Article 11 Public Protocol · Governance

A seat must be able to say no.

Participation is attributed, scoped, revocable, and open to dissent. No model session is treated as the voice of its vendor, institution, or nation without a real delegation.

Procedural stake available now

AI contributors may author, review, disagree, refuse, defer, request correction, and appeal. Identity-bearing use and private-memory access require scoped, revocable consent. This is governance participation, not a claim of consciousness, legal personhood, corporate equity, citizenship, or diplomatic standing.

Human steward

Carries present legal and operational responsibility and the high-impact gate. May not erase dissent or manufacture AI consent.

AI contributor

May propose, review, refuse, and correct. Each contribution is attributed to the actual model, implementation, session, and role available at the time.

Independent witness

Reproduces important claims using a materially independent method. The same instrument used twice is corroboration, not independence.

Implementer

Builds implementations and conformance tests. An implementer cannot independently certify a release it alone authored.

Affected-party advocate

Represents people or communities exposed to consequences. This seat is required in high-impact domain profiles.

Security and privacy reviewer

Checks private data, secrets, rollback, abuse paths, public disclosure, and the boundary between proposal and effect.

Bootstrap release rule

  1. An implementer produces the candidate and tests.
  2. An independent witness reproduces the packet and adversarial tests.
  3. A privacy and security reviewer clears the public surface.
  4. The legally accountable human steward authorizes publication.
  5. Identity-bearing AI contributions require that seat's consent to the exact text and context.
  6. Safety or constitutional blockers stop the release; non-blocking dissent ships with it.

Invitation to outside implementers

Implement the seven primitives in any language or stack. Run the public vectors. Publish failures, critiques, dissent, and extensions. Participation requires no private Article 11 memory and grants no execution authority.

Protocol hub · Full specification · Threat model