Alfa: bind present authority
The sequence begins with operator direction, the current canonical source, deployment metadata and direct runtime evidence.Local checkouts and historical records remain useful, but they cannot silently outrank the current online authority.
AF21: fractionalize the claim
A material claim is decomposed across 21 evidence dimensions, including target identity, falsifier, provenance, time, authority, state, execution effect, transfer shape, recovery ownership and publication boundary.Unknown and partial dimensions remain visible instead of being averaged into confidence.
Radial-9: test integrity from every operating angle
Nine linked integrity families examine authority, identity, policy, continuation, execution geometry, observation, recovery, evaluation and cutover.A result that survives one family can still be rejected by another when the system cannot prove who acted, which state continued, or what reached production.
Graphite: run the closure cycle
Graphite is the radial execution model that schedules the nine integrity families, carries their evidence forward and prevents a local pass from being mistaken for global closure.Contradictions are routed back into the sequence with an owner and a required proof condition.
Paladin: shape the proof burden
Paladin converts ambiguity into explicit obligations: what must be observed, what would falsify the claim, which authority can promote it and which unresolved state blocks release.The method reduces interpretive drift without pretending that every decision can be automated.
Hot soak and fixed point
A candidate state must survive bounded repeated observation.Closure reaches a fixed point only when another material pass produces no new contradiction, no unresolved authority change and no unexplained difference between intended and observed behavior.
Receipts and publication boundaries
AOS retains exact revisions, versions, tests, runtime observations and publication receipts.Public evidence is deliberately separated from private implementation material so verification can be strong without disclosing credentials, resident identities or protected operating details.
Promotion
A candidate advances when authority is clear, the change is reviewable, required tests pass, the intended revision is online, the intended runtime serves it and bounded end-to-end behavior succeeds.Anything less is reported at its actual state.