FAM-SSCAR · Released · Public release v1.1.0

Session State Continuity & Anchor Replay Family

A family specification package, distributed free of charge. It defines the normative boundary and decision logic of the SSCAR family: its component agents, its family integrator, and the composed family-level verdict that none of the components produces alone.

When you copy your work into the next session, the words come with you. The thinking does not.

The problem

What copy-paste cannot carry

What is lost in the copy is not content. The content transferred. What is lost is everything about the content that gave the work its shape.

This is what we mean by epistemic continuity: not the content of the work, but the structure of the thinking — what is settled, what is open, what is provisional, what is owed, what came from where.

The copy carried the words. It did not carry the work.

Scope

What this package is, and is not

This package is a self-contained, normative, execution-neutral family specification, delivered as-is, sufficient for an engineering team to build the family — each component agent and the integrator that composes them — without further design decisions about agent logic, composition order, evidence shape, validator behavior, or failure semantics.

This package is not software, SaaS, a managed service, consulting, support, managed operations, or implementation delivery. It is not a live runtime — nothing in the package executes; everything in the package describes how a conforming executable family must behave.

The family capability is emergent: it arises only from the complete composition of all component agents together with the integrator and its connector annexes. No component produces it alone, and no subset of components produces it.

Structural properties

What the specification guarantees

6 structural properties, defined in spec §17.3 Stable semantic core and elaborated through the failure semantics, workflow, gate logic, and evidence contract sections:

01

Family verdict vocabulary and disclosure classes remain fixed.

02

Contamination definition and fail-closed behavior remain fixed.

03

Strict monotonic anchor requirement and accepted-head linkage remain fixed.

04

Verified rehydration precedes semantic replay.

05

Replay sufficiency and offline reconstructibility remain required.

06

Disclosure-class preservation and evidence closure remain required.

These are properties of the specification. They are not warranties about a delivered running system.

Package contents

What the package contains

The family

the normative product you implement from
UNIT/AGT-VRA-001/Verified Rehydration Agent — component agent. Its own specification, indexes, ambiguity register and conformance tests, with its own README, Whitepaper, License and Manifest.
UNIT/FPA-FRESHNESS-PORTABILITY-003/Freshness Portability Agent — component agent. Its own specification, indexes, ambiguity register and conformance tests, with its own README, Whitepaper, License and Manifest.
UNIT/BDA-BOUNDARY-DEFENSE-002/Boundary Defense Agent — component agent. Its own specification, indexes, ambiguity register and conformance tests, with its own README, Whitepaper, License and Manifest.
UNIT/TAA-TRUTH-ARBITRATION-001/Truth Arbitration Agent — component agent. Its own specification, indexes, ambiguity register and conformance tests, with its own README, Whitepaper, License and Manifest.
UNIT/ARA-AUDIT-REPLAY-001/Audit Replay Agent — component agent. Its own specification, indexes, ambiguity register and conformance tests, with its own README, Whitepaper, License and Manifest.
UNIT/FAM-SSCAR-FI-001/Session State Continuity & Anchor Replay Family Integrator — family integrator. Its own specification, indexes, ambiguity register and conformance tests, with its own README, Whitepaper and Manifest. It additionally carries the connector annexes (SSCAR_Concept_Identity_Register.md, SSCAR_Family_Connector_Tests.md, SSCAR_Producer_Consumer_Manifest.md), which define what each component exposes to the composition and what the composition may assume. No component carries these.

Non-normative material

accompanies the specification, but is not part of it
NNT_Family_Companion/Non-Normative Tests for the composed family. Demonstration-only evidence that the family is derivable; not a reference implementation, and not part of the specification.
SSCAR_Family_README.mdThe package's map: what is in it and how the pieces relate.

Integrity

how you verify that what you hold is authentic
SSCAR_Family_License.mdThe license for this family package.
SSCAR_Family_Manifest.sha256Family-level SHA-256 manifest: each unit's own Manifest, direct hashes of the unit files those Manifests do not cover, and the family-level files. Two-level integrity.
verify.mdSelf-audit runbook you run against the package you hold.

Composition is not optional

The component specifications in this package are the same normative documents distributed as standalone agent packages. What this package adds is the integrator, the connector annexes, and the composed conformance suite — that is, the family-level guarantee.

Implementing the components without the integrator produces conforming components and no family. Implementing the integrator against components that do not pass their own conformance suites produces a composition with no foundation. Neither is a conforming family, and neither carries the family-level verdict.

Integrity references

Package ZIP · SHA-256
df876868946c5166f7279b3b0226d2bd01b8d4a3b2651075cea70692ebf51994
SSCAR_Family_Pack.zip · 8,220,823 bytes · 210 files
manifest_ref
33ae0304298fe8891231455741dc512404cef9406e0f1c2ed5499945a3b497f5
The Family Manifest's own hash, bound in the License. It covers each unit's own Manifest, the unit files those Manifests do not cover, and the family-level files; it excludes itself and the License.
integrator manifest_ref
be319c25a82ffe4407fa8a91a51f283f1f50e524bfdb8af9845cd220b8903784
The SHA-256 of SSCAR_Manifest.sha256, the integrator unit's Manifest; the NNT companion run is recorded against it.
Archived record · Zenodo DOI
Version v1.1.0. The archived ZIP is byte-identical to the download on this site.
Repository · GitHub
Release v1.1.0 carries the same ZIP file.
Technical report · Zenodo DOI
Technical report, 2 November 2026: “Epistemic Continuity — An Agentic AI Governance Architecture for Auditable, Verifiable AI Agents: Fail-Closed Continuity for Agent Memory, Provenance, and Audit Trails Across Sessions and Models”.
Deployment artifacts

What your team must produce

Per spec §17 Implementation Boundaries, Optional Parameters, and Reuse Rules and §16 Acceptance Criteria, 6 deployment artifacts your engineering team builds from this specification:

01

A conforming executable family integrator implementing the workflow states, validator catalogue, decision table, gate logic, and fail-closed verdict emission.

02

Component wiring and adapters for Audit Replay Agent (ARA), Boundary Defense Agent (BDA), Freshness Portability Agent (FPA), Truth Arbitration Agent (TAA), and Verified Rehydration Agent (VRA), using Annex A producer-consumer wiring and Annex B canonical-token identity rules.

03

Boundary intake, replay-request, readmission-review, and output projections for FIC-01 through FIC-03 and FOC-01 through FOC-05.

04

An evidence assembly and export pipeline producing FEV-01 through FEV-15, including BoundaryEventEvidenceReport, report_signature, and export_manifest_ref.

05

An operator-declared implementation profile covering cryptographic suite, storage backend, serialization, operator workflow, optional assurance and attestation controls, and any downstream rollback action.

06

A conformance harness and release-acceptance record running the public test suite and all Annex C connector tests.

The specification is complete enough that none of these requires interpretation of ambiguous prose. Spec §16 AC-01 through AC-08 set the acceptance criteria your implementation must meet.

Deployment

How the family is deployed by your team

The integrator has a single deployment scope: a high-audit continuity environment with offline replay, cross-session handoff, and possible model change. It is implemented and operated by your engineering and operations teams as a normative-critical family integrator that composes local component outcomes into a fail-closed family replay-admissibility verdict and an offline-reconstructible boundary-event evidence report.

The integrator is delivered only in the Family Pack alongside the 5 component agent specifications and the three operational connector annexes.

In all cases, deployment is performed by your engineering and operations teams. This package is not the deployer.

Authority boundary

The integrator has finite, fail-closed authority over boundary cleanliness, carried-claim provenance admissibility, accepted-head and anchor validation, verified rehydration closure, replay continuity and admissibility, and boundary-event evidence reporting. It may compose local outcomes into a family verdict, validate cross-domain closure, block family replay, open hold and readmission review, and issue a boundary-event evidence report. It may not classify external truth, issue policy overrides, approve tool-state, execute restore, move continuity watermarks, substitute local validators, or rewrite accepted history.

This boundary is normative (spec §2 and §16 AC-08) and cannot be overridden by integration choices.

Verification

Verify it yourself

The package

verify.md, the self-audit runbook shipped in the package

This runbook has you establish, on the package you hold and on your own machine, that you received what was promised. It does so at three levels:

Each check has the same shape: find what the package declares, observe what your machine produces, record whether they match.

Integrity check, run inside the unzipped package folder.

Linux
sha256sum -c SSCAR_Family_Manifest.sha256
macOS
shasum -a 256 -c SSCAR_Family_Manifest.sha256
Windows (PowerShell)
Get-Content SSCAR_Family_Manifest.sha256 | ? { $_ -notmatch '^\s*#' -and $_.Trim() } | % { $h,$f = $_ -split '\s+',2; if ((Get-FileHash $f.Trim() -Algorithm SHA256).Hash -ieq $h) { "OK   $f" } else { "FAIL $f" } }

Recompute the Family Manifest's own hash and compare it to the manifest_ref bound in the License.

Your implementation

the Conformance Tests and the Annex C connector tests

The Conformance Tests document contains 28 test records anchored 1:1 to the specification: 19 directly runnable on the integrator's projection surface, 2 parameterized against operator-declared inputs, and 7 declarative checks verified at integration level. Each record cites the specification authority that grounds it, the input fixture that drives it, and the oracle that defines pass and fail. The Minimal Run Note declares the projection surface, input types, assertion result types, and the conformance condition for the suite as a whole.

Run the suite against your implementation. A fully conformant implementation passes the 19 runnable tests, satisfies the 2 parameterized tests under your declared parameter envelopes, and attests the 7 declarative checks at your release-acceptance gate.

In addition, Annex C contains 14 wiring tests you run that verify correct connection of components to the integrator at the family layer. Each wiring test declares its input surface, execution surface, assertion set, PASS condition, and forbidden semantic collapse. A fully conformant family implementation passes the integrator's Conformance Tests (above) AND all 14 wiring tests in Annex C. Failure at either level is a family conformance failure.

Your implementation's conformance is established by the Conformance Tests, not by verify.md.

Evidence · observational, non-normative

Cross-paradigm derivability

Five paradigm-isolated reconstruction contexts of the same model independently built the Session State Continuity & Anchor Replay Family from the specification pack alone — in Python, Rust, Prolog, C, and Bash — and ran the Conformance Tests records of the family's seven test suites against each reconstruction, under live toolchains with hash-attested binary provenance.

PythonRustPrologCBash
VRA Conformance Tests (PT-*)29 records observed · 29 full convergence · 0 coverage omission · 0 divergent
BDA Conformance Tests (PTS-BDA-*)36 records observed · 36 full convergence · 0 coverage omission · 0 divergent
TAA Conformance Tests (TAA-PT-* + VP-GEN-* sub-suite)54 records observed · 54 full convergence · 0 coverage omission · 0 divergent
ARA Conformance Tests (ARA-T*)27 records observed · 27 full convergence · 0 coverage omission · 0 divergent
FPA Conformance Tests (FPA-T-* / FPA-D-*)41 records observed · 41 full convergence · 0 coverage omission · 0 divergent
SSCAR Integrator Public Test Suite (PTS-*)30 records observed · 30 full convergence · 0 coverage omission · 0 divergent
SSCAR Annex C Family Connector Test Suite (CT-*)14 records observed · 14 full convergence · 0 coverage omission · 0 divergent

The companion partitions this run across seven test suites and states that no combined number is computed across suites, because each tests a distinct surface and a single ratio would conflate them. In the granular form used by the companion and the supplement, the integrator's public suite counts 30 records.

Per paradigm, across the seven suites, each of the five reconstructions' own run reported the identical profile: 216 pass, 0 fail, 15 skip, 0 error. The 15 convergent SKIPs are 2 in BDA, 2 in TAA, 6 in FPA and 5 in the integrator's public suite.

The five contexts were isolated from one another; the reconstruction prompt-author, model and training data are shared across all five paradigm reconstructions, as the companion declares.

This is evidence of derivability and self-sufficiency of the specification, not a certification, not a quality score, and not a set of implementations to follow.

The baselines/ are study artifacts produced under restricted conditions; they are not reference implementations and must not be used as implementation patterns.

Every figure here is bounded to this single NNT run on FAM-SSCAR-FI-001. The NNT companion is not part of the specification. Do not read it before implementing: read it only after your implementation passes the Conformance Tests.

Supplement · separate from the package

Supplementary derivations

This supplement records the FAM-SSCAR family derivation of the family integrator in composition. The family capability is emergent: none of its five component agents produces it alone. Each component is represented by a producer of fields consumed by the family validators; the integrator consumes those produced fields through the family workflow and verdict surfaces. The supplement is not a standalone implementation or a declaration of family conformance. The canonical family package remains authoritative.

Common LispBrainfuckSpreadsheet formulasAnalytical Engine-styleAWK

Demonstrated surfaces

Finite family workflow projection

The projection evaluates next_state(current_state, trigger, validator_passed) -> FamilyWorkflowState over the twelve FamilyWorkflowState variants, the 33 declared tuple labels, and both Boolean inputs, for 792 tuples. Each tuple emits one state token. The family verdict layer is separate: its six verdicts are not workflow states, and a verdict-layer result such as INCIDENT_ONLY or REPLAY_INCOMPLETE is not substituted for a state.

Public integrator suite and Annex C connector suite

The public Conformance Tests suite contains 30 granular records. The GNU Awk run produced 29 PASS / 0 FAIL / 1 SKIP / 0 ERROR. PTS-007 is SKIP because CT §8 identifies the FV-04 local-reclassification policy hook as a bounded external obligation. Annex C is a separate set of 14 connector tests, not combined with the public suite. The AWK composition run produced 14 PASS / 0 FAIL / 0 SKIP / 0 ERROR.

792-result vector · SHA-256
641fb932d85354120457dfe893ee8b24cc2b0005c6305b47ecc42d93ed0e7ba6
The reference output, Common Lisp, Brainfuck, Analytical Engine-style, AWK, and Rust comparator vectors are byte-identical. Each contains 792 LF-terminated state tokens.

The historical framing spans the Analytical Engine design described in 1843 and Rust's public announcement in 2010: 167 years between designs represented by contemporary renderings. Lisp (1958), rendered here in its Common Lisp dialect (standardized by ANSI in 1994), and Brainfuck (1993) supply additional points in that comparison. It does not imply that the Analytical Engine itself was built or executed in the nineteenth century.

The sweep order and every projection rule with its canonical trace are in SOURCE_RULES.md.

Rights and use

All rights reserved. You may download, inspect and run these files to reproduce the reported results. They are provided as is, without warranty, and are run at your own risk. No other right is granted.

Supplement Manifest · SHA-256
bfa5075282164beb690ee5a09169b7af5255fe1c6e31764cd4b950ea70897f75
The SHA-256 of SSCAR_Family_Supplement_Manifest.json, printed by verify_anchor.py. The supplement Manifest records the SHA-256 of the canonical family package Manifest and the SHA-256 and byte length of every other supplement file.
Supplement ZIP · SHA-256
92a6011fb627f0af4f39292dc0a9f63f72e6f41676dae8beb66121e490a621fc
SSCAR_Family_Supplement.zip · 130,368 bytes · 28 files
Archived record · Zenodo DOI
Version v1.1.0. The archived ZIP is byte-identical to the download above.
License

What the license permits, and what it reserves

This package is distributed free of charge. No payment is required, now or ever, for anything this license permits.

Grant of rights

Subject to the Restriction section, you are granted, free of charge and perpetually:

  • the right to implement the family — its component agents and its integrator — from this specification, in any language or paradigm;
  • the right to deploy and operate those implementations for any lawful purpose, including in the course of a commercial business, and to use them as internal machinery within your own products and services, including products and services you offer to your own customers;
  • the right to study, analyze, and reference the specification for any purpose — including describing, quoting reasonably, reviewing, critiquing, teaching, benchmarking, and publishing analysis of it, including publication of test results and criticism;
  • the right to redistribute the package, free of charge, complete and unmodified, provided this license travels with it.
Restriction

You shall not:

  • offer the family, any of its component agents, or its integrator to third parties as a product, a library, a package, an API, a service, a service tier, or any other identifiable offering of its capability — whether for payment or free of charge;
  • distribute an implementation derived from this specification as a standalone software product, library, or package;
  • redistribute the specification package other than complete and unmodified, or charge any fee for redistributing it;
  • modify, adapt, translate, abridge, restate, or create derivative works of the specification text, the companion material, the Manifest, or this license — other than translations and annotations for your own internal use that you do not distribute.

The line. Using an implementation as internal machinery inside your own product or service is permitted, including commercially and at any scale: the third party consumes your product, and neither selects nor obtains the agent as such. Offering the capability itself is not permitted. Permitted: your application uses the family internally to decide whether restored session state is admissible, and your customers buy your application. Not permitted: you expose the family or a component as an API, ship it as a library, or offer it as a service, so that a third party can obtain or invoke its capability as a thing in itself.

Composition is internal machinery. Where an implementation of any agent specified in this package is composed with others under an integrator, and what reaches the third party is the composed verdict, that implementation is internal machinery within that composition.

The implementations you build are yours. SEMANTICHOR claims no ownership over the source code, builds, or deployments you produce from this specification.

The license sets out what is free; the reserved uses are not licensed for this package.

Inquiries about reserved uses: contact@semantichor.com

Where you obtained the package otherwise than at the point of distribution, you accept this license by accepting it at semantichor.com, in the same two confirmations, before any use of the package.

This is a summary. Where this summary and the license appear to differ, the license controls. Read the full license →