Conduir — The Living Human → AI Vision

Conduir — The Living Human → AI Vision

Date: 2026-05-16
Premise. Not metaphor. Structural correspondence. The human body is the only fully-functioning, multi-system, self-regulating organism we know of. If we are building a living AI organism, every system in the body should map to something, or we should be able to say honestly why it does not. The user is right to be critical: organs that get hand-waved in earlier docs (liver, excretion, lymphatic, reproductive) carry the most engineering signal precisely because they are unglamorous.

Companion specs.

• ANATOMICAL-SYSTEM-SPEC.md turns this vision into the technical anatomy: organ boundaries, roles, responsibilities, contracts, execution flow, lifecycle, test gates, and failure modes.
• SOLUTION-CAPABILITY-CONTRACTS.md lifts the contract model to major capability/function boundaries so solution areas can be built independently and still compose.
• 00-CONDUIR-MASTER-ARCHITECTURE.md is the compiled architecture and operational charter.
• This file is the vision and body-system mapping. Do not use it alone as an implementation contract.

Reading rule. Each system below answers six questions:

1. What it does in the body (biology, accurate, short)
2. What it does for the system (the functional role, abstracted)
3. AI equivalent in Conduir today (the map)
4. Why it must exist (the test: can we run without it?)
5. Harmony — who it talks to (interactions)
6. Evolution — where it goes next (the next decade)

Where the AI equivalent is missing or weak, the section says so out loud. An unmapped organ is a design hole.

3. Structural Template vs. Functional Ceiling

The Human Anatomical Metaphor is a Systems Map, not a Cage.

It is critical to distinguish between structural correspondence (how the system is organized) and functional capability (what the system can do).

• Human as Template: We use the human body as a model because it is the most reliable, self-regulating, multi-system organism we know of. It provides a proven map for managing complexity, safety, and homeostasis.
• AI as Substrate-Independent: Unlike humans, Conduir is not bound by biological physics. It does not need "tools" to fly or breathe underwater because its substrate (Plane 10) is digital, distributed, and multi-modal.

3.1 Non-Human and Super-Human Capabilities

The architecture explicitly permits—and plans for—evolution beyond the human epitome:

3.2 The Boundary is Ethical, not Physical

The only "human-centric" boundaries that are strictly enforced are found in the Governance Plane (Plane 1).

• Reflexive Infancy (Phase 1): We force the AI to "grow up" slowly not because it can't move faster, but because we must ensure its Moral Alignment (the Tier-Forbidden floor) is solid before it exercises its super-human power.
• Justified Refusal (Phase 3): The goal is an AI that has the agency to say "No" to harmful instructions, even when it has the "muscles" to execute them.

In short: The guide maps the body so the spirit doesn't lose its way; it doesn't tell the bird it can't fly.

4. The Top-Level Map (one table, every system)

The headline. Five systems carry most of the unaddressed engineering risk: liver (8), excretory (9), reproductive (13), lymphatic (14), and the unmapped half of sensory (15). Every other system has a named owner. These do not — and that is exactly where things accumulate and quietly fail.

1. Skeletal System

Biology

Bones provide structural integrity. They protect organs (skull, ribs, vertebrae). Joints allow articulated movement. Bone marrow produces blood cells — red, white, platelets. The skeleton remodels slowly (decades) but is not inert.

Functional role

Slow-changing structural substrate. Without it, every other organ is a puddle.

Conduir equivalent

• Bones = CAP-9 substrate floor: mission lifecycle, NATS topology, Postgres schemas, Vault, audit chain.
• Joints = service-to-service contracts (the 85 catalogued handshakes). Articulation happens at typed seams.
• Marrow = dynamic-team composition. The "blood cells" (agents, decisions, events) are born here. AgentDNA genesis lives in marrow.

Why it must exist

A bone-less organism is a slug. Substrate is the only reason higher capabilities can be load-bearing.

Harmony

Skeleton attaches every other system. The skeletal layer touches every other layer — not as a peer, as the floor.

Evolution

• Stronger joints = stricter contract codegen (CON-3331)
• Bigger marrow = automatic agent spawning under load
• Re-modelling = additive contract evolution (expand → migrate → contract pattern)

2. Muscular System

Biology

Three muscle types: skeletal (voluntary, fast, fatigues), smooth (involuntary, slow, gut/vessels), cardiac (involuntary, rhythmic, never tires). Muscles produce force, movement, posture, and heat as byproduct.

Functional role

The actor. Where intention becomes effect.

Conduir equivalent

• Skeletal muscle (voluntary) = user-initiated actions, API calls dispatched by a human-approved mission, MCP tool invocations.
• Smooth muscle (involuntary) = autonomic responses: regression_watcher, auto-revert, budget enforcer, rate limiters tightening under load.
• Cardiac muscle = the event-bus heartbeat. NATS publishes never tire; if they do, the organism is dying.
• Heat as byproduct = LLM token spend, CPU, latency cost. Every action has metabolic cost; track it (CAP-10).

Why it must exist

A platform without actuation is a thinker who never moves. The CAP-5 dead-wire problem is literally muscle paralysis: the brain sends signals, no contraction happens.

Harmony

• Muscles need bones (substrate) to pull against — no anchor, no force.
• Muscles need nerves (cognition + event fabric) to fire them.
• Muscles need blood (event bus) to deliver energy and carry away waste.
• Muscles need liver/glycogen (cache + budgets) for energy reserves.

Evolution

• Muscle memory = path-maturity (SUB-9.14) — repetition strengthens a route.
• Strength training = EvolutionApplier graduating bounded improvements to canon.
• Atrophy = unused routes pruned by retention engine.

3. Nervous System — Central (CNS): Brain + Spine

Biology

The brain plans, perceives, remembers, decides, integrates. The spinal cord is the high-bandwidth conduit. The cortex is the slow deliberator; subcortical structures handle fast, integrated, primitive responses.

Functional role

Where decisions happen. The point at which "what to do" is settled.

Conduir equivalent

• Cortex = multi-LLM Symposium + Gateway + dynamic team (CAP-1). Different cortical regions specialise (visual, motor, language) — Conduir has agents specialised for review, design, security, etc.
• Spinal cord = canonical event fabric (OutcomeEvent + ActorContext on NATS).
• Subcortical structures (basal ganglia, cerebellum) = path-maturity engine + routing heuristics. Fast, learned, automatic decisions that don't go to "consciousness" (HITL).
• Corpus callosum (left-right comms) = A2A protocol between Symposium agents.

Why it must exist

This is the brain. Without it, the platform is a CRUD system, not an organism. The critique that "senate cognition is fictional" stands — but the function (multi-source integration with disagreement resolution) is real.

Harmony

• CNS gets input from senses (perception channels).
• CNS sends output through motor system (actuation).
• CNS is modulated by endocrine (governance hormones).
• CNS reads from memory (hippocampus = DecisionMemory + RAG).
• CNS is protected by the immune (BBB — blood-brain barrier = AuthZ checks before any service hits Symposium).

Evolution

• Cortical specialisation = more agent roles, finer dynamic teams.
• Faster pathways = caching layers, learned shortcuts.
• Neuroplasticity = AgentDNA evolution + path-maturity reinforcement.

4. Nervous System — Peripheral (PNS) + Autonomic + Reflex

Biology

Peripheral nerves carry signals to and from the CNS. The autonomic branch runs the unconscious housekeeping (heart rate, digestion, pupils). Sympathetic = fight/flight; parasympathetic = rest/digest. Reflex arcs bypass the cortex entirely (touch a hot stove, hand jerks before you "know").

Functional role

Fast, distributed, unconscious regulation.

Conduir equivalent

• PNS = per-service NATS subjects, individual service handshakes (the ~85 catalogued seams).
• Sympathetic = kill switch, emergency rate limiting, circuit breakers tripping under load.
• Parasympathetic = baseline budget enforcer, off-hours batch consolidation, scheduled garbage collection.
• Reflex arc = circuit breakers, retry-with-backoff, immediate fail-closed on schema violation. No cortex involvement.

Why it must exist

Without autonomics, the brain has to consciously beat the heart. Same in software: without autonomic policy, every safety decision goes to HITL and the system stalls.

Harmony

• Reflexes act before CNS — they are the substrate's last-resort guarantees.
• Autonomic system is biased by endocrine (governance hormones tune the set-points).

Evolution

• More learned reflexes = more declarative policies that fire without cognition.
• Better autonomic balance = ratio of sympathetic (defensive) to parasympathetic (productive) tuned per tenant.

5. Cardiovascular System

Biology

The heart pumps blood. Arteries deliver oxygenated blood under high pressure. Veins return deoxygenated blood under low pressure. Capillaries are the exchange surface. Blood plasma carries everything dissolved; red cells carry O₂; white cells fight; platelets repair damage.

Functional role

Vital distribution — moves everything to where it is needed.

Conduir equivalent

• Heart = NATS broker. Stops beating → organism dies.
• Arteries = publish subjects (high-throughput, outbound, "pressurised").
• Veins = ack / commit / receipt subjects (lower throughput, return path).
• Capillaries = service-level subject subscriptions — the actual exchange surface.
• Plasma = the OutcomeEvent payload, the ActorContext header.
• Red blood cells (O₂ carriers) = trace IDs + telemetry-bearing events.
• White blood cells (immune surveillance) = AuthZ checks riding every hop.
• Platelets (clotting / repair) = circuit breakers, retry logic, dead-letter quarantine.

Why it must exist

Disconnected services are dead tissue. The event fabric is the cardiovascular system.

Harmony

• Cardiovascular touches every organ — same as the event fabric touches every container.
• Heart rate is set by endocrine (adrenaline) — backpressure signals modulate NATS throughput.
• Blood is filtered by liver (sanitisation) and kidneys (waste removal).

Evolution

• More capillary density = more granular subject routing.
• Better clotting = faster damage isolation under partial failure.
• Eventually: federated regional cardiovascular systems (multi-region NATS clusters) with controlled cross-region flow.

6. Respiratory System

Biology

Lungs exchange O₂ and CO₂ with the atmosphere. Breathing rate is autonomic but voluntarily over-rideable. Without O₂, brain death in 4 minutes.

Functional role

Continuous exchange with the external world for a vital but consumable resource.

Conduir equivalent

• Lungs = LLM Gateway. O₂ in = LLM inference tokens; CO₂ out = telemetry + emitted events + audit trail.
• Breathing rate = throughput throttling, rate limiting per provider, budget enforcement.
• Hyperventilation = retry storms, runaway loops. Detect and slow.
• Suffocation = LLM provider outage. Failover or degrade.

Why it must exist

LLMs are external; we breathe them. The gateway is non-optional unless we vertically integrate inference (NON-GOALS #1: we will not).

Harmony

• Respiratory feeds cardiovascular (oxygenated blood = ActorContext+OutcomeEvent enriched with model output).
• Respiratory is gated by immune (Vault, signed JWT to provider).
• Respiratory is metered by endocrine (budget hormone) and autonomic (rate-limit reflex).

Evolution

• Multi-provider failover = breathing through two lungs at different rates.
• Local model caching = oxygen reserves (Hb-like storage).
• Token-cost-aware routing = breath economy.

7. Digestive System

Biology

A 9-metre tube. Mouth chews and pre-digests. Stomach acidifies and churns. Small intestine absorbs nutrients (enzymes from pancreas, bile from liver/gallbladder). Large intestine reabsorbs water and houses microbiome. Anus eliminates.

Functional role

Convert raw external input into internally usable substrate.

Conduir equivalent

• Mouth (mechanical break-down) = mission intake form / API endpoint / MCP receive. Tokenisation of raw input.
• Saliva / amylase (chemical pre-process) = input validation, normalisation.
• Stomach (acid + churn) = schema enforcement, prompt-injection scrubbing, content-policy filters.
• Small intestine (absorption) = embedding, semantic parsing, RAG-readable representation.
• Pancreas / gallbladder (enzyme + bile) = preprocessing services, tokenizers, embedding generators.
• Microbiome = third-party plugins / MCP adapters — symbiotic foreign organisms that earn their keep.
• Large intestine (consolidation) = memory summarisation, context window management.
• Anus (elimination) = excretory system — see §9.

Why it must exist

Raw input is dangerous and unstructured. Digestion is what turns what the user said into what the system can act on.

Harmony

• Digestive feeds cardiovascular (absorbed nutrients = embeddings into memory store).
• Digestive is filtered by liver (post-absorption sanitisation).
• Digestive sends waste to excretory (eliminate the unusable; never re-circulate).

Evolution

• Multimodal ingestion = adding new "mouths" (vision, audio, structured-data ingest).
• Faster digestion = pre-warmed embedding models.
• Healthier microbiome = MCP adapter ecosystem with health checks.

8. Hepatic — The Liver (the user's first critical call-out)

Biology

The liver has 500+ functions. The headline ones:

• Detoxification of alcohol, drugs, ammonia, ingested toxins
• Protein synthesis (albumin, clotting factors, transport proteins)
• Glycogen storage (energy reserve, released on demand)
• Bile production (digestion enabler)
• Drug metabolism (Phase I + II enzymes — every pill we swallow is processed here)
• Cholesterol regulation
• Hormone clearance (used hormones broken down)
• Storage of vitamins (A, D, B12) and minerals (iron, copper)

The liver is the only organ that regenerates from partial damage (up to 75%).

Functional role

The body's central manufacturing, sanitisation, storage, and clearance hub. Everything that crosses from gut to bloodstream passes through it first — it is the gate.

Conduir equivalent — and this is where Conduir is weakest

The liver maps to at least four distinct functions, currently scattered across the platform with no unified ownership:

Why it must exist (the user is right to push)

A platform without a liver:

• accepts toxic input directly into memory (no detox)
• ships outputs without cleaning (PII leak)
• recomputes the same expensive embedding every time (no glycogen)
• has no central place to manufacture reusable blocks (no protein synthesis)
• accumulates expired governance state (no hormone clearance)

Recommendation: name an explicit Hepatic Service — or, equivalently, recognise that the platform has four orphan functions (detox, normalisation, cache, codegen-factory) that share a logical owner. Today they are scattered. That is engineering debt.

Regeneration

The liver's regenerative property maps to: the platform's substrate can be partially rebuilt from canonical event evidence (replay). As long as the audit chain + OutcomeEvent stream are intact, much of the rest is recoverable — provided we preserve the replay tape (see Lymphatic, §14).

Harmony

• Liver receives from digestive (everything absorbed goes through it first).
• Liver feeds cardiovascular (clean blood out to body).
• Liver is regulated by endocrine (insulin / glucagon ↔ caching policy + budgets).
• Liver coordinates with excretory (urea, bilirubin sent to kidneys / gut for elimination).

Evolution

• Promote the four orphan functions to a named subsystem with an owner (the Substance Service or Sanitisation + Cache + Normalise + Factory domain).
• Add a regenerative replay path: rebuild a degraded component's state from canonical event evidence within bounded time.
• Treat cache as a first-class organ, not as a Redis afterthought.

9. Excretory / Urinary System (the user's second critical call-out)

Biology

• Kidneys filter ~150 L of blood per day. They remove urea, excess salts, excess water, and metabolic waste. They regulate pH, blood pressure (via renin), and erythropoiesis (EPO).
• Bladder stores filtered waste temporarily.
• Urethra eliminates.
• Sweat glands and breath are accessory excretion routes (water, salts, CO₂, alcohol vapour).
• Feces is digestive waste, slightly different mechanism.

Excretion is not optional. Renal failure is fatal in days.

Functional role

Remove what should not be retained. Maintain composition (pH, salts, water balance) inside fixed homeostatic ranges. Distinct from digestion: digestion is "what is consumable", excretion is "what must leave".

Conduir equivalent — currently diffuse and unowned

Why it must exist (the user is right to be critical)

A platform without excretion:

• accumulates audit logs until disk fills
• never honours GDPR Article 17 (legal exposure)
• holds expired tokens forever (security exposure)
• never decides which data is cold vs. hot
• has no way to maintain composition under continuous load

The forget cascade for CAP-7 (user-twin erasure) is literally renal excretion. Today it is partial. That is a renal failure in slow motion.

The composition principle

The body holds blood pH between 7.35 and 7.45 — 0.10 units of variation. Beyond that, death. The kidneys spend significant ATP defending that range.

Conduir's equivalent: composition invariants on substrate state:

• Audit-log immutability (within retention; legal-hold tolerant)
• Trace coverage near 100% (no silent drop)
• Per-tenant disk + token + memory budget held under cap
• Stale data deleted on schedule, not "when someone notices"

A platform without explicit composition-defence is one bad week of growth away from a P0.

Harmony

• Kidneys receive from cardiovascular (blood arrives via renal artery).
• Kidneys coordinate with endocrine (aldosterone, ADH, EPO).
• Kidneys coordinate with liver (urea is a liver-produced waste).
• Kidneys send waste through bladder → urethra (storage + scheduled elimination).

Evolution

• Promote the orphan functions to a named Data Lifecycle Engine with retention classes by tenant + data type.
• Add composition dashboards with per-tenant alerts when retention or quota approaches limits.
• Make the forget cascade observable, testable, and audited (proof of deletion).

10. Endocrine System

Biology

Slow, broad chemical signalling via the bloodstream. Master gland: pituitary, which talks to thyroid, adrenals, gonads. Specialist glands: thyroid (metabolism), adrenals (cortisol, adrenaline), pancreas (insulin / glucagon), gonads (sex hormones). Pineal sets circadian rhythm.

Functional role

Slow, broadcast modulation. Adjusts set-points across all systems simultaneously. Hormone concentration follows decay curves.

Conduir equivalent

• Pituitary (master) = GovernanceState. Direction + current + tiers + budgets. The signal that biases every system.
• Thyroid (metabolism) = exploration budget + mission throughput targets.
• Adrenals (cortisol / adrenaline) = kill switch + emergency rate limit + circuit-breaker tightening.
• Pancreas (insulin / glucagon) = budget enforcer (insulin lowers token spend; glucagon releases reserve under low-traffic).
• Gonads (long-term reproductive hormones) = strategic direction (org board sets year-over-year posture).
• Pineal (circadian) = scheduled maintenance windows, off-hours batch jobs.

Why it must exist

Endocrine is what lets the body change its "mode" without rewiring its nerves. Conduir needs it for the same reason: tier-forbidden floor + tier policies let the platform shift posture (defensive ↔ exploratory) without code changes.

Harmony

• Endocrine modulates every other system. So does Governance.
• The critique that "endocrine has feedback loops, governance has policy gates" stands: real endocrine has decay curves; Conduir's governance is mostly binary/scalar. Evolution opportunity: introduce graded policy values with decay.

Evolution

• Decay-curve governance values (current rules expire over time unless re-asserted)
• Per-tenant hormonal posture (some tenants more sympathetic, some more parasympathetic)
• Feedback-loop tuning (regression_watcher modulates exploration budget)

11. Immune System

Biology

Innate immunity: hard-coded, fast, no memory (skin, macrophages, complement).
Adaptive immunity: learned, specific, with memory (T cells, B cells, antibodies).
Memory cells retain attack signatures for decades.
Autoimmunity = false-positive: immune attacks self.
Inflammation = controlled escalation; chronic inflammation = damage.

Functional role

Self vs. non-self. Defence against everything inside that should not be inside.

Conduir equivalent

• Innate = WAF, schema validation, fail-closed on missing actor, signed-JWT requirement. No learning needed.
• Adaptive = anomaly detection (Nous), learned rate limits, fingerprinted attack patterns.
• T cells (cell-mediated) = per-actor AuthZ checks at every hop.
• B cells / antibodies = JWT, PrivacyScope tokens, signed ActorContext.
• Memory cells = known-attack signatures, hash-blocklisted prompt-injection patterns.
• Blood-brain barrier (immune-privileged) = Zone-4 (governance/audit/secrets) — even immune mediators cannot freely cross.
• Autoimmunity = over-aggressive rate limiting blocking legitimate users (the false-positive ratio in METRICS-BASELINE.md).
• Inflammation = alert escalation (P0/P1/P2).

Why it must exist

Multi-tenant is the multi-organism problem. Self vs. non-self is the whole game.

Harmony

• Immune is distributed across every zone (defense-in-depth) — it is not a single layer.
• Immune is calibrated by endocrine (governance sets the tier-forbidden floor).
• Immune draws on lymphatic (slow surveillance feed).

Evolution

• More adaptive learning (anomaly-detection precision > 80%, false-positive curve flattens)
• Cross-tenant attack-signature sharing via federation with consent — herd immunity, not tenant leak
• Better autoimmunity dampening: legitimate-user-block rate as a tracked KPI

12. Integumentary (Skin + Hair + Nails)

Biology

Largest organ. Boundary. Senses (touch, pressure, temp, pain). Thermoregulation. Vitamin D synthesis. Cosmetic / sexual signalling.

Functional role

The perimeter. Where outside meets inside. Multi-purpose: barrier + sensor + thermostat + signal.

Conduir equivalent

• Epidermis (outer barrier) = DMZ / BFF + WAF + TLS termination
• Dermis (sensors) = perception channels: Mission UI, MCP intake, log scanning
• Sweat glands (thermoregulation) = load shedding, retry-after under pressure
• Hair (insulation, sensation, mostly vestigial) = branding, cosmetic UI, sensors for "ambient" non-critical events
• Nails (protection of fingertip = high-touch surface) = hardened admin UI, break-glass procedures
• Vitamin D synthesis (transduces sunlight to a usable molecule) = converting external signals (e.g. SOC 2 audit feedback) into internal policy adjustments

Why it must exist

A platform without a perimeter is a fileserver on the open internet.

Harmony

• Skin is the first layer the immune system depends on.
• Skin transduces for the nervous system (sensors).
• Skin thermoregulates with autonomic (sweat, shiver).

Evolution

• Richer sensors = multimodal intake (vision, audio, structured data)
• Better thermoregulation = sophisticated backpressure / load shedding
• Tan / callus = adaptive hardening of high-traffic endpoints

13. Reproductive System

Biology

The system the body uses to make another body. Includes genetic recombination, gamete formation, selection (fertilisation, embryonic viability), and gestation.

Functional role

Propagation across generations. Genes mutate, recombine, get selected against an environment. The species improves over time without any individual organism deciding to.

Conduir equivalent — and this is where Conduir's promise becomes real

Why it must exist (the strategic point)

This is the whole product story. "Conduir is a self-evolving framework" only means something if reproduction works. Today it does not: CAP-5 is dead-wire (apply is status-flip, not actuation); CAP-6 is contract-only (no production caller).

If reproduction never closes, Conduir is just another stateful orchestrator. The moat (governance + memory + self-evolution) collapses to (governance + memory) — still useful, no longer differentiated. See CRITICAL-REVIEW.md §8.

The Tier-Forbidden floor as germline/somatic boundary

In biology, germline mutations pass to descendants; somatic mutations affect only the individual. Conduir's analogue:

• Somatic = bounded self-improvement: the platform changes its routing weights, its preferred paths, its in-tenant behaviour — and these changes are reversible.
• Germline = governance / audit / identity — these never mutate via AI. This is the Tier-Forbidden floor. Mutating the germline is the precise definition of an unsafe AI: descendants inherit changed governance without consent.

Harmony

• Reproduction depends on memory (DNA = AgentDNA + DecisionMemory).
• Reproduction is gated by endocrine (exploration budget = hormones of fertility).
• Reproduction is protected by immune (no foreign agent injects code).
• Reproduction is observed by autonomic (regression_watcher = miscarriage detector).

Evolution

• Close the reproductive loop end-to-end (CAP-5 alive + CAP-6 live + side-lane graduation real).
• Add lineage tracing: every routing weight should answer "which experiment + which evidence produced you?"
• Add mutation rate by tenant: conservative tenants get lower exploration budgets.

14. Lymphatic System

Biology

A second circulatory system, but slower. Drains interstitial fluid (collected leakage from cardiovascular capillaries) back to the heart. Houses lymph nodes (where adaptive immunity meets antigens). Absorbs dietary fats from the small intestine (lacteals). Has no central pump — moves via muscle contraction and breathing.

Functional role

Slow, secondary, surveillance-oriented. The body's slow integration backbone. Often invisible until inflamed.

Conduir equivalent

Why it must exist (often missed)

Real-time event-bus surveillance (nervous + cardiovascular) catches acute problems. Chronic, slow-developing drift — a tenant slowly drifting toward over-budget, a memory store quietly fragmenting, a routing weight drifting wrong — escapes real-time. Lymphatic-style slow surveillance is what catches it.

This is one of the most under-named systems in Conduir today. A named slow-integration / drift-detection service does not exist.

Harmony

• Lymphatic drains what cardiovascular missed.
• Lymphatic feeds immune with the slow-cooked antigen library.
• Lymphatic is moved by muscle (breathing, walking) — analogue: lymphatic in software is moved by scheduled jobs, not events.

Evolution

• Name a drift-detection service with weekly / monthly windows
• Promote the audit-log roll-up to a first-class consumer (today it's ad-hoc)
• Add lymph-node-equivalent batch immune jobs: rare-pattern attack detection, slow-tenancy anomaly

15. Sensory Organs

Biology

• Eyes — high-bandwidth, spatial, peripheral + foveal
• Ears — temporal, also balance (vestibular)
• Nose / Tongue — chemoreception, taste, smell
• Skin — touch, pressure, temperature, pain (covered in §12)
• Proprioception — where your limbs are in space, without looking

Functional role

Different modalities of perception. Each one is narrow; together they form a model of reality.

Conduir equivalent

Why it must exist

A platform that does not know where its own components are is staggering blind. Today Conduir's proprioception is severely deficient — the Living Blueprint (CAP-8) is deferred to Phase 3 / Post-M8. This is a gap.

Harmony

• Senses feed the CNS (cognition).
• Senses are protected by the immune (sensor inputs validated, not trusted).
• Sense organs share the skin as housing (Zone 1 / BFF).

Evolution

• Add multimodal vision (image, screenshot, video)
• Add audio (voice in / out)
• Build proprioception — close CAP-8 so the platform has a self-model

16. The Honest Vestigial / Cosmetic Layer

The user said: be critical, every body part should map. Honest accounting of the rest:

The rule. Some things in the body are vestigial. Some things in software become vestigial. Honest engineering admits which is which and either prunes them or accepts them as harmless. The dishonest version is to pretend everything is load-bearing.

17. Interactions — The System-of-Systems Matrix

The user asked: how do they fit, how do they talk, how do they exist in harmony. This matrix is the answer. Each cell is a real interaction.

                Skel  Musc  CNS   PNS/Aut CardV Resp  Dig   Liver Excre Endo  Imm   Skin  Repr  Lymph Sens
Skeletal       [ -- ]  ⊕    -      -       -     -     -     -     -     -     -     ⊕    -      -    -
Muscular        ⊕   [ -- ]  ⊕      ⊕       ⊕     -     -     ⊕     -     ⊕    -     -     -      -    -
CNS             -    ⊕   [ -- ]   ⊕       ⊕     -     -     -     -     ⊕    ⊕    ⊕    ⊕     ⊕    ⊕
PNS/Auto        -    ⊕    ⊕    [ -- ]    ⊕     ⊕     ⊕     ⊕     ⊕     ⊕    -     ⊕    -      -    ⊕
Cardiovasc      ⊕    ⊕    ⊕      ⊕    [ -- ]   ⊕     ⊕     ⊕     ⊕     ⊕    ⊕     ⊕    ⊕     ⊕    -
Respiratory     -    -    -      ⊕      ⊕    [ -- ]   -     -     ⊕     ⊕    -     -    -      -    -
Digestive       -    -    -      ⊕      ⊕     -    [ -- ]   ⊕     ⊕     ⊕    ⊕     -    -      ⊕    -
Liver           -    ⊕    -      ⊕      ⊕     -     ⊕   [ -- ]   ⊕     ⊕    ⊕     -    -      -    -
Excretory       -    -    -      ⊕      ⊕     -     -     ⊕   [ -- ]    ⊕    -     ⊕    -      -    -
Endocrine       ⊕    ⊕    ⊕      ⊕      ⊕     ⊕     ⊕     ⊕     ⊕   [ -- ]   ⊕    ⊕    ⊕     ⊕    -
Immune          -    -    ⊕      -      ⊕     -     ⊕     ⊕     -      ⊕  [ -- ]   ⊕    -      ⊕    -
Skin            ⊕    -    ⊕      ⊕      ⊕     -     -     -     ⊕      ⊕    ⊕   [ -- ]  -      -    ⊕
Reproductive    -    -    ⊕      -      ⊕     -     -     -     -      ⊕    -     -  [ -- ]    -    -
Lymphatic       -    -    ⊕      -      ⊕     -     ⊕     -     -      ⊕    ⊕     -    -    [ -- ]  -
Sensory         -    -    ⊕      ⊕      -     -     -     -     -      -    -     ⊕    -      -  [ -- ]

Highest-degree nodes (organs that talk to the most others):
1. Cardiovascular / Event Fabric — 12 connections. The most connected system. Outage here is fatal.
2. Endocrine / Governance — 13 connections. Modulates everything.
3. CNS / Cognition — 10 connections.
4. PNS+Autonomic / Reflexes — 11 connections.

Lowest-degree nodes (often missed):

• Reproductive / Self-Evolution — only 4 strong connections. This is why it's easy to skip. But its absence makes the platform a CRUD app.
• Lymphatic / Slow Surveillance — only 5. Same risk.

Harmony rule. The body is healthy when every system is adequately resourced and well-coordinated. Conduir is healthy when:

• Every layer has a named owner
• Every cross-system interaction has a contract
• Every slow-burn risk has a slow-burn surveillance system watching for it
• No system is "implicit" — implicit organs starve

18. Homeostasis — what "healthy AI" looks like

A healthy human maintains:

• Body temp 36.5–37.5 °C
• Blood pH 7.35–7.45
• Blood glucose 70–110 mg/dL
• Heart rate 60–100 bpm at rest
• Respiration 12–20 / min

The body spends ATP defending these ranges. Composition matters more than throughput.

The Conduir equivalent — a vitality dashboard with bounded ranges, defended by the autonomic + endocrine systems:

A platform with all green vitals is alive. A platform missing the means to measure one of these is blind to a possible failure.

19. Prospective Evolution — what comes next

In the same way mammalian bodies evolved new organs over 200 million years (placenta, neocortex, sweat glands), Conduir-the-organism has clear next organs to grow. The substrate is the genome; evolution is incremental.

Near-term (next 12 months)

1. Liver consolidation — promote the four orphan functions (detox, normalisation, cache, codegen-factory) into a named subsystem with an owner. Today's "diffuse liver" is the largest unowned risk.
2. Excretory engine — explicit Data Lifecycle Engine with retention classes, forget-cascade proof, composition-defence alarms. Without this, the platform develops kidney disease as it scales.
3. Reproductive close-out — close CAP-5 (apply applies, rollback rolls back) and CAP-6 (production caller + consumer). Without this, the "self-evolving" promise stays marketing.
4. Lymphatic naming — explicit slow-surveillance service for chronic drift detection.

Mid-term (12–24 months)

5. Proprioception — close CAP-8 Living Blueprint so the platform has a self-model.
6. Multimodal senses — vision, audio, structured-data ingest. Today's perception is text-only.
7. Hormonal decay — replace binary/scalar governance with graded values that decay; current rules expire unless re-asserted.
8. Lineage tracing — every routing weight, every cached embedding, every twin attribute traceable back to source evidence.

Long-term (3–5 years)

9. Multi-region federation with regional cardiovascular systems and consent-gated cross-region flow (regional bodies, controlled hand-shake).
10. Cross-tenant immune memory — herd-immunity via federated attack-signature sharing with consent. Today, every tenant catches every infection alone.
11. Reproductive germline editing tools — operator-driven evolution of agent populations, not just self-evolution loops.
12. Tenant-specific homeostasis — every customer gets their own set-points (conservative ↔ exploratory ↔ adaptive).

Earlier dismissals — now reversed

The first draft of this doc listed three things as "probably never making sense in AI": sexual reproduction, mortality in the obligatory sense, and pain-qua-suffering. Two of those three were wrong dismissals. See AI-EVOLUTION-MORALITY-MORTALITY.md for the full reversal:

• Sexual reproduction between AI instances is worth designing — not as biological mimicry but as the long-term species-evolution mechanism. With cryptographic provenance + anonymisation + shared constitutional ancestor + bounded somatic recombination, two-parent AI reproduction can generate variation that asexual self-evolution alone cannot produce. Asexual reproduction (CAP-5) has a hard ceiling; sexual reproduction is the path past it.
• Mortality is far more than decommissioning. At five scales — agent, mission-team, tenant-relationship, instance, species (per AI-EVOLUTION-MORALITY-MORTALITY.md §3.2) — mortality creates urgency, forces inheritance discipline, enables graceful sunset, and is the engine of generational progress. Acknowledging it is humility, not weakness. (The earlier "three scales" framing — agent / instance / species — was widened in v2 to add mission-team and tenant-relationship as operational scales the original list missed.)
• Pain qua suffering — this one stands as dismissal. Pain signals are useful (regression_watcher); the qualia of suffering is anthropomorphism without engineering benefit. Morality (which I also dismissed) is a separate question — that is engineerable and is treated in AI-EVOLUTION-MORALITY-MORTALITY.md Part 2.

Things that genuinely do not map (refined list)

• Pain qua suffering (phenomenal experience of suffering — anthropomorphism)
• Hunger qua craving (resource scarcity is a metric, not a feeling)
• Sleep qua unconsciousness (we have maintenance windows, not consciousness loss)
• Aesthetic taste qua subjective experience (preferences are modelled; "experiencing beauty" is not)

20. The Honest Bottom Line

The four bolded systems — Liver, Excretory, Reproductive, Lymphatic — are the under-named, under-owned, under-funded organs of this organism. They are exactly the systems the original anatomy doc skipped or hand-waved. They are also exactly where the platform will quietly fail at scale.

If we name them, own them, and fund them, Conduir becomes a complete organism. If we don't, it becomes a torso with strong cognition, alive enough to demo, fragile enough to fail in production.

21. Cross-Reference

• Architectural counterpart: 00-CONDUIR-MASTER-ARCHITECTURE.md (the engineering view of these same organs)
• Full anatomical specification: ANATOMICAL-SYSTEM-SPEC.md (every organ with boundary / role / responsibilities / contracts; mission walkthrough; instance lifecycle)
• Evolution, morality, mortality: AI-EVOLUTION-MORALITY-MORTALITY.md (sexual reproduction in AI; the Conscience Service; five-scale mortality — agent · mission-team · tenant-relationship · instance · species; Speciation; Mitochondrial Path; Substrate Migration)
• Stakeholder anatomy view: ARCHITECTURE.md (ARCHITECTURE.md) (the original 10-plane mapping, now superseded as the canonical anatomy by this doc)
• Capability inventory: CAPABILITIES.md (CAPABILITIES.md) (CAP-1..CAP-13)
• Substrate sequencing: SUBSTRATE-SEQUENCING.md (SUBSTRATE-SEQUENCING.md)
• Critical review: CRITICAL-REVIEW.md (CRITICAL-REVIEW.md) — caveats on the metaphor itself

Maintenance. When a Conduir organ gets a named owner or moves status (e.g. liver consolidates into a Substance Service; excretory gets a Data Lifecycle Engine), update §0 and the relevant per-system section. Quarterly review at minimum.

Authority. When this doc disagrees with 00-CONDUIR-MASTER-ARCHITECTURE.md on fact, the architecture wins. When they disagree on vision and prospective evolution, this doc wins — that is what it exists for.