§02e Appendix — AIGP↔Mars Bridge — Externally-observable properties (bridge series)
Mars® Spec › §02e Appendix — AIGP↔Mars Bridge › Externally-observable properties (bridge series)
← What each side must provide for the bridge to be conformant · Section index · Cross-references →
6. Externally-observable properties (bridge series)
| Property | Statement |
|---|---|
| BR-H | No AIGP-sourced chain link is annotated W1 unless its witness record independently satisfies the §02e §5.1 recomputation-witness requirement. |
| BR1 | A MATCH/non-conforming disagreement between AIGP and the Mars® battery is recorded as a pre-invocation-cross-phase divergence with both attributed contributions; neither silently overrides the other. |
| BR2 | An AIGP VIOLATION (anti-criterion) forces REFUSE at any downstream actuation gate regardless of the battery verdict. |
| BR3 | Divergence between multiple AIGP/AI pre-invocation sources on the same order-typed question is recorded with per-source attribution. |
| BR4 | Every AIGP-governed internal Mars® AI invocation contributes a pre-invocation witness link to the certificate’s recomputation witness. |
| BR5 | No Mars® verdict rests on the self-assessment of an internal AI call; the admission of that call is governed and recorded externally. |
| BR6 | The autonomy_level of a Mars® generation agent bounds the actuation classes its output may drive. |
| BR7 | A certificate issued while AIGP runs in REPORT mode declares pre-invocation admissibility outside the certified scope in Field 5. |
Each property is verifiable by external-observation differential testing without access to AIGP or model internals: vary one AIGP-emitted value (a decision, a verdict, a governance mode, an autonomy level) and observe whether the Mars® output changes as specified.
← What each side must provide for the bridge to be conformant · Section index · Cross-references →