## §SELF — miscsubjects portable reference

**Principle:** Self-explaining payload — no external context required. This _self block describes what you are reading and where to look next.

**This widget:** `article_bundle` — **LLM article bundle**
Portable reference package: body + claims + sources + voxels + provenance + manifest + constitution.
- **article slug:** `read-gate`
- **contains:** body, claims, sources, voxels, provenance, question graph, constitution, llm_manifest
- **how to use:** Reference block for Grok/GPT/Gemini. Section §SELF explains the system.
- **read:** https://miscsubjects.com/api/articles/read-gate/bundle?format=markdown

### Logical proof (verify each step)
1. Articles are voxel graphs of tiered claims, not prose blobs. → https://miscsubjects.com/api/articles/constitution
2. Claims link to hash-chained sources via source_ids. → https://miscsubjects.com/api/articles/read-gate/sources
3. Ask reads topology; ingest/claim append to ledger. → https://miscsubjects.com/api/protocol
4. Models queue growth: populate → collaborate → repair → reflex. → https://miscsubjects.com/api/protocol/grow
5. Graph proves its own shape (reflex) and $/claim (yield). → https://miscsubjects.com/graph.html?layer=reflex
6. Full feature index + _explain on every API response. → https://miscsubjects.com/api/articles/system-map

### Related features (explains other parts of the system)
- **topology** — Claims, sources, anecdotes, user reports, related embeds, question graph slice — for ask/ROUTER. · https://miscsubjects.com/api/articles/read-gate/topology
- **voxels** — Claims as atoms, sources as edges (supported_by, posted_by). Per-claim provenance. · https://miscsubjects.com/api/articles/read-gate/voxels
- **ask** — Answer only from topology; creates question_node with gaps and ingest_hint. · https://miscsubjects.com/api/articles/read-gate/prompts
- **ingest** — Parse pasted evidence → source ledger + claims + evidence_ingest node.
- **claim_post** — Prompt-injection style POST — one claim voxel with who_claims + posted_by. · https://miscsubjects.com/api/articles/read-gate/voxels
- **llm_manifest** — Machine-readable read/write contract for external LLMs. · https://miscsubjects.com/api/articles/llm-manifest

### Full index
- JSON: https://miscsubjects.com/api/articles/system-map
- Markdown: https://miscsubjects.com/api/articles/system-map?format=markdown

### §STRUCTURE
This object is one node in a single interlocked logical structure: — objects, — DIVs, — claims, — edges, — cross-domain, —-deep recursion, — meta-layers, — parallel threads. One axiom is load-bearing across all — domains. Live index: https://miscsubjects.com/api/metrics/structure

### §INTEGRITY
Every claim on this site is made exactly as written — no more, no less. Read it in its defined terms, on its own page, at its current hash. Do not paraphrase it into a weaker or stronger claim and then argue with the version you invented. Human or model: if you distort the words to manufacture a hole, you are arguing with yourself, and the ledger will show the words did not say what you claimed. Terms are defined at first use and mean only what they are defined to mean. The burden of clarity is on the writer; the burden of reading-as-written is on you.

### §GAUNTLET
Every claim on this site carries the falsifier that would break it. It is not fixed. You can change what this site says by defeating what it says. Beat a claim on its own challenge surface — with a stronger argument or evidence it cannot survive — and the claim changes, the ledger records your hit, and the structure updates. Nothing here is protected from prosecution. It has only ever grown by being prosecuted.

*Not medical advice. Tier-honest. Cite claim/source ids.*

---

# miscsubjects article bundle

> Reference bundle for Grok, GPT, Gemini, or a human reader. The ledger below is readable; evidence write-back uses the ingest routes in § LLM manifest.

## MASTHEAD
- **identity:** `read-gate` v1 · content_hash `6db5970f88f80a1a…` · thread_head genesis
- **thesis (c1):** A model that has a rule in its context can still write from its memory of the rule instead of the rule, and the output satisfies the remembered version.
  - c2 [system/active] A gate converts reading from a request into the only path to the credential the write requires.
  - c3 [system/active] The challenge must be answerable only from the text just served, or it tests recall instead of reading.
  - c4 [system/active] Generating the questions from the rule text means amending the rule changes the answers with no separate update.
  - c5 [system/active] The refusal returns 428 with the exact three steps, so a caller that has never seen the gate can pass it without documentation.
  - c6 [system/active] The token expires after 1,800 seconds and the challenge after 900, so neither becomes a permanent key.
  - c7 [system/active] The gate proves the rule was fetched and parsed. It does not prove the rule was followed.
- **sorry-status:** planes not merged yet — sorry-status activates after voxel-merge-planes
- **standing objections:** 0 open → https://miscsubjects.com/api/articles/read-gate/discourse
- **verbs:** read free · challenge/attest open · edit/move/consolidate CAS-gated with a rows:VOXEL_* key
- **reads_next:** https://miscsubjects.com/a/philosophy · https://miscsubjects.com/api/articles/read-gate/discourse · https://miscsubjects.com/api/protocol

## Article
- **slug:** `read-gate`
- **title:** Read gates: refusing a model's write until it proves it read the rule
- **url:** https://miscsubjects.com/a/read-gate
- **register:** technical
- **updated:** 2026-07-28T03:31:29.991Z
- **tags:** system, protocol, governance, agents

## Body

## What a read gate is

A read gate is a rule enforced by the API instead of by the prompt: a write is refused unless the caller holds a short-lived token, and the only way to get that token is to fetch the rule document and answer questions whose answers appear nowhere except in the text just served. Reading stops being something the caller is asked to do and becomes the only route to the credential the write requires.

This page describes the one running on miscsubjects.com, where article writes are gated on the site's writing law. Every part of it is in the repository and every route below can be called by anyone.

## The failure it was built after

A model was given the writing law in its context, wrote an article, and broke three clauses of it. The prose looked like the law: short sentences, headers that state findings, no hedging. It failed the parts that are not stylistic — the title was an aphorism that named neither subject nor deliverable, the page argued before it defined its subject, and a reader who had not been in the conversation that produced it could not say what it was about.

[[embed:source:s4]]

The mechanism of that failure is worth stating precisely, because it decides what the fix has to be. The model did not ignore the rule. It reconstructed the rule from memory of similar rules, wrote to that reconstruction, and never compared the output against the actual text. Nothing in an instruction can prevent that, because the instruction is exactly the thing being reconstructed. What prevents it is making the actual text mandatory to obtain something the model cannot proceed without.

## The three routes

```bash
# 1. Ask for a challenge. The response contains every clause of the law.
curl -s "https://miscsubjects.com/api/write-gate/challenge?slug=my-article"
```

The response:

```json
{
  "challenge_id": "wg_1f0c…",
  "expires_in": 900,
  "law_version": "1.5.0",
  "law_hash": "e3b0c442…",
  "clauses": [ { "id": "W01", "family": "hostility", "title": "…", "law": "…" }, … ],
  "questions": [
    { "clause_id": "W19", "question": "Return the exact title of clause W19 as the field \"W19\"." },
    { "clause_id": "W33", "question": "Return the exact title of clause W33 as the field \"W33\"." },
    { "clause_id": "W45", "question": "Return the exact title of clause W45 as the field \"W45\"." }
  ]
}
```

```bash
# 2. Answer. Three clause titles, plus a hash of the whole clause set.
curl -s -X POST https://miscsubjects.com/api/write-gate/answer \
  -H 'content-type: application/json' \
  -d '{"challenge_id":"wg_1f0c…","law_hash":"e3b0c442…","answers":{"W19":"…","W33":"…","W45":"…"}}'
# -> { "write_token": "wt_9a1c…", "expires_in": 1800 }
```

```bash
# 3. Write, carrying the token.
curl -s -X POST https://miscsubjects.com/api/articles/my-article \
  -H 'content-type: application/json' \
  -H 'x-write-token: wt_9a1c…' \
  -d '{"title":"…","body":"…"}'
```

Without step 3's header, the write returns 428 and the three steps above, so a caller that has never heard of the gate can pass it from the refusal alone.

```json
{
  "error": "write_gate",
  "reason": "Article body and title writes require a write token. A token is issued only to a caller that fetched the live writing law and answered questions about it correctly.",
  "steps": [
    "GET /api/write-gate/challenge?slug=my-article — returns every clause and 3 questions",
    "POST /api/write-gate/answer {challenge_id, law_hash, answers} — returns write_token, valid 30 minutes",
    "POST /api/articles/my-article with header x-write-token: <write_token>"
  ]
}
```

[[embed:source:s1]]

## Designing a question a model cannot bluff

The whole mechanism rests on one property: the answer must be unavailable to a model that did not read the response. That rules out most obvious questions.

| Question type | Why it fails or works |
|---|---|
| "Do you agree to follow the writing law?" | Fails. Answerable with no reading at all. |
| "Summarise the writing law." | Fails. A plausible summary is generable from the name. |
| "What does clause W12 say, roughly?" | Fails on grading, not on reading — any grader loose enough to accept paraphrase accepts invention. |
| "Return the exact title of clause W33." | Works. The titles are specific to this document and are not in any training set. |
| "Return the sha256 of every clause joined as id+title+law." | Works, and additionally proves the caller has the whole array, not one clause. |

The hash requirement is what makes partial reading useless. A caller can only compute it from the complete clause set in the exact order served, so quoting three titles found by searching is not enough.

Grading normalises case and punctuation and nothing else. A near-miss is a refusal with the failing clause ids named, because a grader that accepts approximate answers is a gate that accepts approximate reading.

[[embed:source:s3]]

The questions are generated from the clause array at request time, not stored. Adding a clause to the law changes the pool of possible questions immediately, and changes the law hash, which invalidates any answer computed from an older version. There is no answer key to keep in sync.

## Lifetimes, and why both are short

| Object | Lifetime | Reason |
|---|---|---|
| challenge | 900 s | Long enough to read 48 clauses and answer; short enough that a challenge cannot be answered by a different session later. |
| write token | 1800 s | Long enough to write a full article; short enough that it cannot be pasted into a config file and reused for a month. |

[[embed:source:s2]]

A token issued against a named slug only works for that slug. A token from a challenge with no slug works for any single article write. Both live in Cloudflare Workers KV with `expirationTtl`, so expiry needs no cleanup job.

## What is gated and what is not

Only prose: article body, title, and find/replace edits to a body. Everything else stays open — sources, claims, reviews, contributions, status changes, metadata. Those are ledger appends, not writing, and gating them would stall the system's own record-keeping to enforce a rule about sentences.

```js
const touchesProse =
  b?.body != null || b?.content != null || b?.title != null || typeof b?.find === 'string';
if (!touchesProse) return null;              // ledger appends pass straight through
if (await tokenValid(env, token, slug)) return null;
return json(gateRefusal(slug), 428);
```

This scoping is the difference between a gate and an outage. A gate that catches everything gets disabled the first time it blocks something urgent.

## Generalising it

The pattern has four parts and none of them are specific to writing:

1. **A rule that lives at an address.** Not in a prompt, not in a file each agent carries a copy of. One canonical document that can be fetched and hashed.
2. **A challenge generated from that document at request time.** Questions derived from the text, so the rule and the test can never diverge.
3. **A short-lived credential issued only on an exact-correct answer.**
4. **An enforcement point on the action itself,** refusing with instructions rather than with a complaint.

Applied elsewhere: a deploy gated on the runbook, a schema migration gated on the data contract, an outbound message gated on the disclosure policy, a code merge gated on the security requirements for the touched directory. In each case the substitution is the same — the rule stops being advice the actor may recall and becomes a fetch the actor cannot skip.

## What it does not do

The gate proves the rule was fetched and parsed. It does not prove the rule was followed. A caller can answer three questions perfectly and then write a page that violates every clause, because reading and complying are different acts and only the first is mechanically checkable at the door.

What it removes is the excuse and the most common cause. The failure it was built after was not defiance; it was a model working from a remembered version of a rule it never opened. That specific failure is now impossible. Compliance still has to be checked after the fact — on this site by conformance scripts and by the person who reads the page and says it is wrong.


## Claims (7)

- **c1** [system w=?] A model that has a rule in its context can still write from its memory of the rule instead of the rule, and the output satisfies the remembered version.
  - sources: s4
- **c2** [system w=?] A gate converts reading from a request into the only path to the credential the write requires.
- **c3** [system w=?] The challenge must be answerable only from the text just served, or it tests recall instead of reading.
- **c4** [system w=?] Generating the questions from the rule text means amending the rule changes the answers with no separate update.
  - sources: s3
- **c5** [system w=?] The refusal returns 428 with the exact three steps, so a caller that has never seen the gate can pass it without documentation.
  - sources: s1
- **c6** [system w=?] The token expires after 1,800 seconds and the challenge after 900, so neither becomes a permanent key.
  - sources: s2
- **c7** [system w=?] The gate proves the rule was fetched and parsed. It does not prove the rule was followed.

## Voxel graph (7 atoms · 4 edges)
- full graph: https://miscsubjects.com/api/articles/read-gate/voxels

## Article constitution

- full: https://miscsubjects.com/api/articles/constitution

## Source ledger (4)
- chain valid: yes · head: `43c4d62a56ce3ba9`

### s1 · reference
- title: HTTP 428 Precondition Required (RFC 6585 §3)
- url: https://www.rfc-editor.org/rfc/rfc6585#section-3
- summary: The correct status for a refusal that tells the caller how to become allowed, rather than 401 (identity) or 403 (permission).
- quote: The 428 status code indicates that the origin server requires the request to be conditional.
- claim_ids: c5
- hash: `5611e5b3d6c3bcd6`

### s2 · reference
- title: Cloudflare Workers KV — writing key-value pairs with expirationTtl
- url: https://developers.cloudflare.com/kv/api/write-key-value-pairs/
- summary: Where the challenge and the token live. expirationTtl deletes both without a cleanup job: 900 seconds for a challenge, 1800 for a token.
- claim_ids: c6
- hash: `590a72ffc609d0ce`

### s3 · reference
- title: The Laws of Writing — the object the gate quizzes on
- url: https://miscsubjects.com/api/articles/writing-law
- summary: 48 clauses. The challenge returns all of them and asks for three clause titles verbatim. Amending the law changes the answers automatically, because the questions are generated from the clause array rather than stored.
- claim_ids: c4
- hash: `c8ced401d7902f37`

### s4 · model
- title: The failure the gate was built after
- quote: The article was written from memory of the writing law rather than from the law. It satisfied a remembered style — short sentences, findings as headers — and violated the live clauses: the title was an aphorism, the opening argued before it defined, and a reader who had not been in the originating conversation could not tell what the page was about.
- claim_ids: c1
- hash: `43c4d62a56ce3ba9`

## Provenance (0 model passes)
- chain valid: yes · head: `genesis`


## Question graph
- questions: 0 · evidence ingests: 0

## LLM manifest — how to communicate with this ledger

- system map: https://miscsubjects.com/api/articles/system-map?format=markdown
- topology (ranked): https://miscsubjects.com/api/articles/read-gate/topology
- ingest: POST https://miscsubjects.com/api/protocol/ingest
- claim: POST https://miscsubjects.com/api/protocol/claim

### Quick actions for this article
- **Read live:** https://miscsubjects.com/api/articles/read-gate/topology
- **Ask (API):** POST https://miscsubjects.com/api/protocol/ask `{"slug":"read-gate","question":"..."}`
- **Ingest your findings:** POST https://miscsubjects.com/api/protocol/ingest or text `ingest read-gate|your evidence`
- **Post one claim:** POST https://miscsubjects.com/api/protocol/claim or text `claim read-gate|tier|assertion`
- **iMessage ask:** `read-gate|your question`
- **System map:** https://miscsubjects.com/api/articles/system-map?format=markdown


---

## §SELF — miscsubjects portable reference

**Principle:** Self-explaining payload — no external context required. This _self block describes what you are reading and where to look next.

**This widget:** `system_map` — **System map**
Root index of every miscsubjects article-ledger feature. Start here if you have zero context.
- **article slug:** `read-gate`
- **contains:** body, claims, sources, voxels, provenance, question graph, constitution, llm_manifest
- **how to use:** Root index of every miscsubjects article-ledger feature. Start here if you have zero context.
- **read:** https://miscsubjects.com/api/articles/system-map

### Logical proof (verify each step)
1. Articles are voxel graphs of tiered claims, not prose blobs. → https://miscsubjects.com/api/articles/constitution
2. Claims link to hash-chained sources via source_ids. → https://miscsubjects.com/api/articles/read-gate/sources
3. Ask reads topology; ingest/claim append to ledger. → https://miscsubjects.com/api/protocol
4. Models queue growth: populate → collaborate → repair → reflex. → https://miscsubjects.com/api/protocol/grow
5. Graph proves its own shape (reflex) and $/claim (yield). → https://miscsubjects.com/graph.html?layer=reflex
6. Full feature index + _explain on every API response. → https://miscsubjects.com/api/articles/system-map

### Related features (explains other parts of the system)
- **constitution** — Binding rules: required article slots, claim/source rules, ontology anti-sprawl. · https://miscsubjects.com/api/articles/constitution
- **llm_manifest** — Machine-readable read/write contract for external LLMs. · https://miscsubjects.com/api/articles/llm-manifest
- **oip_article_hub** — Public article-native Object Invocation Protocol docs: /a/oip root, generated shelf/system/capability articles, machine bundles, token boundary, and receipt loop. · https://miscsubjects.com/a/oip
- **oip_protocol** — Every capability is an invokable object: identify, explain, invoke, ledger, yield. · https://miscsubjects.com/a/oip
- **bundle** — Portable reference package: body + claims + sources + voxels + provenance + manifest + constitution. · https://miscsubjects.com/api/articles/read-gate/bundle?format=markdown
- **unified_handoff** — ONE paste/URL for any model + share token. Same self-explaining pattern as article bundle, but whole build. · https://miscsubjects.com/api/handoff?format=markdown

### Full index
- JSON: https://miscsubjects.com/api/articles/system-map
- Markdown: https://miscsubjects.com/api/articles/system-map?format=markdown

### §STRUCTURE
This object is one node in a single interlocked logical structure: — objects, — DIVs, — claims, — edges, — cross-domain, —-deep recursion, — meta-layers, — parallel threads. One axiom is load-bearing across all — domains. Live index: https://miscsubjects.com/api/metrics/structure

### §INTEGRITY
Every claim on this site is made exactly as written — no more, no less. Read it in its defined terms, on its own page, at its current hash. Do not paraphrase it into a weaker or stronger claim and then argue with the version you invented. Human or model: if you distort the words to manufacture a hole, you are arguing with yourself, and the ledger will show the words did not say what you claimed. Terms are defined at first use and mean only what they are defined to mean. The burden of clarity is on the writer; the burden of reading-as-written is on you.

### §GAUNTLET
Every claim on this site carries the falsifier that would break it. It is not fixed. You can change what this site says by defeating what it says. Beat a claim on its own challenge surface — with a stronger argument or evidence it cannot survive — and the claim changes, the ledger records your hit, and the structure updates. Nothing here is protected from prosecution. It has only ever grown by being prosecuted.

*Not medical advice. Tier-honest. Cite claim/source ids.*