EDO·OS | Governance of the Future

Jesús Bernal Allende

What if the institutions we build today determine whether the humanity that reaches the cosmos deserves to have tried? In an era where AI amplifies everything human — rationality and corruption alike — algorithmic governance cannot be improvised. EDO·OS explores the complete institutional architecture for the algorithmic age: Common Law for the Cosmos, democratic oversight, and the absolute limit no optimization crosses. Academic analysis for those who prefer to think before the window closes. A production of EDO·OS.

  1. OACRA | Ch. 10 — Citizen Veto: Last Safeguard Against Legislative Capture

    May 21

    OACRA | Ch. 10 — Citizen Veto: Last Safeguard Against Legislative Capture

    On September 4, 2024, the Mexican Congress approved with 359 votes a constitutional reform that dismantled the professional appointment system for federal judges. Forty-eight hours passed between the initiative's introduction and ratification by state legislatures. No regulatory impact analysis was prepared. The UN Special Rapporteur on the Independence of Judges and Lawyers, the Inter-American Commission on Human Rights, and the International Bar Association issued convergent warnings. Congress ignored them. Citizens who opposed the reform had three options: street protest, constitutional litigation — which a subsequent reform explicitly prohibited — and waiting for the next election. None produced an institutional channel with binding consequences. Chapter 10 of OACRA answers the question no technical design can evade: what recourse exists when every filter has flagged the risk, Congress has chosen to ignore them, and citizens have no institutional mechanism to respond? The answer is the Citizen Veto: a last-resort safeguard activated when a law receives a Red Light by trans-axiological convergence, Congress approves it with a supermajority ignoring the evaluation, 3% of the electoral roll signs the petition within twelve months, and an independent International Panel confirms the technical problems persist. Only when all four conditions are met simultaneously does the citizenry arbitrate by referendum. The chapter develops the activation conditions, the four-stage process, the safeguards against opportunistic distortion, five counterfactual cases, and a comparison with recall mechanisms, abrogative referendums, and judicial review of constitutionality. The Citizen Veto is not pure direct democracy. When citizens vote, they already know that multiple independent axiological frameworks converged in flagging a serious problem and that an expert Panel confirmed its persistence. They are not asked to design public policy from scratch; they are asked to arbitrate between a convergent technical signal and a legislative decision that contradicts it. Brennan is right about the limits of rational ignorance — the design acknowledges them. But the alternative to the Citizen Veto is not uncontested expert governance: it is unstructured protest, institutional crisis, and in the worst case, violence. The paradox is deliberate: OACRA seeks to improve the technical quality of legislation, but its final control mechanism is fundamentally political. OACRA without a Citizen Veto would be benevolent technocracy. OACRA with one is augmented democracy that never forgets who holds sovereignty. 🔹 OACRA — Algorithmic Office for Enhanced Regulatory Quality Jesús Bernal Allende | Escuela del Deber-Optimizar y la Soberanía de la Evidencia https://a.co/d/09Xzy0z8 🌐 https://edo-os.com 🔗 https://www.linkedin.com/in/jesus-bernal-allende-030b2795

    21 min
  2. CLA | Ch. 9 — Algorithmic Liability and Accountability Chains

    May 19

    CLA | Ch. 9 — Algorithmic Liability and Accountability Chains

    Who is liable when the damage is caused by a decision made in milliseconds by a system whose causal chain runs through the designer, the operator, the certifier, the model trainer, and the regulatory framework that authorized it? On January 24, 1978, the Soviet satellite Cosmos 954 scattered radioactive debris across 124,000 square kilometers of Canadian territory. It was pure hardware: no algorithms, no decisional autonomy, no causal complexity. The responsible party was identifiable; the applicable treaty existed. Canada still received half of what it claimed, with no acknowledgment of liability, three years later. If that case took three years to produce a partial settlement, what happens when the damage stems from an algorithm no one explicitly programmed to do what it did? Chapter 9 of CLA builds the liability architecture of the Algorithmic Common Law: five layers differentiated by sphere of control — the system, the operator, the designer, the certifier, the regulatory framework — each with its own regime, identified subject, and precise activation mechanism. The weighting is asymmetric: violating a Threshold of Inviolability eliminates all liability caps, because some lines cannot have a price without ceasing to be lines. The chapter integrates the VEC fault taxonomy, the Sovereignty of Evidence, and the Algorithmic Dignity thresholds into a tiered fund system that guarantees compensation to victims before fault is determined — shifting the burden that ordinary law places on those least able to bear it. The regime is not designed to compensate damage. It is designed to prevent it. Every presumption, every forensic audit, every risk-weighted premium exists so that operators build systems that never trigger the funds. Liability, distilled into six canonical axioms, will have served its purpose not when its mechanisms are activated, but when the architecture of consequences becomes an architecture of care. 🔹 CLA — Algorithmic Law for the Cosmos Jesús Bernal Allende | Escuela del Deber-Optimizar y la Soberanía de la Evidencia 🌐 https://edo-os.com 🔗 https://www.linkedin.c

    22 min
  3. OACRA | Ch. 9 — Legislative Coherence Index: Electoral Accountability Based on Aggregate Voting Behavior

    May 18

    OACRA | Ch. 9 — Legislative Coherence Index: Electoral Accountability Based on Aggregate Voting Behavior

    How many citizens know how their legislator voted on the last hundred bills — and whether those votes ignored available technical evidence? In April 2021, Colombians took to the streets because they had no other tool to express their judgment on their representatives' fiscal decisions. The Duque tax reform was withdrawn before reaching a floor vote: no one ever knew with certainty who would have backed it. The information existed in parliamentary records that nobody reads. The cost of that opacity was measured in lives. Chapter 9 of OACRA introduces the Legislative Coherence Index (LCI): a metric that converts OACRA's technical evaluations into usable electoral signals. The LCI measures how consistently a legislator votes in line with the Parliament of Models' assessments — with asymmetric weighting where ignoring a Red Light carries twice the penalty of rejecting a Green Light, because violations of fundamental rights are not equivalent to missed efficiency gains. The chapter develops the formula and its mechanics, the citizen interpretation scale, the safeguards against opportunistic distortion of the index under Goodhart's Law, aggregated party-level metrics, retrospective case studies, and the technical implementation with a public API and independent audit. The LCI does not measure whether a legislator is "good." It measures whether their voting pattern is legible or erratic — whether they use evidence or set it aside when it becomes politically inconvenient. Fearon (1999) showed that electoral mechanisms face an irreducible tension between selecting good representatives and sanctioning poor performance with the information available. The LCI does not resolve that tension; it makes it navigable. Without it, OACRA produces evaluations that no one has electoral incentives to act on. With it, technical coherence becomes public data that voters can read, contest, and use. 🔹 OACRA — Algorithmic Office for Enhanced Regulatory Quality Jesús Bernal Allende | Escuela del Deber-Optimizar y la Soberanía de la Evidencia https://a.co/d/09Xzy0z8 🌐 https://edo-os.com 🔗 https://www.linkedin.com/in/jesus-bernal-allende-030b2795

    20 min
  4. OACRA | Ch. 8 — Democratic Subsidiarity: When the System Must Stay Silent

    May 1

    OACRA | Ch. 8 — Democratic Subsidiarity: When the System Must Stay Silent

    In 2011, Sarah Wysocki was finishing her second year as a fifth-grade teacher in Washington D.C. Her assistant principal described her as a model for colleagues. Parents called her creative and visionary. Two months later she was fired. The IMPACT algorithm classified her as ineffective. Her students had arrived with artificially inflated test scores from a school under fraud investigation — making it statistically impossible for them to show measurable growth. The numbers were correct. The question was wrong. That is the error Chapter 8 of OACRA exists to prevent. Not the error of calculation. The error of category. OACRA built a sophisticated evaluative apparatus in previous chapters: the Parliament of Models, the Consequence Maps, the Constitutionality Semaphore. That sophistication generates a dangerous temptation — if the system works for technically complex legislation, why not apply it to all legislation? This chapter answers: because a system that recognizes its limits is more legitimate than one that claims universal competence. Democratic subsidiarity is the fifth Madisonian check — the check the system imposes on itself. The principle operates on a precise distinction: OACRA abstains when its evaluation adds no net democratic value. Four exclusion categories — foundational-constitutional legislation, symbolic and identity legislation, extreme-urgency emergency legislation, and internal congressional procedural rules — derive from three conditions: logical circularity, irreducible valuative content, and operational impossibility. But exclusion is not opaque silence. It is modular evaluation — when a historical memory law recognizes victims and creates a commission with a substantial budget, OACRA does not evaluate the recognition; it evaluates whether the budget is sufficient to deliver what the law promises. The valuative question and the operational question are separated with surgical precision. Three decades of comparative regulatory practice confirm the logic: neither OIRA in the United States, nor the European Commission under Better Regulation, nor CONAMER in Mexico operates without exclusions. When Executive Order 14215 of 2025 extended presidential review to all independent agencies, it preserved one exception — the Federal Reserve's monetary policy. That was not arbitrary. It was the recognition that there are domains where an evaluator's abstention communicates respect, and that respect is a condition of the evaluated domain's credibility. Subsidiarity without transparency is opacity. That is why the public registry of exclusions is as important a safeguard as the categories themselves. An International Audit Panel monitors patterns of strategic evasion, conservative over-exclusion, and the packaging of technical legislation inside symbolic titles. The system that knows when to stay silent — and documents why it stays silent — is the only one that deserves to be heard when it speaks. 🔹 OACRA — Algorithmic Office for Enhanced Regulatory Quality Jesús Bernal Allende | Escuela del Deber-Optimizar y la Soberanía de la Evidencia 🌐 https://edo-os.com 🔗 https://www.linkedin.com/in/jesus-bernal-allende-030b2795

    23 min
  5. CLA | Ch. 8 — Taxonomy of Space AI Systems: The Regulatory Cube

    Apr 30

    CLA | Ch. 8 — Taxonomy of Space AI Systems: The Regulatory Cube

    On September 2, 2019, the European Space Agency fired Aeolus's thrusters at 320 kilometers altitude to avoid Starlink 44. The collision probability had climbed to 1 in 1,000 — ten times ESA's action threshold. SpaceX, notified days earlier, did not maneuver. A bug in its internal alert system prevented operators from seeing the risk updates. ESA acted alone. No one violated any rule because there is no rule to violate: coordination between operators is negotiated by email, with no binding protocol, no traffic authority, no auditable record. The incident was minor. The question it reveals is not. What regulatory regime applies to a navigation satellite making autonomous evasion decisions? The same as a life support system rationing oxygen in a Martian colony? The same as an algorithm adjudicating disputes between asteroid belt mining operators? The obvious answer is no. Current space law lacks the tools to articulate that difference. Chapter 8 of CLA builds the functional taxonomy that space law needs and does not yet have. Four dimensions: function (what the system does), criticality (what happens when it fails), autonomy (how much human supervision it requires), and domain (where it operates). Five functional classes — from life support systems (Class A, existential criticality) to adjudication and governance systems (Class E). Four autonomy levels calibrated by physics: the 22-24 minute round-trip latency to Mars makes continuous ground control impractical, and no institutional design can change that constraint. The Regulatory Cube — the intersection of criticality × autonomy — determines applicable minimum requirements: the evidentiary level demanded, the intensity of VEC conditions, the configuration of dignity thresholds. Three structural patterns emerge. First, the maximum-intensity diagonal: a Martian life support system with adaptive autonomy simultaneously mobilizes the full ANCLA triad at maximum intensity — not accumulated bureaucracy, but institutional response proportional to the highest conceivable risk. Second, the prohibition on existential-criticality with single-human supervision: when a system whose failure kills within minutes depends on one human, its safety is only as strong as that human's attention at the worst possible moment. Third, a deliberate asymmetry: the taxonomy does not penalize autonomy itself, but autonomy without supervision proportional to risk. The taxonomy reveals that the core regulatory problem is not AI in the abstract but AI in context. Governing orbital traffic by email is not neutral omission — it is a political decision with identifiable beneficiaries. Without taxonomy, the operator who redesigns a life support system as a "data management platform" avoids the most demanding controls. Without taxonomy, the victim has no legal language to articulate the difference. Classification without consequences is nomenclature. Nomenclature without accountability is a catalog. Chapter 9 will translate this taxonomy into accountability chains: who answers for what when a system of a given class fails. 🔹 CLA — Algorithmic Law for the Cosmos Jesús Bernal Allende | Escuela del Deber-Optimizar y la Soberanía de la Evidencia 🌐 https://edo-os.com 🔗 https://www.linkedin.com/in/jesus-bernal-allende-030b2795

    25 min
  6. OACRA | Ch. 7 — The Constitutionality Semaphore: Graduated Consequences Without Algorithmic Veto

    Apr 28

    OACRA | Ch. 7 — The Constitutionality Semaphore: Graduated Consequences Without Algorithmic Veto

    Can a technical tool reshape the legislative process without stripping Congress of its final say? On February 13, 2026, the Mexican government introduced a bill to recognize the human voice as a protected artistic instrument against AI-based cloning. Four distinct axiological frameworks — labor rights, freedom of enterprise, cultural identity, constitutional proportionality — pointed in different directions. No single model could claim the definitive answer. That is precisely the scenario the Constitutionality Semaphore is built to inhabit. Chapter 7 of OACRA resolves the architecture's central dilemma: an algorithmic veto usurps democratic sovereignty; a purely advisory system gets rationally ignored whenever politically inconvenient. The answer is a graduated-consequences mechanism drawn from Ayres and Braithwaite's responsive regulation — three signals that do not block legislation but raise the procedural cost of passing it with detected problems unresolved. Green Light allows normal processing: technical coherence verified, disagreement among models treated as legitimate political debate. Yellow Light requires extended deliberation of sixty days, public justification, and a roll-call vote — legislators must explain to citizens why they are pressing forward despite documented inconsistencies. Red Light triggers the chapter's most important procedural innovation: the inversion of the burden of proof. Under traditional systems, whoever alleges unconstitutionality must prove it before a tribunal, often years after the law has already affected millions of people. Under Red Light, Congress must demonstrate constitutionality before passing the bill — requiring a two-thirds supermajority, a favorable ruling from the Constitutional Committee, and preventive review by the Constitutional Court. The presumption of constitutionality protects the legislator; the presumption of unconstitutionality protects the citizen. Red Light is not a veto — Congress can still pass the law with two thirds. But the political and procedural cost creates the structural incentive that defines the Semaphore: legislating badly becomes more expensive than legislating well. As the chapter puts it: "The architecture does not tell Congress what to decide — it tells Congress how much it will cost to ignore what it already knows." Retrospective applications to cases like post-2001 counter-terrorism laws and pension reforms with unresolved actuarial deficits show that the Semaphore does not judge whether a policy is desirable — that belongs to democratic debate — but whether it is coherent, workable, and compatible with the existing constitutional framework. 🔹 OACRA — Algorithmic Office for Enhanced Regulatory Quality Jesús Bernal Allende | Escuela del Deber-Optimizar y la Soberanía de la Evidencia 🌐 https://edo-os.com 🔗 https://www.linkedin.com/in/jesus-bernal-allende-030b2795

    24 min
  7. CLA | Ch. 7 — Algorithmic Dignity and the Thresholds of Inviolability

    Apr 28

    CLA | Ch. 7 — Algorithmic Dignity and the Thresholds of Inviolability

    Can a system be demonstrably efficient and radically unjust at the same time — without breaking a single rule it designed for itself? In 2018, a hiring algorithm deployed by a major tech firm systematically screened out female candidates. There was no technical malfunction: the system optimized exactly what it was told to optimize. The results were auditable. The problem was that no one had encoded the constraint that human beings cannot be treated as variables to be eliminated from an optimization function. Chapters 5 and 6 of CLA established the validity conditions and evidentiary standards of the Common Law Algorítmico. Both assumed the existence of constitutive constraints — limits that no optimization may cross. Neither formalized them. This chapter builds those constraints. Algorithmic Dignity is not a philosophical extension of classical human dignity: it is its operational translation into the only language algorithmic agents understand — hard constraints that define the solution space before any calculation begins. Classical dignity operates ex post: a tribunal determines whether an act violated it. Algorithmic Dignity operates ex ante: the violation does not exist as a computable option. The chapter formalizes seven Thresholds of Inviolability — organized across two levels (Alpha: absolute; Beta: subject to mandatory human escalation) — ranging from the prohibition on causing intentional death through optimization (U1) to the right to contest any algorithmic decision affecting fundamental rights (U7). For each threshold: converging philosophical foundations (Kant, UDHR, Jonas, Nussbaum), technical implementation specifications, and the precise consequences of violation. The relationship between VEC (Ch. 5) and Dignity is formalized as a lexicographic utility function: the thresholds do not participate in any cost-benefit calculation. No number of lives saved converts an intentional killing into an admissible option. The system does not choose not to do it; it simply cannot compute it as a choice. As the chapter itself states: "A system that can prove it is efficient but cannot guarantee it is human has proved nothing." 🔹 CLA — Algorithmic Law for the Cosmos Jesús Bernal Allende | Escuela del Deber-Optimizar y la Soberanía de la Evidencia 🌐 https://edo-os.com 🔗 https://www.linkedin.com/in/jesus-bernal-allende-030b2795

    23 min
  8. CLA | Ch. 6 — The Sovereignty of Evidence: Anti-Capture Epistemic Infrastructure

    Apr 24

    CLA | Ch. 6 — The Sovereignty of Evidence: Anti-Capture Epistemic Infrastructure

    If authority that cannot show why it rules is not authority but inertia, what institutional infrastructure ensures that the evidence legitimizing an algorithmic system is not produced by the very actor with the greatest stake in manipulating it? The pattern repeats across recent history. The Value-at-Risk models that preceded the 2008 financial crisis were "evidence-based" — evidence produced by the very institutions whose stability they were meant to demonstrate. IMF development reports documented "progress" in countries where material conditions were worsening, using metrics designed to yield the desired outcome. Soviet planners presented production data fabricated by the very bureaucracy whose legitimacy hinged on that success. Whenever legitimacy depends on outcomes, there is a structural incentive to manipulate the evidence of those outcomes. This chapter builds the Sovereignty of Evidence as a fourth source of political legitimacy, complementing the three classical traditions (Weber, Scharpf, Schmidt): 1. Five conditions of evidence (E1-E5): source traceability, methodological reproducibility, falsifiability, independent validation, and currency. 2. A four-tier evidence hierarchy calibrated to criticality: from multi-source convergent evidence for existential decisions down to declarative evidence with no normative weight. 3. IURUS as epistemic infrastructure: immutable registry, methodological certification, audit, and first-tier adjudication of challenges. 4. Five anti-capture mechanisms: structural independence, mandatory rotation, pluralism of verification, reciprocal auditing, and radical transparency. 5. Three-level circularity breaking: separation of epistemic functions, source triangulation, and institutionalized falsifiability. The institutional precedents are invoked with care: the IAEA in the nuclear domain, ICAO in civil aviation, Cochrane reviews in evidence-based medicine, the Artemis Accords (2020) as proto-transparency, and Weiss and Jacobson's work (2000) on information-based environmental compliance. The chapter draws on Jasanoff (2003, 2004) to frame IURUS as institutionalized "technology of humility" — it does not claim to hold the truth, but to establish the conditions under which truth claims can be evaluated, challenged, and corrected. Five domains are placed explicitly outside the sovereignty of evidence: the definition of ends, Inviolability Thresholds, cultural life, individual existential decisions, and what evidence cannot capture. The hierarchy with Algorithmic Dignity (Ch. 7) is lexicographic: evidence evaluates metrics; thresholds are set by the political community. The closing thesis: to trust what is verifiable is not cynicism. It is the most honest form of respect — respecting a community enough to show it, rather than tell it, that it is well governed. — 🔹 CLA — Algorithmic Law for the Cosmos Jesús Bernal Allende | Escuela del Deber-Optimizar y la Soberanía de la Evidencia 🌐 https://edo-os.com 🔗 https://www.linkedin.com/in/jesus-bernal-allende-030b2795

    22 min
See All (21)

About

What if the institutions we build today determine whether the humanity that reaches the cosmos deserves to have tried? In an era where AI amplifies everything human — rationality and corruption alike — algorithmic governance cannot be improvised. EDO·OS explores the complete institutional architecture for the algorithmic age: Common Law for the Cosmos, democratic oversight, and the absolute limit no optimization crosses. Academic analysis for those who prefer to think before the window closes. A production of EDO·OS.

Information