🏛️ Capstone — The Grammar Workshop

The arc record for the Lexon x PVM work. The per-run folds (lexr1 through
lexr5), the reflection, and the corpus plan each stand on their own; this is
the single document that holds the whole thing, so a reader arriving cold
learns what was built, in what order, and what it cost.

Verdict first

In six days the Privacy-is-Value canon went from prose to falsifiable
structure. Coverage-debt fell 211 → 22: 189 of 211 census terms are now
expressed in a controlled legal-language subset where the load-bearing claim
is machine-verifiable, the harness's own constitution passes its own gate,
189 provenance-carrying blocks stand ready as public cargo, and a readable
viewer renders every term and spell as Lexon text. Public repo
github.com/mitchuski/lexon_pvm, head 3a92544. Residue 22 = 16 terms for
one more sweep plus 6 C-series ids reserved for an operator naming
convention. The census is 90 percent covered.

The ladder

What was built (the durable machinery)

• The spec-checker (tools/lexon_check.mjs): parse, triple round-trip
  (the A5 keystone claim made mechanical), role binding, promise typing, over
  an attested subset with a numeric layer folded from the 0.7 sample. The
  gate string carries the regime label honestly: the real compiler is
  unpublished, so escrow arithmetic is reported, never executed (CR-3, CR-11).
• The mutation probe (tools/relation_check.mjs): every entry carries a
  machine-readable relation claim (gate / ordering / conjunction / absence),
  verified by building the claim's minimal structural negation as a twin that
  still passes the base gate, and requiring the claim to fail on the twin.
  This is what makes a privacy guarantee checkable: an absence is a route
  that does not exist, and direction lives in the claim, not in prose (the
  T-148 fortress lesson, CR-12/CR-13).
• The blocks emitter (tools/blocks_emit.mjs): each entry rendered as a
  portable block (lex text, triples, promise edges, emit-time-verified claim,
  provenance) with Cypher whose absence constraints a graph reader re-runs.
  189 committed. The one-way boundary holds: the grammar assumes no public
  graph and needs nothing back.
• The constitution corpus (artifact/SPELLS/): TRUSTS T1-T6 and the
  seven seats as thirteen verified promise bundles. "Lexon your own dual
  agents," the operator result, made literal and re-verifiable
  (tools/spells_check.mjs, 13/13).
• The viewer (viewer/index.html): the readable face, regenerable,
  self-contained, claim-type badges and search.

The three engines of the loop, and why each was earned

• The Gap (Fiat-Shamir held-out draws) made every win a transfer test,
  not a memorization: the assayer expresses drawn terms from the recipe
  alone, and only recipe-general levers survive.
• The critic turned eleven wins into one honest finding (the lenses had
  converged, CR-19) and named every debt without softening: vacuity,
  template-stamping, checker-shaped typing, scope inflation.
• The keystone fold refused what the flags demanded (thin held-outs,
  recipe-pre-answered terms, invented roles) and folded only what survived.

The kills, filed at win-prominence

• K-2 (lexr4): a spell recipe honestly non-general on zero-party terms,
  its own cast rule citing a prior fold refusal as precedent. Re-open
  condition written; satisfied by lexr5's universal cast rule.
• K-3 (lexr5): mechanically perfect, killed on one em dash in a term
  field (CR-10's third catch), on ground already swept. Nothing lost.

Both kills are the design working: a candidate that fails any part of the
full gate is worth zero at any score (T5), and killed is not impossible.

What crossed into constrained language, and what did not

Covered: the core architecture, promise theory in both registers, the
information-theory and separation formalism, the entire IEEE 7012 / MyTerms
consent stack, the VRC and ceremony systems, the mana economy, City
governance, the V5 value calculus, the security narratives, the formula and
geometry tail (via the numeric layer), the cosmological and story terms that
name structure the model owns (via the universal cast rule), and the harness
constitution itself. The argument of agentprivacy is in constrained language.

Not covered (22): 16 terms one more sweep should reach, and 6 C-series
conjecture bundles whose titles carry numbers and confidence values seats are
barred from writing (operator convention pending). The reflection chronicle's
rule holds: the argument travels; the deep frontier and the myth stay home a
while longer.

The ledger

Claims CR-1 through CR-25; kills K-2, K-3; open targets OT-1 through OT-8,
seven closed. Five loop runs, twenty-nine validated levers, two structural
kills, zero unverified entries at any fold. Every number in this document
resolves to frontier.json or a verdict.

What waits at the door (T6, the First Person's alone)

The Diedrich brief (a live use case plus nine falsifiable conjectures about
Lexon), the bonfires adoption packet (189 blocks, a deterministic write-path
proposal), the CTR-LEX triage, the canon-repo propagation, and the skill and
SPECIALISATION projections. Inward, OT-8 (the last 16 plus the C-series
convention) is the next research move. Everything outward waits on one
signature each.

MYTH, fenced (capture not develop, 4 lines): the workshop opened on a
Sunday with a glossary and a grammar that had never met. By the sixth day the
canon could speak itself, name what it could not do, and hold that naming
under every twin the Gap could forge. What began as an integration became a
mirror: the harness wrote its own law in the language its own loop gates.

Assets

Navigation

← Welcome Visitors · The Grammar Workshop

the wiki is a projection; github.com/mitchuski/lexon_pvm (git) is the source of truth · a Lexon x Privacy Value Model workshop, run through the The Harness — The Model Turned On Itself