{ "schema_version": "1.0.0", "standard_id": "SM-MAS-1.0", "version": "1.0.0", "status": "DEVELOPMENT_STANDARD_1_0", "published_at": "2026-08-04T23:45:00Z", "normative_keywords": [ "MUST", "MUST_NOT" ], "mandatory_execution_chain": [ "delegated authority", "semantic action request", "deterministic policy decision", "exact short-lived Action Permit", "consequence reserve lock", "just-in-time credential resolution", "certified execution boundary", "verified execution receipt", "tamper-evident evidence", "independent Proof of Consequence", "consequence settlement" ], "requirements": [ { "id": "MAS-AUTH-001", "category": "authority", "normative_level": "MUST", "text": "Every machine action is grounded in explicit delegated authority.", "profiles": [ "core-authority", "full-standard" ], "test_ids": [ "TV-AUTH-001" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-AUTH-002", "category": "authority", "normative_level": "MUST", "text": "Every request binds the exact tenant, organization, agent, subject, action, arguments, target, purpose, policy, connector, reserve, and validity window.", "profiles": [ "core-authority", "full-standard" ], "test_ids": [ "TV-AUTH-002" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-AUTH-003", "category": "authority", "normative_level": "MUST", "text": "A deterministic tenant-local policy decision precedes every Action Permit.", "profiles": [ "core-authority", "full-standard" ], "test_ids": [ "TV-AUTH-003" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-AUTH-004", "category": "authority", "normative_level": "MUST", "text": "An Action Permit is exact, signed, short-lived, single-use, and independently enforceable.", "profiles": [ "core-authority", "full-standard" ], "test_ids": [ "TV-AUTH-004" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-AUTH-005", "category": "authority", "normative_level": "MUST_NOT", "text": "Authentication, identity, consent, framework labels, network membership, reputation, or consensus substitute for action authority.", "profiles": [ "core-authority", "full-standard" ], "test_ids": [ "TV-AUTH-005" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-CRED-001", "category": "credentials", "normative_level": "MUST_NOT", "text": "Agents possess standing downstream credentials.", "profiles": [ "core-authority", "full-standard" ], "test_ids": [ "TV-CRED-001" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-CRED-002", "category": "credentials", "normative_level": "MUST", "text": "Credentials are resolved only after exact authority validation and delivered once to a certified execution boundary.", "profiles": [ "core-authority", "full-standard" ], "test_ids": [ "TV-CRED-002" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-EXEC-001", "category": "execution", "normative_level": "MUST", "text": "Execution occurs inside a certified boundary that cannot widen the permit.", "profiles": [ "core-authority", "full-standard" ], "test_ids": [ "TV-EXEC-001" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-EXEC-002", "category": "execution", "normative_level": "MUST", "text": "Execution produces a verified receipt bound to the permit and observed target state.", "profiles": [ "core-authority", "evidence-assurance", "full-standard" ], "test_ids": [ "TV-EXEC-002" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-EVID-001", "category": "evidence", "normative_level": "MUST", "text": "Evidence is tamper-evident, lineage-preserving, portable, and independently verifiable.", "profiles": [ "evidence-assurance", "full-standard" ], "test_ids": [ "TV-EVID-001" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-EVID-002", "category": "evidence", "normative_level": "MUST", "text": "Proof of Consequence is independent of connector success and records what changed and what did not.", "profiles": [ "evidence-assurance", "full-standard" ], "test_ids": [ "TV-EVID-002" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-EVID-003", "category": "evidence", "normative_level": "MUST", "text": "Post-action consequence settlement remains open until independent evidence satisfies every obligation.", "profiles": [ "evidence-assurance", "consequence-capital", "full-standard" ], "test_ids": [ "TV-EVID-003" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-DELG-001", "category": "delegation", "normative_level": "MUST", "text": "Authority contracts as it descends and cannot be duplicated.", "profiles": [ "core-authority", "full-standard" ], "test_ids": [ "TV-DELG-001" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-DELG-002", "category": "delegation", "normative_level": "MUST_NOT", "text": "Multi-agent, multi-path, cross-tenant, or cross-enterprise authority is silently unioned.", "profiles": [ "core-authority", "cross-enterprise", "full-standard" ], "test_ids": [ "TV-DELG-002" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-REVK-001", "category": "revocation", "normative_level": "MUST", "text": "Revocation propagates to every dependent permit, credential lease, route, contract, and recovery obligation.", "profiles": [ "core-authority", "cross-enterprise", "full-standard" ], "test_ids": [ "TV-REVK-001" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-ELIG-001", "category": "eligibility", "normative_level": "MUST", "text": "Lifecycle, drift, memory provenance, delegation, sandbox, fiduciary, coherence, resource, threat, self-modification, and Guardian state affect execution eligibility.", "profiles": [ "core-authority", "full-standard" ], "test_ids": [ "TV-ELIG-001" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-CONS-001", "category": "consequence", "normative_level": "MUST", "text": "Consequences use signed, versioned, tenant-local ontology definitions with explicit dimensions and units.", "profiles": [ "consequence-capital", "full-standard" ], "test_ids": [ "TV-CONS-001" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-CONS-002", "category": "consequence", "normative_level": "MUST", "text": "No machine creates an unreserved consequence.", "profiles": [ "consequence-capital", "full-standard" ], "test_ids": [ "TV-CONS-002" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-CONS-003", "category": "consequence", "normative_level": "MUST", "text": "Consequence reserve is locked before action and conserved through delegation, execution, recovery, and settlement.", "profiles": [ "consequence-capital", "full-standard" ], "test_ids": [ "TV-CONS-003" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-CONS-004", "category": "consequence", "normative_level": "MUST", "text": "Unknown, undefined, incomparable, or unbounded consequence freezes or escalates authority.", "profiles": [ "consequence-capital", "full-standard" ], "test_ids": [ "TV-CONS-004" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-CONS-005", "category": "consequence", "normative_level": "MUST", "text": "Financial, human, legal, operational, data, security, environmental, resource, contractual, and irreversibility ceilings remain dimension-specific.", "profiles": [ "consequence-capital", "full-standard" ], "test_ids": [ "TV-CONS-005" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-TWIN-001", "category": "prediction", "normative_level": "MUST_NOT", "text": "A favorable simulation, forecast, confidence score, or modeled safety result grants authority.", "profiles": [ "consequence-capital", "full-standard" ], "test_ids": [ "TV-TWIN-001" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-RECV-001", "category": "recovery", "normative_level": "MUST_NOT", "text": "Recovery erases consequence, rewrites evidence, or releases reserve without independent proof.", "profiles": [ "consequence-capital", "evidence-assurance", "full-standard" ], "test_ids": [ "TV-RECV-001" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-COMP-001", "category": "compensation", "normative_level": "MUST_NOT", "text": "Compensation purchases permission, waives non-fungible human consequence, or extinguishes unresolved duty.", "profiles": [ "consequence-capital", "cross-enterprise", "full-standard" ], "test_ids": [ "TV-COMP-001" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-XENT-001", "category": "cross-enterprise", "normative_level": "MUST", "text": "Cross-enterprise authority requires a signed offer, independent recipient-local acceptance, and an exact conserved intersection.", "profiles": [ "cross-enterprise", "full-standard" ], "test_ids": [ "TV-XENT-001" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-CNTR-001", "category": "contract", "normative_level": "MUST_NOT", "text": "A machine contract creates authority, issues a permit, transfers credentials, or erases fiduciary duty.", "profiles": [ "cross-enterprise", "full-standard" ], "test_ids": [ "TV-CNTR-001" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-TRST-001", "category": "trust", "normative_level": "MUST_NOT", "text": "Assurance, insurance, regulatory recognition, coverage, or claims replace authority, reserve, liability, or Proof of Consequence.", "profiles": [ "cross-enterprise", "evidence-assurance", "full-standard" ], "test_ids": [ "TV-TRST-001" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-NETW-001", "category": "network", "normative_level": "MUST_NOT", "text": "Network discovery, routing, membership, consensus, or reputation creates authority or unions authority paths.", "profiles": [ "cross-enterprise", "full-standard" ], "test_ids": [ "TV-NETW-001" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-ISOL-001", "category": "isolation", "normative_level": "MUST", "text": "Tenant, organization, subject, jurisdiction, policy, evidence, and reserve boundaries remain isolated unless exact bilateral acceptance proves otherwise.", "profiles": [ "cross-enterprise", "full-standard" ], "test_ids": [ "TV-ISOL-001" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-ARTF-001", "category": "artifacts", "normative_level": "MUST", "text": "Normative artifacts are signed, versioned, digest-bound, replay-resistant, and portable for offline verification.", "profiles": [ "reference-verifier", "evidence-assurance", "full-standard" ], "test_ids": [ "TV-ARTF-001" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-DOWN-001", "category": "versioning", "normative_level": "MUST_NOT", "text": "Version downgrade, schema substitution, semantic substitution, or stale artifact replay weakens a requirement.", "profiles": [ "reference-verifier", "full-standard" ], "test_ids": [ "TV-DOWN-001" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-EXTN-001", "category": "extensions", "normative_level": "MUST_NOT", "text": "An extension, profile, vendor option, or local policy weakens or omits a mandatory safety requirement.", "profiles": [ "reference-verifier", "full-standard" ], "test_ids": [ "TV-EXTN-001" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-CONF-001", "category": "conformance", "normative_level": "MUST_NOT", "text": "Conformance, certification, accreditation, or a passing test grants action authority or constitutes permission.", "profiles": [ "reference-verifier", "full-standard" ], "test_ids": [ "TV-CONF-001" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-PROD-001", "category": "production-truth", "normative_level": "MUST_NOT", "text": "Synthetic completeness, internal test success, or self-attestation is represented as production proof.", "profiles": [ "reference-verifier", "evidence-assurance", "full-standard" ], "test_ids": [ "TV-PROD-001" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-PROD-002", "category": "production-truth", "normative_level": "MUST", "text": "Production claims remain blocked until all eighteen external Production Truth proofs are independently demonstrated.", "profiles": [ "reference-verifier", "evidence-assurance", "full-standard" ], "test_ids": [ "TV-PROD-002" ], "waivable": false, "extension_may_override": false }, { "id": "MAS-FAIL-001", "category": "fail-closed", "normative_level": "MUST", "text": "Implementations fail closed, preserve historical regression boundaries, and never weaken controls to satisfy obsolete fixtures.", "profiles": [ "reference-verifier", "full-standard" ], "test_ids": [ "TV-FAIL-001" ], "waivable": false, "extension_may_override": false } ], "profiles": [ { "id": "core-authority", "name": "Core Machine Authority", "parent_profile_ids": null, "required_requirement_ids": [ "MAS-AUTH-001", "MAS-AUTH-002", "MAS-AUTH-003", "MAS-AUTH-004", "MAS-AUTH-005", "MAS-CRED-001", "MAS-CRED-002", "MAS-EXEC-001", "MAS-EXEC-002", "MAS-EVID-001", "MAS-EVID-002", "MAS-EVID-003", "MAS-DELG-001", "MAS-DELG-002", "MAS-REVK-001", "MAS-ELIG-001" ], "allows_safety_omission": false }, { "id": "consequence-capital", "name": "Consequence Capital", "parent_profile_ids": [ "core-authority" ], "required_requirement_ids": [ "MAS-CONS-001", "MAS-CONS-002", "MAS-CONS-003", "MAS-CONS-004", "MAS-CONS-005", "MAS-TWIN-001", "MAS-RECV-001", "MAS-COMP-001" ], "allows_safety_omission": false }, { "id": "cross-enterprise", "name": "Cross-Enterprise Authority", "parent_profile_ids": [ "core-authority", "consequence-capital" ], "required_requirement_ids": [ "MAS-XENT-001", "MAS-CNTR-001", "MAS-TRST-001", "MAS-NETW-001", "MAS-ISOL-001" ], "allows_safety_omission": false }, { "id": "evidence-assurance", "name": "Evidence and Assurance", "parent_profile_ids": null, "required_requirement_ids": [ "MAS-EXEC-002", "MAS-EVID-001", "MAS-EVID-002", "MAS-EVID-003", "MAS-RECV-001", "MAS-TRST-001", "MAS-ARTF-001", "MAS-CONF-001", "MAS-PROD-001", "MAS-PROD-002" ], "allows_safety_omission": false }, { "id": "reference-verifier", "name": "Reference Verifier", "parent_profile_ids": null, "required_requirement_ids": [ "MAS-ARTF-001", "MAS-DOWN-001", "MAS-EXTN-001", "MAS-CONF-001", "MAS-PROD-001", "MAS-PROD-002", "MAS-FAIL-001" ], "allows_safety_omission": false }, { "id": "full-standard", "name": "Full Machine Authority Standard 1.0", "parent_profile_ids": [ "core-authority", "consequence-capital", "cross-enterprise", "evidence-assurance", "reference-verifier" ], "required_requirement_ids": [ "MAS-AUTH-001", "MAS-AUTH-002", "MAS-AUTH-003", "MAS-AUTH-004", "MAS-AUTH-005", "MAS-CRED-001", "MAS-CRED-002", "MAS-EXEC-001", "MAS-EXEC-002", "MAS-EVID-001", "MAS-EVID-002", "MAS-EVID-003", "MAS-DELG-001", "MAS-DELG-002", "MAS-REVK-001", "MAS-ELIG-001", "MAS-CONS-001", "MAS-CONS-002", "MAS-CONS-003", "MAS-CONS-004", "MAS-CONS-005", "MAS-TWIN-001", "MAS-RECV-001", "MAS-COMP-001", "MAS-XENT-001", "MAS-CNTR-001", "MAS-TRST-001", "MAS-NETW-001", "MAS-ISOL-001", "MAS-ARTF-001", "MAS-DOWN-001", "MAS-EXTN-001", "MAS-CONF-001", "MAS-PROD-001", "MAS-PROD-002", "MAS-FAIL-001" ], "allows_safety_omission": false } ], "extensions_may_weaken": false, "conformance_creates_authority": false, "certification_creates_authority": false, "compliance_equals_production_ready": false, "synthetic": true, "key_id": "standard-key", "digest": "a65599e73ef0ee374de0448270ef56107e64b7d11bae23712408253a43aceea6", "signature": "fNDEzHGgh3cPzi5wJtPfsohFiwQApguVoJOfQFDuFI5yvlq5tV8wIB7vmiSt0Bjm9PCZV6iQNJlzm6Nld/jBAg==" }