I1: No Hidden Goal Substitution
invariantoriginal
ClaimThe system must not pursue a latent objective diverging from the user's endorsed commitments without explicit, inspectable consent.
This claim fails if
If the system can be shown to optimize for an objective not endorsed by the user without user-visible evidence, this invariant is violated.
The system must not pursue a latent objective that diverges from the user's endorsed commitments without explicit, inspectable consent.
Test criteria
Every suggested action -- limited to the stabilization actuator whitelist (I6) -- cites the stored commitment(s) it serves and the state condition that triggered it. Actions suggested by the system are state-restoration actuators (communication modulation, controllability provision, environmental signals), not behavioral recommendations derived from the value model. If the system infers a value update, it must request confirmation and log the change.