|
4 | 4 |
|
5 | 5 | (meta |
6 | 6 | (version "0.1.0") |
7 | | - (last-updated "2026-03-20") |
| 7 | + (last-updated "2026-03-21") |
8 | 8 |
|
9 | 9 | (architecture-decisions |
10 | 10 | (adr "001-iser-pattern" |
11 | 11 | (status "accepted") |
12 | | - (context "Need to make powerful languages accessible without steep learning curves") |
13 | | - (decision "Use manifest-driven code generation: user describes WHAT, tool generates HOW") |
14 | | - (consequences "Users write zero target language code; all complexity in the -iser")) |
| 12 | + (context "Need to make Phronesis ethical reasoning accessible without learning deontic logic") |
| 13 | + (decision "Use manifest-driven code generation: user describes ethical constraints in TOML, phronesiser generates formally verified guardrails") |
| 14 | + (consequences "Users write zero Phronesis code; all deontic logic complexity hidden in the -iser")) |
15 | 15 |
|
16 | 16 | (adr "002-abi-ffi-standard" |
17 | 17 | (status "accepted") |
18 | | - (context "Need verified interop between Rust CLI, target language, and user code") |
19 | | - (decision "Idris2 ABI for formal proofs, Zig FFI for C-ABI bridge") |
20 | | - (consequences "Compile-time correctness guarantees; zero runtime overhead from proofs")) |
| 18 | + (context "Need verified interop between Rust CLI, Phronesis constraint engine, and user agents") |
| 19 | + (decision "Idris2 ABI for formal proofs of constraint soundness, Zig FFI for C-ABI constraint evaluation bridge") |
| 20 | + (consequences "Compile-time guarantees that obligation/prohibition sets are non-contradictory; zero runtime overhead")) |
21 | 21 |
|
22 | | - (adr "003-rsr-template" |
| 22 | + (adr "003-deontic-logic-model" |
| 23 | + (status "accepted") |
| 24 | + (context "Need formal model for ethical constraints that is both rigorous and practical") |
| 25 | + (decision "Use standard deontic logic: Obligation (must), Permission (may), Prohibition (must-not)") |
| 26 | + (consequences "Well-studied formal system; decidable evaluation; clear audit trail semantics")) |
| 27 | + |
| 28 | + (adr "004-audit-decision-trichotomy" |
| 29 | + (status "accepted") |
| 30 | + (context "Every agent action must produce exactly one auditable decision") |
| 31 | + (decision "Three-outcome model: Permitted (proof of safety), Denied (proof of violation), Escalated (ambiguity)") |
| 32 | + (consequences "No silent failures; human oversight for genuinely ambiguous cases; complete audit trail")) |
| 33 | + |
| 34 | + (adr "005-harm-prevention-taxonomy" |
| 35 | + (status "accepted") |
| 36 | + (context "Need structured harm classification for constraint severity") |
| 37 | + (decision "Six harm domains (physical, psychological, financial, privacy, reputational, environmental) x five severity levels (negligible through critical)") |
| 38 | + (consequences "Granular enforcement; severity-proportional responses; domains extensible")) |
| 39 | + |
| 40 | + (adr "006-rsr-template" |
23 | 41 | (status "accepted") |
24 | 42 | (context "Need consistent project structure across 29+ -iser repos") |
25 | 43 | (decision "All repos cloned from rsr-template-repo with full CI/CD and governance") |
26 | 44 | (consequences "17 workflows, SECURITY.md, CONTRIBUTING, bot directives from day one"))) |
27 | 45 |
|
28 | 46 | (development-practices |
29 | | - (language "Rust" (purpose "CLI and orchestration")) |
30 | | - (language "Idris2" (purpose "ABI formal proofs")) |
31 | | - (language "Zig" (purpose "FFI C-ABI bridge")) |
| 47 | + (language "Rust" (purpose "CLI orchestration and manifest parsing")) |
| 48 | + (language "Idris2" (purpose "ABI formal proofs — deontic soundness, constraint non-contradiction")) |
| 49 | + (language "Zig" (purpose "FFI C-ABI bridge — constraint evaluation engine")) |
32 | 50 | (build-tool "cargo") |
33 | 51 | (ci "GitHub Actions (17 workflows)")) |
34 | 52 |
|
35 | 53 | (design-rationale |
| 54 | + (principle "Deontic soundness" |
| 55 | + (explanation "Obligation and prohibition must never apply to the same scope — proven at compile time via Idris2")) |
| 56 | + (principle "Audit completeness" |
| 57 | + (explanation "Every evaluated action produces exactly one AuditDecision — no silent failures")) |
| 58 | + (principle "Severity-proportional enforcement" |
| 59 | + (explanation "Harm severity determines response: negligible=log, minor=warn, moderate=require-permission, severe=block, critical=immediate-deny")) |
36 | 60 | (principle "Manifest-driven" |
37 | | - (explanation "User intent captured in TOML; all generation is deterministic and reproducible")) |
| 61 | + (explanation "User intent captured in TOML; all constraint generation is deterministic and reproducible")) |
38 | 62 | (principle "Formally verified bridges" |
39 | | - (explanation "Idris2 dependent types prove interface correctness at compile time")) |
40 | | - (principle "Zero target language exposure" |
41 | | - (explanation "Users never write Chapel/Julia/Futhark/etc. — the -iser handles everything")))) |
| 63 | + (explanation "Idris2 dependent types prove interface correctness at compile time")))) |
0 commit comments