Effect-Transparent Governance for AI Workflow Architectures: Semantic Preservation, Expressive Minimality, and Decidability Boundaries

arXiv cs.AI / 5/5/2026

💬 OpinionIdeas & Deep AnalysisModels & Research

Key Points

  • The paper proposes a machine-checked, effect-transparent governance framework for AI workflow architectures that controls effectful directives such as memory access, external calls, and LLM (oracle) queries.
  • It introduces a governance operator G using Interaction Trees in Rocq 8.19 and reports a fully verified development (0 admitted lemmas) spanning 36 modules, ~12k lines of code, and 454 theorems.
  • The authors prove that governance can be imposed without reducing internal computational expressivity, including “governed” Turing completeness and governed oracle expressivity.
  • The work identifies a decidability boundary: governance predicates can be total and closed under Boolean composition, yet meaningful semantic program properties remain non-trivial and undecidable even under governance.
  • Additional results show goal preservation for permitted executions, expressive minimality of primitive capabilities, strict subsumption over content-level filtering, and semantic transparency via observational equivalence (modulo governance-only events).

Abstract

We present a machine-checked formalization of structurally governed AI workflow architectures and prove that effect-level governance can be imposed without reducing internal computational expressivity. Using Interaction Trees in Rocq 8.19, we define a governance operator G that mediates all effectful directives, including memory access, external calls, and oracle (LLM) queries. Our development compiles with 0 admitted lemmas and consists of 36 modules, ~12,000 lines of Rocq, and 454 theorems. We establishseven properties: (P1) governed Turing completeness, (P2) governed oracle expressivity, (P3) a decidability boundary in which governance predicates are total and closed under Boolean composition while semantic program properties remain non-trivial and undecidable by governance, (P4) goal preservation for permitted executions, (P5) expressive minimality of primitive capabilities (compute, memory, reasoning, external call, observability), (P6) subsumption asymmetry showing structural governance strictly subsumes content-level filtering, and (P7) semantic transparency: on all executions where governance permits, the governed interpretation is observationally equivalent (modulo governance-only events) to the ungoverned interpretation. Together, these results show that governance and computational expressivity are orthogonal dimensions: governance constrains the effect boundary of programs while remaining semantically transparent to internal computation.