Functional Specification (FS)
Document reference: GFTCL-FS-001 · Framework: GAMP 5 Category 5 · EU Annex 11
Verified by: OQ — Operational Qualification
FortressAI Research Institute · Norwich, Connecticut
Patents: USPTO 19/460,960 · USPTO 19/096,071 — © 2026 Richard Gillespie
This specification states how the system satisfies each
user requirement, in functional terms verified by
OQ. Each FS item traces up to a URS item and down to qualification evidence.
---
FS-01 · Native substrate execution
Franklin.app boots the vQbit VM, which composes M⁸ = S⁴ × C⁴ measurements on Apple
silicon via the VQbit compute module. The VM emits gaiaftcl.vqbit.vm.ready when
moored. *(URS-F01 → OQ-001)*
FS-02 · Sovereign autonomous operation
FranklinConsciousnessService fires Franklin's heartbeat on a fixed cadence. Per tick,
Franklin reads substrate-wide evidence, authorizes substrate-development within the
bounds in ~/.gaiaftcl/franklin_sovereign_authority_bounds.toml, applies it, and seals
a V184 franklin_heartbeat_history row. The state machine is `proposed →
franklin_authorized → substrate_in_development → landed → franklin_authority_active`
(or franklin_rejected / rolled-back). *(URS-F02 → OQ-005)*
FS-03 · Operator CLI
gaiaftcl ingests operator commands as comms projections and projects Franklin's
response back. Top-level groups: franklin, qc, qc020, substrate, shor, pq,
wallet, subscription, mesh, cell, wiki. Full grammar in the
CLI Reference. *(URS-F03)*
FS-04 · Algorithm rail
The 19 C⁴-rail algorithms and QC-020/QC-021 are composed inside the vQbit VM and
evaluated through qc_algorithm_evaluation_history (V181). Per-algorithm invariants
extend the eight UUM-8D foundational invariants. See the
Algorithm Rail Map. *(URS-F04 → MQ)*
FS-05 · Self-custody wallet
On cell sprout the substrate composes a Curve25519 wallet keypair, UUM-8D-bound,
persisted at ~/.gaiaftcl/franklin_local_wallet_key.toml mode 0600. State is V209;
movements are V210; mesh QFOT is V195. The substrate refuses to expose the private key
through any CLI direction. *(URS-F05 → Wallet PQ Proof)*
FS-06 · Post-quantum demonstration
shor break-classical recovers a secp256k1 scalar from its public point (V188);
wallet pq migrate issues an ML-DSA / SLH-DSA keypair + P2PQH address (V189);
shor prove-pq-safe shows the same attack has no period to recover (V190). *(URS-F06)*
Data-integrity functions (FS-Dxx)
| FS | Function | Mechanism |
|---|---|---|
| FS-D01 | Append-only | BEFORE UPDATE/DELETE … RAISE(ABORT) triggers on every table |
| FS-D02 | Tamper-evidence | canonical_witness → witness_hash_sha256 (SHA-256) per row |
| FS-D03 | Attribution | signature_quintet federation cosignature per row |
| FS-D04 | Exact arithmetic | IntRational canonical num/den; floats refused at column |
| FS-D05 | Replay | V172 anchors every N=100 measurements; qc020 replay re-verifies |
Security functions (FS-Sxx)
- FS-S01 — key material flows only through Keychain /
SecRandomCopyBytes/ mode-0600
files; never to output, logs, or NATS.
- FS-S02 — no
testnet/regtest/signet/simulation_modesymbols in the
production binary (pre-commit audit gate).
- FS-S03 — authority is read from operator-owned
~/.gaiaftcl/*.toml; the daemon
refuses to start if required config is absent.
Constitutional function (FS-C02)
PureOOConstitutionalFloor evaluates C-007…C-010 per measurement and records V174
rows; breaching operations are refused autonomously.
---
*Federation cosignature: pending — gaiaftcl wiki sign --section GAMP5.*
eb71afda96078badfaeccbb34c68065f33eb2886fcec4772aad3c1ea03240e50.
This page serves with a substrate-honest pending-signature notice until the operator's Franklin signer cosigns it.