Manual reconstruction of what a system saw, selected, excluded, and justified.
Replayable evidence for machine-mediated review.
This page remains live as a supporting methodology lens. Sovrient's lead public stack is admissibility infrastructure and replayable decision verification; governance reconstruction stays here as a transitional explanation of the older SSEJ framing and cross-lane methodology.
Sovrient helps teams reconstruct, review, and bound machine-supported decisions with replayable evidence artifacts. The system is not autonomy itself, not a full safety stack, and not a black-box score. It is the bounded evidence layer between raw machine output and accountable review.
More specifically, Sovrient begins to explain why a workflow landed where it did by reconstructing the evidence path around it, not just the mechanics of execution.
`SSEJ` is not only a glossary term on this public surface. It is already operationalized as a live governance pattern in Sovrient's public seismic and maritime lanes, with replayable artifacts, release-state controls, and machine-readable evidence handles.
For definitions of ANATOP, MAS, NERV, governance seed, and SSEJ, see the Sovrient glossary.
Replayable artifacts, manifests, release-state records, attestation files, and machine-readable handles.
Not autonomy, not a live surveillance layer, not settlement authority, and not a complete safety or alignment system.
SSEJ Frame
`SSEJ` means `Saw, Selected, Excluded, Justified`. It names the supporting-methodology invariant historically published here as governance reconstruction: a decision record is reconstructable if and only if those four components are present, scope-bound to the same decision, and independently verifiable. Without that shared scope and verification surface, later review degrades into post-hoc narrative.
What was in the declared input space and available for consideration. This bounds the universe of review.
What was chosen for action, emission, escalation, or release. This is the positive decision surface for the same declared scope.
What remained available but was not chosen within that same scope. This negative space is often more revealing than the selection itself.
What rule, evidence, or reasoning connected the chosen path to the alternatives under declared policy. This is what makes reconstruction possible rather than merely descriptive.
`SSEJ` is narrower than a claim about inner cognition. It is an atomic governance invariant over a declared decision scope: if any one component is missing or not independently checkable, the record is no longer a reconstruction but a narrative.
Operational SSEJ
The invariant is already running on the public surface. Sovrient now publishes live bounded lanes where `Saw`, `Selected`, `Excluded`, and `Justified` are visible as machine-readable and human-reviewable artifacts rather than only described abstractly.
- Seismic verification: deterministic replay, release-state gating, and public proof handles.
- Maritime AIS: bounded NOAA-backed slice, review queue, resolution ledger, and replay dashboard.
- Maritime AIS dashboard: queue snapshot, current ledger, and normalized replay surface tied to real artifacts.
- Agent decision traces and managed-agent review workflows.
- Unmanned mission review and route-accountability surfaces.
- Workflow adjudication and trigger-qualified operational payloads.
These domains are architecturally compatible with `SSEJ`, but they are not yet published as live public lanes unless explicitly stated elsewhere on the site.
Managed-Agent Roadmap
A future Sovrient lane could apply the same governance pattern to managed-agent execution. The public claim here is compatibility and roadmap intent, not a statement that such a lane is already live. Anthropic documents Claude Managed Agents as a managed runtime for long-running, asynchronous agent work and notes that the capability is currently in beta.
When implemented, a managed-agent lane would be expected to publish artifacts in a form like this:
- Declared session scope, tool boundary, and input surface before execution.
- Replayable record of what the agent saw, selected, excluded, and justified during the run.
- Post-run attestation and review artifact shaped for operator, prime, or audit follow-through.
Public-safe architecture note: Managed-Agent Reference and managed-agent-reference.json.
- No live public managed-agent decision lane is published today.
- No Anthropic integration is claimed as a current shipping Sovrient capability.
- Managed-agent compatibility is a roadmap statement grounded in architectural fit, not current product status.
ANATOP And SSEJ
These two terms work together but they do different jobs. ANATOP governs how raw artifacts become deterministic, bounded, agent-usable state. SSEJ governs how decisions over that state become reconstructable, reviewable evidence records.
Governed state formation: declared inputs, bounded transforms, deterministic structure, and replayable machine surfaces. It answers whether a state is admissible enough to be trusted and used.
Governed decision reconstruction: what was seen, what was selected, what remained excluded, and what justified the decision under the same declared scope. It answers whether a decision record is reconstructable enough to be reviewed.
Publicly, the current Maritime AIS lane demonstrates SSEJ directly and demonstrates ANATOP-compatible governed state formation through manifests, bounded source declaration, attestation, replay discipline, and fail-closed publication controls. That is a stronger and narrower claim than saying every ANATOP-compatible lane is already published end to end.
Formal Theorem Layer
Sovrient's formal layer is now also externally legible in bounded terms. The current public theorem reference surface summarizes a certified ACL2 family made up of the abstract frame book, a minimal concrete starter, and the first real ZF gate lane, while also recording a repo-internal second prover family in Isabelle/HOL for session and briefing invariants. The public claim is that the ACL2 family exists and is certified and that the second prover family exists repo-internally; the public non-claim is that every lane is already formally covered or that JSON replaces formal authority.
- Theorem Reference
- theorem-reference.json
- live theorem twin (frame)
- live theorem twin (ZF gate)
- Certified family today:
frame,core1,zf_gate
- ACL2
.lisp,.cert, and.portartifacts remain authoritative for the current public family. - Isabelle/HOL source theories, session root, and replay wrapper remain authoritative for the repo-internal second prover family.
- Theorem twins and theorem-reference surfaces are descriptive only.
- Raw
frameandZF gatetwins are public today; the rest of the family remains repo/internal unless separately declared. - No public claim is made that live production SSEJ records already cite theorem ids.
Current Lanes
- Live public verification surface
- Deterministic replay and release-state gating
- Machine-readable evidence handles
- Real NOAA-backed local source slice
- Published governance seed, manifest, and release-state record
- Public review queue, resolution ledger, and replay dashboard
- Bounded replay over maritime track evidence
- Internal watch, FOIA, and subrisk stages
- Lane-linked evidence deepening
- Public claim boundary remains narrower than internal workflow depth
Why Now
- As machine-mediated systems scale, raw outputs become easier to generate than to review.
- The burden shifts toward reconstruction, replay, boundary-setting, and accountability.
- That is where the supporting methodology matters.
- The system turns source surfaces into reviewable artifacts instead of leaving the chain implicit.
- That means later review can start from an evidence path, not just an execution trace.
- The public posture stays bounded: explicit `does prove / does not prove` lines on every lane.
- The goal is not to replace experts. It is to reduce reconstruction labor and improve review readiness.
Current Proof Surface
- First measured sample: `3` included cases
- Observed hours avoided band: about `0.95` to `1.42` hours per deliverable
- Position: starter calibration, not a final enterprise benchmark
Boundary Conditions
- `SSEJ` is already operationalized in public seismic and maritime lanes.
- Sovrient already publishes bounded evidence-governance surfaces.
- The pattern is portable across seismic, maritime, and internal lane-review workflows.
- Machine-readable and human-readable proof surfaces already exist.
- Not a complete autonomy stack.
- Not proof of live global maritime awareness.
- Not proof that every internal lane is yet ready for public publication.
- Public seismic: live
- Public maritime: bounded and real-source-backed
- GovCon / FOIA / subrisk: operational internally, selectively public