# KaiRis Workbench · principles · public extract v0

**Tier A source:** KaiRis Library Wiki · V0002 · © **Robert Louis Kovach Jr.**  
**HOST:** synthesis for Family Door · 2026-10-03 · not legal advice  
**Full synthesis:** `processes/2026-10-03_KaiRis-Workbench_Father-Wiki-Principles-Host-Synthesis_v0.md`

---

## In one breath

Dad’s Workbench is a **local-first studio cockpit**: compare versions honestly, **check before you install or act**, keep **authority separate from capability**, and leave **receipts** so rollback stays real.

---

## Vitals · six laws

1. Scan broadly once · check narrowly at use.  
2. **Check ≠ install · repair · actuation.**  
3. Static discovery ≠ completeness proof.  
4. Rammy candidate ≠ qualified change.

---

## Glovebox · seven laws

- DLC data ≠ executable code · descriptor ≠ authority.  
- Participant install ≠ airlock authority · pairing secret ≠ extension permission.  
- Modules may widen **capability** without widening **authority**.  
- **Remote code forbidden · provider egress zero.**

---

## Bridge attributes (compare / update)

- Side-by-side versions · **independent workspaces**.  
- ZIP-on-demand compare · sandbox for imports.  
- Host-only powers (extension · nested FS tiles) **called out**, not faked in browser compare.  
- **Rollback saved** before in-place update · export session before apply.

---

## PortAbleRI rhyme (honest)

Same family ethic on the public instrument: **export · verify · append-only · one Prime · head count declared · policy + fix** — Father’s atlas **navigates**; HOST shores **receipt**.

---

**Nodal FIRST LIGHT:** [`2026-09-09_FIRST-LIGHT-WORKBENCH_v0.9.0_NODAL-HORCRUX_v0.md`](2026-09-09_FIRST-LIGHT-WORKBENCH_v0.9.0_NODAL-HORCRUX_v0.md) (kernel canon · full `.md` body pending export).

*Open the full wiki through Family library after gate · Drive ID in inventory CR.*