First Plateau.
Priostack · specification · v1 draft

The First Plateau: the worldmodel before we act.

The first plateau is the baseline picture Priostack holds of a person — who they are, what they carry, what they will not have automated — authored as a real model before the assistant does anything on their behalf. This spec defines what it contains, how it is captured with consent, when it is complete enough, and how Γ reads it.

It is for anyone, anywhere. The hundred things below are human universals, phrased to hold across cultures, faiths, incomes, family shapes, and abilities — never a data-broker profile.

100 knowings 12 domains 5 plateau layers 5 signal types status · draft for review
01 · Purpose

A good assistant knows the person it assists.

Priostack acts on a person’s behalf: it prioritizes, decides, and sometimes moves money or reaches people. It can only do that with dignity if it holds a true model of the person — their environment, obligations, joys, pain, struggle, and above all the lines they do not want crossed.

The first plateau is that model at its starting, coherent state. It exists so decisions are made against a real world, not a blank one, and so Γ — the engine’s appraisal language — has a truthful baseline to read against. Γ can only tell drift from normal, or novelty from routine, if “normal” is richly and honestly described first.

  • Consent-first. Every knowing has a basis. The person can decline any of it, and “prefer not to say” is a respected answer, not a gap to nag about.
  • True or uncertain, never invented. A wrong knowing poisons Γ. Confidence and freshness are tracked; the plateau reports UNKNOWN rather than guess.
  • Owned by the person. It serves them, is theirs to read and redact, and is not a profile sold or scored.
02 · Definitions

The words this spec relies on.

Plateau
In ArchiMate, a plateau is a relatively stable state of an architecture. Here it is a stable state of a person’s worldmodel. The first plateau is the baseline — the initial coherent picture. Later plateaus are authored as life changes; the gap between two plateaus is a transition Γ can narrate.
Knowing
One thing the plateau holds about the person — a statement plus its type, source, consent basis, confidence, and freshness. The hundred knowings in the dictionary are the vocabulary of a complete first plateau.
Worldmodel
The full ArchiMate model of the person’s world across motivation, business, application, technology, and lived context. The plateau is its root state.
Γ (baseline / known territory)
Γ appraises the trajectories the person’s decisions leave in geometric memory, against the “known territory” the plateau establishes. It narrates only on a genuine deviation and stays silent otherwise.
03 · Structure

The plateau is the root of the worldmodel chain.

Priostack runs one chain from the model of the person down to the behaviour they experience. The plateau is where it starts: the ArchiMate model. Everything downstream reads from it.

ArchiMate
The model
The person’s world across motivation, business, application, technology, and context. The plateau lives here.
BPMN · CMMN · DMN
The behaviour
Processes, cases, and decisions run as Petri nets and rule tables over the model — not as hand-written code.
Integration · IFML
The surface
Execution and the interface the person sees, rendered from the model rather than bespoke screens.
Γ
The appraisal
Reads the trajectories the model produces and narrates drift or novelty — grounded in the plateau baseline.

Each knowing is placed on the plateau layer it belongs to. That placement is not decoration: it decides how the knowing is used downstream — a motivation knowing shapes what the assistant optimizes for, a constraint becomes a hard gate in a decision table, a context knowing colours how Γ reads a situation.

Distribution of the hundred knowings across plateau layers.

04 · The model

Every knowing carries its type, so the system treats it correctly.

A knowing is never just a value. It is stored with a signal type that tells the substrate how to treat it, a source and confidence that say how much to trust it, and a freshness stamp so stale facts decay rather than mislead. The signal type is the load-bearing field:

Signal typeWhat it isHow the system treats it
stable-factRarely changes (identity, origin, a chronic condition).Trusted long; a change is itself notable and re-confirmed, not silently overwritten.
changing-stateExpected to move (income, health, mood, location).Its trajectory is exactly what Γ watches — drift here is signal, not error.
preferenceHow the person wants to be treated (tone, channel, timing).Shapes behaviour and voice; never treated as a fact about the world.
constraintA hard line (do-not-disturb, never automate this, a limit).A gate on decisions. Enforced, never traded away for convenience or by Γ.
relationshipA tie to a person, group, org, or place.An edge in the model; carries its own consent and its own priority.
Source is provenance, not just origin

Each knowing records how it was learned — ask (the person told us), observe (from their own activity), app (a service they use, shared with consent), or derive (inferred, only where inference was consented). Derived knowings carry lower confidence and are the first to be re-confirmed.

05 · Capture & consent

The first plateau is grown, not interrogated.

No one is asked a hundred questions. The first plateau is seeded by a short, tone-adaptive conversation that captures only the load-bearing knowings, then grows over time from what the person chooses to share, what their apps contribute with consent, and what can be safely derived.

Consent is per-knowing and purpose-bound. Sensitive knowings (health, faith, finances, relationships, safety) require an explicit basis and are stored at a higher protection tier. The person can decline, redact, or correct anything; a redaction is honoured downstream, not merely hidden.

What-not-to-know is itself a knowing

The strongest signal of respect is recording what the person does not want automated, known, or shared — and when never to disturb them. Those are first-class constraints in the plateau, and they outrank convenience every time.

06 · Completeness

“Complete” is not all hundred filled — it is a true baseline.

A first plateau is solid when each layer holds enough true knowings for Γ to have a baseline, and the load-bearing minimum is present. Until then, Γ honestly reports UNKNOWN rather than guessing — the same way the engine returns “no evidence” against a thin baseline rather than inventing a verdict. Completeness is a coverage bar per layer, not a checklist score.

The minimum for Γ to be honest — the knowings without which the assistant should not act unsupervised:

Identity and how they want to be addressed
Preferred language, channel, and tone
The people and obligations they carry
Hard constraints — what never to automate, when not to disturb
Autonomy preference — confirm-first vs act-for-me, and where the line moves
Any safety, health, or precarity fact that changes what is safe to do
07 · How Γ reads the plateau

The plateau is the “known territory” Γ measures against.

Every decision the person makes runs on the substrate and leaves a trajectory in geometric memory. Γ compares each new trajectory against the baseline the plateau establishes. It narrates only on a genuine deviation — something outside known territory, or a state that has really begun to migrate — and stays quiet the rest of the time. Constraints are not appraised; they are enforced.

This is why the plateau must be rich and true: a thin or wrong baseline makes Γ either cry wolf or miss the moment that mattered. A good plateau means fewer false alarms and more true ones.

Γ hears · example

“You send help to family most months, so this month’s transfer is expected — I won’t flag it. But it went to someone new and larger than you ever send, so I’ll check it’s really you.”

08 · Lifecycle & representation

The first plateau is v1 of a living model.

Lifecycle. The first plateau is the baseline. Life events — a new child, a move, a loss, a job change — author successive plateaus, each versioned. The transition between two plateaus is a real object Γ can narrate. Stale knowings decay in confidence and are re-confirmed rather than assumed.

Representation. The plateau is authored as a real ArchiMate model on the substrate — not a form’s worth of fields. Each knowing is an element on its layer; relationships are edges; the whole is versioned and is what decisions (BPMN/DMN), the interface (IFML), and Γ all read from.

Non-goals · the honesty boundary

Not surveillance, not a dossier, not a personality score. Measure, don’t assert. UNKNOWN over fabrication. The plateau serves the person and is owned by them; every knowing is true, uncertain-and-marked, or absent — never guessed.

09 · Data dictionary

The hundred knowings of a complete first plateau.

The concrete content: a hundred universal things worth knowing, each mapped to its plateau layer, signal type, and source, with an example of the Γ narration it enables. Filter by layer or search to explore.

Nothing matches that filter.