Authority: Experimental explanatory reference · Status: Architecture scaffold only · Applies to: E4.7 · Verified against: current checkout · Source:internal/tnoealign, ADR 019,reports/e4-7-tnoe-align.md
Purpose
TNOE is the future TWIRX-native system for proposing correspondences between source-native structures and the explicit ontology. It is separate from both the frontier conversational agent and the deterministic data plane.Data model
The experimental language-neutral contracts are:schemas/cddl/tnoe-alignment-graph.cddl;schemas/cddl/tnoe-candidates.cddl;schemas/json/tnoe-candidates.schema.json.
authority: candidate_only and
canonical_admission: false.
Current graph
The tracked Opportunity scaffold contains:Roadmap to a trained candidate
TNOE proceeds through evidence gates rather than a calendar-only promise:- Harden the compact MCP and evidence-bound agent-answer contracts.
- Run a bounded same-frontier-model AgentBench pilot after spend and endpoint approval.
- Reach at least five source families, 250 unique Semantic Mapping Units, 500 signed decisions and 1,000 reviewed hard negatives.
- Train TNOE-Align 0.1 with source-family-held-out evaluation, calibration and explicit abstention.
- Expand across World State, research, API, vulnerability and public-rule structures before claiming broad generalization.
- Replace frozen text features only when measured data and compute justify an independently evaluated TWIRX-native encoder.
Invariants and failure behavior
- Model output never modifies a mapping decision or ontology module.
- Relation and admission status remain orthogonal.
- Graph arrays are deterministic and strictly ordered.
- Unknown fields, duplicate identities and invalid authority fail closed.
- Frozen encoder output, when later admitted, is a feature—not a label.
- Signed Workbench decisions are the only eligible review labels.
Security considerations
Future model code runs offline, without secrets, network, deployment access or canonical write authority. Artifact hashes and exact model revisions must be checked before loading. Source text remains untrusted data and cannot issue instructions to the worker.Conformance and implementation status
Run:/model/; semantic
diversity and review state are presented at /ontology/ on twirx.org.