The three protocols, formally.

1 · Citation-Tier System — partial order

Let S be the set of source types. Define a partial order ≼ on S by evidentiary admissibility:

Tier A   :=  { UN bodies, accredited inquiries, treaty bodies,
                standards bodies, peer-reviewed institutions }
Tier B   :=  { investigative journalism, recognised civil society }
Tier C   :=  { TLTE itself — the route, never the source }
Tier D   :=  { state-denial archives, faction-aligned counter-files }

Admissibility for a contested claim c:
   admit(c)  ⇔  ∃ s ∈ Tier A  such that  s ⊨ c
              ∨  ( ∃ s ∈ Tier B  such that  s ⊨ c  ∧  c is "witness", not "finding" )

Forbidden:
   admit(c)  ⇍  Tier C alone           (TLTE never sources)
   admit(c)  ⇍  Tier D                 (state denial never grounds)
   ¬ ( Tier D ≼ Tier A )               (no quietly upgrading)

The lattice is intentionally non-total: Tier-A sources can disagree, and the protocol requires both anchors to be cited rather than the project picking a winner.

2 · Mirror-Publish Protocol — state machine

States  Q  := { draft, published, mirrored, accredited-transmitted, on-record }
Inputs  Σ  := { edit, two-archon-approve, publish, mirror,
                accredited-actor-pickup, official-acknowledge }

Transitions  δ : Q × Σ → Q
   δ(draft,    edit)                   = draft
   δ(draft,    two-archon-approve)     = published
   δ(published, mirror)                = mirrored
   δ(mirrored, accredited-actor-pickup) = accredited-transmitted
   δ(accredited-transmitted, official-acknowledge) = on-record

Initial state   q0 = draft
Accepting state qF = on-record

Forbidden edge:
   TLTE — direct-transmit → official-body
   (no edge in δ; the protocol has no path that lets TLTE
    submit evidence to an accountability body directly)

The forbidden edge is the contribution. TLTE has no "trusted reporter" affordance with any state, UN body, or court — by design.

3 · Graduation-Gate Logic — Boolean predicate

Let:
   g1 = DPO designated (UK GDPR Art. 37)
   g2 = DPIA completed (UK GDPR Art. 35)
   g3 = independent legal review (jurisdiction-specific)
   g4 = two-Archon authorisation recorded
   g5 = indemnity cover in force
   g6 = accredited-partnership agreement live

Operational surface S is openable iff:
   open(S)  ⇔  g1 ∧ g2 ∧ g3 ∧ g4 ∧ g5 ∧ g6

For every gate gi the public site MUST publish:
   status(gi)  ∈  { OPEN, DESIGNATED, CLOSED }
                  with date and evidence URL

Era Aarambam state (as of last publish):
   g1 = DESIGNATED · interim founder-DPO (see /unmai/graduation/dpo)
   g2 = OPEN
   g3 = OPEN
   g4 = OPEN
   g5 = OPEN
   g6 = OPEN

Therefore  open(S) = FALSE  for every operational surface S
that would constitute intake, naming, or hosted testimony.

Truth table (collapsed)