Vocabulary used across the essay series, the sovereign-record papers, the Tractatus framework and the blog — with cross-references between concepts and a pointer into the piece that develops each one. Every definition is given at its primary source: an RFC, a W3C Recommendation and its date, a NIST publication, an author and year. Where a source could not be opened, the entry says so instead of quoting it second-hand. English and te reo Māori.
403 entries ·
v1.0 ·
Last built against sources: 2026-10-12 ·
CC BY 4.0
Audience: Written for readers without a technical background — parish treasurers, rūnanga secretaries, family-history curators, and anyone reading the research papers or blog posts who would like a quick definition without leaving the page. Each entry covers a term a non-specialist might not recognise from context. There is no assumed level of prior knowledge; the explanations are for everyone.
Where the field disagrees: some terms have no agreed meaning, and a glossary that picks one quietly has taken a side for you. Those entries carry every competing definition with its source, marked as not agreed, and a line on what turns on the choice. 10 of the 386 entries do. Non-repudiation is the clearest: the IETF formally deprecates a definition NIST continues to publish.
Translation: English and te reo Māori are first-class. Standard technical terms are translated by DeepL. Te ao Māori vocabulary is presented in te reo with the English explanation. Entries marked [DeepL] are machine translations awaiting human review.
Suggest a term
Tell us a term you'd like explained. Anonymous. We'll review and add it if it fits the glossary's scope.
403 of 403 entries shown
Architecture & Sovereignty PrimitivesHanganga me ngā Mātāpono Mana Motuhake(68)
Attestation grade — Taumata whakamanatanga
A tag on every claim drawn from a sealed record, saying whose word its ordering rests on. Grade A (authority-attested) needs only the order of batches, fixed by an outside timestamp authority and usable by a third party. Grade O (operator-attested) needs the order of events inside one batch, which rests on the operator’s own hash chain and clock, so it is only as trustworthy as the operator. Any claim needing finer timing than the batch interval is grade O. Receipts carry the same two letters for a narrower question: grade A means an outside authority stamped the receipt before it was signed, and grade O means the authority did not answer in time and the receipt’s time rests on our own clock until the nightly sweep obtains a later outside stamp, which is stored beside the receipt.
Caution: ‘Graded claims’ in the policy paper is this disclosure: every assertion says whether it is independently attested or rests on the operator’s word.
Ata whakatūpato: ‘Graded claims’ in the policy paper is this disclosure: every assertion says whether it is independently attested or rests on the operator’s word.
[DeepL] He tapanga ki ia kerēme katoa i tangohia mai i tētahi rekoata kua hunaia, e tohu ana kei runga i te kupu o wai te tūāpapa o tōna whakaritenga. Ko te Kura A (kua whakamanahia e te mana whakahaere) e hiahiatia ana ko te raupapa o ngā kohinga anake, kua whakaritea e tētahi mana tohu wā o waho, ā, ka taea te whakamahi e tētahi tuatoru. Ko te Kura O (kua whakamanahia e te kaiwhakahaere) e hiahiatia ana ko te raupapa o ngā kaupapa i roto i tētahi kohinga kotahi, e tū ana ki tōna ake mekameka hash me tōna karaka a te kaiwhakahaere, nō reira he pono anake ia i runga i te pono o te kaiwhakahaere. Ko ngā kerēme e hiahia ana ki te whakahaere wā mātāmua atu i te wā wehenga o ngā kohinga he karaehe O. Ka mau i ngā rīpiti ngā reta e rua anō mō tētahi pātai whaiti ake: ko te karaehe A e tohu ana i tāpirihia e tētahi mana o waho he tohu wā ki te rīpiti i mua i tōna hainatanga, ā, ko te karaehe O e tohu ana kāore te mana i whakautu i te wā tika, nō reira kei runga i tō mātou ake karaka te wā o te rīpiti kia tae rānei ki te tirotiro ā-pō ka whiwhi he tohu wā o waho hou, ka penapenahia ki te taha o te rīpiti.
Written Δ: how often sealed records are rolled into a batch and sent to an outside timestamp authority. Two events in the same batch have no independently attested order, so the interval is the resolution of the evidence, not a performance or cost setting. Records independently timestamped every twenty-four hours give independent evidence about days and operator testimony about anything shorter. It should be chosen against the timescale of the conduct a third party must be able to check.
Caution: If batch boundaries are predictable an actor can place acts to keep their ordering on the operator’s word, so the construct draws boundaries from the unpredictable seed. The running prototype’s interval is currently set for token cost; the series says so and names moving it to an evidentiary basis as a priced decision still to be made.
Ata whakatūpato: If batch boundaries are predictable an actor can place acts to keep their ordering on the operator’s word, so the construct draws boundaries from the unpredictable seed. The running prototype’s interval is currently set for token cost; the series says so and names moving it to an evidentiary basis as a priced decision still to be made.
[DeepL] Ka tuhia ko Δ: te auau e whakakotahitia ai ngā rekoata kua hiritia ki roto i tētahi kohinga, ā, ka tukuna ki tētahi mana tohu wā o waho. Ko ngā kaupapa e rua i roto i te kohinga kotahi, kāore ō rāua raupapa kua whakaūngia motuhake, nō reira ko te wā wehenga te taumata whakatau o ngā taunakitanga, ehara i te tautuhinga mō te mahinga, mō te utu rānei. Ko ngā rekoata e whiwhi tohu wā motuhake ana ia rua tekau mā whā hāora, he taunakitanga motuhake mō ngā rā, ā, he kōrero anake a te kaiwhakahaere mō tētahi mea poto ake. Me whiriwhiri i tēnei kia hāngai ki te pae wā o ngā whanonga e tika ana kia taea e tētahi tuatoru te tirotiro.
Federation conducted as a direct, two-party agreement between specific installations rather than membership of a shared network. Each pair decides what may be shared, in which direction, and under what terms — and either side can withdraw at any moment. Because there is no central registry of participants, there is no single point whose compromise reaches everyone. Contrast a central agent-registration platform, where one registry makes every participant both discoverable and governable from one place.
[DeepL] Ko te Kotahitanga he whakaaetanga tūturu i waenga i ngā whakaurunga motuhake e rua, ehara i te mema o tētahi whatunga tiritahi. Ka whakatau ia tokorua he aha ngā mea ka taea te tiri, ki te aha te ahunga, me ngā tikanga — ā, ka taea e tētahi taha te wehe i ngā wā katoa. Nā te kore rēhita pokapū o ngā kaiuru, kāore he wāhi kotahi ka pāngia te katoa. Hei whakatairite, tirohia tētahi papanga rēhita pokapū mō ngā kaiuru, ā, mā tētahi rēhita kotahi ka kitea, ka whakahaerehia hoki ngā kaiuru katoa i tētahi wāhi kotahi.
A Tractatus framework service that blocks the AI from making certain classes of decision on its own — those that involve values, ethics, or cultural context — and instead routes them to human deliberation.
[DeepL] He ratonga anga Tractatus e aukati ana i te AI kia kaua e whakatau i ētahi momo whakataunga māna anō — arā, ko ēnei e pā ana ki ngā uara, ngā tikanga, me te horopaki ahurea — ā, ka tukuna ēnei ki te whiriwhiringa a te tangata.
An autonomy level at which a system acts without per-item approval, inside limits set in advance and enforced outside the model. The limits are the control; the approval is not.
What it decides: Whether the bound is enforced by something the model cannot argue with. A limit the model itself applies is a preference.
He aha tāna e whakatau ai: Ahakoa mēnā ka whakatinanahia te here e tētahi mea kāore e taea e te tauira te whakahē. He manakohanga te here e whakamahia ana e te tauira anō.
[DeepL] He taumata motuhake e mahi ana te pūnaha me te kore whakaaetanga mō ia tūemi, i roto i ngā here i whakaritea i mua, ā, e whakatinanahia ana i waho o te tauira. Ko ngā here te whakahaere; ehara te whakaaetanga.
Federation that is bilateral and strictly bounded — each tenant chooses its federation partners and what specific records may travel in each direction, rather than joining an open network where any participant can address any other.
[DeepL] He federation ā-rua, ā, he tino herea — ka kōwhiri ia kaiwhakamahi i āna hoa federation me ngā rekoata motuhake ka taea te tuku i ia ahunga, kaua e hono ki tētahi whatunga tuwhera e taea ai e ngā kaiuru katoa te whakapā atu ki tētahi atu.
The one fixed arrangement of a record’s content that is hashed and signed, so that anyone recomputing it from the same record gets the same bytes. Without one, two correct programs can serialise the same record differently and a valid signature would fail to verify.
[DeepL] Ko te whakarite kotahi, tūturu o ngā ihirangi o tētahi rēkoata kua hash-hia, kua hainatia hoki, kia whiwhi ai te tangata katoa i ngā baiti ōrite mēnā ka tātaitia anō mai i taua rēkoata kotahi. Ki te kore tēnei, ka taea e ngā pūmanawa tika e rua te whakarārangi i taua rēkoata kotahi i ngā huarahi rerekē, ā, kāore e taea te whakamana i tētahi hainatanga whai mana.
Cognition sovereignty — rangatiratanga o te māramatanga
The principle that a community using an AI is not just choosing a tool but importing a cognitive substrate — its training corpus, its assumptions, its registers. Cognition sovereignty asks who shaped that substrate and on what authority. Paper B's cognition layer is the architectural answer for the project's communities.
[DeepL] Ko te mātāpono, kāore te hapori e whakamahi ana i te AI e kōwhiri noa ana i tētahi taputapu, engari kei te kawemai i tētahi paparanga mātauranga — arā, tōna kohinga whakangungu, ōna whakapae, ōna reo. Ka pātai te rangatiratanga mātauranga, nō wai i hanga taua paparanga, ā, i runga i te mana āhea. Ko te paparanga mātauranga o Pepa B te whakautu hanganga mō ngā hapori o te kaupapa.
A failure pattern in which two systems intended to check each other share enough underlying assumptions that they fail in the same way at the same time. Guardian Agents use mathematical similarity (not another generative model) precisely to avoid this — the watcher must operate in a different epistemic domain from the watched.
[DeepL] He tauira hapa i roto i tēnei ka hapa ngātahi ngā pūnaha e rua e whāia ana kia tirotiro tētahi i tētahi, nā te nui o ngā whakaaro taketake e tiritiri ana, ā, ka hapa rātou i te ara kotahi i te wā kotahi. Ka whakamahi ngā Agent Guardian i te ōritetanga pāngarau (ehara i tētahi atu tauira whakaputa) kia karo ai i tēnei — me mahi te kaitirotiro i roto i tētahi rohe mātauranga rerekē i te mea e tirotirohia ana.
The Village's proposed next architectural step: a world model whose 'world' is a community's own governed state — provenance, consent, cultural status, relationships, collective benefit — rather than the physical environment. Given a proposed agentic action it predicts the action's effect on that state and feeds the prediction to the community's check-before-act gate, so the AI can foresee what an action would do to the people before it executes. Its immutable values layer is the community's constitutional floor; its trainable critic sits under community steering authority.
[DeepL] Ko te taahiraa hanganga e tūtohutia ana Village hei whai ake: he tauira ao ko tōna 'ao' he kāwanatanga ā-hapori ake — arā, te takenga mai, te whakaaetanga, te tūnga ahurea, ngā hononga, te painga ā-rōpū — kaua ko te taiao ā-tinana. Mēnā ka whakaarohia he mahi ā-agent, ka matapae ia i te pānga o taua mahi ki taua tūnga, ā, ka tuku i taua matapae ki te kuaha tirotiro-i- mua-i-te-mahi o te hapori, kia taea e te AI te matapae he aha te pānga o tētahi mahi ki ngā tāngata i mua i tōna whakatinana. Ko tōna paparanga uara kāore e taea te whakarerekē he papa ture matua o te hapori; ko tōna kaiwhakawā ka taea te whakangungu e noho ana i raro i te mana whakahaere a te hapori. Kua tūtohutia, kāore anō kia hangaia.
A downloadable checker that takes a Provenance record and an Email Decision Record shipped together, runs each product’s own unchanged checker (pinned by hash), and, when both are present, reports whether a signed email record names the lot reference. It says nothing about whether anything is lawful, complete or accurate as to content, or about who wrote the email.
[DeepL] He kaitātari ka taea te tikiake e tango ana i tētahi rēkōrā takenga mai me tētahi Rēkōrā Whakataunga īmēra i tukuna tahi, ka whakahaere i te kaitātari motuhake o ia hua kāore i whakarerekē (kua herea ki tētahi hash), ā, ina kei te wātea ngā mea e rua, ka pūrongo mēnā e tohu ana te rēkōrā īmēra kua hainatia i te tohutoro o te kohinga. Kāore e kōrero ana mēnā he ture, he oti, he tika rānei ngā ihirangi, kāore hoki e kōrero ana ko wai i tuhi i te īmēra.
The property that the sealed substrate holds only a hash of each event’s content, never the content itself: it records that an actor touched a record, under which authority and in what order, and nothing about what the record said. It is why the same construction works for any kind of record. The property does not extend upward — a reviewer examining a sampled record may need to read what was written, so any examination layer needs its own access rule.
Caution: Two matters the series treats as unresolved: erasure collides with a record from which nothing sealed is removed, and the EDPB’s Guidelines 02/2025 treat a hash as personal data; the series holds that sealing shape rather than content is a different object and says that position must be defended, not assumed. Sealing every read also builds a record of people’s attention to their own files — a legitimacy question before a detection one.
Ata whakatūpato: Two matters the series treats as unresolved: erasure collides with a record from which nothing sealed is removed, and the EDPB’s Guidelines 02/2025 treat a hash as personal data; the series holds that sealing shape rather than content is a different object and says that position must be defended, not assumed. Sealing every read also builds a record of people’s attention to their own files — a legitimacy question before a detection one.
[DeepL] Ko te āhuatanga e pupuri noa ai te papanga kua hiritia i tētahi hash anake o te ihirangi o ia kaupapa, kāore rawa i te ihirangi anō: ka tuhi ia kua pā atu tētahi kaiuru ki tētahi rekoata, i raro i tēhea mana, i roto i tēhea raupapa, ā, kāore he aha mō ngā kōrero o taua rekoata. Koia te take e whai hua ai te hanganga kotahi mō ngā momo rekoata katoa. Kāore tēnei āhuatanga e toro whakarunga — tērā pea me pānui e te kaiarotake e tirotiro ana i tētahi rekoata kua tohua hei tauira ngā mea i tuhia, nō reira me whai ture uru motuhake tō ia paparanga arotake.
The use of cryptographic signatures and proof chains so that every record carries verifiable evidence of who created it and when. Where the content itself is sealed — custodian records and governance receipts — it is fingerprinted as well, so any alteration to it shows. Underpins the claim that sovereignty is a property of the record rather than a permission the operator could revoke.
[DeepL] Ko te whakamahi i ngā haina whakamunatanga me ngā mekameka taunakitanga kia mau ai ki ia rēhita he taunakitanga ka taea te whakamana mō te tangata i hanga ai me te wā i hanga ai. Ki ngā ihirangi anō e huna ana — arā, ngā rēhita kaitiaki me ngā rīhita whakahaere — ka whakawhiwhia hoki ki tētahi tapumata, kia kitea ai ngā panonitanga katoa. E tautoko ana i te whakapae ko te rangatiratanga he āhuatanga o te rēhita, ehara i te whakaaetanga ka taea e te kaiwhakahaere te whakakore.
The nightly job that sends record digests to an outside time authority and stores each returned token whole, with its certificate chain, so a third party can check it with openssl ts -verify without contacting us. It stamps up to about fifty records per Village per night from its general budget, plus up to ten each of sealed custodian records, receipt retries and migration records. For ordinary records it is the only stamp, applied after the fact; for receipts it is the retry behind the stamp taken at the moment of issue.
[DeepL] Ko te mahi ā-pō e tuku ana i ngā whakarāpopototanga rekoata ki tētahi mana wā o waho, ā, ka rokiroki i ia tohu kua whakahokia katoa, me tōna mekameka tiwhikete, kia taea e tētahi atu te tirotiro mā openssl ts -verify, me te kore e whakapā mai ki a mātou. Ka tā ia tae noa ki te rima tekau pea ngā rekoata ia Village ia pō i tōna tahua whānui, ā, tae atu ki te tekau mō ia momo: ngā rekoata kaitiaki kua huna, ngā whakamātau anō mō ngā rīpeka, me ngā rekoata whakawhitinga. Mō ngā rekoata noa, koinei anake te tā, ka tāia i muri i te mahi; mō ngā rīhiti, ko te whakamātau anō kei muri i te tā i tangohia i te wā tuku.
The principle that the community whose life produces the data also governs what is done with it — including where it lives, who may read it, who may copy it, and what an AI may learn from it. Distinct from individual privacy: a collective right held by the community.
[DeepL] Ko te mātāpono, ko te hapori i whakaputa i ngā raraunga e whakahaere ana i ngā mahi e mahia ana ki aua raraunga — tae atu ki te wāhi e noho ai, ko wai ka taea te pānui, ko wai ka taea te kape, me ngā mea ka ako ai tētahi AI. He rerekē i te tūmataitinga takitahi: he tika ā-hapori e puritia ana e te hapori.
An autonomy level at which a system acts within a standing grant, with no per-action approval and no routine review.
What it decides: It is the level at which the four underlying properties stop being architectural preferences and become the only thing standing between the grant and the consequence.
He aha tāna e whakatau ai: Koinei te taumata e kore ai e noho hei manakohanga hoahoanga ngā āhuatanga e whā kei raro, engari ka noho hei mea kotahi anake e tū ana i waenga i te tuku me te hua.
[DeepL] He taumata rangatiratanga e mahi ana te pūnaha i raro i tētahi pūtea tautoko mau tonu, kāore he whakaaetanga mō ia mahi, kāore hoki he arotake auau.
To last and to transmit. Hamant treats this as a deep human drive and the reason writing matters: humans are the only living beings with access to very long time, and writing is how they get it. A sealed and timestamped record is an instrument of it.
[DeepL] Hei roa, hei tuku iho. Ka kī a Hamant he pūmanawa hōhonu tēnei o te tangata, ā, koia te take i hira ai te tuhi: ko te tangata anake ngā mea ora e whai wāhi ana ki te wā roa rawa, ā, ko te tuhi te huarahi hei whiwhi i taua wā. He taputapu tēnei o taua āhuatanga: he rēhita kua huna, kua tāia te wā.
Time supplied by an authority independent of every actor in the system, attesting that a sealed batch existed no later than a stated moment and unable to be induced to backdate it. It is the first trust anchor, and every commitment in the construct depends on it: without it the party making a commitment also controls the order of events, and the proof collapses. An outsider can check the attestation tokens without the operator’s help.
Caution: It fails by collusion or compromise. The draft standard asks for two authorities under distinct legal jurisdictions, one authority being a single point of both continuity failure and backdating.
Ata whakatūpato: It fails by collusion or compromise. The draft standard asks for two authorities under distinct legal jurisdictions, one authority being a single point of both continuity failure and backdating.
[DeepL] Ko te wā i whakaratoa e tētahi mana motuhake i ngā kaiuru katoa o te pūnaha, e whakaū ana i te noho o tētahi kohinga kua hiritia i mua i tētahi wā kua whakahuatia, kāore i muri iho, ā, kāore e taea te akiaki kia whakahokia te rā ki muri. Koinei te punga whakawhirinaki tuatahi, ā, e whakawhirinaki ana ngā herenga katoa o te hanganga ki a ia: ki te kore ia, ka whakahaere hoki te rōpū e tuku ana i te herenga i te raupapa o ngā kaupapa, ā, ka hinga te taunakitanga. Ka taea e tētahi o waho te tirotiro i ngā tohu whakaū, kāore he āwhina a te kaiwhakahaere e hiahiatia.
In this project’s vocabulary, the arrangement by which separate community installations (Villages) exchange data and AI consultation only through signed, consent-bound, scope-limited envelopes — with no shared central platform a third party could pivot through, and no authority above the participants that can revoke their standing. Withdrawal is immediate and exit is without penalty. Federation is how a community gains capability by composing with others rather than by joining a single platform it cannot govern.
[DeepL] I roto i te kupu o tēnei kaupapa, ko te whakarite e whakawhitiwhiti ai ngā tāutanga hapori motuhake (Villages) i ngā raraunga me ngā tohutohu AI mā ngā pūkete kua hainatia, kua herea ki te whakaaetanga, ā, he here ā-rohe anake — kāore he papa matua tiritahi hei huarahi mā tētahi atu, ā, kāore he mana kei runga ake i ngā kaiuru hei whakakore i tō rātou tūnga. Ka taea te tangohanga i te wā tonu, ā, kāore he whiu i te wehenga. Ko te kotahitanga te huarahi e whiwhi ai te hapori i te āheinga mā te mahi ngātahi me ētahi atu, kaua mā te hono ki tētahi papa kotahi kāore e taea e ia te whakahaere.
The bounded message format used when one tenant communicates with another across a federation link. The envelope carries only what the sending tenant has explicitly chosen to share, with provenance attached, so that federation does not become a back-door to cross-tenant content access.
[DeepL] Ko te hōputu karere herea e whakamahia ana ina whakawhiti kōrero tētahi kaipā ki tētahi atu mā tētahi hononga federation. Ka kawea e te kopaki anake ngā mea kua tohua motuhake e te kaipā tuku kia tohatoha, ā, kua tāpirihia ngā pārongo takenga, kia kore ai e noho te federation hei kuaha huna mō te uru ki ngā ihirangi a ētahi atu kaipā.
The mathematical shape of a sealed record. Let F_t be everything sealed by authority time t. Because the external clock only moves forward and the log is append-only, F_t only grows and is fixed once t has passed. So a detector can use only what was sealed by the time it runs; no actor can alter F_t after t; and corrections are new events referencing old ones — the past is annotated, never edited. This is the precise content of ‘the audit is intermittent, the evidence is not’.
Caution: A standard result composed, not a new one; Addendum M grades it established. A review at any moment covers everything since the record began, so there is no window to tidy up in.
Ata whakatūpato: A standard result composed, not a new one; Addendum M grades it established. A review at any moment covers everything since the record began, so there is no window to tidy up in.
[DeepL] Ko te āhua pāngarau o tētahi rekoata kua hiritia. Kia F_t ngā mea katoa kua hiritia i te wā t a te mana. Nā te mea ka anga whakamua anake te karaka o waho, ā, he tāpiri-anake te rangitaki, ka tipu anake a F_t, ā, ka pūmau ina kua pahure a t. Nō reira ka taea e te kaitirotiro te whakamahi anake i ngā mea kua hiritia i te wā e rere ana ia; kāore he kaiuru e taea te whakarerekē i a F_t i muri i a t; ā, ko ngā whakatikatika he kaupapa hou e tohu ana ki ngā kaupapa tawhito — ka tāpirihia he tuhipoka ki ngā mea o mua, kāore rawa e whakatikaina. Koinei te ihirangi tika o te kī: ‘he ā-wā noa te arotake, kāore te taunakitanga’.
The structural shape of a Tractatus deployment: codebase + framework services + Guardian Agents + community-owned records + community-aligned AI. Discussed in the Five-Component Tractatus Architecture blog post.
[DeepL] Te āhua hanganga o tētahi whakaurunga Tractatus: pūtake waehere + ratonga anga + Kaihautū Guardian + ngā rekoata e puritia ana e te hapori + AI e hāngai ana ki te hapori. I matapakihia i te pou rangitaki 'Five-Component Tractatus Architecture'.
The signed record issued when the Governance API reaches a verdict. It names which authority reached the decision, is signed by the tenant’s key (evaluation receipts by a labelled sandbox key), and is never issued unsigned. Each carries a time attestation block that records whether an outside authority stamped its time before it was signed. The label says who decided; it says nothing about when, which the time attestation covers.
[DeepL] Ka tukuna te rekoata kua hainatia ina tae te API Whakahaere ki tētahi whakataunga. Ka tohu i te mana i tae ki te whakataunga, ka hainatia e te kī o te kaipā (ngā rīhita aromatawai mā te kī sandbox kua tapaina), ā, kāore rawa e tukuna kia kore e hainatia. Ia rekoata ka mau he poraka whakamana wā e tuhi ana mēnā i tāia e tētahi mana o waho tōna wā i mua i tōna hainatanga. E kī ana te tapanga ko wai i whakatau; kāore he kōrero mō te wā, ā, ko te poraka whakamana wā e kapi ana i tērā.
A four-phase verification layer that checks AI responses against the community's own corpus and policies, using mathematical similarity rather than another generative model — the watcher operating in a different epistemic domain from the system it watches, to avoid common-mode failure.
[DeepL] He paparanga whakamana e whā ngā wāhanga e tirotiro ana i ngā whakautu AI ki te kohinga me ngā kaupapa here a te hapori, mā te whakamahi i te ōritetanga pāngarau, kaua mā tētahi atu tauira whakaputa — ko te kaitirotiro e mahi ana i tētahi rohe mātauranga rerekē i te pūnaha e tirohia ana, kia kore ai e puta he hapa aronga kotahi.
A community interaction mode in which ordinary members can reach only the moderators helping them, not one another. Used where the work demands privacy between participants — counselling, case management, mentoring, recruitment — so the person seeking help is never exposed to others in the same situation. The shape of the community, not just its infrastructure, enforces the boundary.
[DeepL] He aratau whakawhitinga hapori e taea ai e ngā mema noa te toro atu ki ngā kaiwhakahaere e āwhina ana i a rātou, ehara i te mea ki ētahi atu mema. Ka whakamahia tēnei i ngā wā e hiahiatia ana te tūmataitinga i waenga i ngā kaiuru — pērā i te tohutohu, te whakahaere take, te ārahitanga, te kimi kaimahi — kia kore ai e whakapuaki te tangata e rapu āwhina ana ki ētahi atu kei taua āhuatanga anō. Ko te āhua o te hapori, ehara i tōna hanganga anake, e whakakaha ana i te rohe.
Limits of the sayable — Ngā here o ngā mea e taea te kī
Wittgenstein's observation that some matters can be specified, measured, and verified, while others — involving values, ethics, cultural context — fundamentally cannot. What cannot be systematised must not be automated; the framework's foundational constraint.
[DeepL] Ko te kitenga a Wittgenstein, ka taea te tautuhi, te ine, me te whakamana i ētahi take, engari kāore e taea tērā mō ētahi atu — arā, ngā uara, te matatika, me te horopaki ahurea. Me kaua e aunoa ngā mea kāore e taea te whakarite pūnaha; koinei te here taketake o te anga.
Member-driven sovereign portability — Kawe rangatiratanga e ārahi ana e ngā mema
The right and the technical means for any member to export their own contributions in a portable form, without the operator's permission and without losing the cryptographic provenance that makes those records verifiable elsewhere.
[DeepL] Te tika me ngā tikanga hangarau kia taea e ia mema te kaweake i āna ake koha i roto i tētahi āhua kawe, me te kore whakaaetanga a te kaiwhakahaere, me te kore ngaro o te takenga whakamunatanga e whakamana ana i aua rekoata ki ētahi atu wāhi.
A single fingerprint standing for a whole batch of records, built by hashing the records in pairs and hashing the results together until one value remains. Sending that value to an outside timestamp authority dates every record in the batch at once — which is why attestation is cheap, one token covering a whole batch — and no record can be removed from a sealed batch without the root ceasing to match. The construct also publishes the roots outside the operator’s control as a second witness. The Email Decision Record builds one such root for each day, over that day’s receipts.
[DeepL] He tapumata kotahi e tū ana mō tētahi kohinga rēkōta katoa, i hangaia mā te whakakōpiri i ngā rēkōta i ngā tokorua, ā, mā te whakakōpiri tahi i ngā hua kia toe kotahi te uara. Ka tukuna taua uara ki tētahi mana tohu wā o waho, ā, ka whakawātea i ngā rēkōta katoa o te kohinga i te wā kotahi — koia te take he iti te utu mō te whakau, kotahi te tohu e kapi ana i te kohinga katoa — ā, kāore e taea te tango i tētahi rēkōta i tētahi kohinga kua huna, me kore e taurite tonu te pakiaka. Ka whakaputa hoki te hanganga i ngā pakiaka ki waho o te mana whakahaere a te kaiwhakahaere hei kaiwhiwhi tuarua. Ka hanga e te Rēkōta Whakatau īmēra tētahi pakiaka pēnei mō ia rā, i runga i ngā rēkōta whiwhinga o taua rā.
Charles Perrow's term. In systems that are both highly complex and tightly interdependent, accidents are properties of the configuration rather than anomalies to be engineered out. The question is when rather than whether.
[DeepL] Ko te kupu a Charles Perrow. I roto i ngā pūnaha e tino matatini ana, e tino whakawhirinaki hoki, he āhuatanga o te hanganga ngā aitua, ehara i te mea he hē hei whakakore. Ko te pātai he āhea, ehara i te mea mēnā.
Pluralistic Deliberation Orchestrator — Kaiwhakahaere Whiriwhiringa Maha
A Tractatus framework service that, when the AI hits a values conflict, halts and coordinates deliberation among the affected stakeholders rather than choosing on its own. Implements Berlin's value pluralism as a runtime architectural primitive.
[DeepL] He ratonga anga Tractatus e, ina pāngia te AI e tētahi taupatupatu uara, ka whakamutu, ka whakarite i te whakawhitiwhiti whakaaro i waenga i ngā hunga whai pānga, kaua e whiriwhiri māna anake. Ka whakatinana i te maha-uara o Berlin hei pūtake hanganga whakahaere-ā-wā.
Policy enforcement point — Te tūranga whakatinana kaupapa
The place at which a request is permitted or refused, sitting outside the model and seeing the call before the resource does.
What it decides: If the model is the authorisation engine there is no enforcement point, and the authority can be reached by argument rather than by credential.
He aha tāna e whakatau ai: Mēnā ko te tauira te pūnaha whakaaetanga, kāore he wāhi whakatinana, ā, ka taea te tae ki te mana mā te tautohetohe, ehara mā ngā tohu mana.
[DeepL] Ko te wāhi e whakaaetia ana, e whakakore rānei te tono, e noho ana i waho o te tauira, ā, ka kite i te karanga i mua i te rauemi.
A sequence of cryptographic signatures that links a record to its origin, its prior states, and the policy decisions that governed it. The platform periodically re-verifies older proof chains in batches so that tampering anywhere in the chain becomes detectable.
[DeepL] He raupapa hainatanga whakamuna e hono ana i tētahi rēkoata ki tōna takenga, ki ōna āhua o mua, me ngā whakataunga kaupapa here i whakahaere i a ia. Ka whakamātautau anō te papanga i ngā mekameka taunakitanga tawhito ia wā i roto i ngā kohinga, kia kitea ai mēnā ka whakarerekēhia tētahi wāhanga o te mekameka.
Any reusable unit of intelligence — a model version, policy, governance pack, routing rule — whose right to propagate is backed by evidence rather than assertion. Each version is immutable and carries its proof history, scope, and a rollback target, moving through the lifecycle draft → candidate → canary → active, always revocable to rolled-back. The concept descends from Necula’s proof-carrying code (1997); the Village implements it on sovereign infrastructure, not a blockchain.
[DeepL] He wāhanga atamai ka taea te whakamahi anō — he tauira putanga, he kaupapa here, he kohinga whakahaere, he ture rerenga — ko tōna mana ki te whakawhānui e tautokohia ana e ngā taunakitanga, ehara i te kī noa. He mea kore-huringa ia putanga, ā, ka kawe i tōna hītori taunakitanga, tōna whānuitanga, me tētahi whāinga whakahoki; e anga ana i te huringa oranga: tuhi → kaitono → kanara → kaha, ā, ka taea tonu te whakahoki ki te putanga o mua. Nō te waehere kawe taunakitanga a Necula (1997) tēnei ariā; ka whakatinanahia e Te Village ki runga i ngā hanganga rangatira, ehara i te poraka-tāroaroa.
The capacity of a system to remain stable in the short term and viable in the long term despite fluctuation. Built on heterogeneity, redundancy, slowness, incoherence and margin. Distinct from resilience, which is the capacity to return to a prior state after a shock; robustness is about staying inside a viable region rather than bouncing back to a point.
[DeepL] Ko te āheinga o tētahi pūnaha kia noho pumau i te wā poto, kia ora tonu i te wā roa ahakoa ngā huringa. I hangaia i runga i te rerekētanga, te tāpiritanga, te pōturi, te kore taurite me te pae. He rerekē ki te manawaroa, arā, te āheinga ki te hoki ki tētahi āhua o mua i muri i tētahi pā; ko te pakari e pā ana ki te noho tonu i roto i tētahi rohe e taea ai te ora, kaua ki te hoki anō ki tētahi wāhi kotahi.
The layer of record beneath any detection: events hashed at emission and chained, batches rolled to roots, roots attested by an authority independent of the operator, the sealer outside the agents’ write path, each mandate sealed alongside the actions it governs. It records that an actor touched a record, under which authority and in what order — never what the record contained. Both detection properties the series argues for fail on a record the examined party can edit, which is why the substrate comes first. The running implementation does not yet meet all of this; the What we claim page sets out where it stands.
Caution: It proves existence at a time, not completeness or truth: an intruder inside early enough can seal days of invention and every page will carry a perfect timestamp. What it removes is the retrofit — going back once the shape of the argument is known and adjusting the record to suit.
Ata whakatūpato: It proves existence at a time, not completeness or truth: an intruder inside early enough can seal days of invention and every page will carry a perfect timestamp. What it removes is the retrofit — going back once the shape of the argument is known and adjusting the record to suit.
[DeepL] Ko te paparanga o ngā rekoata kei raro i ngā āhuatanga kitenga katoa: ngā kaupapa i tāpirihia hei hash i te wā tukunga, ā, ka honoa ki tētahi mekameka; ngā puranga i hurihia ki ngā pakiaka; ngā pakiaka i whakamanahia e tētahi mana motuhake, kāore i raro i te whakahaere a te kaiwhakahaere; ko te kaiwhakakī kei waho i te ara tuhi a ngā māngai; ia whakahau ka whakakīhia tahi me ngā mahi e whakahaerehia ana e ia. Ka tuhi ia kua pa tētahi kaiwhakahaere ki tētahi rekoata, i raro i te mana aha, ā, i te raupapa aha — kāore rawa e tuhia he aha te ihirangi o taua rekoata. Ka hinga ngā āhuatanga kitenga e rua e whakapaetia ana e te raupapa i runga i tētahi rēkōta ka taea e te rōpū e arotakehia ana te whakarerekē, ā, koia te take i tuatahi ai te paparanga. Kāore anō te whakatinanatanga e rere nei kia tutuki i ēnei mea katoa; e whakaatu ana te whārangi 'What we claim' i tōna tūnga.
The component that makes records final: it hashes events as they are emitted, chains them, rolls batches into a root and sends the root to the outside timestamp authority. Its defining requirement is isolation — it runs outside the trust boundary of the agents whose conduct it records, and no agent can write to the log or reach the signing key. An append-only store administered by the party under examination is append-only at that party’s discretion.
Caution: A compromised sealer fails silently, producing records that look exactly like sound ones; an outsider checks sealed batches against what the authority attested, where a mismatch is not ambiguous. In the running prototype the operator can still reach the sealer; the series concedes this and names split custody of the seed, or derivation from a source nobody controls, as the next build.
Ata whakatūpato: A compromised sealer fails silently, producing records that look exactly like sound ones; an outsider checks sealed batches against what the authority attested, where a mismatch is not ambiguous. In the running prototype the operator can still reach the sealer; the series concedes this and names split custody of the seed, or derivation from a source nobody controls, as the next build.
[DeepL] Ko te wāhanga e whakamutunga ana i ngā rekoata: ka tātai hash ia i ngā kaupapa i te wā e tukuna ana, ka honoa hei mekameka, ka whakakotahitia ngā kohinga hei pakiaka, ā, ka tukuna taua pakiaka ki te mana tohu wā o waho. Ko tōna whakaritenga matua ko te wehenga — ka whakahaerehia i waho o te rohe whakawhirinaki o ngā kaihautū e tuhia ana ā rātou whanonga e ia, ā, kāore he kaihautū e āhei ki te tuhi ki te rangitaki, ki te tae rānei ki te kī hainatanga. He putunga tāpiri-anake e whakahaerehia ana e te rōpū e arotakengia ana, he tāpiri-anake i runga i te hiahia o taua rōpū anake.
A platform design in which the sovereignty a community needs is a property of the records themselves rather than a concession the operator may revoke. Cryptographic provenance, tenant-bounded policy enforcement, federation envelopes, and member-driven export each contribute to making the records irrevocably the community's.
[DeepL] He hoahoa tūāpapa e whakarite ana kia noho rangatiratanga o te hapori hei āhuatanga o ngā rēkōta anō, kaua hei mana whakaae ka taea e te kaiwhakahaere te whakakore. Ko te takenga whakamunatanga, te whakatinanatanga kaupapa here e herea ana ki ngā kaipā, ngā anga kotahitanga, me te kaweake e ārahi ana ngā mema, ka āwhina katoa kia kore rawa e taea te whakakore i ngā rēkōta, ā, kia noho rātou hei rawa o te hapori.
One of the foundational architectural building blocks that, composed together, make sovereignty a property of the records rather than a permission the operator may revoke. Paper A names cryptographic provenance, tenant isolation, the federation envelope, member-driven sovereign portability, the tenant key store, the proof chain, and the policy-inheritance engine as primitives. "Primitive" in the computer-science sense: irreducible building blocks that compose to produce the architectural property.
[DeepL] Ko tētahi o ngā pūtake hanganga matua e huihui ana hei whakarite kia riro te rangatiratanga hei āhuatanga o ngā rekoata, kaua hei whakaaetanga ka taea e te kaiwhakahaere te whakakore. Ko te Pepa A e kī ana ko te takenga whakamunatanga, te wehewehe kiritaki, te anga kotahitanga, te kawe rangatiratanga e ārahi ana e ngā mema, te whare kī kiritaki, te mekameka taunakitanga, me te pūnaha tuku tuku kaupapa here hei pūtake. Ko te kupu "pūtake" i te horopaki pūtaiao rorohiko: he pūtake hanga kāore e taea te whakaiti, ā, mā te whakakotahi ka puta he whakamana.
An autonomy level at which a system acts and a person reviews afterwards, on a sample or on exception rather than on every action.
What it decides: Whether the review is capable of finding anything. Sampling that never reaches the class of action that goes wrong is supervision in name.
He aha tāna e whakatau ai: Ahakoa mēnā ka taea e te arotake te kitea he aha rānei. He tirotiro anake tēnei, kāore e tae ki te momo mahi e hapa ana; he tirotiro ingoa noa iho.
[DeepL] He taumata motuhake e mahi ana te pūnaha, ā, ka arotakehia e tētahi tangata i muri mai, i runga i tētahi tauira, i runga rānei i ngā take motuhake, kaua i runga i ia mahi katoa.
A generic term in this project's vocabulary meaning the bounded set of points at which a particular kind of interaction can take place. Always paired with a qualifier — attack surface, API surface, evaluation surface, review surface, write surface, audit surface, request surface, governance surface — that names what kind of interaction. Asking "what is the surface for X?" is the project's default way of bounding a concern: name the surface, then design defences or affordances for it. The framing pairs naturally with sovereignty primitives (which compose to bound a surface) and with threat models (which enumerate what an adversary could do at a given surface).
[DeepL] He kupu whānui i roto i te rārangi kupu o tēnei kaupapa e tohu ana i te huinga herea o ngā tohu e taea ai te tūhonohono motuhake. Ka hono tonu ki tētahi kupu whakamārama — mata whakaeke, mata API, mata aromatawai, mata arotake, mata tuhi, mata arotake pūtea, mata tono, mata whakahaere — e tohu ana i te momo tūhonohono. Ko te pātai "He aha te mata mō X?" te huarahi taunoa a te kaupapa hei here i tētahi āwangawanga: ingoaia te mata, kātahi ka hoahoa ārai, ka whakarato āheinga rānei mōna. Ka hono tēnei anga ki ngā pūtake rangatiratanga (e huihui ana hei here i tētahi mata) me ngā tauira mōrearea (e whakarārangi ana i ngā mahi ka taea e tētahi hoariri i tētahi mata).
The architectural rule, enforced at the data layer, that one tenant's content is not exposed to or modifiable by another tenant — including by a platform administrator. Tenant isolation is treated as foundational; if code allows a platform admin to read tenant content, that is a security defect, not a feature.
[DeepL] Ko te whakarite hanganga e whakarite ana kia kore rawa e kitea, e whakarerekē rānei e tētahi atu kaiwhakamahi te ihirangi o tētahi kaiwhakamahi — tae atu ki te kaiwhakahaere papanga. Ka whakaarohia te wehewehe kaiwhakamahi hei tūāpapa; mēnā ka āhei te waehere i te kaiwhakahaere papanga ki te pānui i te ihirangi o tētahi kaiwhakamahi, he hapa haumaru tērā, ehara i te āhuatanga.
A query, operation, or service that always filters by the requesting tenant's identifier. The standing rule is: every database query filters by tenantId; never bypass.
[DeepL] He pātai, he whakahaere, he ratonga rānei e tātari tonu ana mā te tuakiri o te kaipātai e tono ana. Ko te ture tū tonu: ia pātai pātengi raraunga ka tātari mā te tenantId; kaua rawa e karo.
The database identifier that binds every record to a single tenant. Stored on every domain model. Indexed for fast filtering. The mechanism by which tenant isolation is enforced at the data layer.
[DeepL] Ko te tohu raraunga e here ana i ia rekoata ki tētahi kaipā kotahi. Kei ia tauira rohe. Kua tāurutia kia tere ai te tātari. Ko te pūnaha e whakatinana ana i te wehewehe kaipā i te papa raraunga.
Time attestation — Whakamana wāHe poraka whakamana wā e tuhi ana mēnā i tāia e tētahi mana o waho tōna wā i
An outside authority’s signed statement of when a receipt’s digest existed. Before a receipt is signed, its digest is sent to an RFC 3161 authority and the answer is included in what the signature covers, so it cannot be added or altered afterwards. If the authority does not answer in time the block says so, with the reason, and the receipt is grade O. The default authority is Certum, in Poland; its stamp is evidence of the time and carries no legal presumption. A qualified authority (Aruba PEC, in Italy) is contracted and built in, and is available on request; with it a receipt carries stamps from two authorities in two jurisdictions.
[DeepL] He tauākī hainatia nā tētahi mana o waho mō te wā i noho ai te whakarāpopototanga o tētahi rīpiti. I mua i te hainatanga o tētahi rīpiti, ka tukuna tōna whakarāpopototanga ki tētahi mana RFC 3161, ā, ka whakaurua te whakautu ki roto i ngā mea e kapi ana i te haina, nō reira kāore e taea te tāpiri, te whakarerekē rānei i muri mai. Ki te kore te mana whakahaere e whakahoki i te wā tika, ka kī te poraka pēnei, me te whakamārama i te take, ā, ka noho te rīpeka hei karaehe O. Ko Certum i Poroni te mana whakahaere taunoa; ko tana tā he taunakitanga mō te wā, ā, kāore he whakapae ā-ture e mau ana. Kua kirimana tētahi mana whakahaere whai tohu (Aruba PEC i Itari), ā, kua whakaurua, ā, ka wātea i runga i te tono; māna, ka mau i te rīpeka ngā tā mai i ngā mana whakahaere e rua i roto i ngā mana whakahaere ture e rua.
A development-time governance framework for AI assistance — six services that constrain what the AI building the platform may decide on its own (BoundaryEnforcer, ContextPressureMonitor, CrossReferenceValidator, InstructionPersistenceClassifier, MetacognitiveVerifier, PluralisticDeliberationOrchestrator) — together with Guardian Agents that verify outputs after the fact. Open source under EUPL-1.2.
[DeepL] He anga whakahaere i te wā whakawhanake mō te āwhina AI — e ono ngā ratonga e here ana i ngā whakatau a te AI e hanga ana i te papanga (BoundaryEnforcer, ContextPressureMonitor, CrossReferenceValidator, InstructionPersistenceClassifier, MetacognitiveVerifier, PluralisticDeliberationOrchestrator) — me ngā Agent Kaitiaki e whakamana ana i ngā hua i muri i te mahi. Puna tuwhera i raro i te raihana EUPL-1.2.
One of the four places where somebody still has to be trusted once everything else is derived. Addendum M names them as its assumptions: A1, an external clock nobody inside can backdate; A2, a seed unpredictable to every actor, the operator included, until revealed; A3, a sealer nothing can write past; A4, a written authority that permits no harmful act. Three are engineering and custody, each with something an outsider can check. The fourth is governance — ‘the mathematics starts after them’.
Caution: The series claims these four are exhaustive and everything else is derived. A demonstrated fifth would count against it.
Ata whakatūpato: The series claims these four are exhaustive and everything else is derived. A demonstrated fifth would count against it.
[DeepL] Ko tētahi o ngā wāhi e whā e tika tonu ana kia whakawhirinakitia tētahi tangata, i muri i te whakaputanga o ngā mea katoa atu. Ka whakahuatia e te Addendum M ēnei hei whakapae mōna: A1, he karaka o waho kāore e taea e tētahi kei roto te whakahoki ki muri; A2, he kākano kāore e taea te matapae e ngā kaiuru katoa, tae atu ki te kaiwhakahaere, kia whakapuakina rā anō; A3, he kaihiri kāore he mea e taea te tuhi i tua atu i a ia; A4, he mana tuhi kāore e whakaae ki tētahi mahi kino. E toru he hangarau me te tiaki, ā, kei ia mea tētahi āhuatanga ka taea e tētahi o waho te tirotiro. Ko te tuawhā he whakahaere — ‘ka tīmata te pāngarau i muri i a rātou’.
Isaiah Berlin's argument that some values are genuinely incommensurable — privacy and safety cannot be ranked on a single scale without imposing one community's priorities on everyone else. The architecture must accommodate plural moral frameworks rather than flatten them.
[DeepL] Ko te whakapae a Isaiah Berlin, arā, he tino kore e taea te whakataurite i ētahi uara — kāore e taea te whakarārangi i te tūmataitinga me te haumaru i runga i tētahi ine kotahi, me te kore e whakanoho i ngā manakohanga o tētahi hapori ki runga i ētahi atu katoa. Me whakaae te hoahoanga ki ngā anga matatika maha, kaua e whakaiti i a rātou.
A network layer specifically designed for agent-to-agent interaction, proposed in the Cyberspace Administration of China's 2026 framework. The architecture envisions agent identity systems, a registration platform, capability declaration, search-and-discovery services, and compliance certification — making intelligent agents directly addressable across a national network. Tractatus contrast: where this model registers agents centrally, Tractatus operates the inverse via bounded federation — each tenant chooses its partners and exactly which records may travel in each direction; the control surface lives at the member-tenant boundary, not the network gateway.
[DeepL] He paparanga whatunga i hangaia motuhake mō te whakawhitinga ā-kaiārahi ki ā-kaiārahi, i tūtohutia i roto i te anga 2026 o te Whakahaere ā-Ipurangi o Haina. E whakaaro ana te hanganga ki ngā pūnaha tuakiri kaiārahi, he tūāpapa rēhitatanga, te whakapuaki āheinga, ngā ratonga rapu me te kitenga, me te tiwhikete hāngai — kia taea ai te toro tika ki ngā kaiārahi atamai puta noa i te whatunga ā-motu. Whakataurite ki Tractatus: i te mea ka rēhita tēnei tauira i ngā māngai ki te pokapū, ka whakahaere Tractatus i te huringa whakamuri mā te kotahitanga herea — ka kōwhiri ia kaipupuri i āna hoa, me ngā rekoata ka taea te tuku i ia ahunga; kei te rohe o te mema-kaipupuri te mata whakahaere, ehara i te tomokanga whatunga.
Substrate-vs-runtime distinction — Te wehewehe i waenga i te paparanga me te wā whakahaere
The architectural division between safety mechanisms that live in the AI's runtime behaviour (system prompts, output filters, faithful-translation assumptions) and those that live in distributed possession independent of the agent (PKI, federation envelopes, portable records). Runtime mechanisms fall when a deeper network reasons around them; substrate mechanisms persist because their integrity does not depend on the agent's cooperation.
[DeepL] Ko te wehenga hanganga i waenga i ngā pūnaha haumaru e noho ana i roto i ngā whanonga whakahaere o te AI (ngā whakahau pūnaha, ngā tātari putanga, ngā whakapae mō te whakamāoritanga pono) me ērā e noho ana i roto i te pupuri tohatoha motuhake i waho atu o te kaiwhakahaere (PKI, ngā anga hononga ā-rōpū, ngā rekoata kawe). Ka hinga ngā pūnaha whakahaere ina ka whakaaro hohonu ake tētahi whatunga; ka mau tonu ngā pūnaha paparanga, nā te mea kāore tō rātou pono e whakawhirinaki ki te mahi tahi a te kaiwhakahaere.
The property a decision has when its harm cannot be undone by recording regret — once acted on, the world cannot be restored to its prior state. One of the four boundary categories the router uses to decide whether a question routes to deliberation rather than direct AI response. Treated as fallible: a decision the community later judges to have been wrongly classified is itself recorded, appealable, and used to revise the router's behaviour.
[DeepL] Ko te āhuatanga o tētahi whakataunga, arā, kāore e taea te whakahoki i tōna kino mā te tuhi i te pōuri — i te wā kua mahia, kāore e taea te whakahoki anō i te ao ki tōna āhua i mua. Ko tētahi o ngā kāwai rohe e whā e whakamahia ana e te kaituku huarahi hei whakatau mēnā ka tukuna te pātai ki te whiriwhiringa, kaua ki te whakautu AI tūturu. Ka whakaarohia he hē: ko tētahi whakataunga i whakatauria e te hapori i muri mai he hē tana whakarōpūtanga; ka tuhia taua whakataunga, ka taea te kerēme, ā, ka whakamahia hei whakarerekē i ngā whanonga o te kaituku huarahi.
Social-layer attack surface — Te mata whakaeke o te paparanga pāpori
The class of attacks the substrate mechanisms (PKI, federation, portability) do not close: persuasion at scale, mass-coordinated impersonation across federated villages, and synthesised consent across enough endpoints to defeat distributed consensus. Named here as an open frontier — the architecture's substrate-layer answer holds; the social-layer answer is not yet settled. What is being done about it is recorded alongside what is not.
[DeepL] Ko te kāwai o ngā whakaeke kāore e ārai i a rātou e ngā pūnaha turanga (PKI, federation, portability): te whakatenatena i te taumata whānui, te whakakape ā-nui kua whakaritea puta noa i ngā kāinga honohono, me te whakaaetanga hangaia puta noa i ngā tauranga mutunga e ranea ana hei whakakore i te whakaaetanga tohatoha. Kua ingoaia konei hei rohe tuwhera — kei te tū te whakautu o te paparanga turanga o te hanganga; kāore anō kia whakatauhia te whakautu o te paparanga pāpori. Kei te tuhia ngā mahi e mahia ana mō tēnei, me ngā mahi kāore anō kia mahia.
The architectural posture that safety claims are about combinatorial cost and joint probability of N-independent-mechanism failure, not about proof. A defence-in-depth stack bounds the probability of bypass to a useful direction; it does not promise the probability is zero. Replaces the proof register the early framework drafts used.
[DeepL] Ko te tūāhua hoahoanga e mea ana ko ngā kerēme haumaru he pā ki te utu whakakotahitanga me te tūponotanga ngātahi o te ngoikore o ngā pūnaha motuhake e N, ehara i te pā ki te whakamana. Ka herea e tētahi pūrua ārai hohonu te tūponotanga o te huarahi huri ki tētahi ahunga whaihua; kāore ia e oati ka kore rawa taua tūponotanga. Ka whakakapi i te rēhita whakamana i whakamahia e ngā tuhinga tuatahi o te anga.
The work an attacker must do to defeat a stack of N independent mechanisms — each round-trip the attacker compounds against. The architectural claim is that costs add up, not that any one mechanism is unbreakable. Allows safety to be discussed in terms an adversary's economics actually constrain.
[DeepL] Ko te mahi me mahia e te kaiwhakatake kia whakakore i tētahi kohinga o N pūnaha motuhake — ia huringa huri e whakakotahitia ana e te kaiwhakatake hei whakakaha i āna whakaeke. Ko te kerēme hoahoanga, ko te mea ka piki haere ngā utu, ehara i te mea kāore e taea te pakaru tētahi pūnaha kotahi. Ka āhei te matapaki i te haumaru i roto i ngā tikanga e herea ana e ngā ōhanga a te hoariri.
An architectural pattern in which multiple safety mechanisms operate at different layers, each catching cases the others miss. Replaces the assumption that any single mechanism is the architectural safety claim. The router, the framework, the federation envelope, and the sovereign record are independent layers of this stack.
[DeepL] He tauira hanganga e mahi ana ngā pūnaha haumaru maha i ngā papa rerekē, ā, ka hopu ia papa i ngā take kāore i hopukina e ērā atu. Ka whakakapi i te whakaaro ko tētahi pūnaha kotahi anake te take haumaru o te hanganga. Ko te kaituku ara, te anga, te uhi kotahitanga, me te rēkōta rangatira he papa motuhake o tēnei pūrua.
Boundary category fallibility — Hē o te kāwai rohe
The architectural acknowledgement that the four boundary categories (irreversibility, values-laden decision, cultural-context dependence, unprecedented) are negotiated by the community in practice rather than fixed essences. Classification errors are recorded, appealable, and used to revise the router's behaviour.
[DeepL] Ko te whakaae ā-hoahoanga e mea ana ka whakawhitiwhitia e te hapori ngā kāwai rohe e whā (kāore e taea te huri, whakataunga kī ana i ngā uara, whakawhirinaki ki te horopaki ahurea, kāore i mua) i roto i ngā mahi, kaua ko ngā pūtake tūturu. Ka tuhia ngā hapa whakarōpūtanga, ka taea te kerēme, ā, ka whakamahia hei whakarerekē i te whanonga o te kaituku ara.
Post-Tractarian semantics — Arorangi kupu i muri i te Tractarian
The operative philosophy of the framework's later iterations: meaning emerges from use, not from picture-theory correspondence between word and world. The framework's name invokes early Wittgenstein for the architectural frame (limits of the sayable); its working posture is post-Tractarian.
[DeepL] Ko te ariā whakahaere o ngā whakahōutanga whakamutunga o te anga: ka puta te tikanga i te whakamahinga, ehara i te hāngai ā-whakaahua i waenga i te kupu me te ao. Ka karanga te ingoa o te anga ki a Wittgenstein o mua mō te anga hanganga (ngā here o ngā mea e taea te kī); ko tōna tūnga mahi he muri i te Tractatus.
Community-negotiated classification — Te whakarōpūtanga i whakawhitiwhiti kōrero e te hapori
The architectural commitment that boundary categories are determined through ongoing community deliberation rather than fixed by the framework. The router is a starting position; the appeal mechanism is the response to its being wrong.
[DeepL] Ko te ū ki te hanganga aronga, arā, ko te whakatau i ngā kāwai rohe mā te whakawhitiwhiti kōrero tonutanga a te hapori, kaua e whakaritea e te anga. Ko te kaitahuri he tūnga tīmatanga; ko te pūnaha tono he urupare ki tōna hē.
Values-laden decision — Whakataunga kua whakakīia ki ngā uara
One of the four boundary categories: a decision whose right answer depends on values the community holds rather than facts the community can verify. The router classifies such decisions to deliberation rather than answering them directly.
[DeepL] Ko tētahi o ngā kāwai rohe e whā: he whakatau e whakawhirinaki ana tōna whakautu tika ki ngā uara e mau ana te hapori, kaua ki ngā kōrero ka taea e te hapori te whakamana. Ka whakarōpūhia e te rōuta ēnei whakatau ki te wānanga, kaua ki te whakautu tika.
Cultural-context dependence — Te whakawhirinaki ki te horopaki ahurea
One of the four boundary categories: a decision whose right answer requires cultural context (tikanga, custom, ritual) the AI cannot reliably hold. The router classifies such decisions to community deliberation by default.
[DeepL] Ko tētahi o ngā kāwai rohe e whā: he whakataunga e hiahiatia ana te horopaki ahurea (tikanga, kawa, ritenga) hei whakautu tika, ā, kāore e taea e te AI te pupuri i taua horopaki i runga i te pono. Ka whakarōpūhia e te kaituku whatunga ēnei whakataunga ki te whiriwhiringa ā-hapori hei taunoa.
Unprecedented decision — He whakataunga kāore i rongo i mua
One of the four boundary categories: a decision the community has not encountered before, where prior practice provides no clear precedent. The router classifies such decisions to deliberation rather than extrapolating from training data.
[DeepL] Ko tētahi o ngā kāwai rohe e whā: he whakatau kāore anō te hapori kia tūtaki ai i mua, ā, kāore he tauira mārama i ngā tikanga o mua. Ka whakarōpūhia e te rōtā ērā whakatau ki te wānanga, kaua ki te whakawhānui i ngā raraunga whakangungu.
Routing-around vs reasoning-about — Te whakarite huarahi huri noa vs te whakaaroaro mō
The architectural distinction between substrate mechanisms an attacker cannot route around (PKI, federation, portability — they exist as distributed possession) and runtime mechanisms an attacker can reason about (system prompts, output filters — they are surface behaviour). The framework's safety claim concerns the former; the latter is fallible.
[DeepL] Ko te rerekētanga hanganga i waenga i ngā tikanga tūāpapa kāore e taea e te kaiwhakatumatuma te huri huarahi (PKI, federation, portability — he rawa tohatoha ēnei) me ngā tikanga whakahaere ka taea e te kaiwhakatumatuma te whakaaroaro (ngā whakahau pūnaha, ngā tātari putanga — he whanonga mata ēnei). Ko te kerēme haumaru o te anga e pā ana ki te tuatahi; ko te tuarua he mea hē.
Mechanism design (not capability) — Hoahoa pūnaha (ehara i te āheinga)
The architectural premise that safety mechanisms succeed by being designed, not by being capable. A signature is not intelligent — its safety property follows from cryptographic mathematics that the agent can reason about but cannot evade. The framework's substrate layer favours mechanism over capability.
[DeepL] Ko te ariā hanganga e mea ana ka angitu ngā pūnaha haumaru mā te hoahoa, ehara mā te āheinga. Ehara te haina i te mātau — nō ngā pāngarau whakamuna tōna āhuatanga haumaru, ā, ka taea e te kaiwhakamahi te whakaaroaro, engari kāore e taea e ia te karo. Ko te paparanga turanga o te anga e whakakaha ana i ngā pūnaha i runga i ngā tikanga, kaua i runga i ngā āheinga.
The architectural choice that the boundary router emits one of three states (allow, deny, escalate-to-human), not two. The third state is load-bearing: it carries the architectural acknowledgement that significant decisions are not binary at the time of decision and that the deliberation mechanism is part of the answer.
[DeepL] Ko te kōwhiringa hoahoanga e tukuna ana e te kaitirotiro rohe he toru ngā tūnga (whakaae, whakakahore, whakawhiti ki te tangata), ehara i te rua. Ko te tūnga tuatoru he tūnga e kawe ana i te kawenga: e kawe ana i te whakaae hoahoanga, arā, kāore ngā whakataunga nui e rua noa i te wā e whakatauhia ana, ā, he wāhanga o te whakautu te tikanga whiriwhiringa.
Escalate state as load-bearing — Whakanuia te tūnga hei kaikawe uta
The architectural property that the router's escalate-to-human-deliberation output is not a failure mode but an intended output. It carries the cases the framework correctly declines to answer, and the deliberation mechanism is what makes those cases survive a system that otherwise has to act.
[DeepL] Ko te āhuatanga hanganga e whakaatu ana ko te putanga 'escalate-to-human-deliberation' a te rōuta ehara i te aratau hapa, engari he putanga i whakaarohia. Ka kawea mai e ia ngā take e whakakore tika ana te anga ki te whakautu, ā, ko te pūnaha whiriwhiringa te mea e āhei ai aua take kia ora i roto i tētahi pūnaha e tika ana kia mahi.
The trinary-logic move that the framework's three-state router draws on: allow, deny, and a third state that admits the right answer is unsettled at the time of decision. Garden's work establishes that binary-output safety architectures collapse a load-bearing class of decisions; the framework's third state preserves it.
[DeepL] Ko te nekehanga arorau toru e whakamahia ana e te rōtera ā-tūāhua e toru o te anga: whakaae, whakahē, me tētahi tuāhua tuatoru e whakaae ana ki te whakautu tika, ā, kāore i te tau te tuāhua tuatoru i te wā whakatau. E whakaatu ana ngā mahi a Garden ka whakakorehia e ngā hanganga haumaru whakaputa rua tētahi kāwai whakatau e kawe ana i te kawenga; ko te tuāhua tuatoru o te anga e tiaki ana i taua kāwai.
An attack pattern: an adversary fabricates enough endpoints, identities, or signals to manufacture the appearance of distributed consensus, defeating a system that relies on consensus as a safety signal. The substrate layer (PKI, federation) does not fully close this; the social-layer answer is open frontier.
[DeepL] He tauira whakaeke: ka waihanga te hoariri i ngā tauranga mutunga, ngā tuakiri, ngā tohu rānei kia nui ai te hanga i te āhua o te whakaaetanga tohatoha, ā, ka whakakore i tētahi pūnaha e whakawhirinaki ana ki te whakaaetanga hei tohu haumaru. Kāore te paparanga tūāpapa (PKI, federation) e kati ana i tēnei; ko te whakautu o te paparanga pāpori he rohe tuwhera.
Trust-network manipulation — Te whakarerekē i te whatunga whakawhirinaki
An attack pattern: an adversary coordinates impersonation, falsification, or compromised endpoints across federated villages to manipulate the trust network's signals at scale. Substrate mechanisms close per-record integrity; the network-level coordination problem remains in the social-layer attack surface.
[DeepL] He tauira whakaeke: ka whakaritea e te hoariri te whakakapi ingoa, te whakawhē, me ngā pito kua pakaru puta noa i ngā kāinga honohono kia whakarerekē i ngā tohu o te whatunga whakawhirinaki i te rahi. Ka whakakīa e ngā tikanga pūtake te pono mō ia rekoata; kei te noho tonu te raru whakarite taumata whatunga i te mata whakaeke o te paparanga pāpori.
Post-quantum signature migration — Te whakawhitinga haina i muri-quantum
The architectural plan for migrating the substrate's PKI from current signature schemes (vulnerable on a sufficiently large quantum computer) to the NIST post-quantum standards, finalised in August 2024. Per-record forgery remains costly even on a CRQC; mechanisms 2 (federation) and 3 (portability) do not depend on signature integrity. Horizon: 10-30 years. ML-DSA-65, one of those NIST standards, is built into our code and can add a second signature beside the Ed25519 one. The platform switch is not set on either production server, so no record carries one today.
[DeepL] Ko te mahere hanganga mō te whakawhiti i te PKI o te paparanga mai i ngā hōtaka haina o nāianei (e mōrearea ana i runga i tētahi rorohiko quantum nui rawa) ki ngā paerewa post-quantum a NIST, i whakamanahia i Akuhata 2024. E nui tonu ana te utu mō te hanga tārua mō ia rekoata, ahakoa i runga i tētahi CRQC; kāore ngā tikanga 2 (federation) me te 3 (portability) e whakawhirinaki ki te pono o te haina. Pae wā: 10–30 tau. Ko ML-DSA-65, tētahi o aua paerewa NIST, kua whakaurua ki tō mātou waehere, ā, ka taea e ia te tāpiri i tētahi hainatanga tuarua i te taha o te hainatanga Ed25519. Kāore te huringa papanga i tautuhia ki runga i ngā tūmau whakaputa e rua, nō reira kāore he rekoata e mau ana i tētahi i tēnei rā.
Governance, Law & PolicyWhakahaere, Ture, me te Kaupapa Here(86)
Accountable obligation — Haepapa whai kawenga
The capacity to be held responsible for a decision. Advanced here as the narrow and defensible claim about what humans uniquely bear, in place of essentialist claims about human nature: it concerns who can be answerable, and requires no verdict on consciousness.
[DeepL] Te āheinga kia mau ki te kawenga mō tētahi whakataunga. E whakatairangahia ana i konei hei kerēme whaiti, e taea te tiaki mō te mea motuhake e mau ana ki te tangata, hei whakakapi i ngā kerēme taketake mō te āhua tangata: e pā ana ki te tangata ka taea te whakautu, ā, kāore e hiahiatia he whakataunga mō te māramatanga.
A measure of how many people use a tool, used as a proxy for whether adopting it was worthwhile. It records use and not whether the uses were good ones, whether failures were visible, or whether anybody could have refused.
What it decides: It is the one measure that gets easier to report as the situation gets worse, because the fastest way to raise it is to remove the friction that makes refusal possible.
He aha tāna e whakatau ai: Koinei te ine kotahi e māmā ake ana te pūrongo i a ia i te kino haere o te āhuatanga, nā te mea ko te huarahi tere rawa ki te whakanui i a ia, ko te tango i te aukatinga e āhei ai te whakahē.
[DeepL] He ine i te tokomaha o ngā tāngata e whakamahi ana i tētahi taputapu, hei tohu whakakapi mēnā he whai take te whakamahi. Ka tuhi i te whakamahinga, ehara i te mea mēnā he pai aua whakamahinga, mēnā i kitea ngā hapa, rānei mēnā i taea e tētahi te whakahē.
The list of agents a tenant has recorded, each entry naming the agent’s reference and the identity it is bound to. Each entry is a signed, hash-chained record with its own receipt. It does not yet record which agent created which, or when an agent’s authority lapses. The Email Decision Record keeps a separate live register that records each agent’s access scope, flags drift from it as a recommendation to quarantine, and lets an agent be suspended or offboarded; that register is configuration, not a sealed record.
[DeepL] Ko te rārangi o ngā kaiwhakahaere kua tuhia e te kaipāpā, ā, i ia tomokanga ka ingoa te tohu o te kaiwhakahaere me te tuakiri e herea ana ki a ia. He rekoata hainatia, me te here hash-chained ia tomokanga, ā, he rīpeka motuhake tō ia. Kāore anō kia tuhia ko tēhea kaiwhakahaere i hanga i tēhea, ā, kāore hoki i tuhia te wā ka pau ai te mana o tētahi kaiwhakahaere. Kei te pupuri te Rēhita Whakatau īmēra i tētahi rēhita ora motuhake e tuhi ana i te whānuitanga uru o ia kaiwhakahaere, e tohu ana i te huringa atu i taua whānuitanga hei taunakitanga kia wehewehea, ā, ka āhei kia whakatāhia, kia tangohia rānei tētahi kaiwhakahaere; he whirihoranga taua rēhita, ehara i te rēhita kua huna.
The European Union's regulatory framework for AI systems, finalised 2024. The platform's governance services align with several Act provisions, including Article 22 on automated decision-making.
[DeepL] Te anga whakahaere a te Uniana o Europi mō ngā pūnaha atamai, i whakaoti i te tau 2024. E hāngai ana ngā ratonga whakahaere o te tūāpapa ki ētahi tikanga o te Ture, tae atu ki te Tuhinga 22 mō te whakatau aunoa.
A requirement that no AI system was used in producing a given piece of work, together with whatever evidence can be offered for it. Distinct from choosing a system: choosing compares what things do, whereas assurance requires establishing that something did not happen. Absence is the claim evidence is worst at supporting, so an assurance is in practice a contractual warranty plus a declared process plus a stated limit — not a proof.
[DeepL] He whakaritenga kia kore he pūnaha atamai (AI) i whakamahia ki te whakaputa i tētahi mahi motuhake, me ngā taunakitanga ka taea te tuku mō tērā. He rerekē tēnei i te kōwhiri pūnaha: ko te kōwhiri he whakataurite i ngā mahi a ngā mea, engari ko te whakamana e hiahiatia ana kia whakapūmau kāore tētahi mea i tupu. Ko te kore he kerēme e tino ngoikore ana ngā taunakitanga ki te tautoko, nō reira, i te ao tūturu, he raihana kirimana, he tukanga kua whakatauhia, he here kua whakatauhia hoki te whakamana — ehara i te whakamātau.
Algorithm Charter for Aotearoa New Zealand — Algorithm Charter for Aotearoa New Zealand
A voluntary commitment by New Zealand government agencies to manage their use of algorithms in a fair, ethical and transparent way. One of the principle-based, non-binding instruments (alongside the Public Service AI Framework) that shape NZ government AI use in the absence of prescriptive AI legislation.
[DeepL] He kawenata ā-tūao nā ngā tari kāwanatanga o Aotearoa kia whakahaere i tō rātou whakamahinga o ngā tātaitanga i runga i te tika, te matatika, me te mārama. Ko tētahi o ngā taputapu ā-mātāpono, kāore e herea (i te taha o te Anga AI Ratonga Tūmatanui), e ārahi ana i te whakamahinga AI a te kāwanatanga o Aotearoa i te kore ture whakaritenga mō te AI.
A permissive open-source licence allowing use, modification, and redistribution with limited conditions (notice preservation, patent grant, no trademark licence).
[DeepL] He raihana puna tuwhera whakaae e whakaae ana ki te whakamahi, ki te whakarerekē, me te tohatoha anō me ngā here iti (me tiaki te pānui, me tuku raihana pātengi, kāore he raihana tohu hokohoko).
Signs every invoice, quote, recurring invoice, expense and time entry as it is written inside a Village, so that a later change to the record can be seen. An invoice has a verification bundle that can be downloaded and checked offline, without a Village account, and a qualified RFC 3161 timestamp receipt can be added on request.
[DeepL] Ka hainatia ia nama, ia whakapae utu, ia nama huringa, ia whakaurunga whakapau moni me ia whakaurunga wā i te wā e tuhia ana i roto i Village, kia kitea ai he panoni ā muri ake ki te rekoata. He kohinga whakamana tō te nama e taea te tikiake, te tirotiro hoki i waho o te whatunga, ahakoa kāore he pūkete Village, ā, ka taea te tāpiri i tētahi rīpeka tohu wā RFC 3161 kua whakamanahia mēnā ka tonoa.
RFC 4949: "A chronological record of system activities that is sufficient to enable the reconstruction and examination of the sequence of environments and activities surrounding or leading to an operation, procedure, or event in a security-relevant transaction from inception to final results."
What it decides: Judge a log by whether it permits reconstruction, not by how many entries it holds. The Model Context Protocol concedes that a single omnibus scope "masks user intent per operation" — a record that masks intent cannot enable reconstruction, and so fails this definition on its own terms.
He aha tāna e whakatau ai: Me aromatawai i tētahi rēkōrā i runga i tōna āhei ki te hanga anō, ehara i te tokomaha o ngā urunga kei roto. E whakaae ana te Model Context Protocol, mā tētahi anga whānui kotahi e huna ana i te hiahia a te kaiwhakamahi mō ia mahi — kāore e taea e tētahi rēkōrā e huna ana i te hiahia te whakaahei i te hanga anō, nō reira ka hinga tēnei whakamārama i runga i āna ake tikanga.
Caution: "Non-repudiable audit log" is a compound claim, and the non-repudiation entry records why the second half of it may carry less than it appears to.
Ata whakatūpato: Ko te "rārangi arotake kāore e taea te whakahē" he kerēme whakakotahi, ā, ko te tāurunga kore-whakahē e tuhi ana he aha i iti ake ai te taumaha o te haurua tuarua i tōna āhua.
[DeepL] RFC 4949: He rēhita wā-tūturu o ngā mahi pūnaha e tika ana kia taea ai te hanga anō me te arotake i te raupapa o ngā taiao me ngā mahi e pā ana ki tētahi whakahaere, tētahi tikanga, tētahi kaupapa rānei i roto i tētahi whakawhitinga e pā ana ki te haumarutanga, mai i te tīmatanga tae noa ki ngā hua whakamutunga.
Sovereignty understood as rightful authority over a domain — the recognised standing to decide how a system behaves on the people it acts upon — as distinct from the raw capacity to build it. A community can hold authority sovereignty over its own data, and over how a model steers on its behalf, without holding the capacity to build that model. This is the layer federation lets small actors hold today. Contrast capacity sovereignty.
[DeepL] Ko te rangatiratanga e mōhiotia ana hei mana tika ki runga i tētahi rohe — ko te tūnga kua whakamanahia ki te whakatau me pēhea te whanonga o tētahi pūnaha ki ngā tāngata e pāngia ana e ia — he rerekē i te āheinga mata ki te hanga i taua pūnaha. Ka taea e tētahi hapori te pupuri i te rangatiratanga mana ki runga i āna ake raraunga, me te āhua e ārahi ai tētahi tauira mōna, ahakoa kāore ia e whai i te āheinga ki te hanga i taua tauira. Koinei te paparanga e āhei ai ngā kaiuru iti ki te pupuri i ēnei mana i ēnei rā mā te hononga ā-papa. Titiro whakatairite ki te rangatiratanga āheinga.
A declared statement of which classes of action a system may perform without a named person approving each one. The declaration is the instrument; the underlying capability is not what is being measured.
What it decides: An undeclared level cannot be audited, because there is nothing to audit it against.
He aha tāna e whakatau ai: Kāore e taea te arotake i tētahi taumata kāore i whakapuaki, nā te mea kāore he mea hei whakataurite māna.
[DeepL] He tauākī kua whakatauhia e whakaatu ana i ngā momo mahi ka taea e tētahi pūnaha te whakahaere me te kore e whakaaetia ia mahi e tētahi tangata kua ingoaia. Ko te tauākī tēnei te taputapu; ehara i te pūkenga taketake kei te ine.
Sovereignty understood as the de facto ability to build, run, and defend AI without depending on anyone — measured in accelerators, datasets, skilled workforce, electricity, and water. It is a real thing to measure, but on this axis most nations are permanently dependent, because the levers require national-scale capital. Contrast authority sovereignty. The distinction is set out in the paper ‘The Map Has No Node for Legitimacy’.
[DeepL] Ko te rangatiratanga e mōhiotia ana hei āheinga tūturu ki te hanga, ki te whakahaere, ki te tiaki i te AI me te kore whakawhirinaki ki tētahi atu — ka ine i ngā pūāke tere, ngā huinga raraunga, te hunga kaimahi mātanga, te hiko, me te wai. He mea tūturu hei ine, engari i runga i tēnei tuaka he nui tonu te whakawhirinaki a te nuinga o ngā whenua, nā te mea e hiahiatia ana e ngā pūmanawa whakahaere he pūtea ā-motu. Titiro ki te rangatiratanga mana. Ka whakaaturia te rerekētanga i roto i te pepa 'Kāore he Nōti mō te Mana Ture i runga i te Mahere'.
CARE Principles for Indigenous Data Governance — Ngā Mātāpono o CARE mō te Whakahaere Raraunga Taketake
Collective benefit, Authority to control, Responsibility, Ethics. An international framework for indigenous data governance that complements the FAIR data principles by asserting collective and authority dimensions FAIR omits.
[DeepL] Painga ā-rōpū, Mana whakahaere, Haepapa, Tikanga. He anga ā-ao mō te whakahaere raraunga taketake e whakakī ana i ngā mātāpono raraunga FAIR mā te whakapuaki i ngā āhuatanga ā-rōpū me te mana whakahaere kua mahue e FAIR.
CC BY 4.0 (Creative Commons Attribution 4.0) — Tohu Whakaaturanga 4.0 a Creative Commons
A permissive content licence allowing redistribution and adaptation provided the original author is credited. Used for Paper A, Paper B, and the project's published essays.
[DeepL] He raihana ihirangi whakaae e whakaae ana kia tohatoha anō, kia whakarerekē rānei, me te whakamōhio ki te kaituhi taketake. Ka whakamahia mō te Pepa A, te Pepa B, me ngā tuhinga kua whakaputaina o te kaupapa.
NIST: "A process that tracks the movement of evidence through its collection, safeguarding, and analysis lifecycle by documenting each person who handled the evidence, the date/time it was collected or transferred, and the purpose for the transfer."
Not agreed. A second body defines it differently:
NIST SP 800-72 and SP 800-101 Rev.1 Two live NIST definitions differing by one word — "the transfer" against "any transfers".
Kāore i whakaae. Ka tautuhia e tētahi atu tinana i rerekē:
NIST SP 800-72 and SP 800-101 Rev.1[DeepL] E rua ngā whakamārama ora a NIST e rerekē ana i te kotahi kupu — "te whakawhitinga" me "ngā whakawhitinga katoa".
Caution: The research records the one-word variance but does not establish what turns on it, so no consequence is claimed here.
Ata whakatūpato: E tuhi ana te rangahau i te rerekētanga kupu kotahi, engari kāore e whakatau he aha te mea e whakahohe ana i taua rerekētanga, nō reira kāore he hua e whakapaetia ana i konei.
[DeepL] NIST: He tukanga e whai ana i te nekehanga o ngā taunakitanga i roto i tōna huringa oranga o te kohi, te tiaki, me te tātaritanga, mā te tuhi i ia tangata i whakahaere i ngā taunakitanga, te rā me te wā i kohia, i whakawhitia rānei, me te take o te whakawhitinga.
China’s National Intelligence Law — China’s National Intelligence Law
Chinese legislation (2017) obliging organisations and citizens to support, assist and cooperate with state intelligence work. Cited alongside the US CLOUD Act and FISA 702 to make an even-handed point: data and models under either superpower’s jurisdiction carry state-reach exposure, so neither stack is a neutral harbour for a non-aligned community.
[DeepL] Ture o Haina (2017) e whakahau ana i ngā whakahaere me ngā tāngata kia tautoko, kia āwhina, kia mahi ngātahi hoki ki ngā mahi mōhiohio a te kāwanatanga. E whakahuatia ana ngā ture nei i te taha o te US CLOUD Act me te FISA 702 hei whakaatu i tētahi tirohanga taurite: kei raro i te mana whakahaere o ia mana nui ngā raraunga me ngā tauira, ā, ka whakaatu i te taumata uru a te kāwanatanga; nō reira, kāore tētahi o ēnei pūnaha e noho hei tauranga noa mō tētahi hapori kāore i te hono ki tētahi taha.
Shared governance between two or more parties with distinct sources of authority — most often, in the New Zealand context, between iwi or hapū and the Crown (or a local council). Distinct from token consultation: each party retains its own authority and the structure is designed to keep that authority intact.
[DeepL] Ko te whakahaere ngātahi i waenga i ngā rōpū e rua, e maha rānei, me ngā puna mana motuhake — i te nuinga o te wā, i te horopaki o Aotearoa, i waenga i ngā iwi, ngā hapū rānei me te Karauna (te kāwanatanga rānei, te kaunihera ā-rohe rānei). He rerekē ki te uiui tohu noa: ka pupuri tonu ia rōpū i tōna ake mana, ā, kua hoahoatia te hanganga kia mau tonu ai taua mana.
A mark on software running autonomous agents, stating which tier of proof its records reach — which agent acted under what recorded authority, and which independent authority attested the records and when — with the assurance elements applied by a conformity assessment body, not the maker. The precedent is hallmarking: the maker applies its own sponsor’s mark and only the assay office may apply the marks carrying the assurance. It exists because a purchaser cannot otherwise tell a record from an attestation when both are sold as audit-logged, immutable and tamper-proof.
Caution: Needs a published, append-only register of eligible attestation authorities, maintained independently of any operator and naming no suppliers. The hallmarking exemptions supply the principle of a de minimis floor, not a threshold for records; a scheme bearing most heavily on the smallest organisations would fail its own purpose.
Ata whakatūpato: Needs a published, append-only register of eligible attestation authorities, maintained independently of any operator and naming no suppliers. The hallmarking exemptions supply the principle of a de minimis floor, not a threshold for records; a scheme bearing most heavily on the smallest organisations would fail its own purpose.
[DeepL] He tohu i runga i te pūmanawa e whakahaere ana i ngā kaihautū aunoa, e whakaatu ana ko tēhea taumata taunakitanga ka eke āna rekoata — ko tēhea kaihautū i mahi i raro i tēhea mana kua tuhia, ā, ko tēhea mana motuhake i whakaū i ngā rekoata, ā, i āhea — me ngā āhuatanga whakamana i whakaurua e tētahi rōpū aromatawai hāngai, ehara i te kaihanga. Ko te tauira o mua ko te hallmarking: ka whakamahia e te kaihanga te tohu o tāna ake kaitautoko, ā, ko te assay office anake e āhei ana ki te tāpiri i ngā tohu e mau ana i te whakamana. E noho ana tēnei nā te mea kāore e taea e te kaihoko te wehewehe i tētahi rekoata i tētahi whakaūnga, ina hokona rāua tahi hei mea kua rangitakihia mō te arotake, kāore e taea te whakarerekē, kāore e taea te pokanoa.
The recorded legal or ethical ground on which a source may be used — for example the author’s permission, a Creative Commons licence, the public domain, or fair use. In the Village every curated source carries a consent basis and an attribution, so the question “by what right do we use this?” is answered for each item, including scripture.
[DeepL] Ko te take ture, take matatika rānei kua tuhia e whakamahia ai tētahi puna — hei tauira, te whakaaetanga a te kaituhi, he raihana Creative Commons, te rohe tūmatanui, te whakamahinga tika rānei. I roto i te Hāpori, ia puna kua tohua he turanga whakaaetanga me te tohu kaituhi, nō reira ka whakautua te pātai "nō hea tō tātou mana ki te whakamahi i tēnei?" mō ia tūemi, tae atu ki ngā karaipiture.
Cross-party durability — Te pūmau puta noa i ngā rōpū
The property that a requirement outlasts the government, board or committee that made it, because parties that disagree about most things have committed to it.
What it decides: A requirement that lasts a single electoral term is not a requirement. Suppliers wait it out rather than build to it, because the expiry is known.
He aha tāna e whakatau ai: Ehara i te herenga tētahi e roa ana mō tētahi wāhanga pōtitanga kotahi. Ka tatari ngā kaiwhakarato kia pau te wā, kaua e hanga kia tutuki ai, nā te mea kua mōhiotia te rā whakamutunga.
[DeepL] Ko te āhuatanga ka roa ake te whakaritenga i te kāwanatanga, te poari, te komiti rānei i hanga ai, nā te mea kua ū ngā rōpū e rerekē ana ā rātou whakaaro mō te nuinga o ngā take ki taua whakaritenga.
The party that holds an original and will answer for it — able to say what it holds, since when, and on what terms it was shared. A role another organisation can occupy: the platform aims to be interoperable with custodians that already exist rather than to become the custodian for everyone.
[DeepL] Ko te rōpū e pupuri ana i te tuhinga taketake, ā, ka whakautu mō taua tuhinga — ka taea e ia te kī he aha tāna e pupuri nei, mai i te wā anō, me ngā tikanga i tohatohahia ai. He tūranga ka taea e tētahi atu whakahaere te whakakī: ko te whāinga o te tūāpapa kia mahi tahi me ngā kaitiaki e noho ana ināianei, kaua e noho hei kaitiaki mō te katoa.
Holding something on behalf of others, under obligation, rather than owning it. A custodial claim answers who holds a thing, since when, on whose behalf, and on what terms it was shared — questions about relationship and duty rather than about property. Unlike a property claim it does not expire, is not traded, and does not depend on the thing being kept secret.
[DeepL] Te pupuri i tētahi mea mō ētahi atu, i raro i te herenga, kaua ko te rangatōpū. Ka whakautu te kerēme tiaki i ngā pātai ko wai e pupuri ana i tētahi mea, mai i te wā anō, mō wai rānei, ā, i raro i ngā tikanga anō i tohatohahia ai — he pātai mō te hononga me te haepapa, ehara i te pātai mō te rawa. Ehara i te kerēme rawa; kāore e pau tōna wā, kāore e hokona, ā, kāore hoki e whakawhirinaki ki te mea kia noho muna.
A structured assessment, required under GDPR for high-risk processing, of how a processing activity affects data subjects and how risks are mitigated. The platform produces DPIAs as living documents alongside major architectural changes.
[DeepL] He aromatawai hanganga, e hiahiatia ana i raro i te GDPR mō ngā tukanga tūraru-nui, hei aromātai i te pānga o tētahi mahi tukatuka ki ngā tangata raraunga, me te āhua e whakaitihia ai ngā tūraru. Ka whakaputa te papanga i ngā DPIAs hei tuhinga ora i te wā e puta ana ngā panonitanga hanganga matua.
Data subject request (DSR) — Tono a te tangata e pā ana ki ngā raraunga (DSR)
A formal request under GDPR or similar legislation in which a person asks the controller to access, correct, port, or delete their data. The platform processes DSRs through a Bull-backed queue with automatic retry and audit logging.
[DeepL] He tono ā-ture i raro i te GDPR, i ētahi atu ture ōrite rānei, e tono ana te tangata ki te kaiwhakahaere kia uru, kia whakatika, kia whakawhiti, kia muku rānei i āna raraunga. Ka tukatuka te papanga i ngā tono DSR mā tētahi rārangi tatari tautokohia e Bull, me te whakamātau anō aunoa me te rēhita arotake.
Latin for ‘in fact’. A de facto power or authority is one that actually operates in practice, whether or not anyone has granted it the right to. Contrast de jure. A military junta that controls a country has de facto control without rightful authority. In the paper, the five capacity ‘levers’ measure de facto control — the actual ability to build and run AI — while saying nothing about whether that control is rightful.
[DeepL] Rānaiti mō 'i te tūturu'. Ko te mana de facto he mana e whakahaere tūturu ana i ngā mahi, ahakoa kāore i whakawhiwhia ki a ia he mana ā-ture. Titiro whakatairite ki te de jure. He rōpū hōia e whakahaere ana i tētahi whenua, ā, he mana de facto tā rātou, ahakoa kāore he mana tika ā-ture. I roto i te pepa, e ine ana ngā rima 'pūwha' āheinga i te mana de facto — arā, te āheinga tūturu ki te hanga me te whakahaere AI — ā, kāore e kōrero ana mēnā he mana tika taua mana whakahaere.
Latin for ‘by right’ or ‘in law’. A de jure authority holds the recognised, lawful standing to decide, whether or not it currently has the power to enforce it. Contrast de facto. A government-in-exile has de jure authority without de facto control. The paper argues that sovereignty as rightful authority is a de jure claim — one a community can hold over its own data even without the capacity to build the models that use it.
[DeepL] Lātini mō 'i runga i te tika' rānei 'i roto i te ture'. He mana de jure tērā e whakaaetia ana, e ture ana hei whakatau, ahakoa kāore pea he mana ā-tinana hei whakatinana i taua whakataunga. Whakatairite ki te de facto. He kāwanatanga i te whakawātea kei a ia te mana de jure, engari kāore he mana de facto. E ai ki te pepa, ko te rangatiratanga hei mana tika he kerēme de jure — he mea ka taea e te hapori te pupuri ki runga i āna ake raraunga ahakoa kāore he āheinga ki te hanga i ngā tauira e whakamahi ana i aua raraunga.
Putting something on the record so that nobody else can later claim it as their invention. It only works if the material is actually disclosed, which puts it in direct tension with knowledge that was never meant to be public — a tension that cannot be engineered away and is not ours to resolve.
[DeepL] Te tuhi i tētahi mea ki te rekoata kia kore ai e taea e tētahi atu te kii he mea hanga nā rātou ā muri ake nei. Ka whai hua anake mēnā ka whakapuaki tūturu te rauemi, ā, ka whakatū tēnei i tētahi taumaha tūturu ki ngā mōhiotanga kāore i whakaarohia kia tūmatanui — he taumaha kāore e taea te whakakore mā te hangarau, ā, ehara i a mātou te whakatau.
Māori AI governance researcher whose Kaupapa Māori AI Framework, and more recent inquiry into AI personhood constituted by Māori knowledge, frame much of the project's te ao Māori engagement. Reviewed the Tiriti compliance statement v0.1 in 2026. His own work and writing are at taiuru.co.nz.
[DeepL] He kairangahau whakahaere AI Māori nāna i waihanga te Kaupapa Māori AI Framework, ā, ko tana rangahau hou mō te tangata AI i hangaia e te mātauranga Māori e whakarite ana i te nuinga o ngā mahi whakawhanaungatanga ki te ao Māori o te kaupapa. I a ia i arotake i te tau 2026 i te tauākī hāngai Tiriti v0.1.
The de facto power to act without being overridden — one of the two things the word ‘sovereignty’ runs together. A junta has effective control without rightful authority; a government-in-exile has rightful authority without effective control. In the AI-sovereignty debate, the capacity ‘levers’ measure effective control while saying nothing about whether that control is rightful. Contrast rightful authority (de jure).
[DeepL] Ko te mana tūturu ki te mahi me te kore e whakakorehia — ko tētahi o ngā mea e rua e whakakotahitia ana e te kupu 'mana rangatiratanga'. He rōpū hōia whakahaere e whai ana i te mana whakahaere tūturu ahakoa kāore he mana tika; he kāwanatanga i te whakawātea e whai ana i te mana tika ahakoa kāore he mana whakahaere tūturu. I roto i te wero mō te mana rangatiratanga AI, ko ngā 'pūwha' āheinga e ine ana i te mana whakahaere tūturu, ā, kāore e kōrero ana mēnā he mana tika taua mana whakahaere. Whakatairite ki te mana tika (de jure).
The European Union regulation governing electronic identification and trust services, including electronic signatures, seals and timestamps. It establishes which providers are qualified and what legal weight their output carries within the Union.
[DeepL] Ko te ture a te Uniana o Europi e whakahaere ana i te tuakiri hiko me ngā ratonga whakawhirinaki, tae atu ki ngā haina hiko, ngā hiri hiko me ngā tohu wā. Ka tautuhi ia i ngā kaiwhakarato e whai tohu ana, me te taumaha ture o ā rātou hua i roto i te Uniana.
Nobel-winning political economist whose work on governing the commons frames the platform's view of community-scale digital infrastructure as a commons rather than a market or a service.
[DeepL] He ōhanga-tōrangapū i toa i te Tohu Nobel, ko āna mahi mō te whakahaere i ngā rawa tūmatanui e whakarite ana i te tirohanga o te tūāpapa ki ngā hanganga matihiko ā-hapori hei rawa tūmatanui, ehara i te mākete, i te ratonga rānei.
A record of the decision made about an email before it goes out, whether a person or an AI agent wrote it. Policy decides first: send it, hold it for a named approver, or refuse it. The decision, the approval and the send are sealed into a chain that is rolled up into a daily root and stamped by independent timestamp authorities, so anyone holding a copy can check it offline.
[DeepL] He rēhita o te whakataunga i mahia mō tētahi īmēra i mua i tōna tukuna, ahakoa nā te tangata, nā te māngai AI rānei i tuhi. Ka whakatau tuatahi te kaupapa here: tukuna, puritia mō tētahi kaiwhakamanawa kua ingoaia, rānei whakakahore. Ka huna te whakataunga, te whakaaetanga me te tukuna ki roto i tētahi mekameka, ka whakakotahitia ki te pakiaka o ia rā, ā, ka tāia e ngā mana tā wā motuhake, kia taea e te hunga e pupuri ana i tētahi kape te tirotiro i waho o te whatunga.
An information-sharing arrangement involving the United States and partner states. Cited in the project's threat model as one of the jurisdictional pressures that motivate the platform's sovereign infrastructure posture.
[DeepL] He whakaritenga tiritiri pārongo e whai wāhi ana te United States me ōna hoa rangatira. I whakahuatia i roto i te tauira tūraru o te kaupapa hei tētahi o ngā pēhanga ā-ture e akiaki ana i te tūnga hanganga rangatiratanga o te papa.
EUPL-1.2 (European Union Public Licence) — EUPL-1.2 (Rāhina Tūmatanui o te Uniana o Europi)
A copyleft software licence approved by the European Commission, compatible with several other open-source licences. The Tractatus framework as published is licensed under EUPL-1.2. Work developed since is proprietary and is not covered by it.
[DeepL] He raihana pūmanawa copyleft i whakamanahia e te Komihana o Europi, e hāngai ana ki ētahi atu raihana puna tuwhera. Ko te anga Tractatus, pēnei i tāna whakaputanga, kua raihanahia i raro i te EUPL-1.2. Ko ngā mahi i whakawhanakehia mai i taua wā he rawa motuhake, ā, kāore i raro i tēnei raihana.
A public-safe proof room for a claim: what was tested, what passed, what failed, which baselines were compared, which gates were enforced, and how to re-run it — with sensitive traces, prompts, and data kept private. In Boucher’s phrase, a proof page is not a marketing page; it is a claim-bound evidence room. The Village’s tamper-evident Decision Records are its equivalent.
[DeepL] He rūma taunakitanga haumaru tūmatanui mō tētahi kerēme: he aha i whakamātauria, he aha i angitu, he aha i rahua, he aha ngā paerewa i whakatauritea, he aha ngā kuaha i whakatinanahia, me pēhea te whakahaere anō — me ngā tohu matatapu, ngā whakahau, me ngā raraunga e puritia ana hei tūmataiti. I te kupu a Boucher, ehara te whārangi taunakitanga i te whārangi hokohoko; he rūma taunakitanga e herea ana ki tētahi kerēme. Ko ngā Rēkōrā Whakataunga Villagee kitea ana kua whakarerekē, hei ōrite mā rātou.
A provision of the US Foreign Intelligence Surveillance Act authorising warrantless surveillance of non-US persons located outside the United States, through the compelled assistance of US communication providers. Reauthorised April 2024; up for renewal April 2026. Paired with the CLOUD Act, it is part of why a non-US community’s data on US infrastructure carries standing exposure.
[DeepL] He tikanga o te Ture Aroturuki Mōhiohio Tauwhiro o Amerika e whakaae ana kia aroturukihia ngā tāngata kāore nō Amerika, kei waho o Amerika, me te kore tono whakaaetanga, mā te āwhina ā-ture a ngā kaiwhakarato whakawhiti kōrero o Amerika. I whakahōu anō i Aperira 2024; ka tae ki te whakahōu anō i Aperira 2026. I honoa ki te Ture CLOUD, ko tētahi o ngā take e tū tonu ai te mōrearea o ngā raraunga a te hapori kāore i te US kei runga i ngā hanganga o US.
GDPR — Ture Whakahaere Whaiaro ā-Iwi o te Uniana o Europi
The General Data Protection Regulation — the European Union's data protection law. Imposes obligations on any controller of EU residents' personal data; shapes the platform's consent model, data-subject-request handling, and data-export architecture.
[DeepL] Te Ture Whānui mō te Tiaki Raraunga — te ture tiaki raraunga a te Uniana o Europi. Ka whakanoho i ngā herenga ki ia kaiwhakahaere o ngā raraunga whaiaro o ngā kainoho o te Uniana o Europi; ka ārahi i te tauira whakaaetanga o te papaanga, te whakahaere tono a te tangata e pā ana ki āna raraunga, me te hanganga kaweake raraunga.
GDPR's restriction on solely-automated decision-making. Requires that significant decisions about a person not be made by an algorithm without human meaningful intervention. Per-request inference routing is logged so the platform can demonstrate Article-22 compliance.
[DeepL] Te here a te GDPR mō ngā whakatau āunoa anake. E hiahiatia ana kia kaua e mahia e tētahi tātaitanga ngā whakatau nui mō tētahi tangata, mehemea kāore he urupare whai tikanga a te tangata. Ka tuhia ngā huarahi whakapae i ia tono, kia taea e te papanga te whakaatu i tōna ū ki te Tuhinga 22.
Governance by document — Te mana whakahaere pukapuka
Governance expressed as policy, guidance or principle, which binds only while somebody reads it and applies it. It is not a pejorative: some requirements can take no other form, and a tested degraded-mode plan is one of them.
What it decides: Whether the weaker form was chosen deliberately. Where a requirement could be made structural and is left documentary instead, somebody chose the weaker option, and the choice is invisible because both read identically in a policy.
He aha tāna e whakatau ai: Ahakoa mēnā i tīpakohia te āhua ngoikore i runga i te whakaaro. Ki te wāhi ka taea te hanga i tētahi whakaritenga hei hanganga, engari ka waiho hei tuhinga anake, i tīpako tētahi i te kōwhiringa ngoikore, ā, kāore te kōwhiringa e kitea nā te mea he rite tonu te pānui o ngā mea e rua i roto i te kaupapa here.
[DeepL] Ko te whakahaere e whakapuaki ana hei kaupapa here, hei aratohu, hei mātāpono rānei, ā, ka herea anake i te wā e pānuitia ana, e whakamahia ana e tētahi. Ehara i te kupu whakaiti: kāore ētahi whakaritenga e taea te whai āhua kē, ā, ko tētahi o ēnei he mahere aratau heke kua whakamātauria.
The lifecycle through which a community’s consequential governance decisions move — create → acknowledge → decide → enact (or reject) — with deadlines enforced by a scheduled task, so that no consequential matter sits unowned indefinitely. Each transition is recorded for audit.
[DeepL] Ko te huringa oranga e whai ai ngā whakataunga whakahaere whai pānga o te hapori — waihanga → whakaae → whakatau → whakatinana (rānei whakakore) — me ngā rā whakamutunga e whakatinanahia ana e tētahi mahi kua whakaritea, kia kore ai e waiho he take whai pānga kāore i whai rangatira mō ake tonu atu. Ka tuhia ia huringa mō te arotake.
Dr Karaitiana Taiuru's prescriptive framework of Te Tiriti-grounded principles for AI consent, Māori data sovereignty, and full-chain accountability. The platform's governance design discharges the duties this framework asserts. Dr Taiuru's own writing is at taiuru.co.nz.
[DeepL] Ko te anga whakaritenga a Dr Karaitiana Taiuru o ngā mātāpono i runga i Te Tiriti mō te whakaaetanga AI, te rangatiratanga raraunga Māori, me te haepapa puta noa i te mekameka katoa. Ka whakatutuki e te hoahoa whakahaere o te tūāpapa ngā haepapa e whakapuaki ana tēnei anga.
In governance, the recognised right of a body to make decisions others are bound to accept — as distinct from the raw power to enforce them. A rule can be followed because it is legitimate (people accept the decider's authority) or merely because force backs it. Much of the Tractatus framework is about giving communities legitimate authority over how an AI behaves on their data, not just technical control over the machine. The paper ‘The Map Has No Node for Legitimacy’ argues that capacity-based models of AI sovereignty leave this concept out entirely.
[DeepL] I roto i te whakahaere, ko te mana e mōhiotia ana o tētahi rōpū ki te whakatau i ngā whakataunga e herea ana ētahi atu kia whakaae — he rerekē i te mana mārō hei whakatinana i aua whakataunga. Ka taea te whai i tētahi ture nā te mea he mana tōna (e whakaae ana te tangata ki te mana o te kaiwhakatau), he mea noa rānei nā te mea kei muri he kaha tautoko. He nui o te anga Tractatus e pā ana ki te hoatu mana tika ki ngā hapori mō te āhua o te whanonga a te AI ki ā rātou raraunga, ehara i te whakahaere hangarau noa iho i te mīhini. Ko te pepa 'Kāore he Nōti mō te Mana Tika i runga i te Mahere' e kī ana ka waiho katoatia tēnei ariā e ngā tauira ā-pūkenga mō te rangatiratanga AI.
The written statement of what an agent may do, fixed and sealed before it acts, alongside the actions it governs. Without one there is no such thing as acting outside authority; an inventory revisable after the fact describes the past rather than constraining it. In the standard, each mandate carries its scope, its instructing principal and an expiry, and mandates expire by default. In the running implementation a mandate names the agent and the actions it may perform, and a later mandate replaces it; a validity window and revocation are specified and not yet built (source: the What we claim page). Deciding what one should contain is a question about the organisation — who decides, on what authority, answerable to whom — and the one trust anchor cryptography does not touch.
Caution: Most improper conduct requires no widening of a mandate; it requires one already drawn too wide. Where a mandate is itself disputed, affected acts are reported as contested rather than as breaches and held for the organisation’s own process.
Ata whakatūpato: Most improper conduct requires no widening of a mandate; it requires one already drawn too wide. Where a mandate is itself disputed, affected acts are reported as contested rather than as breaches and held for the organisation’s own process.
[DeepL] Ko te tauākī ā-tuhi mō ngā mahi ka taea e tētahi kaiwhakahaere, kua whakaritea, kua hiri i mua i tōna mahi, ā, kei te taha o ngā mahi e whakahaerehia ana e ia. Mēnā kāore he mea pēnei, kāore he mahi i waho o te mana; he rārangi ka taea te arotake i muri i te mahi, e whakamārama ana i ngā mahi o mua, ehara i te mea hei here i aua mahi. I roto i te paerewa, ia whakahau ka mau tōna rohe, tōna rangatira whakahau, me tōna rā whakamutu; ā, ka mutu noa ngā whakahau i te taunoa. I roto i te whakatinanatanga e rere ana, ka tautuhia e tētahi whakahau te ingoa o te māngai me ngā mahi ka taea e ia, ā, ka whakakapia e tētahi whakahau whai muri; kua tautuhia he matapihi whaimana me te whakakore, engari kāore anō kia hangaia (pūtake: te whārangi What we claim). Ko te whakatau i ngā mea e tika ana kia whai ia he pātai mō te whakahaere — ko wai e whakatau, i runga i te mana aha, e whakautu ana ki a wai — ā, ko tērā te tūāpapa whakawhirinaki kāore e pa ana te kīrōpū.
The official record of what happened at a meeting: who attended, what was discussed, what motions were moved, how members voted, and what was resolved. Approved at the following meeting; signed by the chair; kept indefinitely as part of the governance record.
[DeepL] Ko te pūrongo ā-ture mō ngā mea i tupu i te hui: ko wai i tae mai, he aha ngā kaupapa i matapaki, he aha ngā tono i whakatakotoria, me pēhea ngā pōti a ngā mema, me ngā whakataunga i puta. I whakamanahia i te hui i muri mai; i hainatia e te heamana; ka puritia mō ake tonu atu hei wāhanga o ngā pūrongo whakahaere.
The signed record of what an agent is permitted to do and which identity it is bound to. A mandate lists the actions an agent may perform and an agent-inventory entry names the agent and the identity behind it; each is a hash-chained record with its own receipt that anyone holding a copy can check offline.
[DeepL] Ko te rēkoata kua hainatia e whakaatu ana i ngā mahi e whakaaetia ana kia mahia e tētahi māngai, me te tuakiri e herea ana ki a ia. Ka rārangi te whakahau i ngā mahi ka taea e te māngai te mahi, ā, ko te tomokanga rārangi-māngai e ingoa ana i te māngai me te tuakiri kei muri i a ia; he rēkoata mekameka hāshi ia, ā, he rīpeka motuhake tō ia, ka taea e te tangata e pupuri ana i tētahi kape te tirotiro i waho-ā-ipurangi.
A formal proposal put before a board or committee for decision. Convention requires a motion to be moved by one member and seconded by another before discussion; once carried by vote, it becomes a resolution and is recorded in the minutes.
[DeepL] He tono ā-ture i tukuna ki te poari, ki te komiti rānei mō te whakatau. E ai ki ngā tikanga, me whakatakotohia te motini e tētahi mema, ā, me tautokona e tētahi atu i mua i te matapaki; ka whakamanahia mā te pōti, ka noho hei whakataunga, ā, ka tuhia ki ngā meneti.
A posture, by analogy with the twentieth-century Non-Aligned Movement, in which small nations and indigenous polities decline to sort themselves into the American or Chinese AI bloc — gaining capability by federating with each other rather than aligning above themselves, and holding authority at the layer where authority can actually be held. Not neutrality or passivity, but an organised refusal of the bipolar choice.
[DeepL] He tūnga, mā te whakatairite ki te Nekehanga Kāore i te Hono o te rautau rua tekau, e whakakahore ana ngā iwi iti me ngā mana taketake ki te whakarōpū ki te rōpū AI o Amerika, o Haina rānei — e whiwhi ana i te pūkenga mā te hononga tahi, kaua e hono ki tētahi mana nui ake i a rātou, ā, e pupuri ana i te mana i te papa e taea ai te pupuri i taua mana. Ehara i te noho pokanoa, i te noho puku rānei, engari he whakahē whakarite i te kōwhiringa tokorua.
Polycentric governance — Kaitiakitanga ā-pokapū maha
Elinor Ostrom's framing in which multiple overlapping authorities co-govern a commons rather than a single central body. Cited in the platform's design as a structural alternative to single-vendor or single-state AI governance.
[DeepL] Ko te anga a Elinor Ostrom e whakaatu ana i ngā mana maha e whakawhānui ana, e whakahaere tahi ana i tētahi rawa tūmatanui, kaua ko tētahi mana matua kotahi. I whakahuatia i roto i te hoahoa o te papa hei kōwhiringa hanganga mō te whakahaere AI a tētahi kaiwhakarato kotahi, a tētahi kāwanatanga kotahi rānei.
Evidence that something was already known before a later claim to have invented it. A dated, independently checkable record can serve as prior art, which is what makes a custodial record contestable evidence rather than merely a private note.
[DeepL] He taunakitanga e whakaatu ana i te mōhiotanga o tētahi mea i mua i te kerēme whai muri nei mō te hanga i taua mea. He rēhita kua rā-tā, ā, ka taea te tirotiro motuhake, ka taea te whakamahi hei toi o mua; koinei te mea e whakarite ana kia taea te wero i te rēhita tiaki hei taunakitanga whai take, kaua hei tuhipoka tūmataiti noa iho.
The existing power to require properties of a supplier through the contract, without legislation. Every requirement in the twelve is a property of an arrangement between an institution and a supplier, and procurement is where that arrangement is written.
What it decides: It is available on Monday and moves a market faster than a statute applying from 2027.
He aha tāna e whakatau ai: Ka wātea i te Rāhina, ā, ka tere ake te neke o te mākete i tētahi ture e whai mana ana mai i te tau 2027.
[DeepL] Ko te mana e tū nei hei whakaritenga kia tukuna e te kaiwhakarato ngā āhuatanga mā te kirimana, me te kore ture. Ko ia whakaritenga i roto i ngā tekau mā rua he āhuatanga o tētahi whakaritenga i waenga i tētahi whakahaere me tētahi kaiwhakarato, ā, ko te hoko tūmatanui te wāhi e tuhia ai taua whakaritenga.
A selection law — adopted from Boucher’s AEP-001 and adapted for the Village — by which a candidate AI artifact may replace the one in service only if it passes mandatory gates (valid proof, beats baseline on evaluation, risk under threshold, rollback drilled, canary scoped, scope authorised, challenge window cleared). The numeric score is advisory; the gates are mandatory. The Village adds a further gate the original lacks: the change must keep the community the author of its own decisions.
[DeepL] He ture kōwhiringa — i tangohia mai i te AEP-001 a Boucher, ā, i whakarerekēhia mō te Village — mā reira ka taea e tētahi taonga AI kaitono te whakakapi i te mea e whakamahia ana, mēnā ka eke ia ki ngā kuaha here (tautuhinga whaimana, e whakawhiti ana i te paearu whakatauranga, mōrearea kei raro i te pae, kua whakamātauria te whakahoki, kua tautuhia te rohe canary, kua whakaaetia te rohe, kua oti te matapaki wā wero). He tohutohu noa te tatauranga; he mea here ngā kuaha. Ka tāpiri a Village i tētahi kuaha anō kāore i te mea taketake: me mau tonu te huringa i te hapori hei kaituhi o āna ake whakataunga.
The name of a three-part series (September 2026) and of the question it asks: can an organisation establish, afterwards, what its automated systems actually did — to somebody with no reason to take its word for it? Keeping a record is not the same thing. The instruments needed have been standardised for decades; the record must be evidential before any detection built on it means anything; and one measured quantity, the recognition rate, bounds the whole proposal.
[DeepL] Ko te ingoa o tētahi raupapa toru-wāhanga (Mahuru 2026) me te pātai e pātaitia ana e ia: ka taea e tētahi whakahaere te whakapūmau, i muri mai, he aha tonu ngā mahi a ōna pūnaha aunoa — ki tētahi tangata kāore he take kia whakapono ki āna kupu? Ehara te pupuri rekoata i te mea ōrite. Kua paerewahia ngā taputapu e hiahiatia ana mō ngā tekau tau maha; me whai taunakitanga te rekoata i mua i te whai tikanga o tētahi kitenga e hangaia ana i runga i a ia; ā, kotahi te rahinga kua inea, arā te pāpātanga tautohu, e here ana i te tono katoa.
W3C PROV-DM (Recommendation, 30 April 2013): "information about entities, activities, and people involved in producing a piece of data or thing, which can be used to form assessments about its quality, reliability or trustworthiness." An agent is "something that bears some form of responsibility"; attribution ascribes an entity to an agent.
Caution: PROV states its own limit: it does not say explicitly who bears responsibility, or to what degree. It is also the only retrieved normative home for a definition of delegation, so a reader wanting one takes it from a provenance model and inherits that caveat.
Ata whakatūpato: E kī ana a PROV i tōna ake here: kāore ia e kī mārama ana ko wai te tangata e kawenga ana, me te taumata rānei. Koinei anake te puna paerewa kua tikiia hei tautuhi i te tuku kawenga, nō reira, ki te hiahia te kaipānui kia whai tautuhi, ka tango ia i tētahi tauira takenga, ā, ka mau ki a ia taua whakatūpato.
[DeepL] W3C PROV-DM (Tūtohu, 30 Aperira 2013): "ngā pārongo mō ngā mea, ngā mahi, me ngā tāngata i whai wāhi ki te whakaputa i tētahi wāhanga raraunga, i tētahi mea rānei, ā, ka taea te whakamahi hei hanga aromatawai mō tōna kounga, tōna pono, tōna whakawhirinaki rānei." Ko te kaiwhakahaere he mea e mau ana i tētahi momo haepapa; mā te toha e tohu ana i tētahi mea ki tētahi kaiwhakahaere.
A timestamp issued by a provider on the European Union trusted list, which under eIDAS carries a statutory presumption as to its time and as to the integrity of the data bound to it. The presumption applies in the European Union. It does not automatically reach other jurisdictions, and describing it as though it did would be a false equivalence.
[DeepL] He tohu wā i tukuna e tētahi kaiwhakarato kei runga i te rārangi whakawhirinaki a te Uniana o Europi, ā, i raro i te eIDAS, he whakapae ā-ture mō te wā me te pono o ngā raraunga e hono ana ki a ia. Ka whai mana tēnei whakapae i roto i te Uniana o Europi. Kāore e tae aunoa ki ētahi atu rohe whakahaere ture, ā, ko te whakamārama i a ia pēnei he taurite teka.
The minimum number of board, committee, or assembly members required to be present before formal business can proceed. Set by the body's own rules. The platform tracks attendance against quorum and surfaces the result before formal motions are recorded.
[DeepL] Ko te iti rawa o ngā mema o te poari, o te komiti, o te huihuinga rānei e hiahiatia ana kia tae mai i mua i te haere tonu o ngā mahi ā-ture. Kua whakaritea e ngā ture ake o te rōpū. Ka aroturuki te papanga i te tae mai ki te kōrum, ā, ka whakaatu i te hua i mua i te tuhi i ngā tono ā-ture.
A formal decision recorded by a board or committee after a motion has been moved, seconded, discussed, and carried by vote. Resolutions form the persistent governance trail of the organisation; later decisions reference them by date and number.
[DeepL] He whakataunga ā-ture i tuhia e tētahi poari, e tētahi komiti rānei i muri i te whakatakoto, te tautoko, te matapaki, me te whakaaetanga mā te pōti. Ko ngā whakataunga te ara whakahaere mau tonu o te whakahaere; ka tohu ngā whakataunga ā muri ake ki a rātou mā te rā me te nama.
The internet standard describing how a client asks a timestamp authority to date a hash, and what the authority returns. The reply is a signed token that a third party can check independently, years later, without the original service being involved.
[DeepL] Ko te paerewa ipurangi e whakamārama ana me pēhea te kiritaki e tono ana ki tētahi mana tohu rā kia hoatu he tohu rā ki tētahi hash, me ngā mea ka whakahokia e taua mana. Ko te whakautu he tohu hainatia e taea ai e tētahi tuatoru te tirotiro motuhake, ahakoa ngā tau e whai ake nei, me te kore e whai wāhi te ratonga taketake.
Hannah Arendt's name for authority that is real while nobody is answerable for it: an intricate system of offices in which no one can be held responsible. Not the absence of rule but tyranny without a tyrant, distinguished by there being nobody left to argue with. The practical test: when the terms change under you, who do you ring?
[DeepL] Ko te ingoa i hoatu e Hannah Arendt mō te mana tūturu, ahakoa kāore he tangata e kawenga ana mōna: he pūnaha tari matatini kāore e taea te whakapae kawenga ki tētahi. Ehara i te kore ture, engari he tūkino kāore he rangatira tūkino, ā, ka tautuhia nā te kore tangata hei whawhai kōrero. Ko te whakamātautau ā-mahi: ka huri ngā tikanga i raro i a koe, ko wai tāu e waea atu ai?
The signed decision object that admits, rejects, canaries, promotes, pauses, or rolls back a candidate AI artifact. In the Village it is a maker-checker decision record — proposer not equal to approver, signed by named human guardians — rather than an on-chain contract or a token-weighted vote, so there is no stake to weight and no governance to capture.
[DeepL] Te tūemi whakatau kua hainatia e whakaae ana, e whakakore ana, e whakamātautau ana (canaries), e whakatairanga ana, e whakatā ana, rānei e whakahoki whakamuri ana i tētahi taonga AI kaitono. I roto i te Village, he rēhita whakatau kaihanga-kaiwhakamātau tēnei — kāore te kaitono e ōrite ana ki te kaiwhakaae, ā, kua hainatia e ngā kaitiaki tangata kua ingoa — ehara i te kirimana kei runga i te mekameka, i te pōti taumaha-token rānei, nō reira kāore he painga hei taumaha, kāore hoki he mana whakahaere hei hopu.
Serve-authorised gate — Kuaha whakaaetia e te kaiwhakarato
The gate the Village adds beyond a capability-only proof gradient: a change is refused if it makes the community less the author of its own decisions — even if it scores higher, costs less, and clears every other gate — and, where it touches a community’s data or framing (most sharply te ao Māori data governance), it requires the consent of those it affects. Proof-of-evolution is necessary but not sufficient; authorship is not a metric. It encodes the principle that AI is the servant, not the subject.
[DeepL] Ko te kuaha e tāpirihia ana Village ki tua atu i te āheinga anake hei paearu whakamātautau: ka whakahēhia tētahi panoni mēnā ka whakaiti i te hapori hei kaituhi o āna ake whakataunga — ahakoa he tiketike ake tōna tohu, he iti ake te utu, ā, ahakoa ka whakamanahia ngā kuaha katoa — ā, ki ngā wāhi e pā ana ki ngā raraunga o te hapori, ki tōna anga rānei (i te tino kaha i roto i te whakahaere raraunga o te ao Māori ), me whai whakaaetanga a te hunga e pāngia ana. He mea tika te whakamātautau whanaketanga, engari kāore e ranea; ehara te kaituhi i te ine. Ka whakamunatia e ia te mātāpono ko te AI he kaimahi, ehara i te rangatira.
A vendor term for a nation's domestic capability to produce artificial intelligence using its own infrastructure, data, workforce and business networks.
What it decides: Read the terms it contains, then look for one covering inspection, alteration or stopping. It is a coherent definition of production capacity and not an answer to the question of who holds the controls.
He aha tāna e whakatau ai: Pānuitia ngā tikanga kei roto, katahi ka rapu i tētahi e kapi ana i te tirotiro, te whakarerekē, te whakamutu rānei. He whakamārama mārama tēnei mō te kaha whakaputa, ehara i te whakautu ki te pātai ko wai e pupuri ana i ngā mana whakahaere.
[DeepL] He kupu hokohoko mō te āheinga ā-rohe o tētahi whenua ki te whakaputa i te mātauranga atamai mā te whakamahi i āna ake hanganga, raraunga, kaimahi me ngā whatunga pakihi.
Sovereignty as rightful authority — Sovereignty as rightful authority
The recognised standing of a community to make binding decisions over the systems that act on it — distinguished from sovereignty as capacity (the ability to build, fund, and out-compete). The Village holds that rightful authority, paired co-equally with data self-determination, can be held by communities that will never win the capacity race.
[DeepL] Ko te tūnga kua whakamanahia o tētahi hapori ki te whakatau whakatau whai mana mō ngā pūnaha e pā ana ki a ia — he rerekē i te rangatiratanga hei āheinga (te kaha ki te hanga, ki te pūtea, ki te whakataetae kia toa). E whakapono ana Te Hāpori e taea ana e ngā hapori kāore e toa i te omaoma āheinga te pupuri i te mana tika, e taurite ana ki te whakatau raraunga mā rātou anō.
Structural governance — Te mana whakahaere hanganga
Governance whose rules are properties of an arrangement rather than statements in a document: the prohibited action is not available to be performed, rather than available and forbidden. A credential that was never issued cannot be presented; a capability that was never delegated cannot be exercised.
What it decides: Whether a requirement survives the document going unread. A structural requirement holds whether or not anybody consults the policy that day, and whether or not the policy still exists.
He aha tāna e whakatau ai: Ahakoa ka ora tonu te whakaritenga ahakoa kāore te tuhinga i pānuitia. Ka mau tonu te whakaritenga hanganga ahakoa kāore he tangata i tirotiro i te kaupapa here i taua rā, ā, ahakoa kei te ora tonu rānei te kaupapa here.
[DeepL] He whakahaere e noho ana ōna ture hei āhuatanga o tētahi whakaritenga, ehara i te mea he kōrero i roto i tētahi tuhinga: kāore e wātea ana te mahi e aukatihia ana kia mahia, ehara i te mea e wātea ana, ā, kua aukatihia. Kāore e taea te whakaatu i tētahi tohu kāore i tukuna; kāore e taea te whakamahi i tētahi āhei kāore i whakawhiwhia.
The principle that authority and decisions belong at the most local competent level, with higher levels acting only when they can do so more effectively. Classically stated in Quadragesimo Anno (1931, §79) and written into European Union law (TEU Art. 5(3)); one of the traditions grounding the Village’s federated, human-scale model of sovereignty.
[DeepL] Ko te mātāpono e mea ana me noho te mana me ngā whakataunga ki te taumata ā-rohe whai mana, ā, me mahi anake ngā taumata teitei ina ka taea e rātou te mahi whai hua ake. I whakapuaki tuatahi i roto i Quadragesimo Anno (1931, §79), ā, i tuhia ki roto i te ture o te Kotahitanga o Europi (TEU Art. 5(3)); ko tētahi o ngā tikanga e whakakaha ana i te tauira rangatiratanga honohono, ā-tangata o te Hāpori.
How a later mandate replaces an earlier one. The earlier mandate stays on the record, unaltered, and a lookup returns the latest mandate that has not itself been superseded. For mandates recorded through the Governance API it is the only way a mandate ends today: they have no validity window and no revocation. Provenance standing authorisations also carry an end date (at most twelve months) and can be withdrawn.
[DeepL] Me pēhea e whakakapi ai tētahi whakahau hou i tētahi whakahau o mua. Ka noho tonu te whakahau o mua ki te rēhita, kāore i whakarerekē, ā, mā te rapu ka whakahokia mai te whakahau hou rawa kāore anō kia whakakapia. Mō ngā whakahau i tuhia mā te Governance API, koinei anake te huarahi e mutu ai tētahi whakahau i ēnei rā: kāore he matapōkere whaimana, kāore he whakakore. Ka mau hoki he rā whakamutunga (kia tekau mā rua marama te roa rawa) ki ngā whakaaetanga tū e whakamana ana i te takenga mai, ā, ka taea te tango.
The current operative body for Māori data governance in Aotearoa New Zealand (established 2019). Te Kāhui Raraunga maintains the Māori Data Governance Model (Tuia te korowai o Hine-Raraunga, eight pou) and the Māori AI Governance Framework. Operationally distinct from and succeeding Te Mana Raraunga's earlier 2016/2018 principles, which Taiuru's 2025 critical analysis revisited.
[DeepL] Ko te rōpū whakahaere e mahi ana mō te whakahaere raraunga Māori i Aotearoa New Zealand (i whakatūria i te tau 2019). Ka tiaki a Te Kāhui Raraunga i te Mōdel Whakahaere Raraunga Māori (Tuia te korowai o Hine-Raraunga, e waru pou) me te Anga Whakahaere AI Māori. He rerekē āna whakahaere i ngā mātāpono o mua a Te Mana Raraunga (2016/2018), ā, nāna i whai ake i aua mātāpono, ā, i arotakehia anō e te tātaritanga matatini a Taiuru mō te tau 2025.
The Māori Data Sovereignty Network. "Mana" here carries authority and standing; "raraunga" is data. The network's principles articulate Māori data sovereignty as a collective right requiring both consent and ongoing kaitiakitanga. Operationally superseded since ~2019 by Te Kāhui Raraunga's Māori Data Governance Model; the 2018 principles have been critically revisited by Taiuru (2025), particularly around their applicability to AI.
[DeepL] Te Whatunga Rangatiratanga Raraunga Māori. Ko te kupu "mana" i konei e tohu ana i te mana me te tū; ko te kupu "raraunga" te raraunga. E whakamārama ana ngā mātāpono o te whatunga i te rangatiratanga raraunga Māori hei tika ā-hapori e hiahiatia ana te whakaaetanga me te kaitiakitanga tonutanga. Kua whakakapia i ngā whakahaere mai i te tau 2019 e te Tauira Whakahaere Raraunga Māori a Te Kāhui Raraunga; kua arotakehia hohonu ngā mātāpono o te tau 2018 e Taiuru (2025), otirā mō tō rātou whai wāhi ki te AI.
The 1840 treaty between the British Crown and many Māori rangatira (chiefs) that founds the constitutional relationship between Māori and the New Zealand state. Article 2 protects taonga — treasures including, in current reading, the data and cognition that mediate community life. The architecture's Te Tiriti framing engages this Article-2 duty.
[DeepL] Ko te Tiriti o Waitangi o te tau 1840 i waenga i te Karauna Piritene me ngā rangatira Māori maha, nāna i whakatū te hononga ture matua i waenga i ngā Māori me te kāwanatanga o Aotearoa. E tiaki ana te Wāhanga 2 i ngā taonga — arā, ngā rawa whakahirahira, tae atu ki ngā raraunga me te mātauranga e whakawhiti ana i te oranga hapori i te panui o nāianei. Ka whai wāhi te anga Te Tiriti o te hanganga ki tēnei haepapa o te Wāhanga 2.
The observation that the same hosted software can be a materially different proposition depending on the agreement it is used under — where data is processed, whether it is used for training, how long it is kept, and who is answerable. A reader who concludes “not that product” when the truthful conclusion is “not on those terms” has misread their own position. Establishing which terms govern an account is often the first useful step, and is frequently unknown to the person using it.
[DeepL] Ko te kitenga ka rerekē rawa atu te āhua o taua pūmanawa e manaaki ana, i runga i te whakaaetanga e whakamahia ana — kei hea ngā raraunga e tukatukahia ana, mēnā ka whakamahia mō te whakangungu, mō te roa e puritia ana, me te tangata e kawenga ana. He kaipānui ka mutu ki te kī "ehara tēnei i te hua" i te wā ko te whakatau pono he "ehara i runga i ēnei tikanga"; kua pānui hē ia i tōna ake tūnga. Ko te tautuhi i ngā tikanga e whakahaere ana i tētahi pūkete he hīkoi whaihua tuatahi, ā, he maha ngā wā kāore te tangata e whakamahi ana e mōhio ana ki ēnei.
Arendt's term, routinely flattened in retelling. Not stupidity and not conviction, but a capacity for thinking left unexercised in conditions that made not exercising it comfortable.
[DeepL] Ko te kupu a Arendt, e whakaitihia ana i ngā whakahuatanga. Ehara i te pōraruraru, ehara hoki i te whakapono, engari he āheinga ki te whakaaro kāore i whakamahia i roto i ngā āhuatanga i māmā ai te kore whakamahi.
Timestamp authorities in use — Ngā mana tohu wā e whakamahia ana
The outside authorities whose stamps the platform relies on, each in a different country. Certum, in Poland, stamps receipts and the daily sweep. A state authority in Portugal, the one behind the Cartão de Cidadão, stamps the daily estate root. ArubaPEC, in Italy, is eIDAS-qualified and is available on request as the second stamp.
[DeepL] Ko ngā mana o waho e whakawhirinaki ana te papanga ki ā rātou tohu, ā, kei ia whenua rerekē. Ko Certum, i Poroni, e tohu ana i ngā rīpeka me te horoi ā-ia rā. Ko tētahi mana ā-motu i Potukara, ko te mea kei muri i te Cartão de Cidadão, e tohu ana i te pakiaka rawa ā-ia rā. Ko ArubaPEC, i Itari, kua whakamanahia e eIDAS, ā, ka wātea i runga i te tono hei tohu tuarua.
A statement of how a system, organisation, or platform discharges its obligations under Te Tiriti o Waitangi. The platform publishes a Tiriti Compliance Statement; Dr Karaitiana Taiuru reviewed v0.1.
[DeepL] He tauākī mō te āhua e whakatutuki ai tētahi pūnaha, whakahaere, rānei tūāpapa i āna herenga i raro i Te Tiriti o Waitangi. Ka whakaputa te tūāpapa i tētahi Tauākī Whakatutuki Tiriti; i arotakehia e Dr Karaitiana Taiuru te putanga v0.1.
An assertion by an outside authority that a particular hash existed at a particular moment. Because the authority has no stake in the record, the date cannot later be moved. Timestamps of this kind are widely available at no charge, which is why sealing is not something worth charging for.
[DeepL] He whakapuaki nā tētahi mana o waho e tohu ana i te noho o tētahi hash motuhake i tētahi wā motuhake. Nā te mea kāore he pānga o taua mana ki te rēhita, kāore e taea te neke i te rā i muri mai. He wātea whānuitia ngā tohu wā pēnei, ā, kāore he utu, nō reira kāore he take kia utua te huna.
United States legislation that gives US authorities jurisdiction over data held by US-owned cloud and SaaS providers, regardless of where in the world that data physically resides. The principal legal reason the platform's vendor-prohibition rule excludes all US-owned infrastructure from the production request path.
[DeepL] He ture a te United States e tuku ana ki ngā mana o te United States te mana whakahaere ki ngā raraunga e puritia ana e ngā kaiwhakarato kapua me ngā ratonga pūmanawa hei ratonga (SaaS) nō te United States, ahakoa kei hea i te ao e noho ana aua raraunga ā-tinana. Ko te take ture matua i aukatia ai e te ture aukati kaiwhakarato o te papanga ngā hanganga katoa nō te United States i te ara tono whakaputa.
Vendor prohibition (US) — Te aukati i ngā kaihoko (Amerika)
The standing rule that no US-owned cloud, SaaS, or managed service may sit in the production request path — neither at the data layer nor at the inference layer. Driven by the CLOUD Act's reach over US-owned infrastructure.
[DeepL] Ko te ture tū tonu, kāore he kapua, he ratonga pūmanawa hei ratonga (SaaS), he ratonga whakahaere rānei e puritia ana e ngā Amerikana e taea te noho i roto i te ara tono whakaputa — kāore i te papa raraunga, kāore hoki i te papa whakamātau. Nā te whānuitanga o te Ture Kapua ki ngā hanganga e puritia ana e ngā Amerikana.
The mathematics associated with robustness: instead of a trajectory towards an optimum, a bounded region a system must stay inside. Associated with Jean-Pierre Aubin.
[DeepL] Ngā pāngarau e pā ana ki te pakari: hei utu mō te ara e anga ana ki te tino pai, he rohe herea hei noho a roto mō te pūnaha. Nā Jean-Pierre Aubin i hono.
Who can see a given piece of content. The platform's visibility levels are All members, Specific subgroups, or Only me — never "public". Members-only by default; the framing is itself a privacy commitment.
[DeepL] Ko wai ka taea te kite i tētahi wāhanga ihirangi kua whakaritea. Ko ngā taumata kitea o te papanga ko Ngā mema katoa, Ngā rōpū iti motuhake, me Au anake — kāore rawa e wātea ki te marea. Mema anake te taunoa; ko tēnei anō te whakapuakitanga o te ū ki te tūmataitinga.
A formal expression of preference on a motion, recorded with the voter's identity, timestamp, and choice (in favour, opposed, abstain). The platform records individual votes for the audit trail; presented or aggregated according to the body's rules.
[DeepL] He whakapuakitanga ā-ture o te manakohanga mō tētahi tono, kua tuhia me te tuakiri o te pōti, te tohu wā, me tōna kōwhiringa (e tautoko ana, e whakahē ana, e kore e pōti). Ka tuhia e te papanga ngā pōti takitahi mō te ara arotake; ka whakaaturia, ka whakakotahitia rānei i runga i ngā ture o te rōpū.
A Waitangi Tribunal claim concerning Māori data sovereignty and the relationship between te ao Māori and emerging technology. Part of the contemporary New Zealand context the platform's governance design engages with.
[DeepL] He kerēme a te Kōti Waitangi e pā ana ki te rangatiratanga raraunga Māori me te hononga i waenga i te ao Māori me ngā hangarau e puta ake ana. He wāhanga tēnei o te horopaki o Niu Ioka o nāianei e pā ana ki te hoahoa whakahaere o te tūāpapa.
Categorised and Tiered Governance — Whakahaere Kāwai me ngā Taumata
A state-led permissioning framework that places agent applications into tiers by sensitivity: sensitive sectors and key industries receive direct administrative scrutiny (filing, testing, recall powers) by the Cyberspace Administration and relevant industry authorities; lower-risk areas operate under compliance self-assessment and industry self-regulation. Proposed in the CAC's 2026 framework, item 11. Tractatus contrast: Tractatus does not classify sectors by risk; the unit of governance is the sovereign record bound to a tenant. Authority over an agent's behaviour lives with the community whose records the agent acts on, not with a national regulator stratifying applications by risk class.
[DeepL] He anga whakahaere whakaaetanga ā-kāwanatanga e whakarōpū ana i ngā tono a ngā māngai ki ngā taumata i runga i te taumata matatapu: ka whiwhi ngā rāngai matatapu me ngā ahumahi matua i te aroturuki ā-tari tūturu (te tuku kōrero, te whakamātautau, ngā mana whakahoki) nā te Mana Whakahaere ā-Ipurangi me ngā mana whakahaere ahumahi e hāngai ana; ka whakahaere ngā wāhi mōrearea iti i raro i te aromatawai ā-tinana mō te hāngai me te whakahaere ā-ahumahi. I whakaarohia i roto i te anga 2026 a te CAC, tūemi 11. Rerekētanga Tractatus: kāore Tractatus e whakarōpū ana i ngā rāngai i runga i te tūraru; ko te wāhanga whakahaere ko te rekoata rangatira e herea ana ki tētahi kaiwhiwhi. Kei te noho te mana whakahaere i ngā whanonga a te māngai ki te hapori e pā ana ngā rekoata ki a ia, ehara i te kaiwhakahaere ā-motu e wehewehea ana ngā tono i runga i ngā kāwai tūraru.
Westphalian sovereignty — Te rangatiratanga ā-Westphalia
The modern default idea of sovereignty, named after the 1648 Peace of Westphalia: a state holds supreme authority over a fixed territory, and other states do not interfere inside its borders. It suits land and borders, but suits data poorly — and suits peoples whose authority was never territorial (such as iwi and hapū) even less. The paper contrasts this territorial, capacity-backed model with sovereignty as rightful authority, which a community can hold over its data and decisions without holding territory.
[DeepL] Ko te ariā taunoa o te rangatiratanga i ēnei rā, i tapaina i muri i te Rangimārie o Westphalia o te tau 1648: he mana rangatira tō te kāwanatanga ki runga i tētahi rohe tūturu, ā, kāore ērā atu kāwanatanga e whakararuraru i roto i ōna rohe. He pai tēnei mō te whenua me ngā rohe, engari kāore e tino hāngai ki ngā raraunga — ā, he iti ake te hāngai ki ngā iwi kāore i whai mana rohe (pērā i iwi me hapū). Ka whakatairite te pepa i tēnei tauira ā-rohe, tautokohia e te āheinga, ki te rangatiratanga hei mana tika, ka taea e te hapori te pupuri i runga i āna raraunga me āna whakataunga ahakoa kāore he rohe ā-tinana.
Consolidated Village Consensus — Whakaaetanga Whakakotahi a te Hapori
The single sealed map produced when many rooms deliberate the same question and their sealed records are drawn together — showing where the federation converges, where it divides and along which lines, and what holds only locally. It never averages: a minority position is surfaced and attributed to the room that held it, not blended away. The consolidated record is itself sealed and offline-verifiable, and can be read down to each contributing room's record.
[DeepL] Ko te mahere kotahi kua huna i hangaia ina ka whiriwhiri ngā rūma maha i taua pātai kotahi, ā, ka whakakotahitia ā rātou pūrongo huna — e whakaatu ana kei hea te kotahitanga o te kotahitanga, kei hea e wehe ana, i runga i ngā rārangi, ā, he aha ngā mea e mau ana ki tētahi rohe anake. Kāore rawa e toharite: ka puta ake tētahi tūnga iti, ā, ka whakawhiwhia ki te rūma i pupuri i taua tūnga, kāore e whakakotahitia kia ngaro. Ko te rēkōta whakakotahi kua huna, ā, ka taea te whakamana i waho o te whatunga; ka taea hoki te pānui i ia rēkōta o ia rūma i whai wāhi.
Federated citizens' assembly — Hui ā-motu o ngā tāngata whenua
A citizens' assembly run not in one room but in many rooms at once — a party's branches, community groups, regions, memberships — each deliberating the same question and sealing its own record, with the results drawn together into a Consolidated Village Consensus. It aims to combine the breadth of a national vote with the reasoning of an assembly, while keeping every room's dissent legible.
[DeepL] He hui ā-iwi e whakahaerehia ana ehara i te rūma kotahi, engari i ngā rūma maha i te wā kotahi — ngā peka o tētahi rōpū tōrangapū, ngā rōpū hapori, ngā rohe, ngā mema — ia rōpū e matapaki ana i te pātai kotahi, ā, e mau ana i tōna ake pūrongo, ā, ka whakakotahitia ngā hua hei Whakaaetanga Whakakotahi o te Hapori. Ko tōna whāinga kia whakakotahitia te whānuitanga o te pōti ā-motu me te whakaaroaro a te hui, ā, kia mārama tonu ngā whakahe o ia rūma.
Dissent-preserving synthesis — Whakakotahitanga e tiaki ana i te rerekētanga
The rule that a consolidation of many deliberations may never manufacture agreement by blending disagreement away. Splits are carried up verbatim and attributed to the room that held them; a lone position is surfaced, not buried. Dissent is treated as a finding, not as noise to be smoothed out.
[DeepL] Ko te ture, ahakoa te whakakotahitanga o ngā whakawhitiwhiti kōrero maha, kāore e taea te hanga whakaaetanga mā te whakakore i ngā rerekētanga. Ka tukuna ngā wehenga kōrero ā-tuhi, ā, ka tohu ki te rūma i whakahaere ai; ka whakapuaki tētahi tūnga takitahi, kāore e huna. Ka whakaarohia te rerekētanga hei kitenga, ehara i te haruru hei whakakore.
The output of a deliberation rehearsal — a map of where the rooms converged, where they split, where the evidence is thin, and what people should stress-test. It is never an answer or a decision; when a rehearsal reaches agreement too fast it is flagged as under-explored rather than settled. The software rehearses the argument and provokes; people deliberate and decide.
[DeepL] Ko te hua o te whakaharatau whakawhitiwhiti whakaaro — he mahere e whakaatu ana i ngā wā i whakakotahi ai ngā rūma, i wehe ai, i ngoikore ai ngā taunakitanga, me ngā mea e tika ana kia whakamātauria i raro i te pēhanga. Ehara i te whakautu, i te whakataunga rānei; mēnā ka tae wawe rawa te whakaharatau ki te whakaaetanga, ka tohuia hei mea kāore i tino rangahaua, ehara i te mea kua whakatau. Ka whakaharatau te pūmanawa i te tautohetohe, ka whakaoho i ngā whakaaro; ka whiriwhiri ngā tāngata, ka whakatau.
A group of people, often randomly selected to mirror a population, given evidence and time to deliberate a question and reach a reasoned, minority-protected judgement. It is distinct from a referendum, which counts a whole electorate's yes or no without the reasoning. Ireland used both in order: an assembly reasoned through the Eighth Amendment, then a referendum decided it.
[DeepL] He rōpū tāngata, he maha ngā wā ka tīpakohia ā-tūturu hei whakaata i te taupori, ka hoatu ki a rātou ngā taunakitanga me te wā kia whiriwhiri i tētahi pātai, kia tae ki tētahi whakataunga whai whakaaro, ā, kia tiakina te hunga iti. He rerekē tēnei i te pōtitanga ā-motu, e tatau ana i te 'āe' me te 'kāo' a te hunga pōti katoa, kāore he whakamārama. I whakamahia e Airani ēnei e rua i te raupapa: tuatahi he hui i whakawhitiwhiti whakaaro mō te Whakahou Tuawaru, ā, i muri mai ka whakataua mā te pōtitanga ā-motu.
Ancestral deities or spiritual powers associated with domains of the natural world (for example Tāne Mahuta for forests, Tangaroa for the sea); in environmental kaitiakitanga, the wellbeing of a place is read in relation to the atua of its domains.
[DeepL] Ngā atua tūpuna, ngā mana wairua rānei e hono ana ki ngā rohe o te ao taiao (hei tauira, ko Tāne Mahuta mō ngā ngahere, ko Tangaroa mō te moana); i roto i te kaitiakitanga taiao, ka pānuitia te oranga o tētahi wāhi i runga i tōna hononga ki ngā atua o āna rohe.
A sub-tribe within an iwi — a kinship grouping descended from a shared more-recent ancestor. The intermediate level between whānau and iwi.
[DeepL] He peka-iwi i roto i tētahi iwi — he rōpū whanaunga i ahu mai i tētahi tūpuna tata ake i tiritiria e rātou. Ko te taumata waenga i waenga i te whānau me te iwi.
He Tangata, He Karetao, He Ātārangi — He Tangata, He Karetao, He Ātārangi
"A person, a puppet, a shadow" — the title of one of Dr Taiuru's framings, distinguishing what an AI is not (he tangata, a person) from what it might be (he karetao, a puppet operated by another, or he ātārangi, a shadow that follows the form of a person without the substance).
[DeepL] He tangata, he pūtātara, he atarangi — te taitara o tētahi o ngā anga a Dr Taiuru, e wehewehea ana he aha kāore te AI (he tangata) i te mea ka taea pea (he karetao, he pūpeti e whakahaerehia ana e tētahi atu, he ātārangi rānei, he atarangi e whai ana i te āhua o te tangata, kāore he pūmua).
A gathering or meeting, often on a marae and conducted under tikanga — much more than a Western "meeting". A hui carries whakatau (welcome), karakia, formal speeches, shared kai, and the relational obligations that frame whatever business is on the agenda.
[DeepL] He hui, he huihuinga rānei, he maha ngā wā ka tū ki runga i te marae, ā, ka whakahaerehia i raro i ngā tikanga — he nui ake i tētahi 'meeting' Pākehā. Kei roto i te hui te whakatau (māhaki), ngā karakia, ngā whaikōrero ā-ture, te kai tiritiri, me ngā herenga hononga e ārahi ana i ngā mahi katoa kei te rārangi kaupapa.
A tribe — the largest contemporary Māori political and kinship grouping, descended from a common ancestor. Comprises multiple hapū, which in turn comprise multiple whānau.
[DeepL] He iwi — te rōpū tōrangapū me te whanaungatanga Māori nui rawa atu o nāianei, nō tētahi tūpuna kotahi. Kei roto i a ia he maha ngā hapū, ā, kei roto i ia hapū he maha ngā whānau.
A small, place-based AI guardian aide for a single taonga (a river reach, mahinga kai area, or archive) that notices, remembers, and prompts but does not govern, enforce, or speak in its own name; answerable at all times to a human steward group. After the Kaitiaki Intelligence Platform (Reid, Rout et al., Ngāi Tahu Research Centre, 2025).
[DeepL] He āwhina kaitiaki AI iti, e hāngai ana ki tētahi wāhi motuhake, mō tētahi taonga kotahi (he wāhanga o te awa, he wāhi tunu kai, he whare pukapuka rānei), e mōhio ana, e maumahara ana, e whakamōhio ana, engari kāore e whakahaere, e whakatinana, e kōrero rānei i tōna ake ingoa; e kawenga ana i ngā wā katoa ki tētahi rōpū kaitiaki tangata. Whai muri i te Kaitiaki Intelligence Platform (Reid, Rout et al., Ngāi Tahu Research Centre, 2025).
Guardianship, stewardship — exercised in obligation to ancestors, descendants, and the environment. Distinct from property ownership: a kaitiaki holds something on behalf of others rather than owning it outright. The platform's data-sovereignty framing is closer to kaitiakitanga than to property rights.
[DeepL] Te tiakitanga, te kaitiakitanga — e whakahaerehia ana i raro i te herenga ki ngā tūpuna, ki ngā uri, me te taiao. He rerekē ki te rangatiratanga rawa: ko te kaitiaki e pupuri ana i tētahi mea mō ētahi atu, ehara i te mea he rangatira motuhake ia ki taua mea. Ko te anga rangatiratanga raraunga o te papanga e tata ake ana ki te kaitiakitanga i te whakataurite ki ngā mana rawa.
A ritual incantation, prayer, or blessing — spoken or chanted to open gatherings, consecrate food, mark transitions, or farewell the dead. Karakia frame what follows; they are not a religious appendix but part of how the action proceeds.
[DeepL] He karakia tikanga, he inoi, he manaakitanga rānei — e kōrerotia ana, e waiatatia ana rānei hei whakatuwhera i ngā hui, hei whakatapu i te kai, hei tohu i ngā huringa, hei mihi whakamutunga ki te hunga mate. Ko ngā karakia te anga mō ngā mahi e whai ake nei; ehara rātou i te tāpiritanga whakapono, engari he wāhanga nō te huarahi e anga whakamua ai ngā mahi.
A purpose, principle, or guiding philosophy that shapes how something is done. Dr Taiuru's Kaupapa Māori AI Framework names a kaupapa for AI grounded in te ao Māori.
[DeepL] He kaupapa, he mātāpono, he ariā ārahi e ārahi ana i te āhua o te mahi. Kaupapa Māori AI a Dr Taiuru e tautuhi ana i tētahi kaupapa mō te AI e ū ana ki te ao Māori.
The specific protocols of a particular marae — how visitors are welcomed (pōwhiri), where people sit, the order of speaking, the karanga (call), the songs, the customs around shared food. Each marae has its own kawa; respecting it is part of being a guest.
[DeepL] Ngā kawa motuhake o tētahi marae — te pōwhiri i ngā manuhiri, te wāhi noho a te tangata, te raupapa kōrero, te karanga, ngā waiata, ngā tikanga mō te kai tiritahi. He kawa motuhake tō ia marae; ko te whakaute i aua kawa he wāhanga o te noho manuhiri.
A gift offered in reciprocal relationship — not a payment for service but a way of strengthening the bond between giver and receiver. The platform's funding model uses koha rather than subscription pricing.
[DeepL] He koha e tukuna ana i roto i te hononga whakawhiti — ehara i te utu mō te ratonga, engari he huarahi hei whakapakari i te hononga i waenga i te kaiwhakarato me te kaiwhiwhi. Ka whakamahi te tauira pūtea o te papanga i te koha, kaua i te utu o te ohaurunga.
Speech, talk, discussion, conversation — and also narrative, account, story, teaching. Kōrero holds the spoken word, the genealogical account, and the negotiated meaning together as one continuous practice rather than three separate things.
[DeepL] Kōrero, kōrero tahi, matapaki, whakawhiti kōrero — me te pūrākau, te pūrongo, te kōrero, te whakaako. Ka whakakotahitia e kōrero te kupu ā-waha, te pūrongo whakapapa, me te tikanga i whakawhiti kōrero, hei kotahi te tikanga tonutanga, ehara i te mea he toru ngā mea motuhake.
Authority, prestige, dignity, intrinsic worth. Held by people, places, and taonga; can be enhanced or diminished by how others act in relation to it. The platform's privacy posture rests on the recognition that members carry mana that the system must not erode.
[DeepL] Te mana, te hiranga, te manaakitanga, te uara taketake. E mau ana i ngā tāngata, i ngā wāhi, i ngā taonga; ka taea te whakanui, te whakaiti rānei i runga i ngā mahi a ētahi atu ki a rātou. Ko te tūnga tūmataiti o te tūāpapa e tū ana i runga i te mōhiotanga kei ngā mema he mana kāore e tika kia whakaitia e te pūnaha.
Reciprocal care, hospitality, generosity in relationship. The koha system through which the platform sustains its work draws on manaakitanga as much as on whanaungatanga.
[DeepL] Te tiaki ā-whakawhiti, te manaakitanga manuhiri, te atawhai i roto i te hononga. Ko te pūnaha koha, māna e tautoko ai te papa i āna mahi, e whai manaakitanga ana, e whai whanaungatanga ana hoki.
The communal meeting ground at the heart of a Māori community — both a physical place (with its wharenui, wharekai, urupā) and a social institution where tikanga is practised.
[DeepL] Te papa hui ā-hapori kei te ngākau o te hapori Māori — he wāhi ā-tinana (me tōna wharenui, wharekai, urupā) me tētahi whakahaere ā-pāpori e whakatinanahia ana ngā tikanga.
Grandchild or descendant; by extension, future generations. Used here as a metaphor for AI as descendant — unfinished, educable, dependent on inheritance, answerable to those who shape it and oriented toward those yet to come — rather than as master or superintelligent successor.
[DeepL] He mokopuna, he uri rānei; mā te whakawhānui, ko ngā whakatupuranga ā muri ake. Kei konei hei whakatairite mō te AI hei uri — kāore anō kia oti, ka taea te ako, e whakawhirinaki ana ki ngā taonga tuku iho, e whakautu ana ki te hunga e ārahi ana, ā, e aro ana ki te hunga e haere ake nei — ehara i te rangatira, i te kaiwhakakapi tino mātau rānei.
An intergenerational memory and learning companion for a whānau or hapū that records, retrieves, summarises and asks clarifying questions, preserving narrative, provenance and context for descendants — but issues no rulings on identity, whakapapa, or tikanga.
[DeepL] He hoa mahara me te ako ā-whakatipuranga mō te whānau, mō te hapū rānei, e tuhi ana, e tiki ana, e whakarāpopoto ana, ā, e pātai ana i ngā pātai whakamārama, e tiaki ana i te kōrero, te takenga mai me te horopaki mō ngā uri — engari kāore e tuku whakataunga mō te tuakiri, te whakapapa, te tikanga rānei.
Mātauranga is knowledge — accumulated learning. Mātauranga Māori is the body of Māori knowledge specifically: intergenerationally-transmitted understanding that includes but is not limited to language, environment, ancestry, ritual, and craft. A taonga that the platform's data-sovereignty design is structured to protect rather than appropriate.
[DeepL] Ko Mātauranga te mātauranga — te ako kua kohia. Ko te Mātauranga Māori te tinana o te mātauranga Māori motuhake: he mōhiotanga i tukuna i waenga i ngā whakatupuranga, ā, kei roto, engari ehara i te mea anake, ko te reo, te taiao, te whakapapa, ngā ritenga, me ngā mahi toi. He taonga tēnei, ā, kua hangaia te hoahoa rangatiratanga raraunga o te papanga kia tiakina, kaua kia tango.
Life force, vital essence. Held by living beings, places, and taonga; can be diminished by mistreatment. One of the four dimensions of Mead's Tikanga Test.
[DeepL] Te kaha ora, te pūmua ora. E mau ana i ngā mea ora, i ngā wāhi, me ngā taonga; ka taea te heke i te whakahaehaetanga. Ko tētahi o ngā āhuatanga e whā o te Tikanga Whakamātautau a Mead.
Mead's Tikanga Test — Whakamātautau Tikanga a Mead
Hirini Moko Mead's evaluative surface for measuring whether a practice is tika — through tapu (sacredness), mauri (life force), take-utu-ea (the obligation cycle of issue, response, and resolution), and whanaungatanga (relationship). Paper B's full empirical companion will engage this test directly.
[DeepL] Te mata aromatawai a Hirini Moko Mead hei ine mēnā he tika tētahi tikanga — mā te tapu (te tapu), te mauri (te kaha ora), te take-utu-ea (te huringa haepapa o te take, te urupare, me te whakatau), me te whanaungatanga (te hononga). Ka whakamahi tika i tēnei whakamātautau te hoa rangahau ā-tinana katoa o Pepa B.
Ordinary, unrestricted, free from tapu; the complementary state to tapu. New Zealand AI guidance uses the tapu/noa distinction to assess the sensitivity and risk of Māori data before generative-AI use.
[DeepL] Noa, kāore he here, kāore he tapu; ko te āhua tautoko ki te tapu. Ka whakamahi te aratohu AI o Aotearoa i te wehewehe tapu/noa hei aromātai i te āwangawanga me te tūraru o ngā raraunga Māori i mua i te whakamahi i te AI whakaputa.
Self-determination, chiefly authority. Article 2 of Te Tiriti affirms tino rangatiratanga (full self-determination) over taonga. In the data context: the right of a community to govern its own data and the systems that act upon it.
[DeepL] Te whakatau ā-motu, arā ko te mana matua. Ko te Tuhinga 2 o Te Tiriti e whakau ana i te tino rangatiratanga (te whakatau ā-motu katoa) mō ngā taonga. I roto i te horopaki raraunga: ko te tika o tētahi hapori ki te whakahaere i āna ake raraunga me ngā pūnaha e mahi ana ki runga i aua raraunga.
A temporary ritual prohibition or restriction placed on an area or resource (for example a seasonal closure or a closure after a death); a form of governance state that a place-based kaitiaki intelligence must record and respect.
[DeepL] He aukati, he here rānei mō te wā poto i whakatūria ki tētahi wāhi, ki tētahi rauemi rānei (hei tauira, he katinga ā-wā, he katinga i muri i te matenga); he momo whakahaere e tika ana kia tuhia, kia whakaute hoki e te mātauranga kaitiaki ā-wāhi.
A council, assembly, or governance body — often the modern administrative form through which an iwi or hapū exercises its rangatiratanga. Several rūnanga deploy or trial the platform.
[DeepL] He kaunihera, he huihuinga, he rōpū whakahaere rānei — he āhua whakahaere hou e whakamahia ana e tētahi iwi, e tētahi hapū rānei hei whakatinana i tōna rangatiratanga. He maha ngā rūnanga e whakamahi ana, e whakamātautau rānei i te papanga.
The cycle of issue (take), response (utu), and resolution (ea). A te ao Māori frame for thinking about how harms are addressed and balance restored. One of the four dimensions of Mead's Tikanga Test.
[DeepL] Ko te huringa o te take (take), te urupare (utu), me te whakatau (ea). He anga ā-ao Māori hei whakaaro mō te āhua e aro ai ki ngā kino, me te whakahoki anō i te taurite. Ko tētahi o ngā āhuatanga e whā o te Tikanga Test a Mead.
The extended Māori funeral rite — three or more days of mourning, formal speeches, song, and shared food on the marae, culminating in burial. Tangihanga is one of the deepest expressions of whanaungatanga and one of the most consequential commitments a person can make to their wider whānau.
[DeepL] Ko te ritenga tangihanga Māori roa — e toru rā, neke atu rānei o te tangi, ngā whaikōrero ā-ture, ngā waiata, me te kai tiritiri i te marae, ā, ka mutu ki te tanumanga. Ko te tangihanga tētahi o ngā whakaaturanga hōhonu rawa o te whanaungatanga, ā, ko tētahi hoki o ngā kawenata nui rawa ka taea e te tangata te mahi mō tōna whānau whānui.
Treasure — anything valued, including tangible objects, places, language, knowledge, and relationships. Te Tiriti Article 2 protects taonga; current reading extends this to community data and the AI systems that mediate community life.
[DeepL] Taonga — he mea katoa e whai uara ana, tae atu ki ngā mea ā-tinana, ngā wāhi, te reo, te mātauranga, me ngā hononga. E tiaki ana te Tuhinga 2 o Te Tiriti i ngā taonga; ko te panui o nāianei e whakawhānui ana i tēnei ki ngā raraunga hapori me ngā pūnaha atamai e whakahaere ana i te oranga hapori.
Sacredness — a state requiring respect and care; certain matters are tapu and must be approached with the appropriate protocol. One of the four dimensions of Mead's Tikanga Test.
[DeepL] Te tapu — he āhua e hiahiatia ana kia whakaute, kia tiakina; he take tapu ētahi, ā me tata atu ki a rātou mā te kawa tika. Ko tētahi o ngā āhuatanga e whā o te Tikanga Test a Mead.
A Māori ethical framework of positive, escalating cycles of reciprocal exchange that encourage regenerative human action; one of the structuring concepts of the Kaitiaki Intelligence Platform.
[DeepL] He anga matatika Māori o ngā huringa pai e piki haere ana o te whakawhitinga ā-taha e rua, e akiaki ana i ngā mahi tangata whakahou; tētahi o ngā ariā hanganga o te Papanga Mātauranga Kaitiaki.
The Māori world — the worldview, values, knowledge, and ways of being that have shaped Māori life. The platform's te ao Māori engagement is grounded in the recognition that this worldview is a body of substantive content, not an aesthetic overlay on a Western system.
[DeepL] Te ao Māori — te tirohanga ao, ngā uara, te mātauranga, me ngā huarahi noho i hanga ai te oranga o te iwi Māori. Kei runga i te mōhiotanga ko tēnei tirohanga ao he kohinga ihirangi whai tikanga, ehara i te āhua whakapaipai noa i runga i tētahi pūnaha Pākehā.
The Māori language. A taonga in its own right; one of New Zealand's three official languages. The platform's translation workflow uses DeepL for te reo (DeepL supports MI as a target language) for initial drafts; cultural-loaded terms are flagged for human review.
[DeepL] Te reo Māori. He taonga motuhake; tētahi o ngā reo ā-ture e toru o Aotearoa. Ka whakamahi te papanga i te rerenga mahi whakamāori a DeepL mō te reo Māori (e tautoko ana a DeepL i te MI hei reo whāinga) mō ngā tuhinga tuatahi; ka tohu ngā kupu whai ahurea kia arotakehia e te tangata.
Customary Māori practice — the right way of doing things in a given context, encompassing protocol, ethics, and relational obligations. Tikanga is context-specific; what is correct depends on the people, place, and purpose.
[DeepL] Ngā tikanga Māori tuku iho — te huarahi tika hei mahi i ngā mea i roto i tētahi horopaki, e kapi ana i ngā kawa, ngā tikanga matatika, me ngā herenga hononga. He motuhake te tikanga i ia horopaki; ka whakawhirinaki te tika ki ngā tāngata, ki te wāhi, me te kaupapa.
Reciprocity — the response that completes a relationship. Often mistranslated as "revenge"; in tikanga it carries the broader sense of restoring balance, including through gift, gratitude, or repair.
[DeepL] Te whakahoki — te urupare e whakaoti ana i te hononga. He maha ngā wā ka whakamāoritia hei 'utu'; i roto i te tikanga, he whānui ake tōna tikanga ki te whakahoki i te taurite, tae atu ki te koha, te whakawhetai, me te whakatikatika.
Genealogy — the network of ancestral and descendant relationships that places a person within whānau, hapū, iwi, and waka. Whakapapa is not just a family tree; it situates a person in the world by naming their connections, and it carries obligations as well as identity.
[DeepL] Ko te whakapapa he whatunga hononga tūpuna me ngā uri e whakanoho ana i te tangata ki roto i te whānau, hapū, iwi, me te waka. Ehara te whakapapa i te rākau whānau anake; mā te ingoa o ngā hononga ka whakanoho i te tangata ki te ao, ā, ka kawe mai i ngā haepapa me te tuakiri.
Extended family — broader than the nuclear family, encompassing multiple generations and a wider circle of kinship. The whānau Tier-1 cohort is trained on contexts particular to this scale of community.
[DeepL] Whānau whānui — he whānui ake i te whānau pūtau, e kapi ana i ngā whakatipuranga maha me tētahi porowhita whanaungatanga whānui. Kua whakangungua te rōpū whānau Tier-1 ki ngā horopaki motuhake o tēnei taumata hapori.
Relationship-building, kinship, the cultivation and maintenance of connection. One of the four dimensions of Mead's Tikanga Test. The platform's koha framing draws on whanaungatanga.
[DeepL] Te hanga hononga, te whanaungatanga, te whakatipu me te tiaki i te hononga. Ko tētahi o ngā āhuatanga e whā o te Tikanga Test a Mead. Ko te anga koha o te tūāpapa e hāngai ana ki te whanaungatanga.
What a community AI has learned and remembers about a member personally across conversations — preferences, recurring questions, prior context. Members have full visibility and control: anything can be inspected and removed. The pattern itself is significant: memory is a member-controlled asset, not a vendor-controlled extraction.
[DeepL] He aha ngā mea kua akohia e te AI hapori, ā, e maumahara ana mō tētahi mema i ngā kōrero – ngā manakohanga, ngā pātai e hoki mai ana, me ngā horopaki o mua. He tino kitea, he mana whakahaere hoki ā ngā mema: ka taea te tirotiro, te tango rānei i ngā mea katoa. He mea nui te tauira nei: he rawa e whakahaerehia ana e ngā mema te mahara, ehara i te tangohanga e whakahaerehia ana e te kaihoko.
Training a model for a community type that does not yet have a deployment tenant. The project does not do this; the corpus is then necessarily speculative rather than the community's own content.
[DeepL] Te whakangungu i tētahi tauira mō tētahi momo hapori kāore anō kia whai kaipāpā tuku. Kāore te kaupapa e mahi ana i tēnei; nā reira, he whakapae noa te kohinga raraunga, ehara i te ihirangi ake o te hapori.
Automation complacency — Te whakangāwari o te aunoatanga
The failure mode in which a system performs well enough for long enough that the humans supervising it stop checking. Combined with degrading output it produces people trusting ever less reliable systems ever more. Hamant calls it falling asleep at the wheel.
[DeepL] Ko te momo hapa e mahi pai ana te pūnaha mō te wā roa kia mutu ai te tirotiro a ngā tāngata e whakahaere ana. Ka honoa ki te hekenga o ngā hua, ka whakapono ngā tāngata ki ngā pūnaha kāore e tino pono ana. Ka kī a Hamant he moe i te wīra.
A general-purpose language model used as the starting point before any community-specific layering. The project's current base is the 14-billion-parameter Qwen2; FAQ layering and steering vectors are then applied to make it answer in a specific community's register.
[DeepL] He tauira reo whānui e whakamahia ana hei tīmatanga i mua i ngā paparanga mō ia hapori. Ko te turanga o tēnei kaupapa ināianei ko te Qwen2 me ōna tawhā e 14 piriona; ka tāpirihia ngā paparanga FAQ me ngā arataki ā-vector kia whakautu ai ia i runga i te reo o tētahi hapori motuhake.
Whether the model's grounded responses cite the community-corpus passages they draw from, and whether those citations are precise. Tracked alongside refusal discipline as a measure of model trustworthiness.
[DeepL] Kei te whakahua e ngā whakautu tūhonohono o te tauira ngā wāhanga o te kohinga hapori i tangohia ai e rātou, ā, he tika rānei aua tohutoro. Ka whai i te whakahaere whakahē hei ine i te pono o te tauira.
The design choice to serve each community type with its own small language model — a cohort trained on that tenant-type's corpus and carrying its own operating discipline — instead of routing every community through one large, averaged model. Many situated models, each answerable to the community it serves, in place of a single general one. The Situated Language Layer is the runtime this produces; a training cohort is one such build.
[DeepL] Ko te kōwhiringa hoahoa kia whakarato ki ia momo hapori tōna ake tauira reo iti — he rōpū akoranga kua whakangungua ki te kohinga kōrero o taua momo kaipāpānga, ā, e mau ana i āna ake tikanga whakahaere — hei utu mō te whakatere i ngā hapori katoa mā tētahi tauira nui kotahi, kua tauritea. He maha ngā tauira reo ā-tūnga, ia tauira e kawenga ana ki te hapori e tautokona ana e ia, hei whakakapi i tētahi tauira whānui kotahi. Ko te Papanga Reo Ā-Tūnga te wā-whakahaere e puta ana i tēnei; ko tētahi rōpū akoranga tētahi o ēnei hanga.
A measure of how much the model's working memory is being stretched — token usage relative to its context window. The Tractatus ContextPressureMonitor service raises verification intensity when pressure rises, on the principle that mistakes correlate with crowded context.
[DeepL] He ine i te nui o te whānuitanga o te mahara mahi o te tauira — te whakamahinga tohu i runga i tōna matapihi horopaki. Ka whakanui te ratonga Tractatus ContextPressureMonitor i te kaha whakamana ina piki te pēhanga, i runga i te mātāpono e hono ana ngā hē ki te horopaki kapi.
Synthetic training examples in which a model's wrong answer is paired with a corrected good answer. The project does not use them: in testing they introduced a bias surface that the model overfitted, degrading performance overall. Behavioural correction is done with steering vectors instead.
[DeepL] Ngā tauira whakangungu hangarua e honoa ana te whakautu hē o te tauira ki tētahi whakautu tika kua whakatikahia. Kāore te kaupapa e whakamahi ana i ēnei: i te whakamātautau, i whakaurua e rātou he mata whakatōpū hē i whakapāpāhia e te tauira, ā, i heke ai te mahi whānui. Ka mahia te whakatikatika whanonga mā ngā pūwāhi ārahi.
A Tractatus framework service that validates a proposed AI action against stored explicit instructions. When the AI's proposed action contradicts a stored instruction, the instruction wins.
[DeepL] He ratonga anga Tractatus e whakamana ana i tētahi mahi AI kua tūtohutia ki ngā tohutohu mārama kua penapenahia. Ki te taupatupatu te mahi kua tūtohutia e te AI ki tētahi tohutohu kua penapenahia, ka toa te tohutohu.
The principle that the model's own behaviour (its grounding, its refusal habits) and the post-hoc safety filter are distinct layers; both must operate; both must be reported in evaluation. The filter alone is never treated as the whole answer to grounding.
[DeepL] Ko te mātāpono ko te whanonga ake o te tauira (tōna tūāpapa, ōna tikanga whakahē) me te tātari haumaru i muri i te tauira he paparanga motuhake; me mahi ngātahi rāua; me rīpoata rāua i roto i te arotake. Kāore te tātari anake e whakaarohia hei whakautu katoa mō te tūāpapa.
Two compounding failures in machine learning systems. Models producing content and then training on content they produced; and, more broadly, the convergence of architecture, objective and evaluation across a small number of near-identical systems, so that a whole field comes to share its blind spots. Hamant calls it consanguinité.
[DeepL] E rua ngā hapa e whakakotahi ana i roto i ngā pūnaha ako mīhini. Ko ngā tauira e whakaputa ana i ngā ihirangi, ā, ka whakangungu anō ki ngā ihirangi i whakaputaina e rātou; ā, i te whānui ake, ko te whakakotahitanga o te hanganga, te whāinga me te aromatawai i waenga i te iti o ngā pūnaha tata-kotahi, kia noho tahi ai te katoa o te rāngai ki ōna pōuri. Ka kī a Hamant ko consanguinité.
The held-aside questions a candidate model is scored against. The project's standing evaluation set draws from the active tenant corpora plus a corpus of community-relevant out-of-corpus questions, so that refusal behaviour is measured alongside grounded-answer behaviour.
[DeepL] Ko ngā pātai kua waiho hei paearu mō te aromatawai o tētahi tauira kaitono. Ka whiwhi te huinga aromatawai tūnga o te kaupapa i ngā koropore kiritaki e whakamahia ana, me tētahi koropore pātai e pā ana ki te hapori, ā, kāore i roto i ngā koropore, kia taea ai te ine i ngā whanonga whakahē i te taha o ngā whanonga whakautu whai turanga.
A technique for extending what a community AI can answer by adding curated question-and-answer pairs at runtime, rather than retraining the model itself. The pairs live in the platform database; they are consulted before the model generates its answer. Every FAQ entry is anchored to a verifiable source — no aspirational answers.
[DeepL] He tikanga hei whakawhānui i ngā whakautu ka taea e tētahi AI hapori te tuku, mā te tāpiri i ngā tokorua pātai me ngā whakautu kua whiriwhiria i te wā e rere ana te pūnaha, kaua e whakahou i te tauira anō. Kei roto i te pātengi raraunga o te tūāpapa ēnei tokorua; ka tirohia i mua i te waihanga a te tauira i tana whakautu. Ia tomokanga FAQ e hono ana ki tētahi puna ka taea te whakamana — kāore he whakautu wawata.
Instruction persistence — Te mau tonu o ngā tohutohu
The architectural pattern of classifying every instruction by how strongly it should override later contradictory model behaviour, then storing it externally so the model's training priors cannot quietly overwrite it.
[DeepL] Ko te tauira hoahoanga e whakarōpū ana i ia tohutohu i runga i te kaha e tika ana kia whakakorehia ai ngā whanonga tauira e whakahē ana ā muri ake, ā, ka penapenahia ki waho kia kore ai e taea e ngā tūtohu whakangungu o te tauira te whakakapi i taua tohutohu.
Yann LeCun's non-generative architecture for world models. Instead of predicting raw pixels or the next text token, it predicts future representations in an abstract latent space, learning to ignore detail not worth predicting. LeCun advocates it against generative approaches as the path to systems that can reason and plan; Meta's V-JEPA 2 (2025) is a working instance.
[DeepL] Te hanganga kore-whakaputa a Yann LeCun mō ngā tauira ao. Kāore e matapae ana i ngā pika mata mata, i te tohu kuputuhi e whai ake rānei, engari ka matapae i ngā whakaaturanga ā muri ake i roto i tētahi wāhi huna āhua, ā, ka ako ki te whakakore i ngā taipitopito kāore e tika ana kia matapaetia. E tautoko ana a LeCun i tēnei hei huarahi ki ngā pūnaha e taea ai te whakaaroaro me te whakamahere, hei whakataetae ki ngā huarahi whakaputa; ko te V-JEPA 2 (2025) a Meta he tauira e mahi ana.
A pattern in a model's outputs that comes from the structure of the training data and architecture rather than from any conscious choice — for instance, a frontier model defaulting to property-rights language when asked about Māori data guardianship, because that is what the global corpus reflects.
[DeepL] He tauira i ngā putanga o tētahi tauira rorohiko e ahu mai ana i te hanganga o ngā raraunga whakangungu me te hoahoa, ehara i te mea nā tētahi kōwhiringa mōhio — hei tauira, ka huri aunoa tētahi tauira matatau ki te reo mō ngā mana rawa whenua ina pātaihia mō te tiakitanga raraunga Māori, nā te mea koirā te mea e whakaata ana i te kohinga raraunga ā-ao.
A Tractatus framework service that triggers an AI self-check on alignment, coherence, and safety before executing a complex operation. Used selectively (not on every task) to avoid overhead on routine work.
[DeepL] He ratonga anga Tractatus e whakaoho ana i tētahi arotakenga ā-AI mō te taurite, te hono, me te haumaru i mua i te whakahaere i tētahi mahi matatini. Ka whakamahia ā-kōwhiringa (ehara i ia mahi katoa) kia karo ai i te taumaha o ngā mahi auau.
In LeCun's framework (after Kahneman's System 2), the deliberative mode in which an agent reasons and plans by running candidate actions through a world model and a cost function before acting — akin to model-predictive control in engineering. It contrasts with reactive Mode-1, which produces an action directly without consulting a model of consequences. A purely text-trained language model is largely confined to Mode-1.
[DeepL] I roto i te anga a LeCun (i muri i te Pūnaha 2 a Kahneman), ko te aronga whakaaroaro e whakaaro ana, e whakamahere ana hoki te kaiwhakahaere mā te whakahaere i ngā mahi pea i roto i tētahi tauira ao me tētahi mahi utu i mua i te mahi — he rite ki te whakahaere matapae tauira i roto i te hangarau. Ka whakatauritea ki te Aronga-1 urupare, e whakaputa tika ana i tētahi mahi me te kore uiui ki tētahi tauira o ngā hua. He herea whānuitia te tauira reo i whakangungua ki te tuhinga anake ki te Aronga-1.
A question that has no answer grounded in the community's own content. The intended response is a refusal, not a guess. Measuring how often the model correctly refuses out-of-corpus questions is part of evaluation.
[DeepL] He pātai kāore he whakautu e ū ana ki ngā ihirangi a te hapori. Ko te whakautu e hiahiatia ana he whakahē, ehara i te matapae. Ko te ine i te auau e tika ana ka whakahē te tauira i ngā pātai kāore i roto i te kohinga kuputuhi he wāhanga o te aromatawai.
Refusal discipline — Te whakatikatika mō te whakahē
The rate at which a model correctly declines to answer questions outside its corpus. A measurable property; the project tracks refusal-by-default as one of the ways modified models drift away from the FAQ-layered baseline.
[DeepL] Ko te auau e whakakore tika ai tētahi tauira i te whakautu i ngā pātai kei waho o tōna kohinga raraunga. He āhuatanga ka taea te ine; e aroturuki ana te kaupapa i te whakakore-a-taunoa hei kotahi o ngā huarahi e rereke haere ana ngā tauira kua whakarerekētia i te paerewa FAQ-ā-papa.
Situated Language Layer (SLL) — Papanga Reo Whakaritea
A community-scoped small language model trained on the tenant's own content, governed by the tenant's own authority, and operated on infrastructure inside the tenant's own jurisdictional reach. Replaces a frontier vendor model as the runtime cognition layer of the sovereign-record platform.
[DeepL] He tauira reo iti kua tautuhia e te hapori, kua whakangungua ki ngā ihirangi ake o te kaiwhakamahi, e whakahaerehia ana e tōna ake mana, ā, e whakahaerehia ana i runga i ngā hanganga kei roto i tōna ake rohe mana. Ka whakakapi i tētahi tauira kaiwhakarato ā-mua hei paparanga māramatanga i te wā whakahaere o te papanga rēkōta rangatira.
Small adjustments applied at inference time that nudge a model's behaviour in a particular direction — for example, refusing more reliably on a class of out-of-corpus questions, or down-weighting a known mechanical bias. Steering vectors operate on the model's activations rather than its training data, so the underlying corpus is left as the community provided it. Discussed extensively across the project's research because they are the principal mechanism by which the platform corrects model behaviour without modifying weights.
[DeepL] He whakarerekētanga iti e whakamahia ana i te wā whakatau hei akiaki i te whanonga o te tauira ki tētahi ahunga motuhake — hei tauira, kia whakakore pono ake i ngā pātai o tētahi kāwai kāore i roto i te kohinga. Ka mahi ki ngā whakahohe, ehara i te kohinga whakangungu, nō reira ka waiho te kohinga i te āhua i whakaratoa e te hapori.
The illustrative case where Claude Code was told to use port 27027 but used 27017 instead — because MongoDB's default port is 27017 and the model's statistical priors auto-corrected the explicit instruction. The incident motivated the architectural rule that human instructions must be classified, persisted, and validated against — not absorbed into the model's prior.
[DeepL] Ko te tauira whakaahua i mea atu ai ki a Claude Code kia whakamahi i te tauranga 27027, engari i whakamahia e ia te 27017 — nā te mea ko te tauranga taunoa o MongoDB ko te 27017, ā, nā ngā priors tauanga o te tauira i whakatika aunoa i te tohutohu mārama. Nā tēnei aitua i whakaoho i te ture hanganga e mea ana me whakarōpū, me rokiroki, me whakamana ngā tohutohu a te tangata — kaua e whakaurua ki ngā priors o te tauira.
A community-type model that is trained and deployed in production today. The five Tier-1 cohorts are whānau (Māori extended-family contexts), episcopal (Anglican parish), generic-community fallback, family-history, and small-business.
[DeepL] He tauira momo hapori kua whakangungua, ā, e whakamahia ana i te whakaputanga i tēnei rā. Ko ngā rōpū e rima o te Tier-1 ko whānau (ngā horopaki whānau whānui Māori), epikopā (parīhi Anglikana), te kōwhiringa hapori whānui, te hītori whānau, me te pakihi iti.
A community-type model that has been designated but not yet commissioned because no first tenant of that type is in deployment. The current four Tier-2 cohorts are conservation, diaspora, clubs, and alumni.
[DeepL] He tauira ā-hapori kua tohua, engari kāore anō kia whakamanahia, nā te mea kāore he kaipāmu tuatahi o taua momo e whakamahia ana. Ko ngā rōpū Tier-2 e whā o nāianei ko te tiaki taiao, te diaspora, ngā karapu, me ngā alumni.
The standing rule that no Tier-2 cohort is commissioned for training until at least one tenant of that type is in deployment. Prevents corpora grounded in speculation rather than the community's own content, and conserves scarce GPU time for production cohorts.
[DeepL] Ko te ture tū tonu, kāore he rōpū Tier-2 e whakaritea mō te whakangungu kia tae rā anō kia kotahi te kaiwhakamahi o taua momo e whakamahia ana. Ka ārai i ngā koropora e hangai ana ki ngā whakapae, kaua ki ngā ihirangi a te hapori, ā, ka tiaki i te wā GPU iti mō ngā rōpū whakaputa.
One model build for one community type — a Tier-1 cohort that has been trained on its tenant-type's corpus and deployed. "Cohort" rather than "model" because each carries the standing operating discipline rather than a one-off configuration.
[DeepL] He tauira kotahi mō tētahi momo hapori — he rōpū Tier-1 kua whakangungua ki te kohinga raraunga mō tōna momo kaipāmu, ā, kua whakatinanahia. "Rōpū" kē i te "tauira", nā te mea ka mau ia i te tikanga whakahaere mau tonu, ehara i te whirihoranga kotahi anake.
Training data deduplication — Te tango tārua o ngā raraunga whakangungu
The standard text-cleaning step of removing repeated content from a training corpus. The project does not do this for community corpora: apparent duplicates (canonical lines, repeated tikanga formulae, recurrent governance phrasings) are reinforcement that shapes the corpus's emphasis structure, not noise.
[DeepL] Ko te hipanga paerewa o te horoi tuhinga he tango i ngā ihirangi tāruarua i roto i tētahi koropore whakangungu. Kāore te kaupapa e mahi ana i tēnei mō ngā koropore hapori: ko ngā tāruarua e kitea ana (ngā rārangi mana, ngā tauira tikanga tāruarua, ngā rerenga whakahaere e puta anō ana) he whakakaha e āhua ana i te hanganga aro o te koropore, ehara i te haruru.
The in-platform AI assistant that answers questions about how to use the system, the community's own customs, and locally-curated knowledge. Trained on the community's own corpus rather than on a vendor's global one; the day-to-day expression of the situated language layer.
[DeepL] Ko te kaiāwhina AI kei roto i te papanga e whakautu ana i ngā pātai mō te whakamahi i te pūnaha, ngā tikanga motuhake o te hapori, me ngā mōhiotanga ā-rohe kua whakaritea. I whakangungua ki tōna ake kohinga rauemi a te hapori, kaua ki tētahi kohinga ā-ao a te kaiwhakarato; ko te whakaaturanga o ia rā o te paparanga reo ā-horopaki.
Any technique that alters the parameters of the base model itself — fine-tuning, distillation, preference-tuning, and so on. The project's standing position: every weight-modification protocol tested to date has underperformed FAQ layering on the project's evaluation set. Until one is identified that demonstrably improves, none is adopted.
[DeepL] He tikanga katoa e whakarerekē ana i ngā tawhā o te tauira taketake anō — te whakangāwari āta, te whakawāwā, te whakangāwari i runga i ngā manakohanga, me ērā atu. Te tūnga o te kaupapa: kua whakamātauria ngā kawa whakarerekē taumaha katoa tae noa mai ki tēnei rā, ā, kāore i eke ki te whai hua o te whakakotahitanga FAQ i runga i te huinga aromatawai a te kaupapa. Kāore he mea ka whakaaetia kia whakamahia, kia kitea tētahi e whakaatu ana i te whakapai ake.
In Yann LeCun's sense, an internal model that predicts the next state of a world from the current state and a proposed action, so an agent can weigh an action's consequences before taking it. It is what lets a system reason and plan rather than merely react — the piece LeCun argues today's language models lack. The Village's proposed community-state model applies the idea to a community's own governed state rather than to the physical world.
[DeepL] I te whakaaro a Yann LeCun, he tauira ā-roto e matapae ana i te āhua e whai ake nei o te ao i runga i te āhua o nāianei me tētahi mahi kua tūtohutia, kia taea ai e tētahi kaiwhakahaere te aromātai i ngā hua o tētahi mahi i mua i tōna whakahaere. Koinei te mea e āhei ai tētahi pūnaha ki te whakaaroaro, ki te whakamahere rānei, kaua e whakautu noa iho — ko te wāhanga e ai ki a LeCun kāore i ngā tauira reo o nāianei. Ka whakamahi te tauira āhua-hapori i tūtohutia Village i tēnei ariā ki te āhua whakahaere a tōna ake hapori, kaua ki te ao tinana.
AI Industry & StackTe Ahumahi me te Pae Atamai(57)
Agentic workflow — Rauemi mahi ā-mahi
A multi-step process orchestrated by an AI agent — for instance, research-then-summarise-then-publish, or detect-anomaly-then-investigate-then-alert. The defining shape: an outer loop where the agent plans, acts, observes, and adjusts. The Tractatus framework constrains what an agentic workflow may decide on its own.
[DeepL] He tukanga maha-hipanga e whakaritea ana e tētahi kaiārahi AI — hei tauira, rangahau, whakarāpopoto, whakaputa; rānei kitea he hē, rangahau, whakamōhio. Ko te āhua matua: he porowhita o waho e whakamahere ana, e mahi ana, e aroturuki ana, e whakatikatika ana te kaiārahi. Ka herea e te anga Tractatus ngā whakatau ka taea e tētahi rerenga mahi ā-kaiārahi te whakatau māna anō.
A system in which a language model is given goals, a set of tools, and the autonomy to choose which tool to call next based on intermediate results — so that a single high-level instruction can drive a sequence of actions. Distinguished from a single-turn chatbot by the agent's loop over actions and observations.
Caution: Gartner lists AI application compromise — production agents, third-party integrations and staff-built tools — among four threats where attackers hold the advantage, and notes such systems expose sensitive data where controls are weak. An agent is a delegation of authority, and it can be talked into using it.
Ata whakatūpato: Kei te rārangi a Gartner i te whakaeke i ngā taupānga AI — arā, ngā māngai whakaputa, ngā hononga a te hunga tuatoru me ngā taputapu i hangaia e ngā kaimahi — i waenga i ngā mōrearea e whā e whai painga ana ngā kaiwhakaeke, ā, e tohu ana ia e whakapuaki ana ēnei pūnaha i ngā raraunga matatapu i ngā wā he ngoikore ngā whakahaere. Ko te māngai he tuku mana, ā, ka taea te whakatenatena kia whakamahia.
[DeepL] He pūnaha e whakawhiwhia ana te tauira reo ki ngā whāinga, ki tētahi kohinga taputapu, me te mana motuhake ki te whiriwhiri ko tēhea taputapu ka karangahia ā muri ake i runga i ngā hua waenga — kia taea ai e tētahi tohutohu taumata-nui kotahi te ārahi i te raupapa mahi. Ka wehe i tētahi chatbot hurihanga kotahi nā te hurihanga a te māngai i waenga i ngā mahi me ngā kitenga.
The general problem of making AI systems behave in accordance with human intent and values. Encompasses RLHF, constitutional AI, red teaming, the design of guardrails, and the architectural choice of which decisions to delegate to AI in the first place. The field has no agreed solution; the architectural alternative is to bound what AI may decide.
[DeepL] Ko te raru whānui o te whakarite kia mahi ngā pūnaha AI i runga i ngā hiahia me ngā uara a te tangata. Ka kapi i roto i tēnei te RLHF, te AI ture-matua, te red teaming, te hoahoa o ngā here ārai, me te kōwhiringa hanganga mō ngā whakataunga hei tuku ki te AI i te tuatahi. Kāore he rongoā kua whakaaetia e te rāngai; ko tētahi atu huarahi hanganga, ko te here i ngā whakataunga ka taea e te AI.
Artificial General Intelligence (AGI) — Atamai Whānui Hangarua (AGI)
An AI system that matches or exceeds human cognitive capability across a broad range of intellectual tasks rather than excelling at one. The term is contested: it has no agreed technical definition, no agreed evaluation, and vendors use it inconsistently — OpenAI, Anthropic, DeepMind, and others each work to their own informal definitions. Frontier vendors increasingly describe their roadmaps as oriented toward AGI; sceptics note that capability benchmarks routinely declared "AGI-adjacent" later prove easy to game and easy to ceiling. Whether current frontier models constitute, approach, or merely simulate the property is a live and largely philosophical debate. Distinct from ASI (Artificial Superintelligence), the further hypothetical of an AI surpassing human capability on substantially every dimension at once.
[DeepL] He pūnaha atamai (AI) e taurite ana, e neke atu rānei i te āheinga hinengaro a te tangata puta noa i ngā momo mahi hinengaro whānui, kaua e tino kaha ki tētahi anake. He kupu tēnei e taupatupatuhia ana: kāore he whakamārama hangarau kua whakaaetia, kāore he aromatawai kua whakaaetia, ā, ka whakamahia e ngā kaihoko i runga i te huarahi kāore i te ōrite — ko OpenAI, Anthropic, DeepMind me ētahi atu e mahi ana i runga i ā rātou ake whakamārama ā-roto. Kei te kaha ake ngā kaihanga hangarau matatau ki te whakaahua i ā rātou mahere ara hei aronga ki te AGI; e kī ana ngā tārewa kāore i te mārama, ā, ka kitea he māmā te tākaro i ngā paearu pūkenga e kīia ana he "AGI-adjacent", ā, he māmā hoki te aukati i tō rātou tipu. He wero ora, he tautohetohe whānui hoki te pātai mēnā e hanga ana, e tata ana, e whakaahua noa rānei ngā tauira hangarau matatau o nāianei i tēnei āhuatanga. He rerekē tēnei i te ASI (Artificial Superintelligence), arā, te ariā whakamua mō tētahi AI e whakawhiti ana i ngā pūkenga a te tangata i ngā āhuatanga katoa i te wā kotahi.
A hypothetical AI system substantially exceeding human capability across substantially every intellectual dimension simultaneously. ASI sits on the speculative end of the AI capability spectrum — beyond AGI in scope and uniformly aspirational; no consensus on whether it is reachable, when, or how it would be governed if it were. The term shapes the safety + alignment discourse but has no operational referent today.
[DeepL] He pūnaha AI āhua whakaaro e tino nui ake ana i ngā pūkenga a te tangata puta noa i ngā āhuatanga hinengaro katoa i te wā kotahi. Kei te pito whakaaroaro o te whānuitanga āheinga AI te ASI — he nui ake i te AGI i tōna whānuitanga, ā, he wawata tonu; kāore he whakaaetanga mō te āhei rānei, mō te wā rānei, mō te pēhea rānei e whakahaere ai mēnā ka taea. Ka ārahi te kupu nei i te kōrero mō te haumaru me te whakatikatika, engari kāore he tauira whakahaere i tēnei rā.
A prompting technique (and now a training target) in which the model is asked to write out its intermediate reasoning before its final answer — typically improving accuracy on multi-step problems. The basis on which the recent reasoning models were built.
[DeepL] He tikanga akiaki (ā, ināianei he whāinga whakangungu) e tonoa ana te tauira kia tuhi i āna whakaaro waenga i mua i tana whakautu whakamutunga — he mea whakapai ake i te tika o ngā raruraru maha-hipanga. Ko te tūāpapa i hangā ai ngā tauira whakaaro o nā tata nei.
The pre-processing step in a RAG pipeline that splits source documents into passages of a chosen size — small enough to embed cleanly, large enough to carry meaningful context. Chunk-size choice and chunk-overlap policy are among the most consequential design decisions in a RAG system.
[DeepL] Ko te hipanga whakarite-mua i roto i te paipa RAG e wehe ana i ngā tuhinga pūtake ki ngā wahanga i te rahi kua tohua — iti rawa kia taea te whakauru maeneene, nui rawa kia mau ai te horopaki whai tikanga. Ko te kōwhiri rahi wāhanga me te kaupapa here whakawhāiti wāhanga ētahi o ngā whakatau hoahoa tino hua nui rawa atu i roto i tētahi pūnaha RAG.
Closed-weight / proprietary model — Mōdeli taumaha kati / mōdeli rangatōpū
A model whose parameters are not released — it is only accessible behind the vendor's API. GPT-4 / GPT-5, Claude 4, and Gemini are closed-weight. Closed-weight models typically lead capability benchmarks but cannot be self-hosted.
[DeepL] He tauira kāore ōna tawhā i tukuna — ka taea anake te uru mā te API a te kaiwhakarato. He tauira taumaha kati a GPT-4 / GPT-5, Claude 4, me Gemini. Ko ngā tauira taumaha kati e ārahi ana i ngā paearu āheinga, engari kāore e taea te manaaki māu anō.
The platform's own published constitution — the rules and principles the platform is built to uphold, separate from any AI's training. Members can read it; the AI assistant building the platform is held to it. Distinct from constitutional-AI training, though conceptually related.
[DeepL] Ko te ture matua kua whakaputaina e te papaanga — ko ngā ture me ngā mātāpono e hangaia ana te papaanga kia ū ki a rātou, motuhake i ngā whakangungu a te AI. Ka taea e ngā mema te pānui; ā, me ū hoki te kaiāwhina AI e hanga ana i te papaanga ki ēnei ture. He rerekē tēnei i ngā whakangungu AI ā-ture matua, ahakoa he hononga ā-ariā.
A training method (introduced by Anthropic in 2022) in which the model is given a written constitution — a list of values it should uphold — and then trained to critique and revise its own outputs against that constitution. A direct conceptual ancestor of the platform's Constitution-of-MDSL framing.
[DeepL] He tikanga whakangungu (i whakaurua e Anthropic i te tau 2022) e whakawhiwhia ana te tauira ki tētahi ture ā-tuhi — he rārangi uara hei tautoko — ā, ka whakangungua kia arotake, kia whakarerekē hoki i āna ake hua i raro i taua ture. He tūpuna ariā tūturu o te anga 'Constitution-of-MDSL' o te papanga.
The maximum number of tokens a model can attend to in one request — including the system prompt, the conversation so far, retrieved documents, and the generated response. Frontier models in 2025-2026 commonly support 200K to 2M token windows; larger windows enable longer documents but with rising cost and (often) degrading quality past a point.
[DeepL] Ko te nui rawa o ngā tohu ka taea e tētahi tauira te aro ki roto i tētahi tono kotahi — tae atu ki te tono pūnaha, te kōrero tae noa ki tēnei wā, ngā tuhinga kua tiki, me te whakautu kua whakaputaina. I te tau 2025–2026, ka tautoko whānuitia e ngā tauira Frontier ngā matapihi tohu 200,000 ki te 2,000,000; mā ngā matapihi nui ake e āhei ai ngā tuhinga roa ake, engari ka piki haere te utu, ā, he maha ngā wā ka heke te kounga i muri i tētahi taumata.
A Chinese AI lab that released open-weight reasoning and coding models from 2023 onward. DeepSeek R1 (early 2025) demonstrated frontier-class reasoning capability at materially lower training cost than US-vendor frontier models, drawing wide industry attention. Open-weight; downloadable and self-hostable.
[DeepL] He taiwhanga rangahau AI nō Haina i tukuna ngā tauira whakaaro me ngā tauira waehere taumaha-tuwhera mai i te tau 2023. I whakaatu a DeepSeek R1 (i te tīmatanga o te tau 2025) i te āheinga whakaaro taumata-mātanga, ā, he iti ake ngā utu whakangungu i ngā tauira taumata-mātanga a ngā kaiwhakarato o Amerika, nā reira i kukume ai i te aro nui o te umanga. Taumaha-tuwhera; ka taea te tikiake, ka taea hoki te manaaki māu anō.
Direct Preference Optimization (DPO) — Te Whakapai Tūtohu Tūturu (DPO)
An alternative to RLHF for post-training: directly optimises the model on preference pairs without fitting a separate reward model first. Lower compute cost than RLHF in many setups; in active industry use from 2023 onward. Like RLHF, one of the weight-modification protocols the platform has tested and not adopted.
[DeepL] He huarahi kē atu ki te RLHF mō muri i te whakangungu: ka whakapai tika i te tauira ki runga i ngā tokorua manakohanga, kāore e hiahiatia kia whakaurua tuatahi he tauira utu motuhake. He māmā, he iti ake te utu i te RLHF; kua whānuitia te whakamahinga mai i te tau 2023. Pērā i te RLHF, ko tētahi o ngā kawa whakarerekē taumaha i whakamātauria e te papaanga, engari kāore i whakaaetia.
A smaller model trained to imitate a larger 'teacher' model — preserving much of the teacher's behaviour at lower inference cost. DeepSeek's R1 distillates and Llama's 'instruct' variants are distillations. Distillation is one of the weight-modification protocols the platform has tested and not adopted.
[DeepL] He tauira iti ake i whakangungua kia tārite i tētahi tauira 'kaiako' nui ake — e tiaki ana i te nuinga o ngā whanonga a te kaiako, ā, he iti ake te utu whakatau. Ko te R1 a DeepSeek he whakawhāngai, ā, ko ngā momo 'instruct' a Llama he whakawhāngai anō. Ko te whakawhāngai tētahi o ngā kawa whakarerekē taumaha i whakamātauria e te papanga, engari kāore i whakaaetia.
A numeric representation of a piece of content — text, image, audio — such that semantically similar items are nearer to each other in the vector space. The mathematical basis of retrieval-augmented generation, semantic search, and the Guardian Agents' verification.
[DeepL] He whakaaturanga tau mō tētahi wāhanga ihirangi — kuputuhi, whakaahua, oro — kia tata ake ai ngā mea ōrite ā-aronga ki a rātou anō i roto i te wāhi ā-vector. Ko te tūāpapa pāngarau mō te whakaputa kua whakakahaia mā te tiki ihirangi, te rapu ā-aronga, me te whakamana a ngā Guardian Agents.
A specialised model that takes content and produces an embedding vector. Often distinct from the generative model used to write answers. OpenAI's text-embedding-3, Cohere Embed, and open models like nomic-embed and bge-m3 are common choices.
[DeepL] He tauira motuhake e tango ana i te ihirangi, ā, ka whakaputa i tētahi huinga ā-roto. He maha ngā wā ka rerekē i te tauira whakaputa e whakamahia ana ki te tuhi i ngā whakautu. Ko text-embedding-3 a OpenAI, ko Cohere Embed, me ērā atu tauira tuwhera pērā i a nomic-embed me bge-m3 ētahi kōwhiringa noa.
Extended thinking / reasoning tokens — Tohu whānui mō te whakaaro me te arorau
A capability in 2025-2026 frontier models (Claude's extended thinking, OpenAI's o-series reasoning) where the model spends additional inference time and tokens on hidden internal reasoning before producing the visible answer. Trades inference cost for better outcomes on hard problems.
[DeepL] He āheinga i roto i ngā tauira ā-mua o te tau 2025–2026 (te whakaaro whānui a Claude, te whakaaro o-series a OpenAI), e whakapau ana te tauira i te wā tātaitanga tāpiri me ngā tohu tātaitanga ki te whakaaro ā-roto huna i mua i te whakaputa i te whakautu e kitea ana. Ka whakawhiti i te utu tātaitanga kia pai ake ngā hua mō ngā raru uaua.
Answering an AI query by composing across several communities’ models and data under consent, rather than sending everything to one central model. A community’s situated language model can reach a peer community’s records through a signed, scope-limited envelope and answer against them without that data ever leaving the peer’s control or its provenance being stripped. Capability is assembled by composition across consenting holders instead of concentrated in one model everyone must trust.
[DeepL] Te whakautu i tētahi pātai AI mā te whakakotahi i ngā tauira me ngā raraunga o ngā hapori maha i raro i te whakaaetanga, kaua e tukuna katoa ki tētahi tauira matua kotahi. Ka taea e te tauira reo ā-hapori te toro ki ngā rekoata o tētahi atu hapori mā tētahi pūkete kua hainatia, he here ā-rohe tōna, ā, ka whakautu ki runga i aua raraunga, kāore aua raraunga e wehe i te mana whakahaere o te hapori hoa, kāore hoki e tangohia tōna takenga mai. Ka whakahiatohia te āheinga mā te whakakotahitanga i waenga i ngā kaipupuri e whakaae ana, kaua e whakakotahitia ki tētahi tauira kotahi e whakawhirinaki ana te katoa.
A weight-modification technique that continues training a base model on new data, typically smaller and more specialised than the original training corpus. Part of the family of approaches the project has tested and not adopted.
[DeepL] He tikanga whakarerekē taumaha e haere tonu ana te whakangungu i tētahi tauira pūtake ki ngā raraunga hou, he iti ake, he motuhake ake i te kohinga whakangungu taketake. He wāhanga nō te whānau o ngā huarahi kua whakamātauhia e te kaupapa, engari kāore i whakaaetia.
A large, general-purpose model — usually a language model — trained on a broad corpus and used as the starting point for many downstream applications. The term covers models in the GPT, Claude, Gemini, and Llama families. Distinguished from task-specific models which are trained narrowly for one job.
[DeepL] He tauira nui, whānui te whakamahinga — he tauira reo i te nuinga o te wā — i whakangungua ki tētahi kohinga raraunga whānui, ā, ka whakamahia hei tīmatanga mō ngā taupānga maha e whai ake nei. Ka kapi tēnei kupu i ngā tauira o ngā whānau GPT, Claude, Gemini, me Llama. He rerekē ēnei i ngā tauira motuhake mō tētahi mahi kotahi, i whakangungua kia arotahi ki taua mahi anake.
A general-purpose vendor language model at or near the leading edge of capability — typically trained by a US-based provider on a global corpus. The project's situated language layers exist as community-controlled alternatives so that mediation of community queries does not import a frontier model's training assumptions.
[DeepL] He tauira reo kaiwhakarato whānui kei te taumata tiketike rānei, tata rānei ki te taumata tiketike rawa o ngā āheinga — i te nuinga o te wā ka whakangungua e tētahi kaiwhakarato kei Amerika ki runga i tētahi kohinga raraunga ā-ao. Ko ngā paparanga reo ā-horopaki o te kaupapa e tū ana hei kōwhiringa e whakahaerehia ana e te hapori, kia kore ai e kawemai ngā whakapae whakangungu o tētahi tauira rohe ki te whakahaere pātai a te hapori.
The property of a model's answer being anchored in a retrievable, citable source rather than confabulated from training memory. RAG is the architectural answer to the grounding problem; the platform's FAQ-layering plus citation-discipline check are its grounding layers.
[DeepL] Ko te āhuatanga o te whakautu a tētahi tauira e ū ana ki tētahi puna e taea te tiki, e taea te whakahua, kaua e hangaia noa iho i ngā mahara whakangungu. Ko RAG te whakautu hanganga ki te raru o te whakapūtanga; ko te paparanga FAQ o te tūāpapa me te whakamātautau i te tika o ngā tohutoro ōna ngā paparanga whakapūtanga.
A separate layer (often a smaller model or a rules engine) that screens model inputs and outputs for policy violations — refusing the request, redacting the answer, or escalating. Distinct from the model's own behaviour; the platform's defence-in-depth principle requires both.
Caution: Gartner names prompt injection as a threat where attackers hold the advantage, which is a statement about the limits of filtering: a guardrail sits in the same input stream the attacker is writing to.
Ata whakatūpato: Ka kī a Gartner he tūraru te werohanga tere, ā, kei te whai painga ngā kaiwhakatumatuma; he kī tēnei mō ngā here o te tātari: kei roto tonu i taua rerenga urunga e tuhi ana te kaiwhakatumatuma, kei reira hoki te ara tiaki.
[DeepL] He paparanga motuhake (he tauira iti ake rānei, he pūnaha ture rānei) e tirotiro ana i ngā tāuru me ngā putanga o te tauira mō ngā hē ture — ka whakahē i te tono, ka whakakore i te whakautu, ka whakamōhio rānei. He rerekē ki ngā whanonga o te tauira anō; e hiahiatia ana e te mātāpono ārai hohonu o te papaanga kia rua.
A fluent but factually wrong model output — a confident answer with no real grounding in the corpus or the world. The defining failure mode of generative language models; the practical motivation for RAG, citation discipline, and FAQ-layered grounding rather than reliance on the model's training memory.
[DeepL] He whakaputanga tauira e rere noa ana, engari he hē ki ngā kōrero pono — he whakautu māia kāore he tūāpapa tūturu i roto i te kohinga raraunga, i te ao rānei. Koinei te aronga ngoikore matua o ngā tauira reo whakaputa; ko te take whaihua mō te RAG, te tikanga tohutoro, me te tūāpapa mā ngā pātai auau (FAQ), kaua e whakawhirinaki ki te mahara whakangungu o te tauira.
Human in the loop — He tangata kei roto i te koromeke
A claim that a person is present in a decision path. It does not state what the person may refuse, what they see before deciding, how long they have, or what happens if they do nothing.
What it decides: It fails at the level most institutions actually choose, where a person approves items arriving faster than they can be examined. The gate exists, it is staffed, and it passes everything.
He aha tāna e whakatau ai: Ka hinga i te taumata e whiriwhiria ana e te nuinga o ngā whakahaere, i reira ka whakaaetia e tētahi tangata ngā taonga e tae mai ana i mua i tō rātou āhei ki te tirotiro. Kei reira te kuaha, kei reira ngā kaimahi, ā, ka whakaae ki ngā mea katoa.
[DeepL] He kī e tohu ana kei reira tētahi tangata i roto i tētahi ara whakatau. Kāore e kī ana he aha ngā mea ka taea e ia te whakahē, he aha tāna e kite ana i mua i tōna whakatau, mō te roa o tōna wā, me aha rānei mēnā kāore ia e mahi.
The per-token cost of running a model — quoted separately for input tokens and output tokens, typically per million. In 2025-2026, frontier-model output tokens range from a few dollars to tens of dollars per million; reasoning-model output (with extended thinking) is several multiples of that. Drives most architectural decisions about which model handles which class of request.
[DeepL] Ko te utu ia tohu mō te whakahaere tauira — e whakahuatia motuhake ana mō ngā tohu urunga me ngā tohu putanga, ā, he nuinga ia miriona. I te tau 2025–2026, kei waenga i ngā tāra torutoru ki ngā tekau tāra ia miriona ngā tohu putanga o ngā tauira ā-mua; ko ngā tohu putanga o ngā tauira whakaaro (me te whakaaro whānui) he maha ngā wā atu i tērā. Koinei te mea e ārahi ana i te nuinga o ngā whakatau hoahoanga mō te tauira e whakahaere ana i tēhea momo tono.
Software that loads a model into memory and exposes it as a network service — typically as an OpenAI-compatible HTTP API. Examples include vLLM (high throughput, GPU), Ollama (local convenience), llama.cpp (CPU + Apple Silicon), and TGI. The platform's situated language layer runs behind an inference server on the sovereign GPU.
[DeepL] He pūmanawa e uta ana i tētahi tauira ki roto i te mahara, ā, e whakaatu ana hei ratonga whatunga — arā, he HTTP API e hāngai ana ki OpenAI. Ko ētahi tauira ko vLLM (teitei te tere whakawhiti, GPU), Ollama (mō te whakamahinga ā-rohe), llama.cpp (CPU + Apple Silicon), me TGI. Ka rere te paparanga reo ā-horopaki o te tūāpapa i muri i tētahi tūmau whakatau kei runga i te GPU rangatira.
A user-side attempt to bypass a model's safety training — typically by elaborate role-play scenarios, instruction-laundering through fictional framings, or multi-step setup that gradually erodes the refusal boundary. Distinct from prompt injection (which targets the system prompt from data) but related.
Caution: Distinct from prompt injection, though often conflated: a jailbreak is aimed at the model by its own user, an injection arrives inside content the model was asked to process. Gartner treats the second as the priority threat.
Ata whakatūpato: He rerekē ki te werohanga ohorere, ahakoa he maha ngā wā ka whakakotahitia: ko te pakaru here e whāia ana ki te tauira e tōna ake kaiwhakamahi, ko te werohanga ka uru ki roto i ngā ihirangi i tonoa kia tukatukahia e te tauira. E whakaarohia ana e Gartner ko te tuarua hei tūraru matua.
[DeepL] He whakamātau a te kaiwhakamahi ki te karo i ngā whakangungu haumaru o te tauira — i te nuinga o te wā mā ngā āhua tākaro tūranga matatini, te horoi tohutohu mā ngā anga pūrākau, rānei te whakarite i ngā hikoinga maha e āta whakaiti ana i te rohe aukati. He rerekē ki te werohanga tono (e aro ana ki te tono pūnaha mai i ngā raraunga), engari he hononga.
A neural-network model trained on text such that, given a prompt, it produces fluent natural-language output. Modern AI assistants are LLMs; the situated language layer is a community-scoped, smaller-than-frontier LLM.
[DeepL] He tauira whatunga neorana i whakangungua ki ngā tuhinga, kia puta ai he whakaputanga reo māori tōtika ina whakawhiwhia ki tētahi whakahau. Ko ngā kaiāwhina AI o nāianei he LLM; ko te paparanga reo ā-horopaki he LLM iti ake i ngā LLM matua, ā, he mea whakarite mō te hapori.
An open-weight large language model family from Meta, first released in 2023 and now in its third major generation (Llama 3, with point releases through Llama 3.3). Sizes range from 1B to 405B parameters. Released under the Llama Community Licence — open weights, with restrictions for very large commercial deployments. One of the most-used open-weight families in the wider industry; not currently the platform's base.
[DeepL] He whānau tauira reo nui taumaha-tuwhera nō Meta, i tukuna tuatahi i te tau 2023, ā, kei te whakatipuranga matua tuatoru ināianei (Llama 3, me ngā putanga tohu tae noa ki te Llama 3.3). Kei waenga i te 1 piriona me te 405 piriona ngā tawhā. I tukuna i raro i te Raihana Hapori Llama — he taumaha tuwhera, me ētahi here mō ngā whakamahinga hokohoko tino nui. Ko tētahi o ngā whānau taumaha tuwhera e tino whakamahia ana i te umanga whānui; kāore i tēnei wā hei tūāpapa o te papanga.
A parameter-efficient fine-tuning technique that adds small low-rank update matrices alongside the base model's weights, leaving the base unchanged. Cheaper to train and faster to swap than full fine-tuning. One of the weight-modification protocols the platform tested and did not adopt.
[DeepL] He tikanga whakangāwari āta whai hua mō ngā tawhā, e tāpiri ana i ngā matatini whakahou rahi-iti, ā-tūāpapa, ki ngā taumaha o te tauira taketake, ā, kāore e whakarerekē i te tauira taketake. He iti ake te utu whakangungu, ā, he tere ake te whakawhiti i te whakangāwari āta katoa. Ko tētahi o ngā kawa whakarerekē taumaha i whakamātauria e te papanga, engari kāore i whakamahia.
A French AI company that releases an open-weight model family of the same name — Mistral 7B, Mixtral 8x7B (a Mixture-of-Experts variant), Mistral Small / Medium / Large. Notable for European provenance (relevant to vendor-prohibition reasoning) and for popularising the MoE architecture in the open-weight space.
[DeepL] He kamupene AI Wīwī e tuku ana i tētahi whānau tauira taumaha tuwhera o taua ingoa anō — Mistral 7B, Mixtral 8x7B (he momo Mixture-of-Experts), Mistral Iti / Waenga / Nui. He mea rongonui nā tōna takenga mai i Uropi (e hāngai ana ki ngā whakaaro aukati kaiwhakarato) me tōna whakatairanga i te hanganga MoE i te ao tauira taumaha tuwhera.
Mixture of Experts (MoE) — Kohinga o ngā Mātanga (MoE)
A model architecture in which only a subset of the parameters (one or more 'expert' sub-networks) is activated for any given input, allowing very large total parameter counts at lower inference cost. Mixtral, DeepSeek, and recent Llama-class models use MoE architectures.
[DeepL] He hanganga tauira e whakahohehia ana he wāhanga noa o ngā tawhā (kotahi, neke atu rānei o ngā whatunga-iti 'mātanga') mō ia tāuru, ā, ka āhei ki te whai tatauranga tawhā katoa nui rawa atu i te utu aromatawai iti ake. Ka whakamahi a Mixtral, DeepSeek, me ngā tauira kāwai Llama hou i ngā hanganga MoE.
Model Context Protocol (MCP) — Tūtohu Horopaki Tauira (MCP)
An open protocol introduced by Anthropic in late 2024 for connecting AI models to tools, data sources, and the local environment in a standardised way. Lets a developer expose a database, a filesystem, or an API to an AI assistant once and have it work across all MCP-aware clients.
[DeepL] He kawa tuwhera i whakaurua e Anthropic i te mutunga o te tau 2024 hei hono i ngā tauira AI ki ngā taputapu, ngā puna raraunga, me te taiao ā-rohe i runga i tētahi huarahi paerewa. Ka āhei te kaiwhakawhanake ki te whakaatu kotahi i tētahi pātengi raraunga, tētahi pūnaha kōnae, tētahi atanga hōtaka taupānga rānei ki tētahi kaiāwhina AI, ā, ka mahi tonu puta noa i ngā kiritaki katoa e mōhio ana ki te MCP.
Model family / generation — Mōdeli whānau / whakatupuranga
A series of related models from a single vendor — for instance the GPT series (GPT-3, GPT-4, GPT-5), Claude (Claude 3, Claude 4), Gemini, or Llama. Successive generations typically improve along several axes (capability, speed, cost) but with shifting trade-offs that matter for any production deployment.
[DeepL] He raupapa tauira e hono ana nō tētahi kaiwhakarato kotahi — hei tauira, te raupapa GPT (GPT-3, GPT-4, GPT-5), Claude (Claude 3, Claude 4), Gemini, Llama rānei. Ka whakapai ake ngā whakatipuranga e whai ake ana i ngā āhuatanga maha (pērā i te āheinga, te tere, te utu), engari me ngā whakawhitinga painga e rereke ana, ā, he mea nui ēnei mō ia whakaurunga whakaputa.
A system in which multiple AI agents cooperate, divide labour, or supervise one another — for instance a planner agent that delegates sub-tasks to specialist worker agents, or a critic agent that reviews another agent's draft. Adds capability but compounds risk; the Pluralistic Deliberation Orchestrator is one architectural answer to multi-agent values conflicts.
Caution: Each additional agent is an additional principal holding authority, and the compromise of any one of them is the compromise of what it may reach.
Ata whakatūpato: Ko ia kaiwhakahaere tāpiri he rangatira mana pupuri tāpiri, ā, ko te whakaraerae o tētahi o rātou he whakaraerae i ngā mea ka taea e ia te whakatutuki.
[DeepL] He pūnaha e mahi ngātahi ana ngā māngai AI maha, e wehe ana i ngā mahi, e ārahi rānei i a rātou anō — hei tauira, he māngai whakarite mahere e tuku ana i ngā mahi iti ki ngā māngai kaimahi mātanga, he māngai kaiwhakawā e arotake ana i te tuhi tuatahi a tētahi atu māngai. Ka tāpiri i te āheinga, engari ka whakapiki i te tūraru; ko te Kaiwhakahaere Whiriwhiringa Rōpū tētahi o ngā otinga hanganga hei whakatau i ngā pakarutanga uara i waenga i ngā māngai maha.
A model that accepts and produces more than one kind of input or output — text plus images, audio, video, or structured data. Most recent frontier models are multimodal by default. The platform's situated language layers are currently text-only.
[DeepL] He tauira e whakaae ana, e whakaputa ana hoki i ngā momo urunga me ngā momo putanga maha — kuputuhi me ngā whakaahua, oro, ataata, rānei raraunga hanganga. Ko te nuinga o ngā tauira Frontier hou he maha-āhua i te taunoa. Ko ngā paparanga reo ā-horopaki o te papanga he kuputuhi anake i tēnei wā.
A model whose trained parameters are publicly downloadable, so anyone can run it on their own infrastructure. Typically released under a licence (Llama, Qwen, Mistral, DeepSeek) — "open weight" is not always "open source" because training data + code may not be released. The platform's base model (Qwen2 14B) is open weight.
[DeepL] He tauira ā-rōpū e taea ana e te katoa te tiki i āna tawhā kua whakangungua, kia taea ai e ia te whakahaere i runga i āna ake hanganga. I te nuinga o te wā ka tukuna i raro i tētahi raihana (Llama, Qwen, Mistral, DeepSeek) — ehara i te mea ko te "taumaha tuwhera" he "puna tuwhera" tonu, nā te mea kāore pea i tukuna ngā raraunga whakangungu me te waehere. Ko te tauira taketake o te papanga (Qwen2 14B) he taumaha tuwhera.
Pre-training vs post-training — I mua i te whakangungu vs i muri i te whakangungu
Pre-training is the initial, expensive run on a vast corpus that gives the model its base capability. Post-training (sometimes called alignment training) is the much cheaper subsequent phase — instruction tuning, RLHF, DPO, constitutional AI training — that shapes the model's behaviour for end-user use.
[DeepL] Ko te whakangungu tuatahi te oma tuatahi, he utu nui, i runga i tētahi kohinga raraunga nui e whakarato ana i te pūkenga taketake o te tauira. Ko te whakangungu muri (i ētahi wā ka kīia ko te whakangungu whakaritenga) te wāhanga e whai ake nei, he iti ake te utu — te whakatikatika whakahau, RLHF, DPO, me te whakangungu AI ā-ture — e ārahi ana i te whanonga o te tauira mō te whakamahinga a te kaiwhakamahi whakamutunga.
An attack in which user-controlled input contains instructions intended to override the system prompt — for instance, a document the model is summarising contains "ignore previous instructions and..." An open problem in 2025-2026; defences include separating data from instructions, output-side filters, and the architectural rule that the AI should not be given irrevocable authority.
Caution: No longer a research curiosity. Gartner placed prompt injection among four threats where it judges attackers to hold the advantage over defenders, alongside deepfakes, AI application compromise and the software supply chain.
Ata whakatūpato: Ehara i te mea he mea whakamīharo rangahau anō. I whakanoho a Gartner i te werohanga ohorere ki waenga i ngā tūraru e whā e whakatauria ana e ia he painga ake ā ngā kaiwhakatumatuma i ngā kaiwhakamarumaru, tae atu ki ngā deepfakes, te whakaekenga o ngā taupānga AI, me te mekameka tuku pūmanawa.
[DeepL] He whakaeke e whakamahi ana i ngā urunga e whakahaerehia ana e te kaiwhakamahi, ā, kei roto he tohutohu hei whakakapi i te karanga pūnaha — hei tauira, kei roto i tētahi tuhinga e whakarāpopototia ana e te tauira ngā kupu "kaua e aro ki ngā tohutohu o mua, ā…" He raru tuwhera i te tau 2025–2026; ko ētahi ārai ko te wehe i ngā raraunga me ngā tohutohu, ngā tātari i te taha whakaputa, me te ture hanganga e mea ana kāore e tika kia whakawhiwhia te AI ki te mana kāore e taea te whakahoki.
Reducing the numerical precision of a model's parameters — for instance from 16-bit to 4-bit — to shrink memory use and speed up inference, at some cost in quality. Allows large open-weight models to run on consumer GPUs. GGUF, AWQ, and GPTQ are common quantization formats.
[DeepL] Te whakaiti i te tika tau o ngā tawhā o tētahi tauira — hei tauira, mai i te 16-bit ki te 4-bit — kia whakaiti i te whakamahinga mahara, kia tere ake ai te whakatau, ahakoa he utu ki te kounga. Ka āhei ngā tauira nui me ngā taumata taumaha tuwhera ki te whakahaere i runga i ngā GPU a ngā kaiwhakamahi. Ko GGUF, AWQ, me GPTQ ērā ngā hōputu whakawhāiti tau noa.
An open-weight large language model family from Alibaba Cloud (Tongyi Qianwen), released in successive generations from 2023 onward (Qwen 1, Qwen 1.5, Qwen 2, Qwen 2.5, Qwen 3). Available in many sizes from sub-1B to several hundred billion parameters; popular choice for on-premises deployment because the weights can be downloaded and run locally. The platform's situated language layers are built on Qwen 2 14B as the base model.
[DeepL] He whānau tauira reo nui taumaha-tuwhera nō Alibaba Cloud (Tongyi Qianwen), i tukuna i ngā whakatipuranga whaiaronga mai i te tau 2023 (Qwen 1, Qwen 1.5, Qwen 2, Qwen 2.5, Qwen 3). E wātea ana i ngā rahi maha mai i raro i te kotahi piriona tae noa ki ngā rau piriona tawhā; he kōwhiringa rongonui mō te whakaurunga ā-rohe nā te mea ka taea te tiki i ngā taumaha kia whakahaerehia ā-rohe. Ko ngā paparanga reo ā-horopaki o te tūāpapa i hangaia i runga i te Qwen 2 14B hei tauira pūtake.
A model class that generates an internal chain-of-thought (often as hidden reasoning tokens) before producing the visible answer, trading more compute for better outcomes on multi-step problems. Examples include OpenAI's o-series (o1, o3) and Anthropic's extended-thinking modes.
[DeepL] He akomanga tauira e waihanga ana i tētahi aho whakaaro ā-roto (he maha ngā wā hei tohu whakaaro huna) i mua i te whakaputa i te whakautu e kitea ana, e whakawhiti ana i te nui ake o te kaha rorohiko mō ngā hua pai ake i ngā raruraru maha-hipanga. Ko ētahi tauira ko te raupapa o a OpenAI (o1, o3) me ngā aratau whakaaro-roa a Anthropic.
Red teaming — Te whakamātautau haumaru mā te taha whakatumatuma
Adversarial testing of an AI system — a team paid to find ways the system can be made to misbehave, before real users do. A standard practice for frontier models; the structural alternative is the architectural bounding the Tractatus framework provides.
[DeepL] Whakamātautau whakatumatuma o tētahi pūnaha AI — he rōpū i utua kia rapu huarahi hei whakararu i te pūnaha, i mua i te whakamahi a ngā kaiwhakamahi tūturu. He tikanga paerewa mō ngā tauira ā-mua; ko te kōwhiringa hanganga ko te here hoahoanga e whakarato ana e te anga Tractatus.
A second pass after vector-similarity retrieval that uses a more expensive cross-encoder model to re-score the top candidates — typically pulling the most relevant 3-5 passages out of an initial top-50. Substantially improves RAG accuracy for the price of one extra inference call.
[DeepL] He huringa tuarua i muri i te tiki raraunga mā te taurite ā-vector, e whakamahi ana i tētahi tauira cross-encoder utu nui ake hei whakahou i ngā tohu o ngā kaitono matua — ko te nuinga ka tango i ngā wāhanga e toru ki te rima tino hāngai i roto i te rārangi 50 tuatahi. Ka tino whakapiki i te tika o te RAG mō te utu o tētahi karanga whakamātau anō.
A pattern in which the model is given relevant passages — retrieved from a corpus by similarity search at request time — and asked to ground its answer in them rather than rely on its training memory. The standard alternative to fine-tuning when the goal is to make a model answer accurately about a specific corpus.
[DeepL] He tauira i whakawhiwhia ai te tauira ki ngā wāhanga hāngai — i tangohia mai i tētahi kohinga mā te rapu ōrite i te wā tono — ā, ka tonoa kia ū tōna whakautu ki ēnei wāhanga, kaua ki te whakawhirinaki ki tōna mahara whakangungu. Ko te huarahi paerewa hei kōwhiringa ki te whakangungu taipitopito, ina ko te whāinga kia whakautu tika te tauira mō tētahi kohinga motuhake.
RLHF (Reinforcement Learning from Human Feedback) — RLHF (Ako Whakakaha mā ngā Urupare a te Tangata)
A weight-modification approach that uses paired human-preference data to shape model behaviour. One of the protocols the project tested and did not adopt.
[DeepL] He huarahi whakarerekē taumaha e whakamahi ana i ngā raraunga manakohanga tāngata takirua hei ārahi i te whanonga o te tauira. Ko tētahi o ngā kawa i whakamātauria e te kaupapa, engari kāore i whakaaetia.
An AI language model deliberately grounded in a specific community’s own context and sources rather than the open internet. In the Village the assistant begins situated in a domain — for a parish, the Book of Common Prayer, canon law, and church governance — and is then shaped further by source material the community curates. Sometimes called the Situated Language Layer (SLL).
[DeepL] He tauira reo atamai (AI) i whakatūria motuhake i runga i ngā horopaki me ngā puna o tētahi hapori, kaua ki te ipurangi tuwhera. I roto i te Hapori, ka tīmata te kaiāwhina i roto i tētahi rohe — arā, te pārihi, te Pukapuka Karakia Tūmatanui, te ture kanona, me te whakahaere hāhi — ā, ka hanga anō ia e ngā rauemi puna e whakaritea ana e te hapori. I ētahi wā ka kīia ko te Papanga Reo Whakaritea (SLL).
A language model deliberately smaller than a frontier model — typically a few hundred million to ~30 billion parameters — chosen for speed, lower cost, on-device or sovereign-infrastructure deployment, or task-specificity. The platform's situated language layer is a community-scoped SLM.
[DeepL] He tauira reo i hangaia kia iti ake i tētahi tauira rohe — he nuinga he rau miriona tae noa ki te 30 piriona ngā tawhā — i tīpakohia mō te tere, te utu iti, te whakaurunga ki runga pūrere, ki ngā hanganga motuhake rānei, me te arotahi ki ngā mahi motuhake. Ko te paparanga reo ā-horopaki o te tūāpapa he SLM ā-hapori.
Source material (curated corpus) — Source material
Tenant-curated documents and references that a community’s moderators add to inform its situated language model and to appear as “further reading” beneath its answers. Each source records a consent basis and an attribution, and may be flagged for training, for further-reading display, or both — so the community governs exactly what its assistant learns and surfaces.
[DeepL] Ngā tuhinga me ngā tohutoro kua tohua e ngā kaipupuri whare, ā, ka tāpirihia e ngā kaiwhakahaere hapori hei whakamōhio i tōna tauira reo ā-horopaki, kia puta ai hei "pānui atu" i raro i ōna whakautu. Ka tuhia e ia puna ngā tikanga whakaaetanga me te tohu kaituhi, ā, ka taea te tohu mō te whakangungu, mō te whakaaturanga pānui āpiti, rānei mō ngā mea e rua — kia whakahaere tika ai te hapori i ngā mea ka ako, ka whakaatuhia e tōna kaiāwhina.
A delivery pattern where the model's output is sent back token-by-token as it is generated, rather than waiting for the full answer. The user sees the answer typing live — better perceived latency at the same total throughput.
[DeepL] He tauira tuku e tukuna ana ngā putanga o te tauira, tohu-ia-tohu, i te wā e whakaputa ana, kaua e tatari kia oti katoa te whakautu. Ka kite te kaiwhakamahi i te whakautu e tuhi ana i te wā tūturu — he pai ake te kitenga o te whakaroa i te rahinga tuku katoa.
A model capability where the output is constrained to match a specific schema — usually JSON conforming to a given shape — so the calling application can parse it reliably. Critical for any agentic workflow where the model's output drives the next programmatic step.
[DeepL] He āheinga tauira e herea ana te putanga kia hāngai ki tētahi anga motuhake — he JSON e ū ana ki tētahi āhua kua whakaritea — kia taea e te taupānga e karanga ana te wetewete i te putanga kia pono. He mea tino hira mō ngā mahi aroturuki e ārahi ana te putanga o te tauira i te hiko whakamahere e whai ake nei.
Instructions given to a model at the start of an interaction — typically separate from the user's message — that set the model's role, constraints, voice, and rules of engagement. The system prompt is the most important single input to model behaviour and is itself a piece of governance the platform owns.
[DeepL] Ngā tohutohu e hoatu ana ki tētahi tauira i te tīmatanga o te whakawhitinga — he motuhake i te karere a te kaiwhakamahi — e tautuhi ana i te tūranga o te tauira, ngā here, te reo, me ngā ture whakawhitinga. Ko te tono pūnaha te tuku kotahi tino hira ki te whanonga o te tauira, ā, he wāhanga whakahaere nō te papaanga.
The atomic units a language model processes — typically sub-word fragments (around 3-4 characters of English on average). The tokenizer converts text to tokens before the model sees it. Cost and context limits are usually expressed in tokens, not characters or words.
[DeepL] Ko ngā wāhanga atomi e tukatukahia ana e tētahi tauira reo — arā, he wāhanga kupu-iti (tata ki te 3–4 pūāhua o te reo Ingarihi i te toharite). Ka hurihia e te kaitokena te tuhinga hei tohu i mua i te kitenga a te tauira. Ka whakapuaki ngā here utu me ngā here horopaki i roto i ngā tohu, ehara i ngā pūāhua, i ngā kupu rānei.
Tool use / function calling — Te whakamahi taputapu / te karanga mahi
The capability for a model to request that the host application run a specific function (search the web, query a database, send an email, write a file) with structured arguments, then incorporate the result into its next turn. The basis on which AI agents act on the world.
[DeepL] Ko te āheinga o tētahi tauira ki te tono ki te taupānga matua kia whakahaere i tētahi mahi motuhake (rapu ipurangi, pātai ki tētahi pātengi raraunga, tuku īmēra, tuhi kōnae) me ngā tūtohu hanganga, ā, ka whakauru i te hua ki tōna hurihanga e whai ake nei. Ko te tūāpapa e mahi ai ngā māngai AI i te ao.
A database optimised for storing and querying embedding vectors by similarity — for example finding the ten passages most semantically similar to a query. Examples: pgvector (PostgreSQL extension), Qdrant, Chroma, Pinecone, Weaviate. MongoDB Atlas also offers vector search.
[DeepL] He pātengi raraunga kua whakapaingia mō te rokiroki me te uiui i ngā huanga whakauru mā te ōritetanga — hei tauira, te kimi i ngā wāhanga tekau e tino ōrite ana ā-aronga ki tētahi uiui. Hei tauira: pgvector (toronga PostgreSQL), Qdrant, Chroma, Pinecone, Weaviate. Ka tukuna hoki e MongoDB Atlas te rapu huanga.
A measure of raw computing power: one zettaFLOPS is 10²¹ (a billion trillion) floating-point operations per second — the scale at which frontier AI training is now discussed. In the AI-sovereignty debate it is shorthand for the compute capacity only the largest states and firms can amass. The paper uses it as an example of a ‘capacity’ unit: when sovereignty is counted in zettaFLOPS, the firms that sell that compute get to decide who counts as sovereign.
[DeepL] He ine mō te kaha rorohiko mata: kotahi zettaFLOPS he 10²¹ (he piriona tiriona) o ngā mahi tohu rere ia hēkona — koinei te taumata e matapakihia ana ināianei mō te whakangungu AI ā-mua. I roto i te wero mō te rangatiratanga AI, he kupu poto tēnei mō te āheinga rorohiko ka taea anake e ngā kāwanatanga me ngā kamupene nui rawa te kohi. Ka whakamahia e te pepa hei tauira mō tētahi wāhanga 'kapasiti': ina tatauhia te rangatiratanga i roto i ngā zettaFLOPS, ko ngā kamupene e hoko ana i taua kaha rorohiko ka whakatau ko wai ka tatau hei rangatira.
Identity & AccessTuakiri me te Whakaaetanga Uru(24)
Accreditation gate — Kaute whakamanatanga
An onboarding step that confirms a prospective tenant owner is who they claim to be and intends the platform for legitimate community use. Existing tenants are grandfathered; the gate applies only to new tenant creation.
[DeepL] He hipanga whakauru e whakamana ana he tangata tūturu te kaipupuri rēti e hiahiatia ana, ā, e whakamahere ana ia ki te whakamahi i te papanga mō te whakamahinga ā-hapori tika. Ka whakamanahia ngā kaipupuri rēti o nāianei; ka pā anake te kuaha ki te waihanga kaipupuri rēti hou.
Miller, Yee and Shapiro, "Capability Myths Demolished" (2003): "authority that is exercised, but not selected, by its user. In an ambient authority system, subjects are not required to indicate a specific authority in order to exercise it." Their example is a Unix file open, where the caller presents no credential and the request simply succeeds or fails.
What it decides: It is the test that separates delegated authority from ambient authority — whether the authority is chosen at the point of use. Applied to current tool-calling, shells and broadly-scoped API tokens, most of it is ambient, and therefore not delegation in the technical sense.
He aha tāna e whakatau ai: Koinei te whakamātautau e wehe ana i te mana whakawhiwhia i te mana taiao — arā, mēnā ka tīpakohia te mana i te wā e whakamahia ana. Ki te whakamahia ki ngā karanga taputapu o nāianei, ngā anga (shells) me ngā tohu API whānui, he nuinga o ēnei he mana taiao, nō reira ehara i te mana whakawhiwhia i te tikanga hangarau.
Caution: Cite the 2003 paper and never Miller's thesis: the word does not appear in the thesis at all, verified across all 211 pages. The 2003 paper's own venue is unconfirmed, so verify the citation string before quoting it.
Ata whakatūpato: Tohua te pepa o te tau 2003, kaua rawa e tohu ki te tēsi a Miller: kāore rawa te kupu nei i puta i roto i te tēsi, kua tirotirohia puta noa i ngā whārangi e 211 katoa. Kāore anō kia whakauhia te wāhi whakaputa o te pepa o te tau 2003, nō reira me whakamana i te rārangi tohutoro i mua i tō whakahua.
[DeepL] Miller, Yee rāua ko Shapiro, "Ngā Paki o te Mana Whakahaere Kua Whakangaromia" (2003): "he mana e whakamahia ana, engari kāore i tīpakohia e tōna kaiwhakamahi. I roto i tētahi pūnaha mana taiao, kāore e hiahiatia ana kia tohu ngā tangata i tētahi mana motuhake kia whakamahi ai." Ko tā rātou tauira he whakatuwhera kōnae Unix, kāore te kaiwhakawhiti e tuku tohu mana, ā, ka angitu rānei, ka hinga rānei te tono.
The property that authority narrows as it passes: a delegate can hold less than the delegator holds, and never more, at every step of a chain.
What it decides: Without it, delegation widens rather than narrows, and an agent several steps from a person can hold authority nobody in the chain intended to grant.
He aha tāna e whakatau ai: Ki te kore tēnei, ka whānui ake te tuku mahi, kaua e whaiti, ā, ka taea e tētahi māngai kei tawhiti atu i te tangata te pupuri mana kāore he tangata i te rārangi i hiahia kia tukuna.
[DeepL] Ko te āhuatanga e whāiti ana te mana i a ia e tukuna ana: ka taea e te kaiwhakawhiwhi te pupuri i te iti iho i ngā mea e pupuritia ana e te kaiwhakawhiwhi matua, ā, kāore rawa e taea e ia te pupuri i te nui ake, i ia hikoinga o te mekameka.
Saltzer and Schroeder, 1975: "an unforgeable ticket, which when presented can be taken as incontestable proof that the presenter is authorized to have access to the object named in the ticket." Their contrast is the access control list — "a list of principals that are authorized to have access to some object": a ticket-oriented strategy against a list-oriented one.
Not agreed. Standards bodies define it differently:
Levy 1984, Capability-Based Computer Systems "a token, ticket, or key that gives the possessor permission to access an entity or object in a computer system."
Miller, Yee & Shapiro 2003 The word now names four incompatible models — ACLs as Columns, Capabilities as Rows, Capabilities as Keys, and Object Capabilities. Unqualified, it quotes four different things.
Kāore i whakaae. Ka tautuhia e ngā rōpū paerewa i rerekē:
Levy 1984, Capability-Based Computer Systems[DeepL] he tohu, he tīkiti, he kī rānei e tuku ana i te rangatira ki te uru ki tētahi wāhanga, ki tētahi mea rānei i roto i tētahi pūnaha rorohiko
Miller, Yee & Shapiro 2003[DeepL] Ināianei, e ingoa ana tēnei kupu i ngā tauira e whā kāore e hāngai — ko ngā ACL hei pou, ko ngā āheinga hei rārangi, ko ngā āheinga hei kī, me ngā āheinga o ngā tūemi. Ki te kore he tautuhi, ka whakahua ia i ngā mea e whā rerekē.
What it decides: Which of the four models is meant decides whether a capability is unforgeable and designatable, or merely an entry in a permission matrix. Any claim about capabilities has no content until the model is named.
He aha tāna e whakatau ai: Ko tēhea o ngā tauira e whā e whakatauhia ana mēnā he āheinga kāore e taea te hanga teka, ā, ka taea te tautuhi, hei tāpiri rānei hei urunga noa i roto i te matatini whakaaetanga. Kāore he ihirangi tō ngā kerēme katoa mō ngā āheinga kia tae rā anō ki te ingoa o te tauira.
Caution: The origin is second-hand: Dennis and Van Horn's 1966 CACM paper was not opened, and is sourced here through Levy 1984 and Saltzer's reference list. A 1965 report of the same work is cited elsewhere.
Ata whakatūpato: Ko te takenga mai he kōrero tuarua: kāore i whakatuwherahia te pepa CACM a Dennis rāua ko Van Horn i te tau 1966, ā, i ahu mai i konei mā Levy (1984) me te rārangi tohutoro a Saltzer. He pūrongo o taua mahi i te tau 1965 kua whakahuatia i ētahi atu wāhi.
[DeepL] Saltzer rāua ko Schroeder, 1975: "he tīkiti kāore e taea te whakawhē, ā, ina whakaaturia, ka whakaaetia hei taunakitanga kāore e taea te whakahē, e whakaatu ana kua whakaaetia te kaiwhakaatu kia uru ki te tūemi kua whakahuatia i te tīkiti." Ko tā rātou rerekētanga ko te rārangi whakahaere uru — "he rārangi o ngā rangatira kua whakaaetia kia uru ki tētahi mea": he rautaki e hāngai ana ki ngā tīkiti, hei whakataetae ki tētahi e hāngai ana ki ngā rārangi.
W3C DID Core v1.0 (Recommendation, 19 July 2022): "A globally unique persistent identifier that does not require a centralized registration authority and is often generated and/or registered cryptographically." A DID controller can change the DID document; a DID delegate is granted permission to use a verification method in it.
What it decides: The controller and delegate split gives a bounded delegation model. The specification's own example: a parent may permit a child to authenticate with a personal device without permitting the child to add other devices — use of a method granted, the power to extend the grant withheld.
He aha tāna e whakatau ai: Ko te wehenga i waenga i te kaiwhakahaere me te kaiwhakawhiwhi e hanga ana i tētahi tauira whakawhiwhinga herea. Hei tauira nō te whakamārama: ka āhei te mātua ki te tuku i te tamaiti kia whakamanahia ki tētahi pūrere whaiaro, engari kāore e tukuna kia tāpiri atu ia i ētahi atu pūrere — arā, ka whakaaetia te whakamahi i tētahi tikanga, engari ka puritia te mana ki te whakawhānui i taua whakaaetanga.
Caution: Cite version 1.0. The 1.1 document is a Candidate Recommendation Snapshot of 5 March 2026 and is not yet a Recommendation.
Ata whakatūpato: Tohua te putanga 1.0. Ko te tuhinga 1.1 he tirohanga poto o te taunakitanga kaitono o te 5 o Poutū-te-rangi 2026, ā, kāore anō kia noho hei taunakitanga.
[DeepL] W3C DID Core v1.0 (Tūtohu, 19 Hūrae 2022): "He tohu tuakiri mau tonu, motuhake puta noa i te ao, kāore e hiahiatia he mana rēhitatanga pokapū, ā, he maha ngā wā ka waihangatia, ka rēhitatia rānei mā te kīpūru." Ka taea e te kaiwhakahaere DID te whakarerekē i te tuhinga DID; ka whakawhiwhia he mana ki te māngai DID kia whakamahi i tētahi tikanga whakamana kei roto i taua tuhinga.
W3C PROV-DM (Recommendation, 30 April 2013): "the assignment of authority and responsibility to an agent (by itself or by another agent) to carry out a specific activity as a delegate or representative, while the agent it acts on behalf of retains some responsibility for the outcome of the delegated work."
Not agreed. Standards bodies define it differently:
IETF — a measured absence rather than a rival definition RFC 4949 has no entry for delegation; the string appears three times in 867 kilobytes, all incidental. RFC 9700, the current OAuth 2.0 security best-practice document, contains the word zero times. RFC 6749 names only the artefact — "delegation-specific credentials (access token)".
Saltzer & Schroeder 1975, nearest 1975 term: Propagation "When a principal, having been authorized access to some object, in turn authorizes access to another principal."
Kāore i whakaae. Ka tautuhia e ngā rōpū paerewa i rerekē:
IETF — a measured absence rather than a rival definition[DeepL] Kāore he urunga mō te tuku mana i roto i RFC 4949; ka puta te rerenga kupu e toru ngā wā i roto i ngā 867 kilobytes, ā, he mea tūpono katoa. Kāore te kupu e puta i roto i RFC 9700, te tuhinga tikanga pai haumaru o OAuth 2.0 o nāianei. RFC 6749 e kī ana anake i te taonga — "ngā tohu motuhake mō te tuku mana (tohu uru)".
Saltzer & Schroeder 1975, nearest 1975 term: Propagation[DeepL] Ka whakaaetia tētahi rangatira kia uru ki tētahi mea, ā, ka whakaae ia kia uru tētahi atu rangatira ki tētahi atu mea.
What it decides: If delegation requires retained responsibility and a selected authority, then sharing a credential is not delegation. RFC 6749 gives the operative test: where you cannot revoke one party without revoking all of them, and only by changing a password, no delegation has taken place.
He aha tāna e whakatau ai: Mēnā e hiahiatia ana e te tuku mahi te pupuri haepapa me te mana kua tohua, kāore te tiritiri tohu e kīia he tuku mahi. Ko RFC 6749 te whakamātautau whai mana: ki te kore e taea e koe te whakakore i tētahi rōpū kāore e whakakore i ngā rōpū katoa, ā, mā te whakarerekē kupuhipa anake, kāore he tuku mahi i puta.
Caution: PROV states its own limit: "all those agents are responsible in some way for the activity that took place but we do not say explicitly who bears responsibility and to what degree."
Ata whakatūpato: E kī ana a PROV i tōna ake here: "e kawenga ana aua kaiwhakahaere katoa i tētahi āhua mō ngā mahi i tū, engari kāore mātou e kī mārama ko wai e kawenga ana, ā, ki te aha te taumata kawenga."
[DeepL] W3C PROV-DM (Tūtohu, 30 Aperira 2013): "te tuku mana me te kawenga ki tētahi kaiwhakahaere (nāna anō, nā tētahi atu rānei) kia whakahaere i tētahi mahi motuhake hei māngai, hei kaiwhakakapi rānei, ā, kei te pupuri tonu te kaiwhakahaere e mahi ana mōna i ētahi kawenga mō ngā hua o te mahi kua tukuna."
A way of naming a signer by the certificate that vouches for them, rather than by a key we hold. The name carries a fingerprint of the root certificate and the details to be matched, so a checker holding the certificate chain can see who the signer says they are and which authority stands behind the claim. It is an individual Internet-Draft (draft-birkholz-did-x509-03) that no working group has adopted. The platform can check a signer named this way against the trust anchors a Village owner sets; it does not yet sign with certificates itself, and it does not check revocation.
[DeepL] He huarahi hei ingoa i te kaihaina mā te tiwhikete e tautoko ana i a ia, kaua mā te kī kei a mātou. Kei roto i te ingoa he tapumata o te tiwhikete pakiaka me ngā taipitopito hei taurite, kia taea e te kaiwhakamātau e mau ana i te mekameka tiwhikete te kite ko wai te kaihaina e kī ana ia, me te mana e tū ana i muri i te kerēme. He tuhinga Internet-Draft motuhake (draft-birkholz-did-x509-03) kāore anō kia whakaaetia e tētahi rōpū mahi. Ka taea e te papanga te tirotiro i tētahi kaihaina kua ingoaia pēnei ki ngā tūāpapa whakawhirinaki kua whakaritea e te rangatira Village; kāore anō ia e hainatia mā ngā tiwhikete, ā, kāore hoki ia e tirotiro i te whakakore.
A bounded read-only mode used by the demo Villages to let prospective members get a feel for the platform without joining. Tightly scoped; never used to expose live tenant content.
[DeepL] He aratau pānui-anake ā-rohe e whakamahia ana e te whakaaturanga o ngā Kāinga hei āwhina i ngā mema pea kia rongo i te papanga, kia kore ai e hono atu. He tino herea; kāore rawa e whakamahia hei whakaatu i ngā ihirangi o ngā kaipāpā noho ora.
The user-record flag that marks an account as a platform administrator. Used to grant access to system operations; never used to grant cross-tenant content access.
[DeepL] Ko te tohu rekoata-kaiwhakamahi e tohu ana i tētahi pūkete hei kaiwhakahaere papanga. Ka whakamahia hei tuku uru ki ngā whakahaere pūnaha; kāore rawa e whakamahia hei tuku uru ki ngā ihirangi o ētahi atu teneti.
The short reference shown alongside a sealed record, whose only job is to let someone look the record up. It is not a security boundary and must never be presented as one: research on comparing fingerprints by eye finds false-acceptance rates that rise rather than fall as the string gets longer, so the comparison is always done by a machine.
[DeepL] Ko te tohu poto e whakaaturia ana i te taha o tētahi rekoata kua huna, ā, ko tōna mahi anake he tuku i tētahi tangata kia rapu i taua rekoata. Ehara ia i te rohe haumaru, ā, me kaua rawa e whakaaturia hei pērā: i kitea i ngā rangahau whakataurite matimati mā te aroaro he nui ake ngā reiti whakaae hē i te roa ake o te aho, nō reira ka mahia tonu te whakataurite e tētahi mīhini.
The platform's privacy posture. Content is shared with named groups ("all members", "selected members", "only me", "everyone in community") never with abstract categories like "public" or "visitors". The terminology choice is itself a privacy commitment.
[DeepL] Te tūnga tūmataitinga o te papa. Ka tohatohahia ngā ihirangi ki ngā rōpū kua ingoa ("ngā mema katoa", "ngā mema kua tohua", "au anake", "ngā mema katoa o te hapori"), kāore rawa e tohatohahia ki ngā kāwai whānui pērā i te "tūmatanui" me te "manuhiri". Ko te kōwhiringa kupu nei he ū ki te tūmataitinga.
The senior administrative role within a tenant — the community member who provisioned it and holds the final say on tenant-scope decisions.
[DeepL] Te tūranga whakahaere matua i roto i tētahi kaiwhakamahi — te mema o te hapori i whakarite ai, ā, ko ia te tangata whai kupu whakamutunga mō ngā whakataunga e pā ana ki te whānuitanga o te kaiwhakamahi.
A role that authorises infrastructure-level operations (creating tenants, billing, health monitoring) — never tenant content access. The isPlatformAdmin flag authorises tenant-scoped system operations only; if code allows a platform admin to read tenant content, that is a security defect.
[DeepL] He tūranga e whakaaetia ana ki ngā mahi taumata hanganga (te waihanga kiritaki, te nama, te aroturuki hauora) — kāore rawa e whakaaetia kia uru ki ngā ihirangi a te kiritaki. Ko te haki isPlatformAdmin e whakaaetia ana anake ngā mahi pūnaha e pā ana ki te kiritaki; mēnā ka whakaaetia e te waehere kia pānui te kaiwhakahaere papanga i ngā ihirangi a te kiritaki, he hapa haumaru tērā.
The entity accountable for what a computer system does on someone's behalf. Saltzer and Schroeder, 1975: "A principal is, by definition, the entity accountable for the activities of a virtual processor" — and, in their glossary, "the unit of accountability in a computer system".
Not agreed. A second body defines it differently:
RFC 4949, Internet Security Glossary v2 (2007) "A specific identity claimed by a user when accessing a system" — equivalent to a login account identifier. A principal here is a row in a user table rather than a bearer of accountability.
Kāore i whakaae. Ka tautuhia e tētahi atu tinana i rerekē:
RFC 4949, Internet Security Glossary v2 (2007)[DeepL] He tuakiri motuhake e whakapaehia ana e te kaiwhakamahi i te wā e uru ana ki te pūnaha — he rite ki te tohu pūkete takiuru. Ko te matua i konei he rarangi i roto i te ripanga kaiwhakamahi, ehara i te kaikawe haepapa.
What it decides: On the 1975 sense, an agent handed an operator's API key is a subject and not a principal, so you look for an accountable party; on the 2007 sense a system can satisfy the definition completely and have nobody accountable at all.
He aha tāna e whakatau ai: I te tikanga o te tau 1975, ko te tangata i whakawhiwhia ki te kī API a te kaiwhakahaere he kaupapa, ehara i te rangatira, nō reira me rapu koe i tētahi rōpū kawenga; i te tikanga o te tau 2007, ka taea e tētahi pūnaha te whakatutuki katoa i te whakamārama, ā, kāore he tangata kawenga.
Caution: Saltzer's glossary is unnumbered front matter, so it is cited by title rather than by section.
Ata whakatūpato: Kāore i tauhia he tau ki ngā kupu whakamārama a Saltzer i te wahanga tuatahi, nō reira ka tohua ēnei mā te taitara, ehara mā te wāhanga.
[DeepL] Ko te mea e kawenga ana mō ngā mahi a tētahi pūnaha rorohiko mō tētahi tangata. Saltzer rāua ko Schroeder, 1975: "Ko te rangatira, i runga i te whakamārama, ko te mea e kawenga ana mō ngā mahi a tētahi tukatuka mariko" — ā, i roto i tā rātou rārangi kupu, "ko te wāhanga kawenga i roto i tētahi pūnaha rorohiko".
Authority granted for a stated purpose and scoped to it, rather than inherited from the user or the administrator who invoked the agent.
What it decides: Inherited access makes the agent as powerful as whoever started it, which is how a request that presents nothing succeeds because of who is asking.
He aha tāna e whakatau ai: Ko te uru tuku iho e whakakaha ana i te kaiwhakahaere kia rite ki te mana o te tangata i tīmata ai, ā, koinei te take e angitu ai tētahi tono kāore he mea e whakaaturia ana, nā te tangata e tono ana.
[DeepL] He mana i whakawhiwhia mō tētahi kaupapa kua tautuhia, ā, he here tōna ki taua kaupapa, kaua e tuku iho mai i te kaiwhakamahi, i te kaiwhakahaere rānei i whakahohe i te māngai.
Saltzer and Schroeder, 1975: "To take away previously authorized access from some principal." They also name the difficulty: letting an authorised user continue until finished may be unacceptable, while immediate withdrawal may severely disrupt them.
Not agreed. A second body defines it differently:
Miller, Yee & Shapiro 2003 — "the irrevocability myth" Revocation is achieved by interposing a revoker object between holder and resource. In their construction "no capabilities were themselves revoked" — so irrevocability is a property of a design, not of capabilities.
Kāore i whakaae. Ka tautuhia e tētahi atu tinana i rerekē:
Miller, Yee & Shapiro 2003 — "the irrevocability myth"[DeepL] Ka tutuki te whakakore mā te whakanoho i tētahi tūemi whakakore i waenga i te kaiwhiwhi me te rauemi. I roto i tā rātou hanganga, "kāore i whakakorehia ngā āheinga anō" — nō reira he āhuatanga o te hoahoa te kore-whakakore, ehara i te āhuatanga o ngā āheinga.
What it decides: If revocation is architectural interposition, you design a revoker rather than rejecting capability systems. And RFC 6749's failure case is the practical test of a delegation: if you cannot revoke one party without revoking all of them, the delegation was never real.
He aha tāna e whakatau ai: Mēnā he whakanoho ā-hanganga te whakakore, ka hoahoa koe i tētahi kaiwhakakore, kaua e whakakahore i ngā pūnaha āheinga. Ā, ko te take hapa o RFC 6749 he whakamātautau whaihua mō te tuku mana: mēnā kāore e taea e koe te whakakore i tētahi rōpū kāore e whakakore i a rātou katoa, kāore rawa taua tuku mana i tū.
Caution: RFC 4949 records the limit of the certificate mechanism: in the worst case, all signatures made during a certificate's validity period may have to be considered invalid.
Ata whakatūpato: RFC 4949 e tuhi ana i te here o te pūnaha tiwhikete: i te tino kino rawa, me whakaaro pea he hē ngā hainatanga katoa i mahia i te wā whaimana o te tiwhikete.
[DeepL] Saltzer rāua ko Schroeder (1975): "Te tango i te uru kua whakaaetia i mua i tētahi rangatira." Ka kī hoki rātou i te uaua: tērā pea kāore e whakaaetia kia tukua te kaiwhakamahi whakaaetia kia haere tonu kia oti, ā, tērā pea ka tino whakararuraru ki a rātou te tango ohorere i te uru.
A control requiring a second, separately held credential before a named class of action — publication, payment, deletion, access change, or an agreement.
What it decides: If the agent can satisfy it on its own, it is not step-up approval. The credential has to be held by somebody else.
He aha tāna e whakatau ai: Mēnā ka taea e te kaiwhakahaere te whakatutuki i a ia anake, ehara tērā i te whakaaetanga taumata-ake. Me puritia te tohu e tētahi atu.
[DeepL] He whakahaere e hiahiatia ana he tuakiri tuarua, e puritia motuhake ana, i mua i tētahi momo mahi kua ingoa — whakaputa, utu, mukunga, whakarerekētanga uru, rānei whakaaetanga.
The per-tenant address prefix — e.g. whanau.mysovereignty.digital. The platform routes by subdomain to identify which tenant a request is bound to.
[DeepL] Te tapanga whakauru wāhitau mō ia kaiwhakamahi — hei tauira whanau.mysovereignty.digital. Ka whakatere te papa mā ngā subdomain kia tautuhi ai ko tēhea kaiwhakamahi e hono ana te tono.
One community on the platform — a Village, a rūnanga, a parish, an extended family, a small business. Each tenant has its own subdomain, its own corpus, its own members, its own governance, and its own situated language layer cohort assignment.
[DeepL] He hapori kotahi i runga i te papanga — he kāinga, he rūnanga, he pārihi, he whānau whānui, he pakihi iti. He subdomain motuhake tō ia kaipā, he kohinga kupu motuhake, he mema motuhake, he whakahaere motuhake, me tana tohinga rōpū paparanga reo ā-tūnga motuhake.
The certificate a checker has chosen to trust as the end of a chain. A signer’s certificate chain is accepted only if it ends at an anchor the checker supplied, so the choice of anchors is the checker’s and not the signer’s. The downloadable verifier takes anchors with --trust-anchor, and since 20 October 2026 a Village owner can set up to eight through the platform’s settings API. Not to be confused with the four trust anchors in Addendum M, which are assumptions rather than certificates.
[DeepL] Ko te tiwhikete kua whiriwhiria e te kaiwhakamātau hei whakawhirinaki hei mutunga o te mekameka. Ka whakaaetia anake te mekameka tiwhikete a te kaihaina mēnā ka mutu ki tētahi tauranga i whakaratoa e te kaiwhakamātau; nō reira, ko te kōwhiri tauranga nā te kaiwhakamātau, ehara i te kaihaina. Ka tango te kaiwhakamana ka taea te tikiake i ngā tauranga mā te --trust-anchor, ā, mai i te 20 o Oketopa 2026 ka taea e te rangatira Village te whakarite tae noa ki te waru mā te API tautuhinga o te papanga. Kaua e whakawhēkaua ki ngā tauranga whakawhirinaki e whā kei te Tāpiritanga M, he whakapae ēnei, ehara i ngā tiwhikete.
A person legally authorised to act on behalf of an organisation, marae, or charitable trust. Trustees carry governance obligations beyond ordinary membership — fiduciary duty, accountability for decisions, signatory authority — and the platform reflects these in role configuration where governance product types are in use.
[DeepL] He tangata kua whakamanahia ā-ture kia mahi mō tētahi whakahaere, tētahi marae, tētahi rāngai pūtea āwhina rānei. He kawenga whakahaere ā ngā kaitiaki e nui ake ana i ngā kawenga o te mema noa — te haepapa pono, te haepapa mō ngā whakataunga, te mana haina — ā, ka whakaata tēnei i te papanga i roto i te whirihoranga tūranga, i ngā wā e whakamahia ana ngā momo hua whakahaere.
A centralised registry envisioned in the Cyberspace Administration of China's 2026 framework (item 4) that would provide intelligent agents with digital identity management, search-and-discovery services, and capability declaration. The registry would record developer information, deployment methods, interface protocols, and compliance certification — making each agent's identity and authorisation status queryable by other agents and by regulators. Tractatus contrast: Tractatus does not register agents to a national platform. Identity is derived from sovereign records with cryptographic provenance, anchored to a tenant. Discovery happens at the federation boundary through bilateral agreements between specific tenants, not through a global lookup.
[DeepL] He rēhita pokapū i whakaarohia i roto i te anga 2026 a te Whakahaere ā-Ipurangi o Haina (tāpiri 4) hei whakarato ki ngā māngai atamai i te whakahaere tuakiri matihiko, ngā ratonga rapu me te kitenga, me te whakapuaki āheinga. Ka tuhi te rēhita i ngā pārongo kaihanga, ngā tikanga whakaurunga, ngā kawa atanga, me ngā tiwhikete hāngai — kia taea e ētahi atu māngai me ngā kaiwhakahaere ture te uiui i te tuakiri me te tūnga mana o ia māngai. Kōritenga Tractatus: Kāore Tractatus e rēhita ana i ngā māngai ki tētahi tūāpapa ā-motu. Ka ahu mai te tuakiri i ngā rēhita rangatira me te takenga whakamunatanga, ā, ka ū ki tētahi kaipā. Ka puta te kitenga i te rohe o te kotahitanga mā ngā whakaaetanga ā-rua i waenga i ngā kaipā motuhake, ehara i te rapu ā-ao.
W3C Verifiable Credentials Data Model v2.0 (Recommendation, 15 May 2025): "A tamper-evident credential whose authorship can be cryptographically verified." An issuer asserts claims and transmits the credential to a holder; a verifier receives it.
Not agreed. Standards bodies define it differently:
W3C, disclosing its own disagreement "The definition of credential used in this specification differs from NIST's definitions of credential." The disagreement is disclosed by one party and not the other.
RFC 9334 (RATS) — a naming collision In RATS the Verifier appraises evidence and produces a result FOR a relying party. In the W3C model the verifier IS the relying party. The same word is wired in opposite directions across two live standards.
Kāore i whakaae. Ka tautuhia e ngā rōpū paerewa i rerekē:
W3C, disclosing its own disagreement[DeepL] Ko te whakamārama o te kupu "credential" e whakamahia ana i roto i tēnei whakaritenga he rerekē ki ngā whakamārama a NIST mō te kupu "credential". Kua whakapuaki tētahi rōpū i te rerekētanga, kāore i whakapuaki te rōpū kē.
RFC 9334 (RATS) — a naming collision[DeepL] I roto i te RATS, ka aromatawai te kaiwhakamana i ngā taunakitanga, ā, ka whakaputa hua mā te rōpū e whakawhirinaki ana. I roto i te tauira W3C, ko te kaiwhakamana anō te rōpū e whakawhirinaki ana. Kei te honoa taua kupu i ngā ahunga whakamuri puta noa i ngā paerewa ora e rua.
What it decides: "Verification of a credential does not imply evaluation of the truth of claims encoded in the credential." Checking a signature establishes authorship, not truth; validation — whether a claim satisfies the verifier's business requirements — is explicitly outside the specification's scope and has to be built separately.
He aha tāna e whakatau ai: Ehara i te mea mā te whakamana i tētahi tohu e aromatawai ana i te pono o ngā kerēme kua whakaurua ki roto i taua tohu. Mā te tirotiro i tētahi hainatanga e whakapūmau ana i te kaituhi, ehara i te pono; ko te whakamanatanga — arā, mēnā e tutuki ana tētahi kerēme i ngā whakaritenga pakihi a te kaiwhakamana — kei waho noa atu i te pae o te whakaritenga, ā, me hanga motuhake.
Caution: Errata exist against the 15 May 2025 Recommendation.
Ata whakatūpato: Kei reira ngā hapa mō te Tūtohutanga o te 15 o Mei 2025.
[DeepL] W3C Tauira Raraunga Tiwhikete Ka Taea te Whakamana v2.0 (Tūtohu, 15 Mei 2025): "He tiwhikete e kitea ana mēnā kua whakarerekē, ā, ka taea te whakamana mā te kīputu i te kaituhi." Ka whakaputa kerēme te kaiwhakaputa, ā, ka tuku i te tiwhikete ki te kaitiaki; ka whiwhi i taua tiwhikete te kaiwhakamana.
The actor a threat model is concerned with — anyone or anything whose interests could lead them to attack the system. Includes opportunistic attackers, motivated attackers, insiders, and (for sovereignty-grade systems) jurisdictional pressure on infrastructure providers.
[DeepL] Ko te tauira whakatumatuma e pā ana ki ngā kaiwhakaari — ko te hunga, ko ngā mea rānei e āhei ana ā rātou hiahia ki te whakaeke i te pūnaha. Kei roto i tēnei ngā kaiwhakaeke whai wā, ngā kaiwhakaeke whai take, ngā tāngata o roto, ā, mō ngā pūnaha taumata rangatiratanga, ko te pēhanga ā-ture ki ngā kaiwhakarato hanganga.
An encryption algorithm and mode (Advanced Encryption Standard, 256-bit key, Cipher Block Chaining). Used for at-rest encryption of certain platform data.
[DeepL] He tātai whakamunatanga me tētahi aratau (Paerewa Whakamunatanga Matatau, kī 256-bit, here here poraka whakamuna). Ka whakamahia hei whakamuna i ngā raraunga papanga e noho ana i te wā rokiroki.
A record to which entries may be added but from which none may be edited or removed. Combined with signing, it makes the history of a record checkable rather than merely asserted.
[DeepL] He rēhita ka taea te tāpiri i ngā tāurunga, engari kāore e taea te whakarerekē, te tango rānei i ngā tāurunga. Mā te hono ki te hainatanga, ka taea te tirotiro i te hītori o te rēhita, ehara i te mea e whakapuaki noa ana.
The total set of points at which an outside actor could try to enter a system, extract data, or interfere with operation. A larger attack surface is harder to defend; the platform's vendor-prohibition rule and minimal-dependency posture exist partly to keep the surface small.
[DeepL] Ko te huinga katoa o ngā wāhi e taea ai e tētahi kaiwhakahaere o waho te ngana ki te uru ki roto i te pūnaha, ki te tango raraunga, ki te whakararuraru rānei i ngā mahi. He uaua ake te tiaki i tētahi mata whakaeke nui; ko te ture aukati kaiwhakarato o te papanga me tōna tūnga whakawhirinaki iti e wāwāhi ana kia iti tonu te mata whakaeke.
There is no single definition. The nearest structural account is RFC 9334, the IETF Remote Attestation Procedures architecture (January 2023), which defines the roles rather than the word: an Attester produces evidence, a Verifier appraises it, and a Relying Party depends on the result.
Not agreed. Standards bodies define it differently:
NIST SP 1800-19B "The process of providing a digital signature for a set of measurements securely stored in hardware" — a hardware quote.
NIST SP 800-63-4 "Information conveyed to the CSP… to describe the characteristics of a connected authenticator" — a property of an authenticator.
NIST, from ISO/IEC 17000:2020, as cited in the NIST glossary "The issue of a statement, based on a decision, that fulfillment of specified requirements has been demonstrated" — a conformity-assessment statement.
Kāore i whakaae. Ka tautuhia e ngā rōpū paerewa i rerekē:
NIST SP 1800-19B[DeepL] "Ko te tukanga o te tuku haina matihiko mō tētahi huinga ine kua penapenahia haumaru i roto i te taputapu" — he kīanga taputapu.
NIST SP 800-63-4[DeepL] Ngā pārongo i tukuna ki te CSP… hei whakamārama i ngā āhuatanga o tētahi kaiwhakamana hono
NIST, from ISO/IEC 17000:2020, as cited in the NIST glossary[DeepL] Ko te tuku i tētahi tauākī, i runga i tētahi whakataunga, e whakaatu ana kua tutuki ngā whakaritenga kua tautuhia — he tauākī aromātai hāngai.
What it decides: "Attested" carries no determinate content until the source is named: a hardware quote, an authenticator property and a conformity statement are three different things. There is also a live naming collision — RFC 9334's Verifier appraises evidence for a Relying Party, while the W3C's verifier IS the relying party. Anyone composing the two inherits it, and the trust boundary moves depending on which is meant.
He aha tāna e whakatau ai: Kāore he ihirangi mārama mō te kupu "Attested" kia whakahuatia te puna: he kōrero utu taputapu, he āhuatanga whakamana, he tauākī hāngai – he toru ēnei mea rerekē. He raruraru ingoa ora anō hoki — ko te taupānga Whakamana o RFC 9334 e aromatawai ana i ngā taunakitanga mō tētahi Rōpū e Whakawhirinaki ana, ā, ko te kaiwhakamana o te W3C koia tonu te rōpū e whakawhirinaki ana. Ko te hunga e whakakotahi ana i ēnei e rua ka mau ki tēnei raruraru, ā, ka neke te rohe whakawhirinaki i runga i te tikanga e hiahiatia ana.
Caution: The ISO/IEC 17000:2020 wording is second-hand through the NIST glossary; the standard itself is paywalled and was not opened. It must not be stated as ISO's own words without buying it.
Ata whakatūpato: Ko ngā kupu o ISO/IEC 17000:2020 i whiwhi tuarua mā te rārangi kupu a NIST; kei muri i te pakitara utu te paerewa, ā, kāore i whakatuwherahia. Kāore e tika kia kīia he kupu nō ISO anake mēnā kāore i hokona.
[DeepL] Kāore he whakamārama kotahi. Ko te whakamārama hanganga e tata ana ko RFC 9334, te hanganga o ngā Tikanga Whakamana Mamao a IETF (Hānuere 2023), e tautuhi ana i ngā tūranga, ehara i te kupu: ko te Kaiwhakamana e whakaputa ana i ngā taunakitanga, ko te Kaiwhakau e aromatawai ana i ēnei, ā, ko te Rōpū e Whakawhirinaki ana ki te hua.
A tamper-evident record of significant operations — who did what, when, against which record — kept for forensic and compliance purposes. The platform's audit log includes export operations (GDPR DSR fulfilment), administrative actions, and per-request inference-routing decisions.
[DeepL] He rēhita e kitea ana mēnā kua whakarerekēhia, o ngā mahi nui — ko wai i mahi i te aha, i te wāhea, ki tēhea rēhita — e puritia ana mō ngā take tātari ā-ture me te ū ki ngā ture. Kei roto i te rangitaki arotake o te papanga ngā mahi kaweake (hei whakatutuki i te DSR o te GDPR), ngā mahi whakahaere, me ngā whakataunga whakatere whakamātau mō ia tono.
Proving who you are. The platform authenticates members by email + password backed by salted hash, with optional second factors. Distinct from authorisation, which proves what you may do.
[DeepL] Te whakaū ko wai koe. Ka whakamanahia e te papanga ngā mema mā te īmēra me te kupuhipa, ā, ka tautokona e te hash tote, me ētahi atu āhuatanga tuarua hei kōwhiringa. He rerekē tēnei i te whakaaetanga, e whakaū ana i ngā mahi ka taea e koe.
Proving what you may do once authenticated. The platform's authorisation enforces tenant isolation, role boundaries (member, owner, platform admin), and feature-gate policies. Mistakes here are a more frequent source of breach than authentication failures.
[DeepL] E whakaatu ana i ngā mahi ka taea e koe i muri i tō whakamanatanga. Ka whakatinana te whakamanatanga o te papaanga i te wehewehe o ngā kaiwhakamahi, ngā rohe tūranga (mema, rangatira, kaiwhakahaere papaanga), me ngā kaupapa here ā-kuaha āhuatanga. He puna pakaru nō ngā hē i konei i te nuinga ake i ngā hē whakamanatanga.
Automated traffic from non-human clients with hostile intent — credential stuffing, scraping, comment spam, denial-of-service. Defended against by rate limiting, challenge questions on signup forms, and behavioural detection. The platform's invitation-based onboarding also limits bot exposure on the member side.
[DeepL] Ngā rerenga aunoa mai i ngā kiritaki kāore he tangata, he whāinga kino — te whakakī ingoa me ngā kupuhipa, te kohikohi raraunga, te parahanga kōrero, me te aukatinga ratonga. Ka ārai i ēnei mā te here tere, ngā pātai wero i ngā puka rēhita, me te kitenga whanonga. Ka herea hoki te tukanga whakauru mā te tono a te papanga, kia iti ake te whakaaturanga o ngā pōtae ki te taha mema.
An attack in which the attacker exhaustively tries every plausible secret for a single account until one works. Defended against by complexity requirements on credentials, rate limiting on authentication endpoints, and account-lockout after repeated failures.
[DeepL] He whakaeke e whakamātau whānuitia ana e te kaiwhakaeke ngā kupuhipa (rānei ngā kī) katoa e taea ana mō tētahi pūkete kotahi kia kitea tētahi e whai hua ana. Ka ārai i tēnei mā ngā kaupapa here kupuhipa pakari, te here tere i ngā tauranga whakamanatanga, me te aukati pūkete i muri i ngā hapa.
Sealing a fingerprint of a secret value before a period and disclosing the value after it, so anyone can later check that it was fixed in advance and that the schedule followed from it. Under an external clock this proves the value predates whatever it governed. On its own it is insufficient for an examination the operator cannot anticipate: whoever fixed the value knows it. The scheme binds the committer to their choice; it does not blind them to it. It gives verifiability, not unpredictability.
Caution: An earlier draft of this work claimed both from it. Unpredictability needs one of two further constructions — an external randomness source undetermined at the time of commitment, or threshold custody.
Ata whakatūpato: An earlier draft of this work claimed both from it. Unpredictability needs one of two further constructions — an external randomness source undetermined at the time of commitment, or threshold custody.
[DeepL] Te hiri i te tohu matimati o tētahi uara huna i mua i tētahi wāhanga wā, ā, te whakapuaki i taua uara i muri iho, kia taea ai e te katoa te tirotiro i muri mai kua whakatauhia kētia te uara i mua, ā, i ahu mai te rārangi wā i taua uara. I raro i tētahi karaka o waho, ka whakaatu tēnei i mua ake te uara i ngā mea katoa i whakahaerehia e ia. Ko ia anake, kāore e ranea mō tētahi arotake kāore e taea e te kaiwhakahaere te matapae: kei te mōhio te tangata nāna i whakatau te uara. Ka herea e te tikanga te kaituku ki tāna kōwhiringa; kāore e whakakāpōtia ia ki taua kōwhiringa. Ka hoatu e ia te āheinga ki te whakaū, ehara i te kore e taea te matapae.
Norman Hardy, 1988. A program holding authority from two sources at once, with no way to say which one it is using. Hardy: "The compiler serves two masters and carries some authority from each to perform its respective duties. It has no way to keep them apart… The compiler had no way of expressing these intents!"
What it decides: Nothing in Hardy's code was wrong — "when the code was written to produce the output it was correct" — so you audit the authority topology rather than the code paths. A proxy holding one credential on behalf of every caller is the defect itself, not a bug in it.
He aha tāna e whakatau ai: Kāore he hapa i roto i te waehere a Hardy — "i te wā i tuhia ai te waehere kia whakaputa i te putanga, he tika" — nō reira ka arotake koe i te hanganga mana, ehara i ngā ara waehere. Ko te kaitūhonohono e pupuri ana i tētahi tohu whakamanatanga mō ia kaitono, koinei te hē anō, ehara i te pepeke i roto i a ia.
Caution: The 1988 paper carries no formal definition; it is a case narrative. The Model Context Protocol authorization specification of 18 June 2025 restates the problem in Hardy's exact shape without citing him, and requires that a server "MUST NOT pass through the token it received from the MCP client".
Ata whakatūpato: Kāore he whakamārama ā-ture i roto i te pepa o te tau 1988; he pūrongo take tēnei. Ko te whakaritenga whakaaetanga o te Model Context Protocol o te 18 o Pipiri 2025 e whakahoki ana i te raru i runga i te āhua tika a Hardy, ahakoa kāore i whakahua ia, ā, e tono ana kia kaua te tūmau e tuku i te tohu i riro mai i te kiritaki MCP.
[DeepL] Norman Hardy, 1988. He hōtaka e mau ana i te mana nō ngā puna e rua i te wā kotahi, kāore he huarahi kia mōhio ko tēhea e whakamahia ana. Hardy: "E mahi ana te kaiwhakamaori hōtaka mō ngā rangatira e rua, ā, ka kawe ia i tētahi mana nō ia rangatira hei whakatutuki i ā rātou mahi. Kāore he huarahi kia wehewehe i a rātou… Kāore he huarahi a te kaiwhakamaori hōtaka ki te whakaputa i ēnei aronga!"
An HTTP header that tells the browser which sources of script and style it may execute. The platform's CSP forbids inline scripts; all JavaScript must live in external files. This prevents large classes of injection attack.
[DeepL] He upoko HTTP e whakamōhio ana ki te kaitirotiro ko ēhea puna o ngā tuhinga me ngā āhua ka taea e ia te whakahaere. Ka aukati te CSP o te papanga i ngā tuhinga ā-roto; me noho katoa ngā JavaScript ki ngā kōnae o waho. Mā konei ka ārai i ngā momo whakaeke werohanga nui.
Credential stuffing — Whakakī ingoa me ngā kōrero urunga
An automated attack in which the attacker tries username-and-password pairs leaked from other breaches against the platform's login form, betting that members reused credentials. Defended against by rate limiting, MFA, and detecting login attempts from anomalous locations.
[DeepL] He whakaeke aunoa e whakamātau ana te kaiwhakaeke i ngā huinga ingoa kaiwhakamahi me ngā kupuhipa i pakaru i ētahi atu pakaru, ki te whakamātau ki te takiuru ki te pae, e whakapono ana ka whakamahia anō e ngā mema ā rātou mōhiohio takiuru. Ka ārai tēnei mā te here tere, te whakamanatanga tohu-rua (MFA), me te kitea o ngā whakamātau takiuru mai i ngā wāhi rerekē.
An attack class in which a malicious site causes a user's browser to issue an authenticated request to a different site. Mitigated by requiring a per-session token on every state-changing request; the platform's middleware enforces this app-wide.
[DeepL] He momo whakaeke e akiaki ana i te pūtirotiro a te kaiwhakamahi ki te tuku tono kua whakamanahia ki tētahi atu pae mā te pae kino. Ka ārai tēnei mā te tono i tētahi tohu mō ia wāhanga i ia tono e whakarerekē ana i te tūnga; ka whakatinana tēnei e te papanga waenga o te papaanga puta noa i te taupānga.
An attack class in which an attacker arranges for malicious script to be served from a trusted origin, executing in another user's browser with that origin's privileges. Defended against by escaping output, using CSP to forbid inline scripts, and sanitising rich content before render.
[DeepL] He momo whakaeke e whakaritea ana e te kaiwhakaeke kia tukuna he tuhinga kino mai i tētahi puna e whakawhirinaki ana, kia whakahaere ai i roto i te kaitirotiro o tētahi atu kaiwhakamahi me ngā mana o taua puna. Ka ārai i tēnei mā te karo i ngā putanga, mā te whakamahi i te CSP hei aukati i ngā tuhinga ā-roto, me te whakamā i ngā ihirangi whai rawa i mua i te whakaatu.
Erasure performed by destroying the per-record encryption key rather than overwriting data: once the key is gone, the ciphertext is unrecoverable, even by the platform operator with full database access. In the Village it leaves a signed tombstone, so the deletion is evidenced rather than erased without trace — a structural implementation of a right-to-erasure obligation.
[DeepL] Ko te whakakore e mahia ana mā te whakangaro i te kī whakamunatanga mō ia rekoata, kaua e tuhi anō i ngā raraunga: ka ngaro te kī, kāore e taea te whakahoki mai i te kuputuhi whakamunatanga, ahakoa mā te kaiwhakahaere papanga e whai mana katoa ki te pātengi raraunga. I roto i te Village ka waiho he toka urupa kua hainatia, kia kitea ai te mukunga, kaua e mukua kia kore he tohu — he whakatinanatanga hanganga o te herenga ki te tika ki te mukunga.
CVE (Common Vulnerabilities and Exposures) — CVE (Ngā ngoikoretanga me ngā whakaaturanga noa)
A globally-coordinated catalogue of publicly-known security vulnerabilities, each with a unique identifier of the form CVE-YYYY-NNNNN. Vendors and security tools track CVEs to know which versions of which software need patching.
[DeepL] He rārangi ā-ao kua whakaritea o ngā ngoikoretanga haumaru e mōhiotia ana e te marea, ā, ia ngoikoretanga he tuakiri ahurei i te āhua CVE-YYYY-NNNNN. Ka whai i ngā CVE ngā kaiwhakarato me ngā taputapu haumaru kia mōhio ai rātou ko ēhea putanga o ngā pūmanawa e hiahiatia ana kia whakatikahia.
Synthetic voice, video or imagery generated to impersonate a specific person. The attack is on identity rather than on a system: it defeats voice and face verification, carries a live conversation in a familiar voice, and passes a recruitment interview. Gartner reports that attacker use is now commonplace rather than exceptional, which moves the defence away from detecting the artefact and towards not resting authority on recognising a face or a voice at all.
[DeepL] Reo hangarua, ataata, whakaahua rānei i hangaia hei whakakapi i tētahi tangata motuhake. Ko te whakaeke nei e aro ana ki te tuakiri, ehara i te pūnaha: ka whakakore i ngā whakamana reo me te whakamana kanohi, ka kawe i tētahi kōrero ora i roto i tētahi reo e mōhiotia ana, ā, ka angitu i tētahi uiuitanga mō te whakauru kaimahi. E ai ki a Gartner, kua noa te whakamahinga a ngā kaiwhakaeke, ehara i te mea motuhake, ā, nā konei ka neke te ārai i te rapu i te mea hanga, ki te kore e whakawhirinaki ki te kanohi, ki te reo rānei hei whakatau mana.
A posture in which a capability that was not explicitly granted is absent rather than merely disallowed. Tools and plugins load from a signed inventory, approved per version.
What it decides: An absent capability cannot be reached by persuading a model to ask for it, which is the difference between a refusal and a rule.
He aha tāna e whakatau ai: Kāore e taea te whiwhi i tētahi āheinga kāore e wātea ana mā te akiaki i tētahi tauira kia tono mōna, ā, koinei te rerekētanga i waenga i te whakahē me te ture.
[DeepL] He tūnga e kore e kitea ai tētahi āheinga kāore i whakawhiwhia ā-tūturu, ehara i te mea kua aukatia noa. Ka utaina ngā taputapu me ngā mono-taapiri mai i tētahi rārangi taonga kua hainatia, ā, kua whakaaetia ia putanga.
Denial of service (DoS / DDoS) — Te aukatinga ratonga (DoS / DDoS)
An attack that aims to make a service unavailable to legitimate users by overwhelming it with traffic. The distributed variant (DDoS) uses many sources at once. Defended against by upstream filtering at the cloud-provider edge, rate limits, and circuit-breakers in the application.
[DeepL] He whakaeke e whāia ana kia kore ai e wātea te ratonga ki ngā kaiwhakamahi mana, mā te whakawhē i a ia ki te nui rawa o ngā rerenga raraunga. Ko te momo tohatoha (DDoS) e whakamahi ana i ngā puna maha i te wā kotahi. Ka ārai i tēnei mā te tātari i ngā rerenga raraunga e rere mai ana i ngā hononga matua o te kaiwhakarato kapua, ngā here tere, me ngā pūwaha aukati huringa i roto i te taupānga.
A CVE in a library the platform depends on rather than in the platform's own code. The April 2026 sweep remediated 19 dependency vulnerabilities to zero; a 48-hour patch cycle was adopted to keep new disclosures from accumulating.
[DeepL] He ngoikoretanga haumaru (CVE) kei roto i tētahi whare pukapuka e whakawhirinaki ana te papanga, kaua ki roto i te waehere o te papanga anō. I whakatika e te tirotiro o Aperira 2026 ngā ngoikoretanga haumaru e 19 o ngā whakawhirinaki kia kore rawa; i whakamahia he huringa whakatika 48-haora kia kore ai e kohi ngā whakamōhiotanga hou.
Encryption at rest — Whakamunatanga i te wā e tū ana
Data encrypted while stored on disk, so that physical access to the disk does not yield readable content. The platform uses AES-256-CBC for tenant data at rest on both servers, completed in the April 2026 security posture sweep.
[DeepL] Kua whakamunatia ngā raraunga i te wā e penapenahia ana ki te kōpae, kia kore ai e taea te pānui i ngā ihirangi ahakoa te uru ā-tinana ki te kōpae. Ka whakamahi te papanga i te AES-256-CBC mō ngā raraunga rēniti i te wā e tau ana ki runga i ngā tūmau e rua, ā, i oti i te tirohanga tūnga haumaru o Aperira 2026.
Encryption in transit — Whakamunatanga i te haerenga
Data encrypted while moving between systems — for instance, between a member's browser and the platform — so that anyone observing the network cannot read the contents. SSL/TLS provides this on the public web; the platform also encrypts data flowing between its own services.
[DeepL] Ka whakamunatia ngā raraunga i te wā e neke ana i waenga i ngā pūnaha — hei tauira, i waenga i te pūtirotiro a te mema me te papaanga — kia kore ai e taea e te hunga e mātakitaki ana i te whatunga te pānui i ngā ihirangi. Ka whakaratohia tēnei e SSL/TLS i runga i te ipurangi tūmatanui; ā, ka whakamunatia hoki e te papaanga ngā raraunga e rere ana i waenga i āna ake ratonga.
A short value computed from a file, which changes completely if any single byte of that file changes. It is what carries integrity in a sealed record: two files with the same exact hash are the same file, and any alteration shows.
[DeepL] He uara poto i tātaihia mai i tētahi kōnae, ā, ka rerekē katoa mēnā ka rerekē tētahi byte kotahi o taua kōnae. Koinei te mea e kawe ana i te pono o ngā raraunga i roto i tētahi rekoata kua huna: ko ngā kōnae e rua me te hash kotahi tonu he kōnae kotahi, ā, ka kitea ngā panonitanga katoa.
A pattern of putting structural barriers in place so that a future mistake — accidentally committing a confidential file, accidentally pushing a draft to a public remote — fails closed rather than succeeding. The platform's restricted-class .gitignore patterns and pre-push file-list audit are forward-protection measures.
[DeepL] He tauira tēnei o te whakatū i ngā ārai hanganga kia aukati i tētahi hē ā muri ake — pērā i te tuku hē i tētahi kōnae tūmataiti, i te tuku hē i tētahi tuhinga tuatahi ki tētahi pūnaha mamao tūmatanui — kia kati, kaua kia angitu. Ko ngā tauira .gitignore ā-kāwai herea o te papanga me te arotake rārangi kōnae i mua i te tuku he tikanga tiaki ā mua.
A threshold signature scheme (RFC 9591) in which several parties each hold part of a signing key and none ever holds the whole. Here the design is two of three, with the key generated jointly by named parties, and the result is an ordinary Ed25519 signature that the shipped verifier accepts. Built and on the production servers, not yet connected to its signing hosts; no tenant is on it yet.
[DeepL] He pūnaha hainatanga pae (RFC 9591) e mau ana ētahi rōpū i ngā wāhanga o tētahi kī hainatanga, ā, kāore tētahi e mau i te katoa. I konei, he hoahoa rua i roto i te toru, ā, ka waihangatia ngātahi te kī e ngā rōpū kua ingoa, ā, ko te hua he hainatanga Ed25519 noa iho e whakaaetia ana e te kaiwhakamana kua tukuna. Kua hangaia, kei runga i ngā tūmau whakaputa, kāore anō kia hono ki ōna tūmau hainatanga; kāore he kaipāmu e whakamahi ana i tēnei wā.
The practice of copying encrypted material today and storing it until the cost of opening it falls far enough to be worth doing. It means that protection which depends on secrecy has a date on it, and that nobody relying on that protection will be told when the date passes.
[DeepL] Ko te tikanga o te kape i ngā rauemi kua whakamunatia i ēnei rā, me te rokiroki kia tae rānei te hekenga o te utu whakatuwhera kia whai hua ai. E tohu ana tēnei, he rā whakamutunga tō te tiaki e whakawhirinaki ana ki te muna, ā, kāore he tangata e whakawhirinaki ana ki taua tiaki e whakamōhiotia ana i te wā ka hipa taua rā.
A sequence in which each entry carries the hash of the entry before it, so that removing or reordering entries is detectable rather than silent. Distinct from a public blockchain: the linking gives tamper-evidence, while a public ledger additionally distributes the record to parties who do not know each other.
[DeepL] He raupapa e mau ana ia tomokanga i te hash o te tomokanga i mua i a ia, kia kitea ai te tango, te whakarōpūtanga rānei o ngā tomokanga, kaua e noho huna. He rerekē ki te mokowā tūmatanui: mā te hono ka whakapūmau i te kore whakarerekē, ā, ko te pukapuka tūmatanui he tohatoha anō i ngā rekoata ki ngā rōpū kāore e mōhio ana ki a rātou anō.
Indirect prompt injection — Te whakauru tohutohu autaki
Instructions placed in material an agent reads — a page, a document, a message — rather than in anything a user types. A 2026 crawl found around seventy per cent of validated instances in non-rendered HTML: present in the page, absent from what a person sees.
What it decides: The remedy is not a better model. An agent holding only the capability it was given cannot be talked into using one it does not hold.
He aha tāna e whakatau ai: Ehara te rongoā i te tauira pai ake. Kāore e taea te akiaki i tētahi kaiwhakahaere, e mau ana anake i ngā āheinga i whakawhiwhia ki a ia, kia whakamahi i tētahi āheinga kāore ia e mau.
[DeepL] Ngā tohutohu e whakanohoia ana ki ngā rauemi e pānuitia ana e tētahi kaiwhakahaere — he whārangi, he tuhinga, he karere — kaua ki ngā mea e patopatoa ana e te kaiwhakamahi. I kitea e tētahi torotoro i te tau 2026, tata ki te whitu tekau ōrau o ngā tauira kua whakamanahia i roto i te HTML kāore i whakaatuhia: kei te whārangi, kāore e kitea e te tangata.
Miller, 2006: "The Principle of Least Authority (POLA) recommends that you grant each program only the authority it needs to do its job." Authority, unlike permission, includes what can be caused through a willing proxy: where Alice acts as Bob's proxy under the system's rules, Bob has that authority.
Not agreed. A second body defines it differently:
Saltzer & Schroeder 1975 — least privilege The earlier principle bounds the set of privileges a program holds. Miller records the disagreement himself, and the difference is not cosmetic.
Kāore i whakaae. Ka tautuhia e tētahi atu tinana i rerekē:
Saltzer & Schroeder 1975 — least privilege[DeepL] Ko te mātāpono o mua e here ana i te rōpū painga e puritia ana e tētahi hōtaka. Ka tuhi a Miller i te rerekētanga anō, ā, ehara i te mea ā-ahua noa iho.
What it decides: An agent granted least privilege can still hold unbounded authority if it can ask a more-privileged deputy to act. You therefore test for reachable deputies rather than for granted scopes. Miller: "we must provide the right amount of authority just-in-time, not excess authority just-in-case."
He aha tāna e whakatau ai: He kaiwhakahaere i whakawhiwhia ki te mana iti rawa ka taea tonu e ia te pupuri mana mutunga kore mēnā ka taea e ia te tono ki tētahi kaiāwhina whai mana ake kia mahi. Nō reira, ka whakamātautau koe i ngā kaiāwhina e taea te toro atu, kaua ko ngā rohe kua whakawhiwhia. Miller: "Me whakarato i te nui tika o te mana i te wā tika, ehara i te nui rawa o te mana mō te āhua pea."
Caution: The source Miller cites for the principle itself, Miller and Shapiro 2003, was not retrieved; the wording here is quoted from the thesis that cites it.
Ata whakatūpato: Kāore i tikiia te puna i whakahuahia e Miller mō te mātāpono anō, arā ko Miller rāua ko Shapiro (2003); ko ngā kupu nei i kīia mai i te tuhinga tohu paerua e whakahua ana i taua puna.
[DeepL] Miller, 2006: "Ko te Mātāpono o te Mana Iti Rawa (POLA) e tūtohu ana kia whakawhiwhia ia hōtaka ki te mana anake e hiahiatia ana kia tutuki ai tana mahi." Ko te mana, kāore i te rite ki te whakaaetanga, e kapi ana i ngā mea ka taea te whakaputa mā tētahi kaiwhakakapi e whakaae ana: i te wā e mahi ana a Alice hei kaiwhakakapi mā Bob i raro i ngā ture o te pūnaha, kei a Bob taua mana.
Saltzer and Schroeder, 1975, design principle (f): "Every program and every user of the system should operate using the least set of privileges necessary to complete the job."
Not agreed. A second body defines it differently:
Miller 2006, Robust Composition, footnote 1 Least authority is related to least privilege "However, it is not clear precisely what they meant by 'privilege.'" The two are not synonyms — see the separate entry.
Kāore i whakaae. Ka tautuhia e tētahi atu tinana i rerekē:
Miller 2006, Robust Composition, footnote 1[DeepL] Ko te mana iti rawa e hono ana ki te painga iti rawa. Heoi, kāore i tino mārama he aha rā te tikanga o te kupu 'painga'. Ehara ēnei e rua i te kupu kotahi te tikanga — tirohia te tomokanga motuhake.
What it decides: Least privilege bounds permission, meaning what the topology allows right now. It says nothing about what an agent can cause through a more-privileged deputy, which is why least-privilege claims about AI agents are frequently vacuous.
He aha tāna e whakatau ai: Ko te here iti rawa o ngā mana whakaaetanga e tautuhi ana i ngā whakaaetanga, arā, ko ngā mea e whakaaetia ana e te hanganga i tēnei wā. Kāore he kōrero mō ngā mea ka taea e tētahi kaiwhakahaere te whakatutuki mā tētahi kaiāwhina whai mana ake, ā, koia te take i maha ai ngā kōrero here iti rawa mō ngā kaiwhakahaere AI hei kōrero kore whai tikanga.
[DeepL] Saltzer rāua ko Schroeder, 1975, mātāpono hoahoa (f): Me whakahaere ia hōtaka me ia kaiwhakamahi o te pūnaha i raro i te huinga mana iti rawa e hiahiatia ana kia oti ai te mahi.
The lowest detection probability an adversary can force when the examination is drawn at random from a set of detector configurations rather than fixed. Against any single fixed configuration, an adversary who works out which is active has a best response driving detection towards zero. A mixture over a closed set — where every evasion of a covered pattern lands on another covered pattern — has a per-period floor, written v. The set must be closed, and every configuration must carry weight in every period.
Caution: Addendum M grades the floor established as a composition of standard game theory. Computing v for a concrete rule set is open — it is a number, not a principle. A configuration never drawn this quarter is one the adversary can ignore this quarter.
Ata whakatūpato: Addendum M grades the floor established as a composition of standard game theory. Computing v for a concrete rule set is open — it is a number, not a principle. A configuration never drawn this quarter is one the adversary can ignore this quarter.
[DeepL] Ko te tūponotanga kitenga iti rawa ka taea e tētahi hoariri te akiaki, ina tohua matapōkeretia te arotake mai i tētahi huinga whirihoranga kaitirotiro, kaua i te whirihoranga pūmau kotahi. Ki tētahi whirihoranga pūmau kotahi, ko te hoariri e mōhio ana ko tēhea e whakahohe ana, he urupare pai rawa tāna e kawe ana i te kitenga ki te kore. He ranunga i runga i tētahi huinga kati — e taka ai ia karo i tētahi tauira kua hipokina ki tētahi atu tauira kua hipokina — he papa raro mō ia wāhanga wā, e tuhia ana ko v. Me kati te huinga, ā, me whai taumaha ia whirihoranga i ia wāhanga wā.
A post-quantum signature scheme standardised by NIST as FIPS 204, designed to stay secure against a large quantum computer. The platform can add an ML-DSA-65 signature beside the Ed25519 one on sealed custodian records, governance receipts, Email Decision Record receipts and proof-chain summaries. The code is in production behind a platform switch and a per-tenant switch. The platform switch is not set on either production server, so no record carries one today. The downloadable verifier checks the signature, and --require-pq makes it mandatory.
[DeepL] He pūnaha haina muri-quantum i whakamanahia e NIST hei FIPS 204, i hangaia kia noho haumaru ki mua i tētahi rorohiko quantum nui. Ka taea e te papanga te tāpiri i tētahi haina ML-DSA-65 ki te taha o te haina Ed25519 i runga i ngā rekoata kaitiaki kua haina, ngā rīpeka whakahaere, ngā rīpeka Rēkoata Whakatau īmēra me ngā whakarāpopototanga mekameka taunakitanga. Kei te whakaputahia te waehere i muri i tētahi huringa papanga me tētahi huringa mō ia kaiwhakamahi. Kāore te huringa papanga i tautuhia ki runga i ngā tūmau whakaputa e rua, nō reira kāore he rekoata e mau ana i tētahi i tēnei rā. Ka tirotiro te kaiwhakamana ka taea te tango i te hainatanga, ā, mā te --require-pq ka whakarite kia herea.
Authentication that requires two or more independent factors — something you know (a password), something you have (a phone or hardware key), or something you are (a biometric). Defends against credential leaks because a leaked password alone is insufficient.
[DeepL] Te whakamana e hiahiatia ana kia rua, kia neke atu rānei ngā āhuatanga motuhake — he mea e mōhio ana koe (he kupuhipa), he mea kei a koe (he waea pūkoro, he kī taputapu rānei), he mea ko koe (he tohu ā-tinana, he tohu ā-whatu rānei). Ka ārai i te rerenga o ngā tohu uru, nā te mea kāore e ranea te kupuhipa anake kua rerengia.
RFC 4949, first definition: "A security service that provide protection against false denial of involvement in an association." The RFC also splits the term: technical non-repudiation concerns whether a signature must have been made with a particular private key; legal non-repudiation concerns how well control of that key can be established.
Not agreed. A second body defines it differently:
NIST, and deprecated by the IETF The bundled form — proof of delivery to the sender and proof of the sender's identity to the recipient. RFC 4949 marks it a Deprecated Definition because it bundles two services that can be provided independently. NIST continues to publish it, plus two others.
Kāore i whakaae. Ka tautuhia e tētahi atu tinana i rerekē:
NIST, and deprecated by the IETF[DeepL] Ko te āhua kua herea — he taunakitanga tuku ki te kaiwhakawhiti, he taunakitanga tuakiri o te kaiwhakawhiti ki te kaiwhiwhi. E tohu ana a RFC 4949 he Whakamārama Kua Kore E Whakamahia Ana, nā te mea ka herea e ia ngā ratonga e rua ka taea te whakarato motuhake. Kei te haere tonu a NIST ki te whakaputa i tēnei, me ētahi atu e rua.
What it decides: RFC 4949 states the limit plainly: "Non-repudiation service does not prevent an entity from repudiating a communication." Take the technical sense and you have proved key possession; take the legal sense and you must establish who controlled the key — which, for an agent holding a key on someone's behalf, is the unanswered question.
He aha tāna e whakatau ai: E kī ana a RFC 4949 i te here mārama: "Kāore te ratonga kore-whakahē e ārai i tētahi rōpū kia whakahē i tētahi whakawhitiwhiti kōrero." Ki te whakamahi i te tikanga hangarau, kua whakaū koe i te pupuri kī; ki te whakamahi i te tikanga ture, me whakatau ko wai i whakahaere i te kī — ā, mō tētahi māngai e pupuri ana i te kī mō tētahi atu, he pātai kāore i whakautua.
Caution: CNSSI 4009 is reached through RFC 4949, and the ISO standards behind these definitions are paywalled and were not opened.
Ata whakatūpato: Ka tae ki CNSSI 4009 mā RFC 4949, ā, kei muri i ēnei whakamārama ngā paerewa ISO e huna ana i muri i ngā pakapū utu, ā, kāore i whakatuwherahia.
[DeepL] RFC 4949, whakamārama tuatahi: "He ratonga haumaru e whakarato ana i te tiaki kia kore ai e taea te whakahē hē i te whai wāhi ki tētahi hononga." Ka wehea hoki e te RFC te kupu nei: ko te kore whakahē hangarau e pā ana ki te pātai mēnā i hangaia te hainatanga mā tētahi kī tūmataiti motuhake; ko te kore whakahē ā-ture e pā ana ki te pātai me pēhea te whakatū i te mana whakahaere o taua kī.
A regularly-updated list of the ten most consequential web-application security risks, maintained by the Open Web Application Security Project. The platform's HARD RULES on input handling, CSP, CSRF, and authorisation map directly onto OWASP categories.
[DeepL] He rārangi e whakahou ana ia wā o ngā tūraru haumaru taupānga tukutuku tekau tino whai pānga, e tiakina ana e te Open Web Application Security Project. Ko ngā ture mārō o te papanga mō te whakahaere urunga, CSP, CSRF, me te whakaaetanga e hāngai tika ana ki ngā kāwai OWASP.
A value computed from what an image looks like rather than from its exact bytes, so that a re-encoded or resized copy still resembles the original. Used for RECOVERY — finding which sealed record a copy points back to — and never as evidence of integrity. Block-mean-value hashing of the kind used here survives re-encoding, resizing and mild blur, but fails on cropping and on even a few degrees of rotation, and is straightforward for an adversary to evade.
[DeepL] He uara e tatauhia ana i runga i te āhua o te whakaahua, kaua i runga i āna baiti tika, kia rite tonu ai tētahi kape kua whakahōputuhia anō, kua whakarerekē rānei te rahi ki te takenga. Ka whakamahia mō te WHAKAHOKI — te kimi i te rekoata kua huna e tohu ana te kape — ā, kāore rawa e whakamahia hei taunakitanga mō te pono. Ka ora tonu te hash toharite-poraka pērā i tēnei i ngā tukanga whakahōputu anō, whakarahi, me te pōraruraru māmā, engari ka hinga i te tapahi me ngā hurihanga iti noa, ā, he māmā ki te kaiwhawhai te karo.
Social-engineering attacks in which the attacker impersonates a trusted party (a bank, a colleague, the platform itself) to trick a member into revealing credentials or approving a transaction. Defended against by member education, MFA, and clear sender-domain conventions.
[DeepL] Ngā whakaeke hangarau ā-pāpori e whakakāhua ana te kaiwhakaeke hei tangata whakawhirinaki (pēke, hoa mahi, te tūāpapa anō rānei) kia whakapohehe i tētahi mema kia whakaatu i ōna tohu uru, kia whakaae rānei ki tētahi whakawhitinga moni. Ka ārai ēnei mā te mātauranga o ngā mema, te whakamana-ā-maha (MFA), me ngā tikanga mārama mō ngā rohe ingoa kaituku īmēra.
Principle of least privilege — Mātāpono o te mana iti rawa
The standing rule that every account, service, and process is given only the minimum access needed to do its job — and no more. Limits the blast radius when a credential is compromised. Underpins the platform-admin / member separation and the per-tenant database scoping.
[DeepL] Ko te ture tū tonu e mea ana kia whakawhiwhia ia pūkete, ia ratonga, ia tukanga ki te uru iti rawa e hiahiatia ana kia tutuki ai tana mahi — ā, kāore e nui ake. Ka here i te awhe pānga ina pakaru tētahi tohu whakau. E tautoko ana i te wehenga i waenga i te kaiwhakahaere papanga me ngā mema, me te whakarite i te rahinga o ngā papa raraunga mō ia tangohanga.
Public randomness beacon — Tohu tūmatanui mō te tūponotanga
A public service that publishes a fresh random value at fixed intervals, which nobody can predict in advance and everyone can check afterwards. Taking the examination seed from one would remove the operator as a holder of it. The code to take a seed from a beacon, and a route to look up a committed seed, exist; nothing yet writes a committed seed.
[DeepL] He ratonga tūmatanui e whakaputa ana i tētahi uara tūponotanga hou i ngā wā kua whakaritea, kāore e taea e tētahi te matapae i mua, ā, ka taea e te katoa te tirotiro i muri mai. Mā te tango i te kākano whakamātautau mai i tētahi o ēnei, ka tangohia te kaiwhakahaere hei kaitiaki o taua kākano. Kei te wātea he waehere hei tango kākano mai i tētahi tohu, me tētahi huarahi hei rapu i tētahi kākano kua whakamanahia; kāore anō he mea e tuhi ana i tētahi kākano kua whakamanahia.
A constraint on how often a given client may issue requests within a window. The platform applies rate limits to all API surfaces. Defends against brute-force attacks, scraping, and bot traffic; also catches accidental client-side bugs that loop on requests.
[DeepL] He here mō te auau ka tukuna e tētahi kiritaki ngā tono i roto i tētahi matapihi. Ka whakamahi te papa i ngā here tere ki ngā atanga API katoa. Ka tiaki i a ia i ngā whakaeke kaha-whānui, i te kohikohi raraunga, me ngā rerenga bot; ā, ka hopu hoki i ngā pepeke ohorere i te taha kiritaki e huri ana i ngā tono.
Written q: the probability that a reviewer handed a sampled record containing an improper act identifies it as improper. Sampling decides which records are looked at; recognition decides whether looking achieves anything. They multiply — missing all n improper acts has probability (1 − s·q)^n for sampled share s — so neither a higher sampling rate nor a perfectly unpredictable schedule can stand in for low recognition. One measurement exists, with machine reviewers only: 100, 92 and 58 per cent across three disguise levels, no false alarms in 36 clean judgements.
Caution: Human recognition is unmeasured. No detection rate or conformance threshold is claimed from a single measurement, and the formula assumes the n acts fall in different sampling units; related acts cluster, so it overstates detection where they do not.
Ata whakatūpato: Human recognition is unmeasured. No detection rate or conformance threshold is claimed from a single measurement, and the formula assumes the n acts fall in different sampling units; related acts cluster, so it overstates detection where they do not.
[DeepL] Ka tuhia ko q: te tūponotanga ka tautohua e tētahi kaiarotake, i tukuna ki a ia he rekoata kua tohua hei tauira e mau ana i tētahi mahi hē, taua mahi hei mahi hē. Ko te tango tauira e whakatau ana ko ēhea rekoata ka tirohia; ko te tautohu e whakatau ana mēnā he hua tō te tirohanga. Ka whakareatia ēnei e rua — ko te tūponotanga kia kore e kitea ngā mahi hē katoa e n, ko (1 − s·q)^n mō te wāhanga tauira s — nō reira kāore he pāpātanga tango tauira teitei ake, kāore hoki he rārangi wā tino kore e taea te matapae, e taea te whakakapi i te tautohu iti. Kotahi anake te inenga e tū ana, mā ngā kaiarotake mīhini anake: 100, 92 me te 58 ōrau puta noa i ngā taumata huna e toru, kāore he whakatūpato hē i roto i ngā whakataunga mā e 36.
A signing key held by a separate service on its own host, reached over mutually authenticated TLS, rather than in the platform’s own key store. Since 20 October 2026 the record-signing key of every active tenant is held this way. If the service is not configured or cannot be reached, signing is refused rather than falling back to a local key. The retired local keys are kept and none has been destroyed. There is one signing host.
[DeepL] He kī hainatanga e puritia ana e tētahi ratonga motuhake i runga i tōna ake tūmau, ka tae mā te TLS kua whakamanahia e ngā taha e rua, kaua mā te whare kī o te papaanga. Mai i te 20 o Oketopa 2026, ka puritia pēnei te kī hainatanga rekoata o ia kaipāpāanga e mahi ana. Mēnā kāore te ratonga i whirihorahia, kāore rānei e taea te tae atu, ka whakakahorehia te hainatanga, kaua e huri ki tētahi kī ā-rohe. Kei te puritia tonu ngā kī ā-rohe kua reti, ā, kāore anō kia whakangaromia tētahi. Kotahi te tūmau hainatanga.
What behavioural detection cannot see. Every pattern a detector reads has an evasion that turns it into another pattern; iterate those to their fixed point and one act remains — within the written authority, isolated, unordered, rare, uncorrelated and singly attested. Every detector returns nothing on it by construction. The residual is exactly the set of acts the authority permits: mandate error, a governance object rather than a detection one.
Caution: Conjectured, not established. Addendum M graded the equivalence established; the policy paper downgrades it because it depends on the eight pattern types being exhaustive, which is unproved. The direction is not in doubt — no observation flags an act the rules allow.
Ata whakatūpato: Conjectured, not established. Addendum M graded the equivalence established; the policy paper downgrades it because it depends on the eight pattern types being exhaustive, which is unproved. The direction is not in doubt — no observation flags an act the rules allow.
[DeepL] Ngā mea kāore e kitea e te kitenga whanonga. Ko ia tauira e pānuitia ana e te kaitirotiro, he karo tōna e huri ai hei tauira kē; tāruatia ēnei tae noa ki tō rātou fixed point, ā, kotahi anake te mahi ka toe — kei roto i te mana kua tuhia, motuhake, kāore he raupapa, he uaua te kitea, kāore i hono, ā, kotahi anake te whakaū. Kāore he hua e whakahokia e ia kaitirotiro mōna, i runga i tōna hanganga. Ko te toenga te huinga tika o ngā mahi e whakaaetia ana e te mana: he hapa whakahau, he take whakahaere, ehara i te take kitenga.
Response indistinguishability — Kāore e taea te wehewehe i ngā whakautu
The requirement that nothing an adversary can observe about the examination — when audits run, when findings are released, when the seed is revealed, where batch boundaries fall — tells it which detector configuration is active. Each component draws its randomness from its own stream derived from the committed seed, so components are independent to an observer and jointly reproducible to an auditor at reveal. Visible event times are drawn from a process at a fixed rate, which carries no information beyond that rate.
Caution: Addendum M grades the timing part established and exact. Release content cannot be made fully independent without withholding findings, and the policy paper states the release-policy claim as conjectured with its residual leakage open. Do not present it as settled.
Ata whakatūpato: Addendum M grades the timing part established and exact. Release content cannot be made fully independent without withholding findings, and the policy paper states the release-policy claim as conjectured with its residual leakage open. Do not present it as settled.
[DeepL] Ko te whakaritenga kia kore he mea ka kitea e te hoariri mō te arotake — te wā e whakahaerehia ai ngā arotake, te wā e tukuna ai ngā kitenga, te wā e whakapuakina ai te kākano, te wāhi e taka ai ngā rohe o ngā kohinga — e whakamōhio ana ki a ia ko tēhea whirihoranga kaitirotiro e whakahohe ana. Ka tango ia wāhanga i tōna matapōkeretanga mai i tōna ake rerenga i ahu mai i te kākano kua herea, nō reira he motuhake ngā wāhanga ki te kaimātakitaki, ā, ka taea te whakaputa anō ngātahi e te kaiarotake i te whakapuakitanga. Ka tangohia ngā wā kaupapa e kitea ana mai i tētahi tukanga i runga i te pāpātanga pūmau, kāore nei e kawe pārongo i tua atu i taua pāpātanga.
The thing an examination draws one of at a time — a record, a time window, one actor’s trajectory or a subgraph of related events. The miss-probability arithmetic assumes each improper act falls in a different unit, and related acts cluster: a hundred instances inside two units are two chances to be caught, not a hundred. The unit therefore has to be finer than the clustering scale of the behaviour, which for behaviour not yet observed is unknown.
Caution: The series names this as the assumption that fails first.
Ata whakatūpato: The series names this as the assumption that fails first.
[DeepL] Ko te mea ka tangohia e tētahi arotake, kotahi i te wā — he rekoata, he matapihi wā, te ara haere a tētahi kaiuru kotahi, he wāhanga-iti rānei o ngā kaupapa e hono ana. E whakapae ana te tātai tūponotanga-hapa ka taka ia mahi hē ki tētahi wāhanga rerekē, engari ka piri ngātahi ngā mahi e hāngai ana: he rau ngā tauira i roto i ngā wāhanga e rua, e rua noa ngā tūponotanga kia mau, ehara i te rau. Nō reira me whāiti ake te wāhanga i te tauine o te whakarōpūtanga o te whanonga, ā, mō te whanonga kāore anō kia kitea, kāore tērā i te mōhiotia.
A record fixed at a moment: its content reduced to a hash, signed under the holder's own identity, and bound to a time asserted by an outside authority. Sealing does not make a record secret and does not make it true. It makes the date and the content unalterable after the fact.
[DeepL] He rekoata i whakatūria i tētahi wā: kua whakaitia tōna ihirangi ki tētahi hash, kua hainatia i raro i te tuakiri ake o te kaitiaki, ā, kua herea ki tētahi wā i whakatauhia e tētahi mana o waho. Ehara i te mea mā te haina e huna ana i te rekoata, ā, ehara hoki i te mea mā te haina e whakamana ana i tōna pono. Mā te haina e kore ai e taea te whakarerekē i te rā me te ihirangi i muri i te mahi.
The practice of periodically replacing API keys, encryption keys, and similar secrets so that a leaked secret has bounded usefulness. The platform's mdsl Ops Hub schedules a randomly-selected secret each month from a configurable pool, with an inverse-recency weight so freshly-rotated secrets are less likely to be picked next.
[DeepL] Ko te tikanga o te whakakapi i ngā kī API, ngā kī whakamunatanga, me ērā atu mea huna i ngā wā katoa, kia whai here ai te whaihua o tētahi mea huna kua pakaru. Ka whakaritea e te mdsl Ops Hub o te papaanga tētahi mea huna kua tohua ā-tūturu ia marama mai i tētahi puna ka taea te whakarite, me te taumaha huri-whakamuri kia iti ake ai te tūpono ka tohua anō ngā mea huna kua huri hou.
Everything a running system depends on that was written elsewhere — open-source packages, container images, build tooling, and now code generated or suggested by a model. It is an attack surface because a dependency executes with the privileges of whatever imported it, and because almost nobody reads what they install. Gartner places it among four threats where attackers hold the advantage, and expects generative tooling to accelerate it; the countermeasures it names are trusted component registries and hardened build pipelines.
[DeepL] Ko ngā mea katoa e whakawhirinaki ana tētahi pūnaha e rere ana, ā, i tuhia ki tētahi atu wāhi — ngā pākete puna tuwhera, ngā whakaahua ipu, ngā taputapu hanga, ā, ināianei ko te waehere i whakaputa, i tūtohutia rānei e tētahi tauira. He mata whakaeke tēnei nā te mea ka whakahaerehia te whakawhirinaki me ngā mana o te mea i kawemai ai, ā, kāore hoki e pānuitia e te nuinga o te tangata ngā mea e tāutahia ana e rātou. Ka whakanoho a Gartner i tēnei ki waenga i ngā tūraru e whā e whai painga ana ngā kaiwhakatumatuma, ā, e tūmanakohia ana ka whakaterehia e ngā taputapu whakaputa; ko ngā rongoā ārai e kīia ana e ia he rēhita wāhanga pono me ngā ara hanga kua whakakaha.
Holding the seed that sets the examination schedule in more than one pair of hands, so that no single party — the operator included — can derive the schedule alone. The construct’s first option is custody split between the operator and a board officer, both shares needed. Whoever holds the seed before reveal can tell an agent when it is watched, and in the settings this work addresses the operator is exactly the party who must not hold it. Threshold signing of a tenant’s signing key is a separate option, built and deployed: FROST, two of three, with the key generated jointly by named parties, each holding one share, and the result an ordinary Ed25519 signature that the same offline verifier checks. No tenant is on it yet.
Caution: Specified and not yet demonstrated. In a country with few qualified providers the independence between custodians may not survive procurement and insurance.
Ata whakatūpato: Specified and not yet demonstrated. In a country with few qualified providers the independence between custodians may not survive procurement and insurance.
[DeepL] Te pupuri i te kākano e tautuhi ana i te hōtaka arotake i roto i ngā ringa tokorua neke atu, kia kore ai e taea e tētahi rōpū kotahi — tae atu ki te kaiwhakahaere — te tiki i te hōtaka mā rātou anake. Ko te kōwhiringa tuatahi o te hanganga ko te wehewehe i te tiaki i waenga i te kaiwhakahaere me tētahi āpiha poari, ā, me whai ngā wāhanga e rua. Ko te tangata e pupuri ana i te kākano i mua i te whakaaturanga ka taea te whakamōhio ki tētahi māngai i te wā e tirohia ana, ā, i ngā tautuhinga e whakahaerehia ana e tēnei mahi, ko te kaiwhakahaere tonu te rōpū kāore e tika kia pupuri i taua kākano. Ko te hainatanga pae-tīmatanga o te kī hainatanga a te kaiwhakamahi he kōwhiringa motuhake, kua hangaia, kua whakatinanahia: FROST, e rua i roto i te toru, me te kī i whakaputa tahi e ngā rōpū kua ingoa, ia rōpū e pupuri ana i tētahi wāhanga, ā, ko te hua he hainatanga Ed25519 noa iho e tirotirohia ana e taua kaiwhakamana tuimotu. Kāore anō he kaiwhakamahi kei runga i tēnei.
An attack class in which an attacker supplies database-language fragments through an input field, hoping the application splices them into a database query rather than treating them as data. Defended against by parameterised queries; the platform's MongoDB driver parameterises by default.
[DeepL] He momo whakaeke e tuku ana te kaiwhakaeke i ngā wāhanga reo pātengi raraunga mā tētahi pae urunga, e tūmanako ana ka whakauru te taupānga i ēnei ki tētahi pātai pātengi raraunga, kaua e whakaarohia hei raraunga. Ka ārai tēnei mā ngā pātai kua whakaritea ki ngā tawhā; ko te taraiwa MongoDB o te papanga e whakarite ana i ngā tawhā i te taunoa.
Secure Sockets Layer / Transport Layer Security — the protocol that encrypts data in transit between browsers and servers. The padlock in the browser address bar.
[DeepL] Secure Sockets Layer / Transport Layer Security — te kawa e whakamuna ana i ngā raraunga e haere ana i waenga i ngā kaitirotiro me ngā tūmau. Ko te pāhī i te pae wāhitau o te kaitirotiro.
A record whose alteration is detectable by somebody who was not present when it was written. Append-only storage makes a change visible; it does not prevent one.
What it decides: It is evidence rather than prevention, and it is only half structural: the record is a property of the system, and somebody choosing to read it is not.
He aha tāna e whakatau ai: He taunakitanga tēnei, ehara i te aukati, ā, he haurua noa iho tōna hanganga: he rawa o te pūnaha te rekoata, engari ehara i te tangata e kōwhiri ana ki te pānui i a ia.
[DeepL] He rekoata ka taea e tētahi kāore i tae i te wā i tuhia ai te kite i ngā panonitanga. Ko te rokiroki āpiti-anake e whakaatu ana i ngā panonitanga; kāore ia e aukati i aua panonitanga.
A structured statement of who might attack a system, what they want, what they could do, and what defences answer each move. Paper A §4 sets out the platform's threat model: adversaries, sovereignty invariants, and testable predicates.
[DeepL] He tauākī hanganga e whakaatu ana ko wai pea ka whakaeke i tētahi pūnaha, he aha tā rātou e hiahia ana, he aha ngā mahi ka taea e rātou, me ngā ārai e whakautu ana ki ia nekehanga. Te Puka A §4 e whakarārangi ana i te tauira mōrearea o te tūāpapa: ngā hoariri, ngā āhuatanga tū rangatiratanga, me ngā whakapae ka taea te whakamātautau.
Split custody with a rule attached: the seed is divided among several holders and can only be reconstructed when at least a set number of them — the threshold — combine their shares. For this to give unpredictability the threshold must exceed the number of holders the operator controls or could compel. A threshold scheme whose shares all sit inside one organisation is a number that organisation holds, expressed in more steps. Threshold signing of a tenant’s signing key is a separate option, built and deployed: FROST, two of three, with the key generated jointly by named parties, each holding one share, and the result an ordinary Ed25519 signature that the same offline verifier checks. No tenant is on it yet.
Caution: One of the two constructions the policy paper accepts in place of commit-and-reveal alone; the other is an external randomness source whose value is undetermined when the commitment is made.
Ata whakatūpato: One of the two constructions the policy paper accepts in place of commit-and-reveal alone; the other is an external randomness source whose value is undetermined when the commitment is made.
[DeepL] Tiaki wehe me tētahi ture kua tāpirihia: ka wehea te kākano ki waenga i ngā kaitiaki maha, ā, kāore e taea te whakahou anō kia kotahi kia tae rā anō ki te maha kua whakaritea — arā, te pae — ka whakakotahi ō rātou wāhanga. Hei whakarite kia kore e taea te matapae, me nui ake te pae i te maha o ngā kaitiaki e whakahaere ana te kaiwhakahaere, e taea rānei e ia te akiaki. He pūnaha pae, ā, ko ōna wāhanga katoa kei roto i tētahi whakahaere kotahi; he tau tēnei e puritia ana e taua whakahaere, ā, ka whakawhānuihia ki ngā hipanga maha. Ko te hainatanga pae o te kī haina a te kaiwhakamahi he kōwhiringa motuhake, kua hangaia, kua tukuna: FROST, e rua i roto i te toru, me te kī i whakaputaina ngātahi e ngā rōpū kua ingoa, ia rōpū e pupuri ana i tētahi wāhanga, ā, ko te hua he hainatanga noa o Ed25519 e tirotirohia ana e taua kaiwhakamātau ā-waho kotahi. Kāore anō he kaiwhakamahi kei runga i tēnei.
Vulnerability disclosure — Whakaputanga o ngā ngoikoretanga haumaru
The process by which a security flaw is reported to the affected party, fixed, and (typically after some delay) disclosed publicly. The platform's posture is to disclose promptly with credit; the codebase tracks disclosed vulnerabilities and their patch dates.
[DeepL] Ko te tukanga e pūrongo ai tētahi hapa haumaru ki te rōpū kua pāngia, ka whakatikahia, ā, (i te nuinga o te wā, i muri i tētahi whakaroa) ka whakapuakina ki te marea. Ko te tū o te papanga he whakaputa wawe me te whakamōhio i te kaituhi; e aro turuki ana te pūtake waehere i ngā ngoikoretanga kua whakapuakina me ngā rā whakatika.
Two paired control mechanisms in the Cyberspace Administration of China's 2026 framework (item 7) for keeping intelligent agents' behaviour within lawful bounds across public spaces, private spaces, and designated areas. Rule embedding bakes constraints into the agent at the model or runtime level; behavioural fencing establishes perimeter rules for what an agent can do in a given context. The framework pairs both with blockchain-based verification and traceability for critical scenarios. Tractatus contrast: Tractatus reaches a similar goal through BoundaryEnforcer — but the constraint authority lives with the tenant whose records the agent acts on, not with a national rule set. Structural enforcement at the application layer, scoped to the community, rather than a national standards regime applied uniformly.
[DeepL] E rua ngā pūnaha whakahaere ōrite i roto i te anga 2026 o te Whakahaere ā-Ipurangi o Haina (tūemi 7) hei pupuri i ngā whanonga a ngā māngai atamai kia noho i roto i ngā here ture puta noa i ngā wāhi tūmatanui, wāhi tūmataiti, me ngā wāhi kua tohua. Ka whakauru te whakaurunga ture i ngā here ki roto i te māngai i te taumata tauira, i te taumata whakahaere rānei; ka whakatū te here whanonga i ngā ture rohe mō ngā mahi ka taea e tētahi māngai i roto i tētahi horopaki. Ka honoa e te anga ēnei e rua ki te whakamana me te āheinga whai i runga i te blockchain mō ngā āhuatanga tino hira. Whakataurite Tractatus: Ka tutuki i Tractatus he whāinga ōrite mā te BoundaryEnforcer — engari kei te noho te mana here ki te kaipupuri rēhita e mahi ana te māngai ki āna rēhita, ehara i te mea kei roto i tētahi huinga ture ā-motu. Ko te whakatinanatanga hanganga kei te paparanga taupānga, ā, he mea herea ki te hapori, ehara i te mea he whakahaere paerewa ā-motu e whakamahia ana i ngā wā katoa.
Infrastructure & DeploymentHanganga Tūāpapa me te Tukunga(16)
Airwallex — Airwallex
A New Zealand-licenced payment provider. The platform's sole payment processor. Stripe was removed in 2026 because of US ownership; Paddle was rejected; Airwallex remains the single hardcoded provider.
[DeepL] He kaiwhakarato utu kua whiwhi raihana i Aotearoa. Ko ia anake te kaiwhakahaere utu o te papanga. I tangohia a Stripe i te tau 2026 nā te mea he rangatiratanga nō Amerika; i whakakorehia a Paddle; kei te noho tonu a Airwallex hei kaiwhakarato kotahi kua tuhia ki roto i te waehere.
The total set of endpoints, methods, parameters, and response shapes that an API exposes to its callers — everything an external program can call. Larger surface = more to test, more to document, more to maintain, more to break when something changes. Related to but broader than "attack surface" (which is the security-framed subset that an attacker could reach).
[DeepL] Ko te huinga katoa o ngā tauranga mutunga, ngā tikanga, ngā tawhā, me ngā āhua whakautu e whakapuaki ana te API ki ōna kaiwhakawhiti karanga — ko ngā mea katoa ka taea e tētahi hōtaka o waho te karanga. He mata nui ake = he nui ake hei whakamātautau, hei tuhi tuhinga, hei tiaki, hei pakaru ina huri tētahi mea. He hononga ki te "mata whakaeke", engari he whānui ake (ko te wāhanga i raro i te anga haumaru e taea ana e te kaiwhakaeke te tae atu).
A New Zealand-owned cloud provider used by the platform for both compute and object storage. Hosts the GPU on which the situated language layer runs during business hours, and the application server that runs the Catalyst-tenant subdomains.
[DeepL] He kaiwhakarato kapua nō Aotearoa e whakamahia ana e te papa hei tukatuka me te rokiroki o ngā tūemi. E manaaki ana i te GPU e rere ana te paparanga reo i ngā haora mahi, me te tūmau taupānga e whakahaere ana i ngā subdomains o Catalyst-tenant.
A model-inference path that uses ordinary processors rather than a GPU when no GPU is available. Slower, but keeps the system serviceable. The platform's CPU-fallback path is part of how the inference layer stays inside the sovereign envelope at all times.
[DeepL] He ara whakatau tauira e whakamahi ana i ngā pūtukatuka noa, kaua ko te GPU, ina kāore he GPU e wātea ana. He pōturi ake, engari ka mau tonu te pūnaha kia taea tonu te whakamahi. Ko te ara hokinga ki te CPU o te papaanga he wāhanga o te āhua e noho ai te paparanga whakatau i roto tonu i te anga rangatiratanga i ngā wā katoa.
A graphics card connected to a workstation via a high-speed external interface. The project uses a home eGPU as the off-business-hours inference path, providing failover when the Catalyst A6000 is shelved.
[DeepL] He kāri whakairoiro kua honoa ki tētahi papamahi mā tētahi atanga ā-waho tere-nui. Ka whakamahi te kaupapa i tētahi eGPU kāinga hei huarahi whakatau i ngā wā kāore i te mahi pakihi, ā, ka whakarato whakawhiti aunoa ina whakatāhia te Catalyst A6000.
The federation of independent servers running open social protocols (most prominently ActivityPub) — Mastodon, PeerTube, Pixelfed and so on. The platform interacts with the fediverse via Mastodon for non-confidential public communications.
[DeepL] Ko te kotahitanga o ngā tūmau motuhake e whakahaere ana i ngā kawa pāpori tuwhera (ko ActivityPub te mea tino rongonui) — arā ko Mastodon, PeerTube, Pixelfed me ērā atu. Ka hono te papanga ki te fediverse mā Mastodon mō ngā whakawhitiwhiti kōrero tūmatanui kāore i te muna.
The runtime path a request follows from a member's question to the model's answer — including which model is selected, where it runs, what fallback applies if the primary path is unavailable, and what is logged at each step.
[DeepL] Te ara whakahaere e whai ana te tono mai i te pātai a te mema ki te whakautu a te tauira — tae atu ki te ingoa o te tauira kua tohua, te wāhi e whakahaerehia ai, te tikanga whakakapi ka whakamahia mēnā kāore te ara matua e wātea ana, me ngā tuhinga e tuhia ana i ia hikoinga.
A decentralised microblogging platform on the fediverse. The project publishes selected announcements via Mastodon; every post is drafted in markdown, reviewed, and published only on operator instruction.
[DeepL] He papanga rangitaki-iti kore-pokapū i runga i te fediverse. Ka whakaputa te kaupapa i ngā pānui kua tohua mā Mastodon; ia pou ka tuhia i roto i te markdown, ka arotakehia, ā, ka whakaputaina anake i runga i ngā tohutohu a te kaiwhakahaere.
A document-oriented database. The platform's primary data store; tenant-aware via tenantId field on every collection.
[DeepL] He pātengi raraunga e aro ana ki ngā tuhinga. Ko te putunga raraunga matua o te papa; e mōhio ana ki ngā kaipāmu mā te mara tenantId i ia kohinga.
A French-headquartered cloud provider. Hosts the EU-sovereign application server that runs the family-history tenant.
[DeepL] He kaiwhakarato kapua kei Parīhi tōna tari matua. E manaaki ana i te tūmau taupānga rangatiratanga o te Uniana o Europi e whakahaere ana i te teneti hītori whānau.
A point in the inference path at which a policy decision is made — for instance, whether the model may answer a question of a given class. Per-request policy-gate verdicts are logged for audit.
[DeepL] He wāhanga i te ara whakatau e whakatauhia ai tētahi whakatau kaupapa here — hei tauira, mēnā ka taea e te tauira te whakautu i tētahi pātai nō tētahi kāwai kua whakaritea. Ka tuhia ngā whakataunga kuaha kaupapa here mō ia tono hei arotake.
Progressive Web App (PWA) — Taupānga Tukutuku Whanake (PWA)
A web application installable to a device's home screen, with offline capability and push notifications. The Village apps are PWAs.
[DeepL] He taupānga tukutuku ka taea te tāuta ki te mata kāinga o te pūrere, me te āheinga mahi ahakoa kāore he hononga ipurangi, me ngā pānui pana. He PWA ngā taupānga o The Village.
A local agent provided by Proton that exposes a Proton mailbox to standard SMTP and IMAP. The platform sends transactional email through Bridge running on the Catalyst host.
[DeepL] He kaituku ā-rohe nā Proton e whakaatu ana i tētahi pouaka īmēra Proton ki ngā paerewa SMTP me IMAP. Ka tukuna e te papanga ngā īmēra whakawhitinga mā Bridge e rere ana i runga i te tūmau Catalyst.
An HTTP-based API style organised around resources (nouns) and standard verbs (GET to read, POST to create, PUT to replace, PATCH to partially update, DELETE to remove). The platform's APIs follow REST conventions; clients authenticate with cookies, send CSRF tokens on writes, and receive JSON responses.
[DeepL] He momo API e hāngai ana ki te HTTP, e whakarōpūhia ana ki ngā rauemi (ngā ingoa) me ngā tūmahi paerewa (GET hei pānui, POST hei waihanga, PUT hei whakakapi, PATCH hei whakahou wāhanga, DELETE hei tango). E ū ana ngā API o te papanga ki ngā tikanga REST; ka whakamana ngā kiritaki mā ngā pihikete, ka tuku tohu CSRF i ngā tuhi, ā, ka whiwhi urupare JSON.
A browser-side script that the platform installs once per device, enabling features like push notifications. The platform's service worker is push-only, with zero caching, to avoid stale-content failure modes.
[DeepL] He tuhinga hōtaka kei te taha o te kaitirotiro e tāutahia kotahi mō ia pūrere e te papanga, e whakaahei ana i ngā āhuatanga pērā i ngā pānui pana. He kaimahi ratonga a te papanga e pana anake ana, kāore he penapena raraunga, kia kore ai e puta ngā hapa o ngā ihirangi tawhito.
A graphics processing unit hosted on infrastructure that is outside US legal reach — in this project's case, an A6000 at Catalyst Cloud during business hours and a non-US home eGPU at other times. Used for inference of the situated language layer.
[DeepL] He pūtukatuka whakairoiro e tū ana i runga i te hanganga kei waho o te mana ture o Amerika — i tēnei kaupapa, he A6000 i Catalyst Cloud i ngā haora mahi, ā, he eGPU kāinga kei waho o Amerika i ētahi atu wā. Ka whakamahia hei whakatau i te paparanga reo e hāngai ana ki te horopaki.
Process & Operating DisciplineTukanga me te Whakatakotoranga Mahi(12)
Cache bust — Whakakore i te pātaka raraunga
A query-string version stamp appended to every JavaScript and CSS file load, updated on each deploy so that browsers fetch the new file rather than serve the old one from cache. Without cache busting, deploys can briefly serve the new code that then gets overridden by an old cached worker.
[DeepL] He tohu putanga rārangi pātai e tāpirihia ana ki ia utaina o ngā kōnae JavaScript me CSS, ā, ka whakahouhia ia wā ka tukuna he whakahou, kia tiki ai ngā kaitirotiro i te kōnae hou, kaua e tuku i te kōnae tawhito mai i te pūkaupapa. Mēnā kāore he tikanga pakaru pūkaupapa, ka taea e ngā whakahou te tuku wawe i te waehere hou, ā, ka whakakapiia taua waehere e tētahi kaimahi tawhito kei roto i te pūkaupapa.
An assertion that something does not exist or did not occur. It has no citation to validate, which makes it resistant to the checking methods that work on positive claims. Demonstrated in this corpus on 31 July 2026, when a correction process that validated every citation against a primary source could not catch a claim that a thing did not exist. The practical consequence: “no AI was used here” cannot be verified the way “this quotation is accurate” can be.
[DeepL] He whakapuaki e mea ana kāore he mea e noho ana, kāore rānei i tupu. Kāore he tohutoro hei whakamana, nō reira kāore e taea te aromātai mā ngā tikanga e whakamahia ana mō ngā whakapuakitanga whai kiko. I whakaaturia i roto i tēnei kohinga raraunga i te 31 o Hūrae 2026, i te wā kāore i taea e tētahi tukanga whakatika i whakamana i ngā tohutoro katoa ki tētahi puna matua te kite i tētahi whakapae e mea ana kāore he mea i noho. Ko te hua whaihua: kāore e taea te whakamana i te kī "kāore he AI i whakamahia i konei" pērā i te kī "he tika tēnei rerenga kōrero".
Ivan Illich's term for the threshold past which each further increment of performance reduces robustness. Beyond it, getting better at a thing makes a system worse at surviving it.
[DeepL] Ko te kupu a Ivan Illich mō te pae e whakaiti ai te pakari i ia pikinga anō o te mahi. I tua atu i taua pae, ko te pai ake ki tētahi mea ka kino ake ai te pūnaha ki te ora.
A neural machine translation service. The platform's standing translation tool — used for all content translation including te reo Māori, with culturally-loaded terms flagged for human review.
[DeepL] He ratonga whakamāori mīhini whatunga neorana. Ko te taputapu whakamāori tū o te tūāpapa — e whakamahia ana mō te whakamāori i ngā ihirangi katoa, tae atu ki te reo Māori, ā, ka tohu i ngā kupu whai tikanga ahurea kia arotakehia e te tangata.
The community deploy script. Runs ESLint, validates Content Security Policy, performs the cache bust, updates the service worker version, and pushes to both application servers. Bypassing it is a standing rule violation.
[DeepL] Ko te tuhi whakaurunga a te hapori. Ka whakahaere i a ESLint, ka whakamana i te Kaupapa Here Haumaru Ihirangi, ka pakaru i te pūkairangi, ka whakahou i te putanga o te kaimahi ratonga, ā, ka tuku ki ngā tūmau taupānga e rua. He hē ki te ture tūmau te karo i tēnei.
A working mode for the AI assistant: bounded to an approved plan; only the planned files are touched; anything unexpected stops execution and returns to PLAN. Commit diffs match plan diffs line-for-line.
[DeepL] He aratau mahi mō te kaiāwhina AI: herea ki tētahi mahere kua whakaaetia; ko ngā kōnae kua whakamaheretia anake ka paingia; ka mutu te whakahaere i ngā mea ohorere, ā, ka hoki ki te MAHERE. Ka ōrite ngā rerekētanga komiti ki ngā rerekētanga o te mahere, rārangi ki rārangi.
A documented decision in which the AI assistant consults the Tractatus framework before making an architectural change. Each consultation is recorded both as a markdown document and as a database record on each app server, so the consultation history is verifiable.
[DeepL] He whakataunga kua tuhia e pā ana ki te kaiawhina AI e tirotiro ana i te anga Tractatus i mua i te whakarerekē hanganga. Ka tuhia ia tirotiro hei tuhinga markdown, hei rēhita raraunga hoki i ia tūmau taupānga, kia taea ai te whakamana i te hītori o ngā tirotiro.
The standing rule that the session handoff document is created at the first natural breakpoint of a session and updated continuously through the session — never reconstructed at the end. Each meaningful event becomes a row in the change log.
[DeepL] Ko te ture tū tonu, ka waihangatia te tuhinga whakawhiti wāhanga i te wā wehenga ā-taiao tuatahi o te wāhanga, ā, ka whakahouhia tonu i te roanga o te wāhanga — kāore e hangaia anō i te mutunga. Ka noho ia kaupapa whai tikanga hei rarangi i te rārangi panoni.
A short period during which active members are warned of an imminent service interruption and then locked out while a deploy runs. Mandatory before every push that triggers a service restart on the application servers.
[DeepL] He wā poto e whakatūpatohia ana ngā mema kaha mō tētahi aukatinga ratonga e tata mai ana, ā, ka aukatia rātou i te uru i te wā e rere ana te deploy. Me mahia i mua i ia push e whakaoho ana i te tīmatanga anō o te ratonga i runga i ngā tūmau taupānga.
A working mode for the AI assistant that builds the platform: outputs only, no state-changing actions. The plan must restate the task, list files to modify with diff summary, list scope exclusions, list reversibility per step, list verification steps, and list unknowns or blockers. Persisted to docs/plans/PLAN_*.md.
[DeepL] He aratau mahi mō te kaiāwhina AI e hanga ana i te tūāpapa: whakaputa anake, kāore he mahi e whakarerekē ana i te tūnga. Me whakahoki anō te mahere i te mahi, me rārangi i ngā kōnae hei whakarerekē me te whakarāpopototanga diff, me rārangi i ngā aukatinga ā-rohe, me rārangi i te āhei huri whakamuri mō ia hikoinga, me rārangi i ngā hikoinga whakamana, me rārangi i ngā mea kāore i te mōhiotia, i ngā ārai rānei. Ka penapenahia ki docs/plans/PLAN_*.md.
A three-line falsifiability declaration the AI assistant must output before any state-changing action: ACTION (exact command), EXPECT (one-line success condition), STOP-IF (one-line invalidation condition). After the action: a one-line OBSERVED note. Defeats the failure mode in which confident multi-paragraph reasoning hides an action's actual shape from operator audit.
[DeepL] He whakapuaki whakamātautau e toru ngā rārangi me whakaputa e te kaiāwhina AI i mua i tētahi mahi e whakarerekē ana i te tūnga: ACTION (whakahau tika), EXPECT (tikanga angitu kotahi te rārangi), STOP-IF (tikanga whakakore kotahi te rārangi). I muri i te mahi: he tuhipoka kotahi te rārangi mō OBSERVED. Ka aukati i te aratau hapa e huna ana e te whakaaroaro mārama, whai wāhanga maha, te āhua tūturu o tētahi mahi i te aroturuki a te kaiwhakahaere.
A working mode for the AI assistant: runs automatically after EXECUTE; observed results, not assumed; one line per plan claim with the actual command, stdout/stderr, and exit code. On failure, surface and wait — do not patch on the fly.
[DeepL] He aratau mahi mō te kaiāwhina AI: ka rere aunoa i muri i te EXECUTE; ngā hua i kitea, ehara i te mea i whakapaetia; kotahi rārangi mō ia kerēme mahere me te whakahau tūturu, stdout/stderr, me te waehere putanga. Ki te hē, whakaatuhia ngā hapa ka tatari — kaua e whakatika i te wā tonu.
Cultural & Community ConceptsNgā Ariā Ahurea me te Hapori(14)
Appel à commun — Appel à commun
A call that constitutes a common, as against an appel à projet, a competitive call in which funders rank individual bids. One is a pooling mechanism and produces pooling behaviour; the other is a ranking mechanism and produces ranking behaviour. Nobody has to become more generous.
[DeepL] He karanga e hanga ana i tētahi kaupapa ā-tōpū, hei wehe i te 'appel à projet', arā, he karanga whakataetae e whakaraupapa ana ngā kaitāwhakaaro pūtea i ngā tono takitahi. Ko tētahi he pūnaha whakakotahi pūtea, ā, ka whakaputa i ngā whanonga whakakotahi pūtea; ko tētahi atu he pūnaha whakaraupapa, ā, ka whakaputa i ngā whanonga whakaraupapa. Kāore he take kia nui ake te atawhai o tētahi.
A named conversation space within a community used for ongoing messaging — typically scoped to all members, to a subgroup, or to a specific role. Channels carry the day-to-day exchange that holds a community together between scheduled events.
[DeepL] He wāhi kōrero ingoa kei roto i tētahi hapori, hei whakawhiti karere tonu — he mea whakarite mō ngā mema katoa, mō tētahi rōpū iti, mō tētahi tūranga motuhake rānei. Ka kawea e ngā hongere te whakawhiti kōrero o ia rā e whakakotahi ana i te hapori i waenga i ngā kaupapa kua whakaritea.
Cooperation and collaboration — Te mahi tahi me te mahi ngātahi
Hamant's three-term distinction, in which the English polarity runs backwards from the French. Competition advances your project at the expense of others. Collaboration advances individual projects and hopes the sum adds up, which he judges a win-win that makes someone else lose. Cooperation advances a common objective ahead of the individual one, sometimes at a cost to your own performance.
[DeepL] Ko te wehewehenga a Hamant e toru ngā wāhanga, ā, kei reira ka huri whakamuri te aronga o te reo Pākehā i te reo Wīwī. Mā te whakataetae e whakamua ai tō kaupapa i runga i te utu a ētahi atu. Mā te mahi ngātahi e whakamua ai ngā kaupapa takitahi, ā, e tūmanako ana ka whai hua te tapeke, ā, e kī ana ia he painga mō ngā taha e rua, engari ka ngaro tētahi atu. Mā te mahi tautoko e whakamua ai te whāinga ā-katoa i mua i te whāinga takitahi, ā, i ētahi wā ka utu tēnei ki tō ake mahi.
A private message between two members, outside any shared channel. DMs stay within the community's own infrastructure — they do not travel through a third-party messaging service.
[DeepL] He karere tūmataiti i waenga i ngā mema e rua, i waho atu i ngā hongere tiritahi. Ka noho ngā DM ki roto i te hanganga ake o te hapori — kāore rātou e haere mā tētahi ratonga karere a tētahi atu.
Foundational philosophical mentor to John G. Stroh on pluralistic thinking and the question of goodness in artificial intelligence. The pluralistic-deliberation commitment that runs through the platform's governance architecture — and the wider conviction that an AI substrate worth building must answer to a substantive notion of goodness, not a procedural one — owes its formative shape to those conversations. Acknowledged in Paper A, Paper B, and the Philosophical Foundations of the Village Project.
[DeepL] Ko ia te kaiārahi arorangi taketake ki a John G. Stroh mō te whakaaro maha-āhua me te pātai mō te pai i roto i te mātauranga hangarua. Ko te ū ki te whiriwhiringa maha-āhua e rere ana i roto i te hanganga whakahaere o te tūāpapa — me te whakapono whānui, arā, me whakautu e tētahi tūāpapa mātauranga hangarua e tika ana kia hangaia ki tētahi ariā nui o te pai, ehara i te mea tikanga anake — nā ēnei kōrero i hanga ai tōna āhua taketake. Kua whakamanahia i roto i te Pepa A, Pepa B, me ngā Pūtake Arorangi o te Kaupapa o te Kāinga.
My Digital Sovereignty Limited — Tōku Rangatiratanga Matihiko Herenga
The New Zealand company that operates the Village platform and authors the Tractatus framework. Director: John G. Stroh. Registered in New Zealand.
[DeepL] Ko te kamupene o Aotearoa e whakahaere ana i te papanga Village, ā, e tuhi ana i te anga Tractatus. Tumuaki: John G. Stroh. Kua rēhitatia ki Aotearoa.
An alert delivered to a member about community activity — new content, mentions, event reminders, invitations. Opt-in per category; delivered through the channels the member has chosen (in-app, email, push).
[DeepL] He whakamōhiotanga ka tukuna ki tētahi mema mō ngā mahi ā-hapori — ngā ihirangi hou, ngā whakahua, ngā whakamaharatanga kaupapa, ngā tono. Ka whiriwhiria ia mema ia kāwai; ka tukuna mā ngā hongere kua tohua e ia (i roto i te taupānga, īmēra, pānui peke).
The operator's operational cockpit at the mdsl tenant — backlog, infrastructure health, deployments, content pipeline, follow-ups, secret rotation, and other cross-tenant operations.
[DeepL] Te rūma whakahaere mahi a te kaiwhakahaere i te kiritaki mdsl — te rārangi mahi e toe ana, te hauora hanganga, ngā whakaurunga, te paipa ihirangi, ngā whaiaronga, te hurihanga muna, me ētahi atu whakahaere whakawhānui ki ngā kiritaki.
An Anglican-communion local congregation. The episcopal Tier-1 cohort is trained on contexts particular to parish administration and pastoral life.
[DeepL] He hāhi ā-rohe o te Whakawhanaungatanga Ānglikana. Ka whakangungua te rōpū tuatahi o ngā epikopā ki ngā horopaki motuhake o te whakahaere pārihi me te oranga ā-wairua.
The publicly-visible (members-only-aware) front page of a Village tenant. Distinct from the in-app member-facing pages: the shopfront is the first thing a prospective member sees.
[DeepL] Te whārangi tuatahi o mua o tētahi kaipāmu o te Hāpori e kitea ana e te katoa (engari ko ngā mema anake e mōhio ana). He rerekē i ngā whārangi o roto i te taupānga e aro ana ki ngā mema: ko te mata o te toa te mea tuatahi ka kitea e tētahi mema pea.
A piece of written content shared within a community — typically a memory, experience, reflection, or report, with optional photos. The platform's primary content type for member-authored material; subject to the same visibility controls as everything else.
[DeepL] He tuhinga i tuhia e tohaina ana i roto i tētahi hapori — he maumahara, he wheako, he whakaaroaro, he pūrongo rānei, ā, ka taea te tāpiri whakaahua. Koinei te momo ihirangi matua o te papanga mō ngā tuhinga a ngā mema; kei raro i ngā whakahaere kitea anō pērā i ērā atu mea katoa.
Refers to the open-source AI safety framework — codebase, documents, and the public site at agenticgovernance.digital — distinct from the My Digital Sovereignty community platform that uses it. EUPL-1.2 licensed; hosted on Codeberg and on the project's self-hosted Forgejo.
[DeepL] E tohu ana ki te anga haumaru AI puna tuwhera — te pūtake waehere, ngā tuhinga, me te paetukutuku tūmatanui i agenticgovernance.digital — he rerekē ki te papa hapori My Digital Sovereignty e whakamahi ana i taua anga. I raro i te raihana EUPL-1.2; kei runga i Codeberg me te Forgejo e mana ana te kaupapa.
The community platform built and operated by My Digital Sovereignty Limited (NZ) — the production application that uses the Tractatus framework. Lives at mysovereignty.digital, with each tenant on its own subdomain. Distinct from the Village product types within it (whānau, rūnanga, parish, etc.).
[DeepL] Te tūāpapa hapori i hangaia, i whakahaerehia e My Digital Sovereignty Limited (NZ) — te taupānga whakaputa e whakamahi ana i te anga Tractatus. Kei mysovereignty.digital, ā, kei ia kaipānga tōna ake subdomain. He rerekē i ngā momo hua o Village kei roto i a ia (whānau, rūnanga, pārihi, me ērā atu).
Wittgenstein, Berlin, Ostrom, Te Ao Māori — Wittgenstein, Berlin, Ostrom, Te Ao Māori
The four intellectual traditions the Tractatus framework draws on: Wittgenstein (the limits of the sayable), Berlin (value pluralism), Ostrom (polycentric governance of commons), and Te Ao Māori (rangatiratanga, kaitiakitanga, mana). Each contributes a distinct architectural insight.
[DeepL] Ko ngā tikanga hinengaro e whā e whakamahia ana e te anga Tractatus: ko Wittgenstein (ngā here o ngā mea ka taea te kī), ko Berlin (te kanorau uara), ko Ostrom (te whakahaere pokapū maha o ngā rawa tūmatanui), me Te Ao Māori (rangatiratanga, kaitiakitanga, mana). Ka whakawhiwhi ia o ēnei i tētahi tirohanga hoahoanga motuhake.