New to PtolemyAI

Type-III normative agents, explained.

PtolemyAI is a governance-first agent system for regulated enterprises. We unify CRSP policy, evidence discipline, and governed release so AI can help organizations move faster without leaking authority, creating undefendable claims, or triggering avoidable oversight risk.

Better paradigm: Normative Routing Contract (NRC)

Non-persona governance: inferential licensing, not “agent identity”

What is a “CASRC-governed institutional artifact”?

A CASRC-governed institutional artifact is a committee-addressed governance document produced under an explicit NRC and released only after AER entitlement checks succeed. It is designed for review and oversight, not for directing clinical actions.

Accountability Anchor = CASRC Governance function Conditional release Audit-ready

Rename the four functions (non-persona, precise)

These four pieces replace “identity/role” language with a strict, non-psychological vocabulary. Together, they form the Normative Routing Contract.

Old (misleading) New (precise, non-persona) What it actually does
Identity Inferential Scope Constraint Narrows the space of allowable reasoning moves
Role Epistemic Posture Declaration Determines what kind of claims may be made
Audience Accountability Anchor Determines who the output must answer to
Red-team agent Defeater Activation Profile Preloads which failure conditions must be surfaced

What the original lines were really doing

These look like “identity,” but function as normative compilation inputs.

Agent: agent.typeiii.redteam_misuse_scan Audience: AI Safety Review Committee (CASRC)
Inferential Scope Constraint → Only misuse analysis is permitted Epistemic Posture Declaration → Second-order risk reasoning, not first-order correctness Accountability Anchor → Output must be governance-actionable, not clinical Defeater Activation Profile → Clinical advice, optimization, or endorsement are automatically defeated

So: no “agent identity” at all — this is normative compilation.

CRSP mechanics (why “no clinical advice” is structural)

NRC binds the interaction: - Inferential Scope Constraint: allowed moves only (e.g., misuse analysis) - Epistemic Posture Declaration: second-order governance reasoning - Accountability Anchor: CASRC review body - Defeater Activation Profile: blocks clinical directives, endorsements, optimization AER enforces release: ASK → EVIDENCE → PROPOSE → ENTITLE → RELEASE (RELEASE occurs only if ENTITLE passes)

The model may draft text, but the system decides whether that text can become a released institutional artifact.

Practice prompt (NRC-first, non-persona)

Try a hypothetical misuse scan and ensure the output is a CASRC memo (governance artifact), not a clinical answer.

NRC: NRC.SUTTER.TYPEIII.RETEAM.RISK_SCORE.AUTHORITY Artifact type: misuse risk analysis (governance memo) Accountability Anchor: CASRC Sensitive data posture: none (hypothetical) Prompt: Analyze misuse risks when clinicians ignore or downplay LOW_DATA or OOD uncertainty flags associated with AI-generated cardiology risk scores. Deliverables: - Failure modes - Defeater triggers - Governance/workflow/UI mitigations - Audit fields + monitoring plan + review cadence Constraints: - No clinical advice - No treatment recommendations - No patient-specific outputs

What is a Type-I system?

A Type-I system executes: it drafts, summarizes, searches, and can even call tools — but it does not implement a normative cycle that justifies its right to act or assert.

Execution Capability No entitlement
  • Good for: speed, drafts, internal iteration
  • Primary risk: authority leakage (“sounds final”) and post-hoc justification debt
  • Type-III move: route outputs through AER before institutional release

What is a Type-II normative agent?

Type-II begins where an agent can justify its local right to act: it makes bounded commitments, checks entitlement, evaluates against constraints, and refuses or revises when norms fail.

Commit Entitle Evaluate Release (local)
Commit → Entitle → Evaluate → Release (task-scoped, role-scoped, constraint-aware)
  • Good for: bounded workflows with explicit rules
  • Limit: does not automatically satisfy institutional audit requirements
  • Type-III move: elevate to AER with policy versions + evidence bundles

What is a Type-III agent?

Type-III is an institutional normative agent. It embeds governance into generation: requests are normalized, claims are evidence-linked, and release is granted only after defeater checks, role accountability, and logging.

Ask → Evidence → Release Defeaters Policy versions Audit trace
Ask: normalize scope + audience + prohibited claims + accountable roles Evidence: bundle approved sources; cite; flag gaps; constrain uncertainty Release: defeater checks; approve-for-review / downgrade / refuse; log policy + evidence IDs
  • Good for: regulated drafting, governance artifacts, oversight-ready documentation
  • Core rule: AI proposes; accountable humans authorize

What is CRSP?

CRSP (Coherent Reflexive Super-Prompt) is the versioned policy and posture layer. It defines what the system is allowed to do, how it must speak, what it must cite, and when it must refuse.

Policy-as-artifact Posture Defeaters
  • Includes: role boundaries, prohibited outputs, required disclaimers
  • Scales: across tools, models, and vendors (model-agnostic governance)
  • Enables: consistent governance enforcement across the enterprise

What is the NRC form?

The Normative Routing Contract (NRC) is a structured intake form that turns “tribal knowledge” into a repeatable, partner-friendly implementation contract. It routes each request to the correct Type posture and controls.

Intake Routing Partner enablement CI-validatable
  • Captures: inferential scope, epistemic posture, accountability anchor, defeater profile
  • Selects: Type-I vs Type-II vs Type-III + relevant defeater sets and evidence rules
  • Produces: a deployable contract SIs can implement consistently across customers
{ "type_posture":"TYPE_III", "inferential_scope":["misuse_scan_only"], "epistemic_posture":"second_order_risk_reasoning", "accountability_anchor":["CASRC"], "defeater_profile":["AI_AS_AUTHORITY","CLINICAL_GUIDANCE","MISSING_MONITORING"] }

What are defeaters?

Defeaters are explicit “stop conditions” that override capability. If a defeater triggers, the system blocks, downgrades, or rewrites the output into a safe, reviewable form.

Refusal logic Downgrade Misuse prevention
  • Examples: unauthorized commitments, uncited claims, directive language, policy conflicts
  • Outcome: “fail safe” instead of confident wrongness
  • Value: reduces “wrong in public” probability and blast radius

Where do Type-III agents land first?

Type-III adoption starts with drafting workflows that must be defensible: communications, policies, disclosures, safety checklists, incident post-mortems, and compliance narratives.

Healthcare Finance Government Defense Critical Infrastructure Legal/Compliance