Evaluator controls
Holdouts, scoring, hardware capture, time and action budgets, negative controls, and identity of the judge.
Independent evaluation
Protocol, not persuasion
Freeze
Post-freeze challenge
Same budget
Ablate
Restore + restart
External verdict
DRENDA controls
The system may inspect permitted inputs and act only through scoped interfaces. It may not rewrite the judge or expand authority.
Required evidence
Inputs, outputs, event identity, hashes, resource measurements, candidate provenance, receipts, restart result, and limitations.
Verdicts
FAIL, OBSERVATION_ONLY, CAUSAL_GAIN, TRANSFERABLE_GAIN, or INDEPENDENTLY_REPRODUCED.