c-ECO Systemic Governance
TFP Manual // CECO-IOM-001TFP Manual
The Threshold Function Protocol Operational Manual translates the normative architecture of the Model Law into concrete, auditable, and operational procedures. It specifies how Γ = f(P, ΔV, σ, Lr) transforms planetary signals into automatic legal effects — through standardized processes for data collection, certification, monitoring, and trigger activation under Foundation stewardship.
Manual Identity & Legal Nature
This Operational Manual constitutes an integral component of the c-ECO Systemic Governance framework, incorporated by reference into Model Law Art. 215-232. It is not purely regulatory nor merely informational — an intermediate prudential instrument that makes legal automation technically feasible.
Operationalizes pre-threshold governance duties through standardized procedures that reduce discretion, mitigate strategic behavior, and preserve epistemic integrity.
Effects become legally binding only via Model Law incorporation and Foundation certification. Technical output alone creates no legal obligation.
Provides due process layer necessary for financial market credibility — the connective tissue between scientific signals, legal effects, and accountability.
Risk Mapping to TFP Variables
NEWTranslate business risks from Screening red flags into operational TFP variables. Each risk category maps to predominant variable(s) and corresponding Model Law clauses.
Territorial / Spatial Risk
RED FLAG #1Shared resources: water basins, biomes, aquifers, ecological corridors. Operations affecting or affected by natural systems beyond property boundaries.
Example: Mining in headwaters → P tracks aquifer levels, σ increases with rainfall variability → triggers Amber/Red at hydric SOS approach
Technological / Infrastructure Risk
RED FLAG #2Critical dependence: cloud providers, satellite systems, AI models, proprietary platforms. High switching costs, rapid obsolescence.
Example: Fintech on AWS → Lr measures migration cost to multi-cloud, ΔV tracks service degradation rate → triggers Amber when Lr < 1.2
Supply Chain / Concentration Risk
RED FLAG #3Non-substitutable suppliers, geographic concentration, geopolitical exposure. Single points of failure in critical inputs.
Example: Semiconductor single-source → P tracks supplier stability index, σ reflects trade policy uncertainty → triggers Amber at concentration threshold
Temporal / Cumulative Risk
RED FLAG #4Lag effects: emissions with delayed impact, soil degradation, technology obsolescence. Present actions, future consequences.
Example: Carbon-intensive project → ΔV tracks cumulative emissions trajectory, Γ triggers at climate SOS proximity → Red/Black at tipping point approach
Irreversibility Risk
RED FLAG #5Non-remediable impacts: species extinction, deep contamination, community rupture. Economic remediation impossible or inadequate.
Example: Endemic habitat destruction → Lr = 0 (no technical reversal), automatic Black Band, asset conversion to restoration estate
Community / Social License Risk
RED FLAG #6Indigenous territories, conflict zones, essential service dependence. Social legitimacy and operational continuity intertwined.
Example: Indigenous territory project → P tracks consent/consultation metrics, σ reflects policy volatility → Red Band triggers Joint Duty Committee with community representation
Financial / Fintech — Hidden Digital Risk
CRITICAL DOMAINRisks invisible in traditional balance sheets: algorithmic black boxes (discriminatory decisions, undetected accumulated exposure), data liabilities (illegally collected/processed data transforming into giant judicial liability), synthetic leverage (chain interdependence — payment infrastructure → cloud provider → collapse by contagion).
Why "hidden": Unlike bank debt (on balance sheet), algorithmic bias or cloud security failure only become visible when the event occurs — and in finance, the velocity (ΔV) of this impact is near-instantaneous. Safe Mode intercepts the "ghost in the machine" before damage becomes irreversible.
Critical Domain — Financial/Fintech: Where hidden risk is most acute. Digital velocity (ΔV) makes visible in milliseconds what takes months in other sectors. c-ECO treats the "ghost in the machine" via σ (model volatility) and preemptive Safe Mode (Art. 44-47) — not waiting for collapse, but intercepting invisible accumulation trajectories.
TFP Core Variables — Technical Specification
The Trigger Function is structured around four fundamental variables. Standardized procedures for measuring, certifying, and combining them ensure consistency across sectors and jurisdictions, with Foundation certification as validity condition.
Measures distance to relevant biophysical or systemic limits. Not generic environmental indicator — boundary-referenced, context-locked metric whose meaning is defined by sectoral SPS specification and calibration parameters.
Captures temporal dimension — direction and rate at which system moves toward or away from limits. Primary anticipatory signal: systems far from threshold but accelerating rapidly may present higher danger than systems closer but stabilizing.
Modulates all other variables, ensuring prudential conservatism. Applied asymmetrically: where P approaches boundary, σ reduces distance to limit; where data suggests safety, σ erodes that margin. Never justifies delay or optimism.
Assesses availability and mobilizability of resources required to reverse or contain harmful trajectories. Ratio: Rmi / Ct (Resources Mobilizable Immediately / Projected Technical Cost of Containment).
Trigger Function: Γ = f(P, ΔV, σ, Lr) → Normalized prudential score (0-100) → Band classification → Automatic legal effects
Operational Scores & Band Classification
From TFP variables, operational scores enable classification, comparison, and trigger activation. Standardized calculation, audit, disclosure, and use procedures ensure procedural legitimacy.
Safe Operating Space Proximity Score
Current distance between asset/operation and applicable SOS boundary. Scale 0-100.
Trajectory Risk Score
Direction, speed, and persistence of movement toward material limits. Scale 0-100.
Reversibility Liquidity Score (Lr)
Immediate financial capacity to contain, mitigate, restore, or decommission. Operation may be financially solvent yet ecologically insolvent.
Enhanced monitoring, no execution restrictions
SPS 80-100, stable TRS, Lr ≥ 1.0
Partial IEX, cash redirection, dividend retention
TRS 60-79 or SPS 60-79 or Lr 0.8-1.19
Execution reconfiguration, NOT default
TRS < 60 or SPS < 40 or Lr < 0.8
External intervention, automatic asset conversion
TRS < 40 or Lr < 0.5 or PNR
Master Rule: No trigger creates new obligations. Activates obligations already contractually pre-agreed. All effects are ex ante, non-discretionary, and scientifically justified.
Data Verification & Certification (DVB)
Data Custodians operate as epistemic fiduciaries — sole function is preserving signal chain integrity from physical reality to juridical fact. Foundation certification is prerequisite for legal validity.
Data Custodian Certification SEC. 5.2-5.3, 6
Foundation process: Initial certification → periodic renewal → permanent revocation for fraud (Sec. 5.4.3)
Chain of Custody & Immutability SEC. 4, 7
Mandatory procedural sequence: sensor → extraction → attestation → hashing → ledger. Any break in chain invalidates data for trigger purposes and escalates to Foundation review.
QA/QC & Asymmetric Uncertainty SEC. 4.5
Quality Assurance/Quality Control determines data admissibility for P, ΔV calculations. Strict distinction: measurement error (governed statistically, compensable) vs. procedural failure (escalatory, non-compensable, Foundation notification required). Uncertainty always contracts operational margin — never expands it (ML Art. 2, 218).
Calibration Council & Methodological Governance
Defines SOS boundaries, thresholds, and methodological parameters. Operates under Foundation supervision of independence and ML Art. 221 separation of powers.
Sectoral Safe Operating Space specification — biophysical limits by industry, ecosystem, jurisdiction
Green/Amber/Red/Black band boundaries — score ranges triggering automatic legal effects
Version control for calculation algorithms, sensor specifications, QA/QC protocols
Certification of asymmetric uncertainty treatment — ensuring prudential conservatism
Update Protocol (Art. 229): Technical public consultation → Calibration Council review → Foundation validation of doctrinal coherence → version-controlled deployment. Silent methodological drift = material integrity incident (Sec. 4.3.2, 4.5.9).
Restoration Providers & Level 4 Execution
Pre-certified technical entities for Black Band/Restoration First execution. Foundation certification ensures capacity, solvency, and institutional separation from operators.
Certification Requirements ML ART. 176-177; PART VIII
Contingency Architecture ML ART. 185-186
Mandatory: Minimum 3 pre-certified Restoration Providers designated for each c-ECO incorporated operation. Emergency designation powers when all pre-approved providers unavailable (Art. 186). Immediate substitution by Technical Curatorship Chamber for integrity breach or operational insolvency (Art. 184).
Fiduciary Duty: Restoration Providers hold fiduciary obligation to systemic preservation, not to original operators or creditors. Operate under Technical Curatorship Chamber oversight during Black Band activation.
Auditability, Transparency & Execution During Review
Continuous QA/QC & Technical Audits
All data flows, calculations, classifications, and trigger activations subject to continuous Quality Assurance/Quality Control. Automatically intensified upon: procedural deviation detection, statistically significant anomalies, or activation of Level 2 (Amber) or higher. Audits are strictly technical — verify protocol application, not policy merit.
Immutable Public Ledger SEC. VII; ML ART. 35-39, 71
All prudential indicators and classifications recorded in secure, immutable ledger preserving full data lineage: certified raw inputs, applied methodologies, uncertainty margins, resulting scores, triggered effects, timestamps, responsible custodians. Public access proportionate to systemic relevance. Systemic Proof prevails over declaratory evidence (ML Art. 35-39).
Execution During Review SEC. 19; ML ART. 19, 81, 203
Framework adopts solve et repete principle — where prudential triggers are activated, effects remain operative throughout any audit, review, or arbitral process. Due process preserved without granting suspensive effect. Arbitral review limited to: procedural failure, evidentiary integrity, fraud, material measurement error. No review of ecological merit, economic desirability, or policy appropriateness.
System Integration
The TFP Manual provides the technical infrastructure that makes Model Law automation operationally feasible. Without TFP, ML categories are unenforceable; without ML, TFP outputs are merely advisory.
Case Identification
Is this a c-ECO case? Three tests, red flags, domain mapping
Legal Architecture
IEX, Safe Mode, Restoration First, incorporation, arbitration
Operational Procedures
Γ = f(P, ΔV, σ, Lr), Data Custodians, trigger catalogue, bands
Protocol Stewardship
Certification, arbitration, negotiation playbook, deployment
Technical-Legal Binding: TFP outputs → Foundation certification → ML incorporation → automatic legal effects. No step can be skipped; no domain substitutes for another.