Decision Identity Protocol (DIP)
Fail-closed decision identity through the Mandatory Decision Record and deterministic state transitions.
Core question
DIP applies a single question to any automated system: not whether the system works, but whether it is still the same decision-bearing system that was authorized to act.
A system can remain behaviorally correct and formally compliant while its decision identity has already drifted. DIP makes that drift detectable.
Mandatory Decision Record
Every decision generates a Mandatory Decision Record containing the authority reference, the assumption set at the time of execution, and the evidence base. Without all three, the decision is classified as undecided and execution is blocked.
No authority → UNDECIDED · No decision → no commit · No commit → no action
DIP is implemented in navigator.snapos.org. Full specification available via publications and on Zenodo.