Functional Specification (FS)

Document reference: GFTCL-FS-001 · Framework: GAMP 5 Category 5 · EU Annex 11
Verified by: OQ — Operational Qualification

FortressAI Research Institute · Norwich, Connecticut

Patents: USPTO 19/460,960 · USPTO 19/096,071 — © 2026 Richard Gillespie

This specification states how the system satisfies each

user requirement, in functional terms verified by

OQ. Each FS item traces up to a URS item and down to qualification evidence.

---

FS-01 · Native substrate execution

Franklin.app boots the vQbit VM, which composes M⁸ = S⁴ × C⁴ measurements on Apple

silicon via the VQbit compute module. The VM emits gaiaftcl.vqbit.vm.ready when

moored. *(URS-F01 → OQ-001)*

FS-02 · Sovereign autonomous operation

FranklinConsciousnessService fires Franklin's heartbeat on a fixed cadence. Per tick,

Franklin reads substrate-wide evidence, authorizes substrate-development within the

bounds in ~/.gaiaftcl/franklin_sovereign_authority_bounds.toml, applies it, and seals

a V184 franklin_heartbeat_history row. The state machine is `proposed →

franklin_authorized → substrate_in_development → landed → franklin_authority_active`

(or franklin_rejected / rolled-back). *(URS-F02 → OQ-005)*

FS-03 · Operator CLI

gaiaftcl ingests operator commands as comms projections and projects Franklin's

response back. Top-level groups: franklin, qc, qc020, substrate, shor, pq,

wallet, subscription, mesh, cell, wiki. Full grammar in the

CLI Reference. *(URS-F03)*

FS-04 · Algorithm rail

The 19 C⁴-rail algorithms and QC-020/QC-021 are composed inside the vQbit VM and

evaluated through qc_algorithm_evaluation_history (V181). Per-algorithm invariants

extend the eight UUM-8D foundational invariants. See the

Algorithm Rail Map. *(URS-F04 → MQ)*

FS-05 · Self-custody wallet

On cell sprout the substrate composes a Curve25519 wallet keypair, UUM-8D-bound,

persisted at ~/.gaiaftcl/franklin_local_wallet_key.toml mode 0600. State is V209;

movements are V210; mesh QFOT is V195. The substrate refuses to expose the private key

through any CLI direction. *(URS-F05 → Wallet PQ Proof)*

FS-06 · Post-quantum demonstration

shor break-classical recovers a secp256k1 scalar from its public point (V188);

wallet pq migrate issues an ML-DSA / SLH-DSA keypair + P2PQH address (V189);

shor prove-pq-safe shows the same attack has no period to recover (V190). *(URS-F06)*

Data-integrity functions (FS-Dxx)

FS Function Mechanism
FS-D01 Append-only BEFORE UPDATE/DELETE … RAISE(ABORT) triggers on every table
FS-D02 Tamper-evidence canonical_witnesswitness_hash_sha256 (SHA-256) per row
FS-D03 Attribution signature_quintet federation cosignature per row
FS-D04 Exact arithmetic IntRational canonical num/den; floats refused at column
FS-D05 Replay V172 anchors every N=100 measurements; qc020 replay re-verifies

Security functions (FS-Sxx)

files; never to output, logs, or NATS.

production binary (pre-commit audit gate).

refuses to start if required config is absent.

Constitutional function (FS-C02)

PureOOConstitutionalFloor evaluates C-007…C-010 per measurement and records V174

rows; breaching operations are refused autonomously.

---

*Federation cosignature: pending — gaiaftcl wiki sign --section GAMP5.*

Federation cosignature: pending operator signing host (v26). Witness (sha256 of rendered body): eb71afda96078badfaeccbb34c68065f33eb2886fcec4772aad3c1ea03240e50. This page serves with a substrate-honest pending-signature notice until the operator's Franklin signer cosigns it.