Skip to the content.

Proposal for Decision 11 (PRD v3 §8). Status: decide. Nothing here has been sent; the draft note at the end is for Ken’s voice and Bob’s yes.

1. Where things actually stand (from the repo, not from memory)

Four months of silence on a seat we offered is the fact to name. Either the seat is real and we make it cheap for Joe to say yes to one thing, or it is not and we should say so in an ADR.

2. The position: lock in, and be useful

The receipt is theirs; the practitioners are ours. OVERT 1.1 is the normative receipt envelope; Beacon registers the profile; the Foundation is one implementation and the community on-ramp, exactly as STANDARDS.md says. Nothing the Foundation publishes requires a Glacis account or service to verify (v1 Decision 3), and nothing Glacis sells is undercut by anything the Foundation gives away.

  Glacis AiGovOps Foundation
Role Steward of the standard; runtime vendor (Arbiter) Implementer; community; training; public-interest reference implementations
Sells Starter and pro plans; healthcare, fintech, insurance Nothing. Free credential, free tools, free corpus
Customers Funded operators who need AAL-3/4 in production Nonprofits, rural and Indigenous programmes, universities, county IT, students — and the practitioners who will later work at Glacis’s customers
Certifies Nothing itself; defines how systems are assessed and who may attest People — by performance, host-marked, ledger-minted
Standard Writes it Conforms, crosswalks, contributes gaps upstream with case numbers

The FinOps / CNCF / Linux Foundation pattern the Foundation cites in ENGAGEMENT.md is precisely this split: a specification stewarded by one party, a practitioner community and credential run by another, neither able to capture the other.

3. Why the ladder is the alignment artifact

OVERT’s four AALs are a ladder for systems. The practitioner ladder is a ladder for people with the same four rungs: a 100 can write policy as code (AAL-1 pattern), a 200 can produce process records of their own system (AAL-2), a 300 can run automated monitoring with holds and coverage (AAL-3), a 400 can verify a stranger’s evidence independently without content access (AAL-4). A practitioner pipeline shaped like the standard is the most useful thing a community can hand a standard’s steward: every 300 is a person who can bring an operator to the level where Arbiter, or Beacon, or any conformant runtime, is worth buying or running.

The two-sentence rule that keeps it honest, in OVERT’s own terms: a practitioner level describes the person’s demonstrated practice on reference scenarios; a system’s AAL is a conformance claim made by that system’s evidence and assessed as OVERT specifies. We ask Joe to read that sentence and, if he agrees, to say so in the criteria document.

4. The five asks, cheapest first

  1. Sign the profile. One decision on his side unblocks every “conformant” claim on ours. If there is a reason it has not happened — a fee, a test-vector gap, a 1.0→1.1 migration — we want to hear it and fix our side.
  2. Read the credential criteria for each level before they ship, in the Review Circle role STEWARD.md already describes. Co-signature, not approval: the Foundation owns the credential; the steward confirms the AAL mapping is faithful.
  3. Treat the level 100 page as the Beacon v1 launch artifact — the Launch Advisor seat was scoped to “get v1 out the door”; the smallest, most filmable v1 is a stranger getting a receipt in ten minutes.
  4. A joint story when the first outside party verifies a bundle offline — the standing line is OVERT is the standard, Glacis is one implementation, we are another, and here are the people who can run either.
  5. Later, and his to answer: whether the community’s 400s could constitute a verification pool under OVERT’s Independent Attestation Provider rules. Out of the ninety days by the exclusion list; asked now so the answer shapes P3.

5. What we offer without being asked

6. Sequence

Publish the profile first (his signature), then the credential criteria (our text, his reading), then talk in public. v1 Decision 3’s “publish first, then talk” holds — the profile is the publication.

7. The note — draft for Ken’s voice, not sent

Joe —

Two things since May, and one ask.

First, we have read 1.1 and we are building to it. Beacon’s gate, receipt and verifier target OVERT 1.1; the profile is aigovops-beacon.v1; the ask is the one from May — a signature on the registration. If something on our side is holding it, tell us and we will fix it this month.

Second, we are turning the community into a practitioner ladder with four rungs that map to your four AALs — someone at 100 can write policy as code, at 400 can verify a stranger’s evidence without seeing content. It is a credential for people, not systems, free to attempt, minted as a receipt anyone can verify offline. We would like you to read the criteria before they ship, in the Review Circle seat STEWARD.md offered you, and to tell us if the mapping is faithful. Not approval — reading.

The ask: sign the profile. Everything else can wait for a call.

— Ken

Rules for sending: Bob’s yes; Ken’s edit; from Ken’s Foundation address; no attachments; the PRD link only if Joe asks. Recorded as a design mark step when sent.