Concept: Pendulums and Verlag

Status: shape-only. Pendulum tables exist in surreal/schema/gestalt.surql. Pendulum evaluator dispatch is in closed_runtime_boundary (see 022 gap report item 4). Verlag-published authority packages exist as fixtures only (see item 3). Authority sources live under authority-sources/.

The authority topology

Gestalt does not invent governance. It coordinates governance produced by accountable parties. The model has three layers:

Pendulums          radiate authority/reliance into bounded spheres
   |
  publish through
   v
Verlag             digests authority into operational instruments
   |
  bundles into
   v
Authority packages  signed, versioned, lifecycle-managed
   |
  cited by
   v
Capability atoms   define what acts mean
   |
  cited by
   v
Atoms              admitted serious acts

This page covers Pendulums and Verlag. For packages and capabilities see authority-packages.md and atoms-and-capabilities.md.

Pendulums

A Pendulum is a Geist whose emissions affect other Geists. It publishes authority-bearing atoms within a bounded sphere.

Classes of Pendulum:

Sovereign Pendulums

States, courts, registries, regulators, Finanzamt bodies, municipalities, public authorities. They impose. They can:

publish judgment atoms,
publish company-office facts (Handelsregister),
publish tax parameters or notices (Finanzamt),
publish license suspensions, revocations, sanctions hits,
publish regulatory updates that change authority topology.

A sovereign Pendulum’s emissions can change what is admissible inside a tenant Geist without the tenant’s consent. A sanctions hit on a counterparty can refuse new payments to that counterparty. An injunction can require legal hold.

Professional Pendulums

Kanzleien, Steuerberater, auditors, chambers, certifiers, professional bodies. They opine, attest, and approve within their professional scope:

a Kanzlei issues legal opinions and approvals with conditions,
a Steuerberater issues posting proposals, VAT treatment opinions, filing approvals, correction requests,
an auditor issues audit findings and attestations,
a chamber issues qualification certificates.

A professional Pendulum’s emissions are typically invited — the tenant Geist subscribes through a lens engagement (see advisor-lenses.md). Their reliance terms are scoped, and they carry liability.

Commercial Pendulums

Insurers, banks, platforms, vendors, standards providers. Their published conditions shape reliance:

a bank publishes payment-rail conditions and account status changes,
an insurer publishes coverage conditions and exclusions,
a payment processor publishes settlement evidence,
a standards body publishes a published standard and its versions.

Commercial Pendulums emit conditional reliance. A tenant relies on their emissions through commercial contracts.

Verlag Pendulums

Publishers of legal-operational instruments — clause libraries, contract templates, CNL grammars, predicates, evidence requirements, operational effects, and SDK-level workflows.

Verlag Pendulums are accountable authorship. They sit between raw sovereign authority and a tenant’s operational reality.

Company Pendulums

Boards, officers, compliance offices, policy committees, delegated internal organs. They bind internal governance:

a board publishes a corporate policy,
a compliance officer publishes a control,
a policy committee publishes a navigation profile.

Company Pendulums are bounded to the publishing company’s own authority topology.

Why Pendulums and not “rules”

Calling these “rules” or “policies” would flatten them. They are distinct because:

they are issued by distinguishable authors,
they have bounded spheres (where they apply, to whom, when),
they carry reliance terms (who can lean on them, for what),
they have liability (who carries the consequence of error),
they can be superseded, revoked, or contested,
they may conflict with one another, requiring resolution.

A flat “rule” model loses every one of these. The Pendulum model keeps them as first-class.

Authority spheres

A sphere is the intersection of subject, actor, territory, time, matter, operation, product, counterparty, company form, professional qualification, contract, policy, legal situation, and reliance terms under which a Pendulum’s emissions apply.

Examples:

The Finanzamt of a specific district applies inside one sphere.
An insurer for a specific product and risk applies inside another.
A Munich employment law Kanzlei acting on a termination matter applies inside another.
A New York firm reviewing a US contract applies inside another.

Gestalt does not ask whether a rule is globally active. It asks whether an authority sphere is active for this act, by this actor, on this subject, in this jurisdiction, at this time.

Trust scoping

Tenants do not trust Pendulums globally. Trust is scoped to purpose:

trusted_for:
  standing_sources
  law_sources
  professional_attestations
  registry_claims
  identity_evidence
  payment_conditions
  clause_libraries
  proof_verification

A bank trusted for settlement evidence is not automatically trusted for employment facts. A Steuerberater trusted for VAT treatment is not automatically trusted for employment law. A regulator trusted for one filing is not automatically trusted for another.

This scoping is part of the tenant’s own governance. Today it lives in the fixture catalog; production will require an explicit registry trust workflow.

Pendulum sources

A Pendulum cites sources — raw documents that the Pendulum’s rules and emissions depend on. Sources are content-hashed, versioned, and freshness-tracked:

pendulum_source
  pendulum            who cites it
  source_kind         uri | regulation | case_law | published_standard | ...
  version_label       "BMF-Schreiben 2026-03-15"
  freshness           when it was last verified
  commitment          sha256 of the canonical bytes

Source materials live under authority-sources/. Today only authority-sources/fr/ is populated (France market entry projection).

Pendulum rule sets and rules

A rule set groups rules a Pendulum publishes against an authority epoch:

pendulum_rule_set
  pendulum            who published
  authority_epoch     when this set is operative
  rule_refs           the rules in this set
  status              active | superseded

A rule:

pendulum_rule
  rule_set            which set it belongs to
  code                stable identifier
  jurisdiction        DE, EU, FR, ...
  trigger_tags        what kinds of atoms this rule applies to
  condition           the structural condition
  emits               what effects this rule emits when triggered
  required_evidence   what evidence atoms must cite
  confidence          deterministic | high | medium | conditional

A Pendulum rule is not a Rust enum. It is a published, signed, versioned record. Pendulum evaluators dispatch rule sets against incoming atoms.

Today the dispatcher is not operational. The schema is in place.

Verlag

The Verlag is the accountable publisher of operational instruments. It digests authority into usable building blocks:

authority source atoms
  + doctrine and editorial judgment
  + controlled prose
  + predicate / effect grammar
  + evidence requirements
  + discretion boundaries
  + attestation
  = capability atom

A Verlag’s publication is accountable authorship. It must cite:

raw law or authority sources (with content hashes),
editor identity,
review scope,
Kanzlei attestation if present,
known limitations,
effective period,
supported entity types,
supported jurisdictions,
update relation to prior versions.

A Verlag is therefore a Pendulum of operational grammar. It is not a sovereign. It cannot make law. It can make law usable.

Why Verlag matters

Without a Verlag layer, every Koerper would have to interpret raw law on its own — and would do so inconsistently, opaquely, and with no accountable author. The Verlag makes interpretation a product:

a clause library you can cite,
a capability schema you can rely on,
a workflow definition you can implement,
attached attestations from professional reviewers,
updated when authority changes,
superseded with explicit transition metadata,
carrying liability terms that bind the publisher.

A Steuerberater can publish their own micro-Verlag. A vendor can publish a Verlag for their domain. A national chamber can publish a broad Verlag covering many SMB use cases. There is no central Verlag.

Pendulum / Verlag separation

This separation is constitutional. The same actor cannot be both:

a Kanzlei that opines on a specific matter (a professional Pendulum), and
the publisher of the operational grammar that defines what that opinion means (a Verlag).

If they were the same, accountability would collapse into self-authorization. The Verlag publishes the grammar of what a Steuerberater’s opinion atom means. A Steuerberater issues opinions under that grammar. They are different speech acts under different liability terms.

How tenants use the topology

A tenant Gestalt:

Subscribes to Pendulums it trusts, with scoped trust.
Imports authority packages from Verlags it trusts.
Cites capability atoms from those packages in its own atoms.
Receives Pendulum emissions (sovereign rulings, professional opinions, commercial conditions) into its Geist.
Applies the resulting authority topology when admitting future atoms.

The tenant is not the source of authority. The tenant is the governed reality where authority arriving from many sources intersects.

What this looks like today

Today, almost all of this is fixture or schema-only:

One fixture authority package (france-market-entry-projection-2026-04).
One fixture authority epoch (authority_epoch:fixture_2026_04).
Pendulum rule sets exist as schema, not as live evaluators.
Verlag lifecycle (publisher onboarding, editorial pipeline, reviewer signatures) is unbuilt.
Sovereign Pendulum integrations (Handelsregister, Finanzamt, etc.) do not exist.

The shape is sufficient for prototyping a Koerper. It is not sufficient for binding a real act.

See 022 gap report items 3, 4 for what is missing.

What the Verlag is not

Not a publisher of code. The Verlag publishes capability atoms with predicates, schemas, and effect grammars. Not application code. The Koerper implements code; the Verlag publishes meaning.
Not a law firm. A Kanzlei can be both an attestor on Verlag publications and a professional Pendulum issuing opinions. The Verlag itself is editorial publication.
Not a marketplace. Authority packages are not “products for sale” in a generic catalog. They are accountable publications governed by trust and liability scoping.