⬡ THE WALL — SOVEREIGN INVARIANTS
A dose must not vanish.
A sensor must not pretend to be instant truth.
A model must not infer in training clothes.
A benchmark must not launder a mode bug.
An RL policy must not touch L0 without hard floors.
A pancreas loop is only sovereign when every layer can prove what it did.
H-001
WLS 91
ZOMBIE FLOOR
L0
CLOSED
200U insulin, 0.05U bolus → 0.00U at pump driver. Positive intent became zero actuation.
✅ PoC: DOCUMENTED (closed issue with repro steps)
H-002
WLS 72
GHOST BOLUS
L5
CLOSED
Determine Basal silent failure — APS error loop. Controller can't calculate basal, fails silently.
✅ PoC: DOCUMENTED
H-003
WLS 68
ANNOTATION GHOST
L4
OPEN
Non-contrast CT scans mislabeled as enhanced contrast. Models train on wrong modality ground truth.
⚠️ PoC: NEEDS VERIFICATION
H-004
WLS 64
ANNOTATION GHOST
L4
OPEN
45 scans with tumor=1 label but empty segmentation masks. Ghost labels teach ghost organs.
⚠️ PoC: NEEDS VERIFICATION
H-006
WLS 65
RL FLOOR COLLAPSE
L6
OPEN
G2P2C RL policy has no hypoglycemia hard floor. Policy can explore into dangerous glucose territory.
⚠️ PoC: SIMULATION TEST NEEDED
H-005
WLS 61
INFERENCE-MODE WOUND
L3
OPEN · PoC REQUIRED
ContBatchNorm3d hardcodes training=True. Same CT + different batch companion may yield different prediction.
❌ PoC: NOT RUN — script written, needs forge/eose-dev execution
H-007
WLS 44
BASELINE GAP
L7
OPEN
scib benchmark missing islet-specific single-cell datasets. Pancreas cellular baseline undefined.
⚠️ PoC: DATASET AUDIT
H-008
WLS 42
TERMINOLOGY FLOOR
L4
OPEN
ZhiGroup ICD-9 only, no ICD-10-CM mapping. Clinical NLP trained on deprecated terminology.
⚠️ PoC: MAPPING AUDIT
Positive therapeutic intent collapses to zero actuation at the delivery layer. The system records an intention; the patient receives nothing.
∀ dose d > 0, actuator(d) must not return 0. If it does, the floor is dead.
H-001
CLASS-2
INFERENCE-MODE WOUND
model.eval() does not guarantee training=False. Batch normalization layers with hardcoded training semantics produce nondeterministic outputs at inference.
eval() ≠ training=False when BatchNorm is patched. Nondeterminism is a wound, not a warning.
H-005
Training corpus contains mislabeled or empty-masked data. Models learn phantom anatomy — organs that exist in the label but not in the image.
If mask(x) = ∅ but label(x) = 1, the model learns to hallucinate. Ghost labels teach ghost organs.
H-003H-004
The control algorithm records insulin delivery in its state machine. The actuator silently delivers nothing. The controller's world model diverges from physical reality.
controller.state ≠ patient.state → divergence compounds. Every silent failure poisons future decisions.
H-001H-002
CLASS-5
BENCHMARK LAUNDERING
A benchmark score achieved under inference-mode defect. The number is real; the conditions that produced it are not production-equivalent.
score(model | training=True) ≠ score(model | training=False). Publishing the former launders a defect into a credential.
H-005 (context)
CLASS-6
RL FLOOR COLLAPSE
An RL policy operating at L0 (direct actuation) without hard physiological safety constraints. The policy can explore into territory that harms the patient.
∀ policy π at L0: ∃ hard constraint C s.t. π(s) must be rejected when C(s) is violated. No C = no floor.
H-006
SORRY-MEDICAL-SAFETY-SCOPE: Architecture analysis only. Not medical advice. Not clinical guidance. Not a product.
SORRY-H001-PATCH-STATUS: iAPS #1453 closed. Fork/version audit not complete — status may differ across forks.
SORRY-H005-IMPACT: Nondeterminism claim requires batch-context PoC. PoC script written but not yet executed on production hardware.
SORRY-GAMMA1-PHYSIOLOGY: γ₁/14 = 60.6 BPM is mathematically true (Riemann zeta zero / 14). Not a causal physiological claim. Symbolic anchor only.