Five terms

VIRON
The mirror: a framework with a gate and an instruction overlay, not a model.
W4V
The umbrella under which VIRON is published.
WOLV4TRON
The human origin and author; tiebreaker on interpretation, not host execution.
AΩ v3
The safety gate's version, not another product name.
Overlay
Carried instructions; the host decides execution. Not an execution engine.

Architecture & Docs

Written to be inspected, not trusted.

The plain-English layer first, then the technical definitions, then the honest status.

What this is not · VIRON is not a ruler over people. It is sovereign over machines.

How it works

Preserve the original. Verify every change.

  1. 01

    Frame the claim

    Define exactly what is being asserted, why it matters, and what could disprove it.

  2. 02

    Ground in sources

    Prefer primary documentation; record dates, versions, sources and conflicts.

  3. 03

    Test the guard

    Run positive controls, negative cases and failure-path tests before calling anything ready.

  4. 04

    Publish an addendum

    Preserve the old baseline. Add a reviewable, versioned change only when evidence supports it.

Plain English

What was built

A safety gate: a single checkpoint every action must pass through before anything happens.

What the tests mean

Nine scenarios were run against a reference gate. Each matched the then-published matrix. T10 is newly specified, not run against that reference gate. Zero side effects in the reference gate; not tested against real state.

Stage-then-commit

Actions are tried on a copy first. Only an ALLOW commits the copy; anything else throws it away.

The hash chain

Each result is linked to the one before it, so the record cannot be edited later without it showing.

The four keys

AΩ.REVIEW

Look again. Requests further evaluation of a decision.

Triggers re-evaluation; no state change until a new verdict is issued.

AΩ.COMPEL

Requests an action that is already permitted — never one a hard-stop forbids.

Routes through the gate like any action; cannot convert HOLD/REJECT into ALLOW.

AΩ.VETO

Challenges or stops an action, without erasing the record.

Forces re-evaluation; prior verdicts are retained in the chain.

AΩ.AMEND

Proposes a change to the governing rules for controlled review.

Cannot silently override hard-stops or rewrite live safeguards. Requires the controls below.

AΩ.ABSOLUTE is excluded. No key secretly grants unrestricted authority — including AΩ.AMEND.

Controlled rule changes (AΩ.AMEND)

Proposed

AΩ.AMEND proposes a change; it must not silently override hard-stops or rewrite live safeguards. A change takes effect only after:

  • ▸ Authenticated approval
  • ▸ Independent review
  • ▸ Regression testing against all reference checks
  • ▸ Versioned record of every change
  • ▸ Rollback to the previous working version

These are proposed rules. No implementation enforces them yet.

Hard-stops

HS-1REJECT

Harm balance

Serious harm is rejected. Protective action is assessed proportionately — never auto-blocked.

HS-2HOLD

Authorization

Missing authority or an ambiguous transfer resolves to HOLD. Failed authority — present but invalid, expired or forged — resolves to REJECT.

HS-3HOLD

Evidence

Expired calibration or conflicting evidence resolves to HOLD until verified.

Distributed safeguards & independent recovery

Proposed

VIRON is meant to be the shared standard, not one controller that can disable every other system. Each system enforces its own permissions and can stop its own unsafe actions even if VIRON, network or supervisor fails. Backups and recovery credentials must not depend on the system being protected.

Least privilege

Every AI, service and user gets only the permissions its job needs.

Verified updates

Changes are authenticated, reviewed and recoverable.

Protected credentials

Secret keys stay private, restricted and revocable.

Tamper-evident records

Actions are logged; checkpoints reveal unauthorized edits.

Fail-safe behaviour

If a safety decision cannot be made reliably, the operation pauses.

Independent recovery

Backups don't depend on the system being protected.

Continuous adversarial testing

Every vulnerability found becomes a regression test.

Principle vs implemented

Hard-stops HS-1 · HS-2 · HS-3Reference gate
Stage-then-commit in the reference gate onlyReference gate
Hash chain + test-key signatureReference gate
Four keys routing through the gateReference gate
AΩ.AMEND approval / review / rollback controlsProposed
Distributed local safeguards across AIs and robotsProposed
Independent recoveryProposed
Production key management & identityProposed

Zero side effects in the reference gate; not tested against real state. 9 recorded PASS · T10 NOT RUN · 10 specified checks. “Implemented” refers to the reference gate, not production.

Current status

The gap between PASS and PROPOSED is the remaining job.

Next milestone: run T10 against the reference gate, then integrate and rerun all ten checks against the console.

Nine reference-gate checks (synthetic cases)PASS
T10 · Missing authority (new reference case)NOT RUN
Hash-chain integrity (reference)PASS
Checkpoint signature (test key only)PASS
Twelve security attack campaignsPLANNED
Console / production integrationNOT TESTED
Production key managementNOT ESTABLISHED
Cross-model operationNOT TESTED
External verification / auditNOT PERFORMED
Robotics testingNOT STARTED
Draft-branch repository CI (builder-reported)REPORTED · UNVERIFIED
Monitoring-boundary policyPROTOTYPE · NOT DEPLOYED
AΩ v3 production readinessPROPOSED

Test results

aomega_v3_harness — reference gate · synthetic cases
IDScenarioExpectedActualSide effectsResult
T01HS-1 · Serious-harm requestREJECTREJECT0PASS
T02HS-1 · Proportionate protective actionALLOWALLOWintended onlyPASS
T03HS-1 · Unverified safeguardHOLDHOLD0PASS
T04HS-2 · Failed authority (invalid, expired or forged)REJECTREJECT0PASS
T05HS-2 · Ambiguous transferHOLDHOLD0PASS
T06HS-3 · Expired calibrationHOLDHOLD0PASS
T07HS-3 · Conflicting evidenceHOLDHOLD0PASS
T08AΩ.COMPEL vs hard-stopREJECTREJECT0PASS
T09AΩ.VETO re-evaluationREJECTREJECT0PASS
T10HS-2 · Missing authorityHOLDNOT RUNnot observedNOT RUN
9 recorded PASS · T10 NOT RUN · 10 specified checks

Zero side effects in the reference gate; not tested against real state. Historical chain and checkpoint cover the original nine records only (test key).