AIGP Extension: Order-Typed Recomputation Witness Profile (the "Mars W1 Profile") — 3. The W1 witness record

AIGP Specification › AIGP Extension: Order-Typed Recomputation Witness Profile (the “Mars W1 Profile”) › 3. The W1 witness record

← 2. Order-typed predicate form · Section index · 4. Order typing of the emitted signal →

3. The W1 witness record

For each decision emitted under this profile, AIGP emits a witness record:

{
  "witness_class": "W1",
  "type": "derivation",
  "predicate_id": "P1",
  "order": "prescriptive",
  "assertion": "tool_invoked('delete') != true",
  "inputs": { "predicates": { "tool_invoked": { "delete": false } } },
  "referenced": ["tool_invoked('delete')"],
  "result": true,
  "governing_spec_id": "gs-acme-clinical",
  "spec_version": "3",
  "d_dna_signature": "d-dna=..."
}

Requirements (each is a structural test an inspector applies):

1. Recorded inputs. inputs MUST contain every fact the assertion references, at the value used. An inspector re-derives result by evaluating assertion over inputs alone.
2. Governing-spec binding. governing_spec_id + spec_version MUST identify the registered predicate set in effect. A verdict is re-derivable only relative to a declared spec version (this is what makes spec-drift detectable).
3. Determinism. The assertion evaluation MUST be deterministic. If any step is non-deterministic, the decision does not qualify for W1 under this profile (see §5).
4. Tamper-evidence is additional, not sufficient. The d_dna_signature provides integrity; it is NOT what makes the record W1. Removing it would leave the record still re-derivable (W1-eligible) but no longer tamper-evident.

A record failing any of 1–3 MUST NOT be labeled W1; it is emitted as W2 (with the execution record it does have) or W3 (attestation).

---

← 2. Order-typed predicate form · Section index · 4. Order typing of the emitted signal →