Crisis Mode Protocol
DCOS-P01-CRISIS
Governance under compression — how DCOS reconfigures when institutions face existential or severe disruption
▼
1. Purpose & Activation
The Crisis Mode Protocol defines how the entire DCOS architecture reconfigures itself when an institution faces existential or severe disruption. Crisis Mode is not an abandonment of governance — it is governance under compression: the same architectural principles are maintained, but mechanisms are reconfigured for speed, concentration, and survival priority.
Without this protocol, institutions default to one of two failure modes: governance paralysis (normal processes too slow for crisis velocity) or governance abandonment (suspending governance entirely, producing uncontrolled decisions and post-crisis institutional damage). The Crisis Mode Protocol eliminates both.
Governing Law: Law 6 — Resilience is Architecturally Determined. Crisis response cannot be improvised. It must be engineered.
2. Activation Criteria
Crisis Mode activation follows a formal, structured assessment process. No institution shall enter Crisis Mode based on subjective judgment alone.
Quantitative Triggers
| Trigger | Threshold | Source |
|---|---|---|
| Resilience Index Decline | RI < 0.40 or >30% decline in 30 days | Layer 11 |
| Decision Control Integrity | DCI Index < 0.50 across 2+ domains | Layer 6 |
| Identity Coherence Breach | 3+ simultaneous failures or 1 catastrophic mission invariant failure | Layer 1 |
| Resource Availability | < 60% minimum operating requirements in 2+ domains | Layer 8 |
| Stakeholder Confidence | Index drops below 40% of baseline | Layer 14 |
| Impact Deviation | > 50% deviation across 3+ strategic objectives | Layer 10 |
| Execution Sync Failure | Failure rate > 60% of active streams | Layer 7 |
External Signal Triggers
Regulatory / Legal
License revocation, sanctions, major litigation, regulatory intervention
Financial / Economic
Funding withdrawal >40% of budget, currency crisis, counterparty failure
Geopolitical
Armed conflict, diplomatic rupture, sanctions regime change
Reputational
Major scandal, systemic fraud discovery, whistleblower disclosure
Technological
Critical system failure, major cybersecurity breach, data loss event
Leadership
Incapacitation of head + successor, mass resignation of governing body
Activation Authority
| Authority | Power | Condition |
|---|---|---|
| Resilience Custodian | Unilateral declaration | 2+ quantitative triggers breached, or any single trigger >200% of threshold |
| Institutional Head | Unilateral declaration | At any time; governing body notification within 4 hours |
| Governing Body | Resolution | By majority vote; required for activation beyond 14 days |
| Automatic | System activation | RI < 0.25, or leadership succession triggered, or 3+ triggers breach simultaneously |
3. Layer Reconfiguration
All 14 DCOS layers reconfigure simultaneously upon Crisis Mode activation. Each layer operates in one of three modes: Escalated (expanded authority and intensity), Compressed (reduced scope, accelerated cycles), or Minimum Viable (documentation only).
| # | Layer | Mode | Crisis Behavior |
|---|---|---|---|
| 1 | Identity | Escalated | Mission invariants become hard decision gates. Zero-tolerance on value boundaries. Identity Custodian joins Crisis Authority permanently. Real-time coherence checks (<15 min). |
| 2 | Intent | Compressed | Intent hierarchy simplified to three tiers: Survival, Stability, Recovery. All other intents deferred. 24-48 hour intent cycles. |
| 3 | Decision Intelligence | Compressed | Binary classification: Crisis-Critical or Deferrable. Scenario testing compressed to 72-hour impact. Dedicated mitigation for action bias, groupthink, anchoring. |
| 4 | Decision Viability | Compressed | Three mandatory gates only: Enforceability, Legitimacy, Survivability. Assessment in <2 hours for critical decisions. |
| 5 | Behavioral Alignment | Compressed | Shifts from adoption optimization to compliance assurance. Three functions: communication discipline, compliance enforcement, morale monitoring. |
| 6 | Decision Control | Escalated | Continuous real-time monitoring. DCI recalculated every 6 hours. All functions maintained and intensified. CDL as primary control instrument. |
| 7 | Execution Sync | Escalated | Streams classified: Active, Paused, Terminated. Crisis sprint cycles (24-72h). Cross-functional sync every 12 hours. Dependencies re-mapped. |
| 8 | Resource Alignment | Escalated | Crisis Resource Envelope activated. Allocation follows Survival > Stability > Recovery. Daily resource triage. Non-crisis budgets frozen. |
| 9 | AI Governance | Compressed | Advisory-only mode. All AI delegation revoked. Human override absolute. Three rules: AI supports, AI flags, human decides. |
| 10 | Impact Governance | Compressed | Shifts to damage assessment + recovery tracking + decision outcome monitoring. Full IQP suspended, applied retroactively post-crisis. |
| 11 | Strategic Resilience | Escalated | Resilience Custodian assumes coordination authority. RI recalculated every 24 hours. Shock absorption mechanisms deploy. Strategic evolution suspended. |
| 12 | External Intelligence | Escalated | Continuous real-time monitoring. Situational updates every 6 hours to Crisis Authority. Cascade detection activated. Focus: threat evolution. |
| 13 | Institutional Learning | Minimum Viable | Single function: Crisis Documentation. Real-time Crisis Narrative Log. No analysis during crisis — document everything, analyze nothing. |
| 14 | Stakeholder Ecosystem | Compressed | Triage into Critical, Important, General. Priority engagement with crisis-determinative stakeholders. Conflict resolution: mediation only. |
4. Decision Authority Changes
Crisis Mode concentrates decision authority to reduce governance latency. Authority is expanded but not unlimited — identity constraints and value boundaries remain inviolable.
Inviolable Authority Boundaries
- B-01 No crisis decision shall violate a documented mission invariant. Identity Custodian has veto authority.
- B-02 No crisis decision shall cross a documented value boundary — no crisis justification overrides this.
- B-03 No crisis decision shall knowingly violate applicable law.
- B-04 No crisis decision shall knowingly endanger human life or safety beyond authorized levels.
- B-05 Crisis Mode shall not exceed 14 days without Governing Body reauthorization (max 90 days cumulative).
- B-06 Crisis Authority may not use crisis authority for decisions unrelated to the declared crisis.
5. Timeline Compression
Crisis Mode compresses all governance timelines. Speed is not haste — compressed timelines eliminate unnecessary process steps, not necessary governance steps.
| Governance Function | Normal Cycle | Crisis Mode | Ratio |
|---|---|---|---|
| Decision classification | 1-5 business days | < 30 minutes | 96:1 - 480:1 |
| Viability assessment | 5-15 business days | < 2 hours | 60:1 - 180:1 |
| Identity coherence check | 1-3 business days | < 15 minutes | 96:1 - 288:1 |
| Decision authorization | 3-10 business days | < 4 hours | 18:1 - 60:1 |
| Resource allocation | 5-20 business days | < 4 hours | 30:1 - 120:1 |
| Execution stream launch | 10-30 business days | < 24 hours | 10:1 - 30:1 |
| Impact assessment | 30-90 days | 48 hours | 15:1 - 45:1 |
| Resilience Index recalculation | Quarterly | Every 24 hours | 90:1 |
| Decision Control integrity | Weekly / Monthly | Every 6 hours | 28:1 - 120:1 |
Crisis Sprint Model
Sprint Duration
24-72 hours, determined by Crisis Authority based on crisis velocity
Sprint Planning
Crisis Authority + layer custodians at sprint start; under 1 hour
Sprint Goal
1-3 measurable objectives tied to Survival > Stability > Recovery
Sprint Execution
Continuous; synchronized via 12-hour coordination meetings
Sprint Review
End-of-sprint assessment: achieved, failed, changes for next; under 1 hour
Retrospective
Deferred to Post-Crisis Review. Document, do not analyze.
6. Exit Criteria
Crisis Mode exit follows a formal, structured de-escalation process. Premature exit risks governance relapse; delayed exit wastes resources and fatigues the institution.
| Exit Condition | Threshold |
|---|---|
| Resilience Index Recovery | RI ≥ 0.55, stable or improving for 72+ consecutive hours |
| Decision Control Restoration | DCI Index ≥ 0.65 across all domains |
| Trigger Resolution | All activating triggers below threshold for 48+ consecutive hours |
| Resource Sufficiency | Critical resources ≥ 75% of normal operating requirements |
| Execution Stability | ≥ 80% of active streams meeting sprint objectives for 2+ consecutive cycles |
| External Threat Stabilization | External intelligence: crisis condition stabilized with low recurrence probability |
Exit Procedure
-
Exit AssessmentResilience Custodian verifies all quantitative and qualitative conditions
-
Exit RecommendationCrisis Authority issues formal Exit Recommendation to Governing Body
-
72-Hour Transition PeriodAuthority gradually reverts, layers restore normal governance, CRE deactivated, monitoring at 50% crisis intensity
-
Exit DeclarationFormal Crisis Mode Exit Declaration issued. Post-Crisis Review initiated within 7 days.
-
Mandatory Post-Crisis ReviewCompleted within 30 days. Assesses detection, authority, decisions, communication, resources, resilience, and antifragility dividend.
7. Sector Crisis Profiles
Each sector faces distinct crisis types and requires specific adaptations of the Crisis Mode Protocol.
Culture Sector
Highest identity risk — external pressure seeks to reshape cultural mission. Artistic freedom is a mission invariant that cannot be compromised even during crisis. Cultural/Artistic Director mandatory on Crisis Advisory Council.
Key risk: Censorship & political interference
Heritage Sector
Decisions frequently irreversible — destroyed monuments cannot be rebuilt. Mandatory Irreversibility Assessment for all decisions affecting heritage assets. No crisis decision causing irreversible heritage loss without triple concurrence.
Key risk: Physical destruction of irreplaceable assets
Education Sector
Academic freedom is a mission invariant. Academic governance body retains concurrence authority even during Crisis Mode. Student welfare is paramount. Minimum Educational Service must be preserved.
Key risk: Accreditation loss & academic integrity
Technology Sector
Extreme velocity — crises escalate from minor to existential within hours. Rapid Activation within 15 minutes. Technical Incident Bridge runs parallel to governance structure. For AI crises: full human override until post-crisis root cause resolution.
Key risk: Cybersecurity breach & AI system failure
Government Sector
Constitutional constraints cannot be suspended. Crisis Authority shall not exceed constitutional emergency powers. Transparency to citizens and legislative oversight continues. CDL maintained to archival standards.
Key risk: Constitutional crisis & public trust collapse
Finance Sector
Operates under regulatory frameworks (Basel III, Solvency II). Automated Crisis Triggers for market-speed responses. Systemic risk assessment mandatory for all crisis decisions. CDL meets regulatory record-keeping standards.
Key risk: Liquidity crisis & systemic contagion
Innovation Mode Protocol
DCOS-PRT-INNO
Governance reconfigured for exploration — how DCOS enables structured experimentation while preserving institutional integrity
▼
1. Purpose & Activation
The Innovation Mode Protocol defines the formal operating conditions under which a DCOS-governed institution may deliberately relax selected decision governance controls to enable exploration, experimentation, and institutional innovation — while maintaining identity integrity, impact accountability, and systemic coherence.
Without this protocol, institutions face a binary failure: over-governance (innovation strangled by controls designed for operations) or under-governance (innovation outside the decision system entirely, with no accountability or learning). Innovation Mode provides the third operating state.
Governing Principle: Innovation Mode is not the absence of governance. It is governance reconfigured for exploration.
2. Activation Criteria
Innovation Mode requires all five general conditions to be met, plus at least one trigger category.
General Conditions (All Required)
-
AC-01: Innovation ThesisA formal strategic hypothesis that cannot be tested under standard DCOS governance
-
AC-02: Identity MaturityLayer 1 at minimum Maturity Level 2 (Structured) with documented invariants
-
AC-03: Control MaturityLayer 6 at minimum Maturity Level 2 (Structured) for formal relaxation and monitoring
-
AC-04: Governance AuthorityInnovation Governance Authority formally designated with sandbox approval powers
-
AC-05: Ring-Fenced ResourcesSufficient resources identified without compromising standard operations
Trigger Categories (At Least One)
Strategic Opportunity
New market, emerging technology, unserved need, novel partnership requiring exploratory decision-making
Disruption Response
Environment undergoing disruption that creates windows closing before standard governance can process them
Capability Development
New capabilities needed that cannot be developed through incremental improvement within existing operations
Mandate-Driven Innovation
Governing authority, regulation, or stakeholder ecosystem explicitly requires innovation
Institutional Renewal
Performance plateaued despite sound execution — paradigm limitation, not execution failure
Activation Authority by Horizon
| Horizon | Minimum Authority | Approval Required From |
|---|---|---|
| Horizon 1 (within current ops) | Department Head | Innovation Governance Authority (notification) |
| Horizon 2 (extending current ops) | Chief Executive | IGA (approval) + Board (notification) |
| Horizon 3 (creating new ops) | Governing Board | IGA (approval) + Identity Custodian (assessment) |
3. Layer Reconfiguration
Each layer defines three categories: Invariant Controls (never relaxed), Reconfigurable Controls (may be adjusted within limits), and Innovation-Specific Additions (new behaviors for innovation).
| # | Layer | Invariant | Reconfigurable | Innovation Additions |
|---|---|---|---|---|
| 1 | Identity | All mission invariants, value boundaries, legitimacy. No reconfigurable controls. | None | Innovation Identity Impact Assessment; Innovation Identity Watch List |
| 2 | Intent | Strategic-mission alignment, impact categories, documentation | Operational specificity relaxed; behavioral intent exploratory; intent stability relaxed | Innovation Thesis as anchor; hypothesis-driven structuring; intent pivoting protocols |
| 3 | Decision Intelligence | Bias control, classification, conflict of interest | Scenario scope reduced; evidence thresholds lowered; cycle time compressed | Experimentation Design Review; Learning Velocity Metric; Anti-Innovation Bias Check |
| 4 | Decision Viability | Legal, ethical, stakeholder safety compliance | Enforceability relaxed; survivability scoped to sandbox; financial thresholds lowered | Sandbox Viability Assessment; Option Value Assessment; Reversibility Analysis |
| 5 | Behavioral Alignment | Core culture values, inclusion standards, professional conduct | Compliance relaxed in sandbox; incentives modified; resistance as feedback | Innovation Culture Protocols; Cross-Pollination Requirements; Behavioral Experiment Tracking |
| 6 | Decision Control | Invariant monitoring, boundary enforcement, escalation, fail-safe reversion | Approval chains shortened; deviation thresholds recalibrated; audit intensity modulated | Sandbox Boundary Monitoring; Innovation Control Dashboard; Pivot/Persevere Control Points |
| 7 | Execution Sync | Dependencies with critical ops mapped; no disruption to standard operations | Internal timing self-governing; sequencing relaxed; lighter coordination | Sandbox Clock; Integration Synchronization Protocol; Time-Boxing Enforcement |
| 8 | Resource Alignment | Standard ops not compromised; budget ceiling enforced; tracking maintained | Justification simplified; reallocation flexibility increased; procurement expedited | Innovation Budget Ring-Fence; Portfolio Governance; Stage-Gate Funding; Failure Budget |
| 9 | AI Governance | Human-AI arbitration, accountability chains, bias monitoring, data governance | AI scope expanded in sandboxes; model experimentation permitted; interaction patterns experimental | AI Innovation Sandbox; AI-Assisted Innovation Intelligence; AI Governance Learning |
| 10 | Impact Governance | Measurement mandatory; attribution applied; data integrity; negative impact monitoring | Attribution precision relaxed; timelines extended; counterfactuals simplified | Learning Impact Metrics; Option Value Assessment; Innovation Funnel Metrics; Negative Knowledge Value |
| 11 | Strategic Resilience | Current resilience not compromised; no single points of failure; business continuity | Risk appetite expanded in sandboxes; adaptation speed increased; speculative scenarios permitted | Innovation as Resilience Investment; Disruption Simulation; Resilience Portfolio Balance |
| 12 | External Intelligence | Intelligence integrity, source validation, legal/ethical boundaries | Signal thresholds lowered; breadth over depth; reporting cadence increased | Innovation Radar; Analogous Innovation Mapping; Weak Signal Amplification |
| 13 | Institutional Learning | All activities generate learning; knowledge capture active; learning accessible | Documentation lighter-weight; validation timelines extended; classification simplified | Experiment Log; Innovation Knowledge Base; Cross-Sandbox Learning; Failure Taxonomy |
| 14 | Stakeholder Ecosystem | Stakeholder safety, regulatory obligations, transparency, conflict of interest | Consultation lighter-weight; reporting adjusted; consensus requirements reduced | Innovation Stakeholder Mapping; Co-Creation Protocols; Stakeholder Innovation Communication |
4. Innovation Sandbox
A formally bounded organizational, temporal, and resource environment within which innovation activities operate under reconfigured governance parameters. Three types of sandbox accommodate different scales of innovation.
Type A
Micro-Sandbox
Single experiment, small team (1-5 people), short duration (1-3 months), limited resources. Ideal for testing specific hypotheses rapidly.
Type B
Standard Sandbox
Multi-experiment program, cross-functional team (5-20 people), medium duration (3-12 months), dedicated budget. For developing and testing innovation programs.
Type C
Strategic Sandbox
Institutional-level initiative, dedicated unit (10-50+ people), long duration (6-24 months), significant resources. For transformative, paradigm-shifting innovation.
Sandbox Boundary Dimensions
Scope
What decisions, activities, processes, and outputs are within vs. outside the sandbox
Duration
Start date, max duration (12 months H2, 24 months H3), review cadence, hard termination date
Resources
Total budget ceiling, personnel, technology, external services — ring-fenced and tracked separately
Authority
Who holds Experimentation Authority, what they can decide, what requires escalation
Impact Perimeter
Affected stakeholders, systems, operations. Maximum acceptable negative impact. Monitoring in place.
5. Risk Boundaries — The Inviolable Floor
These governance controls shall never be relaxed, suspended, or reconfigured under any Innovation Mode activation, regardless of horizon, sandbox type, or strategic justification.
Identity Invariants
- II-01 Mission invariants as documented in Layer 1 Mission Invariant Register
- II-02 Value boundaries as documented in Layer 1 Value Boundary Framework
- II-03 Institutional legitimacy shall not be risked by innovation activities
- II-04 Identity Custodian authority to halt any innovation activity on identity grounds
Legal, Safety & Systemic Invariants
- LR-01 All applicable laws, regulations, and binding obligations
- SS-01 Physical safety and data security of all stakeholders
- SI-01 Standard operations capacity shall not be compromised
- SI-05 Audit trail integrity — all decisions remain traceable
- GP-01 Innovation Governance Authority oversight authority
- GP-03 Governing board right to terminate any innovation activity
Risk Tolerance by Horizon
| Risk Category | Horizon 1 | Horizon 2 | Horizon 3 |
|---|---|---|---|
| Financial | Up to 5% dept budget | Up to 10% innovation budget | Up to 25% innovation budget |
| Reputational | Minimal visibility | Controlled external awareness | Institutional commitment visible |
| Operational | No impact on standard ops | Minor managed disruption | Dedicated capacity redirected |
| Strategic | Within current framework | May challenge assumptions | Fundamentally different directions |
| Technological | Proven tech, new applications | Emerging tech, manageable | Frontier tech, significant unknowns |
6. Exit Options
At sandbox duration limit or when triggered by review cycle assessment, the Innovation Governance Authority makes a formal exit decision using five defined options.
Scale
Thesis validated with evidence. Transition to standard DCOS via full viability assessment. Integration Synchronization Protocol applies.
Continue
Shows promise, needs more experimentation. Sandbox extended with revised parameters. Max one extension per sandbox.
Pivot
Thesis invalidated but domain relevant. Close sandbox, open new one with revised hypothesis. Learning carried forward.
Archive
Valuable learning produced but not ready to scale. Outputs archived in Innovation Knowledge Base for future reactivation.
Terminate
Insufficient learning, repeated boundary issues, or thesis conclusively invalidated. Resources returned to Innovation Portfolio Fund.
7. Sector Innovation Profiles
Each sector has unique innovation characteristics, identity sensitivities, and governance requirements.
Culture Sector
Very high identity sensitivity. Innovation at the intersection of preservation and creation. Cultural Advisory Panel in IGA. Community co-creation as default methodology. Artistic integrity review before scaling.
Focus: Digital engagement & cultural accessibility
Heritage Sector
Maximum identity sensitivity — institutions exist to preserve. Absolute zero tolerance for innovation-related damage to heritage assets. No innovation on irreplaceable assets. Heritage risk assessment mandatory before sandbox activation.
Focus: Digital preservation & conservation tech
Education Sector
Academic freedom as innovation invariant. Faculty and student involvement in innovation governance. Pedagogical innovation with learning outcome accountability. Research-innovation integration.
Focus: Pedagogical innovation & EdTech
Technology Sector
Innovation-native culture with high tolerance for experimentation. Rapid sandbox cycles. AI innovation requires enhanced governance. Regulatory sandboxes for compliance-sensitive innovation.
Focus: AI systems & platform innovation
Government Sector
Regulatory sandboxes critical for policy innovation. Citizen participation in innovation governance. Constitutional and legal constraints shape sandbox boundaries. Cross-agency coordination required.
Focus: Service delivery & policy innovation
Finance Sector
Regulatory sandbox alignment mandatory (FCA, MAS, etc.). AI/ML innovation with enhanced risk governance. Systemic risk consideration for all innovation. Stress testing of innovative products.
Focus: FinTech & regulatory innovation