note

Current public-DAV authority boundary — 2026-07-12. Pre-launch target design; nothing here proves a live system. A public-DAV consequence may occur only when at least two natural-person councilors bind the exact consequence in a complete valid bound PRISM decision receipt. PRISM records and verifies that receipt only; it never serves as council, signatory, authority, or receipt producer. AI and caste seats stage unsigned proposals only; they never authorize or execute a public-DAV consequence. Constitution or membership adoption establishes constitution and membership only; it does not authorize a later consequence. Policy may constrain an unsigned proposal but never authorizes execution or substitutes for the complete consequence-bound receipt. Before receipt validity, consequence fails closed to read-only proposal, simulation, or deterministic sandbox; live evidence remains gated_pending_complete_valid_bound_receipt. Software deterministically carries out only the exact consequence bound to a complete valid bound PRISM decision receipt from at least two natural-person councilors binding that exact consequence.

DEV-07 — Private-DAV Reference: K2 Envelope Flow

Source read: 02_SKYZAI/02_ORGANISM_COMMONS/EXECUTION/SKYZAI/agents/pipeline/k2_inbox.py.

Scope

This page documents the legacy/private-DAV K2 inbox and is reference doctrine, not the active public-DAV authority path. Public-DAV AI/caste seats stage an unsigned ProposalEnvelope only. Any consequence requires a complete valid bound PRISM decision receipt from at least two natural-person councilors binding the exact consequence; PRISM records and verifies only. Constitution, membership, or policy adoption does not authorize a later consequence. Skyzai fails closed before receipt validity; deterministic software carries out only that exact bound consequence.

Local Inbox Shape

Today the inbox scans heterogeneous JSON envelopes in:

02_SKYZAI/02_ORGANISM_COMMONS/EXECUTION/SKYZAI/execution_log/

The query layer normalizes:

• status: any status beginning with PENDING is pending;
• type: type, then action_type, then the legacy private-DAV reference k2_envelope field if a chain trace exists;
• timestamp: timestamp, then signed_at, then created_at.

CLI

cd 02_SKYZAI/02_ORGANISM_COMMONS/EXECUTION/SKYZAI/agents
python3 -m pipeline.k2_inbox
python3 -m pipeline.k2_inbox --pending
python3 -m pipeline.k2_inbox --by-type
python3 -m pipeline.k2_inbox --by-day
python3 -m pipeline.k2_inbox --top-stale 10
python3 -m pipeline.k2_inbox --show <name>
python3 -m pipeline.k2_inbox --since 7d --pending

--quiet emits JSON and is safe for automated checks.

Legacy Private-DAV Flow

model / agent / runtime proposes the Natural Person's private act
  -> pipeline creates legacy private envelope
  -> execution_log stores k2_*.json
  -> k2_inbox summarizes pending state
  -> that Natural Person reviews
  -> the Natural Person accepts or refuses their own private act
  -> execution surface acts only after that private signature

Current Public-DAV Target Flow

AI / caste seat stages unsigned ProposalEnvelope
  -> at least two natural-person councilors bind the exact consequence in a complete valid bound PRISM decision receipt
  -> PRISM records and verifies only; it never signs or produces the receipt
  -> authority validator checks exact proposal/consequence binding and receipt completeness
  -> missing, mismatched, AI-signed, or undersized receipt fails closed
  -> deterministic executor carries out only that exact bound consequence and returns an execution receipt

Developer Guard

No agent should bypass execution_log for consequential actions. If an action touches money, identity, public communication, memory lineage, deployment, or legal posture, it stages an envelope.

⊙ = • x ○

K3 public-DAV authority history — 2026-07-12

K3 historical reference — not active authority

note

Current public-DAV boundary — 2026-07-10. Pre-launch target design; nothing here is live. The active DAV is public and targets PRISM, with no K2 runtime, launch, genesis/bootstrap, or fallback dependency. Consequential authority requires at least two natural-person councilors; AI/caste seats stage unsigned proposals only. Before quorum, behavior fails closed to read-only/proposal, simulation, or deterministic sandbox, and a live decision receipt remains gated pending quorum.

This page documents the legacy/private-DAV K2 inbox and is reference doctrine, not the active public-DAV authority path. Public-DAV AI/caste seats stage an unsigned ProposalEnvelope; a valid quorum of at least two natural-person PRISM councilors authorizes consequence. Skyzai fails closed before that receipt exists.

AI / caste seat stages unsigned ProposalEnvelope
  -> at least two natural-person councilors bind a decision receipt (PRISM verifies only)
  -> authority validator binds the decision receipt to the proposal hash
  -> missing, mismatched, AI-signed, or undersized receipt fails closed
  -> deterministic executor acts and returns an execution receipt