发布

  • v1251 753f0a23b7

    docs(adr-118): integrate Soul Signature into BFLD ADRs 118/120/121/122

    frostbyte_neo 发布于 2026-05-24 16:35:06 +00:00

    Wire the Soul Signature research (docs/research/soul/) into BFLD as a
    consent-based opt-in that runs at privacy_class = 1 (derived). BFLD becomes
    the policy-enforcement and compliance layer for Soul Signature; the two
    share the AETHER encoder, the witness chain, the RVF container, and
    cross_room.rs.

    ADR-118 §1.4 (new): comparison table of intents, consent models, ID spaces,
    and shared assets. Explains why the two systems are complementary, not
    antagonistic.

    ADR-120 §2.7 (new): dual-ID-space contract.

    • Default BFLD: class 2, daily-rotated rf_signature_hash for all.
    • Soul Signature opt-in: class 1, rotating hash for unenrolled + stable
      opaque person_id for enrolled. No collision.
    • Class 3 (restricted): Soul Signature disabled.
      Static enforcement via --features soul-signature feature gate.

    ADR-121 §2.6 (new): Soul Signature Recalibrate exemption + enrollment-
    quality gate.

    • SoulMatchOracle suppresses Recalibrate when high score traces to an
      enrolled person_id (matched outcome is intended, not an attack).
    • identity_risk_score doubles as enrollment-quality signal: Soul Signature
      enrollment requires score >= 0.65 sustained over the 60s window.
    • Exemption is asymmetric: unknown high-separability clusters still
      trigger Recalibrate.

    ADR-122 §2.7 (new): three Soul Signature HA entities exposed at class 1
    only, structurally rejected at the Matter boundary. Fourth blueprint
    (enrolled-person arrival notification) ships under feature flag, default
    off, per-person opt-in.

    Co-Authored-By: claude-flow ruv@ruv.net

    下载附件