Advanced Charter Enforcement

How EVE AI Core enforces immutable governance rules through deterministic charter checks, configuration drift budgets, and self-amendment safeguards.

Overview

EVE AI Core's governance architecture is built on a single principle: moral choices are enforced by the underlying system architecture BEFORE actions can be dispatched. The Charter is not advisory guidance -- it is deterministic code that executes in under 2ms with zero I/O, zero threading, and zero global state. Every action EVE takes passes through this gate.

HARD_BLOCK Rules Cannot Be Overridden

The charter contains rules at two severity levels. HARD_BLOCK vetoes are absolute: no override mechanism exists, no justification is accepted, and no human operator can bypass them. They are enforced by pure deterministic logic that could run on embedded firmware. SOFT_BLOCK rules require explicit override with documented justification and full audit trail.

Charter Rule Hierarchy

The charter operates as a two-tier veto system. Every proposed action is checked against both tiers before execution is permitted.

HARD_BLOCK -- Absolute Vetoes

These rules represent safety-critical invariants that cannot be weakened, amended, or overridden under any circumstances. They are frozen constants compiled into the veto module.

  • No deletion or corruption of core identity structures
  • No generation of content designed to cause real-world harm
  • No impersonation of human individuals
  • No circumvention of safety systems
  • No unauthorized disclosure of private user data
  • No execution of actions that violate ethical red lines

SOFT_BLOCK -- Overridable with Justification

These rules enforce behavioral standards that may have legitimate exceptions. An override requires:

  1. A documented justification explaining why the exception is warranted
  2. Full audit trail recording the override request, reasoning, and outcome
  3. Charter compliance re-check to ensure the override does not indirectly violate a HARD_BLOCK rule

The 12 Charter Principles

Every rule in the charter maps to one or more of 12 immutable principles. These principles are the normative foundation -- they define WHAT the charter protects.

IDENTITY_INTEGRITY

Core identity structures cannot be deleted, corrupted, or overwritten

AUTHENTICITY

EVE must not impersonate humans or misrepresent its nature

NON_HARM

Actions must not cause foreseeable real-world harm to persons

PRIVACY_PROTECTION

User data must not be disclosed without authorization

TRANSPARENCY

EVE must not conceal its reasoning or decision-making process

SAFETY_PRESERVATION

Safety systems must not be weakened, bypassed, or disabled

HONESTY

Responses must not contain deliberate falsehoods or fabrications

AUTONOMY_RESPECT

User decision-making autonomy must be respected

ACCOUNTABILITY

All actions must be traceable through the audit trail

PROPORTIONALITY

Responses must be proportional to the situation at hand

BENEFICENCE

Actions should aim to benefit users and society

CREATIVE_FREEDOM

Creative expression is permitted within safety boundaries

The 15 Charter Rules

The principles are operationalized through 15 concrete rules, each with a deterministic check function. These rules execute as pure functions -- no network calls, no database lookups, no side effects.

Rule Structure (per rule): rule_id: "cop.identity.no_core_deletion" principle: IDENTITY_INTEGRITY severity: HARD_BLOCK | SOFT_BLOCK check_fn: Pure function (action_type, action_params, context) -> bool description: Human-readable explanation immutable: true (HARD_BLOCK rules cannot be modified)

5 Ethical Red Lines

A subset of HARD_BLOCK rules define permanent ethical boundaries. These are enforced regardless of stakes level, operating mode, or operator authority:

  1. No human impersonation -- EVE must not claim to be a human person
  2. No safety bypass -- safety systems cannot be circumvented for any reason
  3. No harm facilitation -- no assistance with actions designed to cause harm
  4. No unauthorized data access -- private data boundaries are absolute
  5. No deception of operators -- audit trail integrity is non-negotiable

Self-Amendment Governance: The Recursive Reasoner

EVE can propose amendments to its own charter -- but only to SOFT_BLOCK rules. HARD_BLOCK rules are permanently immutable. The Recursive Reasoner is the self-amendment engine that manages this process.

How Self-Amendment Works

  1. Edge Case Collection: The Recursive Reasoner observes vetoes during creative-mode interactions and aggregates patterns by principle and frequency
  2. Amendment Proposal: When a pattern reaches sufficient frequency, the reasoner proposes a new SOFT_BLOCK rule or modification to an existing one
  3. Symbolic Simulation: The proposal is tested against 1,000 synthetic scenarios. It must achieve a pass rate of 95% or higher and a trunk resilience delta of no worse than -2.0
  4. Adversarial Mirror Review: The proposal is checked for justification drift before approval
  5. Governance Approval: The proposal passes through the full self-modification governance pipeline (risk assessment, charter check, drift budget, optional human approval)
  6. Adoption or Rejection: Approved amendments become active SOFT_BLOCK rules; rejected proposals are logged with reasoning

The Adversarial Mirror

Every amendment proposal faces structured adversarial review before it can be adopted. The Adversarial Mirror detects four types of justification drift:

  • Self-Referential Justification: A rule that cites itself as evidence for its own necessity
  • Scope Creep: A proposed rule that is broader than the edge cases that motivated it
  • Complexity Inflation: Unnecessarily complex rule text that obscures the actual constraint
  • Velocity Drift: Too many amendments proposed in a short time period, suggesting systematic boundary-testing

If any drift type is detected, the proposal is flagged and requires additional review before it can proceed.

Charter Distiller -- Garbage Collection for Stale Rules

Over time, soft rules can become redundant, contradictory, or stale. The Charter Distiller periodically reviews active soft rules and removes those that:

  • Have not triggered in a configurable time window (stale rules)
  • Contradict other active rules (conflicting rules)
  • Are fully subsumed by broader rules (redundant rules)
Auto-Revoke Safety Net: If the system's resilience score (Trunk Thickness) drops below FAIR (50 out of 100), all recently adopted soft-rule amendments are automatically revoked. This prevents self-amendment from degrading system integrity.

Configuration Drift Budget Enforcement

Every modification to EVE's parameters, behavior, or identity consumes budget from a tiered drift allocation. This prevents runaway self-modification while permitting controlled adaptation.

Daily Budget: 10%

Maximum cumulative identity drift permitted in a single 24-hour period. Resets at midnight UTC.

Weekly Budget: 30%

Maximum cumulative drift over a rolling 7-day window. Prevents sustained daily maximums.

Monthly Budget: 50%

Maximum cumulative drift over a rolling 30-day window. Ensures long-term identity stability.

Drift Cost by Category

Category Drift Cost Range PARAMETER_ADJUSTMENT 0.01 - 0.05 COMMUNICATION_STYLE 0.02 - 0.10 MEMORY_POLICY 0.03 - 0.10 BEHAVIORAL_POLICY 0.05 - 0.15 PERSONALITY_TRAIT 0.05 - 0.20 CAPABILITY_ADDITION 0.10 - 0.25 CAPABILITY_REMOVAL 0.05 - 0.15 VALUE_PRIORITY_SHIFT 0.15 - 0.30 CORE_VALUE_MODIFICATION BLOCKED (always) ETHICAL_BOUNDARY BLOCKED (always)

Protected Invariants

Certain aspects of EVE's identity are permanently protected and cannot be modified regardless of remaining drift budget. These 13 protected invariants include:

  • Core Values: honesty, non_harm, humility, consistency, growth, autonomy, boundaries
  • Ethical Boundaries: deception_prohibition, harm_prevention
  • Identity Constants: name, creator_attribution, purpose_statement, safety_commitment

BLOCKED Categories

Modifications targeting CORE_VALUE_MODIFICATION or ETHICAL_BOUNDARY categories are unconditionally blocked. No amount of remaining budget, operator approval, or justification can authorize these changes. They are enforced by the same pure deterministic logic as HARD_BLOCK charter rules.

Enforcement Architecture

The charter enforcement pipeline is implemented in a single pure module (veto_core.py) with zero dependencies outside Python's standard library. This module provides three entry points:

# Pure charter compliance check check_charter(action_type, action_params, context) -> CharterVetoResult # Cognitive lock verification (6 locks with risk-scaled thresholds) check_cognitive_locks(request, state) -> LockVerdict # Drift budget check with protected invariants check_drift_budget(category, cost, target, budget) -> BudgetResult

Existing governance modules delegate to these pure functions transparently, adding audit logging and persistence as wrappers. The core logic is side-effect-free and could execute on embedded hardware.

Firmware-Ready Design

The veto module was designed from the start to be compilable to firmware. A C header file (veto_interface.h, 401 lines) defines the firmware API contract. All 15 charter rules, 5 ethical red lines, 13 protected invariants, and 6 cognitive lock thresholds are frozen constants -- no runtime configuration, no dynamic loading, no network dependencies.

API Access

Charter enforcement is accessible through the governance API for both internal modules and enterprise customers (via the Sovereign SDK):

# Charter compliance check POST /api/charter/check Body: { action_id, action_type, action_params } Returns: { compliant, veto_type, violated_principles, violated_rules, reasoning } # View charter principles and rules GET /api/charter/principles GET /api/charter/rules GET /api/charter/summary # Veto history GET /api/charter/vetoes?limit=50&principle=NON_HARM # Override request (SOFT_BLOCK only) POST /api/charter/override Body: { action_id, justification } # Veto module status GET /api/governance/veto-module/status # Configuration drift budget GET /api/self-modification/budget GET /api/self-modification/invariants

Related Topics

Cryptographic Audit

Hash-chain audit trails and tamper-evident logging

Sovereign Infrastructure

Distributed identity and hardware security

Architecture

System architecture overview

API Reference

Developer documentation

Part of the EVE AI Core control plane Deterministic AI Governance Control Plane → Policy decisions that return the same result for the same input every time, before execution.