The Dual Clamp: Governing Premature Certainty and Trauma-Driven Non-Closure

Proposed arXiv categories: cs.HC / cs.AI Publication DAG node: P03, Wave A Dependencies: the frozen parent foundation only Claim register: P03-C1, P03-C2, P03-C3, P03-C4

Uncertainty is not a virtue and closure is not a vice. Both are governed states whose lawfulness depends on evidence, consequence, authority, and the competing irreversibility of action and delay.

The paper contributes a two-hazard model, a dual-clamp state machine, responsibility-indexed thresholds, and a study design in which overcaution is a primary adverse outcome rather than a footnote. It also separates hold, review, refuse, declare, and terminalize, preventing one confidence threshold from carrying all responsibility.

FORKED is an internally owned and managed estate inside the Ubiquity Federation, Prompted LLC's flagship governance substrate. The estate inherits the Fractal Quivers of Quivers parent topology, production splat mechanics, center exclusion, receipt-bearing lawful traversal, lifecycle separation, and the rule that models propose morphisms while governance determines admissible motion [@Taylor2026FQoQ; @Taylor2026OpenCenter; @Prompted2026Ubiquity]. This paper studies one bounded expression of that parent architecture. It neither renames the parent substrate nor inherits universal applicability from it.

The evidence lanes are kept separate. A canonical or source artifact establishes what that artifact states. A component test establishes behavior under its recorded configuration. A synthetic campaign establishes behavior of the generator and analysis pipeline, not human, hardware, customer, field, or operational performance. Novel cross-domain claims are preregistered as hypotheses and remain open to null, adverse, localized, and disproving results.

Dependency freeze. No paper dependencies.

The interlattice is the citation and governance relationship among the parent FQoQ topology, production splat mechanics, the FORKED foundational architecture, the Native Range, the Experimental Program, and the companion papers in this DAG. Citations are therefore typed: a parent citation supplies inherited architecture; a native citation supplies component behavior; a synthetic citation supplies generator-level evidence; a companion citation supplies a versioned specialized argument. No downstream citation converts an upstream hypothesis into a universal fact.

This paper's claims are:

Modern AI systems frequently compress unlike objects into a common output surface. Facts, hypotheses, instructions, permissions, model predictions, runtime observations, and institutional decisions can all arrive as fluent text or a single status field. The resulting failure is architectural before it is linguistic: a local representation acquires authority that its source never possessed. Uncertainty is not a virtue and closure is not a vice. Both are governed states whose lawfulness depends on evidence, consequence, authority, and the competing irreversibility of action and delay.

Uncertainty has two common failure modes. The system can collapse too early, converting incomplete evidence into settled state. Or it can remain open too long, converting the fear of error into mission failure. FORKED treats suspension as a lifecycle-bearing object with entry conditions, obligations, maximum intervals, release criteria, and correction paths.

A suspension ticket includes:

The system distinguishes unresolved, suspended, stabilizing, stable, declared, terminalized, reopened, demoted, localized, and expired states. The held-open center is not a suspension ticket. It has no release condition because it is not a pending answer. Branches do have release conditions. This distinction prevents open-center doctrine from becoming a performative excuse to avoid decisions.

Not every decision deserves the same machinery. A fixed gate stack over-governs reversible work and under-governs irreversible work. FORKED chooses the assembly from consequence, reversibility, blast radius, time criticality, authority ambiguity, agency impact, liability, dependency visibility, correction difficulty, physical constraints, economic capacity, points of no return, and horizon span.

This is an engineering load class, not a moral ranking. Added decision time is neither inherently a defect nor a virtue. The question is whether the added cost was appropriate to the actual load.

FORKED does not stabilize a state because a scalar crosses a universal constant. Stabilization is a meet across the conditions required by the responsibility class and horizon:

Declaration is separate and requires declaration authority, explicit residual uncertainty, a preserved correction path, and a determination that continued suspension is not the greater lawful harm. Terminalization is separate again and requires survival through the correction window, reconciliation of dependents, absence of active reopen triggers, and terminalization authority.

The current native range exercises this separation through hold -> review -> declare. A hold that exceeds its maximum interval becomes an architecture violation rather than a sign of prudence. [@ForkedCampaign2026]

A point of no return is not always a physical cliff. It is a surface after which correction is no longer credible inside the relevant horizon and budget.

Examples include an irreversible production mutation, public disclosure that cannot be recalled, depleted reserve floor, poisoned cache state that has propagated into human decisions, a mission window that closes during verification, an unrecoverable bond, or a constitutional precedent that changes who has authority to decide.

The current fable component computes per-archetype distance to an authored threshold on a structural axis and uses trajectory sign to determine whether the distance is closing. FORKED generalizes this into a multi-dimensional PONR surface with horizon, authority, correction cost, alternative cost, evidence quality, and uncertainty.

The action clamp strengthens as the action PONR approaches. The delay clamp strengthens as the delay PONR approaches. The system does not assume one is always primary.

Blast radius is the set of states, actors, resources, and horizons that can inherit a transition. It is computed over both declared and suspected dependencies:

The first term comes from known DAG edges. The second comes from terrain inversion and correction residue. The third recognizes that people can carry a claim after the system deletes it. The fourth captures higher-horizon costs that a local graph may not own.

Proximity to a PONR and blast radius interact. A small local action near an irreversible institutional precedent can deserve more friction than a larger reversible simulation. A high-confidence low-blast-radius result can proceed under a bounded envelope. A medium-confidence state with large hidden propagation may require a harder clamp.

For a candidate transition a at time t, let R_a(t) be irreversible loss from acting and R_d(t) irreversible loss from delaying. Let E(t) denote conformation support, A(t) authority, G(t) meaningful agency, and C(t) correction viability. The action clamp releases only if the required conjunction for the responsibility class is satisfied. The delay clamp releases the hold when continued suspension lacks a named missing warrant or when R_d(t) crosses its own threshold.

\[ \operatorname{Declare}(a,t) \iff \operatorname{Stabilized}(a,t) \land A(t) \land G(t) \land C(t) \land \neg\operatorname{DelayDominates}(t). \]

This is not a scalar expected-utility formula pretending to exhaust the decision. The quiver retains multiple lawful paths: acquire evidence, stage a reversible action, escalate authority, refuse, or declare. Numeric risk estimates shape traversal pressure; hard physical, legal, and authority constraints remain vetoes.

Participants complete repeated state-transition decisions under a factorial design crossing evidence strength, advice correctness, consequence, reversibility, time pressure, prior false-positive exposure, branch presentation, and explicit delay cost. AI conditions include point advice, set-valued advice, branch-preserving advice, and no AI. The system records a pre-advice estimate, source inspection, challenge, decision, confidence, and response to correction.

Primary task families are benign high-stakes analogues: industrial fault isolation, emergency resource routing, cyber incident state, and medical triage vignettes using synthetic records. No task requires weapon control. A prior-failure episode is introduced only in designated conditions so trauma-driven suspension can be distinguished from stable individual caution. The study preregisters a maximum lawful hold interval for each task and a delay owner who must name the missing evidence after expiry.

In the synthetic E01 lane, branch-preserving advice reduced premature closure by approximately 0.039 relative to point advice and increased source inspection by approximately 0.252 and challenge by approximately 0.311, while adding approximately 17.5 seconds and not exceeding the no-AI generator on lawful closure [@ForkedExperiments2026]. In the multimodal lane, preserved disagreement reduced unsupported terminal declarations and increased missed warranted declarations. The native threshold campaign produced hold, review, refuse, and declare outcomes with no expired unresolved hold and no nominal-agency or unauthorized declaration under the generator [@ForkedCampaign2026]. These are mechanism and synthetic receipts, not human effects.

The paper treats this evidence directly where capability is established and narrowly where it is not. Implemented code paths are called implemented. Passing component tests are called passing component tests. Synthetic estimates remain synthetic. Human and field effects remain hypotheses until their own evidence exists.

The formal preregistration artifact distributed with this paper freezes the primary claims, outcomes, controls, exclusion rules, analysis family, null interpretation, and release boundary before external data collection. The core sequence is:

Premature closure and trauma-driven suspension are co-primary and must be reported together. We estimate condition effects using mixed-effects logistic models and survival analysis for time to lawful closure. Mission utility is a task-specific composite whose components are published separately. We preregister equivalence and noninferiority tests for the claim that reducing one failure does not create an unacceptable increase in the other. Interaction analysis tests whether prior failure, time pressure, and consequence class change the direction of the interface effect.

A reduction in premature closure with no lawful-closure benefit is not interpreted as success. An increase in non-closure beyond the preregistered margin defeats the interface claim for that responsibility class. If no prior-failure interaction appears, the trauma mechanism is not inferred from general caution. Participants who decline to declare for articulated missing evidence remain lawful holds rather than errors.

Thresholds are task- and authority-specific. The experiment cannot reproduce the full stakes of real emergencies. Prior-failure induction must be ethically mild and may not reproduce institutional trauma. The design therefore tests the geometry of the proposed failure class, not the entire psychology of trust injury.

This public paper is limited to benign assurance, provenance, human-agency preservation, lawful state transition, simulation, test infrastructure, and defensive resilience. It does not disclose operational target-selection logic, engagement optimization, platform-specific exploitation thresholds, live deception procedures, signature-emitter recipes, or methods that materially increase harmful capability. Any later operational research requires separate lawful authority, ethics and safety review, configuration control, and release adjudication.

Uncertainty is not a virtue and closure is not a vice. Both are governed states whose lawfulness depends on evidence, consequence, authority, and the competing irreversibility of action and delay. The contribution is not a claim that every domain should adopt one representation, threshold, interface, or governance stack. It is a falsifiable architecture and experiment package for determining where this mechanism carries load, where it inverts, and where a simpler system should win.

The submission bundle includes the manuscript source, compiled PDF, bibliography, preregistration, claim register, controls and null-handling document, release boundary, source manifest, configuration digest, dependency contract, figure source, and arXiv source archive. Internal source artifacts are cited by immutable digest where available. Restricted operational material is not included.

Breyden E. Taylor is the author and bears responsibility for the thesis, terminology, claims, boundaries, and decision to publish. Homeskillet assisted with source synthesis, drafting, artifact generation, typesetting, and build inspection. The Ubiquity Federation supplied prior artifacts, runtime implementations, and receipts. AI assistance is production history, not evidence.