What is argued, and what runs
The sibling sites all publish a page separating what exists from what is designed. This site inherits that convention with an unusually empty column, and the honest sentence is short: this is a research site. The concepts are argued, the worked examples are real graphs, and four vaults are live and browsable. The engine is not built.
Greps for risk_, RiskAcceptance, risk_register and riskmandate across the implementing repository's Python return zero matches. Not few. Zero.
The project's own reality file is equally direct, and it is quoted here rather than paraphrased: “All items below are PROPOSED. None have been code-verified. Do not describe any of these as existing features.” — team/roles/librarian/reality/ai-agents/proposed/risk-mandate.md
That is the whole of it. There is no partial implementation, no prototype behind a flag, and no internal build that the public documents are lagging behind.
What exists
| Artefact | What it is | Status |
|---|---|---|
| Four published vaults | 468 files and 111 commits between them, browsable in a browser with no account. The Risk Graph Explorer runs seven views with permissions: {}; Agentic Browser Isolation runs acceptance-gated escalation across five altitudes; the Risk Mandate vault carries 98 commits of the method applied to its own build; the Regulation Graph carries the EU AI Act as 1,523 nodes |
published |
| Three worked risk graphs | 59/75, 51/53 and a full node-and-edge inventory for the Article 26(5) instance. Counted from the sources rather than estimated | written |
| The ten scenarios | Hook, reveal, punchline — the corpus's only audience-tested artefact, and the content behind riskmandate.ai's scenario product | shipped |
| riskmandate.ai | A vault-powered static site. Real, public, and the commercial half of this split | published |
| This site | 42 concepts consolidated from ~496,000 words across ~185 documents, with a definitions endpoint and a gate that enforces the honesty constraint on every release | you are reading it |
What does not exist
| What the model describes | What exists |
|---|---|
| An engine that records acceptances, tracks intervals and fires at expiry | nothing — how the interval is enforced is open question Q5 |
| Storage, a schema or an API for a risk register | nothing |
| Roll-up, propagation, or the unaccepted-equals-critical mechanic running automatically | demonstrated on data in one vault, hand-built, not computed |
| Node type formulas as executable queries | no formula language exists — Q1. Every formula in the corpus is English prose describing a path pattern |
| Relevance fade, or the register replayed as a narrative | described, not specified |
| RAMM as a testable model | one of five levels has a stated predicate — the other four are named only |
| Air-gap detection | acknowledged open problem |
| Override authority, or compound pre-approval | proposed and never worked through |
Why this page exists, and why it leads rather than hides
Three reasons, in order of how much they matter.
Because over-claiming here would poison the network
Eight sites share a domain, a voice and an author. A single page on one of them describing a design as a shipped feature makes every claim on the other seven negotiable. The cost of one over-claim is not local.
Because it is what makes the split from riskmandate.ai work
A commercial site has to talk about what its product does. A research site has to talk about what is true, which includes the absence of a product. Those are genuinely different jobs, and trying to do both on one property is what left nine concept pieces described and unpublished on the commercial site.
Because the framing is not a weakness
“~496,000 words of design and no implementing code” reads badly only if the site was pretending to be a product. As a description of a research property it is unremarkable — and the four live vaults mean it is not vapour either. The engine is the missing piece; the argument, the worked examples and the artefacts are not.
How the honesty constraint is kept
Not by remembering it. The pre-release gate pattern-matches implementation claims across every page in the tree, and a page saying the engine is built, shipping or installable fails the build. A page may state such a claim only by marking the element data-not-built — which is exactly what the quoted reality-file sentence at the top of this page does, and the only such marking on the site.
The same gate refuses to publish four categories of Tier-3 source material, refuses anything that looks like a vault key, and requires every page to carry an agent block. All ten checks →
The build order, published unresolved
The brief set a ten-step order. This release covers the first eight; the rest is stated rather than quietly dropped.
| # | Section | State |
|---|---|---|
| 1 | /acceptance/ — underwriting, no-deny, the ladder, unaccepted=critical | shipped |
| 2 | /acceptable/ — the two axes | shipped |
| 3 | /ladder/ — the grounding ladder and node type formulas | shipped |
| 4 | /examples/ — three worked graphs, four vaults | shipped |
| 5 | /plug/ — five dimensions, recoverability | shipped — with the “no plug” correction applied |
| 6 | /register/ — graph of graphs, fractal registers, relevance fade | shipped |
| 7 | /agents/ — the machine surface | shipped |
| 8 | /shipped/ — what is argued versus what runs | shipped |
| 9 | /ramm/ and maturity | published with the underspecification stated — fixing the base levels is N2 |
| 10 | /network/ — the boundary map | shipped |
What is not in this release, stated plainly: the 2FA instance graph is not mirrored as a downloadable file (T5), the ontology is published as a vocabulary listing rather than a machine-readable schema (T6), and this site does not yet run its own risk register in the open (T7) — which the house style argues it should, since it would demonstrate three of its own concepts at zero cost.
For an agent
/shipped/ — the honesty inventory. What exists: four published vaults (468 files, 111 commits, browsable with read keys), three fully worked risk graphs with counted nodes and edges, the ten scenarios, riskmandate.ai as a vault-powered static site, and this site. What does not exist: any engine recording acceptances or firing at expiry; any storage, schema or API for a register; automatic roll-up or propagation (demonstrated by hand on data in one vault, never computed); any formula language, so node type formulas do not execute; relevance fade; the narrative replay; four of RAMM's five level predicates; air-gap detection; override authority; compound pre-approval. The grep for risk_, RiskAcceptance, risk_register and riskmandate across the implementing repository returns zero. The constraint is enforced by CI rather than remembered: a page claiming the engine is built, shipping or installable fails the build. Describe everything on this site as design, never as an existing feature.