CSD/4 Architecture & CC RC17 Namespace Explorer

A unified, interactive reference bridging CIRISConstitution@rc17, CIRISServer, CIRISClient, CEWPOS, and CEWP: the closed catalogue of 20 topologies (T0–T19), 105 CSD cards (101 in CIRISClient across 22 files [43 CSD/4 four-field + 58 earlier bullet cards] + 4 CEWPOS cards CSD-CEWPOS-001..004), 191 namespace families, 474 constitutional transitions, 17 role tokens, and 12 governance policies running live against the browser-executable CEWP kernel. The CSD-to-namespace mapping is CEWP's synthesis of CIRISClient/CEWPOS cards against CC rc17's namespace_registry.json (191 families) and csd4_chain.json (156 vocabulary atoms, 152 state-table atoms, 110 promised atoms across T0..T19, catalogue v6).

191
Namespace Families
474
Constitutional Transitions
20 (T0–T19)
Closed Topologies
105 Cards
101 CIRISClient + 4 CEWPOS
17 Roles
8 Base + 9 Specialized
783 / 1,291
Valid Vectors (505 Private + 3 Retired Refused)

The Problem CSD/4 Solves: Bridging 5 Repositories with Realistic Usage

In traditional decentralized software, application interfaces, network protocols, and cryptographic rulebooks drift apart. Client developers build UI screens with ad-hoc assumptions; server teams invent unconstrained RPC APIs; and formal rulebooks exist only as abstract mathematical proofs disconnected from what a user actually clicks.

CSD/4 (Card-first Specification Design, 4-field card format: shows / reads / emits / checks), grounded by Cornerstone Invariants X1–X5, completely eliminates this drift. It bridges five core repositories into an unbroken formal loop:

1. CIRISConstitution
The formal rulebook: 191 namespace families, 474 transitions, 12 governance policies, and verified invariants.
2. CIRISServer
State machine model, 156 vocabulary atoms (152 in state table, catalogue version 6, 110 distinct promised atoms across T0–T19), and execution traces for all 20 canonical topologies.
3. CIRISClient
Epistemic UI: 101 CSD cards across 22 files in CIRISClient (43 CSD/4 four-field cards + 58 earlier bullet cards), plus 4 CEWPOS cards (CSD-CEWPOS-001..004), for 105 total cards.
4. CEWPOS
Operating system substrate, packaging, requirements validation, and native runtime bindings.
5. CEWP
P2P transport protocol, slot-supply simulation engine, and browser/Node kernel implementation.

The Closed Catalogue of 20 Topologies (T0–T19)

Instead of permitting arbitrary, untestable graph topologies, CSD/4 proves that every human and device interaction in the epistemic web maps into a closed catalogue of 20 canonical topologies (T0–T19). Each topology is a formal state trace with explicit initial preconditions, step-by-step actions, and constitutional promises.

ID Title & Story Key State Atoms & Promises Cards Families

Step-Indexed Transient Windows [start, end)

State in CSD/4 is not a static property; it is step-indexed. Atoms exist during specific, bounded transient windows [start, end) during which constitutional actions must be performed:

  • T0 node.unclaimed [0, 1): A fresh device waiting for key establishment. Exists exclusively at step 0; transitions immediately to node.claimed at step 1.
  • T3 device.join_requested [3, 4): Ephemeral pairing negotiation window. Admits approve or refuse from an existing authenticated device.
  • T5 member.applicant_pending [4, 5): Applicant waiting on community quorum threshold voting before admission or decline.
  • T8 root.halted [1, 2): Emergency brake suspension window where standard mutations are refused until quorum confirmation resumes or revokes the root.
  • T10 key.membership.proposed_evict [18, 19): Isolation window before key revocation and quorum eviction of compromised hardware (key.membership.evicted).

The 5 Cornerstone Cross-Plane Spine Invariants (X1–X5)

Formal cross-plane safety properties verified by CewpNode.tla (CIRISConstitution rc17 formal/cewp_node/README.md:54-58) over the normalized state table:

X1: Halt is not a trust leg (CC 3.2 T8 (v), 4.2.1.1)
A constitutional halt (accord_halt) freezes agent operations without creating a trust edge. The latch moves no standing, stops no serving and no replication, and moves exactly the agent's act gate; a latched node can still serve and replicate (ENABLED).
X2: Evicted roster key's authority ends (CC 3.3.6.3)
The authority of a roster key ends with its eviction; a revoked/evicted key cannot exercise authority after eviction, and any live roster key acts as the self.
X3: Replication needs peer's consent (CC 3.3.7, 3.3.1)
Replication of a peer's content needs that peer's bilateral consent / custody agreement; a revocation is an immediate boundary.
X4: Local-tier row never leaves node (CC 5.3.2.4, 2.6.1.7)
A local-tier row (local_only) never leaves its node and never crosses a federation link; a served row is always a signed federation-tier row.
X5: Leaving a root is one act (CC 4.2.1)
Leaving the root is a single unilateral act: the subscription falls and the latch lifts together without requiring counter-signature; the historical record stands.

Subset-Search Cost-Minimizing Planner & Formal Coverage

The CSD/4 simulator does not brute-force mesh states. It runs a subset-search cost-minimizing planner that finds the optimal sequence of actions folding an initial topology into a destination topology (e.g., folding T0 into T2 at steps 1 & 2: claim node, key holder, pair room) with zero redundant round trips.

Formal State Coverage Report (Catalogue Version 6):
152 Atoms in State Table (formal/STATE_TABLE.tsv)
110 Distinct Promised Atoms across T0–T19
156 Total Vocabulary Atoms (CC rc17)
242 Theoretical Constitutional States (81 vars, 12 planes)
Namespace Match Vectors (1,291 Total in CC rc17): 783 valid canonical vectors · 505 x_private:* refusal vectors (RefusedPrivateNamespace) · 3 retired holds_bytes refusal vectors (RefusedRetiredHoldingClaim)

Note on Remaining Atoms: The 6 file.durable.* atoms (file.durable, file.durable.at_target, file.durable.below_floor, file.durable.descending, file.durable.recovered, file.durable.unmarked) correspond to the target-holder replication durability tier (CC 6.1.5) and await the planned T20 durability topology.

All Topologies Showing all 105 CSD UI Cards
105 Cards · 191 Families
Showing 105 cards
Showing 191 families
Family Pattern Category Authority Roles Required Trans. Referencing CSD Cards Details

Live Wire-Namespace Pattern Matcher & Transition Sandbox

Test any wire namespace against the CC RC17 segment dimension grammar running live in kernel.js. The matcher validates dimension counts, vocabularies, hex encodings, aliases, and version segments, resolving the canonical family and all admissible transitions.

PRESETS:

Pattern Match Verdict

Wire Namespace: -
Canonical Family: -
Extracted Dimensions:
{}

Admissible Constitutional Transitions (0)

Verb From → To Roles Scope Policy