This Charter constitutes the foundational governance instrument of the QODIQA standard corpus. It establishes the authority, structure, and procedural discipline under which the QODIQA technical standards are maintained, amended, and evolved. It is not a policy document, a product specification, or an organizational charter in the corporate sense. It is a constitutional layer governing the life cycle of a technical standard.
The QODIQA standard corpus addresses a structural problem in AI governance: the absence of deterministic, machine-enforceable consent at the moment of AI execution. The integrity of that architecture depends not only on its technical precision, but on the governance discipline that ensures it cannot be silently diluted, arbitrarily amended, or captured by interests incompatible with its foundational invariants. This Charter provides that discipline.
Version 2.0 of this Charter introduces hardening provisions across six dimensions: governance scalability under adoption growth, Standards Steward institutionalization guardrails, formal qualification of amendment proposers, voting record discipline, an emergency amendment protocol, and consolidation of the Core Invariant Protection Rule into a single canonical definition. No enforcement semantics, no foundational principles, and no corpus document authority structures have been modified. These are structural additions only.
Nothing in this Charter may be construed to alter, weaken, or reinterpret the technical enforcement semantics defined in the normative documents of the QODIQA corpus. Governance exists to protect structural integrity - not to substitute for it.
#Institutional Purpose
This Charter defines the governance framework for the QODIQA standard corpus. Its purpose is to establish the procedures, roles, and constraints under which QODIQA technical standards are created, amended, versioned, and retired. It does not define enforcement semantics, implementation requirements, or certification criteria. Those functions belong to the normative documents of the corpus.
1.1Scope of Governance Authority
The governance authority established by this Charter applies to all documents designated as part of the QODIQA Standard Corpus, as defined in Article 3. It governs the processes by which those documents are modified, the roles authorized to participate in those processes, and the safeguards that preserve the technical integrity of the corpus across versions.
Governance authority does not extend to: the internal implementation decisions of conformant systems, the legal interpretation of regulatory obligations addressed by the corpus, the operational decisions of certified entities, or the commercial activities of any organization building upon the standard.
1.2Relationship to Corpus Documents
| Document | Role in Corpus | Governance Relationship |
|---|---|---|
| QODIQA Whitepaper | Conceptual foundation | Informative; governed as corpus record |
| 68-Point Enforcement Framework | Primary normative standard | Normative; full amendment process applies |
| Core Standard | Formal specification | Normative; full amendment process applies |
| Certification Framework | Conformance criteria | Normative; certification oversight applies |
| Implementation Playbook | Guidance document | Informative; simplified amendment process |
| Regulatory Alignment Matrix | Compliance mapping | Informative; periodic review required |
| Security and Cryptographic Profile | Security specification | Normative; Cryptographic Advisory Panel review required |
| Conformance Test Suite | Verification specification | Normative; full amendment process applies |
| Governance Charter | This document | Constitutional; supermajority required for amendment |
1.3Boundary Between Governance and Technical Content
This Charter governs process and structure. It does not define, interpret, or constrain the technical content of the normative documents. Technical decisions - including enforcement semantics, control point definitions, cryptographic requirements, and conformance criteria - are determined through the technical review processes established herein, and are recorded in the normative documents themselves.
In the event of apparent conflict between this Charter and a normative document, the Charter governs matters of process; the normative document governs matters of technical specification.
#Governance Principles
The following principles constitute the normative foundation of this Charter. All governance decisions, amendment proposals, and procedural interpretations shall be evaluated against these principles. No governance action may be taken that is demonstrably inconsistent with any principle defined herein.
The governance framework shall preserve the deterministic character of the QODIQA enforcement model. No amendment to any normative document may introduce non-deterministic behavior, probabilistic decision paths, or inference-based authorization logic into the core enforcement semantics. Any proposed change that introduces ambiguity in enforcement outcome shall be rejected. See canonical definition at Rule CIPR-01 in Article 7.
The fail-closed invariant is a core structural property of the QODIQA enforcement model. No governance action may weaken, conditionally suspend, or create exceptions to fail-closed behavior. Amendments that propose optional, configurable, or deployment-conditional fail-closed semantics shall not be ratified. This principle applies to all normative documents and is not subject to override by any governance body acting within its standard authority. See canonical definition at Rule CIPR-01 in Article 7.
Amendment to normative documents shall distinguish between breaking and non-breaking changes and apply appropriate versioning accordingly. Breaking changes that alter conformance requirements, modify enforcement semantics, or invalidate existing certified implementations shall only be introduced through major version increments and must be accompanied by a formal migration path and transition period specification.
Every proposed amendment to a normative document must be justified by technical necessity, demonstrated conformance gap, regulatory evolution, or identified security risk. Amendments motivated solely by commercial interest, market positioning, or stakeholder preference without technical basis shall not be accepted into review. The amendment record shall document the technical justification for each ratified change.
All version transitions, amendment ratifications, and document state changes shall be recorded in a publicly accessible changelog. The complete version history of each corpus document shall be preserved and retrievable. No change to a normative document may be made without a corresponding, timestamped amendment record. Retroactive alteration of published version records is prohibited.
The QODIQA standard corpus shall not prescribe implementation technologies, specific software libraries, cryptographic primitives beyond what is necessary for security properties, or vendor-specific integration mechanisms except where technically necessary for deterministic enforcement. Governance decisions shall not favor or disfavor specific implementation approaches that satisfy the enforcement invariants.
The governance of the QODIQA standard corpus shall remain structurally independent from the commercial interests of any organization building products, services, or certification programs upon the standard. No governance role may be conditioned upon commercial contribution. Amendment proposals shall not be weighted by the commercial significance of the proposing party. Conflict-of-interest provisions in Article 6 shall be enforced without exception.
#Standard Corpus Definition
The QODIQA Standard Corpus is the complete set of documents governed by this Charter. Corpus membership confers specific procedural obligations with respect to versioning, amendment, and archival. Corpus membership is established by formal designation and recorded in the Corpus Registry maintained by the Standards Steward.
3.1Normative Documents
Normative documents define mandatory requirements. Conformant implementations must satisfy the requirements stated in normative documents. Amendments to normative documents require the full amendment process defined in Article 5. The following document classes carry normative authority:
- The 68-Point Enforcement Framework, including all control point definitions and domain specifications
- The Core Standard, defining the enforcement model, consent primitives, and evaluation semantics
- The Certification Framework, defining conformance criteria and certification procedures
- The Security and Cryptographic Profile, defining mandatory cryptographic requirements
- The Conformance Test Suite, defining test methods and acceptance criteria
- This Governance Charter
3.2Informative Documents
Informative documents provide context, guidance, and implementation assistance. They do not impose mandatory requirements. Conformance is assessed against normative documents only. Informative documents may be amended through a simplified process as defined in Article 5. The following document classes are informative:
- The QODIQA Whitepaper, providing conceptual foundations and problem framing
- The Implementation Playbook, providing integration guidance and reference patterns
- The Regulatory Alignment Matrix, providing mapping to external regulatory frameworks
- Technical Appendices designated as informative at publication
3.3Experimental Drafts
Experimental drafts are working documents under active development. They carry no normative authority and are not subject to the full amendment process. Experimental drafts may be published for community review and technical feedback. An experimental draft may be advanced to candidate status by decision of the Technical Review Committee following review. Until formally advanced, experimental drafts shall be clearly marked as such and shall not be cited as normative references.
3.4Corpus Registry
The Standards Steward shall maintain a Corpus Registry that records the current membership, document state, version, and amendment history of all corpus documents. The Corpus Registry shall be publicly accessible and updated within five business days of any state transition or version publication.
#Versioning Model
All normative documents in the QODIQA Standard Corpus shall be versioned according to the semantic versioning model defined in this Article. Version identifiers are permanent and immutable. A published version may not be altered; corrections require the issuance of a new version.
4.1Semantic Versioning Rules
Version identifiers follow the format MAJOR.MINOR.PATCH, where each component is a non-negative integer. The following rules govern version increments:
-ip appended to the current PATCH component (e.g., 1.2.3-ip). An Interim Patch version automatically enters Sunset Review upon publication and must be ratified or reverted within the period defined in Article 5b. Until sunset, it is treated as Ratified Standard for conformance purposes.4.2Version Lifecycle States
Each corpus document version exists in one of the following lifecycle states. State transitions are recorded in the Corpus Registry and announced via the publication process defined in Article 9.
4.3Deprecation Rules
Deprecation is the formal notice that a version, requirement, or document element will be removed or rendered non-normative in a future major version. Deprecation requires a minimum notice period of twelve months from announcement to removal. Deprecated elements shall be clearly marked in the document and listed in the deprecation registry. Deprecated elements retain their normative force until removal in the subsequent major version.
#Amendment Process
The amendment process governs all proposed changes to normative documents in the QODIQA Standard Corpus. The process is designed to ensure technical rigor, structural integrity, and transparent record-keeping while remaining practicable for the volume of changes expected during active standard development. A simplified process applies to informative documents and patch increments as noted. Emergency amendments are governed by Article 5b.
5.1Qualified Party Definition
The following categories define parties eligible to submit amendment proposals to the full amendment process. Eligibility is determined at intake by the Standards Steward. Classification is competence-based; commercial affiliation does not confer or deny eligibility.
The Standards Steward shall publish the Qualified Party eligibility determination and any sponsorship record in the amendment intake register within five business days of intake disposition.
5.2Full Amendment Process
The following process applies to all proposed changes to normative documents that result in MINOR or MAJOR version increments:
5.3Voting Record Requirements
For every ratification vote conducted under the full amendment process, the following must be recorded and published in the amendment register within fifteen business days of the vote:
Vote records are immutable once published. Corrections to vote records may only be issued by the Conflict Resolution Body following a formal review, and any correction must reference the original record and the basis for correction.
5.4Simplified Amendment Process
Patch increments to normative documents, and all amendments to informative documents, may be processed under the simplified amendment process: proposal submission with technical justification by any Qualified Party, Technical Review Committee approval without public review, and publication with changelog entry. Simplified process amendments may not alter normative requirements. A CIPR-01 clearance statement is required even under the simplified process.
5.5Required Documentation for Amendment Proposals
Every amendment proposal submitted to the full process must include the following documentation. Proposals lacking any required element will be returned at intake:
#Emergency Amendment Protocol
The Emergency Amendment Protocol provides a narrowly scoped accelerated path for addressing conditions that present immediate structural risk to the QODIQA corpus or its conformant implementations. It is not a general-purpose fast-track; it is a bounded exception to the standard amendment timeline. Its use does not waive any substantive requirement of the amendment process - it compresses the timeline and defers the full public review to a mandatory post-hoc phase.
The Emergency Amendment Protocol does not provide a mechanism to weaken deterministic or fail-closed invariants under any condition. Rule CIPR-01 applies without modification to all emergency amendments. No emergency designation overrides the CIPR-01 clearance requirement.
5b.1Eligible Triggering Conditions
The Emergency Amendment Protocol may be initiated only when one or more of the following conditions is confirmed by the Technical Review Committee:
Conditions that do not satisfy one of the above trigger types shall not be processed under this Protocol. Urgency of commercial need, implementation convenience, or regulatory interpretation differences do not constitute eligible triggering conditions.
5b.2Emergency Amendment Procedure
-ip suffix per Article 4.1). The Interim Patch enters Sunset Review immediately upon publication. The complete vote record is published simultaneously.
-ip suffix). If the post-hoc review results in rejection or modification, the version is reverted to the immediately prior Ratified Standard, and a new proposal reflecting any modifications must restart from Step 01 of the full amendment process.
5b.3Emergency Protocol Constraints
- No more than two Interim Patch versions of any single corpus document may be active simultaneously
- An Interim Patch may not itself be amended through the Emergency Amendment Protocol; it may only be superseded by completion of its own post-hoc full review
- Emergency Protocol usage frequency shall be reviewed annually by the Technical Review Committee; patterns of repeated use may indicate underlying structural deficiencies requiring a formal MINOR amendment
- All emergency declarations, eligibility determinations, and Interim Patch publications are recorded in the amendment register and remain publicly accessible without expiration
#Governance Structure
The governance of the QODIQA Standard Corpus is conducted through a set of defined institutional roles. The structure is designed to be functional with a minimal composition and scalable as the standard matures in accordance with the evolution thresholds defined in Article 11. Roles are defined by function, not by organizational affiliation. All role holders are bound by the conflict-of-interest provisions of this Article.
6.1Institutional Roles
The primary governance authority for the QODIQA corpus during the Foundational Phase. Responsible for corpus registry maintenance, proposal intake, amendment publication, and institutional continuity. The Standards Steward holds no veto over Technical Review Committee decisions on technical matters but retains authority over procedural matters and dissolution provisions. Transition of the Steward role is governed by Article 6b.
The body responsible for substantive technical review of all amendment proposals. Conducts impact analysis, issues recommendations, manages public review windows, and votes on ratification. Must consist of qualified technical reviewers with demonstrated competence in consent systems, distributed enforcement, or applicable regulatory frameworks. Composition evolves in accordance with Article 11.
Responsible for supervision of certification body activities, review of certification revocation decisions, and maintenance of the certified implementation registry. Operates independently of the Technical Review Committee on matters of certification integrity. Reports to the Standards Steward during the Foundational Phase; reporting structure evolves per Article 11.
Advisory body with standing to review all proposed amendments affecting the Security and Cryptographic Profile. Issues non-binding recommendations on cryptographic adequacy and algorithm lifecycle. Mandatory consultation for EAP-T1 and EAP-T2 emergency triggers. Convened on demand during the Foundational Phase; constituted as a standing body at Tier 2 per Article 11.
Convened on an ad hoc basis to resolve disputes arising from amendment process disputes, recusal decisions, or interpretation of this Charter. Composed of parties with no direct interest in the matter under dispute. Issues binding procedural rulings; does not rule on technical merit.
6.2Composition, Voting, and Quorum
The Technical Review Committee shall consist of a minimum of three and a maximum of nine members during the Foundational Phase. Composition expands in accordance with Article 11. A quorum for any vote requires the participation of a majority of eligible (non-recused) sitting Committee membership. Decisions on MINOR amendments require a simple majority of quorum. Decisions on MAJOR amendments require a supermajority of two-thirds of the sitting membership, including absent members.
6.3Recusal Requirements
Any governance role holder must recuse themselves from review, deliberation, or voting on any amendment where they hold a direct commercial or institutional interest in the outcome. Recusal is mandatory and self-enforcing; failure to recuse constitutes a governance violation. The Conflict Resolution Body may compel retroactive recusal review where conflicts are identified after the fact. Recusals are recorded in the amendment register and published as part of the vote record.
6.4Term Limits and Continuity
Technical Review Committee members serve terms of two years, renewable once without interruption. After two consecutive terms, a minimum one-year gap is required before re-appointment. The Standards Steward role is subject to institutionalization provisions defined in Article 6b. Succession provisions for involuntary governance disruption are addressed in Article 12.
#Standards Steward Institutionalization
The Standards Steward role in the Foundational Phase is necessarily concentrated. This concentration is intentional: it provides the decisional clarity required during initial corpus establishment and before governance institutions are sufficiently populated to sustain distributed authority. This Article defines the structural guardrails that prevent indefinite centralization and the transition path to a ratified or elected Steward structure under defined adoption conditions.
6b.1Foundational Phase Steward Authority
During the Foundational Phase (Tier 1 as defined in Article 11), the Standards Steward exercises the procedural authorities defined in this Charter. Those authorities are bounded: the Steward may not unilaterally ratify amendments, modify normative documents, alter version designations, or override Technical Review Committee decisions. The Steward's role is custodial and procedural. Technical authority rests with the Technical Review Committee.
6b.2Mandatory Transition Triggers
Upon reaching Tier 2 adoption thresholds defined in Article 11, the Standards Steward function must transition from a single-holder role to a Steward Council structure within twelve months of threshold confirmation. The Steward Council consists of three to five members, none of whom may hold the same organizational affiliation. The founding Steward becomes a Council member by default and may serve no more than one additional two-year Council term before mandatory rotation.
Upon reaching Tier 3 adoption thresholds, the Steward Council must transition to an elected structure within eighteen months of threshold confirmation. Elections are conducted by the Technical Review Committee membership, applying the voting record requirements of Article 5.3. The elected structure must preserve the conflict-of-interest provisions and commercial neutrality requirements of this Charter without diminution.
6b.3Steward Removal Procedure
The Standards Steward - or any Steward Council member - may be removed from the role under the following conditions:
6b.4Continuity of Governance During Transition
No Steward transition - whether triggered by Article 11 adoption thresholds, voluntary withdrawal, or removal under Section 6b.3 - shall suspend or interrupt the amendment process for any proposal currently in review. All in-progress proposals carry forward to the successor structure without prejudice to their position in the process.
#Change Impact Analysis Requirements
Every proposed amendment entering the full amendment process must be accompanied by a Change Impact Analysis. The Change Impact Analysis is a formal technical document, not a summary or narrative approximation. The Technical Review Committee is responsible for verifying the completeness and accuracy of the analysis. Where the proposing party has produced an initial analysis, the Committee must independently validate it.
No amendment may proceed to ratification unless all required Change Impact Analysis components have been completed and independently verified. An incomplete or contested analysis constitutes grounds for suspension of the amendment process pending resolution.
7.1Required Analysis Components
7.2Core Invariant Protection Rule - Canonical Definition
No amendment to any QODIQA corpus document may be ratified if its Change Impact Analysis produces a finding of Determinism Impact Present or Fail-Closed Impact Present.
This rule operates as an absolute, non-delegable constraint on the amendment process. It applies without exception to: the full amendment process (Article 5), the simplified amendment process (Article 5.4), the Emergency Amendment Protocol (Article 5b), and any governance evolution transition (Article 11). No governance body, governance phase, adoption threshold, or emergency condition provides authority to waive, defer, or override Rule CIPR-01.
The only path to modifying the deterministic or fail-closed invariants of the corpus is through a MAJOR version increment subject to a supermajority vote of two-thirds of the sitting Technical Review Committee, a public review period of no less than ninety calendar days, and a re-ratification process beginning from a new Candidate Standard designation. That path does not constitute an exception to Rule CIPR-01; it constitutes a complete replacement of the current major version of the standard, for which new invariant definitions must themselves be internally consistent and fail-closed.
#Certification Oversight
The Certification Framework governs the assessment of implementation conformance with the QODIQA normative standard. Governance oversight of certification ensures that the certification process faithfully reflects the requirements of the current ratified standard and that certified status is not issued or retained by implementations that fail to satisfy those requirements.
8.1Evolution of the Certification Framework
The Certification Framework is a normative document subject to the full amendment process. Amendments to the Certification Framework that alter conformance criteria, add new assessment categories, or change certification validity periods require full Technical Review Committee review. The Certification Oversight Panel holds standing as a QP-D qualified party to submit proposed amendments to the Certification Framework and to participate in their review as a subject matter authority.
8.2Supervision of Certification Bodies
The Certification Oversight Panel is responsible for maintaining the registry of authorized certification bodies. Authorization of a certification body requires demonstration of: independence from the implementation under assessment; technical competence in the QODIQA enforcement model; procedural capacity to execute the Conformance Test Suite; and commitment to public reporting of certification outcomes. Authorization may be withdrawn for demonstrated failure in any of these areas.
8.3Certification Revocation
Certification revocation may be initiated by the Certification Oversight Panel upon: evidence that a certified implementation fails to satisfy the requirements of the normative standard against which it was certified; a material version transition that renders the certification basis superseded beyond the applicable transition period; or demonstrated misrepresentation in the certification assessment process. Revocation decisions are subject to review by the Conflict Resolution Body upon request of the affected implementation holder. Revocations are published in the Corpus Registry.
8.4Conflict of Interest in Certification
Certification bodies may not assess implementations in which they hold a direct commercial interest. Governance role holders who participate in the assessment of a specific implementation's certification application must recuse themselves from any governance decision affecting that certification. The Certification Oversight Panel must review and publish its conflict-of-interest policy on an annual basis.
8.5Non-Interference with Enforcement Semantics
The Certification Oversight Panel and all certification bodies operate within the enforcement semantics defined by the normative standard. Neither the Panel nor any certification body holds authority to reinterpret, relax, or supplement the enforcement requirements of the standard in the course of certification activities. Ambiguities in the standard are to be referred to the Technical Review Committee for clarification through the patch amendment process, not resolved unilaterally by certification bodies.
#Transparency and Publication Requirements
The governance of the QODIQA Standard Corpus shall be conducted transparently. All material governance actions, amendment records, and version transitions shall be accessible to the public. Transparency is not merely a procedural aspiration; it is a structural requirement that enables the corpus to function as a trustworthy technical standard.
9.1Public Changelog Requirements
A versioned changelog shall be maintained for each normative corpus document and for the Corpus Registry. Each changelog entry must record: the amendment identifier, a concise description of the change, the impact classification, the ratification date, the effective date, and the resulting document version. Changelog entries are immutable once published. Corrections to changelog entries are issued as separate entries referencing the original.
9.2Version Archive Retention
All published versions of normative corpus documents - including Interim Patch versions, whether ratified or reverted - shall be preserved in a publicly accessible archive without expiration. Archived versions shall be clearly marked with their lifecycle state, the date of state transition, and, for reverted Interim Patches, the reversion notice. The archive shall be maintained in a format that does not require specialized software to access. Archive responsibilities transfer with governance custody in accordance with Article 12.
9.3Disclosure of Amendments
The complete amendment record for each ratified amendment - including the original proposal, proposer identity and Qualified Party category, sponsorship record if applicable, the Technical Review Committee's analysis and recommendation, all material public comments received, the CIPR-01 clearance statement, and the vote record as defined in Article 5.3 - shall be published no later than fifteen business days following ratification. Rejected proposals and their reasons for rejection shall also be published with sufficient technical detail.
9.4Registry Publication Format
The Corpus Registry shall be published in a machine-readable format in addition to a human-readable representation. The registry shall include: the current list of corpus documents with their version, state, and document identifier; the list of ratified amendments and Interim Patches; the list of active certifications and certification bodies; the list of current governance role holders; and the current governance phase (Tier designation per Article 11). The registry shall be updated within five business days of any change.
9.5Historical Version Accessibility
Superseded and archived versions of corpus documents shall remain accessible at stable, permanent identifiers. The Standards Steward shall maintain or designate a preservation host for historical versions. Governance custody transfers under Article 12 include explicit obligation to maintain or transfer historical version accessibility.
#Safeguards Against Capture
The structural integrity of the QODIQA standard corpus depends on its independence from capture by interests incompatible with its foundational purpose. This Article defines the structural protections that prevent the standard from being diluted, redirected, or rendered technically incoherent through amendment processes that serve interests other than the integrity of deterministic runtime consent enforcement.
10.1Commercial Neutrality Clause
No amendment to any corpus document may be conditioned upon, funded by, or structured to benefit the commercial interests of any specific organization, product, or implementation. Amendments motivated by market positioning, competitive advantage, or commercial differentiation - rather than technical necessity - shall not be accepted at intake. The Standards Steward shall enforce this clause at the proposal intake stage and may request additional disclosure from proposing parties where commercial motivation is suspected.
10.2Amendment Anti-Dilution Protections
The following amendment patterns are structurally prohibited and shall be rejected at intake regardless of their technical framing:
- Amendments that introduce optional, configurable, or deployment-conditional enforcement semantics into requirements that are currently mandatory
- Amendments that add "best effort," "reasonable," or probabilistic qualifiers to requirements that currently impose deterministic obligations
- Amendments that narrow the scope of the fail-closed invariant by defining categories of execution to which it does not apply
- Amendments that substitute documentation obligations for enforcement obligations in normative requirements
- Amendments that re-classify normative requirements as informative guidance without a major version increment
10.3Core Invariant Protection
The canonical definition of core invariant protection is Rule CIPR-01, defined in Article 7.2. No governance body constituted under this Charter holds authority to weaken the deterministic or fail-closed invariants through any ordinary amendment path. This constraint is absolute and applies across all governance phases. Cross-reference: Rule CIPR-01.
10.4Supermajority Requirement for Core Changes
The path to modifying the deterministic or fail-closed invariants is defined in Rule CIPR-01 (Article 7.2). That path requires: a MAJOR version increment; a supermajority vote of two-thirds of the sitting Technical Review Committee; a full public review period of no less than ninety calendar days; and a re-ratification process beginning from a new Candidate Standard designation. No governance phase, emergency condition, or adoption threshold alters or waives these requirements.
#Governance Evolution and Scaling Mechanism
The governance structure of the QODIQA Standard Corpus is designed to scale with adoption. The scaling mechanism is trigger-based: defined, measurable adoption thresholds initiate transitions between governance phases. These transitions expand governance capacity and distribute oversight authority. They do not modify enforcement invariants, alter the amendment process, or weaken the safeguards defined in Articles 7 and 10.
Governance phase transitions are structural changes only. No transition between governance phases modifies enforcement semantics, changes Rule CIPR-01, or alters the voting thresholds required for MAJOR amendments or core invariant changes. Those requirements are invariant across all phases.
11.1Governance Phase Definitions
11.2Adoption Threshold Definitions
Tier transitions are triggered when all thresholds for the target tier are confirmed by the Technical Review Committee and recorded in the Corpus Registry. Confirmation requires independent verification by the Certification Oversight Panel of the certification and certification body counts.
| Threshold Metric | Tier 2 Trigger Value | Tier 3 Trigger Value |
|---|---|---|
| Active certified implementations | 10 or more | 50 or more |
| Independent authorized certification bodies | 3 or more, no two sharing organizational affiliation | 7 or more, operating across at least 3 distinct jurisdictions |
| Jurisdictions with active conformant deployments | 3 or more | 10 or more |
| Qualified Party amendment proposers (distinct organizations, trailing 24 months) | 5 or more | 15 or more |
Thresholds are evaluated on a rolling basis. Once confirmed, a Tier transition may not be reversed by a subsequent decline in adoption metrics. The governance structure advances but does not regress.
11.3Technical Review Committee Composition Under Scaling
At each tier transition, the Technical Review Committee is responsible for defining and publishing its own expanded composition criteria within the constraints specified in Article 11.1. These criteria must address: minimum member count, organizational diversity (no single organization may hold more than one-third of seats at Tier 2 and one-quarter at Tier 3), technical competency requirements for new members, and the nomination and appointment procedure. Composition criteria are published as an informative addendum to the Corpus Registry and do not require a full amendment process to update, provided the update does not reduce the diversity or competency requirements below the minimum thresholds defined in this Article.
11.4Invariance of Enforcement Structure Across Phases
No governance phase transition - whether from Tier 1 to Tier 2, Tier 2 to Tier 3, or any intermediate structural change - may alter the following: the enforcement invariants defined in Principles GP-01 and GP-02; the canonical Rule CIPR-01; the supermajority thresholds for MAJOR amendments and core invariant changes; the amendment anti-dilution protections of Article 10.2; or the dissolution and transfer provisions of Article 12. These elements are phase-invariant by constitutional design.
#Dissolution and Transfer Provisions
The long-term institutional continuity of the QODIQA Standard Corpus requires explicit provisions for the event that the current governance entity is dissolved, becomes inactive, or elects to transfer governance custody. These provisions ensure that the corpus remains accessible, intact, and governed under consistent principles regardless of changes in governance structure.
12.1Dissolution of the Governance Entity
In the event that the Standards Steward or Steward Council becomes unable or unwilling to discharge governance responsibilities - whether through organizational dissolution, voluntary withdrawal, legal incapacity, or demonstrated abandonment of governance obligations - the following provisions apply in order:
12.2Preservation of Document Integrity
Custody transfer does not grant the successor entity authority to retroactively alter, re-version, or re-classify any previously ratified document. All ratified versions retain their version identifiers and lifecycle states. The successor entity may issue new amendments following the processes defined in this Charter, but may not modify the amendment history or changelog records of predecessor versions.
12.3Continuity of Certification
Upon governance transfer, all valid certifications issued under the prior governance structure remain valid for the duration of their applicable transition periods. The successor governance entity assumes the Certification Oversight Panel function and inherits the registry of authorized certification bodies and certified implementations. Existing certification bodies are not required to re-authorize following a custody transfer unless the successor entity determines that their practices are inconsistent with the current Certification Framework.
12.4Governance Phase Continuity on Transfer
Custody transfer does not reset the governance phase. A successor entity that accepts governance custody of a corpus in Tier 2 or Tier 3 assumes the obligations of that tier, including composition requirements, Steward Council structure, and elected structure obligations. The successor may not retract to a prior tier's governance structure.
#Institutional Closing Declaration
The QODIQA Governance Charter exists for one purpose: to ensure that the technical standard it governs remains capable of doing what it was designed to do - provide deterministic, machine-enforceable consent at the moment of AI execution. Governance is not an end in itself. It is a structural condition for the trustworthiness of the standard over time.
The authority of this standard derives from the technical invariants it preserves - not from the institutions that administer it, not from regulatory endorsement, and not from market adoption. If those invariants are intact, the standard retains its meaning. If they are compromised, no governance structure can restore it.
13.1The Purpose of Governance
Governance exists to preserve deterministic runtime consent enforcement across the life of the standard. It does this by ensuring that changes to the corpus are technically justified, structurally sound, and transparent. It does not do this by introducing policy ideology, by resolving societal questions about AI governance through the amendment process, or by making the standard an instrument of any commercial, political, or institutional agenda.
The governance structure defined in this Charter is minimal by design at inception and scales by threshold rather than by preference. At no tier does it acquire authority over third parties, legal standing as a regulatory body, or the capacity to modify enforcement semantics. Its authority is entirely constituted by the commitment of participants to abide by its procedures.
13.2Governance Exists to Protect Structural Integrity
Every provision of this Charter - the non-waivable principles, the change impact requirements, the supermajority thresholds, the anti-capture safeguards, the emergency protocol constraints, the Steward institutionalization guardrails, the qualified party eligibility structure, and the governance phase invariance clause - reflects a single underlying commitment: that the structural properties of the QODIQA enforcement model cannot be eroded through well-intentioned procedural exceptions, commercially motivated amendments, or the accumulated pressure of stakeholder preferences. Governance exists to make that erosion structurally difficult, not merely discouraged.
The determinism and fail-closed invariants of the QODIQA standard are not configurable properties. They are the standard. Their preservation is the condition under which QODIQA remains a trustworthy basis for AI authorization infrastructure. This Charter is the instrument by which that condition is maintained - across all adoption scales, governance phases, and institutional transitions.
13.3Authority Derived from Technical Invariants
QODIQA's authority as a technical standard derives from the precision, consistency, and verifiability of its enforcement model - not from institutional prestige, regulatory mandate, or market position. Governance cannot manufacture that authority; it can only protect it. The obligation of every governance role holder - at every tier, in every phase - is to act in the interest of the standard's structural integrity, and to subordinate their institutional, commercial, or personal preferences to that obligation without exception.
This Charter is the constitutional layer of the QODIQA corpus. It does not expire, does not require periodic renewal, and does not become optional as the standard matures or as governance scales. It governs until a duly constituted successor instrument is ratified through the process it defines.
#Document Status and Classification
This document is the Governance Charter of the QODIQA specification corpus. It constitutes the constitutional governance instrument establishing the authority, procedural structure, and constraints under which all QODIQA technical standards are maintained, amended, versioned, and retired. It is issued as a Normative Constitutional Governance Instrument and is not a product specification, compliance framework, or organizational charter in the corporate sense.
Version 2.0 supersedes QODIQA-GOV-CHARTER v1.0. All corpus documents governed by v1.0 are governed by this Charter from its effective date. The amendment register, Corpus Registry, and all ratified versions produced under v1.0 governance retain their validity and are incorporated by reference into the v2.0 governance structure without re-ratification.
Proposed amendments to this Charter must be submitted by a Qualified Party in accordance with the full amendment process defined in Article 5 and require supermajority ratification as defined in Article 10. This Charter does not sunset and does not require periodic reaffirmation.
This document should be read together with the following related specifications:
- QODIQA — Consent as Infrastructure for Artificial Intelligence Technical Whitepaper — Version 1.0
- QODIQA — Core Standard for Deterministic Runtime Consent Enforcement — Version 1.0
- QODIQA — 68-Point Enforcement Framework for Deterministic Runtime Consent Enforcement — Version 1.0
- QODIQA — Certification Framework for Deterministic Runtime Consent Enforcement — Version 1.0
- QODIQA — Security and Cryptographic Profile for Runtime Consent Enforcement — Version 1.0
- QODIQA — Conformance Test Suite Specification for Deterministic Runtime Consent Enforcement — Version 1.0
- QODIQA — Implementation Playbook for Deterministic Runtime Consent Enforcement — Version 1.0
- QODIQA — Regulatory Alignment Matrix for Deterministic Runtime Consent Enforcement — Version 1.0
Version 2.0 represents the second formal release of this document as part of the QODIQA standard corpus.
For strategic inquiries, architectural discussions, or partnership exploration:
Bogdan Duțescu
0040.724.218.572
#Scope
This document constitutes the constitutional governance instrument for the QODIQA Standard Corpus. It defines the authority, procedural structure, and constraints under which all QODIQA technical standards — including the QODIQA — 68-Point Enforcement Framework for Deterministic Runtime Consent Enforcement — Version 1.0, the QODIQA — Core Standard for Deterministic Runtime Consent Enforcement — Version 1.0, and associated normative documents — are maintained, amended, versioned, and retired.
This Charter does not define enforcement semantics, implementation requirements, certification criteria, or organizational obligations beyond the governance of the standard corpus. It is not a policy document, compliance framework, or product specification. Organizations seeking normative implementation guidance should refer to the QODIQA — 68-Point Enforcement Framework for Deterministic Runtime Consent Enforcement — Version 1.0 and the QODIQA — Certification Framework for Deterministic Runtime Consent Enforcement — Version 1.0. This Charter governs the processes by which those documents evolve.
#Terminology
The following definitions apply to terms as used in this Charter. For normative terminology applicable to the full QODIQA standard corpus, refer to the QODIQA — Terminology and Normative Definitions — Version 1.0 document.
-
Governance Charter
This document. The constitutional governance instrument establishing authority structures, amendment procedures, and structural safeguards for the QODIQA Standard Corpus. Distinguished from policy documents by its constitutional authority over the amendment process itself.
-
Standard Corpus
The complete set of documents governed by this Charter, as recorded in the Corpus Registry. Includes normative, informative, and experimental documents designated for corpus membership by the Standards Steward.
-
Amendment Record
The complete set of documentation associated with a single amendment, including the original proposal, impact analysis, public comments, CIPR-01 clearance statement, and vote record. Amendment records are permanently published and immutable.
-
Rule CIPR-01
The Core Invariant Protection Rule. An absolute, non-delegable constraint that prevents ratification of any amendment whose Change Impact Analysis finds Determinism Impact Present or Fail-Closed Impact Present. Canonical definition in Article 7.2.
-
Qualified Party
A party eligible to submit amendment proposals under this Charter. Four categories are defined (QP-A through QP-D), based on governance body membership, certified entity representation, technical contribution with sponsorship, and authorized certification body status. Eligibility is determined at proposal intake.
-
Governance Phase
One of three structural configurations of the governance apparatus (Tier 1 Foundational, Tier 2 Multi-Member, Tier 3 Distributed Oversight), triggered by adoption thresholds defined in Article 11. Phase transitions expand governance capacity without modifying enforcement invariants.
#Conformance Language
The key words MUST, MUST NOT, SHOULD, SHOULD NOT, and MAY in the QODIQA specification corpus indicate requirement levels for conformant implementations of the QODIQA enforcement architecture.
In this Governance Charter, such terms describe procedural obligations on governance role holders and the amendment process itself. They do not describe implementation requirements for conformant AI systems. For normative implementation requirement definitions, refer to the QODIQA — 68-Point Enforcement Framework for Deterministic Runtime Consent Enforcement — Version 1.0.
#Standard Corpus
This document is part of the QODIQA standard corpus - a structured set of technical specifications, analytical papers, governance instruments, and implementation resources maintained by QODIQA Standards and Research. Documents in the corpus are cross-referenced and versioned under the QODIQA — Corpus Change Log and Version History — Version 1.0.
Governance Note
This Charter constitutes the constitutional layer of the corpus. All amendments to corpus documents are subject to the procedures defined herein. The authority structure, amendment process, and invariant protection rules of this Charter apply to all documents listed below.
- QODIQA — Consent as Infrastructure for Artificial Intelligence Technical Whitepaper — Version 1.0
- QODIQA — Core Standard for Deterministic Runtime Consent Enforcement — Version 1.0
- QODIQA — 68-Point Enforcement Framework for Deterministic Runtime Consent Enforcement — Version 1.0
- QODIQA — Certification Framework for Deterministic Runtime Consent Enforcement — Version 1.0
- QODIQA — Governance Charter for the QODIQA Standard Corpus — Version 1.0
- QODIQA — Security and Cryptographic Profile for Runtime Consent Enforcement — Version 1.0
- QODIQA — Conformance Test Suite Specification for Deterministic Runtime Consent Enforcement — Version 1.0
- QODIQA — Reference Architecture for Deterministic Runtime Consent Enforcement — Version 1.0
- QODIQA — Regulatory Alignment Matrix for Deterministic Runtime Consent Enforcement — Version 1.0
- QODIQA — Threat Model and Abuse Case Specification — Version 1.0
- QODIQA — Implementation Playbook for Deterministic Runtime Consent Enforcement — Version 1.0
- QODIQA — Economic Impact Analysis of Deterministic Runtime Consent Enforcement — Version 1.0
- QODIQA — Terminology and Normative Definitions — Version 1.0
- QODIQA — Interoperability and Deployment Constraints — Version 1.0
- QODIQA — Public Specification License — Version 1.0
- QODIQA — Positioning and Scope Limitation Statement — Version 1.0
- QODIQA — Residual Risk and Assumption Disclosure Annex — Version 1.0
- QODIQA — Use Case Dossiers for Runtime Consent Enforcement Deployments — Version 1.0
#Institutional Disclaimer
This document constitutes the constitutional governance instrument of the QODIQA standard corpus. It does not constitute regulatory guidance, legal advice, financial recommendation, or investment analysis of any kind. The procedural obligations defined herein apply to governance role holders and amendment participants. They do not create direct legal obligations for third parties operating conformant implementations.
Nothing in this Charter alters, supplements, or overrides the applicable law of any jurisdiction with respect to data protection, AI regulation, or related obligations. Organizations implementing QODIQA-conformant infrastructure should obtain qualified legal counsel for jurisdiction-specific compliance determinations.
QODIQA Standards and Research does not accept liability for governance decisions or amendment outcomes that result from processes conducted under this Charter. The Charter provides procedural structure; it does not guarantee outcomes or confer legal standing to any party.
#Recommended Citation
QODIQA Governance Charter - Institutional Governance and Amendment Framework.
QODIQA Governance Charter v2.0.
QODIQA Standard Corpus, April 2026.
Document Identifier: QODIQA-GOV-CHARTER.
Persistent Reference: QODIQA-GOV-CHARTER
#Revision History
| Version | Date | Summary of Changes |
|---|---|---|
| v2.0 | April 2026 | Added: Art. 5.1 Qualified Party definitions; Art. 5.3 Voting Record Requirements; Art. 5b Emergency Amendment Protocol; Art. 6b Steward Institutionalization; Art. 11 Governance Evolution and Scaling Mechanism; Art. 4.1 Interim Patch version type; Art. 4.2 Sunset Review lifecycle state. Consolidated: Rule CIPR-01 canonical definition into Art. 7.2 with cross-references from Arts. 2, 5, and 10. Restructured Art. 12 (Dissolution and Transfer). No enforcement semantics modified. All foundational principles and corpus authority structures preserved without change. |
| v1.0 | February 2026 | Initial publication of the QODIQA Governance Charter. Established foundational governance framework including Governance Principles (GP-01 through GP-07), Standard Corpus Definition, Versioning Model (MAJOR/MINOR/PATCH), Amendment Process (7-step full process), Simplified Amendment Process, Governance Structure with five institutional roles, Change Impact Analysis requirements, Core Invariant Protection Rule, Certification Oversight, Transparency and Publication Requirements, Safeguards Against Capture, and Dissolution or Transfer Provisions. |