P70 — AIEP — Machine-Human Dual Surface Design Pattern
Publication Date: 2026-02-26 Status: Open Source Prior Art Disclosure Licence: Apache License 2.0 Author/Organisation: Phatfella Ltd Schema: AIEP_OS_SPEC_TEMPLATE v1.0.1 — https://aiep.dev/schemas/aiep-os-spec-template/v1.0.1
Field of the Invention
[0001] The disclosure relates to web content architecture for simultaneous human and machine audiences.
[0002] More particularly, the disclosure concerns a dual surface design pattern defining the architectural separation between a human-readable page and its associated machine-ingestible mirror, the deterministic projection relationship between them, and the hash-binding constraint that invalidates the manifest on any mismatch between the two surfaces.
Framework Context
[0003] This invention operates within an Architected Instruction and Evidence Protocol (AIEP) environment as defined in United Kingdom patent application number GB2519711.2, filed 20 November 2025, the entire contents of which are incorporated herein by reference.
[0004] The present invention extends deterministic canonicalisation, governance, and execution integrity mechanisms defined in the AIEP environment while remaining independently implementable as described herein.
Background
[0005] Web publishers serve content to both human readers and automated agents. Human-readable pages contain presentational markup, navigation, advertising, and decorative elements that are irrelevant to machine ingestion. Machine-ingestible mirrors contain structured data relevant to agent evidence evaluation.
[0006] Without a defined architectural relationship between the two surfaces, publishers may introduce facts in the machine mirror that are not present in the human surface, creating a hidden machine-only information layer not visible to human oversight.
[0007] Without a hash-binding relationship between surfaces, mirror pages may diverge from their source pages without detection, producing evidence artefacts that do not accurately represent the published human content.
[0008] Existing dual-surface patterns do not define: the deterministic projection requirement, the no-hidden-facts constraint, or a hash-mismatch-invalidates-manifest rule.
Summary of the Disclosure
[0011] A machine-human dual surface design pattern is disclosed defining the architectural relationship between human-readable pages and AIEP machine mirror pages.
[0012] The pattern defines three governing rules:
(a) the deterministic projection rule: the machine mirror must be a deterministic projection of the human-readable surface. All structured data in the mirror must be derivable from the content of the human-readable page. No hidden facts are permitted in the mirror that are not visible on the human surface.
(b) the hash consistency rule: the content_hash of the mirror’s data object must be recomputable from the human-readable source content at any time. If the human page content changes, the mirror content_hash must be updated to reflect the change. A persistent mismatch between the human surface content and the mirror content_hash invalidates the mirror.
(c) the manifest invalidation rule: if any mirror in the site index has a content_hash that does not match the current human page content, the well-known manifest is invalidated. Agents detecting manifest invalidation must treat all site mirrors as non-admissible until the manifest is regenerated with consistent hashes.
[0013] A DualSurfaceConsistencyHash is computed as:
DualSurfaceConsistencyHash = H(HumanContentHash || MirrorContentHash || source_url)
[0014] DualSurfaceConsistencyHash must be identical for any correctly maintained dual surface pair. A mismatch indicates surface divergence.
[0015] The technical effect is enforcement of transparency between human and machine content surfaces, preventing hidden machine-only information layers and ensuring machine mirrors accurately represent published human content.
Brief Description of the Drawings
[0016] Figure 1 illustrates the architectural separation between human and machine surfaces and the projection relationship.
[0017] Figure 2 illustrates the hash consistency rule and mismatch detection.
[0018] Figure 3 illustrates the manifest invalidation rule and agent fail-closed behaviour.
[0019] Figure 4 illustrates the DualSurfaceConsistencyHash computation and cross-node verification.
ASCII Drawings
Figure 1 — Dual Surface Architecture and Projection Relationship
HUMAN SURFACE MACHINE SURFACE
+------------------+ +------------------+
| /path | | /path.aiep.json |
| (HTML) | | (JSON mirror) |
| | | |
| - Rendered text | projection | - data: {} |
| - Navigation | ---------> | - evidence: [] |
| - Images | (det.) | - probability: {}|
| - Markup | | - plausibility:{}|
| | | |
| All facts in | | NO facts hidden |
| mirror visible | | from human |
| here | | surface |
+------------------+ +------------------+
Figure 2 — Hash Consistency Rule
Human page content
|
v
Extract structured data
|
v
Canonicalise (P63)
|
v
HumanContentHash
|
+---> Must equal MirrorContentHash
|
+--------+--------+
Equal Not Equal
| |
v v
Mirror Mirror
consistent INVALIDATED
Figure 3 — Manifest Invalidation Rule
Agent retrieves manifest
|
v
Check each entry in site index
against current human page content
|
v
Any content_hash mismatch?
|
+----+----+
Yes No
| |
v v
Manifest Proceed
INVALIDATED with
ALL mirrors ingestion
non-admissible
Fail-closed
until manifest
regenerated
Figure 4 — DualSurfaceConsistencyHash
HumanContentHash ----+
MirrorContentHash ----+--> H(HumanContentHash ||
source_url ----+ MirrorContentHash || source_url)
|
v
+------------------------------+
| DualSurfaceConsistencyHash |
+------------------------------+
Identical for consistent pair.
Mismatch = surface divergence.
Detailed Description
1. Deterministic Projection Rule
[0020] The machine mirror must be a deterministic projection of the human-readable surface. All structured data in the data object of the mirror must be derivable from the content of the human-readable page at source_url.
[0021] No facts may be present in the mirror that are not visible on the human surface. This rule is equivalent to the no-additional-facts constraint defined in P60, extended here as an architectural principle governing the design relationship between surfaces.
2. Hash Consistency Rule
[0022] The content_hash in the mirror must be recomputable from the human page content at any time. If the human page content changes, the mirror must be regenerated with an updated content_hash.
[0023] A persistent state in which the human page content produces a different hash from the mirror’s declared content_hash is a surface divergence condition.
3. Manifest Invalidation Rule
[0024] If any mirror in the site index has a content_hash inconsistent with the current human page content, the well-known manifest is invalidated.
[0025] Agents detecting manifest invalidation must treat all site mirrors as non-admissible until the manifest is regenerated with consistent hashes across all entries.
4. DualSurfaceConsistencyHash
[0026] A DualSurfaceConsistencyHash is computed as H(HumanContentHash || MirrorContentHash || source_url).
[0027] For a correctly maintained dual surface pair, DualSurfaceConsistencyHash is identical at all nodes. A mismatch between nodes indicates surface divergence or propagation failure.
Claims
-
A machine-human dual surface design pattern comprising: (a) a deterministic projection rule requiring that all structured data in a machine mirror be derivable from the content of the associated human-readable page, with no hidden facts permitted in the mirror not visible on the human surface; (b) a hash consistency rule requiring that content_hash in the mirror be recomputable from current human page content, with persistent mismatch constituting a surface divergence condition; (c) a manifest invalidation rule requiring agents to treat all site mirrors as non-admissible upon detecting any content_hash inconsistency between the site index and current human page content, until the manifest is regenerated with consistent hashes; and (d) a DualSurfaceConsistencyHash computed as H(HumanContentHash || MirrorContentHash || source_url) enabling cross-node surface consistency verification.
-
The pattern of claim 1 wherein surface divergence detection triggers fail-closed non-admissibility for all affected mirrors without partial admissibility.
-
A computing system implementing content publishing conforming to the pattern of any of claims 1 to 2.
-
A non-transitory computer-readable medium storing instructions implementing content publishing conforming to the pattern of any of claims 1 to 2.
Licence
Any person is granted a perpetual, irrevocable, worldwide, royalty-free licence to make, use, implement, modify, or distribute any system or method described in this disclosure for any purpose, without restriction, under the Apache License 2.0.
A copy of the Apache License 2.0 is available at https://www.apache.org/licenses/LICENSE-2.0
Abstract
A machine-human dual surface design pattern is disclosed defining the architectural relationship between human-readable web pages and AIEP machine mirror pages. Three governing rules are defined: the deterministic projection rule requiring all mirror data to be derivable from the human surface with no hidden facts; the hash consistency rule requiring content_hash to be recomputable from current human page content with persistent mismatch constituting surface divergence; and the manifest invalidation rule requiring agents to treat all site mirrors as non-admissible upon detecting any hash inconsistency until the manifest is regenerated. A DualSurfaceConsistencyHash is computed as H(HumanContentHash || MirrorContentHash || source_url) enabling cross-node surface consistency verification. Surface divergence triggers fail-closed non-admissibility for all affected mirrors.