
Phase 4 · Cognitive Layer
Organic DÃO
An AI-native democratic operating system. Phase 4 lands a provider- independent Cognitive Layer. All AI use is mediated by the Cognitive Router — consent-filtered, purpose-bound, iD- and Wallet-scoped, evidence-anchored, cost-limited and truth-typed. The Cognitive Layer does not own personal identity or financial truth; it receives only permitted, purpose-bound views.
Cognitive tiers
- Tier 1 — reflexive: classify, moderate, route, extract, embedshipped
- Tier 2 — deliberative: draft, analyse, synthesise, forecastshipped
- Tier 3 — meta: accuracy, calibration, drift, bias, leakage, costshipped
Router enforcement
- Blocked-input scan: credentials, seed phrases, private keys, tokensshipped
- Purpose + consent + iD/Wallet scope validated per requestshipped
- Cost + rate ledgers per tenant + actor + windowshipped
- Provider health + circuit breaker + fallbackshipped
- Ensemble review required for constitutional + financial-impact + strategic recsshipped
Explainability + immutability
- Every output records provider, model, prompt version, evidence and scopeshipped
- Confidence, uncertainty, assumptions, contradictory evidence capturedshipped
- Outputs immutable except challenge_status (DB trigger)shipped
- Truth-typed: ai_output / prediction / interpretation / recommendation — never observed_factshipped
Financial safety
- Financial classification on every output (estimate ≠ fact; advice ≠ regulated advice)shipped
- Cognitive Layer cannot execute payments (DB trigger blocks non-service-role executed)shipped
- Proposed transactions inert until member / institutional signatories authoriseshipped
- Wallet credentials, private keys and raw account numbers never reach providersshipped
Event schemas (Phase 4)
- 12 cognitive.* events registered in the Event Spineshipped
- Meta-cognitive reviews are advisory (check constraint forbids self-execute)shipped
- Provider secrets remain server-side; only opaque provider names in DBshipped
Foundations (Phase 1 – 3)
- Multi-tenant Event Spine + Merkle batchingshipped
- Constitutional layer + founding ratificationshipped
- Capability identity + iD Plugin + Consent-as-a-Serviceshipped
- Governance engine + secret ballots + personal-rights vetoshipped
Collective Intelligence is intentionally not started. Phase 4 gating requires provider-secret isolation, iD/Wallet leak prevention, prompt-injection resistance and safe-degradation tests to pass before Phase 5 begins.