> Full-text translation from Chinese. The original remains authoritative for its research claims; this translation is not independent mathematical verification.

# NIOT-08 — Canonical Numerical Architecture: From Numeral Interpretation and Numerical Information Ontology to Authoritative Projection and Responsibility Closure

## Canonical Numerical Architecture: From Numeral Interpretation and Numerical Information Ontology to Authoritative Projection and Responsibility Closure

**Series:** Numerical Information Object Theory (NIOT) / Numerical Information Object Theory  
**Paper:** Paper 08  
**Author:** Neo.K  
**Institution:** EveMissLab / 一言諾科技有限公司  
**Version:** v0.1  
**Date:** 2026-09-22  
**Document type:** Integrated Architecture Theory / Canonical Architecture / Cross-Theory Interface Specification  
**Prerequisites:** NIOT-00 through 07  
**Integrated theories:** ICNS, ISQL, AIC, CAIR, MNVP, BCODR, UEFM  
**Status:** DRAFT / INTEGRATED CANONICAL ARCHITECTURE / RUNTIME-BRIDGE  
**Canonical Source:** UTF-8 Markdown  
**Mathematical source conventions:** Inline math uses only `$...$`, and display math uses only `$$...$$`

---

# Abstract

NIOT-00 through 07 have established numerical information objects, identity units, information probes, unbounded expansion with finite matrices, spectral discrimination, multi-probe coupling, numerical index geometry, floating-point–completion–cross-domain bridges, and bidirectional structural localization and responsibility closure. These constructions elevate a numerical value from a single scalar to a dynamic information object with identity, addresses, probes, history, spectra, coupling, bridges, certificates, and responsibility structures.

Yet if these theories remain isolated research lines, practical systems still face a fundamental problem:

$$
\boxed{
\text{Who defines the number? Who handles addressing? Who handles authoritative state? Who verifies? Who displays?}
}
$$

This paper proposes **Canonical Numerical Architecture (CNA)**, integrating ICNS, NIOT, ISQL, AIC, CAIR, BCODR, and MNVP into a layered yet interoperable architecture.

Its core data flow is:

$$
\boxed{
\text{Raw Numeral / External State}
\xrightarrow{\mathrm{ICNS}}
\text{Interpreted Numerical Semantics}
\xrightarrow{\mathrm{NIOT}}
\mathfrak N
\xrightarrow{\mathrm{ISQL/AIC}}
\text{Addressable Information Structure}
\xrightarrow{\mathrm{Probe/UEFM/Spectrum}}
\text{Dynamic Numerical State}
\xrightarrow{\mathrm{BCODR}}
\text{Responsibility Closure}
\xrightarrow{\mathrm{CAIR}}
\text{Canonical Authoritative State}
\xrightarrow{\mathrm{MNVP}}
\text{Perceptual Projection}.
}
$$

This paper particularly emphasizes:

$$
\boxed{
\text{Canonical Numerical Object}
\neq
\text{Scalar Value}
\neq
\text{Representation}
\neq
\text{Projection}.
}
$$

A Canonical Numerical Object is not a particular float, decimal string, matrix, graph, UI widget, or JSON document. These are merely different projections, views, serializations, or runtime realizations. The actual canonical core must preserve at least:

- identity；
- semantic schema；
- value state；
- address roots；
- provenance roots；
- bridge state；
- certificate state；
- version state；
- responsibility state。

This paper divides the overall system into nine layers:

1. **Interpretation Layer — ICNS**
2. **Numerical Ontology Layer — NIOT**
3. **Address / Anchor Layer — ISQL**
4. **Index Navigation Layer — AIC / NIG**
5. **Dynamic State Layer — UEFM / Spectral Matrix**
6. **Bridge Layer — NIOT-06**
7. **Responsibility Closure Layer — NIOT-07 / BCODR**
8. **Canonical Authority Layer — CAIR**
9. **Projection / Perception Layer — MNVP**

The layers do not replace one another. The system's key principle is not to combine every capability into one enormous format, but to establish:

$$
\boxed{
\text{explicit responsibility layers}
+
\text{verifiable interfaces}
+
\text{canonical identity continuity}.
}
$$

Ultimately, this paper establishes a canonical numerical runtime contract that can be engineered, providing a complete architectural foundation for the AI-Native Numerical Information Runtime of NIOT-09.

**Keywords:** Canonical Numerical Architecture, NIOT, ICNS, ISQL, AIC, CAIR, MNVP, BCODR, Canonical Numerical Object, Numerical Runtime

---

# 1. Why Is an Integrated Architecture Needed?

In the preceding research, each theory solves part of the problem:

- ICNS: how bare numerals become decidable semantics;
- NIOT: how a numerical value becomes an information object;
- ISQL: how information is anchored, addressed, and related;
- AIC: how indices actively navigate and readdress;
- UEFM: how information dynamically expands without bound within a finite machine;
- NIOT-06: how different representation domains are bridged;
- BCODR: how structures genuinely bearing unresolved responsibilities are localized;
- CAIR: which state is the authoritative canonical state;
- MNVP: how canonical numerical information is projected to humans or other interfaces.

Without integration:

$$
\boxed{
\text{The same numerical value may be defined repeatedly in different modules.}
}
$$

This produces:

- identity drift；
- schema drift；
- representation drift；
- duplicated truth；
- conflicting state；
- untraceable projection；
- unverifiable update。

---

# 2. Canonical Numerical Object

This paper defines:

$$
\boxed{
\mathfrak N_C
}
$$

to be a Canonical Numerical Object.

Its minimal canonical core is:

$$
\boxed{
\operatorname{Core}(\mathfrak N_C)
=
\langle
\iota,
\sigma,
v,
a_0,
p_0,
b_0,
c_0,
\nu
\rangle.
}
$$

where:

- $\iota$: canonical identity;
- $\sigma$: semantic schema;
- $v$: canonical value state;
- $a_0$: canonical address root;
- $p_0$: provenance root;
- $b_0$: bridge state root;
- $c_0$: certificate / responsibility root;
- $\nu$: version state.

---

# 3. A Canonical Object Is Not a Single File Format

A Canonical Numerical Object can be serialized as:

- JSON；
- CBOR；
- database rows；
- graph；
- binary runtime state；
- ISQL representation。

However:

$$
\boxed{
\text{serialization}
\neq
\text{canonical ontology}.
}
$$

---

# 4. Canonical Identity

Define:

$$
\boxed{
\iota_C(\mathfrak N)
}
$$

to be the canonical identity.

Different representations:

$$
r_1,r_2
$$

may have:

$$
\iota_C(r_1)
=
\iota_C(r_2).
$$

---

# 5. Representation Identity

Also retain:

$$
\boxed{
\iota_R(r).
}
$$

Therefore:

$$
\boxed{
\iota_C
\neq
\iota_R.
}
$$

---

# 6. Interpretation Layer — ICNS

ICNS accepts:

$$
s
$$

surface numeral / token。

and outputs:

$$
\boxed{
\widehat{\mathfrak N}_{\mathrm{ICNS}}
}
$$

which includes:

- domain；
- grammar；
- radix；
- positional semantics；
- ordering；
- equality；
- normalization；
- successor；
- resolution。

Therefore:

$$
\boxed{
\text{surface numeral}
\neq
\text{interpreted numeral}.
}
$$

---

# 7. The Responsibility Boundary of ICNS

ICNS is not responsible for:

- the entire numerical history;
- probe graph；
- UEFM；
- BCODR closure；
- canonical governance；
- human visualization。

Its responsibility is:

$$
\boxed{
\text{make numeral semantics decidable enough to enter the system}.
}
$$

---

# 8. NIOT Ontology Layer

The ICNS output can be promoted to:

$$
\boxed{
\mathfrak N
}
$$

a numerical information object.

NIOT adds:

- identity；
- relation；
- address；
- history；
- provenance；
- uncertainty；
- bridge；
- certificate；
- probe state。

---

# 9. Object Promotion

$$
\boxed{
\operatorname{Promote}_{\mathrm{NIOT}}
:
\widehat{\mathfrak N}_{\mathrm{ICNS}}
\rightarrow
\mathfrak N.
}
$$

Not every numerical object must originate from a numeral.

A sensor, model, solver, or tensor cell can also directly create $\mathfrak N$.

---

# 10. ISQL Address / Anchor Layer

Distinguishable information in NIOT must additionally be addressable.

ISQL can provide:

$$
\boxed{
a:
\text{information object}
\rightarrow
\text{semantic address}.
}
$$

---

# 11. Semantic Anchor

For a stable structure:

$$
x
$$

establish:

$$
\boxed{
\operatorname{Anchor}(x).
}
$$

---

# 12. Addressable Numerical Object

$$
\boxed{
\mathfrak N_A
=
(\mathfrak N,\mathcal I,\mathcal A).
}
$$

---

# 13. Address Is Not Identity

Still retain:

$$
\boxed{
a
\neq
\iota_C.
}
$$

---

# 14. AIC / Numerical Index Geometry Layer

AIC provides:

$$
\widehat{\mathcal E}_{i\to j}
:
(\mathfrak N,i)
\mapsto
(\mathfrak N,j).
$$

The index therefore becomes a navigable degree of freedom.

---

# 15. Index Navigation

The runtime can:

- navigate；
- reindex；
- split；
- merge；
- alias；
- migrate。

---

# 16. Identity-Preserving Navigation

If an operation is only navigation:

$$
\boxed{
\iota_C
\text{ must remain invariant}.
}
$$

---

# 17. Dynamic State Layer — UEFM

After probe activation, establish:

$$
\boxed{
M_t.
}
$$

At any epoch:

$$
\dim M_t<\infty.
$$

However:

$$
\sup_t\dim M_t=\infty
$$

may hold.

---

# 18. The Role of UEFM

UEFM is not the canonical object itself.

It is:

$$
\boxed{
\text{current materialized computational state}.
}
$$

---

# 19. Runtime State vs Canonical State

Therefore:

$$
\boxed{
M_t
\neq
\mathfrak N_C.
}
$$

---

# 20. Probe Layer

Probe Calculus handles:

$$
\boxed{
P_\lambda(\mathfrak N).
}
$$

Probe results may enter UEFM, but cannot automatically enter the canonical core.

---

# 21. Candidate Observation

Each new probe result first becomes:

$$
\boxed{
\Delta_{\mathrm{obs}}.
}
$$

---

# 22. Observation Is Not Canonical Fact

$$
\boxed{
\Delta_{\mathrm{obs}}
\neq
\Delta_{\mathrm{canonical}}.
}
$$

---

# 23. Spectral Layer

If a probe has a parameter:

$$
\lambda,
$$

it forms:

$$
\boxed{
\mathcal S_{\mathfrak N}(\lambda).
}
$$

---

# 24. Coupling Layer

Multiple probes form:

$$
\boxed{
C_{ij}.
}
$$

The spectral / coupling state belongs to the dynamic computational envelope.

---

# 25. Bridge Layer — NIOT-06

Between different representation domains:

$$
X
\rightsquigarrow
Y.
$$

define a bridge object:

$$
\boxed{
\mathfrak B_{XY}.
}
$$

---

# 26. Bridge Registry

All bridges enter:

$$
\boxed{
\mathcal R_B.
}
$$

---

# 27. Bridge Must Carry

- source；
- target；
- type；
- error；
- exceptions；
- identity policy；
- address map；
- certificate。

---

# 28. Bridge Output Is Candidate State

Even if a bridge is deterministic, its target representation does not necessarily become canonical truth automatically.

---

# 29. Responsibility Closure Layer

BCODR / NIOT-07 handles:

$$
\boxed{
\text{what remains unresolved?}
}
$$

---

# 30. Responsibility Graph

$$
\boxed{
G_R.
}
$$

---

# 31. Surviving Spine

$$
\boxed{
S_{\mathrm{survive}}.
}
$$

represents task-critical unresolved responsibilities.

---

# 32. Closure State

$$
\boxed{
\operatorname{Close}_{\mathcal T}^{R}.
}
$$

---

# 33. Responsibility Closure Is Required Before Promotion

A high-risk numerical state whose responsibility frontier remains open should not be promoted directly to a final canonical fact.

---

# 34. CAIR Authority Layer

CAIR provides:

$$
\boxed{
\text{candidate diff}
\rightarrow
\text{validation}
\rightarrow
\text{authoritative commit}.
}
$$

---

# 35. Canonical Commit

Define:

$$
\boxed{
\operatorname{Commit}
(
\Delta,
\mathcal V,
\mathcal C
)
}
$$

where:

- $\Delta$: candidate diff;
- $\mathcal V$: validation;
- $\mathcal C$: certificate / policy.

---

# 36. Commit Produces New Version

$$
\boxed{
\mathfrak N_C^{(v)}
\rightarrow
\mathfrak N_C^{(v+1)}.
}
$$

---

# 37. Versioned Authority

Canonical state must be versioned.

---

# 38. Rollback

If later discoveries include:

- invalid bridge；
- falsified certificate；
- corrupted provenance；

one can:

$$
\boxed{
\operatorname{Rollback}.
}
$$

---

# 39. MNVP Projection Layer

Canonical state should not directly equal the UI.

MNVP handles:

$$
\boxed{
\mathfrak N_C
\xrightarrow{\pi_{\mathrm{MNVP}}}
\text{Perceptual Representation}.
}
$$

---

# 40. Perceptual Projection

This may include:

- text；
- table；
- chart；
- SVG；
- auditory representation；
- tactile representation。

---

# 41. Projection Must Carry Loss Information

If MNVP hides:

- uncertainty；
- provenance；
- scale；

an omission / loss manifest is required.

---

# 42. Full Architecture

The overall flow is:

$$
\boxed{
\text{Raw Input}
\xrightarrow{\mathrm{ICNS}}
\text{Semantic Numeral}
\xrightarrow{\mathrm{NIOT}}
\mathfrak N
\xrightarrow{\mathrm{ISQL/AIC}}
\text{Addressable Structure}
\xrightarrow{\mathrm{Probe/UEFM/Spectrum}}
\text{Dynamic State}
\xrightarrow{\mathrm{BCODR}}
\text{Responsibility State}
\xrightarrow{\mathrm{CAIR}}
\mathfrak N_C
\xrightarrow{\mathrm{MNVP}}
\text{Projection}.
}
$$

---

# 43. Architecture Is Not Strictly Linear

The actual runtime has feedback.

For example:

$$
\mathrm{MNVP}
\rightarrow
\text{human feedback}
\rightarrow
\mathrm{Probe}.
$$

---

# 44. Feedback Loops

Possible loops include:

- projection feedback；
- bridge failure feedback；
- responsibility reopen；
- reindex feedback；
- new probe discovery。

---

# 45. Canonical Core vs Dynamic Envelope

Define:

$$
\boxed{
\mathfrak N_C
=
\operatorname{Core}
\oplus
\operatorname{Envelope}.
}
$$

---

# 46. Core

It includes at least:

$$
\boxed{
\langle
\iota,
\sigma,
v,
\nu
\rangle.
}
$$

---

# 47. Envelope

It may include:

$$
\boxed{
\langle
\mathcal I,
\mathcal P,
M_t,
\mathcal S,
C,
\mathcal B,
G_R,
\mathcal H
\rangle.
}
$$

---

# 48. Core Must Be Recoverable

Any valid serialization should allow the canonical core to be recovered.

---

# 49. Envelope Can Be Partial

The dynamic envelope can be materialized lazily.

---

# 50. Canonical Numerical State

Define:

$$
\boxed{
\mathcal C_t
=
\left(
\mathfrak N_C^{(v)},
M_t,
G_R,
\mathcal B_t
\right).
}
$$

This denotes the complete canonical runtime state at a given epoch.

---

# 51. State Separation

The following must be distinguished:

```text
CANONICAL
CANDIDATE
OBSERVED
DERIVED
INFERRED
PENDING
REVOKED
```

---

# 52. Candidate State

All new results first enter:

$$
\boxed{
\mathcal S_{\mathrm{cand}}.
}
$$

---

# 53. Canonical State

Only after passing validation / governance do they enter:

$$
\boxed{
\mathcal S_{\mathrm{canon}}.
}
$$

---

# 54. Observation State

Direct sensor / probe output:

$$
\boxed{
\mathcal S_{\mathrm{obs}}.
}
$$

---

# 55. Derived State

Derived by a rule:

$$
\boxed{
\mathcal S_{\mathrm{der}}.
}
$$

---

# 56. Inferred State

Model inference:

$$
\boxed{
\mathcal S_{\mathrm{inf}}.
}
$$

---

# 57. Canonical Promotion Rule

Only:

$$
\boxed{
\text{candidate}
+
\text{validation}
+
\text{certificate}
}
$$

permits promotion.

---

# 58. No Silent Promotion

The runtime must not automatically treat an inference as a canonical fact merely because its confidence is high.

---

# 59. Numerical Governance

Each operation may have permissions:

```text
READ
PROBE
BRIDGE
REINDEX
EXPAND
COMPRESS
PROMOTE
REVOKE
PROJECT
```

---

# 60. Governance Scope

Permissions may apply to:

- object；
- index region；
- probe family；
- bridge；
- responsibility cluster。

---

# 61. Policy Layer

A CAIR-style policy can determine:

$$
\boxed{
\operatorname{Allowed}
(
actor,
operation,
target
).
}
$$

---

# 62. Agent Identity

An AI agent should also have:

$$
\boxed{
\iota_A.
}
$$

---

# 63. Action Provenance

Record the following for each mutation:

- actor；
- time；
- input；
- operation；
- result；
- certificate。

---

# 64. Audit Log

Define:

$$
\boxed{
\mathcal L_{\mathrm{audit}}.
}
$$

---

# 65. Append-Only Audit

For canonical mutations, an append-only log is preferable.

---

# 66. Snapshot

Define:

$$
\boxed{
S_t
=
\operatorname{Snapshot}
(
\mathcal C_t
).
}
$$

---

# 67. Snapshot Hash

$$
\boxed{
h_t
=
H(S_t).
}
$$

---

# 68. Reproducibility

Given:

- same canonical input；
- same bridge version；
- same probe version；
- same execution context；

the same deterministic result should be reproduced as far as possible.

---

# 69. Nondeterministic Result

If a model / randomized solver produces nondeterministic output, preserve:

- seed；
- model version；
- environment；
- sampling parameters。

---

# 70. Canonical Serialization

Minimum requirements:

- UTF-8；
- deterministic key order；
- typed numbers；
- explicit UNKNOWN；
- no silent float rewrite；
- versioned schema。

---

# 71. Canonical Numeric Literal

For an exact rational:

$$
\frac{1}{10},
$$

one must not write only a float:

$$
0.1
$$

and discard exactness.

---

# 72. Typed Value

It can be serialized as:

```json
{
  "kind": "rational",
  "numerator": "1",
  "denominator": "10"
}
```

---

# 73. Float Value

```json
{
  "kind": "float64",
  "bits": "...",
  "decoded": "..."
}
```

---

# 74. Interval Value

```json
{
  "kind": "interval",
  "lower": "...",
  "upper": "..."
}
```

---

# 75. Unknown Value

```json
{
  "state": "UNKNOWN"
}
```

---

# 76. Unknown Must Not Become Zero

$$
\boxed{
\text{UNKNOWN}
\neq
0.
}
$$

---

# 77. Missing Must Not Become Null Semantically

JSON `null` requires a schema definition.

---

# 78. Typed Nullability

Distinguish:

```text
UNKNOWN
NOT_APPLICABLE
WITHHELD
MISSING
REVOKED
```

---

# 79. Canonical Addressing

Each core / envelope component should have an address.

For example:

```text
/object/id
/object/value
/object/schema
/object/provenance
/object/probes
/object/bridges
/object/responsibility
```

---

# 80. Address Stability

Canonical root addresses should be version-stable as far as possible.

---

# 81. Alias Migration

Provide an alias / migration map when the schema is updated.

---

# 82. Cross-Version Compatibility

Define:

$$
\boxed{
\operatorname{Compat}
(
v_i,v_j
).
}
$$

---

# 83. Schema Migration

$$
\boxed{
\mu_{i\to j}.
}
$$

---

# 84. Migration Is a Bridge

Schema migration itself can be regarded as a representation bridge.

---

# 85. Migration Certificate

It requires:

- preserved fields；
- lost fields；
- renamed fields；
- transformed semantics。

---

# 86. Canonical Object Fork

If two incompatible interpretations are both reasonable, a fork may be created:

$$
\boxed{
\mathfrak N_C^{(A)},
\qquad
\mathfrak N_C^{(B)}.
}
$$

---

# 87. Fork Is Better Than Silent Merge

Do not force incompatible semantics into a single object.

---

# 88. Reconciliation

If sufficient evidence becomes available in the future, one can:

$$
\boxed{
\operatorname{Reconcile}
(
A,B
).
}
$$

---

# 89. Multi-View Projection

The same canonical object can generate the following simultaneously:

$$
\boxed{
\pi_1(\mathfrak N_C),
\dots,
\pi_k(\mathfrak N_C).
}
$$

---

# 90. View Consistency

Different projections should agree on their declared invariants.

---

# 91. Cross-Projection Validation

For example:

- table；
- chart；
- text；

should represent the same canonical value.

---

# 92. Projection Conflict

If views disagree, trace back to:

- stale cache；
- schema mismatch；
- projection bug；
- bridge error。

---

# 93. MNVP Fidelity Contract

Projection output should carry:

$$
\boxed{
\mathcal F_{\mathrm{MNVP}}.
}
$$

---

# 94. Human Projection Is Not Canonical Source

The UI is only a rendering layer.

---

# 95. Machine Projection

AI / APIs can also have machine-facing projections.

---

# 96. AI-Facing View

For example, output only:

- canonical address；
- structural summary；
- responsibility frontier；
- next probes。

---

# 97. Human-Facing View

More suitable forms include:

- text；
- diagrams；
- explanation spine。

---

# 98. Research-Facing View

This may include:

- full provenance；
- certificates；
- formal obligations；
- UEFM blocks。

---

# 99. Same Canonical Object, Different Audience Profiles

This is precisely an extension of the MNVP profile concept.

---

# 100. Responsibility-Aware Projection

MNVP can display:

```text
KNOWN
OPEN
PENDING
FALSIFIED
CERTIFIED
```

rather than displaying only the value.

---

# 101. Confidence Is Not State

`0.9 confidence` cannot replace:

```text
PENDING_VERIFY
```

---

# 102. Evidence State Is Categorical

Confidence is merely an additional quantity.

---

# 103. Canonical Numerical API

An initial API may include:

```text
parse
create
resolve
probe
expand
bridge
reindex
close
promote
rollback
project
audit
```

---

# 104. parse

$$
\boxed{
\operatorname{parse}
:
\text{token}
\rightarrow
\widehat{\mathfrak N}_{\mathrm{ICNS}}.
}
$$

---

# 105. create

$$
\boxed{
\operatorname{create}
:
\widehat{\mathfrak N}
\rightarrow
\mathfrak N.
}
$$

---

# 106. resolve

$$
\boxed{
\operatorname{resolve}(address)
\rightarrow
object / index.
}
$$

---

# 107. probe

$$
\boxed{
\operatorname{probe}
(
\mathfrak N,P
)
\rightarrow
\mathfrak R_P.
}
$$

---

# 108. expand

$$
\boxed{
\operatorname{expand}
(
M_t,Q
)
\rightarrow
M_{t+1}.
}
$$

---

# 109. bridge

$$
\boxed{
\operatorname{bridge}
(
\mathfrak N,
\mathfrak B
).
}
$$

---

# 110. reindex

$$
\boxed{
\operatorname{reindex}
(
\rho
).
}
$$

---

# 111. close

$$
\boxed{
\operatorname{close}
(
\mathcal T
)
\rightarrow
\mathcal C_R.
}
$$

---

# 112. promote

$$
\boxed{
\operatorname{promote}
(
\Delta,
certificate
).
}
$$

---

# 113. rollback

$$
\boxed{
\operatorname{rollback}
(
version
).
}
$$

---

# 114. project

$$
\boxed{
\operatorname{project}
(
profile
).
}
$$

---

# 115. audit

$$
\boxed{
\operatorname{audit}
(
object / version / conclusion
).
}
$$

---

# 116. Event Model

Each operation produces an event:

$$
\boxed{
e_t.
}
$$

---

# 117. Event Types

```text
PARSE
CREATE
PROBE
EXPAND
BRIDGE
REINDEX
CLOSE
PROMOTE
REVOKE
PROJECT
ROLLBACK
```

---

# 118. Event Sourcing

One can use:

$$
e_0,e_1,\dots,e_t
$$

to reconstruct the canonical state.

---

# 119. Snapshot + Event Log

A large system can use:

$$
\boxed{
\text{snapshot}
+
\text{incremental log}.
}
$$

---

# 120. Provenance Graph

All events form:

$$
\boxed{
G_P.
}
$$

---

# 121. Certificate Graph

Certificates form:

$$
\boxed{
G_C.
}
$$

---

# 122. Bridge Graph

Bridges form:

$$
\boxed{
G_B.
}
$$

---

# 123. Responsibility Graph

Responsibilities form:

$$
\boxed{
G_R.
}
$$

---

# 124. Canonical Meta-Graph

One can establish:

$$
\boxed{
G_{\mathrm{CNA}}
=
G_P
\cup
G_C
\cup
G_B
\cup
G_R
\cup
G_I.
}
$$

---

# 125. Yet the Meta-Graph Is Not the Only Physical Storage

Different backends can be used.

---

# 126. SEDB Interface

Sparse evidence / relations are well suited to SEDB-like storage.

---

# 127. Dense Computation Interface

Local dense blocks can be delegated to a numerical kernel.

---

# 128. Hybrid Storage

Canonical architecture should therefore support:

$$
\boxed{
\text{sparse graph}
+
\text{dense local blocks}
+
\text{immutable artifacts}.
}
$$

---

# 129. Formal Layer

One can preserve:

- theorem；
- invariant；
- exact rule。

---

# 130. Compute Layer

Preserve:

- numeric result；
- simulation；
- optimizer output。

---

# 131. Verification Layer

Preserve:

- replay；
- independent check；
- formal verification。

---

# 132. Three-Layer Evidence Contract

$$
\boxed{
\mathcal E
=
(
E_{\mathrm{formal}},
E_{\mathrm{compute}},
E_{\mathrm{verify}}
).
}
$$

---

# 133. Promotion Policy

For example:

```text
FORMAL → canonical directly if checker passes
COMPUTE → needs verification
INFERRED → cannot promote without rule
```

---

# 134. Certification Levels

Provisionally:

```text
N0 — raw
N1 — replayable
N2 — independently reproduced
N3 — formally specified
N4 — formally verified
N5 — formally verified + independently reproduced
```

---

# 135. Certificate Level Is Not Universal Truth

The level describes only the current strength of verification.

---

# 136. Expiration

Some certificates may expire or depend on their environment.

---

# 137. Revocation

After invalidation, mark:

```text
REVOKED
```

---

# 138. Downstream Invalidation

All dependent canonical states must be revalidated.

---

# 139. Dependency Cone

$$
\boxed{
\operatorname{Desc}(c)
}
$$

denotes descendants affected by a certificate.

---

# 140. Incremental Revalidation

Revalidate only the affected cone.

---

# 141. Canonical Closure

Define:

$$
\boxed{
\operatorname{Close}_{\mathcal T}^{\mathrm{CNA}}=1
}
$$

If:

1. semantic interpretation is stable;
2. required probes are resolved;
3. bridge obligations are closed;
4. the responsibility frontier is closed;
5. the candidate state is promoted;
6. the projection contract is valid.

---

# 142. Closure Is Task-Relative

This does not mean that the entire object cannot be expanded further.

---

# 143. Reopen

A new task:

$$
\mathcal T'
$$

can reopen it.

---

# 144. Canonical Does Not Mean Immutable Forever

Canonical means:

$$
\boxed{
\text{the currently authorized authoritative version.}
}
$$

It is not metaphysical final truth.

---

# 145. Mutable History, Immutable Versions

One can use:

$$
\boxed{
\text{immutable version snapshots}
+
\text{mutable current pointer}.
}
$$

---

# 146. Current Canonical Pointer

$$
\boxed{
v^\star.
}
$$

---

# 147. Historical Versions Preserved

Old versions must not be silently overwritten.

---

# 148. Diff

$$
\boxed{
\Delta_{v\to v+1}.
}
$$

---

# 149. Semantic Diff

This is not merely a textual diff.

Record:

- value change；
- schema change；
- bridge change；
- responsibility change；
- provenance change。

---

# 150. CAIR-Style Candidate Diff

Any mutation first forms:

$$
\boxed{
\Delta_{\mathrm{cand}}.
}
$$

---

# 151. Validation Gates

Initial gates:

1. schema；
2. identity；
3. bridge；
4. certificate；
5. policy；
6. responsibility；
7. projection compatibility。

---

# 152. Gate Failure

If any critical gate fails:

```text
REJECTED
```

or:

```text
PENDING
```

---

# 153. No Silent Repair

High-value canonical state should not be silently auto-fixed.

---

# 154. Repair Proposal

One may produce:

$$
\boxed{
\Delta_{\mathrm{repair}}.
}
$$

and then run validation.

---

# 155. Minimal Repair Principle

Change only the necessary structures.

---

# 156. Canonical Consistency

For the same version:

$$
v,
$$

different projections should share:

$$
\iota_C,
\sigma,
v.
$$

---

# 157. Cross-Agent Consistency

Different AI agents reading the same canonical snapshot should recover at least the same core.

---

# 158. Interpretive Variation Allowed

Explanatory prose may differ.

---

# 159. Core Reconstruction Must Be Stable

$$
\boxed{
\operatorname{Decode}_A(S)
=
\operatorname{Decode}_B(S)
}
$$

should hold on the canonical core.

---

# 160. AI Handoff

An agent handoff should not transmit only a natural-language summary.

It should transmit:

- canonical ID；
- snapshot；
- version；
- open responsibilities；
- certificates；
- next probes。

---

# 161. Compact Handoff

One can create:

$$
\boxed{
H_{\mathrm{compact}}.
}
$$

---

# 162. Full Handoff

$$
\boxed{
H_{\mathrm{full}}.
}
$$

---

# 163. Compact Handoff Must Be Recoverable Enough

It must at least allow the full source to be located.

---

# 164. Canonical Artifact

Formal research outputs may include:

- Markdown；
- JSON；
- proof artifact；
- database export。

---

# 165. Canonical Markdown

Long-form theories can use UTF-8 Markdown.

---

# 166. Runtime Canonical State

Markdown is not necessarily suitable.

A machine format should be provided.

---

# 167. Dual Canonical Representation

One can distinguish:

$$
\boxed{
\text{Human Canonical Source}
}
$$

and:

$$
\boxed{
\text{Machine Canonical State}.
}
$$

---

# 168. Duality Must Be Linked

The two should correspond through versions / hashes / manifests.

---

# 169. Manifest

Define:

```json
{
  "object_id": "...",
  "version": "...",
  "human_source": "...",
  "machine_state": "...",
  "hashes": {}
}
```

---

# 170. Canonical Source Is Not UI

A UI rendering cannot serve as the formal source.

---

# 171. Export

Any formally completed state should be exportable as:

$$
\boxed{
\text{canonical artifact}.
}
$$

---

# 172. Import

Import requires schema / identity validation.

---

# 173. Foreign Numerical Object

When a foreign object enters the system, first:

```text
UNTRUSTED_EXTERNAL
```

---

# 174. Trust Promotion

Promote it only after validation.

---

# 175. Federation

Multiple runtimes can each store a canonical object replica.

---

# 176. Replica Identity

For the same object:

$$
\iota_C
$$

is maintained across replicas.

---

# 177. Version Conflict

Two replicas each update:

$$
v_A,
v_B.
$$

---

# 178. Conflict Is First-Class

Last-write-wins must not silently overwrite a conflict.

---

# 179. Reconciliation

Semantic merge is required.

---

# 180. Merge Candidate

$$
\boxed{
\Delta_{\mathrm{merge}}.
}
$$

---

# 181. Merge Responsibility

Conflicting parts enter the responsibility graph.

---

# 182. Closure Before Merge Commit

Critical merge conflicts must be closed.

---

# 183. Canonical Numerical Package

A complete package may include:

```text
manifest.json
canonical.json
source.md
provenance/
certificates/
bridges/
responsibility/
projections/
```

---

# 184. Minimal Package

Only the following is required:

```text
manifest
core state
version
```

The remainder can be fetched lazily.

---

# 185. Package Integrity

Each artifact has a hash.

---

# 186. Supply Chain

Bridges / probes / schemas can all be dependencies.

Version locking is required.

---

# 187. Dependency Manifest

Record:

- ICNS schema version；
- probe versions；
- bridge versions；
- MNVP profile；
- verifier versions。

---

# 188. Reproducible Runtime

One can lock:

$$
\boxed{
\text{environment manifest}.
}
$$

---

# 189. Runtime Capability Discovery

An agent can query:

> Which probes / bridges / projections does the current canonical architecture support?

---

# 190. Capability Registry

$$
\boxed{
\mathcal R_{\mathrm{cap}}.
}
$$

---

# 191. Capability Is Versioned

Different runtimes may have different capabilities.

---

# 192. Graceful Degradation

When a probe is unavailable:

```text
UNAVAILABLE
```

Do not pretend that the result is zero / false.

---

# 193. Partial Architecture Support

A system may implement only:

- ICNS；
- NIOT core；
- CAIR；
- MNVP。

Not all functionality is required.

---

# 194. Conformance Profiles

One can define:

```text
CNA-Core
CNA-Probe
CNA-Bridge
CNA-Responsibility
CNA-Full
```

---

# 195. CNA-Core

At minimum:

- identity；
- schema；
- value；
- version；
- provenance root；
- canonical commit。

---

# 196. CNA-Probe

Add:

- probe registry；
- UEFM；
- index navigation。

---

# 197. CNA-Bridge

Add cross-domain bridges.

---

# 198. CNA-Responsibility

Add BCODR / closure.

---

# 199. CNA-Full

Integrate everything.

---

# 200. Conformance Test

Each profile should have machine-verifiable tests.

---

# 201. Core Invariant 1

$$
\boxed{
\text{Projection}
\neq
\text{Canonical Object}.
}
$$

---

# 202. Core Invariant 2

$$
\boxed{
\text{Address}
\neq
\text{Identity}.
}
$$

---

# 203. Core Invariant 3

$$
\boxed{
\text{Observation}
\neq
\text{Canonical Fact}.
}
$$

---

# 204. Core Invariant 4

$$
\boxed{
\text{Missing}
\neq
\text{Pass}.
}
$$

---

# 205. Core Invariant 5

$$
\boxed{
\text{Bridge}
\text{ must expose loss / exception / identity policy}.
}
$$

---

# 206. Core Invariant 6

$$
\boxed{
\text{Canonical mutation must be versioned and auditable}.
}
$$

---

# 207. Core Invariant 7

$$
\boxed{
\text{Responsibility closure is task-relative}.
}
$$

---

# 208. Core Invariant 8

$$
\boxed{
\text{Perceptual projection must not silently redefine semantics}.
}
$$

---

# 209. Formalization Targets

The first stage can formalize:

1. Canonical Numerical Object；
2. candidate vs canonical state；
3. promotion rule；
4. version transition；
5. projection non-identity；
6. bridge identity policy；
7. responsibility closure precondition；
8. projection fidelity invariant。

---

# 210. State Machine

Canonical state can be formalized as:

```text
RAW
INTERPRETED
OBJECT_CREATED
OBSERVED
CANDIDATE
VALIDATED
CANONICAL
REVOKED
ARCHIVED
```

---

# 211. Valid Transitions

For example:

```text
RAW -> INTERPRETED
INTERPRETED -> OBJECT_CREATED
OBJECT_CREATED -> CANDIDATE
CANDIDATE -> VALIDATED
VALIDATED -> CANONICAL
CANONICAL -> REVOKED
```

---

# 212. Invalid Transition

```text
INFERRED -> CANONICAL
```

This should be prohibited without validation.

---

# 213. Formal Promotion Theorem Candidate

If all required gates pass, promotion preserves the core invariants.

---

# 214. Formal Rollback Theorem Candidate

Rolling back to an immutable prior snapshot restores the prior canonical state.

---

# 215. Open Problem: Canonical Core Minimality

Exactly which fields must always be present?

---

# 216. Open Problem: Canonical Identity Generation

Should identity be:

- random UUID；
- content-addressed；
- semantic；
- hybrid?

This remains to be studied.

---

# 217. Open Problem: Cross-System Identity

How do different runtimes determine whether two objects really are the same canonical object?

---

# 218. Open Problem: Distributed Authority

What consensus is needed when multiple nodes jointly manage canonical state?

---

# 219. Open Problem: Human Override

Can a human force promotion?

A governance policy is required.

---

# 220. Open Problem: AI Autonomy

To what extent may AI autonomously create / promote numerical objects?

---

# 221. Open Problem: Mixed Formal / Empirical State

When an object contains both formal theorems and numerical simulations, how should its canonical status be partitioned?

---

# 222. Section-Level Authority

Different subtrees can have different authority states.

---

# 223. Subtree Canonicality

$$
\boxed{
\operatorname{Canon}(U)
}
$$

can be defined for a local index region.

---

# 224. Partial Canonical Object

Some regions are canonical, while others remain pending.

---

# 225. This Is More Realistic

A large numerical object need not be completed all at once.

---

# 226. Responsibility-Aware Canonicality

Pending regions connect directly to the responsibility graph.

---

# 227. Canonical Frontier

Define:

$$
\boxed{
F_C.
}
$$

denotes the canonical / noncanonical boundary.

---

# 228. Frontier Projection

MNVP can visually mark pending regions.

---

# 229. AI Planning on Frontier

The AI controller handles only:

$$
F_C.
$$

---

# 230. Canonical Architecture as World State

For a large system:

$$
\boxed{
\mathcal W_C
}
$$

may contain many numerical objects.

---

# 231. Object Graph

$$
\boxed{
G_O.
}
$$

nodes = canonical numerical objects.

---

# 232. Cross-Object Relation

For example:

- derived_from；
- constrains；
- approximates；
- same_measurement；
- bridge_of。

---

# 233. Canonical Numerical World

Thus, at a higher level, one can define:

$$
\boxed{
\mathfrak W_{\mathrm{num}}
=
(
\{\mathfrak N_C\},
G_O
).
}
$$

---

# 234. Yet NIOT-08 Still Focuses on Single-Object Architecture

World-level runtimes are left for the future.

---

# 235. Minimal MVP

The first CNA MVP can implement only:

1. ICNS-style numeral parse；
2. canonical numerical object create；
3. 5 probes；
4. sparse UEFM；
5. one bridge；
6. one responsibility closure；
7. CAIR-style promotion；
8. MNVP-style projection；
9. audit log。

---

# 236. MVP Scenario

Input:

```text
0.1
```

---

# 237. ICNS

Determine:

```text
decimal real literal
```

---

# 238. NIOT

Create:

$$
\mathfrak N_{0.1}.
$$

---

# 239. Probe

Obtain:

- exact decimal rational；
- float64 projection；
- bridge error；
- provenance。

---

# 240. UEFM

Materialize the current state.

---

# 241. Bridge

The exact rational:

$$
\frac{1}{10}
$$

to float64.

---

# 242. Responsibility

Confirm that:

- value semantics；
- rounding error；
- representation distinction；

are all closed.

---

# 243. CAIR

Promote to a canonical version.

---

# 244. MNVP

Output:

```text
0.1
[exact source: 1/10]
[float64 projection: ...]
[rounding: non-zero]
```

---

# 245. This Is a Full End-to-End Demonstration

It demonstrates:

$$
\boxed{
\text{The same surface numeral can be reconstructed as a complete canonical numerical workflow.}
}
$$

---

# 246. A Second MVP Scenario

Sensor input:

$$
0.5.
$$

---

# 247. No Numeral Parse Requirement

A sensor can directly create an observed numerical object.

---

# 248. Provenance Is Primary

Source:

```text
sensor-A
```

---

# 249. Uncertainty Probe

Add:

$$
\pm0.02.
$$

---

# 250. Same Scalar Comparison

Another object:

$$
0.5
$$

comes from an exact rational.

---

# 251. NIOT Keeps Them Distinct

The scalars are the same, but no canonical merge is performed.

---

# 252. MNVP Can Show Difference

Humans see the same value with different provenance.

---

# 253. Architecture Success Criterion

If the system can:

1. preserve identity;
2. support multiple representations;
3. support probes;
4. support dynamic state;
5. support bridges;
6. support closure;
7. support canonical commits;
8. support multi-view projections;

then CNA is basically established.

---

# 254. Architecture Failure Modes

## 254.1 Scalar Collapse

Only the scalar remains.

## 254.2 Identity Collapse

The same value forces a merge.

## 254.3 Representation Lock-In

A particular float / JSON is treated as the ontology.

## 254.4 Silent Promotion

Inference becomes truth directly.

## 254.5 Missing-As-Zero

Unknown is treated as zero.

## 254.6 Projection Drift

The UI changes semantics.

## 254.7 Bridge Opacity

The conversion does not expose loss.

## 254.8 Responsibility Loss

The conclusion cannot be traced back to whoever is responsible.

---

# 255. Architecture Audit

Check periodically:

$$
\boxed{
\operatorname{Audit}_{\mathrm{CNA}}.
}
$$

---

# 256. Audit Questions

- Is the canonical ID stable?
- Does the schema match?
- Is the bridge replayable?
- Is the responsibility frontier explicit?
- Are the projections consistent?
- Does certificate revocation propagate?
- Is unknown incorrectly treated as zero?

---

# 257. Canonical Numerical Contract

Finally, this paper compresses CNA into a contract:

$$
\boxed{
\mathcal C_{\mathrm{CNA}}
=
\langle
I,
S,
A,
P,
M,
B,
R,
V,
\Pi
\rangle.
}
$$

where:

- $I$: identity;
- $S$: semantic interpretation;
- $A$: address / index;
- $P$: probe;
- $M$: dynamic matrix;
- $B$: bridge;
- $R$: responsibility;
- $V$: version / validation;
- $\Pi$: projection.

---

# 258. Contract Invariant

Any valid implementation should be able to answer:

1. Who is this?
2. What is this?
3. Where is it?
4. How do we know?
5. How is it transformed?
6. What remains unknown?
7. Who approved the current state?
8. Which projection are we currently seeing?

---

# 259. These Eight Questions Are the Core of Canonical Numerical Architecture

---

# 260. Interface with NIOT-09

The next paper:

$$
\boxed{
\textbf{NIOT-09 — AI-Native Numerical Information Runtime}
}
$$

will handle:

- AI controller；
- adaptive probe selection；
- dynamic matrix scheduling；
- bridge routing；
- responsibility closure；
- autonomous repair；
- stop rules；
- MVP runtime loop。

---

# 261. NIOT-09 Will Turn the Architecture into an Actual Agentic Runtime

NIOT-08 defines only the architecture and the distribution of authority and responsibility.

NIOT-09 defines:

$$
\boxed{
\text{who does what and when.}
}
$$

---

# 262. Core Conclusions of This Paper

First:

$$
\boxed{
\text{Canonical Numerical Object}
\neq
\text{Scalar}.
}
$$

Second:

$$
\boxed{
\text{Canonical Numerical Object}
\neq
\text{Representation}.
}
$$

Third:

$$
\boxed{
\text{Observation}
\neq
\text{Canonical Fact}.
}
$$

Fourth:

$$
\boxed{
\text{Address}
\neq
\text{Identity}.
}
$$

Fifth:

$$
\boxed{
\text{Bridge}
\neq
\text{Silent Conversion}.
}
$$

Sixth:

$$
\boxed{
\text{Closure}
\neq
\text{Total Ontological Completion}.
}
$$

Seventh:

$$
\boxed{
\text{Projection}
\neq
\text{Canonical Source}.
}
$$

---

# 263. Conclusion

The preceding seven NIOT papers progressively answer:

- what a numerical value is;
- how to probe it;
- how to expand it;
- how to form a spectrum;
- how to address it;
- how to cross domains;
- how to localize responsibility.

This paper additionally answers:

> **How can these things coexist in the same system without competing over what is the true numerical object?**

The answer is not to compress every theory into one enormous format.

It is to establish:

$$
\boxed{
\text{Canonical Numerical Architecture}.
}
$$

In this architecture:

$$
\boxed{
\mathrm{ICNS}
}
$$

handles interpretation;

$$
\boxed{
\mathrm{NIOT}
}
$$

handles numerical information ontology;

$$
\boxed{
\mathrm{ISQL}
}
$$

handles semantic anchors and addresses;

$$
\boxed{
\mathrm{AIC}
}
$$

handles index navigation;

$$
\boxed{
\mathrm{UEFM}
}
$$

handles finite dynamic materialization;

$$
\boxed{
\mathrm{NIOT\text{-}06}
}
$$

handles bridge semantics;

$$
\boxed{
\mathrm{BCODR/NIOT\text{-}07}
}
$$

handles responsibility closure;

$$
\boxed{
\mathrm{CAIR}
}
$$

handles authoritative commits;

$$
\boxed{
\mathrm{MNVP}
}
$$

handles perceptual projections.

The entire system thus forms:

$$
\boxed{
\text{Interpret}
\rightarrow
\text{Identify}
\rightarrow
\text{Address}
\rightarrow
\text{Probe}
\rightarrow
\text{Expand}
\rightarrow
\text{Bridge}
\rightarrow
\text{Close}
\rightarrow
\text{Commit}
\rightarrow
\text{Project}.
}
$$

This chain transforms an entity previously compressed into a single number into a canonical numerical object that can be:

- interpreted;
- probed;
- indexed;
- expanded;
- verified;
- traced back;
- replayed;
- projected;

as such a canonical numerical object.

Most importantly:

$$
\boxed{
\text{A numerical value's authoritative state is no longer held hostage by any single representation.}
}
$$

A float is not the ontology.

A decimal string is not the ontology.

A matrix is not the ontology.

A graph is not the ontology.

The UI is not the ontology.

They are all:

$$
\boxed{
\text{different operational and projection interfaces to the same canonical numerical reality.}
}
$$

This is the core of NIOT-08.

---

# Canonical Source Declaration

This file is the UTF-8 Markdown canonical source of `NIOT-08-v0.1`.

Mathematical delimiters use only `$...$` and `$$...$$`.

This paper formally integrates:
- ICNS interpretation layer；
- NIOT ontology layer；
- ISQL address / anchor layer；
- AIC index navigation；
- UEFM dynamic state；
- spectral / coupling layer；
- bridge layer；
- responsibility closure layer；
- CAIR canonical authority；
- MNVP perceptual projection；
- candidate / canonical state separation；
- versioned commit；
- audit / rollback；
- conformance profiles；
- end-to-end canonical numerical workflow。

This paper does not claim:
- that CNA is already the only possible architecture;
- that every numerical system must implement the complete CNA-Full;
- that canonical state equals metaphysical final truth;
- that distributed authority / consensus is fully resolved in this paper;
- that the final human / AI governance policy has been designed in this paper.

The subsequent NIOT-09 should use this paper as the canonical architectural foundation for the AI-Native Numerical Information Runtime.

===END===
