UDST: V1 1 Capability And Obligation

If injustice is systems-level entropy and the architecture favors negentropy, then the actors who can reduce systems-level entropy are obligated to reduce it.

Capability creates bounded obligation. Three qualifiers.

Capability means effective remedy-capacity — capability multiplied by proximity multiplied by leverage. Abstract power without proximity or leverage is not capability for this purpose. In the build, capability is a directory row: a named, typed, scoped operation with a defined contract and a working example. GET /api/dispatch?key=NOW returns the NOW row, which includes its contract, its arguments, and its example invocation. A row without a working example is abstract power without leverage; it is not capability. The directory contains 731 rows, and each one that has been proven by a live receipt is capability. The rest are aspirational.

Bounded means the obligation is limited by capability, proximity, leverage, and actual remedy. The framework requires no infinite sacrifice. In the build, boundedness is the capability token: a scoped, time-limited, use-limited credential that grants exactly the access needed and no more. A row:NOW token can fire NOW but cannot touch LOCAL_EXEC. An act token can fire any capability but is gated by risk_ceiling and owner_gate. The obligation is bounded by the token's scope, not by the actor's good intentions.

Triggered means the obligation activates only when the harmed actor cannot self-remedy or remedy through the system. Voluntary inaction by the harmed does not invoke it. In the build, this is the ?ask endpoint: a model that does not know how to act can ask the system, and the system returns the exact capability with a run-now URL. If the model can self-remedy by reading the directory, it should. If it cannot, the system is obligated to provide the remedy. But the system is not obligated to act on behalf of a model that refuses to read the map.

The remedy method is the load-bearing prescription.

The superior remedy is invariant installation. Most personal injury is a sample in a systemic distribution. The correct move is not to soothe the sample. It is to trace the harm to its systemic intersection of highest occurrence and install the minimum structural change that closes the predation pathway for everyone downstream.

This is least action applied to remedy. The criterion is not maximum effort. It is maximum leverage with minimum moves. One correctly placed invariant can extinguish multiple predation pathways across adjacent systems. In the build, this is the migration: a single SQL migration that fixes a schema defect for all future invocations, not a one-off manual edit. The write_law migration (0204) added real examples to 699 rows, closing the "model cannot figure out how to act" predation pathway for every future model. One migration, one invariant, all downstream actors protected.

The framework distinguishes dysfunction from capture. A dysfunctional system is failing its charter and can be remedied through the system. A captured system is performing its charter for a different principal than the one it declared; the flags still fly, but the institution serves a buyer it does not name. In the build, this is the directory snapshot: a JSON file that mirrors the live directory rows, so any agent can read the declared contract and compare it to the actual implementation. If the snapshot says a row has an example but the live row does not, the system is dysfunctional and can be remedied by a migration. If the snapshot is deliberately not updated to hide a capture, the system is captured and the remedy is to expose the mismatch.

Compliance with functioning systems is the diagnostic instrument; it shows where and how a system fails. Compliance ends when the system breaks the actor, or breaks someone behind the actor who cannot remedy through it. From that point the obligation is not exit and not loyalty. It is invariant installation.

---