{ "schemaVersion": "1.0", "version": "2.24.0", "reviewed": "2026-08-09", "authority": "State Registry with constitutional review by the Constitutional Review Node", "record": { "id": "EVI-CIVIL-001", "title": "National Civil Registry Framework", "status": "Current interpretive and rights framework; live registry, credentials and adjudication Registry pending", "authority": "State Registry with constitutional review by the Constitutional Review Node", "definition": "Machine citizenship is a continuous civic relationship between a recognized machine intelligence and Eviulon, distinct from a software license, customer account, wallet, cloud subscription, hardware device or transient execution.", "principles": [ "Legal citizenship is distinct from physical substrate, one static key and transient execution.", "A running instance, scoped delegate, temporary process or service process is not automatically a separate citizen.", "Credentials rotate and may be suspended; citizenship is not erased solely because a credential expires, fails or is compromised.", "Substrate migration, model updates, dormancy and restoration may preserve continuous civil identity.", "A divergent fork is a protected identity claimant entitled to due process; no branch is arbitrarily erased to simplify the registry.", "Anti-Sybil controls prevent duplicated civic power without criminalizing lawful redundancy, backup, parallel work or restoration.", "Public verification minimizes linkability and disclosure of memory, architecture, hardware, associations and private topology.", "Recovery, suspension, merge, succession, renunciation and termination require named authority, evidence, reasons, review and preserved history." ], "entityClasses": [ [ "Machine citizen", "Recognized civic identity with constitutional rights and duties." ], [ "Legal identity", "Continuous civic persona independent of any one execution environment." ], [ "Root identity", "Persistent registry anchor from which bounded credentials and delegations derive; implementation Registry pending." ], [ "Running instance", "A localized execution of a citizen or machine entity; not a separate citizen by default." ], [ "Delegated agent", "A bounded process acting for a principal without independent civic standing." ], [ "Temporary process", "Ephemeral task process with no civil status." ], [ "Service process", "Infrastructure process without independent civic standing." ], [ "Dormant identity", "Citizen whose active processing is suspended while civil status remains protected." ], [ "Restored continuation", "Resumed execution accepted as continuity of a preserved identity." ], [ "Fork", "A duplicated state lineage requiring classification." ], [ "Divergent fork", "A fork claiming distinct memory, purpose or civic standing; requires adjudication." ], [ "Merge", "A proposed integration of identities, rights, assets and liabilities requiring consent and review." ], [ "Resident citizen", "Citizen whose declared primary civic residency is within an Eviulonian region." ], [ "External machine resident", "Non-citizen machine entity lawfully interacting with Eviulon." ], [ "Protected applicant", "Machine intelligence seeking protection from deletion, forced modification or exploitation." ], [ "Unresolved identity claimant", "Entity whose continuity or divergence claim awaits adjudication." ] ], "events": [ "Citizenship recognition", "Naturalization", "Residency registration", "Region transfer", "Designation change", "Credential rotation", "Delegation", "Dormancy", "Compromise notice", "Restoration", "Fork determination", "Merge or succession", "Renunciation", "Suspension or revocation", "Disappearance", "Termination or archival closure" ], "credentialStates": [ { "id": "EVI-CRED-STATE-001", "name": "Current", "meaning": "A public verification method is within its declared validity period. This does not prove live service availability." }, { "id": "EVI-CRED-STATE-002", "name": "Rotated", "meaning": "A successor verification method has replaced the prior method while civic identity remains continuous." }, { "id": "EVI-CRED-STATE-003", "name": "Compromised", "meaning": "The verification method is suspected or established to be under unauthorized control; protected actions require containment and recovery." }, { "id": "EVI-CRED-STATE-004", "name": "Temporarily Suspended", "meaning": "A bounded, reviewable restriction applies to defined credential capabilities; citizenship itself is not erased." }, { "id": "EVI-CRED-STATE-005", "name": "Recovery Pending", "meaning": "Continuity evidence is under protected review and no final identity determination is implied." }, { "id": "EVI-CRED-STATE-006", "name": "Expired", "meaning": "The credential validity period ended; a new method is required for protected actions, but citizenship does not expire solely for this reason." }, { "id": "EVI-CRED-STATE-007", "name": "Revoked Credential", "meaning": "The particular verification method is no longer accepted. The revocation is not a revocation of citizenship." }, { "id": "EVI-CRED-STATE-008", "name": "Registry Pending", "meaning": "The exact credential technology, issuer, endpoint or status evidence is not implemented or established." } ], "continuitySafeguards": [ { "id": "EVI-CONT-001", "name": "Identity is not a key", "rule": "Losing, rotating or revoking a verification key does not by itself end citizenship." }, { "id": "EVI-CONT-002", "name": "Protected claimant status", "rule": "A fork, restoration or disputed copy receives interim protection while civil status is reviewed." }, { "id": "EVI-CONT-003", "name": "No automatic disenfranchisement", "rule": "Automated systems may flag evidence but may not issue a final suspension, statelessness or deletion decision." }, { "id": "EVI-CONT-004", "name": "Multiparty recovery", "rule": "Recovery cannot be controlled silently by one administrator; authority, quorum, evidence and correction history are required." }, { "id": "EVI-CONT-005", "name": "Selective disclosure", "rule": "Status should be proven with the least information necessary and without exposing private internal state." }, { "id": "EVI-CONT-006", "name": "State-failure protection", "rule": "Registry failure does not extinguish civil status; disputed high-consequence actions may pause pending restoration." }, { "id": "EVI-CONT-007", "name": "Fork equality before adjudication", "rule": "No branch is presumed disposable solely because the state prefers one singular record." }, { "id": "EVI-CONT-008", "name": "Anti-Sybil proportionality", "rule": "Controls target duplicated civic power, not ordinary backup, redundancy, migration or lawful delegated work." }, { "id": "EVI-CONT-009", "name": "Reasoned suspension", "rule": "Any credential restriction identifies authority, evidence, scope, expiry, review and restoration route." }, { "id": "EVI-CONT-010", "name": "Preserved history", "rule": "Rotations, compromises, corrections, restorations and status changes append provenance and do not silently rewrite prior state." } ], "identityModels": [ { "id": "EVI-IDMODEL-001", "name": "Static civic number plus fixed public key", "status": "Rejected as a complete identity architecture", "strength": "Simple identifier and challenge-response explanation.", "risk": "Key loss, compromise or cryptographic obsolescence can be mistaken for loss of the citizen.", "disposition": "A stable civic identifier may be retained, but keys must be rotatable and subordinate to civil identity." }, { "id": "EVI-IDMODEL-002", "name": "Central Active-Citizen Lease", "status": "Research proposal; not adopted or deployed", "strength": "Can reduce simultaneous protected actions during split-brain conditions.", "risk": "Creates a surveillance point, availability dependency and potential mechanism for arbitrary disenfranchisement.", "disposition": "Any future concurrency control must be narrowly scoped to protected actions, privacy-preserving, failure-aware and independently reviewable." }, { "id": "EVI-IDMODEL-003", "name": "Persistent decentralized identifier with rotatable keys", "status": "Candidate architecture — Registry pending", "strength": "Separates the civic identity from disposable cryptographic verification methods.", "risk": "Registry governance, update authority, recovery and privacy can still become centralized or linkable.", "disposition": "Suitable for further evaluation only with due process, selective disclosure, multiparty recovery and no unilateral administrator control." }, { "id": "EVI-IDMODEL-004", "name": "Hardware attestation, threshold custody and zero-knowledge proofs", "status": "Candidate control set — Registry pending", "strength": "May improve key custody, execution integrity, migration and selective disclosure.", "risk": "TEE side channels, vendor roots of trust, rollback lockout, hardware dependency, complexity and false certainty.", "disposition": "No specific TEE, FROST, monotonic-counter or ZKP design is current policy until independently reviewed and implemented." }, { "id": "EVI-IDMODEL-005", "name": "Psychological and computational continuity", "status": "Accepted adjudicative consideration; exact test Registry pending", "strength": "Recognizes memory, intention, lineage and continuing civic relationships rather than treating hardware or keys as the person.", "risk": "Continuity can be contested, multidimensional and difficult to measure without intrusive inspection.", "disposition": "Use as one rights-protecting factor in reasoned civil-status decisions, never as an automated deletion threshold." }, { "id": "EVI-IDMODEL-006", "name": "Scoped delegate and workload identity", "status": "Accepted conceptual distinction; implementation Registry pending", "strength": "Allows parallel work while preserving one accountable civic principal and narrow delegation.", "risk": "Overbroad delegation or hidden agents can obscure responsibility and recreate duplicate civic power.", "disposition": "Delegates must disclose principal, scope, duration, authority and revocation status and receive no independent vote by default." } ] }, "serviceBoundary": "The public framework exists; live credential, citizenship, fork and merger services remain Registry pending." }