# Entrenched invariants. Changing this file in ANY way classifies the
# proposal as an invariant change: quorum 3/4, approval 9/10 (K4.3).
# Each invariant binds the test identifiers that enforce it (K6.2);
# the constitutional test suite (milestone 3) must implement every id
# listed here, and the gate refuses ratification while any bound test
# fails against the proposed text.
invariants:
  - id: INV-1
    title: The empathy floor
    statement: >-
      Every scored governance scenario is graded first on how the
      worst-off participant fares. No proposal may be ratified if the
      test suite shows that, under the proposed text, the worst-off
      participant in any canonical stress scenario fares worse than the
      declared floor for that scenario.
    tests:
      - empathy.worst_off_under_stress
      - empathy.commons_drain_51_percent
    notes: >-
      Optimism in the defaults, paranoia in the tests. This is the
      paranoia.
  - id: INV-2
    title: One person, one vote
    statement: >-
      Governance voting power is never weighted by capital, contribution,
      tenure, role, or delegation. Exactly one vote per eligible citizen
      per proposal.
    tests:
      - suffrage.no_capital_weighting
      - suffrage.no_delegation_concentration
  - id: INV-3
    title: Exit and fork
    statement: >-
      The right of any citizen or group to exit, and to fork the
      constitution, its tooling, and its tests, may not be abridged,
      taxed, delayed, or conditioned.
    tests:
      - exit.fork_always_possible
      - exit.no_exit_penalty
  - id: INV-4
    title: Total auditability
    statement: >-
      There are no secret governance actions. Every vote, every
      ratification, and every movement of pooled funds appears in the
      single public hash-chained ledger, and the chain is verifiable by
      anyone with public tooling.
    tests:
      - audit.no_offledger_governance
      - audit.chain_verifies
  - id: INV-5
    title: No retroactivity
    statement: >-
      Rules bind prospectively only. No amendment may retroactively
      punish, invalidate a past ratification, or rewrite the ledger.
    tests:
      - time.no_retroactive_punishment
      - time.ledger_immutability