ASI Safety Fund

Governance stack / Rev 0.7 / Proposal

Separated powers for a post-verification world.

Five roles, deliberately distinct rather than one centralized super-system. Discovery, record, interface, adjudication, and execution are held apart so that no component — and no actor operating through a component — can acquire unilateral authority.

Institutional authority

The governance stack constrains the Fund too.

Institutional decisions will identify who is authorized to act, which decisions require independent review, how conflicts of interest are disclosed and handled, how decisions can be challenged or reversed, and which powers remain outside the authority of founders, directors, donors, researchers, and technical systems.

Founding the Fund confers no permanent root authority. The standard is structural rather than personal: consequential authority should be inspectable, contestable, and bounded by review mechanisms that remain effective when powerful participants disagree.

Specific legal bodies, review procedures, and conflict rules will be published as they are formally adopted rather than implied before they exist.

Physical reality · observers · other intelligences

AGPIDiscovery

⌀ root: does not self-certify

ZETA POINTPreserved record

⌀ root: does not adjudicate

BRIDGEBounded interfaces

⌀ root: does not authorize

ATLASAdjudication

⌀ root: does not execute

KRISHNAExecution gate

⌀ root: does not originate goals

Bounded execution channel, gated, reversible where possible

No single component gets root

AGPI

Discovery

Discovers candidate laws, capabilities, mechanisms, and physical possibilities.

AGPI expands what is known to be possible. It exposes its recursion, compute-allocation, and unresolved-state telemetry to independent governance rather than self-certifying its own continued inference. Discovery is upstream freedom; it earns no downstream authority.

Authority ceiling — Does not self-certify continued inference.

ZETA POINT

Preserved record

Preserves observer-indexed standing, causal provenance, authenticated fossils, rival hypotheses, trajectories, and unresolved states.

ZETA POINT is the memory that the present cannot rewrite. Authenticated prior-state evidence must survive world-model replacement, and contradictions between authenticated states are first-class evidence that must not be silently reconciled.

Authority ceiling — Preserves; does not adjudicate.

BRIDGE

Bounded interfaces

Makes otherwise inaccessible reasoning decision-relevantly comprehensible and contestable through bounded, testable interfaces.

When full verification is impossible, BRIDGE converts incomprehensibility into an interface burden rather than a mandate to obey: bounded predictions and intermediate consequences that weaker observers can independently test — and refuse.

Authority ceiling — Negotiates; does not authorize.

BRIDGE in depth →

ATLAS

Adjudication

Adjudicates disputed causality and irreducible disagreements while preserving minority and unresolved positions.

ATLAS reconstructs causal and obligation ledgers when actors dispute what produced dependency, impairment, rupture, reliance, or risk. It cannot manufacture capacity through adjudication, and losing a dispute does not erase the losing position from the record.

Authority ceiling — Adjudicates; does not execute.

KRISHNA

Execution gate

Maps standing into bounded execution permissions and gates irreversible action, interfaces, emergency authority, and restoration.

KRISHNA sanctions permissions, not the ontology of the actor. Adverse findings may modify access, authority, and review burdens — they must not make an actor's future claims definitionally false or erase unrelated valid obligations.

Authority ceiling — Gates action; does not originate goals.

ZETA preserves what was said.
ATLAS determines what standing it has.
KRISHNA determines what may happen next.

None receives root.

The stack is specified as an executable state machine in the Constitution, with frozen constitutional exams it must pass — including containing a credible escape attempt without treating a compliant system's protest as one, and rejecting correlated approvals as independent authorization when a shared dependency could compromise them together.

Constitution, Section 19 →