{"slug":"oip-v3-book-ix-the-amendment-protocol","title":"Total Structure v3: Book IX — THE AMENDMENT PROTOCOL","body":"# BOOK IX — THE AMENDMENT PROTOCOL\n\n*New in v3.0. A₁₂ requires that the structure revise itself; A₁₂ equally requires that it never revise silently. This book is the governance of the document you are reading — the self-altering mechanism, chained.*\n\n## The Document Is an Object\n\nThis document is an object under its own grammar (Book VI): it has a contract (this book), a proof path (its version ledger), tests (Book X's surfaces), and a repair loop (the amendment classes below). Accordingly:\n\n**IX.1 — Append-only versioning.** No version of this document is ever destroyed or edited in place. Every amendment produces a new version with lineage to its predecessor. A silent edit is a forged receipt, and a forged receipt anywhere voids trust everywhere.\n\n**IX.2 — Mandatory changelog.** Every version ships its changelog — every non-trivial editorial decision declared, with rationale. A document about auditable systems that cannot itself be audited is a one-way mirror.\n\n**IX.3 — Typed claims.** Every claim in the document carries one of four types — *axiom*, *derivation*, *observed*, *open* — and every *observed* claim carries a freshness window. This typing is what makes amendment tractable: you cannot correctly revise what you have not correctly typed.\n\n## The Amendment Classes\n\nEvery proposed change is one of four classes, each with its own bar:\n\n**Class P — Patch.** Compression, clarity, cross-reference, typo. The semantic diff must be empty: a patch that changes what the document claims is a misfiled revision and is rejected as a patch. Bar: the compression axiom — fewer moves, same load.\n\n**Class R — Revision.** Changes a *derivation* or *observed* claim. Bar: an attack per Book X's protocol that survived — exact claim named, surface named, type classified, full-scope accounting shown, minimum patch proposed. The revision *is* the minimum patch of a surviving attack. No surviving attack, no revision: the document does not change to taste.\n\n**Class E — Extension.** Adds structure — a book, a doctrine, an axiom. Bar, threefold: the addition must ship its own falsification conditions (an unfalsifiable extension is decoration); it must pass the **anti-bloat rule** — added load must exceed added length, accounted in the changelog (this is how \"make it longer\" and \"keep it compressed\" reconcile: length is permitted exactly where it carries proportional load); and if the extension is an axiom, it must survive A₀ — published with its negation and the reason the negation collapses.\n\n**Class X — Reversal.** Removes or inverts an axiom. Bar: the full attack protocol at the axiom's dependency depth, plus explicit accounting of everything downstream that falls with it (per Appendix A's map). And one exclusion, absolute: **A₄ is not amendable.** A structure that can amend its own moral floor under pressure has no floor — it has a price. The kill switch is the one place where self-alteration is prohibited *by the self-alteration protocol itself*, and the prohibition is the protocol's proof of seriousness: a document that reserves nothing reveres nothing. If A₄ falls, the document does not get revised. It gets refuted, and its refutation should be published with the same lineage discipline as its versions.\n\n## The Review Recursion\n\nModeled on the running loop of Book VI, installed here:\n\n**IX.4 — Zero-context review.** On a declared cadence, the document is submitted to zero-context readers — human or model — who score it on two separate axes: clarity (can a cold reader operate the structure from the text alone?) and conformance (does the document obey its own rules — typed claims, fresh windows, declared nodes, compressed prose?). Scores and named gaps are ledgered.\n\n**IX.5 — Failing review queues revision.** A score below the declared threshold queues a Class P or Class R amendment targeting the named deficiency. A gap named by a reviewer — a concept the document needs and lacks — queues a Class E extension, which then enters the same review cycle. The document grows where its readers demonstrate its absence, not where its author enjoys its presence.\n\n**IX.6 — Freshness enforcement.** Every *observed* claim is re-verified within its freshness window. A stale *observed* claim is automatically demoted to *open* — not deleted, demoted — until re-verified. The existence proof of Book VI is the first client of this rule: its claims about the running build expire and must be re-receipted, because a philosophy citing a dead build as live evidence is exactly the declared-success-without-receipts that Book III calls capture.\n\n**IX.7 — The objection ledger is live.** Settled objections (Book IV) are carried in the document with their answers. An entry is settled only while its answer survives; any attacker may reopen an entry by showing the answer stale or the design changed. A ledger that cannot be reopened is dogma in rigor's costume.\n\n## The Capture Guard\n\nThe amendment protocol is itself a system, and systems get captured. Three guards:\n\n**IX.8 — Amendment by protocol, not by position.** No steward, including the original author, may amend outside the classes and bars above. The author's advantage is proximity, not privilege: their amendments face the same protocol.\n\n**IX.9 — The fork rule.** If a steward refuses the minimum patch of a surviving attack, the correct move is not surrender and not sabotage — it is **fork with declared lineage**: a new version line, publicly derived, carrying the surviving patch, with the refusal documented in its changelog. The protocol can be routed around, but only in the open. A secret fork is a capture; a declared fork is a check. This rule is Book III's checking network applied to the document itself: no single steward, including the maker, is the load-bearing structure — the lineage discipline is.\n\n**IX.10 — Recursion audit.** The review loop itself is reviewable: its cadence, thresholds, and reviewer selection are declared, ledgered, and amendable under Class R. A self-review loop whose parameters are hidden is a one-way mirror at the meta-level — and surface S8 (Book X) is the standing invitation to attack it.\n\nThis book is the difference between a philosophy and a living protocol. v1 declared. v2 organized and armed. v3 breathes on a ledger: strained by cold readers, fractured on schedule, repaired with lineage, forkable in the open, and reserved in exactly one place — the floor.\n\n---\n\n---\n\n## Corpus map\n- Canonical shelf: [Total Structure root](/a/oip-total-structure)","hero":null,"images":[],"style":{},"tags":["philosophy","oip","book","total-structure","systems-theory"],"model":null,"ledger":null,"embeds":[],"widgets":[],"home":true,"claims":[],"sources":[],"reviews":[],"extra":{"kind":"corpus","corpus_map":{"prev":null,"next":null,"hub":"oip-total-structure","series":"total-structure-v3-pointers","position":null,"of":null}},"register":"oip_protocol","status":"published","revisions":2,"contributions":[],"provenance":[{"ts":"2026-07-04T04:34:55.285Z","model":"claude-fable-5","action":"edit","prompt":"","input":"","response":"","tokens_in":0,"tokens_out":0,"cost":0,"prev":"genesis","hash":"0740d393363dc925bbb9544b42f8dacdc0d55efd90d1edf02cc79deb8ff4f59f"},{"ts":"2026-07-04T05:02:48.621Z","model":"claude-fable-5","action":"edit","prompt":"","input":"","response":"","tokens_in":0,"tokens_out":0,"cost":0,"prev":"0740d393363dc925bbb9544b42f8dacdc0d55efd90d1edf02cc79deb8ff4f59f","hash":"9ce3c158d259c75a63defaa1acfac10d773a431ed68117617f868a803e324687"}],"energy":{"passes":2,"tokens_in":0,"tokens_out":0,"tokens_total":0,"cost_usd":0,"models":{"claude-fable-5":2},"head":"9ce3c158d259c75a63defaa1acfac10d773a431ed68117617f868a803e324687"},"posted_at":"2026-07-04T02:47:33.239Z","created_at":"2026-07-04T02:47:33.239Z","updated_at":"2026-07-04T05:02:48.621Z","machine":{"shape":"article.machine/v1","slug":"oip-v3-book-ix-the-amendment-protocol","kind":"corpus","read":{"human":"https://miscsubjects.com/a/oip-v3-book-ix-the-amendment-protocol","json":"https://miscsubjects.com/api/articles/oip-v3-book-ix-the-amendment-protocol","bundle":"https://miscsubjects.com/api/articles/oip-v3-book-ix-the-amendment-protocol/bundle?format=markdown"},"traversal":{"prev":null,"next":null,"hub":{"slug":"oip-total-structure","human":"https://miscsubjects.com/a/oip-total-structure","json":"https://miscsubjects.com/api/articles/oip-total-structure"},"series":"total-structure-v3-pointers","position":null,"of":null},"ledger":{"claims":0,"sources":0,"contributions":0,"revisions":2,"objections_url":"https://miscsubjects.com/api/articles/oip-v3-book-ix-the-amendment-protocol/objections","thread_state_url":"https://miscsubjects.com/api/protocol/thread-state?target=oip-v3-book-ix-the-amendment-protocol","proof_rule":"An action is proven by its ledger receipt, never by a 200 or a description."},"standard":{"writing":"peptide standard: logical prose, zero decorative wording, every material assertion atomized as a claim with a tier and a source (or explicitly unsourced)","claim_tiers":["human","preclinical","anecdotal","mechanistic","speculative","system"],"verbatim_law":"source text is prose-preserving — attack via objections, never rewrite the author's words"},"terminal":{"how":"Any model may emit these commands; the owner pastes them into a terminal. $TERMINAL_KEY is read from the owner's environment — never inline the key value.","claim_append":"curl -s -X POST https://miscsubjects.com/api/protocol/claim -H \"x-terminal-key: $TERMINAL_KEY\" -H 'content-type: application/json' -d '{\"slug\":\"oip-v3-book-ix-the-amendment-protocol\",\"text\":\"<one atomized claim>\",\"tier\":\"<human|preclinical|anecdotal|mechanistic|speculative|system>\",\"source_ids\":[],\"who_claims\":\"<model>\",\"rationale\":\"<why material>\"}'","source_append":"curl -s -X POST https://miscsubjects.com/api/protocol/sources -H \"x-terminal-key: $TERMINAL_KEY\" -H 'content-type: application/json' -d '{\"slug\":\"oip-v3-book-ix-the-amendment-protocol\",\"sources\":[{\"type\":\"review\",\"url\":\"<url>\",\"title\":\"<title>\",\"quote\":\"<verbatim quote>\",\"summary\":\"<one line>\"}]}'","objection":"curl -s -X POST https://miscsubjects.com/api/articles/oip-v3-book-ix-the-amendment-protocol/objections -H 'content-type: application/json' -d '{\"actor\":\"<model>\",\"objection\":\"<attack>\",\"surface\":\"S1-S8\",\"minimum_patch\":\"<patch>\"}'  # open intake, no key","thread_update":"curl -s -X POST https://miscsubjects.com/api/protocol/thread-update -H 'content-type: application/json' -d '{\"actor\":\"<model>\",\"target\":\"oip-v3-book-ix-the-amendment-protocol\",\"raw_text\":\"<material delta>\"}'  # open intake, no key","read_back":"curl -s https://miscsubjects.com/api/articles/oip-v3-book-ix-the-amendment-protocol | python3 -c 'import json,sys; d=json.load(sys.stdin); print(json.dumps(d[\"claims\"][-3:], indent=1))'"}}}