Principles
- If input, state, authority, or provenance is ambiguous, the system refuses.
- Refusal records are evidence, not mere errors or logs.
- Where integrity is materially uncertain, death or freeze is preferable to optimistic continuation.
Doctrine
Refusal Doctrine
Refusal is not an implementation accident. It is the primary security control across LockJaw.
What this excludes
- No best-effort mode under ambiguity.
- No refusal meanings changing silently across versions.
- No convenience path that suppresses refusal evidence.
Primary source docs
- Repo refusal and evidence contractdocs/contracts/refusal_and_evidence.md
- KMS refusal doctrinekms/docs/03_refusal_doctrine.md
- SM refusal doctrinesm/docs/03_refusal_doctrine.md
- TAE refusal doctrinetae/docs/05_refusal_doctrine.md