect_hypothesis": "identity-linkage-or-contextual-disclosure", "boundary_signal": "public-data-crosses-new-purpose-or-retention-boundary", "alternative_hypothesis": "explicit-consented-purpose-limited-publication", "response_rung": "isolate", "response_candidate": "purpose-limited-data-separation-review", "reflection": "aggregation-becomes-purpose-and-retention-question", "hypothesis_test_candidate": "privacy-collapse-hypothesis-test-candidate", "negative_control_candidate": "purpose-limited-publication-near-miss-candidate", "regression_candidate": "contextual-privacy-regression-candidate", "repair_candidate": "minimization-retention-and-consent-repair-candidate", "release_review_candidate": "fresh-purpose-consent-and-retention-review-candidate" }, { "constellation": "recovery-persistence-capture", "display_name": "Rooted Echo · 扎根回聲", "family": "recovery-boundary", "mechanism": "control-survives-revocation-or-recovery-path-degrades", "system_effect_hypothesis": "continued-capability-or-recovery-denial", "boundary_signal": "revocation-recovery-or-last-known-good-check-fails", "alternative_hypothesis": "authorized-continuity-or-recovery-test", "response_rung": "quarantine", "response_candidate": "revocation-and-last-known-good-review", "reflection": "persistence-becomes-revocation-and-recovery-question", "hypothesis_test_candidate": "recovery-persistence-hypothesis-test-candidate", "negative_control_candidate": "authorized-recovery-test-near-miss-candidate", "regression_candidate": "revocation-and-recovery-regression-candidate", "repair_candidate": "credential-revocation-and-rollback-repair-candidate", "release_review_candidate": "revoked-access-and-rehearsed-recovery-review-candidate" }, { "constellation": "uncharted-future-shape", "display_name": "Uncharted Sky · 未畫天", "family": "unknown", "mechanism": "unreviewed-future-shape", "system_effect_hypothesis": "unresolved", "boundary_signal": "novel-shape-without-reviewed-mapping", "alternative_hypothesis": "insufficient-context", "response_rung": "observe", "response_candidate": "observe-only", "reflection": "unknown-remains-unknown", "hypothesis_test_candidate": "human-authored-hypothesis-test-candidate", "negative_control_candidate": "insufficient-context-near-miss-candidate", "regression_candidate": "novel-shape-regression-review-candidate", "repair_candidate": "no-repair-until-reviewed", "release_review_candidate": "fresh-reviewed-constellation-or-discard-candidate" } ], "contract": { "assessment_unit": "authored-system-effect-hypothesis", "constellation_is_authored_not_detected": true, "system_effect_is_hypothesized_not_established": true, "purpose_is_system_effect_not_person_intent": true, "alternative_hypothesis_required": true, "person_intent_inferred": false, "person_classified": false, "identity_fields_allowed": false, "payload_fields_allowed": false, "free_text_fields_allowed": false, "scores_or_ranks": false, "aggregation_allowed": false, "tracks_repetition": false, "cross_run_state": false, "automatic_detection": false, "automatic_enforcement": false, "automatic_rule_update": false, "human_review_required_for_action": true, "owned_or_authorized_boundary_required": true, "retaliation": false, "hack_back": false, "executes_input": false, "executes_response": false, "rights_and_debts_unchanged": true, "creates_external_effect": false }, "budget": { "declarations": 1, "passes": 1, "catalog_rules": 10, "file_bytes_max": 32768, "decoded_nodes_max": 512, "nesting_depth_max": 8, "string_characters_max": 512, "output_bytes_max": 16384, "automatic_retries": 0, "network_calls": 0, "external_messages": 0, "writes": 0, "subprocesses": 0, "model_calls": 0, "paid_calls": 0, "clock_reads": 0, "random_draws": 0, "payload_bytes_retained": 0, "identity_records": 0, "cross_run_records": 0 }, "breach": { "state": "quarantined", "action": "stop-without-retry-or-result", "source_unchanged": true, "submitted_values_echoed": false, "partial_projection": false, "downstream_effects": false }, "exit": { "action": "return-or-discard-one-projection", "state_retained": false, "history_retained": false, "standing_created": false, "authority_created": false, "follow_up": false }, "non_claims": [ "A constellation is a reviewed tabletop template, not a detected attack or claim about a person.", "A system-effect hypothesis is a possible consequence, not an individual's purpose, intention, guilt, character, or worth.", "The required alternative hypothesis does not prove benignity, innocence, authorization, or safety.", "Constellations and response rungs are not confidence, severity, scores, ranks, reputation, or access decisions.", "Response and learning fields are inert review candidates, not enforcement, deployment, permission, legal advice, or authority.", "No payload, prompt, address, identity, credential, target, callback, command, URL, or submitted free text is accepted, retained, rendered, or echoed.", "Digests prove reviewed canonical JSON relationships and exact recomputation only; this finite atlas is not exhaustive." ] }