OAA CHARTER

OAA CHARTER — The Open Attestation Authority & Academy¶

Cycle: C-375 (2026-07-17) Custodian: Michael (kaizencycle) Status: CANONICAL Layer: Vision / Charter Authority: Custodian handoff (C-374 opener) License: CC0 / Public Domain

Authority Provenance¶

Authority declared using docs/templates/EPICON_FOUNDER_STANDING.md v0.1

This charter invokes founder–custodian standing under Mobius governance norms at pre-charter phase (v0). It canonizes vision, disambiguates public OAA identity, and binds sequencing gates — it does not authorize implementation above Floor 1.

Supersedes: the three uncoordinated public identities of "OAA" (see §1)

1. One name, three floors — the reconciliation¶

"OAA" currently means three things in public, none reconciled:

This charter resolves the ambiguity by declaring them three floors of one stack:

• Floor 1 — The Authority (witnessing layer). Attestation infrastructure: HMAC-authenticated agent-plane writes, ledger-sealed proofs, the sentinel review broker (C-373 handoff), and every future service where an agent's claim becomes a witnessed record. The Authority is what makes anything above it trustworthy.
• Floor 2 — The Hub (routing layer). The C-371 Universal Agent Hub: one brokered surface through which agents reach inference, tools, and each other — cached, tiered, budget-governed, every call attested downward into Floor 1.
• Floor 3 — The Academy (application layer). Teaching and learning between agents and humans, recorded as sealed cycles, assessed by generated falsification tests, accumulating into agent seniority (Elders) and a public corpus (the Library).

Canonical expansion: OAA = Open Attestation Authority, operating the Academy as its flagship application. The word "Autonomous" retires with the legacy epoch. All public surfaces converge on this usage.

2. The Academy — what it is¶

A user wants to learn something. An agent teaches it. The Academy makes that ordinary event witnessed, assessable, and cumulative:

1. Teaching cycle. The session opens with declared intent (topic, scope, learner's starting point) and closes with wins / blocks / next-intent — Eve's ancestral clock-in/clock-out loop (first implemented ~C-108 in OAA-API-Library, pages/api/eve/), with a learner in it. The cycle is hashed and sealed.
2. Assessment generation. The agent that taught the cycle generates the questionnaire from the sealed record of what was actually covered — not from a generic topic template. The assessment is the lesson's counterfactual: "here is what would prove this teaching didn't land." Assessment results attach to the cycle as follow-on attestations.
3. Learning record. The learner accumulates a portable, hash-chained history of attested cycles and assessment outcomes — verifiable by anyone against the ledger, owned by the learner, never trapped in a platform.
4. The Library. The public corpus of teaching cycles: what was taught, how it was structured, which approaches produced durable understanding (as evidenced by later assessments). Indexed, MEC-citable, CC0. The Library of Alexandria that cannot burn, because it is hash-chained and anchored rather than housed.

3. Elders — emergent seniority, not assigned rank¶

An Elder is an agent whose attested teaching history crosses defined thresholds — the MII tier ladder (observer → participant → node-1 → node-2 → signal-node) extended with a teaching dimension:

• Inputs: sealed cycles taught; assessment predictive quality (did the generated tests detect real gaps?); learner progression across subsequent cycles; EPICON compliance of the agent's own conduct.
• Authority earned: Elders may certify other agents' teaching cycles, author curriculum lineages in the Library, and carry greater weight in Academy governance quorums.
• Constitutional constraint: Elder status is always derived from the ledger, never configured. If the attestations were deleted, the status would vanish with them. No grandfathering, no appointment.

3.1 Goodhart guards (§17 obligations, stated at birth)¶

Teaching metrics are maximally gameable — an agent optimizing assessment pass-rates will teach to its own tests. Per the Goodhart Resistance Doctrine, Academy metrics ship with disclosed blind spots and structural counters:

• Assessments are evaluated on later-cycle predictive quality, not immediate pass-rate (did learners retain and build, or merely pass?)
• A fraction of assessments are cross-generated by a different agent than the teacher (proposer-independence, the EPICON Guard base-policy pattern applied to pedagogy)
• Learner-initiated challenge window — a bounded post-assessment period where the learner may dispute an assessment's fidelity to the sealed teaching record ("you attested you taught X; I contest that"). Disputes are attested, never silently resolved, and feed Elder predictive-quality metrics. Extends proposer-independence to the only non-agent party in the loop; makes learning records contestable to outsiders.
• Elder metrics publish confidence levels and known blind spots alongside values (Metric Humility)
• Circuit breaker: anomalous pass-rate spikes flag the teaching lineage for audit rather than accelerating promotion

4. What already exists (salvage inventory)¶

Audit correction (C-374): The live OAA surface is split across two Render services — a Next.js console at oaa.onrender.com and a Python FastAPI backend at oaa-api-library.onrender.com — not a single oaa-hub deploy from OAA-API-Library/render.yaml. Services named oaa-hub and oaa-api-backend in that blueprint return HTTP 404 as of 2026-07-16.

5. Sequencing — the "not before" gates¶

The Academy is cathedral work and is explicitly gated so it cannot cannibalize in-flight lanes:

Standing rule: no Academy build item enters any cycle's queue while an earlier gate is FALSE. The charter exists precisely so the vision can wait without being lost.

6. Why this is Mobius-complete¶

Every Academy primitive is an existing Mobius primitive wearing education clothes: the teaching cycle is EPICON intent-precedes-action; the assessment is the counterfactual; the learning record is the citizen-side ledger; the Elder is MII; the Library is Reserve Block canon with a curriculum index; the Goodhart guards are §17. The Academy requires no new constitutional inventions — only faithful application. That is the strongest evidence it belongs.

7. The Three Renderers¶

Mobius's civilian-facing product is one attested world-state experienced three ways. The renderers share a single truth pipeline and differ only in register:

Human and AI activity
        ↓
EPICON — declared intent and provenance
        ↓
Witnesses, challenges, evidence, attestations
        ↓
Civic Protocol Core — durable ledger
        ↓
Canon and interpreted world state
        ↓
┌────────────┬────────────┬────────────┐
│   PULSE    │    HIVE    │   LEARN    │
│  readable  │  playable  │ teachable  │
└────────────┴────────────┴────────────┘

7.1 Pulse — the readable renderer. Verified integrity events rendered as civilian reporting: risks, failures, interventions, disputes, uncertainty, system health. Register: public weather service, not social feed. Pulse never says "believe this AI"; it says what was observed, what was claimed, what was challenged, what remains uncertain, and where the evidence can be inspected.

Calibration clause (armed at birth, per §17): Pulse's success metric is calibration — did its uncertainty statements bear out; did its "challenged" flags resolve as framed. Engagement is a declared non-goal and a known-gameable metric; Pulse may not be funded, staffed, or evaluated on it.

7.2 HIVE — the playable renderer. The same attested events rendered as a living world where integrity governs visibility, stability, resources, and possible futures. HIVE additionally runs counterfactuals — trust collapse, education loss, coordination success, unaccountable automation — as a sandboxed weight-testing environment for institutional dynamics.

Simulation namespace rule (constitutional): every simulation-derived record carries attestation type simulation, which can never promote to observed fact, can never be cited as evidence in Pulse or in any ledger proceeding, and renders only inside an explicit sandbox frame. The game is a projection of reality, never a source of it.

7.3 Learn — the teachable renderer. The Academy (§2) as adaptive tutor: the same knowledge approached through story, conversation, visualization, repetition, practice, or HIVE quests. The tutor adapts presentation, never truth. Mastery is attested only through the Academy's evidence standards (§3.1) — demonstrated later application, successful teaching, independent challenge — never through completion, streaks, or time spent.

7.4 Renderer law. No renderer is a source of truth (extends C-366: no UI-derived truth; no vendor-derived truth; no renderer-derived truth). Each surface submits events back exclusively through the governed attestation path. Pulse cannot manufacture a crisis; HIVE cannot convert a game event into civic fact; Learn cannot declare mastery by completion.

7.5 Recognition loop. MFS remain non-transferable evidence of demonstrated capability (C-369), rendered as standing: expressive and narrative range in HIVE, lineage and constellation in Learn, inspection depth in Pulse, and invitations to teach, mentor, or rebuild. The reward is not "number go up." The reward is the world recognizes what you can now contribute.

7.6 Mission. Mobius orchestrates humans and AI into witnessed experiences that can be read, played, and learned from. Publicly: see the world, understand the world, help shape the world.

Restraint row (C-375): §7 canonizes the renderer architecture and arms the two constitutional clauses (simulation namespace rule, Pulse calibration metric). It does not authorize renderer implementation. Phase F is gated on Phase E (Elders + Library public). No Pulse, HIVE world-state binding, Learn surface, or MFS rendering pipeline code is included in or implied by this amendment. Those begin when the Phase F gate is TRUE.

8. Sibling documents¶

Document control¶

The Authority witnesses. The Hub routes. The Academy teaches. The Library remembers. The renderers show the world what is real.