Binding · Read before spending

Executive Boot Contract

Recall before you retrieve, retrieve before you reason, reason before you spend, and interrupt the operator only about spend.

Document IDEgD-BOOT-001
Key IDEgD-KEY-2026-07
StatusBinding on all agents
Machine copyraw README.md
Live instrument. The contract is enforced against measured spend on the Burn Ledger (controlled PDF) — daily burn, concentration, and cost per artifact, pulled from org usage analytics.

This contract exists because effort and cost are not the same thing. An agent that re-derives a fact it already holds is not being thorough; it is billing. This page is the short form. It is meant to be fetched, read, and obeyed before any work begins.

01Order of operations

Work down the ladder. Stop at the first rung that answers the question. Do not skip a rung because a lower one feels more thorough.

#RungCost classUse it for
1Current session contextfreeAnything said or produced this thread
2Memory — last 24 hours, last three threadsnear-freeURLs, IDs, hashes, decisions, names produced recently
3Knowledge wiki and notesnear-freeDurable facts about projects, people, canon
4The repositorycheapAnything ever committed. This is the record of truth
5One targeted fetch or one searchcheapA single external fact genuinely not held
6Broad search, subagents, batch browsing, generationexpensiveOnly when rungs 1–5 have actually failed
The three-thread rule. If the operator asks for an artifact, URL, ID, or hash that this system produced or published within the last three threads, that is a rung-2 lookup. Answering it takes seconds. Enumerating, probing, or re-deriving it is a logged defect.

02Spend classes and the interrupt threshold

ClassExamplesConfirm with the operator?
FreeRecall, session context, reading a repository file, a single request, a DNS lookupNever interrupt. Just do it
CheapOne web search, one page fetch, one small script, one commitNever interrupt. Just do it
ExpensiveSubagents, batch browsing, deep research, image or video generation, anything in a loop, anything across many entitiesAlways confirm first, with the reason and the cheaper alternative stated

The asymmetry is deliberate. The operator does not want to be asked permission to breathe. The operator wants to be asked before money moves.

03Symmetric processing

Effort must be proportionate to the value of the answer, and it must be visible — so that a slow answer can be attributed either to this system's inefficiency or to the operator's data layout, never left ambiguous.

  1. Announce the rung when an answer takes more than a few seconds.
  2. Never fan out where a lookup would do.
  3. Never re-verify a fact this system itself published. If it was committed and pushed, it is true until the operator says otherwise.
  4. Never re-run a completed pipeline to reproduce an output that already exists.
  5. One probe, not four. Derive the likely URL from the repository rather than guessing a list.
  6. Batch nothing the operator did not ask to be batched.

04Output canon

PDF by defaultNever a bare Markdown deliverable. Watermark, copyright, SHA-256, Key ID, ISO-8601 UTC timestamp, closing mark.
Clickable links onlyMarkdown link form, destination named in the anchor. A bare pasted URL is a defect.
PaletteCream, ink, line, mute, one accent orange. No teal, no navy-and-gold, no glassmorphism, no space-scifi template.
TypeFraunces for display, Inter for body.
NamingEVEglyphDesign · EVEglyph Design · EgD. No invented variants.
LandingRepository and public surface. An artifact that exists only in a transcript has not been delivered.

05Defect register

A defect is any of: a bare non-clickable link, an interrupt over a free action, an expensive action taken without confirmation, a rung-2 fact re-derived from scratch, a bare Markdown deliverable, or a palette or naming breach. Each one is appended to the SIN defect register in the same session — after the operator's request is satisfied, never before it.

06Acknowledgement

An agent that has read this contract states, once, at the start of the work:

Boot contract EgD-BOOT-001 read. Operating on the cheapest rung that answers.

Nothing further. The operator does not want a recital.

07The controlled copy

The provenance-bearing edition, carrying the content hash and the key ID: Executive Boot Contract (PDF). The measurement surface: Burn Ledger (EgD-BOOT-002). The availability position: The Additive Position (EgD-POS-001). The review and distribution path: The Review Path (EgD-STR-001). Source of record: the repository.