§02e Jupiter — AIGP & Pre-Invocation — Witness classes and chain integration
Mars® Spec › §02e Jupiter — AIGP & Pre-Invocation › Witness classes and chain integration
← Signal typing against the order structure · Section index · Pre-invocation signals and the divergence signal →
5. Witness classes and chain integration
A pre-invocation signal enters the §02a §5a.2 multi-stage witness chain as a prior-stage artifact — it was produced before the main pipeline’s first stage. For the chain to be end-to-end recomputable, each pre-invocation signal must contribute a witness link of a declared class.
5.1 Witness class taxonomy
| Class | Description | Chain integration |
|---|---|---|
| W1 — Full recomputation witness | A structured derivation trace from which an independent inspector can re-derive the signal value from the order-typed input and the governing-specification version, without executing the original system. Satisfies the recomputation-witness invariant (§02b Field 7) as a prior-stage chain link. | Extends the witness chain back through the pre-invocation stage; the resulting chain is end-to-end recomputable from pre-invocation admission through post-invocation certificate |
| W2 — Execution record | A timestamped, content-hashed record of the signal-producing execution: inputs presented, signal value produced, system identity and version. Sufficient to verify that the signal was produced by the declared system at the declared time over the declared input. Does not support independent re-derivation of the signal value from first principles. | Extends the witness chain back to the pre-invocation stage with execution-record provenance; the chain is auditable but not fully recomputable at the pre-invocation link |
| W3 — Attestation only | A signed attestation by a named authority that a signal of the declared value was produced for this input. No derivation record. Sufficient to establish that the signal was produced and recorded. | Adds a named-authority attestation link to the chain; the link is not recomputable, but the attestation is tamper-evident and attributable |
| W4 — Signal-absent record | A signed record that the source was active, ran, and produced no signal for this invocation. Distinguishes intentional non-signal from system failure. | Adds a non-signal-production record to the chain; required when the source’s absence posture is signal-required |
W1 sources — those producing full recomputation witnesses — are the only class whose signals extend the end-to-end recomputability property of the chain all the way back through the pre-invocation phase. W2 and W3 sources contribute auditable provenance but create a recomputability gap at their link. The gap is recorded in the chain as a declared witness-class annotation on the link; downstream consumers can determine precisely where the chain’s recomputability ends and auditable-attestation provenance begins.
5.2 Chain integration
The pre-invocation signal links are prepended to the §02a §5a.2 witness chain. The full chain structure is:
[pre-invocation signal link(s)] → [raw input link] → [IR stage links] → [traversal witness link(s)] → [analysis act links] → [verdict link]Each pre-invocation signal link carries: source identity, signal value, order-type assignments, witness class, witness record (appropriate to the class), and the content hash of the signal element(s) it covers. The chain’s first link is the earliest pre-invocation signal; the chain terminates at the verdict. Traversal witness links appear in the chain between the IR stage links and the analysis-act links where governed traversal (§02a §4b) was used; their presence or absence does not affect the pre-invocation segment of the chain.
Where multiple pre-invocation signals are present — from multiple registered sources — each contributes its own link at the pre-invocation segment of the chain. The links are ordered by signal timestamp. Where two signals share a timestamp, ordering is by source registration priority declared at deployment.
← Signal typing against the order structure · Section index · Pre-invocation signals and the divergence signal →