Owner authority
Governance
The owner remains the source of production authority. Nucleus may propose, plan, inspect, and simulate; protected effects require the right authority and evidence.
Authority lifecycle
Runtime authority advances through candidate, shadow, active, draining, and retired modes with a monotonic epoch. A stale authority cannot reuse an earlier approval or execute across a cutover boundary.
Mission lifecycle
Plans, tool calls, decisions, effects, compensation, verification, and receipts stay attached to one canonical mission identity. STOP, revoke, timeout, and user-input states must remain explicit.
Community governance
Skill ratings, moderation, disputes, quality votes, incentives, and rewards require authenticated identities, anti-abuse controls, signed policies, appeal handling, and reproducible evidence before they become authoritative.