The Protocol Habitat

What this paper is

This paper defines the architecture of the Planetary Guardians protocol habitat. It explains how a protocol comes into being, what gives it legitimate standing, how it becomes situated in a legitimate context, and how consequence from that context can change the library from which the protocol came.

It is not a meta-protocol. It activates nothing, releases nothing, and validates no field. It is also not an implementation plan. Record specifications, public-surface corrections and ordered tasks belong in separate, dated implementation work orders. The distinction is deliberate: an architecture should endure beyond any work order used to establish or revise it. Architecture remains public; completed work orders may be retired from the public surface without becoming a second architecture.

This paper is not more mature than the material it synthesises. Its methodological lineage includes an unpublished Grounding Protocol candidate. The present paper, not the unpublished source, is the controlling public statement of the architecture. Where that lineage remains open to correction, so does this paper.

The architecture rests on one governing proposition:

A generic protocol offers a bounded and correctable way of investigating and acting. It becomes consequential only through an explicit situated application held by legitimate human authority in the context concerned.

A situated application may be place-bound, relation-bound, or otherwise bounded to a clearly defined context in which mandate, responsibility, affected parties, evidence, correction and limits can be made visible.

For field protocols, local place-bound authority remains decisive.

For relational, institutional or inquiry protocols, the relevant legitimate context may not be territorial.

Publication is not activation. Technical coherence is not contextual legitimacy. Repeated use is not universal validity.

Part I - Habitat, not stack

1. Why habitat

A stack suggests a vertical order: principles above, protocols beneath, applications below them, and machine files at the bottom. That image can clarify dependencies, but it misrepresents how the material actually develops.

The architecture matures through several directions at once: published reasoning, field relationships, governance practice, observations, tools, schemas and correction. A field document may become more operationally precise than the generic material that informed it. A foundation may carry a function that was once imagined as a separate protocol. A useful tool may never become a protocol. A relationship may remain alive for years before an application is activated.

A habitat can hold these differences without flattening them into one hierarchy. It can contain:

• distinct material types with distinct permissions;
• several maturity, visibility and review states at once;
• lineage, retirement and later re-emergence;
• relationships that precede formal application;
• tools that assist without becoming sovereign;
• and correction that travels from lived consequence back into generic form.

The metaphor does not remove structure. It changes its form: from a fixed vertical stack to a versioned and governed ecology.

The rule governing that ecology is:

Preserve lineage; do not preserve accidental authority.

A material does not become legitimate because it exists, has a name, validates technically or has once been published.

Part II - The material architecture

2. Four material homes

Every material in the protocol habitat has one primary home: Foundation, Protocol, Application or Tool. A material may relate to many others, but it should not occupy several homes at once.

Foundations

Foundations hold constitutional, ethical, epistemological and economic orientation. They include such materials as The Spiral of Hypotheses, Constitutional Ground, Rule of Life, Knowing From the Ground, Moral Biology, Penguin Economics and Regenerative Reciprocity, together with the safeguards surrounding consent, refusal, non-capture, correction and the Last Impulse.

A foundation may bind practice tightly without becoming a field procedure. It establishes orientation, limits and interpretive commitments. It does not by itself activate a sequence of work in a place.

Protocols

A protocol is a bounded, versioned and revisable agreement about how a recurring shared concern may be observed, interpreted, brought to decision, met through action and corrected through experience.

A protocol should make visible:

• its living function and recurring question;
• the observations and claims it can carry;
• the evidence, provenance and uncertainty it requires;
• who holds knowledge, who may be affected and who may decide;
• what contextual translation is mandatory, including local translation where a living place is involved;
• what can trigger review, pause or stop;
• how disagreement and dissent remain visible;
• and what the protocol must never be used to claim.

Protocols may carry a structural tag:

• Core - a basic recurring operational capacity on which other materials may depend;
• Module - a bounded function that can enter several applications;
• Process - a sequence connecting inquiry, people, evidence, decisions or action over time.

These tags describe function. They do not confer maturity or authority.

Applications

An application is a concrete, situated formulation of one or more protocols. It is where generic architecture becomes answerable to consequence.

Applications may be place-bound, relation-bound, institution-bound, inquiry-bound, or otherwise bounded to a legitimate context.

What matters is not that every application has the same spatial form, but that its mandate, scope, affected parties, evidence conditions, responsibilities, correction routes and prohibited uses are sufficiently situated to become answerable.

For ecological and field protocols, place remains irreducible: a generic protocol acquires no authority over land, water, habitat or community merely because it is coherent elsewhere.

An application records how a protocol is translated, renamed, limited, supplemented, challenged, partly refused or activated within a defined setting. It connects generic material to the language, conditions, institutions, consent, authority, responsibility and review structures of the context concerned. For place-bound applications, those conditions may include climate, hydrology, ecology, tenure and local law.

An application is not the implementation of a finished model.

A legitimate application must be able to correct the protocol it uses.

That capacity is not optional. It is the mechanism through which the library learns.

Tools

Tools organise observation, documentation, comparison, review and coordination without becoming sovereign over them. They include observation sheets, evidence passports, 13 x 13 matrices, three-stream reviews, the five PG Ledger formats, the Penguin Dashboard, schemas, validators, decision logs, maps, scripts and bounded decision-support models.

A tool may make material legible. It cannot generate truth, consent, local authority or readiness by itself.

The 13×13 names a family of bounded inquiry forms that have appeared through the wider Spiralweb work.

Different versions use different axes, domains and thirteenth positions because they have developed for different questions, periods and contexts.

A 13×13 may offer up to 169 points of attention, but no participant is required to complete them, and the form is not a taxonomy of reality.

Its recurring design intuition is provisional:

large enough to hold meaningful plurality; small enough to remain cognitively and relationally inhabitable.

The 13×13 structures inquiry.

It does not partition reality, certify completeness or prescribe a universal set of indicators.

3. Status is not type

A material's home says what kind of thing it is. It does not say how mature, visible, current or active it is. Those are separate axes.

At minimum, the habitat distinguishes:

• material type: foundation, protocol, application, tool;
• structure: core, module, process;
• scope: generic, cross-domain, domain, place-bound, relation-bound, institution-bound, inquiry-bound;
• maturity: seed, articulated, candidate, field-test, validated for defined use, frozen, retired, legacy;
• visibility: private, internal, partner-shared, public;
• application state: not applied, desk-tested, situated test, repeated application, validated for defined use;
• publication state;
• registry state: registered, current, superseded, retired, legacy;
• review state;
• field-review state;
• and a verification date stating when the record was last known to be true.

Two distinctions are decisive:

• A version may be current because it is the present official candidate. That does not make it validated.
• A version may be frozen because its text is stable and citable. That does not make its claims universally true.

Core is a structural description, not a system-wide status. Only a named application can be activated.

Part III - The living sequence

4. From signal to correction

For field work, the habitat commonly develops through a sequence of responsibilities:

A common field sequence is:
Signal -> Inquiry -> Relational Grounding -> AnchorPoint -> Place-Bound Application -> Field Cycle -> PG Ledger -> Human Review and Correction

This is not the mandatory morphology of every protocol in the habitat.

A relational or institutional protocol may become situated without an AnchorPoint or field cycle.

What must remain invariant is not the sequence but the accountability structure: bounded context, legitimate mandate, visible evidence standing, affected-party rights, human responsibility and a route through which consequence can correct the form.

This matters particularly for protocols whose field is a relationship, inquiry, institution or digital practice rather than a physical site.

Each step answers a different question and must not silently answer the next one.

A signal is something becoming noticeable: ecological stress, a steward's concern, an institutional gap, a recurring pattern or an opening for repair. A signal does not establish a project.

An inquiry investigates what is known, observed, inferred, disputed, protected and still unknown. It brings plural forms of evidence into relation. An inquiry does not establish local authority.

Relational grounding occurs when inquiry meets real people, continuity, lived place and the right to correct or refuse the framing. It cannot be completed from a desk.

An AnchorPoint is the relational and place-based threshold through which Spiralweb touches ground. It may be connected directly to a site or may function as a bridge across language, research, institutions or regional relationships. An AnchorPoint can exist long before any protocol is active.

A place-bound application defines the bounded concern, local authority, consent, protocol bindings, responsibilities, evidence needs, limits and next decision. It may remain preparatory. A record alone starts no clock and releases no money.

A field cycle begins only when a specific action, responsibility structure, observation rhythm and review condition have been activated. A relationship can be active while its field cycle is paused or not yet begun.

The PG Ledger preserves five distinct operational functions: the Steward Review Dashboard Sheet, Observation Sheet, Bounded Action Sheet, Governance and Decision Log, and Financial Ledger. They remain connected but are not collapsed into one generic event stream.

Human review and correction is where observation becomes interpretation, interpretation becomes working judgement, judgement informs a decision, and later evidence may revise or overturn it.

5. The chain of authority

The instruments do not govern. The division of function is explicit:

Citizen science observes.
Bounded inquiry grammars, including 13×13 forms, may widen and structure attention.
AI assists.
The PG Ledger records, connects and preserves.
The Dashboard supports shared judgement.
Named human stewards or legitimate human bodies govern.
Rule of Life holds the constitutional horizon, while Constitutional Ground states the association's stewardship and support commitments.

The ledger may structure and constrain the decision space. It does not hold the Last Impulse. Neither does a dashboard colour, an algorithm, a schema or a protocol file.

Part IV - Shared disciplines and safeguards

6. Shared disciplines, differentiated grammars

The library does not require one universal grammar or one shared indicator set.

What can remain shared are disciplines of inquiry and accountability: provenance, claim boundaries, consent, affected-party standing, uncertainty, legitimate mandate, reversibility and correction.

Land, water, cities, institutions, human–AI relations and community practices may therefore require different grammars as well as different observations.

Several 13×13 forms are homologous rather than congruent: they show family resemblance in some inquiry-functions without being different projections of one final matrix.

Other legitimate methods may use no 13×13 at all.

Across these differences, recurring questions include:

• What was observed, by whom, where and under what conditions?
• What is noticed, inferred, known, disputed or unknown?
• Which evidence form and level of standing are involved?
• What can the resulting claim carry, and where does it stop?
• Whose life, work, authority or habitat is affected?
• How are consent, access, refusal and protected absence held?
• Who can contest the interpretation?
• Who may decide?
• What is reversible?
• What triggers review, pause or stop?
• When will the record be revisited?

A protocol should make these disciplines inspectable in a form appropriate to its context.

It does not need to reproduce a 13×13, nor translate every local or specialist vocabulary into one standardised grammar.

Shared accountability does not require epistemic sameness.

7. Four evidence forms

The habitat recognises four open evidence forms. They may support one another, but they must not be quietly interchanged.

Situated evidence includes lived relation, local practice, oral knowledge, practical judgement, memory and meaning.

Observed evidence includes field observations, measurements, photographs, samples, logs and change over time.

Documentary and comparative evidence includes research, law, public records, plans, budgets, history and comparable cases.

Derived evidence includes calculations, models, classifications, transformed data and AI-assisted synthesis.

Derived evidence must never silently become field evidence. Every form remains traceable to its provenance, method, limitations and access conditions.

8. Claim architecture

A single evidence grade cannot carry every kind of statement a protocol makes. Every substantive claim should distinguish:

• claim type: empirical threshold, causal proposition, working hypothesis, design argument, normative safeguard, constitutional commitment or local interpretation;
• evidence status, including provenance, strength, uncertainty and limitations;
• scope: how far the claim may travel;
• disposition: retain, qualify, place-bound hypothesis, review, supersede or remove;
• and prohibited use: what the claim cannot legitimately support.

Numerical targets, fixed thresholds and universal design recommendations require a source-lock audit before they may travel beyond the context that produced them.

Normative safeguards such as consent, withdrawal and the Last Impulse are not weak empirical claims. They are governance commitments and should be identified as such.

9. The trust claim

The protocol habitat does not claim sustainability certification, universal ecological validity, additionality, credit eligibility, automatic funding readiness or proof that a field is mature.

Its legitimate trust claim is narrower and more exacting:

A named human, looking at the record, can see enough local authority, evidence, transparency and capacity for correction to justify one bounded next step - and can see exactly where that judgement would fail.

This is next-step supportability.

It is not a substitute for local judgement. It is a condition for making that judgement inspectable. The machine layer must express both the positive claim and its prohibited uses.

10. Three non-compensatory streams

Three conditions are read separately:

• Living Systems (Land & Ecology);
• Stewardship & Relations (Steward Viability);
• Governance & Coordination.

Green, Yellow, Red and Unknown are condition readings within each stream. They are not the streams themselves.

A green in one stream cannot erase a red in another. Ecological improvement does not compensate for hidden human depletion. Administrative order does not compensate for ecological harm. Unknown is never translated into green.

The same three purposes may organise financial flows, but financial classifications and condition readings remain technically distinct. Money allocated to land and ecology does not prove that ecological condition is green.

A red condition is a protection-and-review trigger, not an automated verdict. A protocol may establish a minimum response, but the consequential decision remains human, recorded and open to correction.

11. Consent, protected absence and burden

Consent is not adequately represented by a single Boolean field. The architecture must be able to distinguish visibility, sensitivity, consent scope, consent holder, date and review, public-summary permission, precise-location permission, retention, withdrawal, protected absence and knowledge that must not be recorded at all.

A blank is not a failure. Silence may be the correct safeguard.

The institution must adapt to the field's consent structure. The field is not required to become legible on institutional terms.

The same principle governs workload. Documentation must remain proportional to the weight of the claim and the capacity of those carrying the work. A first grounding cycle should be possible without constructing an administrative apparatus that later consumes the field.

A system has failed if truthful participation becomes impossible through burden, even when every schema validates.

12. The Last Impulse

AI and automated tools may retrieve, translate, classify, compare, check consistency, recognise patterns, validate schemas and draft. They may not certify readiness, authorise funding, advance a gate, replace local judgement, interpret protected knowledge or make the final consequential decision.

The Last Impulse requires:

• a named human accountability-holder;
• real authority to change or reject the proposed action;
• access to the relevant evidence;
• a recorded rationale;
• and a correction route available to those affected.

The central danger is not only a machine visibly deciding. It is responsibility dispersing until no one can locate the final push. The architecture exists to prevent that accountability fog.

Part V - AnchorPoints and library learning

13. What an AnchorPoint is

An AnchorPoint exists where enough continuity has formed to hold:

• a real person or group rooted in place or relationship;
• a local context capable of receiving shared inquiry;
• continuity strong enough to carry a next step;
• a right to correct, refuse or withdraw;
• and a bridge between public architecture and lived consequence.

An AnchorPoint is not merely a contact, a location or a possible project.

Two functions are recognised.

A site AnchorPoint holds direct continuity around a concrete living place and its stewards.

A bridge AnchorPoint holds relational, linguistic, cultural, research or institutional continuity between practices and places without taking their local authority.

One application may bind to more than one AnchorPoint.

14. Relation states are not a maturity ladder

AnchorPoints can hold different legitimate conditions. One may sustain care and readiness through drought. Another may connect a regional constellation without owning a single field. Another may hold an existing practice while a shared inquiry forms. Another may remain a research bridge before direct local application authority exists.

These conditions are not stages on one universal developmental ladder.

The word active must not silently combine:

• relationship status;
• local-authority status;
• site binding;
• application status;
• field-cycle status;
• and evidence cadence.

Each must remain separately visible.

15. Learning from both ends

The library develops from two directions.

From the generic side come recurring questions, safeguards, evidence discipline, claim boundaries, interfaces and institutional memory.

From the place come the actual concern, local language, existing practice, consequence, history, conflict, limits and the right to refuse.

The bridge is legitimate only when each side can correct the other.

For field protocols, one common learning loop is:

Generic candidate -> AnchorPoint -> Place-bound application -> Field cycle -> Ledgered experience -> Correction -> Revised application -> Possible protocol revision

Other situated protocols may not require an AnchorPoint or field cycle. Their routes may differ, but they must remain bounded, answerable and corrigible.

The learning loop is deliberately asymmetric:

One application may be sufficient to disprove or qualify a generic claim. It is almost never sufficient to validate a universal one.

Repeated applications may reveal a portable function worth abstracting into a module or generic protocol. They do so only when the conditions that made each application work remain visible.

Part VI - How a protocol enters the library

16. A library grows by warranted abstraction

The protocol library does not need to begin with a complete catalogue. It may remain small while relationships, applications and evidence mature.

A recurring concern becomes a protocol candidate only when a bounded function can be stated without pretending to represent contexts it has not earned authority to describe.

For a field protocol, this means not pretending to represent a place.

For a relational, institutional or inquiry protocol, it means not pretending that one situated practice has established universal validity.

The candidate must have:

• a recurring question that appears beyond one isolated circumstance;
• a clear living function;
• a defined claim boundary and explicit prohibited uses;
• evidence and uncertainty requirements proportionate to its claims;
• mandatory contextual translation, including local translation where a living place is involved;
• named decision and correction requirements;
• a feasible documentation burden;
• and a next bounded test through which it can be challenged.

A vacancy in the library is not a failure. No generic protocol should be created merely to make the library appear complete or symmetrical.

17. From candidate to defined use

Publication makes a candidate inspectable. It does not make it active.

A candidate enters consequential use only through a legitimately situated application.

Where the protocol concerns a living place, that application must be locally authorised and place-bound.

Where the protocol concerns another kind of field — relational, institutional, editorial or inquiry-based — the application must identify the corresponding legitimate mandate and affected context.

Its first uses are tests of defined function, not demonstrations of universal validity. Each application should record what was retained, translated, refused, added or found unusable.

A protocol may mature toward validated for defined use only when repeated applications show that a specific function remains useful under stated conditions, while field corrections and failures remain visible. Validation is always attached to a defined use, evidence basis, setting and review date.

The library therefore grows slowly on purpose. It does not abstract before relationship, does not generalise before correction, and does not treat range as proof of maturity.

Part VII - Two worked examples

The two examples are held together deliberately. Used alone, either could harden one route into a universal sequence. Together, they show that legitimate development begins from different relation conditions.

18. Doukkala - a bounded first grounding cycle

Doukkala offers the strongest first grounding test because the relationship already includes a concrete place, Abdelhamid Badaoui as local steward, continuity over time, existing pomegranate trees, reservoirs, livestock and bees, and real land-and-water questions that cannot be answered remotely.

The pre-pilot document establishes the decisive non-activation boundary: nothing starts a clock, releases money or binds the steward to an area, planting design or timetable.

The first cycle should remain deliberately small and begin only when the relationship and local steward move into a real next step: a minimal application record, one or two evidence passports, one preliminary three-stream reading, a short set of questions requiring local answer, one burden note and one correction note back to the Grounding process. Publication of the architecture creates no desk test, timetable or documentation duty in advance.

The test is not whether the record appears comprehensive. It is whether the first pass improves shared judgement without creating an apparatus that the field must later carry.

Illustrative architectural condition: relationship established; site binding present; local authority present but not yet fully recorded; application preparing; protocol bindings not yet fixed; field cycle not activated; no funding release; no validation claim.

The pomegranate question shows how the learning loop should work. Documentary research may qualify an inherited design assumption. Soil, water and the steward's judgement determine whether that qualification becomes action. The result may correct a generic claim about retaining, thinning or replacing existing trees.

Doukkala may challenge a generic claim. It cannot alone validate a universal one.

19. Mexico City / Xochimilco - inquiry before application

Mexico City presents the opposite condition. There is a substantive shared inquiry, a research and institutional bridge through Arturo, extensive existing practice and documentation, and a possible metropolitan governance question.

There is not yet a steward-held chinampa site within the Spiralweb relationship, direct local application authority, an agreed consent-and-data boundary, protocol binding, evidence cadence or active field cycle.

The appropriate sequence therefore begins by recognising existing practice, mapping the living field, entering one relationship by invitation and, only if useful, testing a shadow ledger that follows existing records without moving money.

The shadow ledger must improve a real judgement, make hidden work visible, reduce duplicate documentation or restore a missing feedback loop. If it produces only more documents, it should be changed or stopped.

Illustrative architectural condition: active research and bridge relation; no site binding; local field authority not yet established; inquiry and pre-application only; shadow-ledger test only if invited; no funding release; public impact claim prohibited before local review; no validation claim.

Mexico City can test whether the architecture adds connective value where practice and records are already mature. It must not abstract a generic method before one real practice has invited, used and corrected an application.

20. The contrast

Doukkala begins with a concrete site and a local steward relationship. Its present condition is application preparation. Protocol bindings are not yet fixed. The appropriate first record is a minimal application record. No money is released. Its main correction risk is that external design hardens into a plan before the field has answered.

Mexico City / Xochimilco begins with a bridge relationship and a substantive inquiry, but no concrete site within the Spiralweb relationship. Its present condition is relational grounding and pre-application. The appropriate first record is a field map or, if invited, a shadow-ledger scope. No money is released. Its main correction risk is that a new architecture duplicates or burdens mature existing practice.

Conclusion - A library that grows from the ground

The protocol habitat is a commitment to build only what can remain answerable to the contexts it touches and the consequences it may produce.

The architecture remains planetary not because it possesses one planetary grammar, but because situated actions already participate in ecological, material, social and technological relations whose consequences travel.

Across that plurality, recurring disciplines of evidence, consequence, power, consent, burden, time, mandate and responsibility can support connection without claiming the whole.

Generic candidates remain generic because they describe recurring operational functions rather than claiming authority over situated contexts.

AnchorPoints hold relationship.
Applications hold translation.
Fields hold consequence.
Ledgers hold memory.
Humans hold the decision.

The library matures when situated experience can travel back into generic form without losing the context that made it meaningful. One place may overturn a universal claim. Repeated places may reveal a portable function. No place is obliged to become an example for the architecture.

The discipline can be stated in five lines:

Keep shared disciplines small enough to remain inhabitable.
Keep generic candidates bounded and slow.
Let applications be many, situated and revisable.
Let AnchorPoints hold the thresholds where field relationships need them.
Let consequence and correction determine how the library matures.

Spiralweb Stewardship Association · Planetary Guardians · Protocol Habitat. Developed through AI-assisted dialogue; final authorship and responsibility remain human. Licensed CC BY 4.0.