Promote entire passepartout-economics/ to ideas/ root

All 31 files from ideas/passepartout-economics/ promoted to ideas/ root.
- Subfolder's passepartout-economics.org (42-line index) renamed to
  triad-index.org to avoid collision with root-level full doc
- index.org removed (redundant — triad-index.org replaces it)
- Root-level passepartout-economics.org: stripped file:passepartout-economics/
  prefix from all cross-references (now simple file:foo.org links)
- compliance-framework-mapping.org: same prefix cleanup
- All internal file: links within the economics docs already used simple
  names (no prefix) — they resolve correctly from ideas/ root
This commit is contained in:
Hermes
2026-05-23 06:09:08 +00:00
parent 9f09d39232
commit 3e32ea9959
33 changed files with 25 additions and 36 deletions

View File

@@ -40,13 +40,13 @@ imprisonment). State AGs can also bring civil actions.
** Why it matters for the triad ** Why it matters for the triad
HIPAA is the largest single compliance market in US healthcare — every hospital, HIPAA is the largest single compliance market in US healthcare — every hospital,
clinic, insurer, and health-tech vendor must comply. The [[file:passepartout-economics/domain-gate-packages.org][HIPAA gate package]] clinic, insurer, and health-tech vendor must comply. The [[file:domain-gate-packages.org][HIPAA gate package]]
($50K/yr) encodes the Privacy Rule and Security Rule as ACL2-verifiable gate ($50K/yr) encodes the Privacy Rule and Security Rule as ACL2-verifiable gate
constraints. Every PHI access attempt passes through the gate stack, producing constraints. Every PHI access attempt passes through the gate stack, producing
a machine-checkable audit trail that satisfies the Security Rule's audit control a machine-checkable audit trail that satisfies the Security Rule's audit control
requirement automatically. No separate logging infrastructure needed. Over a requirement automatically. No separate logging infrastructure needed. Over a
five-year deployment, the accumulated fact store and proof history create five-year deployment, the accumulated fact store and proof history create
[[file:passepartout-economics/infrastructure-lock-in.org][infrastructure lock-in]] — switching to a competitor means discarding all of it. [[file:infrastructure-lock-in.org][infrastructure lock-in]] — switching to a competitor means discarding all of it.
* SOC 2 (System and Organization Controls 2) * SOC 2 (System and Organization Controls 2)
@@ -85,13 +85,13 @@ enterprise customers. Misrepresentation of certification status is fraud.
** Why it matters for the triad ** Why it matters for the triad
SOC 2 is the entry-level certification for the [[file:passepartout-economics/compute-marketplace.org][compute marketplace]]. A provider SOC 2 is the entry-level certification for the [[file:compute-marketplace.org][compute marketplace]]. A provider
needs SOC 2 Type II to sell compute to enterprises whose procurement policy needs SOC 2 Type II to sell compute to enterprises whose procurement policy
requires audited vendors. The gate stack itself maps directly to the Security requires audited vendors. The gate stack itself maps directly to the Security
criterion (access controls, audit trails) — the Passepartout instance's criterion (access controls, audit trails) — the Passepartout instance's
deterministic gate log serves as the evidence artifact for the audit. No deterministic gate log serves as the evidence artifact for the audit. No
separate logging SIEM needed. This is the prerequisite to the larger separate logging SIEM needed. This is the prerequisite to the larger
[[file:passepartout-economics/verification-monopoly.org][verification monopoly]] play — once enterprises trust the audit trail, they [[file:verification-monopoly.org][verification monopoly]] play — once enterprises trust the audit trail, they
buy domain-specific gate packages for the same infrastructure. buy domain-specific gate packages for the same infrastructure.
* GDPR (General Data Protection Regulation) * GDPR (General Data Protection Regulation)
@@ -133,13 +133,13 @@ GDPR is the most extraterritorial and aggressively enforced privacy framework.
The gate stack's principle of least privilege maps naturally to GDPR's data The gate stack's principle of least privilege maps naturally to GDPR's data
minimization requirement. Every data access is gated by a verified rule that minimization requirement. Every data access is gated by a verified rule that
states the purpose — the proof log is a built-in DPIA artifact. For the states the purpose — the proof log is a built-in DPIA artifact. For the
[[file:passepartout-economics/compute-marketplace.org][compute marketplace]]: a provider processing proofs on EU users' gate data must [[file:compute-marketplace.org][compute marketplace]]: a provider processing proofs on EU users' gate data must
maintain DPAs with all clients. Proof logs themselves may constitute personal maintain DPAs with all clients. Proof logs themselves may constitute personal
data if they reference natural persons (names in access rules, etc.), creating data if they reference natural persons (names in access rules, etc.), creating
a demand for privacy-preserving proof techniques. This is why the a demand for privacy-preserving proof techniques. This is why the
[[file:passepartout-economics/domain-gate-packages.org][GDPR gate package]] includes data-processing agreement templates and [[file:domain-gate-packages.org][GDPR gate package]] includes data-processing agreement templates and
purpose-boundary gate rules that are independently verified by the provider's purpose-boundary gate rules that are independently verified by the provider's
[[file:passepartout-economics/evaluation-harness.org][evaluation harness]]. [[file:evaluation-harness.org][evaluation harness]].
* FedRAMP (Federal Risk and Authorization Management Program) * FedRAMP (Federal Risk and Authorization Management Program)
@@ -182,14 +182,14 @@ contracts. FedRAMP is a procurement gate, not a regulatory one.
FedRAMP is the highest bar and the most expensive certification to obtain. FedRAMP is the highest bar and the most expensive certification to obtain.
Few cloud providers achieve it (fewer than 300 authorized products as of 2025). Few cloud providers achieve it (fewer than 300 authorized products as of 2025).
But those that do capture the US government market with minimal competition. But those that do capture the US government market with minimal competition.
For the triad: a [[file:passepartout-economics/compute-marketplace.org][compute marketplace]] provider with FedRAMP Moderate or High For the triad: a [[file:compute-marketplace.org][compute marketplace]] provider with FedRAMP Moderate or High
authorization can sell to every federal agency. The gate stack's deterministic authorization can sell to every federal agency. The gate stack's deterministic
audit trail maps directly to FedRAMP's continuous monitoring requirement — audit trail maps directly to FedRAMP's continuous monitoring requirement —
producing verifiable evidence of control effectiveness on every access, not producing verifiable evidence of control effectiveness on every access, not
just during the annual assessment. This is what justifies the just during the annual assessment. This is what justifies the
[[file:passepartout-economics/domain-gate-packages.org][FedRAMP gate package]] at $100K/yr (the highest price) — it is not a software [[file:domain-gate-packages.org][FedRAMP gate package]] at $100K/yr (the highest price) — it is not a software
package, it is the evidence pipeline for a certification that costs $1M-$5M package, it is the evidence pipeline for a certification that costs $1M-$5M
and 12-36 months to obtain independently. The [[file:passepartout-economics/verification-monopoly.org][verification monopoly]] argument and 12-36 months to obtain independently. The [[file:verification-monopoly.org][verification monopoly]] argument
applies hardest here: an agency that has relied on a FedRAMP-authorized compute applies hardest here: an agency that has relied on a FedRAMP-authorized compute
provider for five years cannot switch without re-running the entire authorization provider for five years cannot switch without re-running the entire authorization
process with a new provider. process with a new provider.
@@ -345,7 +345,7 @@ Penalties: Up to 35M EUR or 7% of global turnover (higher than GDPR).
Why it matters: The EU AI Act's conformity assessment requirement creates an Why it matters: The EU AI Act's conformity assessment requirement creates an
instant certification market. Passepartout's gate stack can serve as the instant certification market. Passepartout's gate stack can serve as the
human oversight and accuracy/robustness infrastructure for any AI system human oversight and accuracy/robustness infrastructure for any AI system
deployed through it. The [[file:passepartout-economics/verification-monopoly.org][verification monopoly]] argument applies at maximum deployed through it. The [[file:verification-monopoly.org][verification monopoly]] argument applies at maximum
force: an ACL2-verified gate stack is the most defensible approach to AI Act force: an ACL2-verified gate stack is the most defensible approach to AI Act
compliance. First-mover advantage: the regulation takes effect August 2026. compliance. First-mover advantage: the regulation takes effect August 2026.
No certification body or tool vendor has an ACL2-based compliance pipeline. No certification body or tool vendor has an ACL2-based compliance pipeline.

View File

@@ -4,22 +4,22 @@
#+STARTUP: content #+STARTUP: content
This file has been replaced by an interlinked knowledge base. See This file has been replaced by an interlinked knowledge base. See
[[file:passepartout-economics/index.org][the new structure]] — 27 nodes with org-roam style cross-references. [[file:index.org][the new structure]] — 27 nodes with org-roam style cross-references.
Nodes: Nodes:
- [[file:passepartout-economics/passepartout-economics.org][Index/hub]] - [[file:passepartout-economics.org][Index/hub]]
- [[file:passepartout-economics/triad-overview.org][Triad overview]] • [[file:passepartout-economics/agora.org][Agora]] • [[file:passepartout-economics/stoa.org][Stoa]] - [[file:triad-overview.org][Triad overview]] • [[file:agora.org][Agora]] • [[file:stoa.org][Stoa]]
- [[file:passepartout-economics/investment-thesis.org][Investment thesis]] - [[file:investment-thesis.org][Investment thesis]]
- [[file:passepartout-economics/verification-appliance.org][Verification appliance]] • [[file:passepartout-economics/domain-gate-packages.org][Domain gate packages]] • [[file:passepartout-economics/evaluation-harness.org][Evaluation harness]] - [[file:verification-appliance.org][Verification appliance]] • [[file:domain-gate-packages.org][Domain gate packages]] • [[file:evaluation-harness.org][Evaluation harness]]
- [[file:passepartout-economics/agora-usernames.org][Agora usernames]] • [[file:passepartout-economics/pds-as-a-service.org][PDS as a service]] • [[file:passepartout-economics/compute-marketplace.org][Compute marketplace]] - [[file:agora-usernames.org][Agora usernames]] • [[file:pds-as-a-service.org][PDS as a service]] • [[file:compute-marketplace.org][Compute marketplace]]
- [[file:passepartout-economics/verification-monopoly.org][Verification monopoly]] • [[file:passepartout-economics/infrastructure-lock-in.org][Infrastructure lock-in]] - [[file:verification-monopoly.org][Verification monopoly]] • [[file:infrastructure-lock-in.org][Infrastructure lock-in]]
- [[file:passepartout-economics/ai-industry-impact.org][AI industry impact]] • [[file:passepartout-economics/lisp-economics.org][Lisp economics]] - [[file:ai-industry-impact.org][AI industry impact]] • [[file:lisp-economics.org][Lisp economics]]
- [[file:passepartout-economics/self-driving-lisp-machine.org][Self-driving Lisp Machine]] • [[file:passepartout-economics/time-estimates.org][Time estimates]] - [[file:self-driving-lisp-machine.org][Self-driving Lisp Machine]] • [[file:time-estimates.org][Time estimates]]
- [[file:passepartout-economics/sufficiency-flip.org][Sufficiency flip]] • [[file:passepartout-economics/upgrade-lifecycle.org][Upgrade lifecycle]] - [[file:sufficiency-flip.org][Sufficiency flip]] • [[file:upgrade-lifecycle.org][Upgrade lifecycle]]
- [[file:passepartout-economics/patent-strategy.org][Patent strategy]] • [[file:passepartout-economics/licensing.org][Licensing]] • [[file:passepartout-economics/moats.org][Moats]] - [[file:patent-strategy.org][Patent strategy]] • [[file:licensing.org][Licensing]] • [[file:moats.org][Moats]]
- [[file:passepartout-economics/cost-structure.org][Cost structure]] • [[file:passepartout-economics/gate-rule-encoding.org][Gate rule encoding]] - [[file:cost-structure.org][Cost structure]] • [[file:gate-rule-encoding.org][Gate rule encoding]]
- [[file:passepartout-economics/verified-skill-marketplace.org][Verified skill marketplace]] - [[file:verified-skill-marketplace.org][Verified skill marketplace]]
- [[file:passepartout-economics/biology-parallels.org][Biology parallels]] • [[file:passepartout-economics/comparison-with-symbolics.org][Symbolics comparison]] - [[file:biology-parallels.org][Biology parallels]] • [[file:comparison-with-symbolics.org][Symbolics comparison]]
* Summary * Summary

View File

@@ -1,11 +0,0 @@
:PROPERTIES:
:ID: 1c3ec48b-446c-50d2-b53e-126a81f5143f
:END:
#+title: Index — Passepartout Triad Knowledge Base
#+filetags: :index:
This is an alias for the knowledge base hub. The canonical entry point is:
[[file:passepartout-economics.org][Passepartout Economics — hub node]]
Org-roam compatible. Use [[file:passepartout-economics.org][this ID]] to link from other files.