§02e Jupiter — AIGP & Pre-Invocation — Externally-observable properties
Mars® Spec › §02e Jupiter — AIGP & Pre-Invocation › Externally-observable properties
← Cross-layer dependencies · Section index
15. Externally-observable properties
| Property | Observable condition |
|---|---|
| S10 — Pre-invocation signal admission gated on registration | A signal from an unregistered source is observably not admitted as a battery input; it may appear in Field 6 but does not contribute to the IR or the verdict |
| S11 — Pre-invocation signal order-typing enforced | A signal from a source declaring specific orders enters the IR as a fully order-typed element in those orders; a signal from an order-agnostic source enters as untyped-pending and requires disambiguation before IR-level consumption |
| S12 — Witness chain spans pre-invocation links | The multi-stage witness chain carries pre-invocation signal links prepended before the raw-input link; each pre-invocation link carries its witness class annotation; W1 links are independently re-derivable; W2/W3 links carry auditable-attestation provenance with the recomputability gap explicitly declared |
| S13 — Cross-phase corroboration present when conditions met | Where a deterministic pre-invocation signal and a probabilistic battery method evaluated the same conformance question, a pre-invocation-cross-phase entry is present in the analysis battery record contributing to the verdict |
| S14 — Signal-required gap referral issued on absence | Where a signal-required source produces no signal, a typed gap referral at the pre-invocation signal locus is present in the outputs; no conforming verdict is issued while the gap is open |
| S15 — Signal-absent posture declared in scope | Where any registered source is absent (optional, suppressed, or not registered), the declared-scope invariant (Field 5) reflects the corresponding pre-invocation coverage exclusion; the certificate does not claim pre-invocation coverage it does not have |
| S16 — W1 / non-W1 distinction observable | A downstream consumer can determine from the witness chain which pre-invocation links are W1 (fully recomputable) and which are W2 or W3 (auditable but not recomputable); the distinction is carried as an observable witness-class annotation on each link, not inferred |
| G8 — Source registration records in registry with versioning and tamper-evidence | The specification registry carries pre-invocation signal source registration records meeting content-addressability, append-only, and tamper-evidence requirements; each certificate’s analysis battery record carries the source registration version in effect at analysis time; a scope-breaking source registration update triggers cascading revocation of affected certificates |
| AR1–AR5 negative-space discipline | Each of the five architectural refusals (§13) is independently testable without internal inspection: AR1 by submitting an unregistered signal and observing exclusion; AR2 by submitting a W1-claimed witness that does not survive re-derivation and observing refusal; AR3 by inspecting Field 5 against Field 7 chain; AR4 by inducing a signal-required gap and observing refusal to issue a conforming verdict; AR5 by inspecting pre-invocation-cross-phase entries against their conditionality requirements |
| AIGP structural compatibility | Where AIGP is deployed alongside Mars®, the AIGP-retained admission witnesses appear in the witness chain as W1 links; the chain is end-to-end recomputable from pre-invocation admission through the conformance certificate; the AIGP source registration record in the registry carries witness class W1 |
| Non-AIGP W1 eligibility | A non-AIGP source may register as W1 if and only if an independent inspector can re-derive the signal value from the order-typed input and governing-specification version without executing the original system; an AIGP-branded source whose witness record does not survive re-derivation is not admitted as W1 |