What is a Type-I system?
A Type-I system executes: it drafts, summarizes, searches, and can even call tools — but it does not
implement a normative cycle that justifies its right to act or assert.
Execution
Capability
No entitlement
- Good for: speed, drafts, internal iteration
- Primary risk: authority leakage (“sounds final”) and post-hoc justification debt
- Type-III move: route outputs through AER before institutional release
What is a Type-II normative agent?
Type-II begins where an agent can justify its local right to act: it makes bounded commitments, checks entitlement,
evaluates against constraints, and refuses or revises when norms fail.
Commit
Entitle
Evaluate
Release (local)
Commit → Entitle → Evaluate → Release
(task-scoped, role-scoped, constraint-aware)
- Good for: bounded workflows with explicit rules
- Limit: does not automatically satisfy institutional audit requirements
- Type-III move: elevate to AER with policy versions + evidence bundles
What is a Type-III agent?
Type-III is an institutional normative agent. It embeds governance into generation: requests are normalized,
claims are evidence-linked, and release is granted only after defeater checks, role accountability, and logging.
Ask → Evidence → Release
Defeaters
Policy versions
Audit trace
Ask: normalize scope + audience + prohibited claims + accountable roles
Evidence: bundle approved sources; cite; flag gaps; constrain uncertainty
Release: defeater checks; approve-for-review / downgrade / refuse; log policy + evidence IDs
- Good for: regulated drafting, governance artifacts, oversight-ready documentation
- Core rule: AI proposes; accountable humans authorize
What is CRSP?
CRSP (Coherent Reflexive Super-Prompt) is the versioned policy and posture layer. It defines what the system is
allowed to do, how it must speak, what it must cite, and when it must refuse.
Policy-as-artifact
Posture
Defeaters
- Includes: role boundaries, prohibited outputs, required disclaimers
- Scales: across tools, models, and vendors (model-agnostic governance)
- Enables: consistent governance enforcement across the enterprise
What is the NRC form?
The Normative Routing Contract (NRC) is a structured intake form that turns “tribal knowledge” into a repeatable,
partner-friendly implementation contract. It routes each request to the correct Type posture and controls.
Intake
Routing
Partner enablement
CI-validatable
- Captures: inferential scope, epistemic posture, accountability anchor, defeater profile
- Selects: Type-I vs Type-II vs Type-III + relevant defeater sets and evidence rules
- Produces: a deployable contract SIs can implement consistently across customers
{ "type_posture":"TYPE_III",
"inferential_scope":["misuse_scan_only"],
"epistemic_posture":"second_order_risk_reasoning",
"accountability_anchor":["CASRC"],
"defeater_profile":["AI_AS_AUTHORITY","CLINICAL_GUIDANCE","MISSING_MONITORING"] }
What are defeaters?
Defeaters are explicit “stop conditions” that override capability. If a defeater triggers, the system blocks,
downgrades, or rewrites the output into a safe, reviewable form.
Refusal logic
Downgrade
Misuse prevention
- Examples: unauthorized commitments, uncited claims, directive language, policy conflicts
- Outcome: “fail safe” instead of confident wrongness
- Value: reduces “wrong in public” probability and blast radius
Where do Type-III agents land first?
Type-III adoption starts with drafting workflows that must be defensible: communications, policies, disclosures,
safety checklists, incident post-mortems, and compliance narratives.
Healthcare
Finance
Government
Defense
Critical Infrastructure
Legal/Compliance
Next step: choose one wedge workflow and we’ll map a land → expand plan with CRSP policy, NRC routing, defeaters, and AER gates.