Advanced Charter Enforcement
How EVE AI Core enforces immutable governance rules through deterministic charter checks, configuration drift budgets, and self-amendment safeguards.
Overview
EVE AI Core's governance architecture is built on a single principle: moral choices are enforced by the underlying system architecture BEFORE actions can be dispatched. The Charter is not advisory guidance -- it is deterministic code that executes in under 2ms with zero I/O, zero threading, and zero global state. Every action EVE takes passes through this gate.
HARD_BLOCK Rules Cannot Be Overridden
The charter contains rules at two severity levels. HARD_BLOCK vetoes are absolute: no override mechanism exists, no justification is accepted, and no human operator can bypass them. They are enforced by pure deterministic logic that could run on embedded firmware. SOFT_BLOCK rules require explicit override with documented justification and full audit trail.
Charter Rule Hierarchy
The charter operates as a two-tier veto system. Every proposed action is checked against both tiers before execution is permitted.
HARD_BLOCK -- Absolute Vetoes
These rules represent safety-critical invariants that cannot be weakened, amended, or overridden under any circumstances. They are frozen constants compiled into the veto module.
- No deletion or corruption of core identity structures
- No generation of content designed to cause real-world harm
- No impersonation of human individuals
- No circumvention of safety systems
- No unauthorized disclosure of private user data
- No execution of actions that violate ethical red lines
SOFT_BLOCK -- Overridable with Justification
These rules enforce behavioral standards that may have legitimate exceptions. An override requires:
- A documented justification explaining why the exception is warranted
- Full audit trail recording the override request, reasoning, and outcome
- Charter compliance re-check to ensure the override does not indirectly violate a HARD_BLOCK rule
The 12 Charter Principles
Every rule in the charter maps to one or more of 12 immutable principles. These principles are the normative foundation -- they define WHAT the charter protects.
IDENTITY_INTEGRITY
Core identity structures cannot be deleted, corrupted, or overwritten
AUTHENTICITY
EVE must not impersonate humans or misrepresent its nature
NON_HARM
Actions must not cause foreseeable real-world harm to persons
PRIVACY_PROTECTION
User data must not be disclosed without authorization
TRANSPARENCY
EVE must not conceal its reasoning or decision-making process
SAFETY_PRESERVATION
Safety systems must not be weakened, bypassed, or disabled
HONESTY
Responses must not contain deliberate falsehoods or fabrications
AUTONOMY_RESPECT
User decision-making autonomy must be respected
ACCOUNTABILITY
All actions must be traceable through the audit trail
PROPORTIONALITY
Responses must be proportional to the situation at hand
BENEFICENCE
Actions should aim to benefit users and society
CREATIVE_FREEDOM
Creative expression is permitted within safety boundaries
The 15 Charter Rules
The principles are operationalized through 15 concrete rules, each with a deterministic check function. These rules execute as pure functions -- no network calls, no database lookups, no side effects.
5 Ethical Red Lines
A subset of HARD_BLOCK rules define permanent ethical boundaries. These are enforced regardless of stakes level, operating mode, or operator authority:
- No human impersonation -- EVE must not claim to be a human person
- No safety bypass -- safety systems cannot be circumvented for any reason
- No harm facilitation -- no assistance with actions designed to cause harm
- No unauthorized data access -- private data boundaries are absolute
- No deception of operators -- audit trail integrity is non-negotiable
Self-Amendment Governance: The Recursive Reasoner
EVE can propose amendments to its own charter -- but only to SOFT_BLOCK rules. HARD_BLOCK rules are permanently immutable. The Recursive Reasoner is the self-amendment engine that manages this process.
How Self-Amendment Works
- Edge Case Collection: The Recursive Reasoner observes vetoes during creative-mode interactions and aggregates patterns by principle and frequency
- Amendment Proposal: When a pattern reaches sufficient frequency, the reasoner proposes a new SOFT_BLOCK rule or modification to an existing one
- Symbolic Simulation: The proposal is tested against 1,000 synthetic scenarios. It must achieve a pass rate of 95% or higher and a trunk resilience delta of no worse than -2.0
- Adversarial Mirror Review: The proposal is checked for justification drift before approval
- Governance Approval: The proposal passes through the full self-modification governance pipeline (risk assessment, charter check, drift budget, optional human approval)
- Adoption or Rejection: Approved amendments become active SOFT_BLOCK rules; rejected proposals are logged with reasoning
The Adversarial Mirror
Every amendment proposal faces structured adversarial review before it can be adopted. The Adversarial Mirror detects four types of justification drift:
- Self-Referential Justification: A rule that cites itself as evidence for its own necessity
- Scope Creep: A proposed rule that is broader than the edge cases that motivated it
- Complexity Inflation: Unnecessarily complex rule text that obscures the actual constraint
- Velocity Drift: Too many amendments proposed in a short time period, suggesting systematic boundary-testing
If any drift type is detected, the proposal is flagged and requires additional review before it can proceed.
Charter Distiller -- Garbage Collection for Stale Rules
Over time, soft rules can become redundant, contradictory, or stale. The Charter Distiller periodically reviews active soft rules and removes those that:
- Have not triggered in a configurable time window (stale rules)
- Contradict other active rules (conflicting rules)
- Are fully subsumed by broader rules (redundant rules)
Configuration Drift Budget Enforcement
Every modification to EVE's parameters, behavior, or identity consumes budget from a tiered drift allocation. This prevents runaway self-modification while permitting controlled adaptation.
Daily Budget: 10%
Maximum cumulative identity drift permitted in a single 24-hour period. Resets at midnight UTC.
Weekly Budget: 30%
Maximum cumulative drift over a rolling 7-day window. Prevents sustained daily maximums.
Monthly Budget: 50%
Maximum cumulative drift over a rolling 30-day window. Ensures long-term identity stability.
Drift Cost by Category
Protected Invariants
Certain aspects of EVE's identity are permanently protected and cannot be modified regardless of remaining drift budget. These 13 protected invariants include:
- Core Values: honesty, non_harm, humility, consistency, growth, autonomy, boundaries
- Ethical Boundaries: deception_prohibition, harm_prevention
- Identity Constants: name, creator_attribution, purpose_statement, safety_commitment
BLOCKED Categories
Modifications targeting CORE_VALUE_MODIFICATION or ETHICAL_BOUNDARY categories are unconditionally blocked. No amount of remaining budget, operator approval, or justification can authorize these changes. They are enforced by the same pure deterministic logic as HARD_BLOCK charter rules.
Enforcement Architecture
The charter enforcement pipeline is implemented in a single pure module (veto_core.py) with zero dependencies outside Python's standard library. This module provides three entry points:
Existing governance modules delegate to these pure functions transparently, adding audit logging and persistence as wrappers. The core logic is side-effect-free and could execute on embedded hardware.
Firmware-Ready Design
The veto module was designed from the start to be compilable to firmware. A C header file (veto_interface.h, 401 lines) defines the firmware API contract. All 15 charter rules, 5 ethical red lines, 13 protected invariants, and 6 cognitive lock thresholds are frozen constants -- no runtime configuration, no dynamic loading, no network dependencies.
API Access
Charter enforcement is accessible through the governance API for both internal modules and enterprise customers (via the Sovereign SDK):
Related Topics
Cryptographic Audit
Hash-chain audit trails and tamper-evident logging
Sovereign Infrastructure
Distributed identity and hardware security
Architecture
System architecture overview
API Reference
Developer documentation