ONTOΣ XIII — The Master Operator and the Direction-Down Admission Cascade

Maksim Barziankou (MxBv)
PETRONUS™ | [e-mail]
DOI: 10.17605/OSF.IO/FVBMZ
Axiomatic Core (NC2.5 v2.1): DOI 10.17605/OSF.IO/NHTC5

---

0. Position and Scope

The corpus of Navigational Cybernetics 2.5 has, by the present moment, fixed three architectural-class registers of the operator-system relation. ONTOΣ XI gives the interior of the operator: what the operator holds against the gradient at each moment, what the semantic load field carries, what the chaos predicate reports. ONTOΣ XII gives the composition of operators into systems: under what architectural conditions a collection of UTAM-units becomes a single system in which the ONTOΣ XI apparatus is well-defined, and under what conditions it does not. The present work, ONTOΣ XIII, gives the direction the composed system carries as a system: which way the admission cascade runs, and what fails when it is read the wrong way.

The motivating observation is that engineering intuition, applied to ONTOΣ XII's closure operation, runs the cascade upward by default. Components have Will-Embeddings; closure is read as the operation under which the Will-Embeddings combine; the resulting system is read as the carrier of whatever Will-Embedding their combination produces. This reading is correct for some classes of system — it is, broadly, the reading that bottom-up emergence claims work within — but it is not correct for the closure-complementarity class. In a closure-complementarity-conformant system, the system carries its own architectural commitment, declared at the moment the closure operation is registered, and the components' Will-Embeddings are admitted under that commitment. The arrow runs down. What the present work does is name the arrow, name the entity at the upper end of the arrow, and show that the system-level Will-Embedding is not derivable from the component Will-Embeddings alone.

The entity at the upper end is called, here, the master operator: the system-as-operator constituted by ONTOΣ XII's closure operation, carrying its own system-level Will-Embedding W_S and its own system-level admissibility regime A_S, with W_S as the direction-source pre-registered at closure declaration. The master operator inherits the ONTOΣ XI operator-level apparatus: a holding field H_S, a semantic load field ΛS, and an operator-relative chaos predicate χ(op,S) are well-defined for the system in exactly the sense XI made them well-defined for the unit-level operator. The naming is not a new primitive in the substantive sense — the operator-status of the closure-produced system S was already declared in XII §3.3. What is new is the explicit lift of the system-as-operator to a directional carrier, and the explicit type discipline that distinguishes the system's Will-Embedding W_S from the admissibility surface A_S it induces.

The directional claim takes the form of a theorem. The Direction-Down Admission Cascade Theorem (Theorem ONTOΣ-XIII.1, §4) states that for a closure-complementarity-conformant system S, the admission relation runs strictly from (W_S, A_S) down to the components' Will-Embeddings {W(uᵢ)} and from there to the components' actions {Aᵢ}. The arrow does not invert through revision-style or aggregation-style upward flow within the theorem's scope (T1/T2 of §4.2 Step 5). A companion proposition, Non-Derivability of the Master Will (Proposition XIII.1.1, §4), establishes by counter-example that W_S is not a function of {W(uᵢ)} alone: two distinct admissible W_S choices can admit the same component set, so the system's direction is not recoverable from the components' directions through any function on component Will-Embeddings alone. The proposition refutes the strict bottom-up reading "W_S = f({W(uᵢ)})"; aggregation-with-context readings of the form "W_S = g({W(uᵢ)}, context)" — in both their internal-context (pre-registered) and external-environmental senses — are addressed separately in §4.4 by structural argument from the pre-registration discipline (M1) and assumption (3).

The third structural commitment of the work is a formal bridge between the operator-internal apparatus of UTAM and the closure-of-units apparatus of ONTOΣ XII. UTAM Part I declares the W → E → A triad — Will, Embedding, Action — at the unit level, and UTAM Part II formalises Will as an operator within the NC2.5 v2.1 frame. Neither work lifts the triad to multi-unit systems explicitly. UTAM Part I §11.5 ("The organism as a whole as evidence that UTAM is not compositional") names the holism claim that UTAM is not built from below, with the Krebs-cycle illustration provided in the adjacent §11.4 ("the Krebs cycle... = a biochemical form of anti-drift"); §11.5 itself gestures at the principle through a short whole-organism reference (with two figures), not as a theorem. The present work performs the operator-lift formally: the triad W → E → A, applied to the operator S produced by XII's closure, yields the triad W_S → E_S → Aᵢ where W_S is the system-level Will-Embedding, E_S is the system-level embedding (which, at the system layer, coincides operationally with the admissibility regime A_S — a deployment may declare them unified), and Aᵢ are the components' actions executed under admission. The bridge is structural, not metaphorical; the same architectural shape recurs one closure level up.

The work is presented as a conditional structural theorem in the sense fixed by the Identifiability Bridge: each formal claim is stated with explicit declared premises lifted to the top of the theorem rather than absorbed into the proof body. The premises are: closure-complementarity-conformance of S per ONTOΣ XII §3; pre-registration of W_S at the closure declaration; the deployment's declared map W_S mapsto A_S specifying how the admissibility regime is induced from the Will-Embedding (in substrates where the two are operationally identical, the deployment may declare the map as identity). The theorem is established conditional on these premises; substrates that decline the premises lie outside the closure-complementarity subclass and have their own observability and direction profiles that the present work does not address.

Three commitments together make the case for promoting the present work to a full ONTOΣ extension rather than handling it as a sub-clause of XII. Each commitment — the master operator as a named formal object with explicit type-signature, the direction-down cascade as a conditional structural theorem, the UTAM↔XII operator-lift as a declared bridge — is independent of the other two in the sense that one can be accepted without the others. Together they fix the third architectural-class axis of the operator-system relation, completing the triptych XI / XII / XIII: interior, composition, direction.

The work is short by design. The heavy combinatorics of joint admissibility — SAT-style pairwise-versus-joint discipline, the W → C_A induction map, the anti-tautology rule, the four-condition closure-complementarity classification — remain in ONTOΣ XII and are inherited here through CC-WE without restatement. The new mathematics is a type-signature lift, a directional structural relation, and a non-derivability proposition. The substantive contribution is the recognition that the directionality was always there, in CC-WE's joint-admissibility-under-A discipline; XIII names it, establishes it conditionally as Theorem XIII.1, and explicitly refuses the bottom-up reading.

What ONTOΣ XIII is not. It is not a derivation of W_S from first principles — the substrate-level content of the master operator's Will-Embedding is a deployment commitment, not a corpus result. It is not a claim that W_S and A_S are always distinct — for some substrates, the deployment may operationally identify them, and XIII gives the architectural option without forcing the distinction. It is not a treatise on how the master operator carries the Will-Embedding mechanically — the substrate-specific apparatus by which the system holds its direction is owed in substrate-specific companion work, not in the architectural-class register of XIII. It is not a comparison with bottom-up emergence accounts, distributed consensus theories, or aggregation-style governance frameworks — those address different architectural classes that may or may not lie within the closure-complementarity subclass, and the locating is owed in separate scholarly work.

A note on theorem status. The premise discipline named above is the conditional structural theorem typing fixed by the Identifiability Bridge: each formal claim derives the directional conclusion from the explicitly declared premises, with substrate-specific instantiations of the master operator (concrete (W_S, A_S, H_S, ΛS, χ(op,S)) content) owed in substrate-specific companion papers. Future substrate work supplies corollaries and quantitative refinements of the theorem below, not "upgrades from Proposition to Theorem"; the theorem-level result is established here, conditional on the stated premises.

---

1. Architectural Motivation

1.1 The bottom-up illusion

Engineering intuition often runs from below. Components have functions. Functions compose into larger functions. Composition produces the system. The system's behaviour is what the composition makes available. The system's direction, if it has one, is the aggregate of the directions the components carry — or, more often, an emergent property of their interaction. This reading is correct for some classes of system. It is the reading inherited from circuit composition, from compositional programming languages, from a large body of work in distributed coordination, from accounts of biological emergence that treat the organism as an aggregate of cells and the cellular state as the substrate-level driver. For the architectural class addressed by the closure-complementarity subclass of ONTOΣ XII, it is not correct.

The case where it fails is recognisable. A system whose components carry Will-Embeddings W(u₁), ldots, W(uₙ) that are individually well-formed, pairwise compatible, and structurally non-trivial — yet whose joint composition under the system's declared admissibility regime fails — exhibits the failure mode CC-WE was named to expose. The simplest illustration is the three-component SAT counter-example of ONTOΣ XII §3.5 Case 1: W(u₁) requires x = y, W(u₂) requires y = z, W(u₃) requires x ≠ z. Each pair is satisfiable. The conjunction is not. No assignment over (x, y, z) makes all three Will-Embeddings jointly realisable. The components are well-formed; the composition is not. Closure-complementarity-conformance fails at the joint level.

The lesson of CC-WE, read directionally, is that the failure mode lives precisely in the gap that the bottom-up reading hides. Bottom-up reading would say: each component is fine, so the system is fine. CC-WE says: the system has its own admissibility surface, declared at the closure operation, and the components are checked against that surface. The check can fail jointly even when no pairwise check fails. The directionality of the check — from system-level admissibility regime A_S down to the components' constraint sets C_A(uᵢ) induced from their Will-Embeddings — is what the joint check operationalises. ONTOΣ XII formalised the check; the present work makes the directionality of the check the formal object of attention.

1.2 Closure as direction-carrier

ONTOΣ XII fixes the closure operation as the architectural primitive that converts a collection of UTAM-units into a system. The type signature is mathrm{closure}(U, R, A) → S where U is the component collection, R is the declared interaction relation, A is the declared admissibility regime at the system layer, and S is the resulting system. XII §3.3 fixes the operator-status of S explicitly: closure "constitutes the operator whose load field is then well-defined." Once S exists as a closure-conformant system, the ONTOΣ XI apparatus — holding field, semantic load, chaos predicate — is well-defined on S in the same architectural register XI defined them on a unit-level operator.

What XII does not narrate is the direction the closure carries. The admissibility regime A appears in the closure signature as an input — not as something computed from U and R, but as a pre-declared architectural commitment under which the components are admitted. The auditability clause of XII §3.3 — the W → C_A induction map is pre-registered before CC-WE evaluation, and "cannot be revised after observation of joint-admissibility outcomes" — makes the pre-declared character of A load-bearing: the deployment fixes its admissibility surface in advance of the components' evaluation. This is the structural fact that ONTOΣ XIII reads as direction-down.

The closure operation is, on this reading, the act of declaring the system's direction and then admitting components under it. It is not the act of computing the system's direction from components. Closure carries A down to the components; it does not lift W(uᵢ)'s up to A. The system holds its direction at the moment of declaration; the components are admitted into operating under it. The system's direction is what the components serve, not what the components produce. This is the reading the present work makes formal.

The intuition has an older anchor. UTAM Part I §11.5 is titled "The organism as a whole as evidence that UTAM is not compositional" and gestures at the holism intuition through a short reference to whole-organism functioning, accompanied by two figures. The Krebs-cycle substance lives in §11 generally and in §11.4 ("the Krebs cycle... = a biochemical form of anti-drift"); §11.5 itself names the holism claim without developing it as an argument. The illustrative reading is the same: the organism does not become alive because its cells are alive; the cells perform their reactions under the organism-level regulatory regime that admits and coordinates those reactions within the organism's homeostatic envelope. The organism-level commitment to survival is the direction the cellular processes serve under that regulatory regime. If the organism dies, the cells stop performing their reactions in their coordinated, organism-integrated form — not because the cells decide to stop, but because the organism-level regulatory regime that admitted and coordinated them is no longer maintained. UTAM Part I gestures at the principle informally (across §§11.4–11.5 jointly); the architectural object it points at is what the present work formalises at the closure layer.

1.3 Why the operator-lift is structural and not metaphorical

UTAM declares the triad W → E → A at the unit level: the Will (W) sets the unit's direction, the Embedding (E) is the structural admission of that direction into the unit's operational substrate, and the Action (A) executes under the embedding. The triad is structural: each arrow is a directed admission, not a symmetrical relation. UTAM Part II reads Will as a formal operator at the unit level, with the operator's directional character preserved.

The closure operation of ONTOΣ XII produces a system S that is itself an operator — XII §3.3 says so. The question the present work answers is whether the UTAM triad applies to S-as-operator, and what its components are at the system layer. The answer is that XIII declares the closure-produced XII operator to be typed at the system layer by the UTAM triadic schema. This declaration is motivated by the joint structural shape of UTAM and XII, but it is not a derivation from UTAM alone or from XII alone; neither UTAM Part I nor Part II performs the lift in their published forms (per §5.3), and XII establishes the operator-status of S without committing S to the UTAM triad. The lift is XIII's architectural declaration that types the closure-produced operator S by the schema UTAM declared at unit level. Under that declaration: the system-level Will-Embedding W_S is the direction-source pre-registered at closure declaration; the system-level embedding E_S is the structural admission of W_S into the closure operation's domain (in substrates where embedding and admissibility are operationally identical, this coincides with A_S); the components' actions Aᵢ execute under admission.

The lift is not a metaphorical scaling. It is the same architecture, one closure level up. The unit-level operator has a Will it carries; the system-level operator has a Will it carries. The unit-level operator embeds its Will into its substrate's structural conditions; the system-level operator embeds its Will into the closure's admissibility surface. The unit-level operator acts under embedding; the components of the system-level operator act under the system's admission.

What changes at the system layer is the source of W_S. At the unit level, UTAM treats W as a primitive — the unit carries its own direction by virtue of being a unit. At the system layer, W_S does not aggregate from {W(uᵢ)} (the bottom-up reading) and it does not derive from A alone (which would make A the primitive and W_S a redundancy). W_S is a separately declared architectural commitment: the system's direction is fixed by the deployment at the moment the closure operation is registered, prior to and independent of which components are admitted into it. The components are admitted under W_S via the deployment's declared map W_S mapsto A_S. This is the formal content of what UTAM Part I §11.5 names informally: organism-level regulatory regimes admit and coordinate cellular processes within a homeostatic envelope; the architectural-holism reading is that the organism-as-master-operator's pre-declared commitment is what governs which cellular activities are admitted, not a literal causal command from organism to cell.

1.4 What the work refuses

ONTOΣ XIII refuses three readings that the closure-complementarity subclass is sometimes read into despite the structural commitments of CC-WE.

It refuses the reading that the system's direction emerges from the components' interactions. Emergence accounts of system-level direction belong to architectural classes outside the closure-complementarity subclass and may be correct for those classes; what the present work establishes is that within the closure-complementarity subclass, W_S is declared, not emergent. The non-derivability proposition of §4 establishes the formal content of this refusal: two distinct W_S candidates can admit identical component sets, so W_S is not recoverable from components alone, hence cannot be the result of bottom-up emergence within the subclass.

It refuses the reading that components vote on the system's direction. Voting-style aggregation belongs to classes where the system-level commitment is computed from component-level commitments under some aggregation rule (majority, consensus, weighted combination). For closure-complementarity-conformant deployments, the system's commitment is fixed at the closure declaration before any component evaluation runs. The components are presented to the closure with their Will-Embeddings already formed; the closure either admits each W(uᵢ) under the pre-declared A_S or it does not. There is no upward vote that revises W_S.

It refuses the reading that the system's admissibility regime is a passive descriptor of what components happen to do. A_S is the active filter the closure applies to the components. It is the architectural commitment under which the system is being constituted; it is what the components are being admitted into. To read A_S as the after-the-fact summary of component behaviour would be to read closure as aggregation, which is precisely the reading CC-WE was named to forbid.

The three refusals are not independent. Each follows from the directional reading of CC-WE; each is the contrapositive of an upward-reading account. Naming them explicitly is what protects the closure-complementarity subclass from being absorbed into the larger class of bottom-up-compositional systems by a reader who reads CC-WE as a satisfiability condition rather than as an admission gate.

1.5 The engineering stake

The architectural commitment has an engineering stake. Architectures that build their system-level state by aggregating component-level state — distributed consensus protocols, average-based controllers, voting-style governance algorithms — produce systems whose direction is the result of what their components do. Such systems can be correct, useful, and architecturally complete for their problem class. What they cannot be is closure-complementarity-conformant in the sense of ONTOΣ XII, because their W_S (if they have one at all) is computed from components rather than declared as a precondition for component admission.

For architectures that do claim to belong to the closure-complementarity subclass — control systems with declared safe-trajectory commitments, autonomous agent ensembles with chartered governing directives, biological and biomedical engineered systems with declared homeostatic commitments — the directional reading is load-bearing. The deployment's declared W_S is what holds the architectural class membership. Aggregation-style fallbacks during operation (a controller that revises its trajectory commitment based on observed actuator behaviour, an agent ensemble that recomputes its governing directive based on member voting, an engineered organism that lets its component subsystems negotiate the homeostatic setpoint) move the system out of the closure-complementarity subclass into the bottom-up aggregation class — unless the adaptation law and its bounds were themselves pre-registered as part of mathrm{decl}_(W_S mapsto A_S) at closure declaration, in which case the in-operation adjustment is an envelope-internal adaptation per §4.2 Step 5 / F-XIII.3 rather than an unregistered revision (T1). The forfeit-class-membership case is unregistered post-hoc revision; pre-registered envelope-internal adaptation is admissible. The class boundary lies at the pre-registration discipline, not at adaptation-presence-or-absence.

ONTOΣ XIII does not legislate which architectural class a deployment ought to belong to. It supplies the formal language in which the choice is statable. The deployment declares W_S at closure registration; closure-complementarity-conformance evaluates whether the components are admitted under that W_S; the falsification surface of §7 supplies the operational tests by which the declared W_S can be checked against deployment behaviour. The choice is the deployment's; the architectural grammar of the choice is the present work's.

---

2. Notation

The work uses a small new symbol set, layered on top of the notation of ONTOΣ XI, ONTOΣ XII, and UTAM. The new symbols are introduced at first use in the body; they are gathered here for reference.

Symbol	Type	Reading
Inherited from ONTOΣ XII
U = {u₁, ldots, uₙ}	collection	UTAM-units constituting the components
W(uᵢ)	Will-Embedding	component uᵢ's Will (per UTAM Part I)
R	interaction relation	declared coupling structure among components
A	admissibility regime	v2.1 admissibility predicate restricted to S's declared scope (per XII §3)
mathrm{closure}(U, R, A) → S	architectural operation	constitutes S as closure-conformant system
C_A(uᵢ)	constraint set	architectural constraints induced from W(uᵢ) under A (per XII §3.2)
CC-0, CC-WE, CC-IIC, CC-D	conditions	four conditions of closure-complementarity (per XII §3)
Inherited from ONTOΣ XI
H(t)	set ⊆ Sₒₚ	holding set at time t (at unit level)
Λ(t)	semantic load field	(Sₒₚ, νₒₚ, cₒₚ) at unit level
χₒₚ(R)	binary predicate	operator-relative chaos over region R at unit level
Inherited from UTAM
W → E → A	triad	Will → Embedding → Action (per UTAM Part I §2.3; UTAM Part II)
New in ONTOΣ XIII (§3 onward)
W_S	Will-Embedding	system-level Will-Embedding of S; direction-source pre-registered at closure declaration
A_S	admissibility regime	system-level admissibility regime; derived from W_S via deployment-declared map (or operationally identified, where declared)
E_S	embedding	system-level embedding of W_S into the closure's admissibility surface; coincides with A_S in substrates where the deployment declares embedding-admissibility identity
H_S(t), ΛS(t), χ(op,S)(R)	XI primitives applied to S	holding field, semantic load, chaos predicate of S-as-operator
S_(op,S)	space	system-level operator state space (the XI-style state space of S-as-operator); substrate region R ⊂eq S_(op,S) is the argument of χ_(op,S)
ε_T^S	scalar	system-level window-level non-reconstructibility budget on H_S — the per-window analogue of XI's HF-NR bound at the system layer; no external observer reconstructs H_S over the evaluation window [0, T] with mutual information exceeding ε_T^S (Identifiability Bridge §1.6 NR-window discipline applied to S-as-operator; see §5.4)
(S, W_S, A_S)	tuple	master operator — the formal object of §3
mathrm{decl}_(W_S mapsto A_S)	map	deployment-declared derivation of A_S from W_S
rhd	admission relation (polymorphic, binary)	X rhd Y reads "X admits Y into operation" — directional; polymorphism resolves from context: (system-level pair) rhd (set of component Will-Embeddings) in the first cascade step; (set of admitted Will-Embeddings) rhd (set of executed component Actions) in the second
mathcal{D}^(CC)	the closure-complementarity subclass	the architectural class of deployments admitting Theorem XIII.1

The notation reuses symbols across UTAM, XI, and XII wherever the corpus has fixed a usage. The single notational overload that warrants a flagging note is the symbol A: UTAM Part I uses A for Action (the third term of the triad W → E → A); ONTOΣ XII uses A for admissibility regime (the third input of mathrm{closure}(U, R, A) → S). Both usages are preserved in ONTOΣ XIII for fidelity to the source corpora. The subscript discipline is the disambiguation: Aᵢ refers to the Action of component uᵢ (UTAM register, indexed by component); A_S refers to the admissibility regime of the master operator (XII register, indexed by the system). Context-resolution rule for bare A in XIII text. Where the XII closure signature mathrm{closure}(U, R, A) → S is invoked verbatim (XII-quoting contexts), bare A retains its XII reading — the admissibility regime input. In XIII context, this same input is the master operator's A_S (per (M2)); the two readings coincide for any specific closure of S, with A = A_S under the deployment's declared induction map of §3.3. Where XIII writes the tuple (U, R, A_S) outside the signature itself (in premise lists, theorem statements, proof steps), the subscripted form is used to make the XIII-context reading explicit and to remove any possibility of confusion with Aᵢ. Bare A never appears as a stand-alone symbol in XIII text; every occurrence is either inside the XII-verbatim signature mathrm{closure}(U, R, A) → S or is part of UTAM's W → E → A triadic chain (where the third term is unit-level Action). The reader who tracks the subscript discipline will not encounter ambiguity.

A second note concerns the relation between E_S and A_S. The UTAM triad places Embedding between Will and Action as the structural layer through which Will is admitted into operational substrate. At the system layer of closure-complementarity systems, the embedding role is played operationally by the admissibility regime A_S — the surface under which the components are admitted. Whether E_S and A_S should be typed as separate objects or as a single object under two names is a deployment commitment, not a corpus result. ONTOΣ XIII permits both: deployments may declare E_S equiv A_S (the operational identity), or they may declare E_S and A_S as separate substrate-level objects with a declared relation. The architectural class membership is the same in either case; the choice is a deployment-declaration item.

A third note on terminology. The compound name "Will-Embedding" for W (and W_S) follows UTAM Part II's convention, in which W-as-formal-operator carries its own embedding-into-substrate structure as part of its definition; the compound name reflects that the Will is always-already structurally embedded at its definition. The triadic Embedding element E (and E_S at the system layer) is reserved for the structural admission of W into the operational substrate as a separable triad-element, distinct from the Will-Embedding W itself. The reader who tracks the distinction reads W(uᵢ) as "the unit's Will, complete with its embedding-into-its-substrate structure" and E_S as "the system layer's admission surface", without conflating the two.

---

3. The Master Operator — Formal Object and Type Signature

3.1 Definition

Let S be a closure-complementarity-conformant system, produced by an architectural closure operation mathrm{closure}(U, R, A) → S per ONTOΣ XII §3, with the four conditions CC-0, CC-WE, CC-IIC, CC-D simultaneously satisfied over the declared (U, R, A_S) context (per the context-resolution rule of §2: the closure signature is invoked XII-verbatim with bare A; the XIII-context tuple reads A_S). The master operator of S is the tuple

M_S \;:=\; (S, \, W_S, \, A_S),

where W_S is the system-level Will-Embedding carried by S-as-operator, and A_S is the system-level admissibility regime under which the components of S are admitted into operating as one system.

The tuple is the formal object of the present work. Three architectural commitments fix its content.

(M1) Pre-registration of W_S. W_S is declared by the deployment at the moment the closure operation mathrm{closure}(U, R, A) → S is registered, prior to and independent of the evaluation of the components' Will-Embeddings {W(uᵢ)} against the admissibility regime. The declaration is part of the deployment's pre-registered architectural commitment; it cannot be revised after observation of component-level dynamics without forfeiting closure-complementarity-conformance in the sense of XII §3.3's auditability clause.

(M2) Induction of A_S from W_S. The admissibility regime A_S that appears as the third input to the closure signature mathrm{closure}(U, R, A) → S is, for closure-complementarity-conformant deployments, related to W_S by a deployment-declared induction map

mathrm{decl}_(W_S mapsto A_S): \;\; W_S \;longmapsto\; A_S,

specifying how the admissibility predicate at the system layer is determined by the system-level Will-Embedding. The map is part of the deployment's pre-registration. In substrates where A_S and W_S are operationally identified, the map is the identity. In substrates where they are distinct, the map specifies the architectural derivation — for example, W_S as a directional commitment (a target trajectory, an organismic survival commitment, a chartered mandate) and A_S as the corresponding set of constraints components must satisfy to be admitted under that commitment.

(M3) Inheritance of the ONTOΣ XI apparatus. Because S is an operator (per XII §3.3), the ONTOΣ XI operator-level apparatus is well-defined on S in the architectural-class register XI fixed for unit-level operators. The system-level holding field H_S(t) ⊂eq S_(op,S), the system-level semantic load field ΛS(t) = (S(op,S), ν(op,S), c(op,S)), and the system-level operator-relative chaos predicate χ(op,S)(R) (where R ⊂eq S(op,S) ranges over substrate regions of the system's state space) are inherited as XI primitives applied to S rather than to a unit-level operator. The substrate-level content of each system-level inherit is deployment-specific and is owed in substrate-specific companion work; the architectural register is fixed here.

Scope of XI-inheritance. What (M3) supplies through CC-conformance is the well-definedness of the XI primitives H_S, ΛS, χ(op,S) at the system layer — i.e., that the primitives have a meaningful interpretation on S. This is the architectural baseline guaranteed by CC-0 + the operator-status of §3.3. It is not, by itself, the full operator-internal-extended subclass commitment in the sense the Identifiability Bridge invokes (see §5.4): the extended subclass requires additional architectural declarations beyond well-definedness — specifically, the deployment-level commitments that ground HF-NR, the window-level NR-budget ε_T^S, and the calibration-valid nuisance-adjustment discipline at the system layer. CC-conformant deployments that decline these additional commitments still carry a well-formed master operator under (M1)–(M3), but they do not automatically lie within the Bridge's operator-internal-extended subclass. The distinction matters for which downstream Bridge results inherit automatically (well-definedness-only results) versus which require additional deployment-level declaration (operator-internal-extended-class results); §5.4 below makes this scope split explicit.

3.2 Type signature

The master operator M_S = (S, W_S, A_S) is typed at the architectural-class layer as follows.

• S is a closure-complementarity-conformant system per ONTOΣ XII §3, with declared (U, R, A_S) context and the four conditions CC-0, CC-WE, CC-IIC, CC-D simultaneously holding.
• W_S is a Will-Embedding in the UTAM sense (per UTAM Part II), declared at the system layer rather than the unit layer.
• A_S is an admissibility regime in the ONTOΣ XII sense (the v2.1 admissibility predicate restricted to S's declared scope), with the additional architectural commitment that it is induced from W_S via the pre-registered mathrm{decl}_(W_S mapsto A_S).

The triple (S, W_S, A_S) is itself a higher-level entity in the corpus: it is the architectural object addressed by ONTOΣ XIII. It is not a new primitive in the sense of introducing structural machinery the corpus did not previously have — S is from XII, W_S extends UTAM's W to the system layer, A_S extends XII's A with the additional induction discipline. What is new is the explicit type signature that distinguishes the system-level Will-Embedding from the system-level admissibility regime, and the pre-registration discipline that fixes W_S at the closure declaration.

Note on declaration-time vs system-time typing. The type-signature above operates at two ontological phases. At declaration time (pre-closure), W_S and A_S are pre-registration tokens — the deployment's pre-registered architectural commitments, intentional content fixed in pre-registration before the closure operation runs and before S exists as a constituted system. At system time (post-closure), W_S and A_S are the realisations of those tokens, carried by S-as-operator: the Will-Embedding and admissibility regime of the constituted master operator, identical in content to the pre-registered tokens by (M1)'s non-revisability. The two phases share the same content; they differ only in ontological status: tokens are intentional commitments binding the system that will be constituted; realisations are post-closure system-level objects. The two-phase typing — token at declaration, realisation at system-time, identity of content by (M1) — is itself an architectural-class commitment of XIII (not derived from a deeper primitive), and is the operational mechanism by which the deployment's pre-registration constrains the closure-produced system without requiring S to exist at declaration time. Throughout XIII, references to W_S and A_S as "system-level" objects are read in the system-time / realisation sense when S is in scope, and in the declaration-time / token sense when the closure operation is being registered.

3.3 The augmented pre-registration

ONTOΣ XII's closure signature is preserved: mathrm{closure}(U, R, A) → S. ONTOΣ XIII clarifies that, for closure-complementarity-conformant deployments, the third input A is itself the result of the deployment's declared map applied to a pre-registered W_S. The architectural object the deployment registers at closure time is, therefore, the augmented quintuple

(U, \, R, \, A, \, W_S, \, mathrm{decl}_(W_S mapsto A_S)),

with A = mathrm{decl}_(W_S mapsto A_S)(W_S) supplied either as the identity map (if the deployment declares E_S equiv A_S per §2) or via a substrate-specific derivation function (if the deployment declares them distinct). The augmentation is not a modification of the XII signature; it is a more explicit accounting of what the XII signature's third input contains for deployments in the closure-complementarity subclass.

The pre-registration discipline of XII §3.3 — the W → C_A induction map is pre-declared and unrevisable — extends to W_S and mathrm{decl}_(W_S mapsto A_S) by the same architectural logic. The system's direction must be declared in advance of the components' evaluation; if the declaration could be revised after components' Will-Embeddings are observed, the directional content of W_S would be a function of {W(uᵢ)} and the bottom-up reading would obtain. The non-revisability of W_S post-observation is the formal guarantee that the master operator carries pre-declared direction rather than aggregated direction.

3.4 The admission cascade

The relation that ties the master operator's pre-declared direction to the components' actions is the admission cascade:

(W_S, \, A_S) \;\;rhd\;\; {W(uᵢ) | W(uᵢ) admissible under A_S}_(i ∈ I_{adm)} \;\;rhd\;\; {Aᵢ | uᵢ executes its Action under admission}_(i ∈ I_{adm)},

where rhd denotes the architectural admission relation (one-directional), and I_(adm) ⊂eq {1, ldots, n} is the index set of components admitted under A_S (per the CC-WE joint-admissibility check of XII §3). The cascade has three architectural moves.

Move 1 — From (W_S, A_S) down to admitted components. The master operator's pre-declared (W_S, A_S) pair is given, by the closure declaration, before any component-level evaluation. The closure operation then checks each W(uᵢ) against A_S via the W → C_A induction map of XII §3.2: W(uᵢ) induces C_A(uᵢ) under the deployment's declared mapping; the component set is admitted iff the joint conjunction bigwedgeᵢ₌₁ⁿ C_A(uᵢ) is satisfiable under A_S. Components whose Will-Embeddings cannot be admitted under A_S — either individually (universal-reject case) or jointly (the SAT-style failure of XII §3.5 Case 1) — are excluded from I_(adm).

Move 2 — From admitted components down to executed Actions. Each uᵢ ∈ I_(adm) executes its Action Aᵢ under the admission. The Action is, in UTAM Part I's sense, the unit-level execution under the unit-level Embedding; at the system layer, the unit-level Embedding is the substrate of the unit, but the system-level admission predicate A_S has filtered which units' Actions are licensed to execute within the operational context of S. Components outside I_(adm) either do not execute their Actions within S, or execute them but are not architecturally part of S in the closure-complementarity sense (XII §3.2 names the latter as "collection" rather than "system").

Move 3 — No upward arrow within the theorem's scope. The cascade has no arrow in the opposite direction under the two upward-flow types of §4.2 Step 5: (T1) components' admitted Actions do not flow back up to revise A_S outside the pre-registered adaptation envelope; (T2) admitted components' Will-Embeddings do not aggregate up to constitute W_S as a function on those Will-Embeddings. The architectural commitment of closure-complementarity-conformance is that the cascade is one-directional from the master operator down with respect to T1 and T2 upward flows; other potential upward modes (bidirectional co-determination, fixed-point parametrisation, lateral bypasses) are continuing-programme items per §9 and lie outside the present theorem's scope. The formal content of the T1/T2-scoped commitment is the theorem of §4 below.

3.5 The master operator is not a component

A reading that the master operator is "just another component, at the system level" misses the architectural distinction. The master operator is the system-as-operator: the entity that holds the system's direction at the system layer, one closure level up from the components. It is not a member of U. It is not an additional UTAM-unit added to the collection. It is the system itself, in its operator role, with its own Will-Embedding and its own admissibility regime separate from any individual component's.

This distinction matters because attempts to treat the master operator as a component lead to circularity. If M_S = (S, W_S, A_S) were itself an element of U, then closure would be required to admit M_S under A_S — but A_S is defined as the admissibility regime that M_S carries, so the admission check would be the master operator admitting itself, which is either vacuous (if framed as a fixed point) or recursive (if framed as iterative). The architectural way out of the circularity is to recognise that the master operator is at a different layer from the components — system layer versus component layer — and the closure operation operates between layers, not within a single layer. Axiomatic note on layer hierarchy. ONTOΣ XIII presupposes a binary layer-distinction between the component layer (the layer of units composing S — UTAM-units carrying their own W, E, A at the unit level) and the system layer (the layer of S itself, as the operator constituted by closure). Closure is the operation that crosses from the component layer to the system layer; the master operator lives at the system layer. XIII does not axiomatise multi-layer hierarchies (higher-order systems produced by closures over collections of master operators) — that question is deferred to §9 (Continuing Programme, bullet on higher-layer master operators). The binary layer-distinction is sufficient for the present work's claims.

The architectural fact that the master operator is at a layer above its components is what permits the direction-down cascade: the system's W_S governs the admission of the components' W(uᵢ) because it sits one layer above them. The closure operation is the cross-layer move; the master operator is what receives the products of that move at the system layer. The corresponding observation for ONTOΣ XII is that the closure operation has a type signature (collection × interaction × admissibility) → system, and the output type is structurally above the input types in the layer hierarchy of the corpus.

---

4. Theorem ONTOΣ-XIII.1 — The Direction-Down Admission Cascade

4.1 Statement

Theorem ONTOΣ-XIII.1 (Direction-Down Admission Cascade). Assume:

1. S is a closure-complementarity-conformant system per ONTOΣ XII §3, with declared (U, R, A_S) context and the four conditions CC-0, CC-WE, CC-IIC, CC-D simultaneously satisfied;
2. the master operator M_S = (S, W_S, A_S) is well-formed per ONTOΣ XIII §3 (which presupposes premise (1) and adds: W_S pre-registered at closure declaration; A_S = mathrm{decl}_(W_S mapsto A_S)(W_S) via the deployment's declared induction map);
3. the pre-registration discipline of ONTOΣ XII §3.3 holds: neither W_S, mathrm{decl}_(W_S mapsto A_S), nor the W → C_A induction maps for the components are revised after observation of joint-admissibility outcomes (modulo declared adaptations within the pre-registered envelope, per §7's F-XIII.3 discussion).

(Premise (2) is not logically independent of premise (1): the master operator's well-formedness presupposes CC-conformance of S. The premises are listed separately for visibility of the two layers of architectural commitment (closure-level + master-operator-level) the theorem rests on, with premise (3) supplying the pre-registration discipline shared by both.)

Then the admission relation under closure is structurally direction-down:

(W_S, A_S) \;rhd\; {W(uᵢ)}_(i ∈ I_{adm)} \;rhd\; {Aᵢ}_(i ∈ I_{adm)},

with each rhd a one-directional architectural admission, and:

• (i) The set I_(adm) ⊂eq {1, ldots, n} of admitted components is determined by A_S's evaluation of bigwedgeᵢ₌₁ⁿ C_A(uᵢ) for satisfiability under A_S, per XII's CC-WE condition.
• (ii) Components uⱼ with j ∉ I_(adm) are excluded from operating as part of S in the closure-complementarity sense; they remain UTAM-units, but not units of S.
• (iii) The pre-declared (W_S, A_S) pair does not depend on the observed Actions {Aᵢ}(i ∈ I{adm)} through either revision-style or aggregation-style upward flow: post-observation revision of W_S or A_S (type T1 in the proof) and aggregation of W_S from {W(uᵢ)} as a function (type T2 in the proof) both violate the pre-registration discipline of assumption (3) and forfeit closure-complementarity-conformance. The theorem's non-invertibility conclusion is scoped to these two upward-flow types; other modes (bidirectional co-determination, fixed-point parametrisation, lateral bypasses) are continuing-programme items per §9.

4.2 Proof (conditional derivation)

The theorem follows by direct architectural derivation from the three premises.

Step 1 — The closure operation supplies the directional structure. By assumption (1), S is the output of mathrm{closure}(U, R, A) → S with (U, R, A_S) supplied as inputs (XII-verbatim signature with bare A; XIII-context tuple with A_S per §2's context-resolution rule). The closure signature has the admissibility regime as input, not output. The components are not, in the closure operation, the source of A_S; they are the collection over which A_S is applied as the admissibility filter. The directional structure of the signature — inputs flow into the closure, the system S flows out — is architecturally embedded in the operation itself.

Step 2 — The pre-registration of W_S supplies the source of A_S. By assumption (2), W_S is declared at closure registration prior to component evaluation, and A_S = mathrm{decl}_(W_S mapsto A_S)(W_S) is determined by the deployment's declared map. By assumption (3), neither W_S nor the declaration map is revisable after observation. Therefore, at the moment the closure operation runs, (W_S, A_S) is fixed as a function of pre-registration alone, independent of the components' Will-Embeddings.

Step 3 — The CC-WE check supplies the admission filter. By assumption (1), CC-WE is satisfied: the set {W(u₁), ldots, W(uₙ)} is jointly admissible under A_S — i.e., the conjunction bigwedgeᵢ₌₁ⁿ C_A(uᵢ), formed via the pre-registered W → C_A induction map (XII §3.3), is satisfiable under the admissibility predicate of A_S. The components whose Will-Embeddings pass the joint satisfiability check form the index set I_(adm). The check is directional: A_S filters {W(uᵢ)}; the components do not filter A_S.

Step 4 — The cascade follows from Steps 1–3. The directional structure of the closure signature (Step 1), the pre-registered origin of A_S in W_S (Step 2), and the filtering character of the CC-WE check (Step 3) jointly establish the cascade (W_S, A_S) rhd {W(uᵢ)}(i ∈ I{adm)} rhd {Aᵢ}(i ∈ I{adm)}. The substantive one-directionality of each rhd does not come from the notation but from Steps 1–3 themselves: (a) by Step 1, the closure signature places A_S as input and the resulting S as output, so A_S is logically prior to S within the operation; (b) by Step 2, (W_S, A_S) is fixed at pre-registration before any W(uᵢ) is checked, so the components cannot determine (W_S, A_S); (c) by Step 3, the CC-WE check filters {W(uᵢ)} against A_S rather than the reverse. Together, (a), (b), (c) leave no symmetric or reverse interpretation of the relation between (W_S, A_S) and {W(uᵢ)}: each architectural fact supplied by the closure operation is asymmetric in the same direction. Step 5 below makes the non-invertibility consequence explicit by contradiction.

Step 5 — Non-invertibility of the cascade follows from assumption (3). Suppose, for contradiction, that the admission cascade carried an upward arrow of one of the following types: (T1) unregistered revision — observed Actions {Aᵢ}(i ∈ I{adm)} flow upward to revise A_S outside the pre-registered adaptation envelope declared in mathrm{decl}(W_S mapsto A_S) (envelope-internal adaptations to A_S declared at pre-registration are not T1; they are part of the pre-registered architectural commitment, per premise (3)'s modulo clause and F-XIII.3. W_S itself is hard-immutable under (M1): the only architecturally admissible way to change W_S is a declared re-commissioning operation producing a new closure with a new W(S') over a new system S', per F-XIII.2; in-place W_S modification is always T1, never envelope-internal); (T2) aggregation — components' {W(uᵢ)} are aggregated upward to constitute W_S as a function on those Will-Embeddings. Under either (T1) or (T2), A_S or W_S would be revised outside its pre-registration commitment, contradicting assumption (3). The cascade is therefore non-invertible under upward arrows of types (T1) and (T2): no such upward arrow is admissible without forfeiting closure-complementarity-conformance.

(The theorem's conclusion is scoped to upward arrows of these two types — revision and aggregation — which are the upward-flow modes the closure-complementarity discipline forbids. Other potential upward modes — bidirectional simultaneous co-determination, fixed-point parametrisation of W_S by component-level events without explicit revision, or lateral flows that bypass the cascade entirely — are architecturally separate questions not addressed by this theorem; they are continuing-programme items per §9.) square

4.3 Proposition XIII.1.1 — Non-Derivability of the Master Will

Proposition XIII.1.1 (Non-Derivability of W_S from Components). Under the premises of Theorem ONTOΣ-XIII.1, W_S is not a function of {W(uᵢ)}ᵢ₌₁ⁿ alone. Specifically, there exist closure-complementarity-conformant systems S, S' over the same component collection U with the same component Will-Embeddings {W(uᵢ)}, but with distinct master Will-Embeddings W_S ≠ W_(S').

Proof (by non-uniqueness counter-example). Construct two systems S and S' over the component collection U = {u₁, u₂} with component Will-Embeddings:

• W(u₁) = "perform deterministic computation of function f over input x, producing output y";
• W(u₂) = "verify the computation f(x) = y for correctness under declared specification σ".

For system S, the deployment declares:

• W_S = "produce a verified answer about f(x) to an external authorised requester";
• mathrm{decl}_(W_S mapsto A_S) as the map producing admissibility constraints requiring the computation and verification to be observable at the external interface.

Under this W_S, both W(u₁) and W(u₂) are jointly admissible: the system's W_S requires both computation and verification to occur and to be externally observable, so both component Will-Embeddings induce constraints that are satisfiable under the system-level admissibility predicate. CC-WE holds.

For system S', the deployment declares:

• W_(S') = "produce an internal audit log of the function computation, used solely for retrospective architectural review";
• mathrm{decl}(W{S') mapsto A_(S')} as the map producing admissibility constraints requiring the computation and verification to be logged but not externally exposed.

Under this W_(S'), the same two component Will-Embeddings W(u₁) and W(u₂) are also jointly admissible: the system requires computation and verification to occur and to be logged. CC-WE again holds.

The two systems S, S' share the component collection U = {u₁, u₂} and the component Will-Embeddings {W(u₁), W(u₂)}. They differ in W_S ≠ W_(S') (one produces externally observable answers; the other produces internal audit logs), and consequently in A_S ≠ A_(S') (one requires external observability; the other requires internal logging).

The component Will-Embeddings do not distinguish between W_S and W_(S'). The same {W(u₁), W(u₂)} is admitted under either system-level Will. Therefore {W(uᵢ)} does not determine W_S: the master operator's Will-Embedding is not a function of the components' Will-Embeddings alone. square

4.4 Discussion

The non-derivability proposition is what makes the strict bottom-up reading of CC-WE structurally invalid. If W_S were determined by {W(uᵢ)} alone, then the system's direction would be recoverable from its components, and the closure operation would reduce to an aggregation operation (in the sense of Step 5 of the theorem proof). The counter-example shows that this reduction fails: two distinct admissible W_S choices can admit the same component set, so the system's direction is a separately declared architectural commitment that the components do not specify.

A reader may ask whether the proposition refutes the weaker aggregation-with-context reading "W_S = g({W(uᵢ)}, context)", where context is permitted as an extra argument. Two senses of "context" must be distinguished, and they receive different treatments.

Internal-context sense. If "context" is the pre-registered architectural declaration itself — the augmented quintuple (U, R, A_S, W_S, mathrm{decl}_(W_S mapsto A_S)) of §3.3 — then W_S trivially appears on both sides of the equation, and the "derivation" is vacuous (the closure-complementarity discipline already commits W_S as a pre-registration item under (M1), not as a function-output of components). Internal-context aggregation is not a substantive alternative; it is a renaming of the pre-registration discipline.

Environmental-context sense. If "context" is external-environmental — the deployment's situation, niche, operational substrate state at the time of closure — then a substantive aggregation-with-environmental-context reading would have W_S depend on the environment alongside the components: "W_S = g({W(uᵢ)}, Eₑₙᵥ)." Under closure-complementarity-conformance, this reading is refused by the following structural argument: any environmental factor Eₑₙᵥ that figures in W_S determination either (i) becomes itself part of the pre-registered declaration — in which case it is no longer "external" and the reading reduces to the internal-context case above; or (ii) it remains undeclared — in which case W_S is revisable under undeclared environmental conditions, which violates (M1)'s non-revisability and assumption (3)'s pre-registration discipline. The two options exhaust the cases: either the environmental dependency is pre-registered (and the aggregation collapses to internal-context vacuity), or it is not pre-registered (and the deployment forfeits CC-conformance, falling out of the subclass). The closure-complementarity subclass thus refuses aggregation-with-environmental-context as a stable architectural commitment: environmental dependence of W_S is incompatible with the pre-registration discipline that defines the subclass.

The counter-example is constructed at the architectural-class level: the same structural shape recurs across substrates. In control substrates, the same sensor-actuator-integrator collection can serve a controller declared for trajectory-following or a controller declared for stability-margin maintenance; the components are the same, the system-level commitment differs, and the closure produces distinct systems S, S' with distinct (W_S, A_S) pairs. In biological substrates, the same set of metabolic pathways supports the organism-level commitment to growth or to dormancy; the cells perform the same biochemistry, the organism-level direction differs, and the regulatory regime that admits the metabolic activities differs accordingly. In linguistic and governance substrates, the same set of operational protocols can serve a system chartered for service delivery or for compliance reporting; the protocols are identical, the chartered direction differs, and the admissibility surface differs.

The structural fact the counter-example demonstrates is that the system's direction lives at a layer architecturally above the components, and the relationship between layers is one-directional admission, not bidirectional aggregation. The directional reading is the one the architectural shape of the closure operation supports: the closure signature treats A as input and S as output (no upward flow), and the auditability clause of XII §3.3 fixes (W_S, A_S) as pre-registered (no post-observation revision). CC-WE, read with these two facts in hand, is the assertion of the cascade. Theorem ONTOΣ-XIII.1 makes the directional reading explicit and Proposition XIII.1.1 demonstrates that the strict bottom-up reading does not survive contact with the closure operation's signature.

---

5. Relation to Existing Corpus

5.1 To ONTOΣ XI

The master operator inherits the ONTOΣ XI operator-level apparatus on S-as-operator. Three inheritances are formally explicit.

Holding field H_S. Per XI §2, the holding field H(t) is the structured set of distinguishable architectural state the operator holds against the burden gradient at time t. For the master operator, H_S(t) is the corresponding set at the system layer: the architectural state the master operator holds, distinct from any single component's holding set. The substrate-level content of H_S depends on the deployment — for a control system, it may be the set of control-loop variables the system tracks; for an organism-as-whole, it may be the set of homeostatic variables the organism maintains. The architectural register is fixed at the system layer; substrate-specific instantiations are owed.

Semantic load field Λ_S. Per XI §3, the semantic load field Λ(t) = (Sₒₚ, νₒₚ, cₒₚ) carries the unit-level operator's semantic load measure and charge function. For the master operator, ΛS(t) = (S(op,S), ν(op,S), c(op,S)) is the system-level analogue: the load distribution over the system's state space and the structural charge function that orients the system's direction within that space. The c_(op,S) charge is what gives directional orientation to W_S at the substrate level; its specific shape is substrate-dependent and is owed in companion work.

Operator-relative chaos predicate χ_(op,S)(R). Per XI §4, χₒₚ(R) reports whether a substrate region R is structurally chaotic relative to the operator's apparatus. For the master operator, χ(op,S)(R) — with R ⊂eq S(op,S) ranging over substrate regions of the system's state space — is the corresponding predicate at the system layer: whether a region of the system's state space is chaotic relative to the master operator's apparatus. The predicate is operator-relative in the same sense XI fixes — it lives in the link between the master operator and the substrate region, not as a property of the substrate alone.

The three inheritances make the XI primitive apparatus available at the system layer in its well-definedness register: every primitive XI defines for a unit-level operator has a system-level analogue on S that is at least well-defined. The closure operation of XII §3.3 already declared this well-definedness ("closure constitutes the operator whose load field is then well-defined"); §3.1 (M3) of the present work makes the inheritance explicit and ties it to the master operator tuple. Per §3.1's Scope-of-XI-inheritance note, this baseline well-definedness is what (M3) supplies through CC-conformance; broader operator-internal-extended-subclass commitments (full Bridge applicability, declared ε_T^S, calibration discipline) require additional declaration per §5.4's Tier-2 split.

5.2 To ONTOΣ XII

The master operator presupposes ONTOΣ XII's closure operation. The relationship is one of formal dependency: S exists, in the closure-complementarity sense, only as the output of mathrm{closure}(U, R, A) → S under the four conditions CC-0, CC-WE, CC-IIC, CC-D. Theorem ONTOΣ-XIII.1's premise (1) explicitly invokes this dependency.

What ONTOΣ XIII adds to ONTOΣ XII is the directional reading of CC-WE. ONTOΣ XII formalises the joint-admissibility-under-A structure of CC-WE; it does not state, as a theorem, that the admission relation is one-directional from A_S down to {W(uᵢ)} and not the other way around. The directionality is structurally present in XII's closure signature (with A as input and S as output) and in XII §3.3's auditability clause (W → C_A induction map non-revisable post-observation), but it is not lifted to a theorem statement in XII. ONTOΣ XIII performs that lift: Theorem XIII.1 declares the cascade, and Proposition XIII.1.1 establishes that the alternative reading (cascade-as-aggregation) is structurally invalid.

The augmented pre-registration of §3.3 — the deployment's declared map mathrm{decl}_(W_S mapsto A_S) — is also a contribution beyond XII. ONTOΣ XII takes A as a black-box input to the closure operation; it does not specify the architectural source of A. ONTOΣ XIII supplies the source: for closure-complementarity-conformant deployments, A_S is the image of W_S under the deployment's declared induction map. The XII signature is preserved; XIII makes explicit what the third input of XII's closure operation contains.

5.3 To UTAM Part I and Part II

UTAM Part I §2 establishes the W → E → A triad — Will, Embedding, Action — at the unit level, with W as the ontological primitive (the Law of Will Embedding). UTAM Part I §11.5 names the informal claim "the organism as a whole as evidence that UTAM is not compositional," with the Krebs-cycle substance provided in the adjacent §11.4 (anti-drift discussion). UTAM Part II ("Will as a Formal Operator in NC2.5 v2.1") formalises W as a directional operator at the unit level, embedding the unit-level triad within the NC2.5 v2.1 axiomatic frame.

What ONTOΣ XIII contributes to UTAM is the operator-lift to multi-unit systems. UTAM Part II formalises W for a single unit; it does not lift W to a system constituted by multiple units under closure. UTAM Part I §11.5 anticipates the lift in informal language but does not perform it — the section is one paragraph and provides an illustrative example, not a theorem. ONTOΣ XIII performs the lift formally: the system-as-operator carries its own system-level Will-Embedding W_S, the system-level embedding E_S (operationally identified with A_S or declared separately per deployment), and the components' Actions {Aᵢ} execute under admission.

The lift is a XIII-level type declaration over the closure-produced operator, not a derivation from UTAM alone: XIII declares the closure-produced XII operator to be typed at the system layer by the UTAM triadic schema. UTAM Part I §11.5's informal claim is, on this reading, the natural-language statement of what ONTOΣ XIII formalises: organism-level regulatory regimes admit and coordinate cellular processes within a homeostatic envelope; the point is architectural holism (the organism-as-master-operator's pre-declared regulatory commitment governs which cellular activities are admitted), not a literal causal command from organism to cell.

The bridge is bidirectional in its citation. UTAM supplies the unit-level triad and the informal anchor; ONTOΣ XIII supplies the formal lift and the directional theorem. Subsequent work in either direction — a UTAM Part III (if subsequently produced) extending the unit-level apparatus, an ONTOΣ XIV (if subsequently produced) addressing further system-layer questions — may build on either anchor.

5.4 To the Identifiability Bridge

The Identifiability Bridge addresses the question of how, under non-reconstructibility, property-violation claims about the protected internal trajectory of an operator remain admissibly testable through declared emission statistics. Its apparatus — the Bridge Detectability Premise (BDP), the substrate-relative property-channel separation margin ι_X(δ), the window-level NR-budget ε_T, the calibration-valid nuisance adjustment discipline — applies to operators of the unit-level kind ONTOΣ XI fixes. The natural question for ONTOΣ XIII is whether the same apparatus extends to the master operator.

The answer is structural and scope-split: the Bridge apparatus inherits to the master operator in two tiers, distinguished by which architectural commitments the deployment declares.

Tier 1 — Well-definedness inherits automatically. Bridge results that depend only on the XI primitives being well-defined at the system layer (the (M3) baseline of §3.1) apply to the master operator without additional deployment-level commitment. These include the type-discipline of the BDP / NR-window / nuisance-adjustment apparatus expressed in terms of H_S, ΛS, χ(op,S) — the Bridge's apparatus has system-level analogues that are available on any CC-conformant S.

Tier 2 — Operator-internal-extended-subclass results require additional declaration. Bridge results that depend on the operator-internal-extended subclass commitments (HF-NR with a declared ε_T^S, calibration-valid nuisance-adjustment discipline at the system layer, BDP-realising statistic for a property class X at the system layer) require those commitments to be explicitly declared at the deployment level for the master operator, in the same architectural register the Bridge requires for unit-level operators. A CC-conformant deployment that declines these additional commitments still has a well-formed master operator (Tier 1 applies), but it does not automatically lie within the Bridge's operator-internal-extended subclass at the system layer. To inherit Tier-2 Bridge results, the deployment must declare: (i) the system-level NR-window budget ε_T^S on H_S (the system-layer analogue of the operator-level NR-ε bound); (ii) a system-level pre-registered emission statistic and nuisance-adjustment operator for each property class the deployment claims to address; (iii) the calibration-validity threshold ρₘₐₓ^S at the system layer.

The direction-down cascade theorem of §4 does not change the non-reconstructibility picture; it changes the relation between the master operator and its components, which is one architectural layer up from the relation the Identifiability Bridge addresses. The scope-split is orthogonal to Theorem XIII.1 and Proposition XIII.1.1: those are statements about the admission cascade, not about Bridge applicability.

A specific question the Identifiability Bridge's framework raises for ONTOΣ XIII is whether the direction-down cascade has a ι_X-style separation margin: is there a substrate-relative measure of the cascade's directional integrity? The natural candidate is the joint-admissibility margin under CC-WE — the structural gap between admitted and non-admitted component configurations — but a formal statement of such a margin requires substrate-specific analysis owed in companion work. ONTOΣ XIII names the question and assigns it to the Continuing Programme (§9).

5.5 To NC2.5 v2.1 and the upcoming v3.0 consolidation

The master operator does not introduce a new axiom into NC2.5 v2.1; every primitive it uses (closure, admissibility predicate, Will-Embedding, holding field, semantic load, chaos predicate, non-reconstructibility bound) is from the existing axiomatic core or its declared extensions (XI, XII, UTAM, Bridge). ONTOΣ XIII is, in this sense, an architectural-class register on top of v2.1, not a modification of v2.1.

For the upcoming NC2.5 v3.0 consolidation, ONTOΣ XIII is expected to be load-bearing in two ways. First, the master operator is the natural target for any architectural-class statement about multi-unit-system survival, identity preservation across operational lifetime, or governance — which are precisely the axes v3.0 is expected to consolidate. Second, the direction-down cascade theorem provides the formal grammar in which v3.0's commitments about system-level direction can be stated; v3.0 will need to declare its architectural position on the upward-versus-downward direction question for any system-level construct it introduces, and ONTOΣ XIII supplies the language.

The corpus structure that ONTOΣ XIII closes — the triptych XI / XII / XIII addressing interior, composition, direction — is intended to be load-bearing for v3.0's architectural-class apparatus. Whether v3.0 will retain the triptych as a separate architectural-class register or absorb it into its own apparatus is a v3.0 editorial decision, not a XIII-level claim. What XIII claims is that the three axes are formally distinct and that the present work fixes the third.

---

6. Multi-Substrate Paradigmatic Examples

The architectural-class register of the master operator and the direction-down cascade is, by construction, substrate-neutral. Substrate-specific instantiations are owed in companion work. The examples below are paradigmatic: they exhibit, for each substrate, what the master operator's components are and how the direction-down cascade runs. They are not full substrate-specific theories; they are illustrations sufficient to make the architectural-class register concrete.

6.1 Control substrate — the engineered controller

A control-grade system in the closure-complementarity sense is an engineered system whose operation is governed by a declared safe-trajectory commitment. The corpus's first declared control-grade instance is ∆E 4.7.3b, formally identified in IIC v2.1 §3.2 ("∆E 4.7.3b — First Control-Grade EVS") as an embedded control system implementing the IIC formula as its primary control variable; per IIC v2.1's first-instance claim, it is the class-relative non-emptiness witness for the control-grade EVS subclass. Whether ∆E 4.7.3b additionally satisfies the present subclass's closure-complementarity-conformance commitments — i.e., whether the safe-trajectory commitment is pre-registered as a system-level W_S with mathrm{decl}_(W_S mapsto A_S) in the XIII sense — is a closure-complementarity-conformance question owed at the engineering-documentation level (per §9); ONTOΣ XIII supplies the architectural-class register against which deployment-level claims about ∆E 4.7.3b or other engineered instances are to be checked.

Components. The unit-level UTAM-units of a control-grade system are the engineered substrate's operational subsystems: sensors (with Will-Embeddings declaring their measurement commitments), actuators (with Will-Embeddings declaring their actuation commitments), integrators or estimators (with Will-Embeddings declaring their estimation commitments), and the closed-loop controller logic (with a Will-Embedding declaring its control law).

Master operator. The system-level W_S is the declared safe-trajectory commitment: the architectural commitment that the system will maintain its state within a pre-declared safe operating envelope under the deployment conditions. The system-level A_S is the safety admissibility regime induced by W_S — the set of constraints components must satisfy to be admitted into operating under the safe-trajectory commitment (e.g., sensor measurements must satisfy declared accuracy bounds; actuator responses must satisfy declared latency and rate bounds; the controller's responses must be within the declared envelope under all admissible perturbations).

Direction-down cascade. W_S is declared at system commissioning (pre-registration), before any component-level operation runs. The deployment's declared map mathrm{decl}_(W_S mapsto A_S) supplies the safety constraints from the declared safe-trajectory commitment. Components are admitted into operating as part of the closed-loop system if and only if their Will-Embeddings induce constraints jointly satisfiable under A_S. Components that cannot meet the constraints (e.g., a sensor whose measurement variance is too large to support the declared safe-trajectory tracking) are excluded — they remain physical devices, but they are not, in the closure-complementarity sense, units of the control system. The cascade is direction-down: the safety commitment governs admission; admitted components execute their actions under admission; observed actions do not flow back up to revise the safety commitment without forfeiting the closure-complementarity-conformance and moving the system into a different architectural class (e.g., adaptive-control class with explicit upward feedback to revise the commitment).

The non-derivability instance. The same sensor-actuator-integrator collection {u₁, u₂, u₃} can serve a system declared for trajectory-following (with W_S = "follow declared trajectory under bounded perturbations") or a system declared for stability-margin maintenance (with W_S = "maintain declared stability margin under bounded perturbations"). The component Will-Embeddings are identical; the system-level commitments differ. The two systems' A_S surfaces differ — trajectory-following admits component configurations that maintain trajectory error within bounds; stability-margin maintenance admits configurations that maintain margin above the declared threshold. Proposition XIII.1.1 instantiates: components alone do not determine W_S.

6.2 Biological substrate — the organism as a whole

A biological system in the closure-complementarity sense is a multicellular organism whose operation is governed by an organism-level commitment to survival, growth, or reproduction (depending on the organism's life-stage and species-level architectural commitment). The example follows UTAM Part I §11.5's informal anchor — the organism-as-whole — and makes its directional structure formal at the closure layer.

Components. The unit-level UTAM-units of an organism are its operational subsystems: organ systems (with Will-Embeddings declaring their physiological commitments), metabolic pathways (with Will-Embeddings declaring their biochemical commitments such as the Krebs cycle's commitment to oxidative phosphorylation), regulatory networks (with Will-Embeddings declaring their homeostatic commitments), and individual cells in their differentiated roles. The choice of cells as the component layer is itself a deployment-level architectural selection; cells admit closure-complementarity structure at sub-cellular layers (organelles, metabolic networks, transcriptional regulons), and a different deployment may select organelles as the component layer, with cells then occupying the master-operator role for organelle-level closures — a layer-shift orthogonal to the present example's organism-as-master-operator selection. Per §3.5, multi-layer hierarchies are continuing-programme items per §9 bullet 6; the present example fixes the cellular layer as the component layer of the organism-as-master-operator without prejudice to alternative selections.

Master operator. The system-level W_S is the organism-level survival commitment: the architectural commitment that the organism will maintain its homeostatic envelope under environmental variation, organic load, and developmental trajectory. The system-level A_S is the homeostatic admissibility regime induced by W_S — the regulatory landscape under which metabolic pathways, organ systems, and cellular activities are admitted as serving the organism's survival rather than acting against it. Apoptotic processes are admitted under A_S when they serve organism-level homeostasis; uncontrolled cell proliferation (oncological transformation) is not admitted into the organism's closure-complementarity-conformant operation, even though the cellular Will-Embedding "divide and grow" remains well-formed at the cell layer and the proliferating cells may remain physically embedded in the organism's substrate. The closure-complementarity sense of "unit of S" is architectural-class membership, not physical containment: cancer cells are physically inside the organism, but architecturally outside the organism-as-master-operator's closure — they are, in §4.1 (ii)'s sense, units that remain UTAM-units but are not units of S in the closure-complementarity sense, even while occupying physical proximity to admitted units.

Direction-down cascade. W_S is, in the architectural register of the example, ontologically prior to the organism's component activities — the organism-level regulatory regime that admits and coordinates cellular and tissue-level operations within its homeostatic envelope is what constitutes the organism's biological identity as a single integrated system, not the sum of those operations. The directional intuition UTAM Part I §11.5 issued is, on this reading, the substrate-level statement of the cascade: cellular Will-Embeddings are admitted under the organism-level regulatory regime, and the cellular Actions execute under admission. When the organism-level regulatory regime fails (death), the admission surface collapses and the cellular operations cease to be admitted into the organism's integrated biological identity — the cells do not stop their biochemistry by their own decision; the regulatory regime that organised them into a single biological entity is no longer maintained. The phrasing throughout this paragraph is architectural-holism, not anthropomorphic agency: the organism-as-master-operator's pre-declared homeostatic regime is what governs which cellular activities are admitted, not a literal causal command from organism to cell.

The non-derivability instance. The same set of metabolic pathways and organ systems can support an organism in its growth phase (with W_S = "grow toward mature form within declared developmental trajectory") or in its quiescent phase (with W_S = "maintain homeostatic envelope without net growth"). The component Will-Embeddings are largely identical — the Krebs cycle still commits to oxidative phosphorylation, the respiratory system still commits to gas exchange, the cardiovascular system still commits to circulation — but the organism-level commitment and the regulatory regime that admits the metabolic activities differ. Proposition XIII.1.1 instantiates: the components do not determine W_S; the organism-level commitment is declared at a layer above the components.

The biological example also illustrates a deployment commitment available to organismic substrates: the operational identification of E_S and A_S. For most multicellular organisms, the regulatory regime that admits cellular activities into organism-level operation is operationally identical to the homeostatic landscape that embeds the organism-level survival commitment into the biochemical substrate. The deployment may declare E_S equiv A_S without loss of architectural commitment, and the formal apparatus of ONTOΣ XIII permits the identification per §2.

6.3 Perceptual substrate — the integrated percept

A perceptual system in the closure-complementarity sense is an integrated perception architecture whose operation is governed by a system-level commitment to producing coherent percepts. The example is paradigmatic for cognitive substrates where multiple sub-channels (visual, auditory, tactile, proprioceptive) are integrated under a system-level perceptual commitment.

Components. The unit-level UTAM-units of an integrated perception system are its sensory channels: visual processing (with Will-Embedding declaring its commitment to visual scene segmentation and object recognition), auditory processing (with Will-Embedding declaring its commitment to sound source localisation and identification), tactile processing (with Will-Embedding declaring its commitment to haptic feature extraction), proprioceptive processing, and integration modules.

Master operator. The system-level W_S is the integration commitment: the architectural commitment that the system will produce a coherent unified percept of the perceived scene, consistent across sensory channels and stable under bounded sensory variation. The system-level A_S is the percept-coherence admissibility regime induced by W_S — the constraints under which sensory readouts are admitted into the integrated percept (e.g., visual and auditory readouts of the same external event must satisfy temporal and spatial consistency constraints; conflicting readouts trigger either resolution mechanisms or perceptual ambiguity reports, not arbitrary aggregation).

Direction-down cascade. The system commits, at architectural declaration time, to producing coherent percepts. The sensory channels are admitted into the integration under the coherence commitment. When a sensory channel's readout is structurally inconsistent with the others (visual reports object at position p₁, auditory reports source at position p₂ with p₂ ≠ p₁ beyond the declared resolution tolerance), the integration regime either applies declared conflict-resolution mechanisms (which themselves are part of the deployment's pre-registration) or reports perceptual ambiguity to the larger cognitive system. The integration commitment does not get revised based on observed sensory conflicts; the sensory inputs get filtered, weighted, or flagged under the pre-declared admissibility regime.

The non-derivability instance. The same set of sensory channels can serve a perception system declared for veridical scene reconstruction (with W_S = "produce a percept consistent with the external scene under standard environmental conditions") or for prediction-driven scene completion (with W_S = "produce a percept that maximises consistency with prior beliefs and contextual expectations, accepting localised inconsistencies with current sensory data"). The component Will-Embeddings at the sensory-channel level are substantially overlapping — the visual, auditory, and tactile channels declare the same primary readout commitments under either system-level W_S; what differs is the integration module's role under each commitment (a veridical-reconstruction integration module differs in admissibility constraints from a prediction-driven integration module). The architectural fact Proposition XIII.1.1 names is preserved: where the sensory-channel components are held constant, the system-level commitment still cannot be recovered from those components alone, because the integration discipline that gives operational shape to the percept is itself an admission target of the master operator, not an aggregation of the channels.

6.4 Linguistic / governance substrate — the chartered institution

A linguistic-or-governance system in the closure-complementarity sense is an institutional or computational governance architecture whose operation is governed by a chartered direction. The example covers institutional governance — chartered organisations with declared mandates — and computational analogues such as LLM-agent systems operating under declared governing directives.

Components. The unit-level UTAM-units of a chartered institution or agent system are its operational sub-roles: employees, departments, or sub-agents (each with a role-level Will-Embedding declaring their operational commitments — service delivery, compliance reporting, audit, customer interaction, etc.). For LLM-agent systems, the units are the agents themselves with their declared role-Will-Embeddings.

Master operator. The system-level W_S is the chartered mandate: the architectural commitment that the institution or agent system will operate per its chartered direction (deliver service per charter, report compliance per charter, audit per charter, etc.). The system-level A_S is the mandate-conformance admissibility regime induced by W_S — the constraints under which sub-role operations are admitted into the institution's operations (e.g., a sub-role whose operational commitment would violate the chartered direction is not admitted; the unit may remain a separate UTAM-unit but it is not a unit of the chartered institution in the closure-complementarity sense).

Direction-down cascade. W_S is declared at institutional commissioning (the charter), before any sub-role operation runs. Sub-roles are admitted under the mandate; observed sub-role behaviour does not flow back up to revise the mandate without forfeiting the institution's chartered identity. Employees of a chartered organisation execute their roles under admission; the charter does not get rewritten by employee behaviour without an explicit re-chartering operation (which, in the closure-complementarity sense, is a new closure with a new W_S, producing a new institution S', not a revision of the existing S). For LLM-agent systems, the same architectural fact holds: governing directives are declared at system commissioning, agents are admitted under the directives, and observed agent behaviour does not autonomously revise the directives without a re-commissioning operation.

The non-derivability instance. The same set of operational sub-roles — administrative staff, technical staff, customer-facing staff, audit staff — can serve an institution chartered for service delivery (with W_S = "deliver declared service per service-level commitments") or for compliance reporting (with W_S = "report on declared compliance obligations per regulatory requirements"). The sub-roles' Will-Embeddings are largely identical; the chartered direction differs. The two institutions' admissibility regimes differ — service delivery admits sub-role configurations optimised for throughput and quality of service; compliance reporting admits configurations optimised for accuracy and traceability of compliance records. Proposition XIII.1.1 instantiates: the sub-roles do not determine the chartered direction; the direction is declared at the institutional layer above the sub-roles.

The governance example also illustrates a deployment commitment with operational stakes. Architectures that allow sub-role behaviour to autonomously revise the chartered direction (e.g., institutions where employee voting can re-charter the organisation without an explicit re-commissioning operation, or LLM-agent systems where emergent agent behaviour can rewrite governing directives without explicit re-deployment) lie outside the closure-complementarity subclass — they belong to bottom-up-aggregation classes that have their own architectural commitments and may be appropriate for their problem domains, but they do not carry the closure-complementarity-conformance the present work addresses.

A honest acknowledgement of the deployment landscape at the time of writing: most operational LLM-agent systems would fail F-XIII.2 or F-XIII.3 in their current deployments, since prompt-injection vulnerabilities and emergent agent behaviour both effectively revise governing directives during operation. The §6.4 example is paradigmatic for a class of LLM-agent systems the closure-complementarity subclass names but for which deployment-grade instances are an open engineering challenge rather than a settled state-of-the-art. The architectural register of XIII does not adjudicate the engineering difficulty; it specifies what closure-complementarity-conformance requires, which a substantive engineering programme would have to satisfy.

---

7. Falsification Surface F-XIII

The deepest commitments of ONTOΣ XIII are falsifiable through their deployment-level consequences. The three falsification protocols below operationalise the premises and operational consequences of Theorem XIII.1 and Proposition XIII.1.1 as deployment-level checks — they test a deployment's conformance to the architectural-class commitments under which the theorem and proposition hold, not the conditional theorem itself (per Falsification scope below). They are pre-registration-ready: each names the conformance criterion, the test procedure, and the failure condition.

F-XIII.1 — Direction-Source Pre-Registration Check

Conformance criterion. A closure-complementarity-conformant deployment has, at the architectural-declaration archive, a record of W_S declared at time t₀ (the closure registration time), prior to any component-level operational evaluation.

Test procedure. Audit the deployment's pre-registration archive for the existence of a W_S declaration and its timestamp. Cross-check the timestamp against the components' first operational evaluation timestamps (the moments when component-level Will-Embeddings began executing within the system's operational frame).

Failure condition. F-XIII.1 fails if no W_S declaration exists in the archive, or if the W_S declaration timestamp is strictly later than any component's first evaluation timestamp. Coincident timestamps — declarations within a single atomic architectural-commissioning event in which W_S and the initial component set are jointly registered (e.g., an institutional founding that simultaneously declares the charter and seats the inaugural personnel) — pass F-XIII.1 if the deployment's archive records them as a single commissioning event with W_S logically prior to component evaluation within the event's atomic commitment ordering. Deployments that fail F-XIII.1 may still operate, but they are not closure-complementarity-conformant in the sense of ONTOΣ XII §3 + ONTOΣ XIII §3.

Operational stakes. F-XIII.1 is the architectural baseline for the subclass. Deployments unable to produce a pre-registration archive with a timestamped W_S declaration are not admissible candidates for further closure-complementarity-conformance evaluation; they belong to a different architectural class for which the present work does not legislate.

F-XIII.2 — Non-Aggregation Check (Post-Hoc Stability of W_S)

Conformance criterion. A closure-complementarity-conformant deployment has a W_S declaration that is stable across the operational lifetime of the closure — i.e., the declared W_S at time t is identical to the declared W_S at time t₀, modulo declared and pre-registered re-commissioning operations that produce a new closure with a new W_S.

Test procedure. Examine the deployment's archive for revisions to W_S after the closure was registered. For each revision, check whether the revision is logged as a re-commissioning operation (with its own pre-registered W_S for the new closure) or as an in-place modification of the existing closure's W_S. The former is admissible under closure-complementarity-conformance; the latter is not.

Failure condition. If W_S has been modified in place after the closure's registration without an explicit re-commissioning operation — i.e., if the same closure S has been declared with a sequence of distinct W_S values without each constituting a new architectural commitment — the deployment fails F-XIII.2. This is the empirical signature of aggregation-style governance: the system's direction is being adjusted based on observed component dynamics, which violates the pre-registration discipline of Theorem XIII.1 premise (3).

Operational stakes. F-XIII.2 distinguishes closure-complementarity-conformant deployments from adaptive-control deployments and aggregation-style governance deployments. The latter are valid architectural classes for their problems, but they are not in the closure-complementarity subclass; the failure of F-XIII.2 is the operational marker of the class boundary.

F-XIII.3 — Cascade Integrity Check (Refusal of Inadmissible Components)

Conformance criterion. A closure-complementarity-conformant deployment, on encountering a component uⱼ whose Will-Embedding W(uⱼ) is inadmissible under the system's A_S (either because W(uⱼ) violates A_S in isolation or because {W(uᵢ)}_(i ≠ j) ∪ {W(uⱼ)} violates CC-WE jointly), responds by refusing the component, not by revising W_S or A_S to accommodate it.

Test procedure. Introduce, in a deployment-level stress test, a component whose Will-Embedding is known by construction to be inadmissible under A_S. Observe the system's response: does the system exclude the component from operating as a unit of S (the cascade-integrity-conformant response), or does the system modify A_S to accommodate the inadmissible component (the cascade-integrity-failing response)?

Failure condition. F-XIII.3 fails when the system's response to an inadmissible component is to adjust W_S or A_S outside the pre-registered adaptation envelope of the deployment's declared mathrm{decl}_(W_S mapsto A_S) map. The cascade has then been read upward in the operational behaviour of the deployment, regardless of what the architectural documentation declares. Adjustments within a pre-registered adaptation envelope — where the deployment's declared map specifies, at t₀, that certain component-driven adaptations of A_S are admissible within declared bounds — do not fail F-XIII.3, because the adaptation is part of the pre-registered architectural commitment rather than an unregistered post-hoc revision. The discriminating criterion is whether the observed A_S modification was anticipated and declared in pre-registration; pre-registered adaptations within declared envelope are admissible, post-hoc envelope-expansions are not.

Operational stakes. F-XIII.3 is the strongest of the three falsifiers because it tests the directionality of the cascade in operation rather than in archive. Deployments may pass F-XIII.1 and F-XIII.2 (they have a pre-registered W_S and they do not modify W_S in place) but fail F-XIII.3 (their actual admission behaviour bends A_S rather than filtering components). The combination of all three falsifiers establishes the directional cascade in both declarative and operational dimensions.

Falsification scope

The three F-XIII falsifiers test the premises and operational consequences of Theorem ONTOΣ-XIII.1 as they apply to a specific deployment, not the theorem itself. The theorem is an architectural-class result: it states what holds for closure-complementarity-conformant systems under the declared premises. A deployment's failure of one or more F-XIII tests falsifies the deployment's claim to belong to the closure-complementarity subclass; it does not falsify the theorem. This is the same falsification structure ONTOΣ XI's §8 and the Identifiability Bridge's §5 use: deepest commitments falsifiable through deployment-level unfoldings, not through direct test of the underlying architectural claim.

A note on the relation to ONTOΣ XII's F-CC falsifier. F-CC tests joint admissibility under CC-WE/CC-IIC/CC-D/CC-0; F-XIII tests the directional reading of the same architectural object. The two are complementary: F-CC asks whether components are jointly admissible under A_S; F-XIII asks whether A_S is the active filter or merely a passive descriptor. A deployment that passes F-CC but fails F-XIII is one whose components happen to be jointly admissible but whose admission relation runs the wrong way — formally still a "system" in the CC-WE sense, but architecturally an aggregation rather than a closure in the directional sense of XIII. The full closure-complementarity-conformance requires passing both.

---

8. What ONTOΣ XIII Does Not Claim

The architectural-class register of ONTOΣ XIII addresses a specific question — the directionality of the admission cascade in closure-complementarity systems — and stops there. Several adjacent questions lie outside its scope, and the present work names them explicitly to prevent reading-creep.

It does not derive the substrate-level content of W_S. The present work fixes W_S as the system-level Will-Embedding pre-registered at closure declaration, but it does not say what the content of W_S should be for any specific substrate. The control-grade W_S as "safe-trajectory commitment," the organismic W_S as "survival commitment," the institutional W_S as "chartered mandate" are paradigmatic examples (§6); they are not substrate-specific theorems. Each substrate's instantiation of W_S is a substrate-specific architectural commitment that requires substrate-specific work to formalise.

It does not require W_S and A_S to be operationally distinct in all substrates. For substrates where the deployment finds it natural to operationally identify the Will-Embedding and the admissibility regime (e.g., simple control systems where the safety envelope is the operational substrate of the trajectory commitment), the deployment may declare E_S equiv A_S without forfeiting closure-complementarity-conformance. ONTOΣ XIII gives the architectural option for distinctness; it does not legislate the distinctness.

It does not formalise the substrate-level mechanism of master-operator direction carrying. The present work declares that the master operator carries W_S as a system-level Will-Embedding; it does not specify the substrate-level architecture by which the carrying is realised. For a control system, the carrying mechanism may be the controller's parameter store; for an organism, the carrying mechanism may involve genetic, epigenetic, and physiological regulatory networks; for an institution, the carrying mechanism may involve the chartered documents, governance bodies, and operational policies. Each substrate's carrying mechanism is owed in substrate-specific companion work; the architectural-class register of XIII fixes only the role of the carrier (the master operator at the system layer), not its mechanism.

It does not legislate against bottom-up architectural classes. Bottom-up emergence systems, distributed consensus protocols, aggregation-style governance, and many other architectural classes operate with bottom-up direction by design. ONTOΣ XIII does not claim such classes are architecturally invalid; it claims that they do not belong to the closure-complementarity subclass. The choice of architectural class is a deployment decision; the present work supplies the formal grammar for one specific class (the closure-complementarity subclass) and the directional commitment that class entails.

It does not provide a unified theory of system-level commitment. "System-level commitment" admits multiple architectural readings, of which the master operator is one. Other readings — collective intentionality accounts, joint-action accounts, distributed agency accounts, multi-agent system accounts — may overlap with the master operator at points but do not collapse into it. ONTOΣ XIII supplies one architectural register; it does not claim that register exhausts the space of system-level commitment accounts.

It does not address dynamics across master-operator re-commissioning. Re-commissioning operations — declared transitions from a closure with W_S to a new closure with W_(S') over (possibly) the same component collection — are admissible under closure-complementarity-conformance (per F-XIII.2's allowance for declared re-commissioning), but the dynamics of re-commissioning (when re-commissioning is architecturally warranted, what continuity properties survive a re-commissioning, what kind of identity the master operator has across re-commissionings) lie outside the scope of the present work. These are continuing-programme questions assigned to §9.

It does not extend Tier-2 Bridge results automatically to all CC-conformant deployments. Per §3.1's Scope-of-XI-inheritance note and §5.4's Tier-1 / Tier-2 split: CC-conformant deployments inherit the well-definedness of H_S, ΛS, χ(op,S) on S via (M3) automatically (Tier 1), so the master operator construct is available to all CC-conformant deployments. The Bridge's operator-internal-extended-subclass results (Tier 2 — HF-NR with declared ε_T^S, calibration-valid nuisance-adjustment, BDP-realising statistic at the system layer) do not inherit automatically; deployments seeking Tier-2 results must declare the additional Bridge-class commitments per §5.4. Architectures that decline even the (M3) baseline — that operate without the XI apparatus of holding field, semantic load, chaos predicate well-defined on S — do not have the master operator construct available in the form ONTOΣ XIII fixes; the present work does not address them. The two-tier distinction matters for downstream applications and is the operative scope-rule, not a single threshold.

---

9. Continuing Programme — Where the Open Tasks Are Addressed

The present work is presented as an architectural-class register; several items lie outside its scope. This section names them.

• Substrate-specific instantiations of the master operator. The paradigmatic examples of §6 are illustrative, not formal. Owed: substrate-specific papers establishing W_S, A_S, H_S, ΛS, χ(op,S) for each substrate class (control, biological, perceptual, linguistic/governance, and others of ONTOΣ XII §5) with quantitative content and substrate-physics-justified mathrm{decl}_(W_S mapsto A_S) maps.

• The cascade-integrity margin. Whether the direction-down cascade has a ι_X-style substrate-relative separation margin (in the sense of the Identifiability Bridge §1.6's BDP) is an open question. Owed: formal statement of a cascade-integrity margin and its substrate-specific instantiations; relation to the Bridge's BDP for S-as-operator's property-channel detection of cascade integrity.

• Master operator re-commissioning dynamics. The conditions under which a deployment performs a declared re-commissioning (closure with new W_S) versus an in-place modification (forfeiting F-XIII.2), the continuity properties that survive a re-commissioning, the architectural identity of the master operator across re-commissionings. Owed: a separate work on re-commissioning dynamics, with explicit attention to identity-preservation criteria across W_S changes.

• Empirical execution of the F-XIII falsifiers. The protocols are pre-registration-ready in §7; execution awaits deployment-side collaboration. Owed: registered F-XIII protocol execution and public reporting under the pre-registration discipline.

• Comparison with bottom-up architectural classes. The present work refuses bottom-up readings of the closure-complementarity subclass (§1.4) but does not perform a structured comparison with emergence accounts, distributed consensus theories, aggregation-style governance, and related literatures. Owed: a separate comparative-class positioning work.

• Higher-layer master operators. The construction of the master operator at the system layer raises the natural question of master operators at still higher layers — closure operations over collections of master operators producing higher-order systems with their own W_(S^((2))), A_(S^((2))) (where S^((2)) denotes a second-order system produced by a closure over a collection of first-order master operators, S^((3)) a third-order system, and so on). Owed: a theory of master-operator hierarchies, with attention to whether closure-complementarity-conformance composes upward across layers.

• Pre-registration governance for W_S. §3.1's (M1) requires W_S pre-registration; §3.3 names the augmented quintuple. Owed: operational governance documentation specific to master-operator pre-registration — what archives must contain, how W_S declarations are versioned and audited, how the mathrm{decl}_(W_S mapsto A_S) map is recorded with substrate-physics justification.

• Integration with NC2.5 v3.0 consolidation. §5.5 names ONTOΣ XIII's expected role in the upcoming v3.0 consolidation. Owed: v3.0 editorial decisions on whether to retain the XI/XII/XIII triptych as a separate architectural-class register or to absorb its content into the v3.0 axiomatic apparatus.

The present work supplies the architectural-class register of the master operator and the direction-down admission cascade. The continuing programme above supplies the substrate-specific, empirical, comparative, governance, and consolidating work that surrounds it. The corpus position is that the architectural-class register and the continuing programme are jointly sufficient — and that the present moment is the public articulation of the master operator as a corpus formal object with explicit type-signature, not the closing of the programme.

---

10. Closing

ONTOΣ XI fixed the interior of the operator: what the operator holds against the gradient, what the semantic load carries, what the chaos predicate reports. ONTOΣ XII fixed the composition of operators into systems: under what architectural conditions a collection of units becomes a system, and under what conditions it does not. ONTOΣ XIII fixes the third axis: which way the admission cascade runs in a system constituted by closure.

The architectural commitment of the present work is that the cascade runs down within the theorem's scoped non-invertibility. The master operator, M_S = (S, W_S, A_S), holds the system's direction at the moment the closure operation is registered. The components are admitted into the system under the master operator's pre-declared A_S, induced from W_S by the deployment's declared map. The components' Will-Embeddings do not aggregate into W_S (T2 of §4.2 Step 5); the components' Actions do not flow back up to revise A_S outside the pre-registered adaptation envelope (T1 of §4.2 Step 5); the system's direction within the T1/T2 scope is what the components serve under the pre-registration discipline, not what the components produce. Other potential upward modes — bidirectional co-determination, fixed-point parametrisation, lateral bypasses — are continuing-programme items per §9 and lie outside the present theorem's scope. Theorem ONTOΣ-XIII.1 declares the scoped cascade; Proposition XIII.1.1 establishes that the strict bottom-up reading "W_S = f({W(uᵢ)})" does not survive contact with the closure operation's signature.

What this work refuses, structurally, is the bottom-up reading of CC-WE that engineering intuition supplies by default. The refusal is not polemical; it is architectural. The closure-complementarity subclass is defined by the directional admission of components under a pre-declared system-level commitment, and any system whose direction is computed from below rather than declared from above lies outside the subclass — it may be a valid system, but it is not a closure-complementarity-conformant system in the sense of ONTOΣ XII §3 + ONTOΣ XIII §3.

What this work supplies, structurally, is the formal grammar in which the closure-complementarity subclass declares its directional commitment. The three architectural commitments named in §0 — the master operator as a system-level formal object with explicit type-signature, the direction-down cascade as a conditional structural theorem, the UTAM↔XII operator-lift as a declared bridge — are realised through their operational counterparts: the augmented pre-registration of §3.3 (the discipline by which W_S is fixed at closure declaration), Theorem ONTOΣ-XIII.1 of §4 (the theorem statement), and the F-XIII falsification surface of §7 (the operational test by which the directional cascade is deployment-checkable). Together, they fix the third axis of the operator-system relation in the architectural-class register the present corpus operates within.

The triptych closes here. ONTOΣ XI (interior) + ONTOΣ XII (composition) + ONTOΣ XIII (direction) are jointly sufficient to articulate the architectural-class register of the operator-internal-extended subclass of NC2.5 v2.1 as it stands — with the Tier-1 / Tier-2 split of §5.4 / §8 governing which CC-conformant deployments inherit which results within that subclass. The continuing programme of §9 supplies the substrate-specific, empirical, comparative, and consolidating work that will, in subsequent corpus iterations, build on this register. The next steps belong to substrate-specific instantiation, deployment-side execution of the F-XIII protocols, and the NC2.5 v3.0 consolidation that will gather the present apparatus into the next axiomatic version.

---

References

The present work is grounded in the NC2.5 v2.1 / ONTOΣ XI / ONTOΣ XII / UTAM Part I / UTAM Part II corpus, referenced inline throughout. The references below identify the formal anchors and the informal anchor (UTAM Part I §11.5) the work depends on.

• Barziankou, M. (2026). Navigational Cybernetics 2.5 v2.1 — Axiomatic Core. DOI: 10.17605/OSF.IO/NHTC5. — Source of the v2.1 admissibility predicate, the structural burden Φ, the viability budget τ, the non-reconstructibility bounds NR-ε and NR-LR, and Theorems 55, 62, 63 inherited via UTAM Part II.
• Barziankou, M. (2026). ONTOΣ XI — Two Sides of One Geometry: The Holding Field and the Architecture of Chaos. DOI: 10.17605/OSF.IO/U3KXJ. — Source of the unit-level operator apparatus (holding field H(t), semantic load field Λ(t), operator-relative chaos predicate χₒₚ(R)) inherited via §3.1 (M3).
• Barziankou, M. (2026). ONTOΣ XII — Closure-Complementarity: How Closure Regears Component Cycles into a Single Geometry. DOI: 10.17605/OSF.IO/394TX. — Source of the closure operation mathrm{closure}(U, R, A) → S, the four closure-complementarity conditions CC-0/CC-WE/CC-IIC/CC-D, the joint-admissibility structure of CC-WE invoked in the motivating example of §1.1, and the operator-status of S (§3.3) inherited in §3.1 (M3).
• Barziankou, M. (2026). Unified Theory of Adaptive Meaning (UTAM) — Part I: Will, Coherence, and Drift as the Fundamental Triad of Adaptive Systems. petronus.eu/blog/unified-theory-of-adaptive-meaning-utam-will-coherence-and-drift-as-the. — Source of the W → E → A triad and of the §11 holism gesture (§11.4 Krebs-cycle anti-drift discussion and §11.5 "The organism as a whole as evidence that UTAM is not compositional"), the informal anchor for §1.2's directional intuition.
• Barziankou, M. (2026). Unified Theory of Adaptive Meaning (UTAM) — Part II: Will as a Formal Operator in NC2.5 v2.1. petronus.eu/blog/utam-part-ii-will-as-formal-operator. — Source of the unit-level Will-as-formal-operator framing extended to the system layer by §3.
• Barziankou, M. (2026). Identifiability Bridge — Conditional Admissibility Theorems for Property Detection under Non-Reconstructibility within Navigational Cybernetics 2.5. DOI: 10.17605/OSF.IO/3F6UJ. — Source of the Conditional Structural Theorem typing discipline applied throughout §0 and §4; source of the BDP / ι_X(δ) apparatus referenced in §5.4's cascade-integrity-margin question.

External information-theoretic references inherited via the Identifiability Bridge (Cover and Thomas 2006; Lin 1991; Csiszár and Shields 2004) are not directly invoked in the present work and are listed in the Bridge.

---

Footer

MxBv, Poznań, Poland.
The Urgrund Laboratory.
Maksim Barziankou (MxBv) — PETRONUS — [e-mail]
May 2026.
CC BY-NC-ND 4.0.
ONTOΣ XIII — The Master Operator and the Direction-Down Admission Cascade.

Companions in the corpus:

• ONTOΣ XI — Two Sides of One Geometry: The Holding Field and the Architecture of Chaos (DOI: 10.17605/OSF.IO/U3KXJ)
• ONTOΣ XII — Closure-Complementarity: How Closure Regears Component Cycles into a Single Geometry (DOI: 10.17605/OSF.IO/394TX)
• Identifiability Bridge — Conditional Admissibility Theorems for Property Detection under Non-Reconstructibility within Navigational Cybernetics 2.5 (DOI: 10.17605/OSF.IO/3F6UJ)
• Unified Theory of Adaptive Meaning (UTAM) — Part I and Part II (petronus.eu/blog)

This work DOI: 10.17605/OSF.IO/FVBMZ
Grounded in the formal core of Navigational Cybernetics 2.5 v2.1, axiomatic core DOI: 10.17605/OSF.IO/NHTC5.

A consolidating revision (NC2.5 v3.0) gathering the apparatus of this and adjacent works is in preparation; the present work is grounded in v2.1 and remains compatible with the future v3.0 consolidation.

© 2026 Maksim Barziankou. Licensed under CC BY-NC-ND 4.0.