Promote entire passepartout-economics/ to ideas/ root
All 31 files from ideas/passepartout-economics/ promoted to ideas/ root. - Subfolder's passepartout-economics.org (42-line index) renamed to triad-index.org to avoid collision with root-level full doc - index.org removed (redundant — triad-index.org replaces it) - Root-level passepartout-economics.org: stripped file:passepartout-economics/ prefix from all cross-references (now simple file:foo.org links) - compliance-framework-mapping.org: same prefix cleanup - All internal file: links within the economics docs already used simple names (no prefix) — they resolve correctly from ideas/ root
This commit is contained in:
@@ -40,13 +40,13 @@ imprisonment). State AGs can also bring civil actions.
|
|||||||
** Why it matters for the triad
|
** Why it matters for the triad
|
||||||
|
|
||||||
HIPAA is the largest single compliance market in US healthcare — every hospital,
|
HIPAA is the largest single compliance market in US healthcare — every hospital,
|
||||||
clinic, insurer, and health-tech vendor must comply. The [[file:passepartout-economics/domain-gate-packages.org][HIPAA gate package]]
|
clinic, insurer, and health-tech vendor must comply. The [[file:domain-gate-packages.org][HIPAA gate package]]
|
||||||
($50K/yr) encodes the Privacy Rule and Security Rule as ACL2-verifiable gate
|
($50K/yr) encodes the Privacy Rule and Security Rule as ACL2-verifiable gate
|
||||||
constraints. Every PHI access attempt passes through the gate stack, producing
|
constraints. Every PHI access attempt passes through the gate stack, producing
|
||||||
a machine-checkable audit trail that satisfies the Security Rule's audit control
|
a machine-checkable audit trail that satisfies the Security Rule's audit control
|
||||||
requirement automatically. No separate logging infrastructure needed. Over a
|
requirement automatically. No separate logging infrastructure needed. Over a
|
||||||
five-year deployment, the accumulated fact store and proof history create
|
five-year deployment, the accumulated fact store and proof history create
|
||||||
[[file:passepartout-economics/infrastructure-lock-in.org][infrastructure lock-in]] — switching to a competitor means discarding all of it.
|
[[file:infrastructure-lock-in.org][infrastructure lock-in]] — switching to a competitor means discarding all of it.
|
||||||
|
|
||||||
* SOC 2 (System and Organization Controls 2)
|
* SOC 2 (System and Organization Controls 2)
|
||||||
|
|
||||||
@@ -85,13 +85,13 @@ enterprise customers. Misrepresentation of certification status is fraud.
|
|||||||
|
|
||||||
** Why it matters for the triad
|
** Why it matters for the triad
|
||||||
|
|
||||||
SOC 2 is the entry-level certification for the [[file:passepartout-economics/compute-marketplace.org][compute marketplace]]. A provider
|
SOC 2 is the entry-level certification for the [[file:compute-marketplace.org][compute marketplace]]. A provider
|
||||||
needs SOC 2 Type II to sell compute to enterprises whose procurement policy
|
needs SOC 2 Type II to sell compute to enterprises whose procurement policy
|
||||||
requires audited vendors. The gate stack itself maps directly to the Security
|
requires audited vendors. The gate stack itself maps directly to the Security
|
||||||
criterion (access controls, audit trails) — the Passepartout instance's
|
criterion (access controls, audit trails) — the Passepartout instance's
|
||||||
deterministic gate log serves as the evidence artifact for the audit. No
|
deterministic gate log serves as the evidence artifact for the audit. No
|
||||||
separate logging SIEM needed. This is the prerequisite to the larger
|
separate logging SIEM needed. This is the prerequisite to the larger
|
||||||
[[file:passepartout-economics/verification-monopoly.org][verification monopoly]] play — once enterprises trust the audit trail, they
|
[[file:verification-monopoly.org][verification monopoly]] play — once enterprises trust the audit trail, they
|
||||||
buy domain-specific gate packages for the same infrastructure.
|
buy domain-specific gate packages for the same infrastructure.
|
||||||
|
|
||||||
* GDPR (General Data Protection Regulation)
|
* GDPR (General Data Protection Regulation)
|
||||||
@@ -133,13 +133,13 @@ GDPR is the most extraterritorial and aggressively enforced privacy framework.
|
|||||||
The gate stack's principle of least privilege maps naturally to GDPR's data
|
The gate stack's principle of least privilege maps naturally to GDPR's data
|
||||||
minimization requirement. Every data access is gated by a verified rule that
|
minimization requirement. Every data access is gated by a verified rule that
|
||||||
states the purpose — the proof log is a built-in DPIA artifact. For the
|
states the purpose — the proof log is a built-in DPIA artifact. For the
|
||||||
[[file:passepartout-economics/compute-marketplace.org][compute marketplace]]: a provider processing proofs on EU users' gate data must
|
[[file:compute-marketplace.org][compute marketplace]]: a provider processing proofs on EU users' gate data must
|
||||||
maintain DPAs with all clients. Proof logs themselves may constitute personal
|
maintain DPAs with all clients. Proof logs themselves may constitute personal
|
||||||
data if they reference natural persons (names in access rules, etc.), creating
|
data if they reference natural persons (names in access rules, etc.), creating
|
||||||
a demand for privacy-preserving proof techniques. This is why the
|
a demand for privacy-preserving proof techniques. This is why the
|
||||||
[[file:passepartout-economics/domain-gate-packages.org][GDPR gate package]] includes data-processing agreement templates and
|
[[file:domain-gate-packages.org][GDPR gate package]] includes data-processing agreement templates and
|
||||||
purpose-boundary gate rules that are independently verified by the provider's
|
purpose-boundary gate rules that are independently verified by the provider's
|
||||||
[[file:passepartout-economics/evaluation-harness.org][evaluation harness]].
|
[[file:evaluation-harness.org][evaluation harness]].
|
||||||
|
|
||||||
* FedRAMP (Federal Risk and Authorization Management Program)
|
* FedRAMP (Federal Risk and Authorization Management Program)
|
||||||
|
|
||||||
@@ -182,14 +182,14 @@ contracts. FedRAMP is a procurement gate, not a regulatory one.
|
|||||||
FedRAMP is the highest bar and the most expensive certification to obtain.
|
FedRAMP is the highest bar and the most expensive certification to obtain.
|
||||||
Few cloud providers achieve it (fewer than 300 authorized products as of 2025).
|
Few cloud providers achieve it (fewer than 300 authorized products as of 2025).
|
||||||
But those that do capture the US government market with minimal competition.
|
But those that do capture the US government market with minimal competition.
|
||||||
For the triad: a [[file:passepartout-economics/compute-marketplace.org][compute marketplace]] provider with FedRAMP Moderate or High
|
For the triad: a [[file:compute-marketplace.org][compute marketplace]] provider with FedRAMP Moderate or High
|
||||||
authorization can sell to every federal agency. The gate stack's deterministic
|
authorization can sell to every federal agency. The gate stack's deterministic
|
||||||
audit trail maps directly to FedRAMP's continuous monitoring requirement —
|
audit trail maps directly to FedRAMP's continuous monitoring requirement —
|
||||||
producing verifiable evidence of control effectiveness on every access, not
|
producing verifiable evidence of control effectiveness on every access, not
|
||||||
just during the annual assessment. This is what justifies the
|
just during the annual assessment. This is what justifies the
|
||||||
[[file:passepartout-economics/domain-gate-packages.org][FedRAMP gate package]] at $100K/yr (the highest price) — it is not a software
|
[[file:domain-gate-packages.org][FedRAMP gate package]] at $100K/yr (the highest price) — it is not a software
|
||||||
package, it is the evidence pipeline for a certification that costs $1M-$5M
|
package, it is the evidence pipeline for a certification that costs $1M-$5M
|
||||||
and 12-36 months to obtain independently. The [[file:passepartout-economics/verification-monopoly.org][verification monopoly]] argument
|
and 12-36 months to obtain independently. The [[file:verification-monopoly.org][verification monopoly]] argument
|
||||||
applies hardest here: an agency that has relied on a FedRAMP-authorized compute
|
applies hardest here: an agency that has relied on a FedRAMP-authorized compute
|
||||||
provider for five years cannot switch without re-running the entire authorization
|
provider for five years cannot switch without re-running the entire authorization
|
||||||
process with a new provider.
|
process with a new provider.
|
||||||
@@ -345,7 +345,7 @@ Penalties: Up to 35M EUR or 7% of global turnover (higher than GDPR).
|
|||||||
Why it matters: The EU AI Act's conformity assessment requirement creates an
|
Why it matters: The EU AI Act's conformity assessment requirement creates an
|
||||||
instant certification market. Passepartout's gate stack can serve as the
|
instant certification market. Passepartout's gate stack can serve as the
|
||||||
human oversight and accuracy/robustness infrastructure for any AI system
|
human oversight and accuracy/robustness infrastructure for any AI system
|
||||||
deployed through it. The [[file:passepartout-economics/verification-monopoly.org][verification monopoly]] argument applies at maximum
|
deployed through it. The [[file:verification-monopoly.org][verification monopoly]] argument applies at maximum
|
||||||
force: an ACL2-verified gate stack is the most defensible approach to AI Act
|
force: an ACL2-verified gate stack is the most defensible approach to AI Act
|
||||||
compliance. First-mover advantage: the regulation takes effect August 2026.
|
compliance. First-mover advantage: the regulation takes effect August 2026.
|
||||||
No certification body or tool vendor has an ACL2-based compliance pipeline.
|
No certification body or tool vendor has an ACL2-based compliance pipeline.
|
||||||
|
|||||||
@@ -4,22 +4,22 @@
|
|||||||
#+STARTUP: content
|
#+STARTUP: content
|
||||||
|
|
||||||
This file has been replaced by an interlinked knowledge base. See
|
This file has been replaced by an interlinked knowledge base. See
|
||||||
[[file:passepartout-economics/index.org][the new structure]] — 27 nodes with org-roam style cross-references.
|
[[file:index.org][the new structure]] — 27 nodes with org-roam style cross-references.
|
||||||
|
|
||||||
Nodes:
|
Nodes:
|
||||||
- [[file:passepartout-economics/passepartout-economics.org][Index/hub]]
|
- [[file:passepartout-economics.org][Index/hub]]
|
||||||
- [[file:passepartout-economics/triad-overview.org][Triad overview]] • [[file:passepartout-economics/agora.org][Agora]] • [[file:passepartout-economics/stoa.org][Stoa]]
|
- [[file:triad-overview.org][Triad overview]] • [[file:agora.org][Agora]] • [[file:stoa.org][Stoa]]
|
||||||
- [[file:passepartout-economics/investment-thesis.org][Investment thesis]]
|
- [[file:investment-thesis.org][Investment thesis]]
|
||||||
- [[file:passepartout-economics/verification-appliance.org][Verification appliance]] • [[file:passepartout-economics/domain-gate-packages.org][Domain gate packages]] • [[file:passepartout-economics/evaluation-harness.org][Evaluation harness]]
|
- [[file:verification-appliance.org][Verification appliance]] • [[file:domain-gate-packages.org][Domain gate packages]] • [[file:evaluation-harness.org][Evaluation harness]]
|
||||||
- [[file:passepartout-economics/agora-usernames.org][Agora usernames]] • [[file:passepartout-economics/pds-as-a-service.org][PDS as a service]] • [[file:passepartout-economics/compute-marketplace.org][Compute marketplace]]
|
- [[file:agora-usernames.org][Agora usernames]] • [[file:pds-as-a-service.org][PDS as a service]] • [[file:compute-marketplace.org][Compute marketplace]]
|
||||||
- [[file:passepartout-economics/verification-monopoly.org][Verification monopoly]] • [[file:passepartout-economics/infrastructure-lock-in.org][Infrastructure lock-in]]
|
- [[file:verification-monopoly.org][Verification monopoly]] • [[file:infrastructure-lock-in.org][Infrastructure lock-in]]
|
||||||
- [[file:passepartout-economics/ai-industry-impact.org][AI industry impact]] • [[file:passepartout-economics/lisp-economics.org][Lisp economics]]
|
- [[file:ai-industry-impact.org][AI industry impact]] • [[file:lisp-economics.org][Lisp economics]]
|
||||||
- [[file:passepartout-economics/self-driving-lisp-machine.org][Self-driving Lisp Machine]] • [[file:passepartout-economics/time-estimates.org][Time estimates]]
|
- [[file:self-driving-lisp-machine.org][Self-driving Lisp Machine]] • [[file:time-estimates.org][Time estimates]]
|
||||||
- [[file:passepartout-economics/sufficiency-flip.org][Sufficiency flip]] • [[file:passepartout-economics/upgrade-lifecycle.org][Upgrade lifecycle]]
|
- [[file:sufficiency-flip.org][Sufficiency flip]] • [[file:upgrade-lifecycle.org][Upgrade lifecycle]]
|
||||||
- [[file:passepartout-economics/patent-strategy.org][Patent strategy]] • [[file:passepartout-economics/licensing.org][Licensing]] • [[file:passepartout-economics/moats.org][Moats]]
|
- [[file:patent-strategy.org][Patent strategy]] • [[file:licensing.org][Licensing]] • [[file:moats.org][Moats]]
|
||||||
- [[file:passepartout-economics/cost-structure.org][Cost structure]] • [[file:passepartout-economics/gate-rule-encoding.org][Gate rule encoding]]
|
- [[file:cost-structure.org][Cost structure]] • [[file:gate-rule-encoding.org][Gate rule encoding]]
|
||||||
- [[file:passepartout-economics/verified-skill-marketplace.org][Verified skill marketplace]]
|
- [[file:verified-skill-marketplace.org][Verified skill marketplace]]
|
||||||
- [[file:passepartout-economics/biology-parallels.org][Biology parallels]] • [[file:passepartout-economics/comparison-with-symbolics.org][Symbolics comparison]]
|
- [[file:biology-parallels.org][Biology parallels]] • [[file:comparison-with-symbolics.org][Symbolics comparison]]
|
||||||
|
|
||||||
* Summary
|
* Summary
|
||||||
|
|
||||||
|
|||||||
@@ -1,11 +0,0 @@
|
|||||||
:PROPERTIES:
|
|
||||||
:ID: 1c3ec48b-446c-50d2-b53e-126a81f5143f
|
|
||||||
:END:
|
|
||||||
#+title: Index — Passepartout Triad Knowledge Base
|
|
||||||
#+filetags: :index:
|
|
||||||
|
|
||||||
This is an alias for the knowledge base hub. The canonical entry point is:
|
|
||||||
|
|
||||||
[[file:passepartout-economics.org][Passepartout Economics — hub node]]
|
|
||||||
|
|
||||||
Org-roam compatible. Use [[file:passepartout-economics.org][this ID]] to link from other files.
|
|
||||||
Reference in New Issue
Block a user