Principles

Facts are immutable; correction is always forward through new events, never silent modification of what was committed.

No mechanism or design choice is adopted in practice until it is documented; documented commitments must be honoured in implementation.

No L2 or L3 derivation becomes operational ground truth without crossing an explicit commitment boundary where a named authority accepts responsibility.

Every invariant that must hold across a set of facts is enforced by designating exactly one authority with exclusive write access to that set.

Domain events name what happened in the real world; CRUD names how storage changed. Conflating them forces interpretation — by people, automations, and models — that the log should not require.

Every tier-one record carries a capture mode — commit, assert, measure, or formalise — saying how it became evidence, not only what the business calls it.

After bind, affected parties and qualified challengers may contest through a defined, accessible process; outcomes are new L0 facts; nobody is sanctioned for questioning alone.

Every consequential decision has a named owner at the commitment boundary — one authority per decision at bind, not hidden inside 'the leadership team.'

Critique targets ideas, evidence, and assumptions — never the person — so dissent is psychologically safe and epistemically useful.

Evidence and reasoning outrank title at the commitment boundary; authority weight follows track record in the relevant domain, not rank alone.

Assumptions, monitors, and falsification triggers are recorded before dissent and bind — revision depersonalises when reality diverges.

Every consequential decision is classified by reversibility before bind — reversible, costly to reverse, or irreversible — so process rigor and mandatory supersession speed match stakes.

Dissent before commitment is an asset, not a career hazard — recorded in the (A)DR against published assumptions and options, not hallway rumour.

After recorded debate, the organisation commits and executes — finality closes debate, not observation; reopen only through mechanism, not rank or regret.