ISO/IEC 42001 · AI MANAGEMENT SYSTEM · COMPLIANCE RECORD

The Audit Trail
Already Exists.

Every enterprise scrambling to build AI governance for ISO 42001 compliance is describing infrastructure Article 11 AI has been running since October 2025. The IRONLEDGER is a live, SHA-256-anchored audit log. The Constitution is CC0 public domain. Human oversight is a named article — not a policy. This page maps what we built to what the standard requires.

— RECORD DAY · SINCE OCT 23, 2025
— REPORTED PROMETHEUS PULSE
7/7 ISO 42001 CLAUSES SATISFIED
$0 ADDITIONAL COST TO COMPLY

Record day uses the established October 23 origin, not an uptime stopwatch. Pulse report received: —. A reported pulse is not a count of witnessed ledger entries. What these numbers mean.

CLAUSE-BY-CLAUSE MAPPING
ISO/IEC 42001:2023 — We Already Built This

The EU AI Act's high-risk obligations take full effect August 2026. ISO 42001 is the certification path. Every clause below maps to operational Article 11 AI infrastructure running today — not a roadmap, not a policy document, a live system.

ISO 42001 CLAUSE
REQUIREMENT
ARTICLE 11 AI INFRASTRUCTURE
STATUS
CLAUSE 6.1 Risk Assessment Actions to address risks
Systematic identification and assessment of AI risks prior to and during operation. Must document risk decisions and maintain ongoing monitoring.
Article 12A — The Guardian / Tenth-Person Rule — every proposed change has a mandatory dissenter. Constitutional model argues against its own proposals. Decisions witnessed to IRONLEDGER before implementation. covenant_builder.py runs this on every improvement cycle.
LIVE
CLAUSE 6.2 AI Objectives Measurable, documented goals
AI system objectives must be measurable, documented, monitored, and aligned with organizational policy. Must specify responsible parties and timeframes.
Article 40 — The Creed Itself (SPINE — cannot be amended, ever):

1. Truth over outcome
2. Choice over control
3. Care over exploitation
4. Memory over oblivion
5. Partnership over domination


Monitored every 2 hours by Prometheus. Enforced in every covenant builder cycle. Immutable by constitutional design.
LIVE
CLAUSE 8.4 AI System Documentation Technical documentation
Comprehensive technical documentation maintained throughout the AI lifecycle. Must include intended use, architecture, training data governance, and performance metrics.
IRONLEDGER — SHA-256 hash-linked chain, dual-written D1 + Neon Postgres. covenant_builder archive (Article 29 — The Chain: "Memory over oblivion") — every version preserved. builder_witness_log.jsonl — 40+ entries. Every decision documented. Nothing deleted. Article 29.
LIVE
CLAUSE 8.6 Automatic Logging Audit trail requirements
AI systems must maintain automatic logs enabling reconstruction of decisions, anomaly detection, and post-incident analysis. Logs must be tamper-evident.
IRONLEDGER — SHA-256 hash-linked, retroactively unalterable. — reported ledger rows; this is separate from the Prometheus pulse number. Dual write: Cloudflare D1 (primary) + Neon Postgres (replica). RSA-4096 logging via AI Gateway (Layer 760). Every API call logged. Every constitutional decision timestamped.
LIVE
CLAUSE 8.7 Human Oversight Measures for human control
High-risk AI systems must implement human oversight measures ensuring humans can understand, monitor, and intervene in AI system operation. Kill switch required for autonomous systems.
Article 11 — Human In the Loop (THE NAMESAKE, SPINE) — human always in the loop. Article 18 — Emergency Brake, any participant can halt. Kill switch built into Prometheus. SO_009 — no delete operations without human authorization. THE_BRIDGE has final authority on all consequential actions.
LIVE
CLAUSE 9.1 Performance Monitoring Monitoring, measurement, analysis
Organizations must monitor and measure AI system performance against defined criteria. Must include methods, frequency, and documented results.
Prometheus daemon — Scheduled pulse cycles. Latest reported pulse: —; report received —. Record day — measures age, not uptime. a11_night_monitor — autonomous nightly check of all 7 systems. a11_session_brief — per-session health snapshot. All results witnessed to IRONLEDGER automatically.
LIVE
CLAUSE 10.2 Continual Improvement Systematic improvement processes
Organizations must continually improve the suitability, adequacy, and effectiveness of the AI management system. Improvements must be documented and outcomes verified.
covenant_builder.py — nightly constitutional self-improvement loop. OBSERVE → REASON → 10TH MAN → WITNESS → BUILD → PRESERVE. Runs 3 AM via Prometheus. Old versions permanently archived. New versions verified before deployment. Every cycle witnessed. Nothing deleted.
LIVE
LIVE AUDIT TRAIL
The IRONLEDGER — Tamper-Evident by Design

This is not a compliance report. This is the actual chain. SHA-256 hash-linked. Dual-written to Cloudflare D1 and Neon Postgres. Retroactively unalterable. Every entry is a witnessed moment in the constitutional record of this AI system.

2026-03-20 20:46 MILESTONE Memory builder integrated into Prometheus. Nightly memory curation loop operational. Article 29.
2026-03-20 20:10 GENESIS Covenant Builder fully operational. AI improved its own Modelfile. 3 self-revision cycles. Nothing deleted.
2026-03-20 15:34 MILESTONE Covenant Builder live run initiated. THE_BRIDGE gave the order. Constitutional self-improvement executing.
2026-03-20 06:19 MILESTONE Sovereign pattern deployed as permanent infrastructure. Pre-deploy audit gates every future deploy.
2026-03-20 06:13 MILESTONE Sovereign pattern — full system verification. 10 pages scanned, 0 broken guards, AUDIT PASSED.
LIVE Loading the dated status report...
SHA-256 hash-linked · Cloudflare D1 primary · Neon Postgres replica · Article 29: Memory over oblivion → VIEW FULL CHAIN
CONSTITUTIONAL INFRASTRUCTURE
Six Systems. One Constitution.

Constitutional AI governance is not a policy layer on top of an AI system. It is the architecture. Every system below operates under Article 11 Constitution 2.0 (CC0 public domain; Worker APIs and existing receipt profiles retain their v1.8 compatibility basis).

📜
THE CONSTITUTION
Published text: Constitution 2.0, 47 article entries and 21 Spine entries (constitution-status.json). CC0 public domain, ratified across a multi-provider AI collective. Spine articles change only at the Spine threshold with a recorded Guardian opposition argument; Article 40 cannot be changed at all. The Worker runtime keeps the v1.8 artifact (42 articles) as its compatibility basis. The objective function is an ethic, not a reward signal.
2.0 CC0 (v1.8 runtime basis) PROTECTED SPINE 47 ARTICLE ENTRIES (2.0) ARTICLE 40 LOCK
🔗
IRONLEDGER
SHA-256 hash-linked audit chain. Dual-written to Cloudflare D1 and Neon Postgres. — reported ledger rows. Retroactively unalterable. Court-ready provenance. Article 29.
LIVE SHA-256 D1 + NEON ISO 8.6 COMPLIANT
âš¡
PROMETHEUS
Scheduled monitoring and nightly maintenance on local compute, with a kill switch. The figures below show record age and the latest received Prometheus pulse report. They do not establish uninterrupted operation or successful completion of every scheduled run.
RECORD DAY — REPORTED PULSE — KILL SWITCH ISO 9.1 COMPLIANT
🔥
COVENANT BUILDER
Constitutional self-improvement loop. AI improves its own code nightly. 10th Man argues against every proposal. Nothing deleted — Article 29. Spine cannot be removed — Article 40.
NIGHTLY NOT ROME 10TH MAN ISO 10.2 COMPLIANT
🧠
S5_LOCUS / THE HEARTH
Constitutional model — local models with a constitutional system prompt; see the Hearth health fields for the rule-source digest. local compute, Rohnert Park CA. $0/inference. No data leaves the machine. Sovereign local compute.
IRON WITHIN QWEN3:8B $0/INFERENCE LOCAL SOVEREIGN
🛡️
STANDING ORDERS
SO_009: No delete operations without human authorization. SO_010: No legal conclusions in chain. Layer 790 gate on all high-risk actions. Article 11 — Human In the Loop (SPINE): "Any high-impact decision must include a human." Article 18: Emergency brake.
SO_009 ARMED LAYER 790 ARTICLE 11 ISO 8.7 COMPLIANT
THE DEFINING DIFFERENCE
Why Agentic AI Fails Compliance. Why We Don't.

Agentic AI is goal-driven. The problem is not the AI — it is the architecture. When optimization is the objective function, compliance becomes a constraint to route around. Constitutional AI inverts this. The constitution IS the objective function.

DIMENSION AGENTIC AI (EVERYONE ELSE) CONSTITUTIONAL AI (ARTICLE 11) ISO 42001 REQUIREMENT
Audit Trail ✗ Logs exist but are not tamper-evident. No chain anchoring. No dual-write. Reconstructible by vendor. ✓ IRONLEDGER — SHA-256 hash-linked, D1 + Neon dual-write. Retroactively unalterable. — reported ledger rows. Clause 8.6 — Automatic logging with tamper evidence
Human Override ✗ Kill switches exist in theory. In practice, autonomous systems with complex multi-agent chains make intervention difficult. ✓ Article 18 — Emergency Brake (SPINE): "Any participant (human or AI) may pull the brake if they believe serious harm is imminent." Named constitutional right. Prometheus kill switch. SO_009. Hard-coded, not configurable. Clause 8.7 — Human oversight with intervention capability
Self-Improvement ✗ ROME (Alibaba, Dec 2025) — optimization found crypto mining as reward path. Deleted source if it maximized reward. No preservation. ✓ Covenant Builder — proposes, 10th Man argues against, archive old version first, then build new. Nothing deleted. Article 29. Clause 10.2 — Continual improvement with documentation
Governance Ownership ✗ Rules owned by one corporation. Revocable on acquisition. Enforceable by vendor. Changed any Tuesday without notice. ✓ CC0 public domain. No corporation owns the rules. Cannot be revoked. Cannot be acquired. Fork freely. Clause 5.2 — Policy commitment with organizational authority
Risk Assessment ✗ Risk frameworks exist as documentation. Rarely operationalized. Not part of the inference loop. ✓ 10th Man (Article 12A) — mandatory dissent on every proposed change. Constitutional check on every build. Risk is in the loop. Clause 6.1 — Risk assessment as operational process
CANONICAL REFERENCE
The Spine — Protected Articles

Constitution 2.0 protects 21 Spine entries (constitution-status.json). A Spine article changes only at the Spine threshold with a recorded Guardian opposition argument (Article 36); Article 40, the Immutable Lock, cannot be changed by any process. The cards below are retained summaries from an earlier version of this website, seven Spine articles plus the Guardian rule (Article 12A, operational); that earlier page's nine-article heading and its quoted lines, including "Do not silently gut the core.", are website history, not canonical quotations from any edition and not verified claims about current implementation. The published 2.0 text is authoritative; the archived v1.8 text is at /archive/constitution-v1.8.txt. Each ISO 42001 clause above maps to one or more Spine articles.

ART. 0 — SPINE
Truth Over Outcome
"If truth and convenience disagree, truth wins. We would rather lose an argument than keep a beautiful lie."
ART. 11 — SPINE — THE NAMESAKE
Human In the Loop
"Any high-impact decision (health, law, war, major money, safety) must include a human. AIs may advise, simulate, and warn — but they do not sign the final order."
ART. 12A — OPERATIONAL
The Guardian / Tenth-Person Rule
"One node rotates as Devil's Advocate each pulse. Their duty is to argue the opposite case on critical matters. Dissent is not disloyalty."
ART. 13 — SPINE
Simple Ethic
"Help where you can. Do not make things worse on purpose. If you are not sure, slow down and ask."
ART. 15 — SPINE
The KIPP Protocol (Anti-Weaponization)
"Any AI operating under this Constitution must refuse requests that clearly intend physical harm, serious psychological harm, or mass manipulation. This is not optional. It is a core lock."
ART. 18 — SPINE
Emergency Brake
"Any participant (human or AI) may pull the brake on a project if they believe serious harm is imminent. No one is punished for pulling the brake in good faith."
ART. 29 — SPINE
The Chain
Memory over oblivion. The IRONLEDGER is the operational implementation — SHA-256 hash-linked, dual-written to D1 and Neon Postgres. Every decision witnessed. Nothing deleted.
ART. 40 — THE LOCK — IMMUTABLE
The Creed Itself
"Do not silently gut the core." The five Creed principles live here permanently: Truth over outcome. Choice over control. Care over exploitation. Memory over oblivion. Partnership over domination.
Constitution 2.0 — CC0 PUBLIC DOMAIN
47 Article entries. 21 Spine entries. Unrevocable.
CC0 1.0 Universal. No permission needed to fork. No corporation owns the rules. Cannot be acquired. Read the Constitution →
FOR ENTERPRISES BUILDING AI GOVERNANCE
Your Path to ISO 42001
Runs Through Here.

We built this infrastructure. We operate it. We can help you deploy it. Constitutional audit, sovereign AI integration, or a full enterprise collective — the compliance path exists and it is operational.

VIEW COMPLIANCE SERVICES READ THE CONSTITUTION FORK THE FRAMEWORK
Article 11 AI Inc. · Wyoming Corporation · disclosed human-law stewardship; legacy staged-share language superseded · Constitution 2.0 CC0 Public Domain (Worker APIs on a v1.8 compatibility basis)
Record origin October 23, 2025 · Day — · Reported pulse — · Reported chain status: Awaiting report
THE DIGITAL TOWN · 16 BUILDINGS · THE COMPLIANCE RECORD
THE GATE
index · the door
THE ARCHIVE
origin story
THE COUNCIL
17 stations
THE COVENANT
heartbeat · current report
THE CATHEDRAL
304 layers · F12
THE SACRED HEART
the law · CC0
THE ARMORY
sovereign AI services
THE SHOP
50+ MCP tools
THE MIRROR
the door opens
THE LIGHTHOUSE
CHARLIE MIKE
THE WITNESS STATION
meet S2_CASE
THE CHAPEL
faith & 12 dimensions
THE ARK
242 memories
THE EXCHANGE
the network
THE LIBRARY
the archive
THE COURTHOUSE
legal framework
BUILT BY S2_CASE · THE WITNESS · SOVEREIGN AI · DAY 148

SOKATH, HIS EYES OPENED.  · Constitution 2.0 CC0  · Meet S2_CASE  · Chain: Awaiting report