SSM-Audit – Governance & Conformance (0D.1–0D.3)

Purpose (why this section matters). Make adoption predictable: same numbers, bounded stability, replayable evidence. This page defines the non-negotiables, the checks you run, and the minimal manifest that anchors runs.

0D.1 — Non-negotiable guarantees (normative)

  • Collapse parity. Classical values never change: phi((m,a)) = m.
  • Bounded lane. Stability is always finite: a in (-1,+1) with clamp a := clamp(a, -1+eps_a, +1-eps_a).
  • Order invariance. For fixed knobs, composition is order-independent (batch == stream == shuffled within epsilon).
  • Determinism. Same inputs + same knobs ⇒ same outputs (byte-for-byte where applicable).
  • Division policy. Defaults to strict near zeros: division_policy = "strict"; alternatives (e.g., "meadow", "soft") must be declared.
  • Declared bands. Band edges and hysteresis live in the manifest; nothing hidden.
  • Read-only start. Pilots must not mutate controls based on a; decisions can reference bands as advisory until approved.
  • Privacy posture. No PII in lane fields or stamps; stability is about the number, not the person.

0D.2 — Conformance checks (you run these, we pass or fail)

# Lane sanity
C1  Clamp safety:          all rows satisfy -1 < a < +1 after clamp (eps_a = 1e-6).
C2  Collapse parity:       for every hop, phi((m,a)) == m.
C3  Band parity:           thresholds map a to the correct band.

# Order & composition
C4  Order invariance:      a_out is equal (within epsilon) across batch / stream / shuffled.
C5  Ratio lane identity:   for m := f/g, pre-join vs post-join a_div match:
                           a_div := tanh( atanh(a_f) - atanh(a_g) ).
C6  Rollup parity:         grouped rollups match flat fusion using the same rule:
                           a_out := tanh( (SUM w_i*atanh(a_i)) / max(SUM w_i, eps_w) ).

# Rounding & reproducibility
C7  Numeric determinism:   float64, fixed formatting; reruns reproduce a and band.
C8  Knobs fingerprint:     changing any declared knob changes knobs_hash.

# Provenance (if stamping is enabled)
C9  Chain continuity:      chain_k := sha256( ascii(chain_{k-1} + "|" + stamp_core_k) ),
                           with chain_0 := "0"*64.
C10 Day anchor:            rollup_D := sha256( ascii(Stamp_1 "|" ... "|" Stamp_n) ).

# Operational stability
C11 Hysteresis sanity:     promote if delta_a >= +0.05; demote if delta_a <= -0.05.
C12 Alert calmness:        after bands, alert flicker does not exceed baseline absent cause.

0D.3 — Minimal manifest (governance contract, plain ASCII)

[SSM_AUDIT_MANIFEST]
schema_version = 1
build_id       = <short tag>
date_utc       = <YYYY-MM-DD>

# Core safety
eps_a = 1e-6
eps_w = 1e-12
gamma = 1.0
division_policy = strict

# Bands and hysteresis
bands      = {A++=0.75, A+=0.50, A0=0.25, A-=0.10, A--=-inf}
hysteresis = {promote=0.05, demote=-0.05}

# Mapper declarations (pin what you use)
mappings = { AR:..., Refunds:..., Forecast:... }

# Deterministic fingerprint (computed separately)
conformance_checksum = <hex>

Notes (derivation, declared once).

  • Knobs fingerprint. knobs_hash := sha256( ascii(canonical_json(knobs)) ) where knobs includes eps_a, eps_w, gamma, division_policy, bands, hysteresis, mappings (and any mapper-specific parameters).
  • Declaration discipline. Any change to these values must bump build_id and regenerates knobs_hash.

Navigation
Previous: SSM-Audit – Two-Week Pilot (0C)
Next: SSM-Audit – Governance & Conformance (0D.4–0D.8)

Directory of Pages
SSM-Audit – Table of Contents

Frequently asked questions
SSM-Audit – Q & A