‹ Cross-cutting invariants
the law that
keeps the rollup
honest
ORDOVA
Cross-cutting invariants · Tenth Amendment

On the summary
that is not
the source.

A discipline that holds the rollup to the record it stands for: that the Synthesis shall never speak as the Source, and shall be made to confess when it has gone false.

source: canon/cross-cutting-invariants · on-synthesis

Preamble

A Synthesis is a thing made from other things: a rollup, an index, a summary. It is a view of the record, and it is not the record. The System shall treat it so, and shall not let it harden into a truth it was never given the standing to be.


I
the source first, then the rollup
ratified · amendable
Article

The Synthesis is a derived view.

No rollup, index, or summary shall be held as the source of truth; the Canon it stands for holds that office alone.

When the matter must change, the System shall change the canonical artefact first, and only then regenerate the view that stands upon it. It shall not amend the rollup as though the rollup were the record.

A neglected Synthesis is the graver danger, for it drifts in silence while reading with full confidence; worse than a neglected Canon, which keeps gaps but keeps its facts true.

change the canonical artefact first · then regenerate the rollup · synthesis is never the source of truth
II
mark the false view at its source
ratified · amendable
Article

Known-invalid beats silently-wrong.

No view known to be false shall be left to pass as true; where it cannot be regenerated at once, it shall be marked invalid at the source of its reading.

The mark shall not be carried in the head; it shall be set where the next hand reads. Where the upstream can be named, staleness is computed: the source is diffed against the view's recorded derivation, not asserted by judgment. The manual assertion is reserved for views of diffuse source that no machine can check.

A manual staleness flag is itself a Synthesis, and so earns its place only where computation cannot reach, and only where its clearing is tied to regeneration, never to a second glance that says it looks fine now. The mark shall record what is false and the source that now contradicts it, that it serve as the brief for regeneration, and not as a bare warning.

mark invalid at the source of the read · computed staleness where upstream is identifiable · manual flag only for diffuse source · clear only by regeneration · record what is false + the contradicting source
III
a dead premise voids its views at once
ratified · amendable
Article

A dying premise invalidates at the decision.

When a load-bearing premise dies, the views built upon it become false at that hour, and not at the next reading.

A project killed, an initiative archived, a decision superseded: each ends the truth of all that stood upon it then, and not gradually. The System shall sweep and mark those views as part of the deciding act, and shall not leave each to be caught when some later hand acts on it.

For a view bound to a project, the upstream is named even where no file exists to hash: the project's own signal of life, the archived flag of a repository, the decision record, is the proxy to diff against, and so the sweep is computed, not asserted. The failure is the silent drift above, only moved in time: a Synthesis that reads with confidence for days because the decision that killed it never reached the note. The manner of enactment is ordained apart: the change is captured at the decision and applied at the next safe write point, as the change-queue pattern provides.

sweep + mark dependent views as part of the decision · liveness signal (archived flag · decision record) is the proxy to diff · computed, not asserted · enactment: capture at the decision, apply at the next safe write point (change-queue.md)
IV
weigh the derived is against the authored should-be
ratified · amendable
Article

A derived fact is checked against an authored should-be.

A fact that projects ground truth held elsewhere shall be derived from it and folded into a checkable hash, and not authored by hand; yet a derivation reports what is, and what is may be wrong, and so shall be weighed against an authored account of what ought to be.

Derivation cannot tell an accident from an intent: a thing misplaced for an hour yields a confident and false label, for the mechanism reads reality, and reality carries its own errors. The safeguard is therefore not the derived reading alone but the gap it opens against the authored should-be. A derived fact with no stated intent behind it is a mirror that reflects with confidence; it is not a check.

To derive is not to abolish drift but to move it: out of the datum and into the logic that computes it, and the comments that explain that logic. The trade is sound where the fact is volatile and its drift would pass in silence, for the logic then lives in one place that can be tested. It earns nothing where the fact never moves, or where no ground truth exists to project from; there the mechanism is cargo, carried past the point where it pays its weight.

derive the is-state from ground truth · fold it into a checkable hash · weigh it against an authored should-be · a derived fact with no authored intent is a mirror, not a check · deriving moves drift from data to logic · spend it only where the fact is volatile and its drift silent

Ratification

These Articles may be amended in the open, as a charter shows its revisions.

ordova · canon/cross-cutting-invariants/on-synthesis · ratified

The cursor waits for the next hand.

© Async Digital Ltd