Governed Autonomy · run it · glossary

Every term the chapter uses, in one place.

The KTP terms, the workbook's terms, the OTCS proposals with their status, and the RFC documents, each with its one-line meaning and a link to where it lives. The tooltips across the chapter read from this same table.

Filter the 43 terms

43 of 43 terms

AA ≤ E: The Zeroth Law. An agent's autonomy never exceeds the standing of the environment it acts in; the bound is measured, not granted. The Constitution
acceptor: The named person who accepts a class of work, can stop it, gets independent proof, and owns the residual risk. On the page
ADJ: Adjudicated: a reading a named authority has ruled on. On the page
ALLOW: One of the four derived decision verbs: stable, nothing tightened. On the page
BBlue Zone: A network segment where KTP is enforced: a zone with a trust ceiling, nested inside wider rings. Blue Zones
Blue Zones: Network segments where KTP is enforced, each with a trust ceiling, nested inside wider rings. On the page
Cconfigurator: The role that sets a work type up. Never the same holder as its verifier. On the page
consequence ceiling: The most a kind of work may be allowed to cause, written by a person, never derived by the machine. On the page
DDEAUTOMATE: One of the four derived decision verbs: supervision has been raised above stable, so the action needs a person, a witness or a co-sign before it runs. The decision verbs
DER: Derived state: read from a calendar, a configuration or a table, with an as-of time and a validity horizon. A derived edge is configured; it is not DER. On the page
DIR: Direct: one instrument samples a quantity. On the page
EE_base: An agent's earned standing before live conditions are applied, 0 to 100. On the page
E_trust: The Trust Score, E_trust = E_base × (1 − R): earned standing, reduced by live risk. The public form of the trust model. The Trust Score
ENU: Enumerated: a reading counted from a declared list. On the page
envelope: The bound a reading carries: what it may constrain, as of when, and until when. Without an envelope a slot cannot constrain anything. On the page
executor: The role that performs the work. For a machine worker, the only slot it may hold. On the page
FFlight Recorder: The immutable record of every decision with the context and reasoning behind it. On the page
Ggovernance in motion: Standing recomputed at every act along an agent's path, against governance at rest, which grants once and forgets. On the page
grant shape: How authority for a work type is given and taken back: promotion, tether, expiry, revoke. On the page
HHorizon: The workbook's name for V4, context-constrained agency: live context can reduce or deny an otherwise authorized action. Not a product version; V5 is not used. On the page
Jjoin seat: One of six operating functions in the semantic join. A seat is a role, not an organization; one organization may occupy more than one seat. On the page
KKAG: Kinetic Action Gateway: an implementation at the action, by a contributor, pinned to KTP v2.1.0. Implementations
KIL: Kinetic Ingress Layer: an implementation at the ingress, by a contributor, pinned to KTP v2.1.0. On the page
Llease class: Retained from workbook v0.50: case, class or session, the scope a grant is bound to. It is not a field in the current OTCS-0017 registry draft, which describes authority validity and reassessment intervals instead. On the page
line of sight: The derived chain from a piece of work up to the mission. If it cannot be derived, the work has no standing. On the page
MMission Join: Mission → objective → capability → work type → work item. Line of sight is derived, never asserted. On the page
Oobservation classes · also observation class: How a slot is allowed to count: direct, enumerated, adjudicated, published or derived. Each needs an envelope before it may constrain. OTCS-0020 is the public proposal. Observation classes
Pprocess spine: Incident states 0 to 7. A person decides at state 3; an independent verifier confirms at state 5. On the page
promotion: The ladder a capability climbs: replay, shadow, recommend, bounded execute. Each stage needs evidence the last one produced, and can be lost. On the page
PUB: Published: a reading another party published, binding only through this party's own recognition of the publisher. On the page
Rrefusal envelope: The points at which a work type must be able to refuse. At each point the outcome may be a Silent Veto, a SHAPE or a DEAUTOMATE; the envelope names the points, not the outcome. On the page
Ssemantic join · also Semantic join: Six operating roles sharing one meaning for the objects they all touch, so a fact seen by one can count for the others. On the page
SHAPE: One of the four derived decision verbs: the action runs, but its constraints have been tightened relative to the granted envelope. On the page
Silent Veto · also silent veto: When the action is riskier than the environment can hold, it becomes impossible, automatically, with no human in the loop. A correctly evaluated veto has no override. Trust, the definition
Soul veto: The sovereignty constraint, evaluated before any score. Also called the Sovereignty veto. Jurisdiction, consent and data-sovereignty limits that no trust value can override. Context Signals and Risk Factors
Sovereignty veto: The sovereignty constraint, evaluated before any score; also called the Soul veto. On the page
TT_rec: The recovery tail: how long after a narrowing a class of work takes to earn its stage back. On the page
trust tier: One of five standing bands, from Hibernation to Admin, that permits classes of action. On the page
trust tiers: Admin ≥ 85, Operator ≥ 72, Analyst ≥ 58, Observer ≥ 22, Hibernation below. A tier permits classes of action; the only numeric bound is A ≤ E. Trust tiers
Vverifier: The role that confirms the work, independently of whoever did it. Verifier is never actor. On the page
VETO: One of the four derived decision verbs: the Silent Veto fired. The result is a supervision level and tightened constraints; the verb is read from it, never stored as a type. On the page
Wwork type: A kind of consequential work: one object and one verb, with what must be able to refuse it. OTCS-0017 is the public proposal. On the page
work types: Kinds of consequential work, one object and one verb each, with the roles, grant shape, refusal envelope and ceiling that govern them. OTCS-0017 is the public proposal. Work types

The OTCS proposals the chapter touches

OTCS-0003
Ratified 2026-10-18.
On the registry
OTCS-0010
Fields the work-type proposals reuse. In deliberation; earliest decision 2026-11-15.
On the registry
OTCS-0011
Fields the work-type proposals reuse. In deliberation; earliest decision 2026-11-15.
On the registry
OTCS-0013
How proposals are amended and their clocks restart.
On the registry
OTCS-0014
In deliberation; earliest decision 2026-12-11.
On the registry
OTCS-0017
Work Types: kinds of consequential work and what must be able to refuse them. DRAFT, in deliberation; earliest decision 2026-11-28.
On the registry
OTCS-0019
Requirement profiles. DRAFT, in deliberation; earliest decision 2026-12-11.
On the registry
OTCS-0020
Observation classes: how a reading is allowed to count. DRAFT, in deliberation; earliest decision 2026-12-11.
On the registry
OTCS-0021
Join profiles between knowledge graphs. Drafted, not yet public.