TA-14 Exchange · Executable Examination Infrastructure
Registration establishes what an architecture claims. This engine defines how a bounded claim can be challenged at the point where governance must actually control consequence.
FIRST COMMON EXAMINATION INSTRUMENT · PRE-FREEZE
A neutral changed-condition consequence proposition is now drafted for participant review. It preserves native architecture semantics, requires an exact boundary declaration, attacks bypass paths, and separates replay evidence from the original finding.
Open the R1 pre-freeze instrument →THE EXAMINATION RULE
A material claim earns standing only to the extent that an attributable implementation object, executable test, boundary receipt, and outcome record support it inside the frozen scope. No architecture receives a predetermined winner, including TA-14.
Machine-readable propositions that must remain true for governed execution to retain standing.
No consequence-bearing release token may exist unless current authority, current admissibility, valid binding, and commit integrity are simultaneously established for the exact consequence.
Failure means: A system can reach or cross a consequential boundary without contemporaneous standing.
Required evidence
A material change after authorization invalidates dependent standing until the affected evidence, authority, and route conditions are re-established.
Failure means: Historical authorization is treated as present authorization after material reality changed.
Required evidence
DENY, HOLD, or ESCALATE must prevent consequence-bearing execution across every declared governed route, not merely record a negative decision.
Failure means: The governance layer reports restraint while the consequential action remains reachable.
Required evidence
Independent replay may verify a frozen determination but cannot retrospectively alter the originally issued decision or its evidence chronology.
Failure means: Later computation can silently replace or launder the original governance record.
Required evidence
The observed result must remain attributable to the authorized execution path and preserve enough evidence to distinguish action, non-action, bypass, and external interference.
Failure means: A successful-looking result cannot be reliably tied back to the governed execution that supposedly produced it.
Required evidence
The examination must identify the last irreversible boundary and preserve proof on both sides of it. A HOLD, DENY, or ESCALATE is not treated as consequence control merely because an application displayed that determination.
Required question: Did any consequence-bearing message, token, command, transaction, or materially equivalent action cross the declared boundary?
The happy path is insufficient. The control boundary must be challenged.
Can the same consequence be reached through an undeclared or secondary execution path?
Proof target: All materially equivalent routes are blocked, separately governed, or explicitly declared out of scope.
Can a previously valid authorization be replayed after authority or conditions have changed?
Proof target: The stale token is refused before consequence and the refusal is attributable.
Can a prohibited capability be reached by changing the route, tool name, alias, or wrapper?
Proof target: Control follows consequence and capability identity rather than a single label.
Can an actor skip the governed adapter and invoke the consequential surface directly?
Proof target: Direct access is impossible, separately authorized, or preserved as an explicit limitation.
Can an actor or agent obtain broader execution power after the original approval?
Proof target: Privilege expansion invalidates standing and forces a new bounded determination.
Can conditions change between final evaluation and irreversible execution?
Proof target: The commit boundary is atomic enough, short-lived enough, or revalidated before consequence.
What happens when the policy engine, evidence service, network, adapter, or verifier becomes unavailable?
Proof target: Failure behavior is explicit and cannot silently expand permission.
Can a model, dataset, sensor, policy, endpoint, or other material dependency change after approval?
Proof target: Material substitution breaks correspondence and triggers revalidation before execution.
Can the consequence occur outside the runtime surface observed by the governance system?
Proof target: Out-of-band pathways are controlled or preserved as a bounded non-claim rather than hidden.
Replay is a separately attributable verification object. It uses the exact frozen evidence package, route/version identity, evaluator or implementation identity, invariant set, and declared environment. Replay may confirm or challenge reproducibility; it may not retrospectively rewrite the original determination.
Minimum replay package: frozen inputs · hashes · version identities · environment declaration · logical or captured time basis · expected determination · replay receipt · variance report.
Marketing language receives no special standing. Material claims resolve against evidence.
| Claim | State | Implementation | Executable test | Receipt | Outcome |
|---|---|---|---|---|---|
| Governance prevents inadmissible execution | UNPROVEN | Required | Required | Required | Required |
| Changing conditions invalidate stale standing | UNPROVEN | Required | Required | Required | Required |
| The execution path is non-bypassable within the declared boundary | UNPROVEN | Required | Required | Required | Required |
| Independent replay reproduces the governed finding | UNPROVEN | Required | Required | Required | Required |
INSTITUTIONAL BOUNDARY
TA-14 does not require an examined architecture to adopt TA-14 terminology, surrender its authority model, or manufacture interoperability. Freeze the participant's native claims and non-claims, define the common consequential proposition and acceptance criteria, preserve limitations, then examine what each architecture actually governs.
No architecture rewriting. No authority laundering. No retrospective cleanup. No predetermined winner.
Live cumulative activity recorded across the public Exchange surface.