What evidence is, and what it is not.
A PASS is a claim you should be able to open. This page teaches the vocabulary and then shows the actual reference kernel answering with it.
- Stale
- Present, well-formed, and describing an object that is no longer the current one. Not the same as absent.
- Missing
- A required kind of evidence is simply not in the record. Under a closed-world policy this is a definite negative; under open-world it is unanswerable.
- Conflicting
- Two usable pieces of evidence disagree, or an explicit contradicts edge connects them. The disagreement is not resolved by preferring the favourable one.
- Present ≠ complete
- Having some evidence is not the same as having enough evidence to answer the policy's question.
Five relations. Deliberately, not six.
Select a node or a relation.
There is no "authorizes" relation here. A permit can be represented as evidence, but the core will not elevate that representation into an operational permission.
Evidence may support, contradict, derive from, measure or describe. It may not authorise: authorisation is deliberately not a relation the core understands.
V Verified against source bytes Where this comes from
- Source file
03_ARCHITECTURE/04-EVIDENCE-GRAPH.md- Section
- Evidence Graph
- File digest
- 4f8633072bb085f39eab245f274b3c9c4e30e46b52621a0c1c8d536ce16046dc
- Verbatim quote
`authorizes` no es una relación del kernel AC1
revokes and supersedes are also refused in this candidate because their semantics are not consumed.
Fifteen situations, answered by the real core.
Each one was put through the actual reference kernel and its exact answer recorded, with the digest of the input it came from. All three outcomes appear — and release authority is false in every single one, including the favourable ones.
Browse the fifteen outcomes →How a record is read.
How this works
- 01
Each piece of evidence declares itself
What it measured, which run produced it, when, and by whom. Evidence that cannot say where it came from is not usable evidence.
- 02
Relations connect them, and only five exist
supports, contradicts, derivedFrom, measures, describes. There is deliberately no relation meaning "authorises", so nothing in a record can quietly become a permission.
- 03
The policy decides what absence means
Under a closed-world policy a missing requirement is a definite negative. Under an open-world one it cannot be answered. The same gap, two different honest answers.
- 04
Freshness and conflict are checked before the verdict
Evidence describing a superseded object, or arriving outside its permitted window, or contradicting other usable evidence, is caught rather than averaged away.
Step by step
-
Click any node in the diagram — one of the small circles.
You will see a panel naming what that piece of evidence measured.
That means evidence is a specific measurement of a specific thing, not a general reassurance.
-
Click one of the lines joining two nodes.
You will see the name of the relation and whether the engine acts on it.
That means only "contradicts" changes the outcome. The rest record where things came from.
-
Read the four words at the top of this page.
You will see stale, missing, conflicting, and present-but-incomplete.
That means these are four different problems. Treating them as one is how a gap becomes an accident.