Public principles

Make the claim clear before the work moves forward.

Mullusi is built for teams that need planning, review, approval, and records around important work. The rule is simple: do not present a claim as ready until its evidence state is known.

Plain claim Evidence State Review Record Public result
Doctrine v1.2 Published
Public principles Visible
Runtime AwaitingEvidence
Release record Reversible
Next gate Signed witness endpoints

Mullusi Doctrine v1.2 is the public rule set behind these principles. It is not a verified runtime claim until signed witness endpoints publish.

View Mullu Govern See current status Contact
Reader map

Read doctrine as a release control, not a runtime claim.

Evidence Declare state first

Every claim states what is verified and what still waits for witness closure.

Boundary Keep scope visible

Public posture, product route, and runtime readiness stay separate.

Release Preserve lineage

Publication requires snapshot, superseded-by trace, and rollback policy.

Action Fail closed

Missing evidence, authority, or lineage blocks expansion of public claims.

Evidence State

What can be said publicly

Website

Published

The Mullusi website, product route, status route, contact route, and trust pages are available.

Product services

AwaitingEvidence

Runtime conformance stays pending until signed witness endpoints close.

Release

Reversible

Public changes keep a record so the prior claim can be traced, restored, or corrected.

Operating principles

Mullusi Doctrine v1.2

Claims
  1. No claim without declared evidence state.
  2. No proof without a clear boundary.
  3. No verdict without trace.
  4. No public simplification unless the full record can still be found.
Important work
  1. No important action without review.
  2. No material consequence without re-governance when context, authority, risk, or dependency state changes.
  3. No deadline, demo, sales pressure, or investor pressure may change evidence state.
Release
  1. No boundary transition without review, witness, and lineage.
  2. No protected internal surface may be made public without approved promotion.
  3. No release without snapshot reference, rollback policy, and superseded-by lineage.
Public clarity
  1. No complexity exposed unless it increases user value.
  2. Technical depth belongs lower on the page unless a visitor needs it.
  3. This doctrine is itself versioned, evidence-bound, and reversible.
Proof Boundaries Appendix

What the public site proves

Verified

Public surface

mullusi.com is the company and product routing surface.

Verified

Principles

Mullusi Doctrine v1.2 is evidence-bound and reversible.

AwaitingEvidence

Runtime conformance

/health, /gateway/witness, and /runtime/conformance must publish signed witness evidence.

Private

Protected internals

Private source, operator routes, and recovery records remain outside the public surface.

Technical appendix

Publication contract

release_surface := {
  surface_id,
  version,
  owner,
  claim,
  evidence_state,
  proof_boundary_ref,
  authority_ref,
  promotion_source,
  snapshot_ref,
  witness_ref,
  threat_model_ref,
  consequence_scope,
  re_governance_triggers,
  supersedes,
  superseded_by,
  rollback_policy,
  public_notice_required,
  created_at
}
publish(surface):
  require evidence_state
  require proof_boundary_ref
  require authority_ref
  require snapshot_ref

  if evidence_state == "VerifiedRuntime":
    require signed witness_ref

  if surface is public:
    require threat_model_ref
    require rollback_policy
    require public_notice_required decision

  if surface supersedes another public claim:
    require supersedes
    require superseded_by update on old surface
    require public notice when claim meaning changes

  return PublishableWithBoundary or GovernanceBlocked(reason)
Material Consequence

When work must be reviewed again

Trigger Why it matters Required posture
Context change The prior decision may no longer match the active situation. Review again before material consequence.
Authority change Actor, permission, or policy authority may have changed. Hold until authority is re-established.
Risk class change A low-risk proposal can become high-consequence during execution. Escalate evidence state and proof boundary.
Dependency change External service, data source, or route may change. Re-evaluate against current dependency state.
Timeout Evidence can expire before execution finishes. Require fresh snapshot and witness reference.
Threat Model

Minimum public-surface threats

Threat

Evidence state inflation

Threat

Protected surface promotion

Threat

Stale claim reuse

Threat

Missing superseded_by lineage

Threat

Unsigned witness substitution

Threat

Deadline pressure override

Threat

Rollback erasure

Response

Fail closed when evidence, authority, or lineage is missing.

Rollback

Lineage-preserving rollback

rollback(surface_id):
  old_surface.superseded_by := new_surface.surface_id
  preserve old claim
  mark old evidence_state as superseded / deprecated / rejected
  publish notice if public claim changed
  notify dependent consumers if they relied on the old claim
Status

Resolution trace

STATUS:
  Completeness: 96%
  Self-attested invariants: evidence boundary, material consequence trigger, public/private boundary, reversible release, rollback lineage, threat model minimum
  Open issues: runtime witness endpoints remain AwaitingEvidence
  Next action: close signed runtime witness endpoints before any VerifiedRuntime claim