All capabilities Proof it's true · the Layer Law

Code checks facts. The model judges meaning.

A machine is permitted to confirm only what is literally true; anything that needs judgment belongs to the model. So a guess is never dressed up as a verified fact — the two layers can’t do each other’s jobs.

Where the line sits

Closed facts — exists, location, order, membership, hash — are the only things code may assert. They are true or false, with no opinion.

Meaning is the model’s domain — intent, correctness, implication, doubt. The architecture will not let one layer cross into the other.

The full split of fact versus judgment
Causal recordcau·b2c3d4e5
produced_byverifier.check
layerCODE — closed fact
assertedhash_match = true
judgmentdeferred to model
fact admissible — no opinion asserted

Invariant Code may assert only closed facts. Judgment of meaning belongs to the model alone — and never the reverse.

Go deeper — the Layer Law

What may be checked mechanically versus what must be judged, and why crossing the line is treated as the bug.

Read the doctrine