STRATUM

EPISTEMIC DECISION LEDGER

An append-only ledger for human + AI work. Agentic systems conflate generation with authority: without an evidence ledger, a generated conclusion becomes operational truth merely because it was persisted or repeated — and every later decision inherits it. Stratum stores immutable events and derives the rest. A decision is not authoritative until its evidence is checked, and the record says which.

Every later decision inherits prior unchecked claims — unless the ledger says otherwise.

OPEN THE ATRIUMread the live instrument

~/projects/stratum · zsh

$ stratum decide "Ship the landing page" --pending
at-001 · pending_evidence · not yet authoritative
$ stratum verify at-001 --kind url_check --ref "deployed @ 9f2c1ab"
at-001 · validated · evidence checked
$ stratum tessera
13 decisions · 3 verified · 4 foreclosed · epoch 19

git clone https://github.com/mazze93/stratum && cd stratum && npm i && npm run dev

Runs on Cloudflare Workers · zero-dependency CLI · more install methods

CORE DEPTH · DRAG TO REPLAY THE LEDGER EPOCH 19 · HEAD

—

Every position is a real projection computed by the reference implementation — not an animation. Drag left and watch verified decisions lose their evidence, and foreclosed roads reopen because they had not been closed yet. Status is a fold over the log, never a stored field.

Real data — a section through this repository’s own genesis ledger, drawn from the projection. STATIC PLATE · LIVE PROJECTION UNREACHED

Axiomatic = trust root · Verified = evidence checked · Pending = awaiting evidence · Foreclosed = a road deliberately closed · Narrative = unverified interpretive layer

AXIOMATIC: Accepted premises. Trust roots and human ratifications — authoritative because an authority declared them, carrying no evidence by nature. The bedrock everything else rests on.
VERIFIED: Claims whose evidence was actually checked — a test exit, a merged commit, a signed approval. The bright seam marks where the check landed.
PENDING: Recorded and awaiting evidence. Cited is not checked: a reference with no verification stays here, however plausible it reads.
NARRATIVE: Prose gloss. Recorded, never canonical — no amount of confidence or repetition promotes it. This is the layer that becomes “truth by persistence” in systems without a ledger.
FORECLOSED: A road deliberately closed, kept in the record with its reason and its reopen condition. Distinct from invalidation, where evidence falls over — a foreclosure is a choice, not a refutation.

Select any layer to open its record — claim, evidence, actor, and what closed it.

“The instrument doesn’t know the destination. It simply aligns itself with a field that is otherwise invisible. A navigator reads the instrument. A human decides where to sail.”

STRATUM IS THE INSTRUMENT. THE FIELD IS YOUR PROJECT’S DECISION HISTORY. YOU ARE THE NAVIGATOR.

I. Evidence-gated trust

Every event separates evidence (checkable: file hashes, test exits, signed approvals) from claim (LLM prose). Prose never becomes authoritative — no matter how confident it sounds. Evidence cited but unchecked stays cited, not checked.

II. Status is a fold

No event stores a status field. validated, superseded, disputed are computed by folding transition markers over the log — at any epoch. Drag the past back and watch decisions un-verify. Replay is a proof, not a feature.

III. The record keeps its shadows

Each clean decision carries a shadow — the oscillation and discarded branches it had to bury to stay coherent — and foreclosed paths stay in the section as lenses that pinch out. The map shows where you didn’t sail.

SOURCE MIT · TypeScript core + Python oracle THE RECORD every decision, generated from the traces THE CONTRACT status is a fold · 16 invariants