Abstract
This disclosure describes a single registry of signed records that serves two purposes at once: it is the record that certified AI systems and machines are governed by, and the record the public reads. Each certified system's runtime governor accepts a limit, safety profile or step-down only if that item is recorded in the registry and the system holds a current signed proof of its inclusion; an unrecorded limit is refused, so that what the public can see is what actually binds the system. Writers are scoped by role: a governance layer writes limits, profiles and step-downs; accredited bodies write certification seals, medals and credentials; owners write stops and restores; independent custodians write custody proofs; and each writes only in its own lane with its own key. Certification status is not a static entry but is derived continuously from the records it depends on, such as the last recorded drill, the currency of limits, open incidents and the status of the hardware, model and data beneath it, so that a seal lapses by itself when its supporting records lapse. Records are joined by typed cross-references, from the compute a model was trained on, through the model, its data and the skills derived from it, to the machine that runs them, the site that hosts it and the credentials of the people accountable for it; a revocation or defect recorded anywhere is propagated along these references so that every dependent record is flagged within seconds. Physical events are anchored by signed evidence from certified devices, such as sensor readings, robot recorder digests and accelerator custody proofs, so that the physical and digital records cross-reference each other. The registry is one logical record operated as federated shards with per-subject ordering and globally signed checkpoints, and independent witnesses co-sign checkpoints so that the registry cannot show one history to the public and another to the systems it governs. Cross-references use pseudonymous identifiers, and the full chain of links is visible only to parties with standing, so that cross-referencing cannot become surveillance. Finally, the registry is never in the stop path: systems run on their last signed checkpoint when the registry is unreachable, an outage can only tighten limits, never loosen them, and an owner's stop or restore never depends on the registry.
Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.
Recommended Citation
Wang, Edward D. H., "SI Registry™: One Signed, Append-Only Record that Both Governs Certified AI Systems and Informs the Public, in which Each System's Runtime Limits Bind Only When Recorded, Role-Scoped Writers Sign in Separate Lanes, Certification Status Is Derived Live from the Records It Depends On, Typed Cross-References Link Compute, Model, Data, Skill, Machine, Site and Credential so that a Change Propagates to Every Dependent Record, Physical Events Are Anchored by Signed Device Evidence, Independent Witnesses Prevent Split Views, Linking Is Limited to Protect Privacy, and No Stop or Restore Ever Depends on the Registry", Technical Disclosure Commons, ()
https://www.tdcommons.org/dpubs_series/12912