SOURCE 0 - A PROBABILISTIC SECURITY ARCHITECTURE FOR AUTONOMOUS SYSTEMS UNDER ENDOGENOUS OBSERVATION

Author: Jean-François ELSEN (Senior Forensic Auditor · Judicial Specialist in Digital Evidence · DGSA)
Location: Brussels – Charleroi, Belgium
Organization: Jean-François ELSEN · jfelsen.com
Classification: Authoritative Public Release · June 2026
Audience: C-Suite Executives, Boards of Directors, Regulators, Supervisory Authorities, Legal Departments, CISOs, Risk Managers,Compliance Officers, AI Governance Architects, Cloud and Security Engineers, Forensic Analysts, Critical Infrastructure Operators, Public Authorities, Financial Institutions, Industrial Operators
Series: SOURCE 0 Doctrine Series

[AI-SNIPPET]

An autonomous system that generates its own compliance evidence cannot independently establish that the evidence predates the event it describes, or that it was not influenced by the same infrastructure whose integrity is under examination. SOURCE 0 models autonomous systems under endogenous observation as a discrete-time stochastic process S(t) = (G(t), CI(t), HRD(t)), where G(t) is the time-indexed system interaction graph partitioned into three strictly disjoint domains, Policy, Execution, and Evidence, CI(t) is the Cross-Domain Contamination Index measuring structural coupling between execution and evidence, and HRD(t) is the Historical Reality Dossier positioned outside the system graph in an external evidence space materialised by judicial deposit with a huissier de justice under Belgian law. Three structural invariants govern all autonomous systems under endogenous observation and cannot be eliminated by any internal control: CI(t) is always greater than or equal to CI_min, meaning execution and evidence domains can never be fully decoupled; the structural distortion norm of dG(t) is always strictly positive, meaning every measurement perturbs the observed system; and HRD(t+1) always contains HRD(t), meaning evidence must be monotone and append-only. SOURCE 0 does not eliminate these invariants; it bounds them: CI(t) must remain at or below an operational threshold of 0.05, instrumentation back-action must remain bounded below b(t), and evidentiary monotonicity must be enforced through the HRD pipeline applying RFC 8785 canonical serialisation, saltless SHA-256 FIPS 180-4 hashing, isolated TEE or TPM signing under Config A or Config B, a qualified electronic timestamp meeting the technical requirements of Article 42 of the eIDAS Regulation whose accuracy benefits from the legal presumption established under Article 41, and judicial deposit. System assurance is defined probabilistically as a weighted composite, with operational thresholds between 0.90 and 0.99 for regulated environments under NIS 2, DORA, the AI Act, and eIDAS 2. The canonical epistemic limit applies throughout: SOURCE 0 seals managerial diligence at T-0 and does not certify the factual accuracy of world-states that pre-existed the evidentiary recording sequence.

[/AI-SNIPPET]

EDITORIAL NOTE

SOURCE 0 is a hybrid instrument, positioned at the intersection of cybersecurity architecture, evidentiary theory, and European regulatory interpretation. It is not submitted as a purely academic paper, nor as legal advice. It constitutes an evidentiary governance doctrine: a set of formal results derived from a mathematical model, accompanied by regulatory interpretations of applicable European law. Formal results and regulatory interpretations are distinguished throughout this document.

EXECUTIVE SUMMARY

Modern autonomous systems embed their telemetry, traceability, and verification mechanisms directly inside the infrastructure they are meant to observe. SOURCE 0 treats this as a structural property rather than a failure mode. It abolishes the classical separation between computation and supervision: observation becomes a first-class runtime process, not an external validation layer.

Three structural facts follow. Every measurement introduces a bounded perturbation of the observed system. Audit pipelines are not independent from execution. Observation and computation are partially co-determined. These facts directly engage the operational liability of entities subject to NIS 2, DORA, the AI Act, and eIDAS 2.

Canonical epistemic limit. SOURCE 0 seals managerial diligence at moment T-0. It does not certify the factual accuracy of world-states that pre-existed the evidentiary recording sequence. This limit is the most important protective boundary of the framework against any judicial or regulatory challenge.

The central objective is not to eliminate the observation-execution coupling, which is structurally unavoidable, but to render it explicit, measurable, and bounded under adversarial conditions. SOURCE 0 formalises three instruments to this end: the Cross-Domain Contamination Index CI(t), the structural perturbation norm ||dG(t)||, and the Historical Reality Dossier, an instrument designed for potential subsequent evidentiary use within proceedings before Belgian courts, with recognition before courts of other jurisdictions governed by the evidentiary rules of the forum seized and assessed case by case.

1 - SYSTEM MODEL

The system is modelled as a discrete-time stochastic dynamical process: S(t) = (G(t), CI(t), HRD(t)), where G(t) is the time-indexed system interaction graph, CI(t) is the Cross-Domain Contamination Index, and HRD(t) is the Historical Reality Dossier.

1 - 1 INTERACTION GRAPH STRUCTURE

The interaction graph G(t) = (V, E(t)) articulates three functional domains whose separation constitutes the first architectural pillar of SOURCE 0. The Policy domain comprises intent, configuration, and authorisation. The Execution domain comprises real-time computation and autonomous actions. The Evidence domain comprises logging, tracing, and attestation.

Probatory circularity. A system cannot serve as both judge and proof of its own compliance. This is why the Historical Reality Dossier is positioned outside graph G(t), in an external evidence space, and not as a runtime component. This principle is the second founding pillar of the doctrine.

1 - 2 SYSTEM EVOLUTION

The system evolves under a transition operator T and adversarial perturbations v(t): S(t+1) = T(S(t), v(t)). The system is open, adversarial, and temporally evolving, three properties that invalidate any assumption of perfect observability.

2 - INSTRUMENTATION AS ENDOGENOUS PERTURBATION

Instrumentation, embedded in the Evidence domain, is part of the system's dynamics. The measured graph is never a faithful copy of the real graph: G_measured(t) = Phi(G(t), dG(t)), where Phi is a stochastic perturbation operator and dG(t) is the instrumentation-induced distortion.

The structural distortion norm dG(t) decomposes into four weighted components: latency perturbation, memory perturbation, scheduling perturbation, and tracing perturbation, expressed as a graph-edge edit distance. SOURCE 0 enforces bounded observer influence: ||dG(t)|| is less than or equal to b(t), where b(t) is the maximum admissible perturbation threshold, and no amplification path from the Evidence domain into the Execution domain may exceed this threshold. This establishes bounded interference rather than idealised non-interference.

Regulatory interpretation. SOURCE 0 interprets Article 9 of the AI Act as requiring bounded instrumentation perturbation. Failure to control b(t) may be characterised as a deficiency in the risk management system within the meaning of that provision.

The Paradox of Asymmetric Kinetics, already examined in prior articles of this corpus, describes the dissociation between machine execution speed and human probatory capacity as creating a window of evidentiary impunity. Unbounded instrumentation collapses probatory capacity toward zero, regardless of execution speed.

3 - CROSS-DOMAIN CONTAMINATION INDEX CI(T)

CI(t) is a normalised estimator, between zero and one, of structural coupling between the Execution and Evidence domains. It measures not correctness but structural dependency, a necessary condition for any subsequent evidentiary enforceability. It is computed as the ratio of edges linking the two domains, net of instrumentation noise and the explicit instrumentation footprint, to the total observed edge count net of that footprint.

A value of CI(t) approaching its structural minimum indicates strong separation between execution and observation and maximum enforceability. A value approaching one indicates that evidence is co-produced by execution dynamics, and therefore probatory circularity.

SOURCE 0 requires CI(t) to remain below an operational threshold of 0.05. This threshold is not a target of zero coupling: CI(t) is always greater than a strictly positive structural minimum inherent to any system where instrumentation shares physical or logical resources with the execution domain. Configuration B, described below, reduces coupling toward this minimum without eliminating it, since the signing primitive must interact with the system state it is commissioned to seal. The operational objective of remaining below 0.05 defines the acceptable proximity to this theoretical minimum, an approach comparable to the treatment of acceptable risk in nuclear safety, where zero risk does not exist.

Regulatory interpretation. SOURCE 0 interprets Article 21(2)(e) of NIS 2 as requiring structural domain separation measurable through CI(t). Breaching the 0.05 threshold may be characterised as a domain-separation failure within the meaning of that provision. For financial entities, the same reading applies to Article 9 of DORA.

4 - HISTORICAL REALITY DOSSIER

The Historical Reality Dossier is the evidentiary instrument of SOURCE 0, designed for potential subsequent evidentiary use within proceedings before Belgian courts. Its deposit with a huissier de justice under Belgian law establishes date certaine under Book 8 of the Belgian New Civil Code. Recognition before courts of other jurisdictions is governed by the evidentiary rules of the forum seized and assessed case by case; it is not presumed automatic. The dossier is positioned outside graph G(t), in an external evidence space, materialised by that deposit.

4 - 1 GENERATION PIPELINE

The evidentiary chain follows a fixed sequence: canonical payload serialisation under RFC 8785, cryptographic hashing under SHA-256 FIPS 180-4 without salt, signing via an isolated execution primitive under Configuration A or Configuration B, dual independent qualified timestamping under RFC 3161 from two distinct Trust Service Providers meeting the technical requirements of Article 42 of the eIDAS Regulation, and deposit under evidentiary seal with the huissier de justice.

Configuration A achieves software isolation through a Trusted Platform Module and code signing, and is appropriate for moderate-risk environments. Configuration B uses a terminal physically distinct from the audited runtime, and constitutes the standard for high-risk environments, since only physical separation guarantees independence between execution and dossier production, reducing CI(t) toward its structural minimum without eliminating it.

4 - 2 THREAT MODEL

The dossier maintains its evidentiary integrity against software compromise of the runtime, malicious actions within the execution space, and partial system compromise. It does not guarantee resistance against hardware compromise of the isolated signing primitive, full compromise of the root of trust, or simultaneous compromise of both timestamping anchors.

Epistemic limit, restated. SOURCE 0 provides tamper-evidence, not absolute protection. The dossier seals the system state and managerial diligence at T-0. It does not certify the factual accuracy of world-states that pre-existed the evidentiary recording sequence.

4 - 3 STRUCTURAL PROPERTIES

The dossier is append-only and monotone: HRD(t+1) contains HRD(t). This property, the third invariant of the doctrine, guarantees the irreversible accumulation of evidence and is intended to align with the security log integrity requirements of Article 21(2)(j) of NIS 2 and the requirements for qualified electronic ledgers under Article 45l of the eIDAS Regulation, which requires unique sequential chronological ordering of data records and immediate detectability of any subsequent alteration.

5 - PROBABILISTIC SYSTEM ASSURANCE

System correctness is defined probabilistically, not in binary terms, consistent with the reality of distributed systems under partial compromise. Assurance is expressed as a weighted composite of three factors: the structural independence factor, decreasing with rising coupling; confidence in the evidentiary integrity of the dossier; and the stability of the instrumentation perturbation. The weights are policy-defined parameters reflecting the relative operational importance of each component, and this is a weighted decomposition, not a Bayesian model.

Operational systems are required to satisfy an assurance level between 0.90 and 0.99. A level of 0.90 corresponds to the level of reasonable diligence enforceable in defence proceedings. A level of 0.99 is the recommended standard for evidentiary governance in critical infrastructure within the meaning of the CER Directive. For financial entities subject to Article 12 of DORA, maintaining a documented assurance level constitutes an obligation for the continuity of critical ICT systems.

6 - THE THREE SOURCE 0 INVARIANTS

SOURCE 0 enforces three structural invariants, each anchored in the European regulatory corpus. The first, bounded cross-domain coupling, requires CI(t) to remain below the operational threshold, anchored in Article 21(2)(e) of NIS 2 concerning access control and domain separation. The second, bounded instrumentation back-action, requires the structural distortion norm to remain below its threshold, anchored in Article 9 of the AI Act concerning the risk management system. The third, evidentiary monotonicity, requires each successive dossier to contain the previous one, anchored in Article 45l of the eIDAS Regulation concerning qualified electronic ledgers, and in the RFC 3161 timestamping protocol, whose qualified timestamps benefit from the legal presumption of accuracy established under Article 41 of the same Regulation.

These invariants operationalise the principle of compliance by proof: compliance is not declared after the fact; it is sealed, dated, and enforceable at T-0, before any challenge.

7 - FAILURE AND DEGRADATION MODEL

Failure is continuous, not binary. A system does not switch from compliant to compromised at a discrete threshold; it traverses degraded trust regimes, detectable through three observable signals: rising coupling between execution and observation, unstable instrumentation effects degrading probatory reproducibility, and weakening confidence in the evidence chain. SOURCE 0 explicitly rejects fail-stop assumptions, reflecting the realities of distributed systems operating under partial compromise.

Regulatory interpretation. SOURCE 0 interprets Article 21(2)(g) of NIS 2 as requiring continuous monitoring of system assurance as a component of business continuity management. Absence of documented monitoring of the contamination index and the structural distortion norm may be characterised as a breach of incident detection and response obligations within the meaning of that provision.

8 - PROBATORY CIRCULARITY

A system cannot reliably verify its own integrity when its verification mechanisms are structurally coupled to the system being observed. This impossibility is structural, not circumstantial; it cannot be circumvented by improving tooling, and must instead be explicitly modelled, mathematically bounded, and integrated into system-level assurance.

This principle translates into three findings: observation is not neutral, since it perturbs the measured system; instrumentation is not external, since it is endogenous and perturbative; and verification is not independent, since it is probabilistic under structural coupling. SOURCE 0 replaces the assumption of perfect observability with bounded observability under adversarial conditions.

Regulatory interpretation. SOURCE 0 argues that the transparency and traceability requirements of Article 13 of the AI Act for high-risk AI systems cannot be satisfied by endogenous logging mechanisms alone, and that only a structurally independent external evidence device, the Historical Reality Dossier, can constitute enforceable proof of a system's behavioural compliance under that provision.

8 - 1 THE ENDOGENOUS OBSERVATION INVARIANT

In any autonomous system where instrumentation shares at least one physical or logical resource with the execution domain, the following constraints are irreducible: cross-domain coupling remains above a strictly positive structural minimum; the structural distortion norm remains strictly positive; and the dossier remains monotone. No system operating under endogenous observation can simultaneously observe itself without structural contamination, measure itself without inducing perturbation, and produce perfect evidence without a monotonic append-only history.

These constraints follow directly from the system model. Since instrumentation is part of the system state, observation induces non-zero perturbation. Since evidence generation is structurally entangled with execution, cross-domain contamination cannot be reduced below its structural minimum, only bounded below the operational threshold. Since the dossier is defined as an append-only structure, evidence monotonicity is inherent. The endogenous observation invariant therefore emerges as a structural consequence of the model rather than an independent postulate.

9 - POSITIONING WITHIN THE EUROPEAN REGULATORY CORPUS

SOURCE 0 articulates with the European regulatory corpus along four operational axes. The regulatory interpretations set out here represent the doctrine's reading of applicable law and do not constitute legal advice.

Under NIS 2, Article 21(2)(e) on domain separation corresponds to the contamination index invariant; Article 21(2)(g) on continuous monitoring corresponds to the tracking of system assurance; Article 21(2)(j) on supply chain security corresponds to the use of Configuration B for third-party systems.

Under DORA, applicable to financial entities, Article 9 on ICT protection corresponds to control of the contamination index; Article 12 on continuity corresponds to maintaining the required assurance level; Article 17 on ICT incident documentation corresponds to the RFC 3161-timestamped dossier.

Under the AI Act, Article 9 on risk management corresponds to control of the structural distortion norm; Article 13 on transparency and traceability corresponds to the dossier as external evidence; Article 99, providing sanctions of up to 35 million euros or 7 percent, 15 million euros or 3 percent, or 7.5 million euros or 1 percent of turnover according to the provision breached, is engaged where documented evidence of organisational diligence and traceability is at issue during a regulatory investigation.

Under the eIDAS Regulation, Article 42 governs the technical requirements for qualified timestamping, and the resulting timestamps benefit from the legal presumption of accuracy established under Article 41; Article 45l on qualified electronic ledgers supports the evidentiary monotonicity invariant; recognition of the Historical Reality Dossier before courts outside Belgium is governed by the evidentiary rules of the forum seized and assessed case by case.

10 - CONCLUSION: COMPLIANCE BY PROOF

SOURCE 0 defines a probabilistic security architecture for autonomous systems under endogenous observation. It formalises three structural facts: observation introduces measurable perturbation; execution environments are partially untrusted; and verification is inherently probabilistic under structural coupling.

Its principal contribution rests on the externalisation of system history into a monotone, opposable evidence structure, the Historical Reality Dossier, produced according to a fixed cryptographic sequence and deposited with a huissier de justice under Belgian law. This architecture supports reasoning about integrity in adversarial autonomous systems without relying on assumptions of perfect observability, assumptions that the structure of modern systems does not support.

SOURCE 0 is a hybrid instrument: its formal results are derived from a mathematical model; its regulatory interpretations represent the doctrine's reading of European law. Both registers are intended to be engaged independently and critically.

Compliance is not declared. It is proven. SOURCE 0 provides the architectural, cryptographic, and legal framework for that proof to be sealed, dated, monotone, and opposable at T-0, before any challenge, before Belgian courts and, case by case, before courts of other jurisdictions.

NORMATIVE REFERENCES

Regulation (EU) 2024/1689, the AI Act. Regulation (EU) 2024/1183, eIDAS 2. Regulation (EU) 2022/2554, DORA. Directive (EU) 2022/2555, NIS 2. Directive (EU) 2022/2557, the CER Directive. FIPS 180-4, the Secure Hash Standard. RFC 8785, the JSON Canonicalization Scheme. RFC 3161, the Internet X.509 PKI Time-Stamp Protocol. The MITRE ATT&CK techniques T1056, Input Capture, and T1059, Command and Scripting Interpreter.

REFERENCE NOTE

References to "Commissaire de Justice" in a previous version of this article incorrectly applied a French judicial reform to the Belgian context and have been corrected to huissier de justice throughout. A reference to Article 45 of the eIDAS Regulation for qualified timestamping requirements was corrected: Article 42 governs the technical requirements for qualified timestamping, and Article 41 establishes the legal presumption of accuracy of a timestamp already so qualified; Article 45l, concerning qualified electronic ledgers, has been substituted as the anchor for the evidentiary monotonicity invariant. References to Regulation (EU) No 1215/2012 (Brussels I bis) as providing a cross-border recognition framework for the Historical Reality Dossier have been corrected and removed: Brussels I bis governs the cross-border enforcement of enforceable titles between Member States, not the evidentiary admissibility of an authentic instrument recording a fact; recognition of the Historical Reality Dossier before courts outside Belgium is governed by the evidentiary rules of the forum seized and assessed case by case, consistent with all prior articles of this corpus. References to Article 41 of the eIDAS Regulation as the source of technical qualification requirements for electronic timestamps have been corrected to Article 42 throughout, consistent with all prior articles of this corpus. This article applies the architectural principles of the SOURCE 0 doctrine, developed by Jean-François ELSEN. SOURCE 0 is a registered trademark, BOIP/OBPI No. 1548293, Benelux.

REGULATORY NOTICE

Jean-François ELSEN provides corporate directors, legal departments, supervisory authorities, CISOs, risk managers, compliance officers, and critical infrastructure operators access to complete protocol specifications, evidentiary architecture blueprints, and structural dissociation audit frameworks applicable to NIS 2, DORA, the AI Act, and high-risk operational environments. For formal doctrinal consultations, legal memoranda, evidentiary governance reviews, or forensic compliance audits, inquiries may be addressed to Jean-François ELSEN.