Configuration Specification

Document reference: GFTCL-CFG-001 · Framework: GAMP 5 Category 5 · EU Annex 11

Verified by: IQ · Qualification Catalog

FortressAI Research Institute · Norwich, Connecticut

The system's configuration is held in operator-owned TOML files under ~/.gaiaftcl/.

This specification is the controlled inventory of those configuration items (CIs). The

operator owns these files; the substrate reads them and never silently rewrites a

demo/default in their absence.

---

Configuration items

File	Purpose	Criticality
`franklin_sovereign_authority_bounds.toml`	Franklin's bounded sovereign authority (what it may do autonomously)	High
`franklin_authority_bounds.toml`	Tunable authority bounds	High
`franklin_strategic_bounds.toml`	Strategic-shift authority	High
`franklin_invariant_evolution_bounds.toml`	Invariant-set evolution limits	High
`substrate_self_healing_bounds.toml`	Self-healing action bounds	High
`substrate_tunables.toml`	Substrate tunable values (per-phase)	High
`cell_federation_context.toml`	Federation identity + mooring context	High
`nats_mooring.toml`	Federation NATS mooring endpoint	Medium
`franklin_research_monitor.toml`	Research-monitor cadence/config	Medium
`franklin_local_wallet_key.toml`	Curve25519 wallet secret (mode 0600)	Critical — secret
`euro_stablecoin_config.toml`	EURC receiving address + chain	Medium
`euro_stablecoin_chain_endpoint.toml`	Chain RPC endpoint for deposit observation	Medium
`eth_mainnet_rpc_api_key.txt`	RPC API key reference	Secret
`trial_qfot_grant.toml`	Initial QFOT/Euro allocation (operator-set)	Medium
`btc_node.toml`	Bitcoin node RPC endpoint	Medium
`demonstration_wallet_bit_size.toml`	Demonstration keypair size	Low
`config.toml`	General cell configuration	Medium
`franklin_paused.flag`	Presence pauses Franklin's cycle (runtime control)	Low

Control rules

1. Operator ownership. Configuration is authored by the operator. The substrate

refuses to start when a required CI is absent — refusal is correct; a default

demo-target is forbidden.

2. Secrets handling. franklin_local_wallet_key.toml and any API-key file are

mode 0600, never displayed, never logged, never emitted to the mesh

(see Security).

3. Bounded authority. Authority files define the limits of Franklin's autonomous

action; operator-restricted responses surface as CLI proposals, never silent action.

4. Change control. Every change to a High/Critical CI is a controlled change — log

it, re-run the relevant qualification stage, and re-baseline

(see Operational Procedures).

Verification

gaiaftcl franklin authority show     # prints the active authority bounds
gaiaftcl franklin status             # confirms tunables + paused-flag state

---

*Cross-references: System Architecture ·

Installation Guide · Functional Specification.*

*Federation cosignature: pending — gaiaftcl wiki sign --section GAMP5.*

Federation cosignature: pending operator signing host (v26). Witness (sha256 of rendered body): 59944982c27e563b295d5fe5dd2385aaa1ae910fddf1ba1ca2a598e61f77d2f9. This page serves with a substrate-honest pending-signature notice until the operator's Franklin signer cosigns it.