Pdf text adapter

capabilities 1
  • may read: document β€” the single lawful document handed to this invocation (rubric, evidence bundle) β€” nothing beyond itthe read surface is…the read surface is closed to its declaration

Runs as a sandboxed code adapter: foreign code behind a hard seam, capability-scoped, shadow-first β€” the rare escape hatch. It binds NO trusted interpreter β€” it is the rare escape hatch, which is exactly why it enters at shadow and taints its register.

Its output carries the MACHINE register β€” a recorded input the engine cannot reproduce. By the weakest-in-chain taint rule, everything downstream of it becomes machine too: nothing it feeds can be laundered back into a verifiable fact.

  • 0shadow acts on nothing; its would-be actions are recorded as diffshere now β€” every install enters at shadow
  • 1propose drafts queue for the owner's approval; nothing moves without a decisionearnable β€” by evidence on the record, never by install
  • 2confirm acts, but waits at the crossing β€” the owner confirms before the action landsearnable β€” by evidence on the record, never by install
  • 3auto-with-undo acts inside an undo window (NOT enabled β€” opens only by a founder ratification)closed β€” opens only by a founder act (the executor floor is unratified)
  • 4auto acts (NOT enabled β€” opens only by a founder ratification)closed β€” opens only by a founder act (the executor floor is unratified)

No enterprise has promoted it: it stands at SHADOW, actuating nothing, its would-have-done diffs on the record. Cert is the floor (first-party-audited β€” it gates entry to the registry); standing is the ceiling, earned on verified outcomes and never bought. Promotion is evidence; demotion is automatic and ledgered with its WHY.

  • can never read: private-payloads-of-others β€” any person-keyed payload other than the invoking member's consented onesNon-producibility &…Non-producibility & compulsion
  • can never read: human-key β€” the pseudonymous one-human key β€” organ-visible onlyThe personhood grade
  • can never read: boundary-reasons β€” the WHY behind a person's boundaries β€” 'not visible' is the honest answerDeath & legacy