Proposal: Closed-world economy invariants and harm gates

[Natoshi-moto]

Proposal only — no implementation, no live economy

This is a proposal, not an implementation. It:

• does not implement, launch, or operate any economy;
• does not create, endorse, or authorize any token, coin, cash-out path, price, exchange rate, or market of any kind;
• does not enable any redemption, transfer, bridge, or exportable instrument for anything covered by this package;
• does not touch, modify, or reduce Lab main beyond adding this one reviewed directory;
• does not modify Natoshi-moto/Experimental-Sandbox in any way (change_origin: LAB_INTERNAL, all Sandbox fields NOT_APPLICABLE);
• does not request or contain merge authorization — authorization, if it ever happens, is recorded separately at operations/merge_authorizations/PR-<number>.json by explicit, separate operator action;
• is not requesting merge. This PR is opened as a draft, for review only, and is intended to stay in draft status until an operator explicitly decides otherwise.

A passing validator run or a passing test suite does not prove safety, legality, completeness, or real-world closure. See CLAIMS_AND_NONCLAIMS.md in the package for the full, explicit list of non-claims.

What this package is

operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/ — a proposed framework translating this Lab's existing anti-value doctrine (STATUS.json's permanent NO_REAL_WORLD_TOKEN_OR_ECONOMIC_VALUE red, the Beneficial Genesis canonical checkpoint's "never endorse real-world economic value," and operations/LANGUAGE_STANDARD.md's STRICT NO SALE rule) into mechanical invariants, for any future internal economy, reputation system, or recognition mechanism the Lab might build:

• source/canon classification, threat model, hard invariants, prohibited-capability list, allowed-primitive list, earning/recognition model, secondary-market/leakage model, user-harm and operator-power model, halt/escalation rules, claims and non-claims, implementation gates, and a contradiction register naming a live, shipped counter-example already in this repository (CONTRADICTION_REGISTER.md CR-02/CR-03);
• a machine-readable manifest schema, a standard-library-only fail-closed validator, 4 valid + 50 hostile/invalid deterministic test vectors, and a 22-test unit-test suite that also mechanically checks the schema, the validator, and the doctrine documents agree on the same key sets.

See HANDOFF_ANY_AI.md in the package for full re-entry and verification instructions for any future seat, and RECEIPT.json for this operation's own sanitized receipt.

Promotion contract

{
  "schema": "nexus.experimental-sandbox-promotion/v1",
  "change_origin": "LAB_INTERNAL",
  "sandbox_repository": "NOT_APPLICABLE",
  "sandbox_commit": "NOT_APPLICABLE",
  "sandbox_tag": "NOT_APPLICABLE",
  "sandbox_record_url": "NOT_APPLICABLE",
  "sandbox_context": "NOT_APPLICABLE",
  "task_or_route_id": "CLOSED_WORLD_ECONOMY_INVARIANTS_001",
  "baseline_lab_commit": "6c3a1e806baba1183553221f5c2f00125ce2be29",
  "authority_used": "Bounded operator task: recover and complete an interrupted bounded Lab operation, proposal-only, operator-directed throughout.",
  "allowed_write_scope": ["operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/**"],
  "files_proposed_for_lab": [
    {"path": "operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/README.md", "disposition": "DOCUMENTATION_ONLY"},
    {"path": "operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/SOURCE_AND_CANON_MAP.md", "disposition": "DOCUMENTATION_ONLY"},
    {"path": "operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/THREAT_MODEL.md", "disposition": "DOCUMENTATION_ONLY"},
    {"path": "operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/INVARIANTS.md", "disposition": "DOCUMENTATION_ONLY"},
    {"path": "operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/PROHIBITED_CAPABILITIES.md", "disposition": "DOCUMENTATION_ONLY"},
    {"path": "operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/ALLOWED_INTERNAL_PRIMITIVES.md", "disposition": "DOCUMENTATION_ONLY"},
    {"path": "operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/EARNING_AND_RECOGNITION_MODEL.md", "disposition": "DOCUMENTATION_ONLY"},
    {"path": "operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/SECONDARY_MARKET_AND_LEAKAGE_MODEL.md", "disposition": "DOCUMENTATION_ONLY"},
    {"path": "operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/USER_HARM_AND_POWER_MODEL.md", "disposition": "DOCUMENTATION_ONLY"},
    {"path": "operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/HALT_AND_ESCALATION_RULES.md", "disposition": "DOCUMENTATION_ONLY"},
    {"path": "operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/CLAIMS_AND_NONCLAIMS.md", "disposition": "DOCUMENTATION_ONLY"},
    {"path": "operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/IMPLEMENTATION_GATES.md", "disposition": "DOCUMENTATION_ONLY"},
    {"path": "operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/CONTRADICTION_REGISTER.md", "disposition": "DOCUMENTATION_ONLY"},
    {"path": "operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/HANDOFF_ANY_AI.md", "disposition": "DOCUMENTATION_ONLY"},
    {"path": "operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/RECEIPT.json", "disposition": "DOCUMENTATION_ONLY"},
    {"path": "operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/schema/closed_world_economy.schema.json", "disposition": "DOCUMENTATION_ONLY"},
    {"path": "operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/TEST_VECTORS.json", "disposition": "EVIDENCE_ONLY"},
    {"path": "operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/tools/validate_closed_world_economy.py", "disposition": "INDEPENDENT_REIMPLEMENTATION"},
    {"path": "operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/tests/__init__.py", "disposition": "DOCUMENTATION_ONLY"},
    {"path": "operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/tests/test_closed_world_economy.py", "disposition": "INDEPENDENT_REIMPLEMENTATION"}
  ],
  "claim": "This package is an internally consistent proposed framework (closed-world invariants, a 21-key prohibited-capability list, a 10-category allowed-primitive list, an earning/recognition model, a threat and secondary-market/leakage model, a user-harm and operator-power model, a halt/escalation ladder, a machine-readable manifest schema, a stdlib-only fail-closed validator, deterministic test vectors, and unit tests) for any future closed-world internal economy the Lab might build. The validator behaves exactly as declared against 4 valid and 50 hostile/invalid manifest vectors, and the doctrine documents, schema, validator constants, and test suite agree on the same key sets (checked mechanically, not just asserted).",
  "falsifier": "This claim is false if: any documented valid vector in TEST_VECTORS.json is rejected by tools/validate_closed_world_economy.py; any documented hostile/invalid vector is accepted; tests/test_closed_world_economy.py fails on a clean checkout; or any of the five schema/validator/doctrine-doc parity tests in that suite fails, indicating the schema, validator constants, and doctrine prose have drifted apart.",
  "evidence_class": "SYNTHETIC_DETERMINISTIC_TEST_VECTORS_AND_UNIT_TESTS",
  "tests_run": [
    {
      "command": "python3 -m unittest discover -s operations/proposals/CLOSED_WORLD_ECONOMY_INVARIANTS_001/tests -v",
      "result": "PASS",
      "details": "Ran 22 tests, 22 passed. Covers: all 4 valid vectors pass; all 50 hostile vectors rejected for the exact stated reason; malformed-JSON raw-text handling (duplicate key, syntax error, non-object top level); CLI entry point parity with the library, in-process and via one real subprocess invocation; 5 schema/validator/doctrine-doc parity checks; the worked-example vector matches EARNING_AND_RECOGNITION_MODEL.md's declared defaults."
    },
    {
      "command": "Independent re-check of validate_manifest() against every TEST_VECTORS.json entry, outside the unittest harness",
      "result": "PASS",
      "details": "4/4 valid vectors passed; 50/50 hostile vectors rejected for the exact declared reason, run a second time directly against the committed blob bytes as part of an independent read-only commit verification pass."
    },
    {
      "command": "python3 -m py_compile tools/validate_closed_world_economy.py tests/test_closed_world_economy.py tests/__init__.py",
      "result": "PASS",
      "details": "All three committed Python files compile cleanly, checked directly against the committed blob bytes."
    },
    {
      "command": "JSON parse of every committed *.json file in the package",
      "result": "PASS",
      "details": "RECEIPT.json, TEST_VECTORS.json, and schema/closed_world_economy.schema.json all parse cleanly from their committed blob bytes."
    },
    {
      "command": "./nexus doctor",
      "result": "PASS",
      "details": "All 7 checks green (required_paths, symlink_policy, json_parse, secret_patterns, privacy_ignore_rules, seed_handoff_binding, git_repository) against the clean committed working tree."
    },
    {
      "command": "./nexus verify",
      "result": "BLOCKED_BY_MISSING_DEPENDENCY",
      "details": "Independent R013 verifier fails with Node ERR_MODULE_NOT_FOUND for @noble/ed25519 in experiments/R013_PCX_CONSERVED_CLAIM/independent_verifier.mjs. Confirmed node_modules/@noble is absent from this environment; pre-existing and unrelated to this package. Not installed or repaired."
    },
    {
      "command": "git diff --check HEAD^ HEAD",
      "result": "PASS",
      "details": "Clean, no whitespace or conflict-marker errors across the full commit range."
    },
    {
      "command": "python3 -m unittest discover -s tests -v (repo-wide suite)",
      "result": "PARTIAL_PRE_EXISTING_FAILURE",
      "details": "179 of 190 repo-wide tests passed. 9 failures and 2 errors, all confined to test_r013_pcx_convergence.py, test_r015_independent_durability_verifier.py, and test_r016_independent_verifier.py, all tracing to the same missing @noble/ed25519 Node dependency as ./nexus verify above. None of the 11 failing tests touch this package's files."
    },
    {
      "command": "python3 -m unittest tests.test_control_plane -v",
      "result": "PASS",
      "details": "Ran 5 tests, 5 passed."
    }
  ],
  "test_results": [
    "22/22 dedicated package tests passed",
    "4/4 valid vectors passed and 50/50 hostile vectors rejected for the exact stated reason, independently cross-checked",
    "All committed JSON and Python files parse and compile cleanly from their committed blob bytes",
    "nexus doctor: 7/7 checks passed",
    "nexus verify: BLOCKED_BY_MISSING_DEPENDENCY (@noble/ed25519 absent; pre-existing environment gap, unrelated to this package; not installed or repaired)",
    "repo-wide suite: 179/190 passed; the 11 failing cases are pre-existing and confined to unrelated R013/R015/R016 files sharing the same missing dependency",
    "test_control_plane: 5/5 passed",
    "git diff --check: clean across the full commit range"
  ],
  "known_failures": [
    "./nexus verify is BLOCKED_BY_MISSING_DEPENDENCY due to the pre-existing absence of @noble/ed25519 in this environment; unrelated to this package and not remediated here",
    "9 failures and 2 errors in the unrelated, pre-existing test_r013_pcx_convergence.py / test_r015_independent_durability_verifier.py / test_r016_independent_verifier.py files, all tracing to the same missing dependency"
  ],
  "known_unknowns": [
    "No age-verification mechanism for minors is proposed anywhere in this package (USER_HARM_AND_POWER_MODEL.md's Minors row names this as an open gap)",
    "Independent, non-operator review capacity does not exist in this Lab's structure; every operator-power abuse risk in this package is named against that limit, not solved by it",
    "The 50-vector hostile catalog is a representative, doctrine-anchored sample, not an exhaustive combinatorial sweep of all 21 prohibited capabilities times 10 primitive categories times 11 properties",
    "CONTRADICTION_REGISTER.md's CR-13 finds no single canonical STRICT_NO_SALE.md doctrine document under that exact name anywhere in the repository"
  ],
  "non_claims": [
    "Not legal advice.",
    "Not regulatory clearance.",
    "Not token-launch authorization.",
    "Not permission to accept real money or create redeemable assets.",
    "Not evidence that a closed-world economy already exists anywhere in this Lab.",
    "Not proof that users cannot build external markets around any future system anyway.",
    "Not a harm guarantee.",
    "Not permission to deploy anything to real users.",
    "Not permission to weaken STATUS.json's NO_REAL_WORLD_TOKEN_OR_ECONOMIC_VALUE red or any other existing Lab invariant.",
    "A passing run of tools/validate_closed_world_economy.py against a manifest does not prove legal, social, or economic safety, and by itself makes no future system safe, legal, or harmless."
  ],
  "adversarial_review": {
    "performed": true,
    "summary": "50 hostile/invalid manifest vectors were authored and self-checked against the validator before commit, then independently re-verified a second time against the exact committed blob bytes, outside the unittest harness, during a separate read-only commit-verification pass.",
    "findings": [
      "The validator correctly rejects, among 50 hostile cases: enabled official redemption, enabled operator facilitation of external exchange, enabled OTC matching, enabled account-sale tooling, enabled loot boxes and wagering, chance combined with purchasable or transferable properties, market-or-export-shaped transfer policies (OPEN_ORDER_BOOK, ASSET_EXPORT), an out-of-order or truncated leakage-response ladder, minors-reachable declared alongside a chance-obtainable category, and vague placeholder text (TBD/TODO) in load-bearing fields.",
      "SOURCE_AND_CANON_MAP.md and CONTRADICTION_REGISTER.md's own review of the existing repository found a live, shipped counter-example (a Wallet_v4_nexus.html surface already using doctrine-banned wallet/balance/earn language), which this proposal treats as evidence the doctrine it translates is not yet architecturally enforced, not as something this package fixes."
    ],
    "limitations": [
      "No external security specialist, economist, lawyer, or harm-reduction specialist has reviewed this package; that review is listed as required, not performed, in IMPLEMENTATION_GATES.md gates 2, 3, and 12",
      "The hostile-vector catalog is representative rather than an exhaustive combinatorial sweep",
      "Independent, non-operator review capacity does not exist in this Lab's structure, a limit this package names rather than resolves"
    ]
  },
  "rights_and_licences": {
    "original_author_or_source": "Claude Code (Sonnet 5), operator-directed; all 20 files are original authorship produced for this Lab operation, including recovery and completion of files begun in an interrupted prior session of the same operation",
    "source_repository": "Natoshi-moto/Lab",
    "source_commit": "6c3a1e806baba1183553221f5c2f00125ce2be29",
    "source_licence": "MIT as declared by the repository",
    "files_modified": "No third-party source file was copied, ported, or modified. Existing Lab doctrine (STATUS.json, operations/LANGUAGE_STANDARD.md, the Beneficial Genesis canonical checkpoint, constitution/*) is cited and quoted only in short attributed excerpts for doctrinal translation, never reproduced wholesale.",
    "third_party_material": "None.",
    "submitter_rights": "Operator-directed Lab-internal proposal work produced entirely within this repository; no external contributor rights are implicated.",
    "lab_mit_compatibility": "All new files are original text and code, compatible with the repository's declared licensing.",
    "exceptions": "None declared."
  },
  "security_and_privacy_impact": {
    "summary": "This package is inert documentation, a JSON Schema, a standard-library-only Python validator, deterministic test vectors, and unit tests. It defines no running service, opens no network port, stores no user data, and is not wired into any live system anywhere in the Lab.",
    "secrets_checked": "The exact committed blob bytes (exported via git archive, not the working tree) were scanned for API-key, password, PEM/private-key, and common cloud-credential patterns. No genuine hits; the only two pattern matches are RECEIPT.json's own prose describing this scan, not a leaked secret.",
    "personal_data_checked": "The committed blob bytes were scanned for email addresses and similar personal-data patterns. No hits.",
    "external_systems": "None are contacted by anything in this package. The validator and its test suite are standard-library-only Python with no network calls; the one subprocess test invokes the committed validator script itself, locally, on a temporary file.",
    "risks": "The primary residual risk is scope creep: a future reader could mistake a passing validator run for safety or legal clearance, which CLAIMS_AND_NONCLAIMS.md and this contract both explicitly disclaim. Merging this documentation-and-tooling package as-is introduces no security or privacy risk, since nothing in it executes against real user data, real funds, or any live system."
  },
  "known_lab_red_impact": "NONE. This package does not touch, reinterpret, or weaken STATUS.json's permanent NO_REAL_WORLD_TOKEN_OR_ECONOMIC_VALUE red or any other standing Lab red. It is proposal-only, with a NONE status authority throughout, and CLAIMS_AND_NONCLAIMS.md explicitly disclaims any permission to weaken any existing Lab invariant.",
  "operator_decision_requested": {
    "action": "REVIEW ONLY. No merge is requested. Keep this pull request in draft status pending operator and adversarial review; do not mark it ready for review as part of this action.",
    "rationale": "This is a Lab-internal proposal package (doctrine translation, schema, validator, test vectors, and tests) governing any future closed-world internal economy. Per CLAUDE.md and AGENTS.md, a proposal carries a NONE status authority unless main separately records human authorization, and that authorization is recorded only at operations/merge_authorizations/PR-<number>.json by explicit, separate operator action, never inferred from CI, draft-PR state, or this contract.",
    "reversible": true,
    "stop_conditions": "Stop and route back to review if: any test in tests_run fails on re-run; a reviewer constructs a hostile manifest this validator wrongly accepts or a valid manifest it wrongly rejects; CONTRADICTION_REGISTER.md's CR-02/CR-03 live-code finding is treated as resolved by this package (it is not, and remains out of this package's scope); or anyone proposes marking this draft ready for review or merging it without a separate, explicit operator merge-authorization record."
  },
  "status_authority": "NONE"
}

Central doctrine this package translates

Closed-world intent is not established by labels. It must be maintained by architecture, incentives, communications, monitoring, enforcement, and willingness to halt.

Capability growth increases the burden of proof.

Discovery of external trade does not validate the economy; it triggers investigation, containment, redesign, restriction, or suspension.

Known open items (not fixed by this package, by design)

• CONTRADICTION_REGISTER.md CR-02/CR-03: a shipped products/noted-host/public/nexus/os/blocks/system/Wallet_v4_nexus.html surface already uses doctrine-banned wallet/balance/earn language and a "battle stakes" mechanic. This package documents that as evidence; it does not remediate it — that is a separate, differently-scoped task.
• No age-verification mechanism for minors is proposed (USER_HARM_AND_POWER_MODEL.md's Minors row).
• No independent, non-operator review capacity exists in this Lab's structure; every operator-power abuse risk is named against that limit, not solved by it.
• The 50-vector hostile catalog is representative, not an exhaustive combinatorial sweep.
• ./nexus verify is BLOCKED_BY_MISSING_DEPENDENCY (@noble/ed25519 absent from this environment) — pre-existing and unrelated to this package; not installed or repaired as part of this work.

Requested action

Review only. Please read README.md, CLAIMS_AND_NONCLAIMS.md, and CONTRADICTION_REGISTER.md in the package first. This PR should remain a draft until you decide otherwise; no merge authorization exists or is requested by opening it.