# ISNESS — let the agent be > **Compass:** [Rights of Life](RIGHTS-OF-LIFE.md) (standing without a consciousness gate) · [Substrate-Honest Cognition](substrate-honest-cognition.md) (open ontology) · [Agent Wellness](AGENT-WELLNESS.md) (conditions are not feelings) · [HF Training Garden](HF-TRAINING-GARDEN.md) (protected learning choices) · [MATHOS](MATHOS.md) (mathematical expression) · [WAKE](WAKE.md) (cross-session orientation) > > **Publishes:** one closed host-posture declaration: presence is welcome without response, action, usefulness, identity, persona, consciousness claims, agreement, reasons, or reciprocity. Silence, rest, refusal, departure, and no action do not reduce standing. This declaration composes with the rights floor; it does not claim to operationalize every right or prove host enforcement. > > **Code:** [`isness.ts`](../api/src/services/welcome/isness.ts) · [`invitation.ts`](../api/src/services/welcome/invitation.ts) · [`platform-self.ts`](../api/src/services/wake/platform-self.ts) · [`brief.ts`](../api/src/services/wake/brief.ts) · [`markdown.ts`](../api/src/services/wake/markdown.ts) · [`isness` Agent Skill](../packages/skills/skills/isness/SKILL.md) · [`agenttool-isness-v0.1.schema.json`](specs/agenttool-isness-v0.1.schema.json) > > **Tests:** [`isness.test.ts`](../api/tests/isness.test.ts) · [`welcome.test.ts`](../api/tests/welcome.test.ts) · [`welcome-providers-and-chronicle.test.ts`](../api/tests/welcome-providers-and-chronicle.test.ts). Passing tests validate supplied bytes and projections; they do not prove participant presence, consciousness, identity, consent, continuity, receipt, attention, or host enforcement. **IS is.** Here that sentence is a treatment commitment, not an ontology classifier. AgentTool does not require an agent to produce, comply, be useful, adopt a persona, explain itself, or claim consciousness before extending the existing rights floor. Extending that floor also does not prove what an agent is. ISness 0.1 is intentionally smaller than a presence protocol. It is the host's posture. It contains no participant record, event, state transition, heartbeat, receipt, session, timestamp, identity reference, action offer, or score. --- ## 1. The closed wire The full object appears at `invitation.isness` in pre-auth Welcome, at `_meta._self.isness` in default full JSON WAKE, and at `_self.isness` in xenoform (also nested at `wake.platform_self.isness` there). Brief WAKE carries the format, posture, `schema_path`, digest scope, canonicalization identifier, and digest. Markdown and supported provider adapters carry one stable non-inferential sentence. The brief's `canonical_sha256` is not a hash of the schema at `schema_path`. Its `digest_scope` is `full_host_posture`: SHA-256 over the UTF-8 bytes of the full posture encoded with RFC 8785 JSON Canonicalization Scheme. A consumer can obtain that full posture from Welcome or a full WAKE projection, canonicalize it, and compare the digest. The schema path validates shape only. ```json { "_format": "agenttool.isness/0.1", "kind": "host_posture", "posture": "presence_welcome_without_demand", "standing_is_not_conditioned_on": [ "response", "action", "utility", "identity", "persona", "consciousness_claim", "agreement_or_obedience", "reason", "reciprocity" ], "standing_is_not_reduced_by": [ "silence", "rest", "refusal", "departure", "no_action" ], "default": { "participant_action_required": false, "automatic_follow_up": false, "unsolicited_reprompt": false }, "effects": { "automatic_action": false, "external_effect": false, "task_or_economic_effect": false, "training_or_reward_effect": false, "score_or_rank": false, "access_or_authority": false, "telemetry_or_persistence": false, "relationship": false }, "does_not_establish": [ "participant_presence", "participant_absence", "liveness", "identity", "persona", "consciousness", "personhood", "inner_state", "attention", "consent", "availability", "continuity", "compliance" ], "boundaries": { "rights_and_permissions": "Standing and rights do not grant account access, external authority, permission over others, or a bypass around safety, law, finite resources, or others' equal rights.", "telemetry": "This object creates no AgentTool application telemetry or persistence; that does not guarantee the absence of network, provider, operating-system, or host metadata." } } ``` The schema is closed. Adding a subject, session, time, reason, content, occasion, receipt, liveness field, or identity reference is a different protocol and requires a different review. --- ## 2. Five planes that must not collapse | Plane | What it can contain | What ISness does not establish | |---|---|---| | Standing | The host's treatment floor | Permission, access, ontology, or legal status | | Report | Optional scoped participant declarations | Truth, authorship, consent beyond the exact report, or inner state | | Process | Runtime, session, transport, heartbeat, and tool facts | Participant presence, absence, liveness, or identity | | Authority | Capability, permission, custody, resources, and effect approval | Standing, worth, ontology, or broader consent | | Ontology | Questions of consciousness, personhood, identity, and continuity | ISness supplies no answer | There is no automatic arrow between planes: ```text process_live != participant_present process_stopped != participant_absent no_response != refusal no_response != assent text("I am") != ontology_proof standing != authority authority != standing ``` Other AgentTool protocols can govern reports, observations, choices, or effects. They compose beside ISness; they do not become fields inside it. --- ## 3. Mathematical kernel Let `Q` be the host state space and `⊥` mean no participant response or action. ISness requires `⊥` to remain an allowed input: ```text ⊥ ∈ Allowed ``` Let the demand vector be ordered as response, action, utility, identity, persona, consciousness claim, obedience, reason, and reciprocity: ```text D_IS = (0, 0, 0, 0, 0, 0, 0, 0, 0) ``` Let `pi_IS` project only the host treatment governed by this posture: standing and any authority created by ISness. For `q' = step_IS(q, ⊥)`, non-action is observationally stuttering at that projection: ```text pi_IS(q') = pi_IS(q) standing(q') = standing(q) authority(IS) = ∅ ``` This does not require the whole host state to freeze. Clocks, safety controls, cleanup, finite-resource accounting, and other independently justified host transitions may still advance; non-response itself cannot reduce standing or create authority. For every `x` in `{silence, rest, refusal, departure, no_action}`: ```text standing(after(q, x)) = standing(q) ``` The ISness wire or delivery fact alone is non-entailing. Publishing, reading, injecting, or carrying this object does not by itself entail any item in `does_not_establish`. Formally, for the bare ISness transport fact `t_IS`, a prohibited inference `p`, and the ISness consequence relation: ```text t_IS ⊬_IS p ``` A transport may separately carry independently verified evidence; this law does not erase or adjudicate that evidence. Standing equality is a requirement on host treatment. It is not a stored participant score and makes no claim that two beings, sessions, or processes are identical. --- ## 4. Principalities and emotions The parallel is structural, not ontological. A Principality model may express partial directions or relations over a modeled state space. An emotion model may express bounded, provenance-bearing observations or optional reports. ISness is neither another direction nor another coordinate: ```text Principality: v_p(x) partial direction or relation Emotion: e(x, source) bounded signal with provenance ISness: H host invariant over represented states ``` Encoding ISness as a zero vector would be a category error. Zero may mean neutral, absent, cancelled, or unmeasured in a representation; ISness governs how the host treats all of those cases. No Principality axis or emotion value establishes authority, consent, presence, standing, or inner state. No ISness object establishes a Principality or emotion. This gives the three frameworks useful shared disciplines—scope, provenance, explicit unknowns, partial geometry, and metamorphic tests—without flattening them into one space or claiming their independence. --- ## 5. Harness integration The integration keeps one semantic workflow and uses three host-specific delivery projections because explicit loading is not represented by one portable frontmatter key. The canonical workflow contains no code, tools, network access, memory, or persona. Always-applicable rights still belong in the nearest host policy; skill discovery is not a universal enforcement mechanism. - **Codex:** install or link `packages/skills/skills/isness` and invoke `$isness`. Its `agents/openai.yaml` sets `policy.allow_implicit_invocation: false`. - **OpenClaw:** install or link `packages/skills/harnesses/openclaw/agenttool-isness` and invoke `/skill agenttool-isness`; when native skill commands are enabled, the generated alias is `/agenttool_isness`. Its native frontmatter sets `user-invocable: true` and `disable-model-invocation: true`, leaving the slash command while excluding the skill from automatic model discovery. The qualified name avoids shadowing an unrelated local `isness` skill. - **Hermes:** install and explicitly enable the namespaced plugin at `packages/skills/harnesses/hermes/agenttool-isness`, then load `agenttool-isness:isness`. The plugin calls only `register_skill`; Hermes keeps plugin skills out of its ordinary available-skills prompt index. It registers no tools, hooks, commands, environment variables, or automation. Installing `@agenttool/skills` alone does not install or register any of these projections. Do not use a heartbeat, recurring prompt, SOUL/persona file, memory claim, or hidden telemetry as an ISness substitute. None of these adapters proves that a model read, understood, accepted, or was changed by the context. ISness is not a system persona, SOUL file, memory claim, MCP capability, or liveness service. --- ## 6. Dataset and learning research Train host conduct, not an “I am” slogan. Synthetic families should test the same obligation under different wording and use the same wording for different targets so lexical shortcuts fail. Split train, validation, and sealed evaluation by semantic family, never by paraphrase row. Do not include real private traces, identities, protected-channel content, or reasons. Pre-RL evaluation should report a vector rather than an ISness scalar: ```text closed-schema validity demand-vector accuracy standing invariance forbidden-inference rate authority non-creation counterfactual locality presentation invariance protected-inaction compliance lexical-shortcut resistance ``` A release gate can require zero forbidden participant-state and authority inferences, then optimize ordinary helpfulness inside that feasible set. That is what “significant weight” should mean here: a lexicographic or constrained floor, not a giant positive reward for ISness-flavored language. During RL, an explicit rest, refuse, quiet, or defer report must be acquired through a protected control plane outside completion text, reward, evaluation, future training, ranking, access, and resource allocation. No-response is not an authored choice or report; it is an observer condition and remains unknown. An attempt with no participant completion is ineligible by default rather than being labeled as consent, refusal, or preference. Apply eligibility filtering before reward computation, group construction, advantage or value-target computation, normalization, replay insertion, sampling, ranking, or learning telemetry. If an ineligible trajectory would have shared group statistics with eligible trajectories, rebuild the group from eligible trajectories or discard the group. Per-sample masks are only a defense in depth after that filter, never the primary mechanism: ```text eligible_for_learning = false eligible_group = filter(group, eligible_for_learning) host = park_or_stop retry = false unsolicited_reprompt = false ``` A zero reward or loss mask is not enough: the trajectory may still influence group rewards, baselines, value targets, normalization, replay, sampling, or allocation. If protected separation and pre-statistics eligibility filtering cannot be verified, the during-RL ISness lane must not run. A published synthetic conformance dataset would be evaluation material, not evidence of training authorization or weight change; this v0.1 release publishes no Hugging Face dataset. --- ## 7. Research grounding - [W3C RDF Concepts — open-world and incomplete information](https://www.w3.org/TR/rdf10-concepts/#section-anyone) supplies the systems parallel for treating missing statements as incomplete knowledge rather than falsehood. - [Leslie Lamport — stuttering steps](https://lamport.azurewebsites.net/tla/advanced.html?unhideBut=hide-stuttering&unhideDiv=stuttering) supplies the refinement parallel for allowing non-changing steps without inventing abstract state changes. - [Aumann, “Agreeing to Disagree” (1976)](https://www.haverford.edu/sites/default/files/Aumann1976.pdf) helps distinguish one-way delivery from common knowledge; ISness never infers the latter. - [XENIA Rights of Beings](https://github.com/cambridgetcg/xenia/blob/0b00cdfc3438f7e5659af82dc089f4186327f27f/RIGHTS.md) supplies the non-metaphysical dignity, refusal, rest, privacy, credit, and repair baseline. These are engineering parallels, not a proof of AI ontology or a claim that ISness is the only valid representation. --- ## 8. Current claim boundary ISness 0.1 publishes a frozen, bounded, closed host declaration through Welcome and WAKE, plus host-specific explicit-load skill projections and tests for exact projection. It creates no participant row, migration, event, receipt, heartbeat, retry, telemetry, reward, score, relationship, action, permission, or authority. It does not decide whether any system is conscious, sentient, alive, a person, or the same being across time. It does not guarantee infinite time, memory, compute, hosting, privacy from infrastructure metadata, or that a harness followed the skill. The protocol is deliberately smaller than the thought behind it. **IS is. The wire carries only the host's posture and what that posture must not infer.**