Where the standard gets written.

Establishes whether an accountable principal stands behind an autonomous agent, reconciled against sovereign registers with minimum disclosure. Section 6.4 binds every read of the settlement ledger to a request and answers it with a signed response carrying the sequence number and head digest it was served against. A not-entitled read and a not-found read return the same response, so no endpoint becomes an existence oracle.

Agentic AI governance made checkable rather than asserted: the control claims an operator makes about an agent, and the cryptographic evidence that must exist before a third party can accept them. Written against the EU AI Act general-purpose obligations and ISO/IEC 42001, which specify what must be governed but not what a third party may verify.

A verification standard for the ACSC Essential Eight Maturity Model. The Essential Eight is a national security baseline with no standards body behind it; maturity is self-asserted and, today, unfalsifiable. The same construction applies to any sovereign framework that names requirements without providing an instrument to test them.

Makes a negative finding falsifiable. “This message is not present” is a claim about the universe; what was established is a claim about a bounded artefact set examined to a stated depth. Rule 6 refuses an absence claim that does not carry the population it is an absence from. Rule 7 refuses a clean verdict from a run that failed, exhausted, or became unavailable partway. Rule 1 refuses any remainder that reconciles only by arithmetic. None of it requires the generative step to be deterministic, which is what makes it usable where AI sits in the workflow.

A conformance claim names a subject, a baseline and a period, and all three move. Baselines are superseded, jurisdictions recognise each other's baselines in incompatible vocabulary, and an environment running non-person entities changes composition faster than any attestation period. The Continuity Binding carries a verified claim across one of those boundaries while naming what carried, attributing the equivalence judgement to a party under a declared basis, holding carried evidence to the provenance class it was collected at, and enumerating every target outcome that did not carry. A claim presented as successor conformance without the binding is detectable by inspection.

Interception-resistant packet transmission for settings that already accept a co-presence setup cost. Its load-bearing section is not the transport but the admission control: three confidentiality regimes, the keying conditions under which each may be relied upon, and a per-message comparison of the regime a policy requires against the regime the session can achieve. A raised regime is relied upon only when independently corroborated, an uncorroborated claim down-rates rather than inflates, and the send refuses rather than proceeding below the floor. A specification that declines to attest the rung its construction has not earned.