> For the complete documentation index, see [llms.txt](https://docs.therisk.global/organization/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.therisk.global/organization/cooperation/nexus-guilds/future-of-web/xvi.-operating-protocol.md).

# XVI. Operating Protocol

Mission-Locked Alignment, Legal Separation, and Canada–US Governance Discipline

{% hint style="warning" %}
**Draft instrument.** The clauses, fees, credits and effective dates on this page are drafts: no adoption record exists, and nothing here is in force. Ordinary participation has no fee ([NWG](/organization/governance-in-operation/nwg.md)).
{% endhint %}

**Where this fits:** all six sectors ([The Model](/organization/model.md)) · [Labs](/organization/programme/labs.md), [Risk Academy](/organization/programme/academy.md) · communities of practice by sector, supplying the questions of the Labs pillar; National Working Groups ([NWG](/organization/governance-in-operation/nwg.md)) · community of practice.

**In brief.** Mission-Locked Alignment, Legal Separation, and Canada–US Governance Discipline Read against the international frameworks it serves ([UN General Assembly 2015](https://www.undrr.org/publication/sendai-framework-disaster-risk-reduction-2015-2030); [FAO 2014](https://www.fao.org/4/bl496e/bl496e.pdf); [One Health High-Level Expert Panel (OHHLEP) et al. 2022](https://doi.org/10.1371/journal.ppat.1010537)) and the [Nexus Standards](/organization/institutions/nexus-standards.md) that govern its records ([NS-0](https://nexustandards.com/standards/ns-0/), [NS-13](https://nexustandards.com/standards/ns-13/)). "An experiment is exploratory: its results are labelled as such and become evidence only after the Foundry rebuilds and the Universe tests them." (Labs pillar boundary). Ordinary participation has no fee. Paid work, internships and fellowships are separate arrangements, and unqualified contributors never take safety-critical tasks.

{% hint style="info" %}
**Read with the current model (2026-10-21).**

* Everything this page describes is a design in formation. No national, regional or global consortium is recorded as constituted or active; the current service level is R0, information and enquiries ([Status and service levels](/organization/governance-in-operation/status-and-service-levels.md)). Where the text below reads as operation, read it as design.
* Recognition, scoring and validation record what was shown under stated conditions. None is a certification, licence, rating or approval, and no country or institution is ranked.
  {% endhint %}

### Part 16 — Dual-Entity Operating Protocol

#### 1. Mission-Locked Alignment and Legal Separation

1.1 **Two entities; one mission; separate liabilities.** The Guild is sponsored and supported by two aligned, legally separate nonprofit entities: **GCRI Canada** and **GCRI US**. Each entity:\
1.1.1 maintains its own governance, accounts, contracts, liabilities, records, and compliance posture;\
1.1.2 may collaborate on shared public-good objectives under written protocols; and\
1.1.3 shall not represent the other as agent, affiliate, or substitute unless explicitly authorized by a signed instrument recorded under this Charter.

1.2 **No implied agency.** Nothing in Guild participation, platform use, publications, or branding creates:\
1.2.1 partnership, joint venture, or agency;\
1.2.2 authority to bind the other entity; or\
1.2.3 shared liability for acts, omissions, contracts, or representations.

1.3 **Scope election by record.** Each major workstream, release, dataset, benchmark, or public statement shall declare by record:\
1.3.1 the issuing entity (Canada or US);\
1.3.2 the applicable jurisdictional scope;\
1.3.3 any cross-entity collaboration posture; and\
1.3.4 the reliance bounds and handling class.

1.4 **Non-executing invariant preserved.** Both entities remain strictly within a governance, R\&D, measurement, and evidence tooling perimeter. Nothing in cross-entity cooperation permits regulated execution, operational dispatch, enforcement, or certification.

***

#### 2. Contracting Authority and Financial Flows Boundary

2.1 **Who contracts.** A contract is valid only if executed by the entity that:\
2.1.1 is named as contracting party;\
2.1.2 has board-authorized signing authority; and\
2.1.3 records the contract class and reference in the records system.

2.2 **No pass-through obligations by default.** Neither entity assumes, guarantees, or backstops obligations of the other unless:\
2.2.1 expressly stated in a signed agreement; and\
2.2.2 recorded as a designated act with clear scope and limits.

2.3 **Revenue segregation.** The entities shall maintain clean separation of:\
2.3.1 platform revenues and enterprise agreements;\
2.3.2 grants and restricted funding;\
2.3.3 sponsorship and in-kind contributions; and\
2.3.4 cost allocations and reimbursements.

2.4 **Cost sharing discipline.** Cross-entity cost sharing, secondments, or reimbursements require:\
2.4.1 a written inter-entity agreement;\
2.4.2 fair allocation logic (documented);\
2.4.3 conflicts review where applicable; and\
2.4.4 record entry sufficient for audit-grade traceability.

2.5 **No commingling.** Funds shall not be commingled. Shared services may exist only under explicit billing and separation controls.

***

#### 3. Data Hosting, Sovereignty, and Cross-Border Posture

3.1 **Default: minimize cross-border movement.** The Guild’s doctrine favors:\
3.1.1 data minimization;\
3.1.2 locality-aware processing; and\
3.1.3 separation of identity data from technical observatory data.

3.2 **Hosting election.** Each dataset, benchmark corpus, tenant deployment, or archive shall declare:\
3.2.1 where it is hosted;\
3.2.2 who controls access;\
3.2.3 the lawful basis for processing; and\
3.2.4 retention and deletion posture.

3.3 **Tenant and partner data.** Enterprise tenant data is governed by:\
3.3.1 tenant isolation requirements;\
3.3.2 least-privilege access;\
3.3.3 auditable access logs;\
3.3.4 explicit role-based handling classes; and\
3.3.5 contractual use limitations.

3.4 **Cross-border constraints.** Any cross-border transfer or shared processing must:\
3.4.1 identify the applicable legal regime(s);\
3.4.2 state the transfer mechanism (where required);\
3.4.3 apply minimization and redaction by default; and\
3.4.4 preserve contestability and correctionability.

3.5 **Identity protection.** Where identity data exists (e.g., membership, COI, reviewer rosters), it shall:\
3.5.1 be held in separate systems from observatory outputs where feasible;\
3.5.2 be access-logged with a two-person integrity rule for sensitive unmasking; and\
3.5.3 be disclosed only where lawful, necessary, and recorded.

***

#### 4. Staffing, Appointments, and Governance Roles

4.1 **Employment line clarity.** Staff, contractors, and volunteers must be assigned to one entity at a time for:\
4.1.1 payroll;\
4.1.2 supervision;\
4.1.3 workplace compliance; and\
4.1.4 liability and insurance coverage.

4.2 **Role designation by record.** Key Guild roles (Chair, Vice Chair, Integrity Steward, Maintainers, Reviewers) shall have:\
4.2.1 a written mandate;\
4.2.2 handling class access boundaries;\
4.2.3 conflict-of-interest requirements; and\
4.2.4 appointment and removal recorded.

4.3 **Secondments and shared service roles.** Any cross-entity staffing arrangement requires:\
4.3.1 a written secondment or services agreement;\
4.3.2 clear reporting lines;\
4.3.3 confidentiality and handling commitments; and\
4.3.4 a record entry noting scope and duration.

4.4 **No implied authority in public representation.** Titles and role markers shall not be used to imply regulatory authority, certification power, or operational execution capability.

***

#### 5. IP, Licensing, and Publication Authority

5.1 **Open-first posture.** Unless designated Controlled/Restricted by safety and handling rules, Guild outputs are intended to be:\
5.1.1 open-source (code);\
5.1.2 open documentation and education; and\
5.1.3 public methods disclosure consistent with do-no-harm constraints.

5.2 **Inbound contribution hygiene.** Contributions require:\
5.2.1 contributor attestations (authorship, licensing rights);\
5.2.2 license compatibility checks;\
5.2.3 provenance records; and\
5.2.4 rejection of contributions with ambiguous ownership or unsafe disclosure.

5.3 **Publication authority.** Only authorized issuers may publish as Guild outputs. Each publication must specify:\
5.3.1 issuing entity (Canada or US);\
5.3.2 quality marking (if any);\
5.3.3 handling class;\
5.3.4 reliance bounds; and\
5.3.5 correction path and supersession pointer.

5.4 **Quality marks are not certification.** “Guild-Reviewed,” “Lab-Validated,” “Benchmark-Ready,” or “Enterprise-Deployable” are internal quality markings, not certification, endorsement, or compliance determinations.

5.5 **Trademark and brand discipline.** Use of names, marks, and platform references must:\
5.5.1 follow communications integrity rules;\
5.5.2 prohibit misleading “approved by” claims; and\
5.5.3 provide screenshot-resistant disclaimers where feasible.

***

#### 6. Cross-Entity Dispute Handling and Non-Agency Enforcement

6.1 **Dispute types.** Cross-entity disputes may include:\
6.1.1 attribution disputes;\
6.1.2 scope and perimeter disputes;\
6.1.3 data handling disputes; and\
6.1.4 publication authority disputes.

6.2 **Resolution method.** Disputes shall be addressed through:\
6.2.1 recorded issue statements;\
6.2.2 integrity steward triage;\
6.2.3 a time-bounded resolution attempt; and\
6.2.4 correction/supersession entries if needed.

6.3 **Non-agency enforcement.** If one entity identifies misrepresentation or perimeter breach by the other’s affiliates or participants, it may:\
6.3.1 issue a correction notice;\
6.3.2 suspend use of marks within its control; and\
6.3.3 restrict access to its systems—without asserting authority to bind the other entity.

***

#### 7. Communications Integrity and Separation Language

7.1 **Mandatory separation statement.** Public materials must preserve clarity that:\
7.1.1 GCRI Canada and GCRI US are separate legal entities;\
7.1.2 neither acts as agent for the other; and\
7.1.3 outputs carry explicit issuer identification.

7.2 **Cross-entity co-branding rules.** Joint publications are permitted only if:\
7.2.1 each entity’s role is stated;\
7.2.2 liability and perimeter notices are included; and\
7.2.3 a single “issuer of record” is designated for recordkeeping and correction control.

7.3 **No escalation of reliance by marketing.** Communications shall not:\
7.3.1 imply certification;\
7.3.2 imply regulatory endorsement;\
7.3.3 claim operational security services; or\
7.3.4 suggest enforcement capability.

7.4 **Crisis communications posture.** Where public interest requires rapid correction, the Guild may publish:\
7.4.1 time-stamped bulletins with uncertainty bounds;\
7.4.2 handling class labels; and\
7.4.3 explicit “subject to correction” language.

## Sources

1. UN General Assembly (2015). Sendai Framework for Disaster Risk Reduction 2015–2030. A/RES/69/283, 3 June 2015. <https://www.undrr.org/publication/sendai-framework-disaster-risk-reduction-2015-2030>
2. FAO (2014). The Water-Energy-Food Nexus: A new approach in support of food security and sustainable agriculture. Rome: Food and Agriculture Organization of the United Nations. <https://www.fao.org/4/bl496e/bl496e.pdf>
3. One Health High-Level Expert Panel (OHHLEP), Adisasmito, W. B. et al. (2022). One Health: A new definition for a sustainable and healthy future. PLoS Pathogens 18(6): e1010537. doi:10.1371/journal.ppat.1010537. <https://doi.org/10.1371/journal.ppat.1010537>
4. Nexus Standards. NS-0: Constitution and principles. Status: PROPOSED; UNI `NXS-STD-ST-000004`. <https://nexustandards.com/standards/ns-0/>
5. Nexus Standards. NS-13: Open standards development process. Status: PROPOSED; UNI `NXS-STD-ST-000008`. <https://nexustandards.com/standards/ns-13/>
6. GCRI. The Labs pillar home. <https://therisk.global/nexus-labs/>
7. GCRI. Working groups (NWG). <https://therisk.global/consortium/national/nwg/>
8. This documentation: [Governance in operation](/organization/governance-in-operation.md); [The Model](/organization/model.md); [historical labels](/organization/reference.md).


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.therisk.global/organization/cooperation/nexus-guilds/future-of-web/xvi.-operating-protocol.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.