No. 06 · FIG A+B+C · Zero Trust Governance, end to end
The governed machine
Specimens 01–03 assembled into one chain-reacting apparatus, from unsigned proposal to hash-linked evidence. It plays itself while Constable narrates; the non-golden paths are drawn, not implied.
A proposal drops from the stochastic model into Constable’s intent receiver. Three deterministic checks stamp it; the bolt lifts only when identity, policy, and scope agree; the bind fixture seals the commit to AUTH-0427; the recorder hammers the result onto the hash-linked tape. Brass marks the governed path — the only route to execution and the only route into the ledger. Everything else is gravity.
The machine runs itself, pausable at any stage, with the failures as first-class paths. Take the scope mismatch and the gate never opens; take the altered commit and the seal refuses. Both end in a bin, and the ledger’s silence — no append, no exception, no quiet repair — is the evidence of refusal. Zero Trust Governance in one run: never trust the proposal, always verify the boundary, and record what was decided.
Limit. A drawing that moves, not a deployed kernel. The digests, hashes, and timings are illustrative, and this ledger is a display rather than the browser-persisted chain of specimen 03. For the mechanisms at rest, see the specimens.