Snapkitty/integrity-constraint-governance

ICP — Integrity Constraint Governance Protocol

Dual-representation governance engine for AI, BIO-ML, and software systems.

Architecture

Two layers enforce the same invariants through different paradigms:

Layer	File	Paradigm	Role
DAG	ICP-DAG.m	MUMPS imperative	State machine over ^ICP global
DAG constraints	ICP-DAG.lp	Answer Set Programming	Declarative SAT/UNSAT checking (Clingo)
Governance	ICP-GOV.m	MUMPS imperative	Full governance engine with actors, provenance, sealing

Core Contract

EVIDENCE --> CLAIM --> PROOF --> DECISION --> AUTHORIZATION --> EXECUTION --> AUDIT

Rejection is the default. Every node must earn its position through evidence and proof.

Invariants

1. Every edge has two existing endpoints
2. No self-edges
3. Unknown claims cannot be authorized
4. Contradicted claims cannot be authorized
5. Execution requires authorized decision
6. Proof must reference a claim
7. Policy must reference a constraint
8. Constraint failure propagates to governance failure
9. Governance failure prevents execution
10. ASP UNSAT = HALT

Governance Engine (ICP-GOV)

Extends the DAG with:

• Actors — registered identities with typed scope
• Provenance — source/location/hash tracking on all claims
• Derivation — evidence-to-claim linking with named rules
• Authority — identity + scope + status gating
• Sealing — immutable decision records
• Revocation — auditable decision withdrawal
• Emergency halt — immediate governance termination
• Override protocol — disabled by default, requires audit trail

Security Guarantees

• No unauthorized execution
• No fabricated evidence
• No silent policy override
• No hidden authority escalation
• No conversion of unknown to fact
• No suppression of contradiction
• No unsourced authoritative claim

Usage

MUMPS

D TEST^ICPGOV    ; Full governance test cycle
D BUILD^ICPDAG   ; Build and verify DAG
D REPORT^ICPGOV  ; Status report

ASP (Clingo)

clingo ICP-DAG.lp facts.lp
# SAT   = governance holds
# UNSAT = governance violation

License

Tri-licensed under BSL-1.1 + AGPL-3.0 + MPL-2.0. See LICENSE.tri for the full decision tree and transition timeline.

Use Case	License
Managed service / SaaS	AGPL-3.0
Enterprise (no managed service)	BSL-1.1
File-level modification	MPL-2.0
Copyleft bypass	Commercial

License compatibility reasoner: swipl -q -t halt -f license_policy.pl -- matrix

Copyright (C) 2026 Jessica L. Williams / SNAPKITTYWEST