UP-004 · The Locus · WITNESSED CHECKABLE RUNNABLE EXECUTED STAGED

Identity Is a Seal

An artifact's identity is the hash of its canonical form, the same on every host.

Standing

WITNESSED CHECKABLE RUNNABLE EXECUTED STAGED PUBLISHED REPRODUCED

Last checked

2026-09-11 15:25:45 UTC

Source

WRL/test/conformance.mjs @ 32160fec77a1 · bytes e1f1e313eefe0001…

Limit

wrl.js seals a topology to an id and the forge agrees with it. That establishes that the seal is a function of the graph and not of the text — it does not establish that the graph captures the meaning anyone cares about.

Next rung

live_local — the seal computed in a browser on this site from source the reader supplies, rather than at build time. The build already seals 33 worlds; nothing yet exposes sealWorld to the page.

Intent

Identity is computed, not assigned. A WRL world is parsed, canonicalized and sealed to a SemanticArtifactID; every host derives the same id from the same canonical form, and a world with a different future has a different id. Nothing about the id names a file, a row or a machine.

Problem

Systems assign identity by location — an autoincrement, a path, a host-qualified name — and then have to defend the assignment with locks, registries and migrations. Two copies with the same content get different names; one thing edited in place keeps its name while its meaning changes.

Solution

Define the canonical form first. Hash it. Make the hash the only identity the artifact has; let names be labels that point at hashes. Pin fixtures whose ids must never change, and fail the build if one does.

Real-world analogy

An ISBN is assigned; a checksum is computed. Two warehouses can disagree about an ISBN. They cannot disagree about a checksum without one of them being wrong about the bytes.

Structure — on the surface

An illustration on a compute surface: loci above, carriers below. Press Play or Step; the takeaways collect as you go. Nothing here is evidence — the witness section is.

The chapter in WRL — and the chain so far

Chapter 4 of 32 — the fragment _patterns/wrl/chain/identity-is-a-seal.wrl, sealed alone by wrl.js

; IDENTITY IS A SEAL — the named rotor `identity` is the unit; the world's id is the hash of this text's
; canonical form. is_in is the entry; in the chain it is fed by the machine router of chapter 3.
[relay:is_in]{sig_in, sig_out}
[spinner:is_seal](w=16, n=8, rotor=identity){sig_in, socket}
[orb:is_id]{pose}

[is_in] --sig--> [is_seal]
[is_seal] --socket--> [is_id]

Its test bench _patterns/wrl/chain/identity-is-a-seal.bench.wrl — drives the entry for this chapter's own film; never part of the chain

; TEST BENCH — drives this chapter's entry alone; the chain replaces it with a wire from an earlier chapter
[pulser:is_bench](every 1){sig_out}
[is_bench] --sig--> [is_in]

module + bench seal to → sem-0738b04e54f4544857dcf62b4508f1bf70e9b80ad494e4a3b60efff620faa15d

Run inputs — a ScenarioV1, the forge's own document, bound to this world's id and never part of it (D3) · ScenarioDigest scen-886cdaf007dc64a8089… (the run inputs' own identity, computed by the forge)

No claims: the world runs on its clocks alone for 7 epochs.

Idle by design in this world alone: is_id — the rotor is `identity`, the unit: the pose does not move, by construction — that is what a unit is.

Reduced by the native reducer (ic32); the reference reducer reproduces every epoch's film hash (46.346s).

FILM v0.7
t=1
spinner:is_seal:policy=forge_motor_widemac_tz_sat_v1,quat4,w=16,n=8,rotor=0100,0000,0000,0000,socket=is_id,config=fixed
orb:is_id:policy=forge_motor_widemac_tz_sat_v1,quat4,w=16,n=8,pose=0100,0000,0000,0000,controller=is_seal,fault=0
pulser:is_bench:mode=periodic,p=1,phase=0,armed=0,done=0,nf=1
relay:is_in:cur_out=0,next_out=1
wire:w__is_bench__is_in:cur=1,nxt=1
wire:w__is_in__is_seal:cur=0,nxt=0
admit:policy=admit_candidate_min_firstreceipt_v1,fact_capacity_fault=0,receipt_capacity_fault=0,capacity_fault=0

FILM v0.7
t=2
spinner:is_seal:policy=forge_motor_widemac_tz_sat_v1,quat4,w=16,n=8,rotor=0100,0000,0000,0000,socket=is_id,config=fixed
orb:is_id:policy=forge_motor_widemac_tz_sat_v1,quat4,w=16,n=8,pose=0100,0000,0000,0000,controller=is_seal,fault=0
pulser:is_bench:mode=periodic,p=1,phase=0,armed=0,done=0,nf=1
relay:is_in:cur_out=1,next_out=1
wire:w__is_bench__is_in:cur=1,nxt=1
wire:w__is_in__is_seal:cur=0,nxt=1
admit:policy=admit_candidate_min_firstreceipt_v1,fact_capacity_fault=0,receipt_capacity_fault=0,capacity_fault=0

FILM v0.7
t=3
spinner:is_seal:policy=forge_motor_widemac_tz_sat_v1,quat4,w=16,n=8,rotor=0100,0000,0000,0000,socket=is_id,config=fixed
orb:is_id:policy=forge_motor_widemac_tz_sat_v1,quat4,w=16,n=8,pose=0100,0000,0000,0000,controller=is_seal,fault=0
pulser:is_bench:mode=periodic,p=1,phase=0,armed=0,done=0,nf=1
relay:is_in:cur_out=1,next_out=1
wire:w__is_bench__is_in:cur=1,nxt=1
wire:w__is_in__is_seal:cur=1,nxt=1
admit:policy=admit_candidate_min_firstreceipt_v1,fact_capacity_fault=0,receipt_capacity_fault=0,capacity_fault=0

FILM v0.7
t=4
spinner:is_seal:policy=forge_motor_widemac_tz_sat_v1,quat4,w=16,n=8,rotor=0100,0000,0000,0000,socket=is_id,config=fixed
orb:is_id:policy=forge_motor_widemac_tz_sat_v1,quat4,w=16,n=8,pose=0100,0000,0000,0000,controller=is_seal,fault=0
pulser:is_bench:mode=periodic,p=1,phase=0,armed=0,done=0,nf=1
relay:is_in:cur_out=1,next_out=1
wire:w__is_bench__is_in:cur=1,nxt=1
wire:w__is_in__is_seal:cur=1,nxt=1
admit:policy=admit_candidate_min_firstreceipt_v1,fact_capacity_fault=0,receipt_capacity_fault=0,capacity_fault=0

FILM v0.7
t=5
spinner:is_seal:policy=forge_motor_widemac_tz_sat_v1,quat4,w=16,n=8,rotor=0100,0000,0000,0000,socket=is_id,config=fixed
orb:is_id:policy=forge_motor_widemac_tz_sat_v1,quat4,w=16,n=8,pose=0100,0000,0000,0000,controller=is_seal,fault=0
pulser:is_bench:mode=periodic,p=1,phase=0,armed=0,done=0,nf=1
relay:is_in:cur_out=1,next_out=1
wire:w__is_bench__is_in:cur=1,nxt=1
wire:w__is_in__is_seal:cur=1,nxt=1
admit:policy=admit_candidate_min_firstreceipt_v1,fact_capacity_fault=0,receipt_capacity_fault=0,capacity_fault=0

FILM v0.7
t=6
spinner:is_seal:policy=forge_motor_widemac_tz_sat_v1,quat4,w=16,n=8,rotor=0100,0000,0000,0000,socket=is_id,config=fixed
orb:is_id:policy=forge_motor_widemac_tz_sat_v1,quat4,w=16,n=8,pose=0100,0000,0000,0000,controller=is_seal,fault=0
pulser:is_bench:mode=periodic,p=1,phase=0,armed=0,done=0,nf=1
relay:is_in:cur_out=1,next_out=1
wire:w__is_bench__is_in:cur=1,nxt=1
wire:w__is_in__is_seal:cur=1,nxt=1
admit:policy=admit_candidate_min_firstreceipt_v1,fact_capacity_fault=0,receipt_capacity_fault=0,capacity_fault=0

FILM v0.7
t=7
spinner:is_seal:policy=forge_motor_widemac_tz_sat_v1,quat4,w=16,n=8,rotor=0100,0000,0000,0000,socket=is_id,config=fixed
orb:is_id:policy=forge_motor_widemac_tz_sat_v1,quat4,w=16,n=8,pose=0100,0000,0000,0000,controller=is_seal,fault=0
pulser:is_bench:mode=periodic,p=1,phase=0,armed=0,done=0,nf=1
relay:is_in:cur_out=1,next_out=1
wire:w__is_bench__is_in:cur=1,nxt=1
wire:w__is_in__is_seal:cur=1,nxt=1
admit:policy=admit_candidate_min_firstreceipt_v1,fact_capacity_fault=0,receipt_capacity_fault=0,capacity_fault=0

Composes with the 3 chapters before it

The chain through this chapter — every earlier fragment, this one, and the links — seals to sem-9e5f93837672264d3a73524eafb75842490f8b1d75637bd4f485441256731148: 12 objects, 11 edges (was 9 / 8; every earlier object and edge is still present — checked, or the build refuses).

Links only the chain carries

[lc_machine] --sig--> [is_in]

The board so far: one band per Part, signal flowing left to right; relays that fan out are routers, doors are switches, pulsers are clock domains. Hover an object — or click the board and walk it with the arrow keys — for its role, its Part and what it is wired to. This board is the chain’s sealed shape; no Film drives it, so it has no state to report, and the whole board in the conclusion is where every object’s state is read epoch by epoch. Wheel zooms · drag pans · double-click fits.

Syntax — quoted from the tree at build time

The starter world that seals to sem-67e954cf… — WRL/README.md WRL/README.md:16

profile forge.world.core.v1

[pulser:p0](every 2){sig_out}
[relay:r0]{sig_in, sig_out}
[spinner:sp](w=16, n=8, rotor=quarter_turn_z, configurable){sig_in, socket}
[orb:ob]{pose}

[p0] --sig--> [r0]
[r0] --sig--> [sp]
[sp] --socket--> [ob]

The sentence that names the seal WRL/README.md:31

sem-67e954cfe3115166b49388366df3f062a46572ba2baf53380f1520f4050b60ae

Forces

Hashing needs a canonical form, and canonicalization is where the real work is: two texts with the same meaning must produce the same bytes before hashing. A seal is only as trustworthy as the canonicalizer that both sides run, which is why the conformance suite and the cross-implementation vectors exist.

Applicability

Any artifact that must be the same thing on two machines: worlds, projections, certificates, packages. Not for things whose identity is legitimately their history rather than their content.

Transformations

A refusing transformation is not one that is discouraged: it is one that, applied, makes the invariant above false. The word is the tree's, and it is the same word the join uses.

Consequences

Identity questions become recomputable. The cost is that in-place mutation is gone: to change a world is to make a new one, and continuity between the two is a separate question (Continuity Through Reconstruction).

Failure mode it answers

Location Leak — Encoding physical placement into identity when placement is not semantic.

Witness

Source identity: WRL/test/conformance.mjs · shape side-effect · evidence kind constructive_witness · rung in_tree (STACK_COMPLETION.md:73 (890 checks then; run today))

Execution identity: 2026-09-11T15:25:45.285Z on PX13 · bytes e1f1e313eefe0001… · repo HEAD 32160fec77a1

Not staged on this site: the page cannot run this witness. It runs from the command line: node test/conformance.mjs in WRL.

Counterexample

Fixture WRL/test/projection-negative-vectors.json: 15 vectors, each expected REFUSED.

What to take away

1. from the animationThree hosts, one seal; one changed relation, a different seal.
2. from the syntaxNine lines of WRL are a world, and the world is its hash.
3. from the literatureMerkle trees, Nix store paths and Unison's hashed definitions are the ancestry; credit them.
4. from the witnessThe conformance suite pins the fixture ids; this page cannot run it yet and says so.

Prior art — and what is not claimed

Novelty not claimed. Content-addressed identity is well-established prior art. The phrase 'birth key' appears once in WRL/HANDOFF_D8_PATH_B.md; the invariant's wording is the book's, and the wording is not the contribution.

Realizations in the tree

• WRL/README.md:17-27

Relations with other patterns

Meaning Is a Hash WITNESSED · Refusable Divergence WITNESSED