Functional Specification (FS)¶

Document reference: GFTCL-FS-001 · Framework: GAMP 5 Category 5 · EU Annex 11 Verified by: OQ — Operational Qualification

This specification states how the system satisfies each user requirement, in functional terms verified by OQ. Each FS item traces up to a URS item and down to qualification evidence.

FS-01 · Native substrate execution¶

Franklin.app boots the vQbit VM, which composes M⁸ = S⁴ × C⁴ measurements on Apple silicon via the VQbit compute module. The VM emits gaiaftcl.vqbit.vm.ready when moored. (URS-F01 → OQ-001)

FS-02 · Sovereign autonomous operation¶

FranklinConsciousnessService fires Franklin's heartbeat on a fixed cadence. Per tick, Franklin reads substrate-wide evidence, authorizes substrate-development within the bounds in ~/.gaiaftcl/franklin_sovereign_authority_bounds.toml, applies it, and seals a V184 franklin_heartbeat_history row. The state machine is proposed → franklin_authorized → substrate_in_development → landed → franklin_authority_active (or franklin_rejected / rolled-back). (URS-F02 → OQ-005)

FS-03 · Operator CLI¶

gaiaftcl ingests operator commands as comms projections and projects Franklin's response back. Top-level groups: franklin, qc, qc020, substrate, shor, pq, wallet, subscription, mesh, cell, wiki. Full grammar in the CLI Reference. (URS-F03)

FS-04 · Algorithm rail¶

The 19 C⁴-rail algorithms and QC-020/QC-021 are composed inside the vQbit VM and evaluated through qc_algorithm_evaluation_history (V181). Per-algorithm invariants extend the eight UUM-8D foundational invariants. See the Algorithm Rail Map. (URS-F04 → MQ)

FS-05 · Self-custody wallet¶

On cell sprout the substrate composes a Curve25519 wallet keypair, UUM-8D-bound, persisted at ~/.gaiaftcl/franklin_local_wallet_key.toml mode 0600. State is V209; movements are V210; mesh QFOT is V195. The substrate refuses to expose the private key through any CLI direction. (URS-F05 → Wallet PQ Proof)

FS-06 · Post-quantum demonstration¶

shor break-classical recovers a secp256k1 scalar from its public point (V188); wallet pq migrate issues an ML-DSA / SLH-DSA keypair + P2PQH address (V189); shor prove-pq-safe shows the same attack has no period to recover (V190). (URS-F06)

Data-integrity functions (FS-Dxx)¶

FS	Function	Mechanism
FS-D01	Append-only	`BEFORE UPDATE/DELETE … RAISE(ABORT)` triggers on every table
FS-D02	Tamper-evidence	`canonical_witness` → `witness_hash_sha256` (SHA-256) per row
FS-D03	Attribution	`signature_quintet` federation cosignature per row
FS-D04	Exact arithmetic	`IntRational` canonical `num/den`; floats refused at column
FS-D05	Replay	V172 anchors every N=100 measurements; `qc020 replay` re-verifies

Security functions (FS-Sxx)¶

FS-S01 — key material flows only through Keychain / SecRandomCopyBytes / mode-0600 files; never to output, logs, or NATS.
FS-S02 — no testnet/regtest/signet/simulation_mode symbols in the production binary (pre-commit audit gate).
FS-S03 — authority is read from operator-owned ~/.gaiaftcl/*.toml; the daemon refuses to start if required config is absent.

Constitutional function (FS-C02)¶

PureOOConstitutionalFloor evaluates C-007…C-010 per measurement and records V174 rows; breaching operations are refused autonomously.

Federation-cosigned

This page's source is sealed in the GaiaFTCL federation manifest — page SHA-256 1e275c39cad298dd…, manifest witness a090592e0609adc8…, signed 2026-06-02T18:58:22Z by cell gaiaftcl-mac-cell. Verify with gaiaftcl wiki sign --all and compare wiki-all-signatures.json.