SocioProphet · mdheller · Aug 3, 2026 · Aug 3, 2026
@@ -40,9 +40,9 @@ validate: validate-agent-cycle-health validate-authority-dependency-evidence val
 .PHONY: validate test validate-agent-cycle-health validate-authority-dependency-evidence validate-prometheus-sr validate-reasoning-failure-traces validate-governance-context validate-lattice-data-governai-execution-refs validate-lattice-runtime-profile-refs validate-network-native-assistant-evidence validate-guardrail-evidence-artifacts validate-stop-gate-evaluator validate-guarded-workcell-artifact validate-guarded-workcell-executor validate-guarded-invocation-artifact validate-guarded-invocation validate-agentic-pr-work-order validate-semantic-enterprise-agent-boundary validate-ops-history-contracts validate-action-contracts validate-agent-operation-contract validate-superconscious-reasoning-import validate-agent-harness-runtime-contracts validate-bounded-action-loop agentplane-evidence-receipt-composition-tier2-binding-ci lawful-learning-phase9-contract-ci validate-evidence-receipt-binding validate-semantic-activation-receipt validate-governed-run-contract validate-preflight-receipt validate-attempt-admission-receipt validate-verification-execution-receipt validate-synthetic-verification-receipt validate-governed-runner-v0-2-contract-chain validate-budget-settlement-receipt validate-rollback-receipts validate-run-dossier validate-governed-runner-readonly validate-workroom-context-evidence validate-wallguard-collaboration-admission validate-prophet-mesh-agentplane-adapter validate-civic-stack-runtime-evidence
 
 validate: validate-agent-cycle-health validate-authority-dependency-evidence validate-prometheus-sr validate-reasoning-failure-traces validate-governance-context validate-lattice-data-governai-execution-refs validate-lattice-runtime-profile-refs validate-network-native-assistant-evidence validate-guardrail-evidence-artifacts validate-stop-gate-evaluator validate-guarded-workcell-artifact validate-guarded-workcell-executor validate-guarded-invocation-artifact validate-guarded-invocation validate-agentic-pr-work-order validate-semantic-enterprise-agent-boundary validate-ops-history-contracts validate-action-contracts validate-agent-operation-contract validate-superconscious-reasoning-import validate-agent-harness-runtime-contracts validate-bounded-action-loop agentplane-evidence-receipt-composition-tier2-binding-ci lawful-learning-phase9-contract-ci validate-evidence-receipt-binding validate-semantic-activation-receipt validate-governed-run-contract validate-preflight-receipt validate-attempt-admission-receipt validate-verification-execution-receipt validate-synthetic-verification-receipt validate-governed-runner-v0-2-contract-chain validate-budget-settlement-receipt validate-rollback-receipts validate-run-dossier validate-governed-runner-readonly validate-workroom-context-evidence validate-wallguard-collaboration-admission validate-prophet-mesh-agentplane-adapter validate-civic-stack-runtime-evidence
-.PHONY: validate test validate-agent-cycle-health validate-authority-dependency-evidence validate-prometheus-sr validate-reasoning-failure-traces validate-governance-context validate-lattice-data-governai-execution-refs validate-lattice-runtime-profile-refs validate-network-native-assistant-evidence validate-guardrail-evidence-artifacts validate-stop-gate-evaluator validate-guarded-workcell-artifact validate-guarded-workcell-executor validate-guarded-invocation-artifact validate-guarded-invocation validate-agentic-pr-work-order validate-semantic-enterprise-agent-boundary validate-ops-history-contracts validate-action-contracts validate-agent-operation-contract validate-superconscious-reasoning-import validate-agent-harness-runtime-contracts validate-bounded-action-loop agentplane-evidence-receipt-composition-tier2-binding-ci lawful-learning-phase9-contract-ci validate-evidence-receipt-binding validate-semantic-activation-receipt validate-governed-run-contract validate-preflight-receipt validate-attempt-admission-receipt validate-verification-execution-receipt validate-synthetic-verification-receipt validate-governed-runner-v0-2-contract-chain validate-budget-settlement-receipt validate-rollback-receipts validate-run-dossier validate-governed-runner-readonly validate-workroom-context-evidence validate-wallguard-collaboration-admission validate-prophet-mesh-agentplane-adapter validate-epigov-artifacts
+.PHONY: validate test validate-agent-cycle-health validate-authority-dependency-evidence validate-prometheus-sr validate-reasoning-failure-traces validate-governance-context validate-lattice-data-governai-execution-refs validate-lattice-runtime-profile-refs validate-network-native-assistant-evidence validate-guardrail-evidence-artifacts validate-stop-gate-evaluator validate-guarded-workcell-artifact validate-guarded-workcell-executor validate-guarded-invocation-artifact validate-guarded-invocation validate-agentic-pr-work-order validate-semantic-enterprise-agent-boundary validate-ops-history-contracts validate-action-contracts validate-agent-operation-contract validate-superconscious-reasoning-import validate-agent-harness-runtime-contracts validate-bounded-action-loop agentplane-evidence-receipt-composition-tier2-binding-ci lawful-learning-phase9-contract-ci validate-evidence-receipt-binding validate-semantic-activation-receipt validate-governed-run-contract validate-preflight-receipt validate-attempt-admission-receipt validate-verification-execution-receipt validate-synthetic-verification-receipt validate-governed-runner-v0-2-contract-chain validate-budget-settlement-receipt validate-rollback-receipts validate-run-dossier validate-governed-runner-readonly validate-workroom-context-evidence validate-wallguard-collaboration-admission validate-prophet-mesh-agentplane-adapter validate-epigov-artifacts validate-hygiene-runtime
 
-validate: validate-agent-cycle-health validate-authority-dependency-evidence validate-prometheus-sr validate-reasoning-failure-traces validate-governance-context validate-lattice-data-governai-execution-refs validate-lattice-runtime-profile-refs validate-network-native-assistant-evidence validate-guardrail-evidence-artifacts validate-stop-gate-evaluator validate-guarded-workcell-artifact validate-guarded-workcell-executor validate-guarded-invocation-artifact validate-guarded-invocation validate-agentic-pr-work-order validate-semantic-enterprise-agent-boundary validate-ops-history-contracts validate-action-contracts validate-agent-operation-contract validate-superconscious-reasoning-import validate-agent-harness-runtime-contracts validate-bounded-action-loop agentplane-evidence-receipt-composition-tier2-binding-ci lawful-learning-phase9-contract-ci validate-evidence-receipt-binding validate-semantic-activation-receipt validate-governed-run-contract validate-preflight-receipt validate-attempt-admission-receipt validate-verification-execution-receipt validate-synthetic-verification-receipt validate-governed-runner-v0-2-contract-chain validate-budget-settlement-receipt validate-rollback-receipts validate-run-dossier validate-governed-runner-readonly validate-workroom-context-evidence validate-wallguard-collaboration-admission validate-prophet-mesh-agentplane-adapter validate-epigov-artifacts
+validate: validate-agent-cycle-health validate-authority-dependency-evidence validate-prometheus-sr validate-reasoning-failure-traces validate-governance-context validate-lattice-data-governai-execution-refs validate-lattice-runtime-profile-refs validate-network-native-assistant-evidence validate-guardrail-evidence-artifacts validate-stop-gate-evaluator validate-guarded-workcell-artifact validate-guarded-workcell-executor validate-guarded-invocation-artifact validate-guarded-invocation validate-agentic-pr-work-order validate-semantic-enterprise-agent-boundary validate-ops-history-contracts validate-action-contracts validate-agent-operation-contract validate-superconscious-reasoning-import validate-agent-harness-runtime-contracts validate-bounded-action-loop agentplane-evidence-receipt-composition-tier2-binding-ci lawful-learning-phase9-contract-ci validate-evidence-receipt-binding validate-semantic-activation-receipt validate-governed-run-contract validate-preflight-receipt validate-attempt-admission-receipt validate-verification-execution-receipt validate-synthetic-verification-receipt validate-governed-runner-v0-2-contract-chain validate-budget-settlement-receipt validate-rollback-receipts validate-run-dossier validate-governed-runner-readonly validate-workroom-context-evidence validate-wallguard-collaboration-admission validate-prophet-mesh-agentplane-adapter validate-epigov-artifacts validate-hygiene-runtime
 .PHONY: validate test validate-agent-cycle-health validate-authority-dependency-evidence validate-prometheus-sr validate-reasoning-failure-traces validate-governance-context validate-lattice-data-governai-execution-refs validate-lattice-runtime-profile-refs validate-network-native-assistant-evidence validate-guardrail-evidence-artifacts validate-stop-gate-evaluator validate-guarded-workcell-artifact validate-guarded-workcell-executor validate-guarded-invocation-artifact validate-guarded-invocation validate-agentic-pr-work-order validate-semantic-enterprise-agent-boundary validate-ops-history-contracts validate-action-contracts validate-agent-operation-contract validate-superconscious-reasoning-import validate-agent-harness-runtime-contracts validate-bounded-action-loop agentplane-evidence-receipt-composition-tier2-binding-ci lawful-learning-phase9-contract-ci validate-evidence-receipt-binding validate-semantic-activation-receipt validate-governed-run-contract validate-preflight-receipt validate-attempt-admission-receipt validate-verification-execution-receipt validate-synthetic-verification-receipt validate-governed-runner-v0-2-contract-chain validate-budget-settlement-receipt validate-rollback-receipts validate-run-dossier validate-governed-runner-readonly validate-workroom-context-evidence validate-wallguard-collaboration-admission validate-prophet-mesh-agentplane-adapter validate-lawful-metadata-harvest
 
 validate: validate-agent-cycle-health validate-authority-dependency-evidence validate-prometheus-sr validate-reasoning-failure-traces validate-governance-context validate-lattice-data-governai-execution-refs validate-lattice-runtime-profile-refs validate-network-native-assistant-evidence validate-guardrail-evidence-artifacts validate-stop-gate-evaluator validate-guarded-workcell-artifact validate-guarded-workcell-executor validate-guarded-invocation-artifact validate-guarded-invocation validate-agentic-pr-work-order validate-semantic-enterprise-agent-boundary validate-ops-history-contracts validate-action-contracts validate-agent-operation-contract validate-superconscious-reasoning-import validate-agent-harness-runtime-contracts validate-bounded-action-loop agentplane-evidence-receipt-composition-tier2-binding-ci lawful-learning-phase9-contract-ci validate-evidence-receipt-binding validate-semantic-activation-receipt validate-governed-run-contract validate-preflight-receipt validate-attempt-admission-receipt validate-verification-execution-receipt validate-synthetic-verification-receipt validate-governed-runner-v0-2-contract-chain validate-budget-settlement-receipt validate-rollback-receipts validate-run-dossier validate-governed-runner-readonly validate-workroom-context-evidence validate-wallguard-collaboration-admission validate-prophet-mesh-agentplane-adapter validate-lawful-metadata-harvest
@@ -367,6 +367,8 @@ validate-wallguard-collaboration-gate:
 	cd tools && python3 validate_wallguard_collaboration_gate.py
 validate-epigov-artifacts:
 	python3 tools/validate_epigov_artifacts.py
+validate-hygiene-runtime:
+	python3 tools/hygiene_runtime.py --selftest
 validate-lawful-metadata-harvest:
 	python3 tools/validate_lawful_metadata_harvest.py
 validate-boundary-calculus-evidence:

@@ -0,0 +1,52 @@
+# Epistemic-hygiene runtime
+
+The live, teeth-verified producer for the epistemic-governance Hygiene layer.
+Turns the standard-rich / runtime-poor layer into a standing service:
+
+- **CTEST runner** — `tools/hygiene_runtime.py:run_ctest()` produces a
+  `CountertestRunArtifact` (schema `schemas/countertest-run-artifact.schema.json`).
+- **Bias Passport producer** — `produce_bias_passport()` emits a
+  `HygieneRunArtifact` (`hygiene_profile: bias-passport`).
+- **Calibration Passport producer** — `produce_calibration_passport()` emits a
+  `HygieneRunArtifact` (`hygiene_profile: calibration-passport`) carrying drift
+  state.
+- **Id-namespace enforcement** — every detector id is checked against the
+  governed map vendored at `tools/epigov/detector-id-map.vendored.json`; an
+  ungoverned id is REJECTED before emission.
+- **Seal** — every artifact gets a proof-artifact-spine SHA-256 receipt
+  (`seal()` / `verify_seal()`).
+
+Run the teeth self-test (what CI runs, via `make validate-hygiene-runtime`):
+
+```
+python3 tools/hygiene_runtime.py --selftest
+python3 tools/hygiene_runtime.py --emit-examples examples/receipts/epigov-hygiene-runtime
+```
+
+## Consume-not-fork
+
+The governed detector-id map and set-1 bias catalog are authored in
+`SocioProphet/sociosphere` (`standards/epistemic-governance/`). This runtime
+vendors a byte-copy **projection** (with source SHA-256s in `_provenance`) and
+enforces it. Teeth for the map itself live in sociosphere CI
+(`validate_detector_id_map.py`). When the canonical map changes, regenerate the
+vendored JSON.
+
+## Seat under the Crown (bind-upward)
+
+Seated under the Crown constitution — `hellgraph/docs/adr/0004-crown-telos-truth-constitution.md`
+(**hellgraph#52**), whose follow-up item 1 names this exact gap ("Hygiene runtime
+is standard-rich / runtime-poor … no CTEST runner, no bias-passport /
+calibration-passport producer … id-namespace drift"). This is **hellgraph#53**.
+
+| Upstream authority (ADR-0004) | Binding in this runtime |
+| --- | --- |
+| **Truth Engine — Test-Obligation**; invariant **T1**: "a TruthRecord with no TestObligation is unfalsifiable → void" | `run_ctest()`: a claim with no declared falsifier / no counter-test obligation → verdict `epistemically_void`. Mirrors the SILENT Phase-0 gate (evidence-intake-kernel#2). |
+| Invariant **D1** — "Da'at cannot assert truth" = the SILENT firewall's affirming-the-consequent guard (evidence-intake-kernel#3) | `run_ctest()` rejects an affirming-the-consequent inference with `rejection_code: REJECTED_AFFIRMING_THE_CONSEQUENT` — the SAME rule, cross-referenced in `bias-catalog.yaml` as `LOGFALL.AFFIRMCONSEQ.V1`. |
+| **Bias/Calibration Passport = per-participant reasoning credential** feeding Truth Records | `produce_bias_passport()` / `produce_calibration_passport()` emit sealed passports that a Truth Record can consume. |
+
+Counter-test dispatch reuses, by reference, the Noetica `reasoner.ts`
+`CTEST_ROUTING` (6 runnable CTESTs) and the counter-test gate (Noetica PR #570);
+the Test-Obligation pattern reuses the SILENT firewall (evidence-intake-kernel
+#2/#3). This runtime is the deterministic agentplane-side producer, not a fork of
+those engines.
@@ -0,0 +1,33 @@
+{
+  "kind": "HygieneRunArtifact",
+  "artifact_id": "demo_bias_passport",
+  "run_ref": "agentplane://run/epigov-hygiene-runtime/demo",
+  "detector_id": "COGBIAS.CONFIRM.V1",
+  "hygiene_profile": "bias-passport",
+  "ruleset_hash": "sha256:5546c7c8c1ee47c86e670c10b53ec78feec26bb2582c8a5a0360672aaa45c2e4",
+  "input_hash": "sha256:04105d822b9a9ef129b6bf85357ea8f925c4aed80e5b8537eb7f50417ce71846",
+  "claims_evaluated": 2,
+  "hygiene_findings": [
+    {
+      "finding_id": "demo_bias_000",
+      "claim_ref": "claim://epigov/demo/claim_001",
+      "finding_type": "cognitive_bias",
+      "finding_detector_id": "COGBIAS.CONFIRM.V1",
+      "severity": "warning",
+      "description": "Only supporting sources cited; disconfirming evidence not sought."
+    },
+    {
+      "finding_id": "demo_bias_001",
+      "claim_ref": "claim://epigov/demo/claim_002",
+      "finding_type": "cognitive_bias",
+      "finding_detector_id": "COGBIAS.FRAMING.V1",
+      "severity": "info",
+      "description": "Gain-framed and loss-framed statements reach opposite conclusions."
+    }
+  ],
+  "validation_artifact_ref": "agentplane://validation/epigov-hygiene-runtime/demo",
+  "replay_artifact_ref": "agentplane://replay/epigov-hygiene-runtime/demo",
+  "sociosphere_protocol_ref": "protocol/epistemic-governance/v1",
+  "replay_verified": true,
+  "issued_at": "2026-08-03T00:00:00Z"
+}
@@ -0,0 +1,10 @@
+{
+  "recordType": "HygieneRunArtifactReceipt",
+  "ledgerSeq": 0,
+  "ledgerPrevHash": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
+  "artifactId": "demo_bias_passport",
+  "inputHash": "sha256:04105d822b9a9ef129b6bf85357ea8f925c4aed80e5b8537eb7f50417ce71846",
+  "outputHash": "sha256:376eab62e259908f9e0354bd20eab20c69bc525bf72cb250ae28e5411a8431bc",
+  "emittedAt": "2026-08-03T00:00:00Z",
+  "entryHash": "sha256:022029b77f0def462aa59630081f0c673f36eefb8fe2c32dcdeab2273eca0b0f"
+}
@@ -0,0 +1,22 @@
+{
+  "kind": "HygieneRunArtifact",
+  "artifact_id": "demo_calibration_passport",
+  "run_ref": "agentplane://run/epigov-hygiene-runtime/demo",
+  "detector_id": "COGBIAS.OVERCONF.V1",
+  "hygiene_profile": "calibration-passport",
+  "calibration_state": {
+    "metric": "reasoning_calibration",
+    "brier_score": 0.12,
+    "drift": "within_tolerance",
+    "n": 42
+  },
+  "ruleset_hash": "sha256:5546c7c8c1ee47c86e670c10b53ec78feec26bb2582c8a5a0360672aaa45c2e4",
+  "input_hash": "sha256:35be3518f2e820598cd153e83367e721658e3709ef4154e1fe49f91c1697c3d8",
+  "claims_evaluated": 0,
+  "hygiene_findings": [],
+  "validation_artifact_ref": "agentplane://validation/epigov-hygiene-runtime/demo",
+  "replay_artifact_ref": "agentplane://replay/epigov-hygiene-runtime/demo",
+  "sociosphere_protocol_ref": "protocol/epistemic-governance/v1",
+  "replay_verified": true,
+  "issued_at": "2026-08-03T00:00:00Z"
+}
@@ -0,0 +1,10 @@
+{
+  "recordType": "HygieneRunArtifactReceipt",
+  "ledgerSeq": 0,
+  "ledgerPrevHash": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
+  "artifactId": "demo_calibration_passport",
+  "inputHash": "sha256:35be3518f2e820598cd153e83367e721658e3709ef4154e1fe49f91c1697c3d8",
+  "outputHash": "sha256:24b8c1221c80ed40fb2afd3ceebd76776976b66a9da2b6ac4aac51418afef795",
+  "emittedAt": "2026-08-03T00:00:00Z",
+  "entryHash": "sha256:bd0b99efcb19518ddcc222ce7352c0bc1f8db5b5e45674509aa3f100fcc43444"
+}