A session cannot claim review it did not get: a consultation must name an advisor its recorded plan selected, a conclusion's review is computed, and reasoning check and doctor refuse a forged record, provider coupling, a model credential in CI and a refused claim in a document
"Reviewed by" is a fact about records, never a sentence someone wrote. The design's other
declared status○declared status: guaranteedDeclared deterministic and blocking, implemented, and naming the behavioural test that is to prove it. Whether a recorded run supports it is the evidence verdict, shown beside it.
recorded evidence○recorded evidence: not runDeclared guaranteed, and not supported by a recorded run: the test is named, and no passing run of the current inputs is recorded. how evidence is recorded
a negative case: each defect is planted and must be named by reasoning check (exit 10) and by doctor.
"Reviewed by" is a fact about records, never a sentence someone wrote. The design's other
promises — provider-independent code, no live model in CI, no claim that consensus decides
— are checked, not trusted.
The writer admits a consultation only for an advisor the plan's own snapshot selected,
and computes reviewed_by. reasoning check (apps/majordomus-cli/src/reasoning/check.rs)
re-reads every stored record — including ones written past the writer — and also checks the
catalogue's references, the adapters, the provider-independent sources, CI workflows and
gates, and the documents. doctor fails on its findings and reports absent advisors as
information only.
It cannot stop a person from deleting records; it can only refuse records that claim
more than they cite. Claim drift is matched against declared phrases, not understood.
A session cannot claim review it did not get: a consultation must name an advisor its recorded plan selected, a conclusion's review is computed, and reasoning check and doctor refuse a forged record, provider coupling, a model credential in CI and a refused claim in a document