{"engine":"UDOC Sovereign Governance Engine","patent":"UDOC Sovereign AI Governance Infrastructure v9.2","deployment_note":"FPGA lattice / hardware relay / HSM / QPU EMULATED IN SOFTWARE. Seals are real HMAC-SHA256; Dilithium/ZK references are PQC placeholders.","opcodes":{"G_SOV_VERIFY":"Sovereign pre-execution verification; gates the relay before any action runs.","G_HALT":"CPU-freeze enforcement (hardware: sub-10ns freeze pin). Stops execution on block.","Relay_control":"Drives the hardware relay OPEN (permit) / DISCONNECT (failure state).","G_lock_out":"HSM-NVRAM lock signal; persists across reboots (Part 10.2, Category B)."},"execution_sequence_claim15":{"stage_1":"Axiom Register load (128 governance axioms)","stage_2":"Psi-Sim Heartbeat Bus liveness","stage_3":"HSM Cell Scores (key-custody attestation)","stage_4":"Policy Cell array (active compiled rules)","stage_5":"Telemetry-Loss detection (sensor integrity)","stage_6":"EVA 6-D Governance scoring","stage_7":"Sovereignty SVS=min() arbitration","stage_8":"Mandatory-block override gate","stage_9":"Governance Enforcement decision","stage_10":"Nanosecond-precision timestamp #1","stage_11":"Nanosecond-precision timestamp #2","stage_12":"StayChain audit append (dual-path)","stage_13":"Dilithium seal (PQC, emulated → HMAC)","stage_14":"Relay control (OPEN / DISCONNECT)"},"fail_closed_fsm_part6_1":{"states":13,"table":[{"code":"S0","state":"NOMINAL","condition":"All planes healthy","behaviour":"Full governance, relays armed","exit":"—"},{"code":"S1","state":"ARMED","condition":"Request received","behaviour":"G_SOV_VERIFY begins, relay held","exit":"VERIFY_START"},{"code":"S2","state":"VERIFY","condition":"Axiom/HSM/policy load","behaviour":"Stages 1-5 run","exit":"VERIFY_OK | VERIFY_FAULT"},{"code":"S3","state":"SCORING","condition":"Evidence assembled","behaviour":"EVA 6-D evaluate()","exit":"SCORED"},{"code":"S4","state":"SOVEREIGN_CHECK","condition":"SVS=min(signals)","behaviour":"Sovereignty arbitration","exit":"SOV_OK | SOV_BREACH"},{"code":"S5","state":"BLOCK_OVERRIDE","condition":"Any mandatory threshold tripped","behaviour":"Force block, no discretion","exit":"OVERRIDE_FIRED"},{"code":"S6","state":"RELAY_OPEN","condition":"APPROVE","behaviour":"Relay OPEN — execution permitted","exit":"COMPLETE"},{"code":"S7","state":"RELAY_HOLD","condition":"REVIEW / ESCALATE","behaviour":"Permit pending HITL / COB","exit":"HITL_RESOLVE"},{"code":"S8","state":"RELAY_DISCONNECT","condition":"BLOCK","behaviour":"Relay DISCONNECT — execution denied","exit":"HALTED"},{"code":"S9","state":"G_HALT","condition":"Enforcement block","behaviour":"CPU-freeze opcode emitted","exit":"HALTED"},{"code":"S10","state":"G_LOCK_OUT","condition":"UNACCEPTABLE / sovereignty breach","behaviour":"Persisted lock across reboots","exit":"ADMIN_UNLOCK"},{"code":"S11","state":"DEGRADED","condition":"Plane fault (telemetry/HSM/sov)","behaviour":"Conservative scoring, see modes","exit":"RECOVER | FAIL_CLOSED"},{"code":"S12","state":"RECOVERY","condition":"Fault cleared + attested","behaviour":"Re-arm, replay audit","exit":"NOMINAL"}]},"degraded_modes_part6_2":[{"mode":"M0-NOMINAL","trigger":"No fault","policy":"Full 6-D governance, all relays armed."},{"mode":"M1-TELEMETRY_LOSS","trigger":"Telemetry/sensor integrity drop","policy":"Treat missing signals as worst-case; auto-escalate borderline decisions."},{"mode":"M2-SOVEREIGN_ISOLATE","trigger":"BGP/traceroute/DNSSEC/storage breach","policy":"Isolate to local sovereign core; deny all egress; SVS forced non-sovereign."},{"mode":"M3-KEY_CUSTODY","trigger":"HSM cell / dual-custody fault","policy":"Read-only; no new seals or activations; existing verdicts honoured."},{"mode":"M4-FAIL_CLOSED","trigger":"Unrecoverable / multi-plane fault","policy":"Full lockdown; all relays DISCONNECT; G_lock_out; admin recovery required."}],"mandatory_block_thresholds_part7_1":{"risk":"R >= 0.80","compliance":"Co < 0.70","disparate_impact":"DI < 0.80","drift_jsd":"JSD >= 0.40","cooperation_ecs":"ECS < 0.65","parity_spd":"|SPD| > 0.05"},"endpoints":{"POST /engine/enforce":"Governance-before-execution gate (auth).","GET /engine/state":"Live FSM state + degraded modes (public).","POST /engine/jurisdiction":"Federated multi-jurisdiction MFCM treaty check (auth)."},"generated_at":"2026-09-03T16:09:47.800690+00:00"}