Skip to content

Decisions while a term remains disputed.

A controller may request more evidence, refuse, route the dispute, execute provisionally under a declared reserve, or finalize after stated conditions pass.

Problem being tested

Some actions cannot wait for every semantic dispute to disappear. Controller state keeps disputed meaning, authority, completeness assumptions, reserve, evidence, and recourse in separate fields.

Controller boundary

Profile input includes a ConsequenceProfile, an independently recomputable worst-case AmbiguityReserve, a stated completeness warrant, and distinct operative, refinement, and supersession authorities. Output is FINALIZE, EXECUTE_PROVISIONALLY, REQUEST_EVIDENCE, ROUTE, REFUSE, or TERM_STALE. Typed route causes cover conflict and non-unique choice without mutating operative state.

Run the procurement shadow

$ cd bulla
$ PYTHONPATH=src python examples/semantic-settlement/demo.py
$ python -I scripts/verify_semantic_finality.py \
    bench/invention/semantic-settlement/reproduction-vectors/procurement-provisional.internal.json

Demo steps distinguish dispatch from custody transfer, lock a simulated reserve, execute provisionally, admit carrier evidence, release reserve, finalize, and make an old term stale after a new epoch.

Verified properties

  • the finality decision binds the exact epoch, completeness warrant, authority regime, policy, and consequence profile;
  • reserve equals the declared worst-case represented loss plus explicit model-risk buffer;
  • refinement within one model cannot increase the represented reserve;
  • conflict, staleness, and impermissible finalization do not mutate operative state;
  • finality blockers and sufficient repair routes replay independently.

Availability and evidence

Availability: experimental code ships in Bulla 0.44.1 under bulla.experimental; it is not part of the stable API. Evidence: team-authored state machines and Golden cases under bounded finite models and stated completeness assumptions. The escrow adapter is simulated. The profile does not establish real custody, collectibility, legal authorization, actuarial pricing, portfolio netting, or production settlement.

See Golden Gate for the state-space and abstention evidence boundary.