# ICP — Integrity Constraint Governance Protocol

Dual-representation governance engine for AI, BIO-ML, and software systems.

## Architecture

Two layers enforce the same invariants through different paradigms:

| Layer | File | Paradigm | Role |
|-------|------|----------|------|
| DAG | `ICP-DAG.m` | MUMPS imperative | State machine over `^ICP` global |
| DAG constraints | `ICP-DAG.lp` | Answer Set Programming | Declarative SAT/UNSAT checking (Clingo) |
| Governance | `ICP-GOV.m` | MUMPS imperative | Full governance engine with actors, provenance, sealing |

## Core Contract

```
EVIDENCE --> CLAIM --> PROOF --> DECISION --> AUTHORIZATION --> EXECUTION --> AUDIT
```

Rejection is the default. Every node must earn its position through evidence and proof.

## Invariants

1. Every edge has two existing endpoints
2. No self-edges
3. Unknown claims cannot be authorized
4. Contradicted claims cannot be authorized
5. Execution requires authorized decision
6. Proof must reference a claim
7. Policy must reference a constraint
8. Constraint failure propagates to governance failure
9. Governance failure prevents execution
10. ASP UNSAT = HALT

## Governance Engine (ICP-GOV)

Extends the DAG with:

- **Actors** — registered identities with typed scope
- **Provenance** — source/location/hash tracking on all claims
- **Derivation** — evidence-to-claim linking with named rules
- **Authority** — identity + scope + status gating
- **Sealing** — immutable decision records
- **Revocation** — auditable decision withdrawal
- **Emergency halt** — immediate governance termination
- **Override protocol** — disabled by default, requires audit trail

## Security Guarantees

- No unauthorized execution
- No fabricated evidence
- No silent policy override
- No hidden authority escalation
- No conversion of unknown to fact
- No suppression of contradiction
- No unsourced authoritative claim

## Usage

### MUMPS
```mumps
D TEST^ICPGOV    ; Full governance test cycle
D BUILD^ICPDAG   ; Build and verify DAG
D REPORT^ICPGOV  ; Status report
```

### ASP (Clingo)
```bash
clingo ICP-DAG.lp facts.lp
# SAT   = governance holds
# UNSAT = governance violation
```

## License

Tri-licensed under BSL-1.1 + AGPL-3.0 + MPL-2.0. See [LICENSE.tri](LICENSE.tri) for the full decision tree and transition timeline.

| Use Case | License |
|----------|---------|
| Managed service / SaaS | AGPL-3.0 |
| Enterprise (no managed service) | BSL-1.1 |
| File-level modification | MPL-2.0 |
| Copyleft bypass | Commercial |

License compatibility reasoner: `swipl -q -t halt -f license_policy.pl -- matrix`

Copyright (C) 2026 Jessica L. Williams / SNAPKITTYWEST