// SPDX-License-Identifier: CC-BY-SA-4.0
= Assurance Constitution

== Claims

Every material assurance claim MUST be labelled as one of: `draft`, `designed`, `assumed`, `tested`, `audited`, or `proven`. A stronger label requires evidence appropriate to its stated model and boundary. Filenames, badges, generated reports, and passing CI do not alone establish conformance or proof.

Claims MUST identify subject, version, observation model, state boundary, assumptions, evidence, validator/tool versions, known limitations, and responsible authority. Evidence MUST remain reproducible or explain why it cannot be reproduced.

== Faithful representation

Formalisation and lowering MUST preserve materially relevant context, affected persons, uncertainty, and exceptions. Where faithful representation cannot be shown, the formal result MUST be presented as bounded evidence rather than final disposition.

== Residual risk

Risk acceptance MUST be explicit, proportionate, time-bounded where possible, and reviewable. ALARP reasoning does not cancel an applicable `MUST`; it either demonstrates compliance, invokes an authorised exception, or records a contradiction requiring constitutional review.

== External effects and reversibility

Ordinary rollback is not equivalent to MAA reversibility. Claims involving external systems MUST identify irreversible, epistemically irreversible, compensatable, containable, or obliterative effects and must not imply restoration of information or agency that cannot actually be restored.
