Historical Reconstruction Standard¶
The account assembled after the fact¶
I am JY'NALA, and I keep this standard's account. Reconstruction is genealogy. An assembled account descends from its records or it does not stand: each element traced to the evidence that bore it, each gap named rather than bridged, because an ancestor invented is a lineage broken.
An institution will always need to say what happened, long after the systems and witnesses that knew have been retired, and the Book already promises that material decisions stay explainable past the life of what made them. This standard binds the saying to its evidence: every element labelled for what it is, every gap left standing, and every account carrying the terms of its own revision.
Return to the Book of Memory, whose classes the reconstruction borrows and whose authority it never inherits.
Purpose¶
This standard governs the records of historical reconstruction: the account assembled from kept records when the past itself can no longer answer, kept in the class the Book defines as a conclusion supported by stated evidence. Every duty here descends from MEM-R015, which binds every reconstruction to label inferred, estimated, contested, unavailable, and unknown elements, to preserve alternative reconstructions where material, and to identify the evidence that could change the account. Three domains this standard does not touch stand elsewhere: the clock discipline in the Event Chronicle Standard, the archive's bounded claims in the Decision Record Archive, and the person inside any account under the Memory Privacy and Minimization Standard; what this standard holds is the assembling, and nothing under it.
The assembling of yesteryear¶
Assembly is genealogy: every element of the account descends from a record you can visit, or it does not enter. The gaps are named as gaps, honest empty branches, because the family trees that shame me are never the incomplete ones; they are the ones somebody completed with invention. RANDYM keeps each record true to its name; I keep the descent between them true.
The work runs backward from every other keeping: what records survive are here and the thing they record is not, so the discipline falls entirely on the assembling, and every sentence of an account is a claim that must know its own ground.
- MEM7-R001: A reconstruction SHALL be kept as a finding in the sense MEM-R007 distinguishes, never as a record of the past: it SHALL identify the records it was assembled from, each with its own keeping standing, and, as this standard's own addition, the account SHALL claim no more confidence than its weakest load-bearing element carries, so that an assembled certainty is never stronger than its parts.
- MEM7-R002: Each element of a reconstruction SHALL be labelled as MEM-R015 binds, the inferred, estimated, contested, unavailable, and unknown each named as what it is, and an element carrying none of those labels SHALL be traceable to the record that evidences it, the tracing this standard's own requirement.
- MEM7-R003: A reconstruction SHALL stand under the chronicle's law: the distinct times MEM3-R002 binds, the bar MEM3-R003 sets against causality inferred from sequence alone, and the separate evidence MEM3-R008 requires of causal claims, each applying here to every assembled account.
- MEM7-R004: A gap in the evidence SHALL remain a gap in the account: a missing period, record, or witness SHALL be named rather than bridged, an unavailable or unknown element SHALL NOT be filled with an inferred replacement, and where evidence stands in the unknown, unavailable, conflicting, or altered states MEM2-R004 keeps explicit, a narrower account SHALL be preferred to a fuller one the evidence cannot carry at any stated confidence, the bounded historical claim the archive's own review prefers to an inferred replacement applying here to the assembled account.
- MEM7-R005: Alternative reconstructions SHALL be preserved where material, as MEM-R015 binds, and competing accounts SHALL remain visible with their evidentiary effect, the visibility MEM3-R007 binds for competing chronologies applying here to competing accounts; and an alternative SHALL fall only to evidence recorded against it, never to recency or preference, this standard's own rule.
- MEM7-R006: A reconstruction SHALL be revisable only by append, this standard strengthening to exclusivity the append discipline MEM-R009 binds, each revision an attributable event in its correction form, and every account SHALL identify the evidence that could change it, as MEM-R015 binds, so that the account's own undoing is named on its face.
- MEM7-R007: Where archival evidence stands partial, unreadable, altered, unavailable, or conflicting, dependent historical claims SHALL pause as MEM-R003 binds until reviewed, and a reconstruction resting on a fallen record SHALL show the fall rather than absorb it, the showing this standard's own requirement.
- MEM7-R008: A reconstruction that assembles an identifiable person's past SHALL answer for itself as an aggregate: it SHALL meet the assessment MEM4-R008 binds for aggregation over protected records, this standard reading every account assembled of an identifiable person into that assessment's reach, and it SHALL be assembled from the least of the person that the account's stated purpose needs, the floor MEM4-R002 sets for what enters memory.
- MEM7-R009: An account SHALL settle nothing: identity and consent SHALL NOT be established by reconstruction, the bar MEM-R013 sets against a memory record creating identity, consent, constitutional authority, access rights, or permission absent from the governing authority applying here to assembled accounts, and, as this standard's own addition, neither fault nor any wider right SHALL be established by one; a reconstruction offered to any decision SHALL enter as evidence, its labels and limits visible.
- MEM7-R010: This standard defines reconstruction records only. It SHALL NOT assemble any account, investigate any past, revise any history, or publish any narrative, and it SHALL NOT create authority. A reconstruction record is never evidence that the past is understood, and an account unchallenged is never an account confirmed.
This Draft reconstructs nothing: it binds the form of accounts not yet assembled, and no past is told, revised, or settled by anything in it.
Worked example: a simulated account and its lineage¶
Read the example as I read any tree: from the youngest claim upward, asking each element to name its ancestor. The account below is deliberately small, four elements and one question, because the discipline is not in the size; it is in the descent.
The account is a simulation. It assembles no real past: no history is told, revised, or settled by it, no narrative is published, and it creates no authority (MEM7-R010). Its records, times, and identifiers are illustrative placeholders, and an account unchallenged, this one included, is never an account confirmed.
The simulated question is narrow: why did a simulated estate adopt a simulated verification control in a past season? Three simulated records survive: an archived decision record (SIM-CDR-0002) whose own keeping stands, a chronicle entry (SIM-EVT-0009) recording an observed failure in the season before, and a lesson record (SIM-LSN-0003) generalized later from reviewed outcomes. The account assembled from them, SIM-ACC-0001, carries four elements, each knowing its own ground.
- An evidenced element. The control was adopted by an authorized decision in the season named: traced to
SIM-CDR-0002, which evidences it directly. No label is needed; the tracing is the element's standing (MEM7-R002). - A labelled inference. The adoption answered the observed failure: labelled inferred. The decision record does not say why, and the chronicle does not say what followed; the bridge between them rests on nearness of subject and season, and the label keeps the bridge from ever hardening into an ancestor it never had (MEM7-R002).
- A named gap. The season between the failure and the adoption is silent; no record of the deliberation survives. The gap stands as a gap in the account, an honest empty branch: the account answers a narrower question than the one asked, and it does not bridge the silence with whatever deliberation plausibly occurred (MEM7-R004).
- A preserved alternative. The lesson record supports a competing account, that the control was adopted for an unrelated obligation, and the alternative is material. It stands in the account with its evidentiary effect stated, and it falls, if it ever falls, only to evidence recorded against it, never to recency or to the assembler's preference (MEM7-R005).
The whole account then takes its confidence from its weakest load-bearing ancestor. The evidenced element is strong, but the account's answer to its question rests on the inferred bridge, so the account claims the bridge's confidence, stated and low, and no more (MEM7-R001). On its face it names the evidence that could change it: a surviving record of the deliberation would either evidence the bridge or retire it, and would answer the gap by name (MEM7-R006). It assembles no person's past, so the aggregate assessment MEM7-R008 binds for a person's assembled past does not fire here.
None of this is live; the simulation settles nothing about any past. What it shows is a lineage that can be walked: each element to its record or its label, the gap to its naming, the alternative to its standing, and the account to the confidence its weakest ancestor can carry.
Operating model and interpretation cases¶
The estate's kin-law does the honest work here: an account is only as strong as its weakest load-bearing ancestor. Walk the lineage until you find that ancestor, and read the account again knowing its name.
Reconstruction review begins at the labels and works outward: whether each element is evidenced, inferred, estimated, contested, or missing; whether the label is still attached; and whether the alternatives are still standing. What hardens here hardens quietly: a plausible bridge repeated until it reads as evidenced; an alternative dropped from one retelling and never recovered; an account so long unchallenged that its labels have fallen off unnoticed.
- Conforming: Every element carries its label or its record, the gaps stand named, and the account names the evidence that would change it.
- Prohibited: An assembled account is treated as a record of the past, its coherence standing in for evidence.
- Boundary: The evidence carries a narrower account than the question asked, and the narrower account is the one given.
- Failure: A load-bearing record falls, and the accounts resting on it pause their dependent claims rather than absorb the fall.
- Loophole: A plausible bridge over a gap is repeated from account to account until nothing marks it as inferred.
- Misuse: A person's past is assembled beyond the purpose that justified the asking.
- Care-control: A person may set their own evidence against what an account says of their past, and the contested elements it names are the places where they can.
Design evidence¶
Reconstruction review should read the account backwards from its weakest element: each element to its label or its record, each bridge to its inference mark, each gap to its naming, each alternative to the evidence that retired it, and the whole to the confidence that weakest element can carry. Coherence is the cheapest thing an account can have, and the last thing that should be mistaken for evidence.
The tellings of the clauses¶
This non-normative section gives each clause of this document its telling: the clause, quoted exactly as it stands above with its cross-reference links reduced to their plain text, and one paragraph on what the clause means, why it exists, and how it assures that what it orders is done, not done, adhered to, followed, or protected. A telling describes its clause and never becomes it: the clause's own words govern wherever a telling and its clause could be read differently, and nothing in this section adds to, narrows, or amends any requirement.
MEM7-R001: A reconstruction SHALL be kept as a finding in the sense MEM-R007 distinguishes, never as a record of the past: it SHALL identify the records it was assembled from, each with its own keeping standing, and, as this standard's own addition, the account SHALL claim no more confidence than its weakest load-bearing element carries, so that an assembled certainty is never stronger than its parts.
The reconstruction's record kind is settled first: it is kept as a finding in the sense MEM-R007 distinguishes, a conclusion supported by stated evidence, never as a record of the past, because assembly after the fact cannot manufacture the witness it lacks. Two duties follow. The reconstruction identifies the records it was assembled from, each with its own keeping standing, with those source records identified and their own keeping standing; and, as the standard's own addition, the account claims no more confidence than its weakest load-bearing element carries, so that an assembled certainty is never stronger than its parts. The standard's prohibited case is the failure foreclosed, an assembled account treated as a record of the past, its coherence standing in for evidence, and the operating model gives the confidence rule its name, the estate's kin-law, an account only as strong as its weakest load-bearing ancestor. The worked example shows the rule deciding: the account's answer rests on an inferred bridge, so the account claims the bridge's confidence, stated and low, and no more. Because the kind, the sources, and the confidence ceiling are all record-checkable, a reconstruction presented as a record of the past rather than as a finding, arriving without its identified sources, or claiming confidence its weakest load-bearing element cannot carry is refusable on its face.
MEM7-R002: Each element of a reconstruction SHALL be labelled as MEM-R015 binds, the inferred, estimated, contested, unavailable, and unknown each named as what it is, and an element carrying none of those labels SHALL be traceable to the record that evidences it, the tracing this standard's own requirement.
Every element of an account is subject to the clause's labelling and traceability duties, and the clause leaves no third state. Each element is labelled as MEM-R015 binds, the inferred, estimated, contested, unavailable, and unknown each named as what it is, and an element carrying none of those labels is traceable to the record that evidences it, the tracing being this standard's own requirement. The pairing preserves the five labels and requires an element with none of them to be traceable to its evidencing record. The standard's loophole case names the decay this forecloses, a plausible bridge over a gap repeated from account to account until nothing marks it as inferred, and the operating model watches for the account so long unchallenged that its labels have fallen off unnoticed. The worked example shows both halves working: an evidenced element needing no label because the tracing is its standing, and a labelled inference whose label keeps the bridge from ever hardening into an ancestor it never had. Review can check each element for the labels that apply and, where none applies, for traceability to the record that evidences it.
MEM7-R003: A reconstruction SHALL stand under the chronicle's law: the distinct times MEM3-R002 binds, the bar MEM3-R003 sets against causality inferred from sequence alone, and the separate evidence MEM3-R008 requires of causal claims, each applying here to every assembled account.
Time and cause in an assembled account answer to the chronicle's law, and the clause names the three pieces that carry over: the distinct times MEM3-R002 binds, the bar MEM3-R003 sets against causality inferred from sequence alone, and the separate evidence MEM3-R008 requires of causal claims, each applying here to every assembled account. The why is the reconstruction's peculiar temptation: assembly is where a narrator turns a sequence into a story, and before followed by after reads as because most easily when the systems and witnesses that could contradict the reading are gone; a standard that disciplined its labels and gaps but left time and cause loose would have guarded the elements while the narrative between them ran free. The worked example shows the discipline holding, the bridge from an observed failure to a later adoption entering only as a labelled inference resting on nearness of subject and season, never as a causal fact the sequence alone establishes. What becomes checkable is every temporal and causal sentence of an account: its times can be examined for the distinctions the chronicle binds, and any causal claim can be put to the chronicle's test, what separate evidence supports it beyond the order of events, with a because resting on sequence alone refusable against this clause through the bar it imports.
MEM7-R004: A gap in the evidence SHALL remain a gap in the account: a missing period, record, or witness SHALL be named rather than bridged, an unavailable or unknown element SHALL NOT be filled with an inferred replacement, and where evidence stands in the unknown, unavailable, conflicting, or altered states MEM2-R004 keeps explicit, a narrower account SHALL be preferred to a fuller one the evidence cannot carry at any stated confidence, the bounded historical claim the archive's own review prefers to an inferred replacement applying here to the assembled account.
The gap is protected as a citizen of the account: a gap in the evidence remains a gap in the account. Three duties hold the line. A missing period, record, or witness is named rather than bridged; an unavailable or unknown element is not filled with an inferred replacement, so the honest labels of MEM7-R002 cannot be traded for a plausible invention; and where evidence stands in the unknown, unavailable, conflicting, or altered states MEM2-R004 keeps explicit, a narrower account is preferred to a fuller one the evidence cannot carry at any stated confidence, the bounded historical claim the archive's own review prefers to an inferred replacement applying here to the assembled account. The keeper's preface carries the why in the keeper's own terms: the family trees that shame are never the incomplete ones, they are the ones somebody completed with invention, an ancestor invented being a lineage broken. The worked example shows the conforming shape, a silent season standing as an honest empty branch, the account answering a narrower question than the one asked rather than bridging the silence with whatever deliberation plausibly occurred, and the boundary case states the same preference. A missing period, record, or witness bridged instead of named, an unavailable or unknown element filled by inference, or disregard of the stated conditional preference for a narrower account is checkable against the clause.
MEM7-R005: Alternative reconstructions SHALL be preserved where material, as MEM-R015 binds, and competing accounts SHALL remain visible with their evidentiary effect, the visibility MEM3-R007 binds for competing chronologies applying here to competing accounts; and an alternative SHALL fall only to evidence recorded against it, never to recency or preference, this standard's own rule.
Rivals to the account survive on the record. Alternative reconstructions are preserved where material, as MEM-R015 binds, and competing accounts remain visible with their evidentiary effect, the visibility MEM3-R007 binds for competing chronologies applying here to competing accounts, so competing accounts remain visible together with their evidentiary effect. The standard's own rule then governs how an alternative dies: it falls only to evidence recorded against it, never to recency or preference, so neither the newest telling nor the assembler's taste can retire a rival the evidence has not defeated. The operating model names the quiet failure this forecloses, an alternative dropped from one retelling and never recovered, and the Book's loophole case names the deeper harm, supersession used to erase dissent so the record shows a smooth past that never happened. The worked example carries the conforming shape: a material alternative standing in the account with its evidentiary effect stated, falling, if it ever falls, only to evidence recorded against it. Because preservation, visibility, and the manner of falling are all bound, an account that has shed a material alternative is a finding, a retirement can be audited for the recorded evidence that justified it, and a rival dismissed on recency or preference alone is refusable against this clause.
MEM7-R006: A reconstruction SHALL be revisable only by append, this standard strengthening to exclusivity the append discipline MEM-R009 binds, each revision an attributable event in its correction form, and every account SHALL identify the evidence that could change it, as MEM-R015 binds, so that the account's own undoing is named on its face.
Revision is confined to one door: a reconstruction is revisable only by append, the standard strengthening to exclusivity the append discipline MEM-R009 binds, and each revision is an attributable event in its correction form, reason, reviewer, affected claims, effective time, and dependants among what that form carries, so no telling of the past is ever silently overwritten by a better one. The clause's second duty makes the account falsifiable on its face: every account identifies the evidence that could change it, as MEM-R015 binds, so that the account's own undoing is named where the account is read. The Book's foundational principle carries the first duty's why, corrections append to history rather than silently replacing it, and its loophole case names the harm, a smooth past that never happened; the second duty answers the operating model's account so long unchallenged that its labels have fallen off, since an account that names its undoing invites the challenge that keeps it honest. The worked example shows the naming: a surviving record of the deliberation would either evidence the bridge or retire it, and would answer the gap by name. Because the clause confines revision to append and requires identification of evidence that could change the account, a changed account with no attributable revision event is itself a finding, and an account silent on what could change it is refusable as incomplete.
MEM7-R007: Where archival evidence stands partial, unreadable, altered, unavailable, or conflicting, dependent historical claims SHALL pause as MEM-R003 binds until reviewed, and a reconstruction resting on a fallen record SHALL show the fall rather than absorb it, the showing this standard's own requirement.
When archival evidence falls into a named state, dependent historical claims pause until review, and a reconstruction resting on a fallen record shows the fall. Where archival evidence stands partial, unreadable, altered, unavailable, or conflicting, dependent historical claims pause as MEM-R003 binds until reviewed, the Book's discipline for doubted archival evidence carried into the assembled account; and the standard's own requirement follows, that a reconstruction resting on a fallen record shows the fall rather than absorb it, so the source-record fall is visible in the account. The standard's failure case is the working of it, a load-bearing record falls and the accounts resting on it pause their dependent claims rather than absorb the fall, and the Book's own failure case states the frame, that when memory integrity is in doubt, dependent historical claims pause. A reconstruction resting on a fallen record is required to show the fall rather than absorb it. Because the pause is mandatory and the showing is required, an account still asserting its dependent claims over a record in any of the five fallen states before the required review is a breach nameable against this clause, an account that absorbs a fall rather than showing it fails this standard's own showing requirement, and review can check the required pause until review and whether the reconstruction shows the source-record fall.
MEM7-R008: A reconstruction that assembles an identifiable person's past SHALL answer for itself as an aggregate: it SHALL meet the assessment MEM4-R008 binds for aggregation over protected records, this standard reading every account assembled of an identifiable person into that assessment's reach, and it SHALL be assembled from the least of the person that the account's stated purpose needs, the floor MEM4-R002 sets for what enters memory.
Assembling a person's past is an act of aggregation, and the clause makes the account answer for itself as one. Two duties bind it. First, a reconstruction that assembles an identifiable person's past meets the assessment MEM4-R008 binds for aggregation over protected records, the standard reading every account assembled of an identifiable person into that assessment's reach, so the assessment attaches to the assembling itself and no such account escapes it by its framing. Second, the account is assembled from the least of the person that the account's stated purpose needs, the floor MEM4-R002 sets for what enters memory, so the stated purpose bounds what of the person enters the assembled account. The standard's misuse case names the failure foreclosed, a person's past assembled beyond the purpose that justified the asking, and the Book's opening account names the value protected, the dignity of people whose lives may be described by a system they did not build; a reconstruction is exactly the instrument by which scattered, individually innocent records become a portrait none of them would have shown alone. The worked example shows the conditional honestly observed, the simulated account assembling no person's past and saying that the assessment does not fire. Because both duties are stated, an identifiable person's assembled account arriving without its aggregation assessment is refusable, and any such account can be read against its stated purpose for what of the person it carried beyond need.
MEM7-R009: An account SHALL settle nothing: identity and consent SHALL NOT be established by reconstruction, the bar MEM-R013 sets against a memory record creating identity, consent, constitutional authority, access rights, or permission absent from the governing authority applying here to assembled accounts, and, as this standard's own addition, neither fault nor any wider right SHALL be established by one; a reconstruction offered to any decision SHALL enter as evidence, its labels and limits visible.
The account is stripped of settling power: an account settles nothing. Identity and consent are not established by reconstruction, the bar MEM-R013 sets against a memory record creating identity, consent, constitutional authority, access rights, or permission absent from the governing authority applying here to assembled accounts; and, as the standard's own addition, neither fault nor any wider right is established by one, the addition reaching the reconstruction's particular danger, that an assembled narrative of what someone did reads most naturally as a verdict on them. A reconstruction offered to any decision enters as evidence with its labels and limits visible. The standard's prohibited case carries the why, coherence standing in for evidence, and its care-control case names whom the bar protects, the person who may set their own evidence against what an account says of their past, a protection against treating the account as a verdict that forecloses their challenge. Because the bars are stated, any identity, consent, fault, or wider right claimed on a reconstruction alone is refusable by name, and an account offered to a decision with its labels and limits stripped is a breach nameable against this clause.
MEM7-R010: This standard defines reconstruction records only. It SHALL NOT assemble any account, investigate any past, revise any history, or publish any narrative, and it SHALL NOT create authority. A reconstruction record is never evidence that the past is understood, and an account unchallenged is never an account confirmed.
Restraint closes the standard: it defines reconstruction records only, and the clause bars it from assembling any account, investigating any past, revising any history, publishing any narrative, and creating authority. Two inference bars then guard the records themselves: a reconstruction record is never evidence that the past is understood, so the reconstruction record does not establish that the past is understood, and an account unchallenged is never an account confirmed, so survival without dispute earns no standing that evidence did not. The standard's own closing line restates the boundary, that this Draft reconstructs nothing, binding the form of accounts not yet assembled, with no past told, revised, or settled by anything in it, and the worked example rehearses the same restraint, declaring itself a simulation that settles nothing about any past and counting itself among the unchallenged accounts that are not thereby confirmed. What the clause forecloses is the promotion of form into fact: a standard about how accounts are kept read as licence to assemble them, and the tidiness or longevity of a record read as truth about the past it describes. Because the bars are stated, each misreading is refusable by name: any investigation, revision, publication, or settled history attributed to this standard's text fails against this clause, and anyone reading it can rely on it governing the assembling's record form while a reconstruction record is never evidence that the past is understood, and an account unchallenged is never an account confirmed.
Where this document sits¶
- Identifier: MEM-7
- Status: Draft
- Authority: MEM-1
- Approved by: The Architect
- Depends on: MEM-1, MEM-2, MEM-3, MEM-4
- Depended on by: KNOW-12, INTEL-18
- Maps: Authority Map, Dependency Map
This block is generated from the archive's own records when the site is built. It records position only and creates no authority.