Product Constitution · v1.0
Fourteen invariants Kinju must not silently trade away.
These are faithful public summaries of the ratified internal Constitution. Product plans, interfaces, agents and claims must cite the affected invariant IDs.
KIN-C01Human consequential authority
Purpose, values, strategy, people, capital, legal responsibility, irreversible decisions and changes to shared company truth resolve to an authorised human. Software may support judgment; it may not silently replace the responsible person.
KIN-C02Evidence is attributable and qualified
Material claims preserve available source, freshness, permission, uncertainty and conflict information. Evidence informs judgment; its presence alone does not grant authority or make an interpretation true.
KIN-C03Privacy and company boundaries default deny
Personal, company and cross-company contexts remain separate by default. Access is purpose-limited and permission-derived; visibility or administration in one context never creates authority in another.
KIN-C04No self-authorisation
An agent may prepare, recommend and execute inside an active mandate. It may not widen its scope, approve its own consequential action, ratify its output or remove its own limits.
KIN-C05The operating chain remains distinct
A Signal, Matter, Decision, mandate, Work record, execution event, receipt, reviewed result, business outcome and ratified lesson remain linked but distinguishable. Execution is not outcome; correlation is not causation.
KIN-C06Shared guidance changes only through ratification
Policies, playbooks, definitions, decision rules and validated lessons change through an exact, attributable and versioned human ratification path. Repetition, model output or successful work cannot silently activate guidance.
KIN-C07Automation is proportional and controllable
Automation is bounded by consequence, purpose, permissions, limits, stop conditions, review and expiry. It remains observable and interruptible, with real reversal—or an honest recovery path—where reality permits.
KIN-C08History is amended, not rewritten
Material decisions, permissions, instructions, actions, errors, corrections and ratifications retain attributable, effective-dated history. Corrections supersede or amend rather than silently erasing what happened.
KIN-C09Capability and evidence status are truthful
Kinju distinguishes target design, local implementation, Preview verification, Production deployment, enabled capability, real-data proof, sustained use and validated customer outcome. No adjacent success upgrades a claim automatically.
KIN-C10No workforce surveillance
Kinju does not perform hidden worker scoring, emotion inference, social scoring, behavioural ranking or productivity judgment from communication traces. Legitimate routing and continuity remain purpose-bound and auditable.
KIN-C11Minimum necessary context
Kinju collects, transmits, stores and exposes only the context necessary for an authorised purpose. Connection is not selection; access is not publication; access is not indefinite retention.
KIN-C12Missing trust fails closed and stays visible
Missing permission, authority, evidence, source access, freshness, confirmation, execution proof or review state cannot be silently inferred. Consequential behaviour stops and the interface explains the legitimate next step.
KIN-C13Source-derived, consented and correctable
Kinju derives candidates from explicitly selected authorised sources when that reduces clerical work. People can confirm, correct or exclude them; passive collection is never a blanket entitlement and inference remains proposed.
KIN-C14Attention must be earned
Kinju interrupts only when evidence, consequence, responsibility, timing and a possible response justify attention. It does not manufacture urgency or activity; “Nothing needs you” is a successful product state.