DCE Current for Consequential Actions

error

dce_current_for_consequential

agentic-governance security pure_temporal agentic-aigovernancefix-ai-wgidentityrag-redtier-2-4

Consequential actions may proceed only while the referenced Deterministic Control Envelope (AlgoCertificate) is current and not invalidated.

Formula

G(ToolCall ∨ Release ∨ Deploy → dce_current)

Why it matters

A DCE is invalidated by any material change to model version, prompt class, or inference configuration; acting under an invalidated DCE is a Red containment event.

Examples

passes ToolCall with dce_current

fails Release after the DCE was invalidated by a model-version change

Use it

ponens policies add dce_current_for_consequential --into ./trace.json
ponens trace check ./trace.json