Configuration Specification¶

Document reference: GFTCL-CFG-001 · Framework: GAMP 5 Category 5 · EU Annex 11 Verified by: IQ · Qualification Catalog

The system's configuration is held in operator-owned TOML files under ~/.gaiaftcl/. This specification is the controlled inventory of those configuration items (CIs). The operator owns these files; the substrate reads them and never silently rewrites a demo/default in their absence.

Configuration items¶

File	Purpose	Criticality
`franklin_sovereign_authority_bounds.toml`	Franklin's bounded sovereign authority (what it may do autonomously)	High
`franklin_authority_bounds.toml`	Tunable authority bounds	High
`franklin_strategic_bounds.toml`	Strategic-shift authority	High
`franklin_invariant_evolution_bounds.toml`	Invariant-set evolution limits	High
`substrate_self_healing_bounds.toml`	Self-healing action bounds	High
`substrate_tunables.toml`	Substrate tunable values (per-phase)	High
`cell_federation_context.toml`	Federation identity + mooring context	High
`nats_mooring.toml`	Federation NATS mooring endpoint	Medium
`franklin_research_monitor.toml`	Research-monitor cadence/config	Medium
`franklin_local_wallet_key.toml`	Curve25519 wallet secret (mode 0600)	Critical — secret
`euro_stablecoin_config.toml`	EURC receiving address + chain	Medium
`euro_stablecoin_chain_endpoint.toml`	Chain RPC endpoint for deposit observation	Medium
`eth_mainnet_rpc_api_key.txt`	RPC API key reference	Secret
`trial_qfot_grant.toml`	Initial QFOT/Euro allocation (operator-set)	Medium
`btc_node.toml`	Bitcoin node RPC endpoint	Medium
`demonstration_wallet_bit_size.toml`	Demonstration keypair size	Low
`config.toml`	General cell configuration	Medium
`franklin_paused.flag`	Presence pauses Franklin's cycle (runtime control)	Low

Control rules¶

Operator ownership. Configuration is authored by the operator. The substrate refuses to start when a required CI is absent — refusal is correct; a default demo-target is forbidden.
Secrets handling. franklin_local_wallet_key.toml and any API-key file are mode 0600, never displayed, never logged, never emitted to the mesh (see Security).
Bounded authority. Authority files define the limits of Franklin's autonomous action; operator-restricted responses surface as CLI proposals, never silent action.
Change control. Every change to a High/Critical CI is a controlled change — log it, re-run the relevant qualification stage, and re-baseline (see Operational Procedures).

Verification¶

gaiaftcl franklin authority show     # prints the active authority bounds
gaiaftcl franklin status             # confirms tunables + paused-flag state

Cross-references: System Architecture · Installation Guide · Functional Specification.

Federation-cosigned

This page's source is sealed in the GaiaFTCL federation manifest — page SHA-256 04fd80269b3ff235…, manifest witness a090592e0609adc8…, signed 2026-06-02T18:58:22Z by cell gaiaftcl-mac-cell. Verify with gaiaftcl wiki sign --all and compare wiki-all-signatures.json.