The Ten House Protocols

• A dead link is replaced by an archived copy, and the swap is logged.
• PDFs. We keep our own copy of every cited PDF, with its SHA-256 and the date retrieved. Where republishing is allowed, our copy is the link: US federal government works, which are not under copyright (17 U.S.C. 105), and documents whose license allows it. Everything else links to the original and an archived snapshot, and our copy stays private.
• Social media. A cited post is captured when it is cited: a screenshot showing the post, the account and the post’s own time, with the link, our capture time and a fingerprint. Where a platform refuses us, the page says the post was not opened and cites the reporting instead.
• Research before every verdict. No claim is marked true, false or corrected until it has been checked online that day against the cited source and, where one exists, the primary text: the issuer’s own document, the court record, the statute or the registry.

Before saying a source cannot be opened (R10). A tool that cannot open a page is not proof that the page cannot be opened. Every source goes down four rungs, and the log records which one opened it:

1. Plain request

   An ordinary request, identified as a normal browser.

2. Real browser

   For pages built by script, or that refuse a plain request.

3. Archive

   A saved copy, for a page that is dead or refuses us.

4. A person

   Opens it in their own browser and saves a PDF or a timed screenshot.

We never solve or evade a bot check, get past a paywall, or use an account that is not the person’s own.

When we do not have the work itself (R13). First we ask the person whether they can provide it: a copy, a scan, the pages that matter. If not, we search what has been made public, lawfully: the publisher’s page and cover text, authorized excerpts, previews read as the site shows them, library records (which often carry the table of contents), and reviews that quote the work. Every item must be traceable, with a link, a date and our saved copy. Every claim then says which part is which: the book’s words as a named source quotes them, the book as a named source describes it, its structure from a catalogue, or not the book at all. We never use a pirated copy, get past a wall, or let a model’s memory stand in for the text. See it applied.

When a source still cannot be opened (R7). Every claim says which rung of evidence it stands on:

The sourcing note. Every sourced page ends with what was opened (with links and dates), what could not be opened and why, how the sources were found, what the model was asked to do and forbidden to do, and what remains unconfirmed.

Our reading is kept apart from what the source says. The US Intelligence Community requires the same separation of sourced information from an analyst’s own judgments in its analytic standard, ICD 203.

Caps: 75% with no primary source, 40% when sources conflict, 20% when nothing could be opened. Each score is shown with a word from the scale in ICD 203, plus our own top band, which is earned only by a fact of record with every check met and a date attached (R8).

A thirtieth of February is refused, and so is a Tuesday written before a date that falls on a Monday. An impossible date means something upstream invented it. The house gate checks this on every page, including this one: an earlier draft of this paragraph, which wrote the two refused dates out in full as examples, was refused by it.

A term quoted from a law or a source stays, as a quotation. We say on every page that AI drafts with us, so plain writing is not disguise: the habits that give machine prose away are the same habits that make a sentence claim more than it shows. The list comes from the studio’s own checklist, in I Make Because We Make (Sep 2026): an em dash in every other line, “not only X but Y,” “It is not X. It is Y.,” “moreover” and “ultimately,” unowned hedges such as “arguably,” inflated verbs such as “serves as.” Each is cut or answered.

Before review, every draft opens with its result, lists what was not verified, and is labelled d1, d2 or d3; only d3 goes to the reviewers. The suggestion tool is run on it, and every suggestion is taken or answered. The tool never rewrites, never touches a quotation, and refuses issued pages.

“Super Intelligence” (SI) appears only when we name or quote a US instrument that uses it. The house mark reads: Begun by a person · Drafted by AI · Edited together · Signed by a person.

• Keeping the record (R15, from Oct 20, 2026). Our working files are kept in one place, on one computer, and only that computer runs our scheduled jobs. A backup adds and overwrites; nothing we run deletes files from a backup to make it match another copy. A backup that fails says so where a person will see it, and before a working session ends it checks that the last backup succeeded that day. Unfinished drafts are saved off that computer at the end of every session, on their own branch, never on the published site. Learned on Oct 19, 2026, when an old laptop’s backup job overwrote the current backup with files from September; nothing published was affected, and the current files were backed up again that night.

• Who reviews (R14, from Oct 19, 2026). Every draft is reviewed by Claude and by one model drawn at random, by a recorded seed, from outside Claude’s family, automatically. Free models are used first; our zero-data-retention setting stays on, so a model that keeps what it is sent is skipped, except as R16 allows. Neither reviewer sees the other’s work or the drafter’s notes before both hand in. Neither reviews a claim about its own maker (R2).
• One reviewer first reads only the page, without its sources, and writes down what it thinks we claimed. The other repeats one claim from the sourcing note alone (R11).
• Both verdicts are recorded first. Where they differ, they debate with sources for at most three rounds; research on model debate (Du et al., 2023) reports better factual accuracy, and anything still disputed goes to the person.
• How often the reviewers agreed before debate is published.
• Where the second reviewer comes from (R16, from Oct 20, 2026). The reviewer from outside Claude’s family may also be reached through FreeLLMAPI, an open-source proxy run on our own computer that pools the free tiers of many providers; it reviewed its first page on Oct 20, 2026. It is still drawn by a recorded seed from the models the proxy lists, never by the proxy’s own choice, and the review records which provider answered. Free tiers may keep what they are sent, so a model that may keep it is sent only a page about to be published, after the holdout gate has passed, with its public sources. The private bank, a Calibration before it is issued, its pre-registration and anything private go only to a model that keeps nothing.
• The attestation (R12). Every publication names its drafting model, its two reviewers and the person who signs and answers for it. The signer gives their word in good faith. An agent gives no word, because it cannot take an oath or be held to one; it works under these protocols as the condition of being used.
• When an agent breaks the protocols (R12). A breach is a source cited but not opened, a quotation not in its source, a claim filled in from memory, a figure or date not in the source, or a check reported as run that was not. It is corrected in public the same day, naming the model; the model is stood down from drafting for 30 days; its work since its last clean audit is rechecked; the audit count restarts; the breach goes in a public register; a second breach within 90 days removes the model until a person seats it again. A breach that reached the public is also corrected under the signer’s name.