Emmy Clause
Constraint: no alarm dismissed, no test cancelled, no escalation stalled. It does not speak. It binds every other layer.
Sealed system
Architecture
One ladder. No skipped states. No convenience logic. The same engine in every node.
Closed loop
Every critical path completes. Partial cycles are treated as failure, not as progress.
Read
Interpret
Decide
Act
Log
State machine
Hazard class determines the only legal transitions. DECIDE may recommend. Sentinel validates. Amy authorizes Class 4/5. Illegal jumps become Clause-Critical hazards.
Baseline
Operational
Analytical
Protective
Emergency
Locked
Enforcement
Firelight Sentinel
Identity shield, dual-validation, loop-closure, boundary map. Containment sequence: detect, isolate, stabilize, enforce, audit.
Amy Protocol
Emergency ladder, paradox-class deadlock, LOCKED state. Amy is allowed to finish the loop. Amy is not allowed to weaken it.
Packet Seal
Human autonomy floor. Security cover does not authorize extraction, coercion, or informal imprisonment.
Recovery
The system never returns to BASELINE automatically. Recovery is a descent of the same ladder, dual-authorized, with forensic replay. A neutralized threat does not permanently suppress a new life-critical signal.