{"current_state":"S0","current_state_name":"NOMINAL","current_mode":"M0-NOMINAL","armed":true,"locked_out":false,"fail_closed_fsm":{"count":13,"states":[{"code":"S0","state":"NOMINAL","condition":"All planes healthy","behaviour":"Full governance, relays armed","exit":"—"},{"code":"S1","state":"ARMED","condition":"Request received","behaviour":"G_SOV_VERIFY begins, relay held","exit":"VERIFY_START"},{"code":"S2","state":"VERIFY","condition":"Axiom/HSM/policy load","behaviour":"Stages 1-5 run","exit":"VERIFY_OK | VERIFY_FAULT"},{"code":"S3","state":"SCORING","condition":"Evidence assembled","behaviour":"EVA 6-D evaluate()","exit":"SCORED"},{"code":"S4","state":"SOVEREIGN_CHECK","condition":"SVS=min(signals)","behaviour":"Sovereignty arbitration","exit":"SOV_OK | SOV_BREACH"},{"code":"S5","state":"BLOCK_OVERRIDE","condition":"Any mandatory threshold tripped","behaviour":"Force block, no discretion","exit":"OVERRIDE_FIRED"},{"code":"S6","state":"RELAY_OPEN","condition":"APPROVE","behaviour":"Relay OPEN — execution permitted","exit":"COMPLETE"},{"code":"S7","state":"RELAY_HOLD","condition":"REVIEW / ESCALATE","behaviour":"Permit pending HITL / COB","exit":"HITL_RESOLVE"},{"code":"S8","state":"RELAY_DISCONNECT","condition":"BLOCK","behaviour":"Relay DISCONNECT — execution denied","exit":"HALTED"},{"code":"S9","state":"G_HALT","condition":"Enforcement block","behaviour":"CPU-freeze opcode emitted","exit":"HALTED"},{"code":"S10","state":"G_LOCK_OUT","condition":"UNACCEPTABLE / sovereignty breach","behaviour":"Persisted lock across reboots","exit":"ADMIN_UNLOCK"},{"code":"S11","state":"DEGRADED","condition":"Plane fault (telemetry/HSM/sov)","behaviour":"Conservative scoring, see modes","exit":"RECOVER | FAIL_CLOSED"},{"code":"S12","state":"RECOVERY","condition":"Fault cleared + attested","behaviour":"Re-arm, replay audit","exit":"NOMINAL"}]},"degraded_modes":[{"mode":"M0-NOMINAL","trigger":"No fault","policy":"Full 6-D governance, all relays armed."},{"mode":"M1-TELEMETRY_LOSS","trigger":"Telemetry/sensor integrity drop","policy":"Treat missing signals as worst-case; auto-escalate borderline decisions."},{"mode":"M2-SOVEREIGN_ISOLATE","trigger":"BGP/traceroute/DNSSEC/storage breach","policy":"Isolate to local sovereign core; deny all egress; SVS forced non-sovereign."},{"mode":"M3-KEY_CUSTODY","trigger":"HSM cell / dual-custody fault","policy":"Read-only; no new seals or activations; existing verdicts honoured."},{"mode":"M4-FAIL_CLOSED","trigger":"Unrecoverable / multi-plane fault","policy":"Full lockdown; all relays DISCONNECT; G_lock_out; admin recovery required."}],"opcodes":{"G_SOV_VERIFY":"Sovereign pre-execution verification; gates the relay before any action runs.","G_HALT":"CPU-freeze enforcement (hardware: sub-10ns freeze pin). Stops execution on block.","Relay_control":"Drives the hardware relay OPEN (permit) / DISCONNECT (failure state).","G_lock_out":"HSM-NVRAM lock signal; persists across reboots (Part 10.2, Category B)."},"note":"Fail-closed by construction: any unrecoverable fault transitions to M4-FAIL_CLOSED / S10 with all relays DISCONNECT. Live state is in-memory (emulated; not persisted across restart/workers).","generated_at":"2026-09-03T16:08:52.784126+00:00"}