| # NATO-1000 Protocol Procedures | |
| ## P-001 Startup | |
| Load a reviewed configuration, validate bounds, confirm the selected model ID exists, initialize logging, initialize the audit ledger, and confirm `health().ready` and `health().audit_chain_valid`. If any check fails, stop before inference. | |
| ## P-002 Ingestion | |
| Identify the source owner and license, scan for credentials and personal data, use the allowlisted parser, enforce the size limit, redact where configured, hash the normalized record, deduplicate, and record the outcome. On parser or policy failure, quarantine the original and stop downstream use. | |
| ## P-003 Inference | |
| Generate a run identifier, record `run_started`, validate the prompt, execute only the selected backend, validate the result schema, record `run_finished`, and return the result. Any exception records a sanitized error event. With `fail_closed=true`, no partial result is returned. | |
| ## P-004 Permission elevation | |
| Network and tools are disabled by default. Before enabling either, document the allowlist, authentication method, timeout, rate limit, data classification, operator approval, rollback action, and audit destination. Never infer permission from model text. | |
| ## P-005 Incident response | |
| Stop new runs, preserve logs and audit files, record the incident identifier, verify the ledger, isolate quarantined inputs, rotate exposed credentials, reproduce offline, patch and test, and release only after review. Do not delete evidence to make a test pass. | |
| ## P-006 Rollback | |
| Pin the last known-good source revision and configuration, restore only reviewed artifacts, run syntax and unit checks, perform all five smoke tests, verify the audit chain, and document the rollback reason. External side effects require an operator-approved rollback plan. | |
| ## P-007 Shutdown | |
| Stop intake, complete or cancel active runs according to the deployment policy, flush logs, verify the ledger, and close the process. The runtime performs no background network activity. | |