candidate
approved for public review
Approved for implementation and public review as a non-effective draft.
Recorded for KC Streich
AIWI-OPS-001 · version 2.0.0
A conservative public operating policy and issue-spotting guide for campaign, vendor, Party Party, KYN, technology, data, finance, and publication boundaries.
candidate
approved for public review
Approved for implementation and public review as a non-effective draft.
Recorded for KC Streich
treasurer
pending
Treasurer authentication is not required for public review; financial actions remain unavailable.
legal / compliance
pending
This draft is not legal advice or authorization for financial action.
AI for Wisconsin / Five Letter Agency
Campaign-Business Operations and Open Technology Program Governance Policy
Korey Streich Campaign Committee and Five Letter Agency
Version 2.0.0 — July 25, 2026
AI for Wisconsin / Five Letter Agency — Open Technology Program Governance Policy
Contents
Document control, license, adoption, and publication architecture
Executive summary
Purpose, scope, and project model
Non-negotiable operating rules
Boundary architecture
Classification and decision framework
Full technology program, funding ceiling, and related-party contracting
Office, hardware, servers, providers, and shared infrastructure
AI agents, donor interactions, campaign operations, and program controls
Cost, contribution, obligation, and program classification
Open-source publication, licensing, contribution governance, and public audit
Public fundraising, Party Party revenue, sponsorship, advertising, subscriptions, and merchandise
KYN, platform governance, collective decision-making, and system amendments
Common scenario matrix
Mandatory operating policy for AI agents and human participants
Required workflows
Templates and minimum records
Stop and escalation triggers
Questions for Wisconsin Ethics Commission advice or qualified counsel review
Implementation and publication checklist
Source notes and authority hierarchy
Appendix A. One-page operating reference
Appendix B. Public program budget and milestone register
Appendix C. Transaction and program-ledger minimum schema
Appendix D. Open-source repository and release checklist
Appendix E. AI for Wisconsin implementation profile
Appendix F. Control registry summary
| AIWI-OPS-001 v2.0.0 | Public draft | July 25, 2026 | | | :---- | :---- |
AI for Wisconsin / Five Letter Agency — Open Technology Program Governance Policy
Policy ID: AIWI-OPS-001
Version: 2.0.0
Status: Public draft for adoption, open-source publication, treasurer approval, and campaign-finance review
Effective date: Not effective until adopted under Section 0.4
Last reviewed: July 25, 2026
SPDX-License-Identifier: CC-BY-4.0
Registered committee: Korey Streich Campaign Committee — Wisconsin Sunshine registrant 1148727
Important: This is a conservative operational policy and issue-spotting guide, not legal advice. Written Wisconsin Ethics Commission advice, qualified counsel, statutes, administrative rules, and later official guidance supersede it.
Version 2.0 supersession notice: This version replaces the earlier prototype-and-basic-hosting model. The controlling proposed program is now a $150,000 maximum campaign technology-program ceiling, including a prospective $72,000 fixed implementation ceiling for Five Letter Agency, up to $12,000 for twelve active months of managed operations, and $66,000 retained under Campaign Committee control for infrastructure/providers, independent review, pilots/community operations, and contingency. The fundraising ceiling is not an automatic expenditure and is not an entitlement to Five Letter Agency.
0. Document control, license, adoption, and publication architecture
0.1 Document control
| Field | Current value |
|---|---|
| Status | Public draft conservative operating policy. Not a legal opinion or authorization to spend. |
| Applies to | Korey Streich Campaign Committee; Five Letter Agency; The Party Party; Know Your Neighbor; AI for Wisconsin; Hermes and other agents; campaign staff, contractors, volunteers, patrons, sponsors, reviewers, and technical contributors. |
| Policy owners | Campaign candidate and treasurer, with Five Letter Agency operator acknowledgement. |
| Financial approval | Campaign treasurer or authorized successor; the candidate/FLA proprietor may establish technical facts but may not be the Committee’s sole payment approver. |
| Required external review | Written Wisconsin Ethics Commission advice or qualified Wisconsin campaign-finance counsel for the candidate-owned vendor structure and other yellow issues identified here. |
| Review triggers | New official advice; entity conversion; first related-party obligation/payment; material scope or budget amendment; first corporate sponsor touching campaign-specific work; first KYN campaign poll; first autonomous donor workflow; security incident; election to office; or material legal change. |
| Canonical source | A designated public repository release identified by commit hash and signed release manifest. A website rendering, PDF, or fork is informative unless it identifies that canonical release. |
| Public license | Policy text, templates, and machine-readable controls are released under Creative Commons Attribution 4.0 International, except third-party material and separately licensed software. [S31] |
| Confidential companion records | Donor/source records, W-9/tax identifiers, banking information, raw KYN evidence, ballot selections, credentials/secrets, exact sensitive topology, privileged legal advice, private incident details, and personnel records remain restricted. |
0.2 Open-source/publication purpose
This policy is deliberately written as a public, forkable operating standard. Its goals are to:
make the campaign–vendor relationship inspectable rather than merely asserted;
let agents and humans apply the same controls from a versioned source;
allow other campaigns, civic projects, and vendors to adapt the framework;
expose budgets, milestones, authority boundaries, and audit methods without exposing protected records;
invite corrections and stronger controls through public issues and pull requests; and
preserve a clear line between public policy and confidential execution evidence.
The policy is open content. It does not grant rights to campaign or Party Party trademarks, private data, credentials, security secrets, or third-party copyrighted material. Software repositories, code, models, and hardware designs use their own explicit licenses.
0.3 Normative language and hierarchy
MUST, MUST NOT, REQUIRED, SHOULD, SHOULD NOT, and MAY have their ordinary standards meaning. Where documents conflict, the following hierarchy controls:
applicable law, binding orders, and written Wisconsin Ethics Commission advice;
signed campaign contracts and approved obligations, within law;
the latest formally adopted release of this policy;
adopted SOW schedules, data-processing terms, poll manifests, and runbooks;
machine-readable control registry generated from this policy;
examples, commentary, FAQs, website summaries, and agent memory.
A public contribution, model answer, GitHub issue, pull request, Discord statement, or community poll does not amend this policy until an authorized human adoption record identifies the exact version.
0.4 Adoption and effective date
This version becomes operational only after:
the candidate approves the policy’s project and transparency commitments;
the treasurer approves the financial, related-party, obligation, acceptance, and reporting controls;
FLA acknowledges the vendor, data, security, open-source, and transition obligations;
the campaign records any required external advice or counsel review;
the canonical public repository release is tagged and its digest recorded; and
restricted companion records and custodians are established without being committed publicly.
Until then, this is a planning and review draft. Adoption of the policy does not itself authorize a contract, expense, poll, deployment, data collection, or contribution acceptance.
0.5 Public source versus restricted companion records
| Artifact or information | Public by default | Restricted by default |
|---|---|---|
| Policy, budget ceilings, allocation categories, milestone definitions, authority matrix | Yes | — |
| Signed public-safe SOW, invoices, payment totals, acceptance summaries, credits, change-order summaries | Yes, with lawful redaction | Tax IDs, bank data, signatures where security/privacy requires, private negotiation detail |
| Source code, schemas, tests, deployment templates, public verifier tools, dependency manifests | Yes after security review | Secrets, environment inventories, exploit-enabling configuration, private repositories containing restricted records |
| Provider and hardware spending | Category, vendor, purpose, amount, ownership, and status | Account credentials, serial numbers where risky, exact network exposure |
| KYN methodology, claims, challenge rules, audit results | Yes | Identity evidence, relationship graph, reviewer private notes, credential secrets |
| Poll manifests, tally code, aggregate results, receipts/audit methods | Yes | Ballot selections linked to participants, eligibility evidence, correlation-capable logs |
| Security, privacy, accessibility, and legal review | Scope, reviewer, findings summary, remediation status | Privileged advice, active exploit details, personal data, incident material whose release creates risk |
| Donor and patron records | Only what law or consent requires | Nonpublic identities, contact data, payment tokens, source-review evidence |
0.6 Forking and adaptation profile
The portable rules are the main body of this policy. Campaign-specific values are isolated in Appendix E. A fork should replace the implementation profile, preserve attribution, state that it is modified, and avoid implying endorsement by AI for Wisconsin, the Korey Streich Campaign Committee, or Five Letter Agency. [S31]
0.7 How humans and agents use this policy
Start with Section 4. Identify the entity, program allocation, source, beneficiary, authority, data domains, and record location before taking action. Green means proceed with records; yellow means pause for the missing review/approval; red means reject or redesign.
Do not infer that fundraising progress authorizes spending. Every obligation and disbursement still needs its own authority.
Treat every Campaign Committee–FLA transaction as related-party, even while FLA is a sole proprietorship.
Record an obligation when the promise to purchase, rent, lease, or pay arises, not only when money moves. [S1][S3]
Use the public document for rules and the restricted companion register for sensitive evidence.
Open an issue or proposed patch when the policy is incomplete; do not improvise a hidden exception.
Executive summary
The new full-program model
The Campaign Committee may present one tangible, public technology goal: up to $150,000 to build, publish, launch, independently review, pilot, and operate the complete AI for Wisconsin open civic operating system during the campaign program period. The goal covers the public AI representative, Campaign Core, public web interfaces, Know Your Neighbor, auditable polling, infrastructure, open-source release, independent review, community pilots, managed operations, and a bounded contingency reserve. [S23][S29][S30]
The goal is a maximum program budget, not a representation that every dollar will be spent. It is also not a donor-restricted account unless the Committee lawfully establishes one. Public milestones explain intended results; the treasurer retains authority over actual obligations and disbursements.
Program allocation
| Program component | Maximum allocation | Control rule |
|---|---|---|
| FLA prospective implementation milestones | $72,000 | Paid only after independently accepted Schedule F milestones under the full-system SOW. |
| FLA managed operations | $12,000 | Up to twelve active months at $1,000/month; no accrual before activation or after suspension/transition. |
| Infrastructure and provider reserve | $18,000 | Actual documented campaign-specific hardware, hosting, storage, network, API, messaging, monitoring, backup, and accessibility costs. |
| Independent review | $20,000 | Committee-controlled legal/campaign-finance, security, privacy, cryptographic, and accessibility review, preferably contracted directly. |
| Pilot and community operations | $8,000 | Participant support, translation, accessibility, in-person verification, travel/materials, usability testing, and community review; never payment for a vote or political outcome. |
| Contingency and amendment reserve | $20,000 | Prospective change orders, incidents, provider changes, scaling, remediation, or approved system amendments. |
| Maximum program goal | $150,000 | Ceiling; not automatic expenditure and not FLA compensation. |
Related-party rule
Five Letter Agency is owned by candidate Korey Streich. The Committee may purchase bona fide services from FLA only under a prospective, non-retroactive, milestone-based contract with a frozen baseline, pricing support, exact acceptance evidence, treasurer approval, public-safe disclosure, and required campaign-finance review. Earlier work is Background Material, volunteer activity, or separately analyzed in-kind value—not a backdated vendor debt.
No-upward-revision rule
The technology program’s public ceiling remains $150,000 for the defined campaign-period scope. New requirements must be handled by:
using an existing reserve;
reallocating uncommitted funds among program categories with a public amendment record;
replacing or deferring a lower-priority item;
reducing scope or service levels; or
treating the work as outside the campaign technology program.
No agent, public poll, vendor request, or informal commitment can raise the ceiling. A future governmental implementation, indefinite post-campaign operation, unlimited feature development, or unrelated Party Party/FLA commercialization is outside this goal.
Open-source/public accountability rule
The campaign publishes the policy, program budget, milestone definitions, accepted-deliverable summaries, payments, direct-cost categories, open-source releases, and material changes at an appropriate level. Protected donor information, KYN evidence, ballot selections, credentials, privileged advice, and exploit-enabling security details remain restricted. Openness is an accountability control, not permission to disclose sensitive data.
What supporters do and do not purchase
Contributions support the Committee’s lawful campaign program. They do not purchase:
a particular FLA invoice or guaranteed vendor payment;
additional ballots, weighted votes, or priority access;
KYN verification, credential status, or challenge immunity;
authority over campaign compliance, contracts, donor treatment, or official results;
access to private data or unreleased security findings; or
a future government contract or official decision.
Human authority
Hermes and other agents may prepare, validate, summarize, test, and execute narrowly approved deterministic workflows. They may not finally accept or refund contributions, bind contracts, approve related-party payments, set fair-market value, modify the public budget ceiling, adjudicate disputed identities, change open poll rules, publish an official tally from model arithmetic, or decide what protected material becomes public.
1. Purpose, scope, and project model
This policy operationalizes the organizational model established by the Know Your Neighbor investigation and the full technology funding plan: FLA/The Party Party operates or develops general civic technology and KYN; AI for Wisconsin is the campaign identity and operating system; the registered Campaign Committee controls campaign money, official campaign decisions, and campaign use of the platform; Campaign Core provides deterministic authority; and Party Favors or other rewards remain separate from identity, eligibility, credentials, and vote weight. [S23][S29][S30]
The purpose is not to conceal overlap. The overlap is public, contractually described, correctly valued, and divided across legal, financial, data, technical, and authority boundaries. Separate branding, domains, accounts, or code repositories do not excuse substance-based classification.
1.1 Defined organizational lanes
| Lane | Primary purpose | Money and authority |
|---|---|---|
| Korey Streich Campaign Committee (Campaign Committee) | Candidate election, campaign communications, contributions, campaign technology program, campaign-specific polls, official campaign infrastructure. | Receives lawful campaign contributions; approves/records/reports obligations and spending; candidate and treasurer retain assigned human authority. |
| AI for Wisconsin | Public campaign identity, public representative, campaign website, and campaign operating system. | Not a separate legal person or bank account unless lawfully established; financial activity occurs through the Campaign Committee. |
| Five Letter Agency (FLA) | Candidate-owned sole-proprietor vendor, technical operator, general reusable technology owner, and commercial service provider. | May receive milestone/service payments under related-party controls; does not automatically receive program reserves. |
| The Party Party | Separate media, civic-technology, membership, merchandise, advertising, sponsorship, and patron context. | Business revenue does not become campaign funding or governance authority merely because projects overlap. |
| Know Your Neighbor (KYN) | Claim, credential, attestation, challenge, identity-risk, and privacy-preserving poll-authorization service. | No paid verification or vote power; separate data, keys, access, and client agreements. |
| Open technology commons | Public policy, code, schemas, tests, deployment recipes, hardware designs, audits, translations, and verifier tools. | Public contributors gain no campaign office, vendor entitlement, or campaign-specific authority. |
| Personal / household | KC’s living expenses, personal choices, personal property, and noncampaign obligations. | Campaign funds do not pay strictly personal costs or costs that would exist irrespective of the campaign. [S8][S9] |
1.2 Program boundaries
The $150,000 goal covers the defined campaign-period technology program and up to twelve active months of managed operations. It does not cover indefinite operation, a post-election State of Wisconsin system, unlimited amendments, unrelated FLA products, general Party Party commerce, personal expenses, or a guaranteed enterprise service level.
1.3 Controlling cost test
Core test: Does the expense, service, asset, or obligation exist because of campaign activity, fall within an adopted program category, and have a campaign portion that can be specifically demonstrated?
If it would exist anyway and the campaign portion is only a predicted share of a mixed flat cost, the campaign should not pay it without written advice. Wisconsin’s published 2025 opinion rejected a proposed mixed allocation for a computer and flat cell-phone plan that would exist regardless of the campaign, while contrasting those costs with traceable mileage. [S9]
2. Non-negotiable operating rules
| Rule | Required behavior |
|---|---|
| 1. Entity first | Every task, domain, account, API key, contract, invoice, dataset, message, poll, and deployment identifies the responsible entity before work begins. |
| 2. Program category before spending | Every proposed campaign technology expense identifies its Section 5 allocation and remaining authorized capacity. |
| 3. Campaign purpose | Campaign money buys lawful campaign activity; it does not capitalize FLA generally, finance Party Party commerce, or pay personal obligations. |
| 4. Through the committee | Campaign financial activity is authorized, paid, recorded, and reported through the registered Campaign Committee. [S2] |
| 5. No mixed flat-rate guessing | Do not charge a predicted share of mixed computers, phones, offices, subscriptions, utilities, or servers when the campaign portion is not specifically measurable. [S9] |
| 6. Arm’s-length related-party terms | FLA transactions require prospective scope, supported price, measurable deliverables, ordinary terms, conflict disclosure, independent acceptance, and treasurer approval. |
| 7. No retroactive vendor debt | Work completed before the financial effective date is not converted into a later invoice; freeze and classify the baseline honestly. |
| 8. Record obligations immediately | Log a promise to purchase, rent, lease, or pay when agreed, not merely when invoiced or paid. [S1][S3] |
| 9. Fundraising is not spending authority | Reaching a public milestone or the $150,000 ceiling does not approve a contract, invoice, provider account, or deployment. |
| 10. No upward goal ratchet | Changes use reserves, reallocation, substitution, or deferral; they do not silently increase the public technology goal. |
| 11. Open source is not an accounting exemption | Public code does not make campaign-specific engineering, deployment, operation, security, support, or data work valueless. |
| 12. Public source, restricted evidence | Publish rules, budgets, code, and audit summaries; keep donor, KYN, ballot, secret, privileged, and exploit-enabling records restricted. |
| 13. No pay-to-govern | Donation, patronage, sponsorship, purchase, favor, token, or subscription status never changes voting, credential, challenge, or campaign authority. |
| 14. Separate data | Donors, Party Party customers, KYN evidence, ballots, advertising audiences, and general agent memory remain separated by purpose and access. |
| 15. Human legal and financial authority | Agents cannot finally classify contributions, bind contracts, authorize related-party payments, alter the budget ceiling, or replace required human decision-makers. |
| 16. Source eligibility | Prohibited sources and foreign nationals may not fund or direct election-related activity. [S10][S14][S33] |
| 17. Independent review is independent | The Committee controls the review reserve; FLA does not select, direct, suppress, or condition reviewer conclusions. |
| 18. Transparency by design | Related-party payments, milestone status, commissioned open-source work, poll sponsorship, and material changes receive public-safe records. |
3. Boundary architecture
3.1 Recommended money flow
| From | To | Allowed flow | Required record |
|---|---|---|---|
| Supporter | Campaign Committee | Lawful campaign contribution through approved processor. | Contributor/source controls, receipt, campaign ledger, reporting. |
| Campaign Committee | FLA | Accepted fixed implementation milestone or activated monthly operations service. | SOW, obligation, milestone/service packet, invoice, independent acceptance, payment, report classification. |
| Campaign Committee | Provider/vendor | Campaign-owned hardware, service, API, hosting, communications, accessibility, pilot, or review expense. | Procurement/approval, invoice, ownership, purpose, allocation category, reporting. |
| Campaign Committee | Independent reviewer | Legal/compliance, security, privacy, cryptographic, accessibility, or audit review. | Independent scope, conflict disclosure, deliverable, remediation record. |
| Customer/patron | FLA/Party Party | Merchandise, membership, sponsorship, advertising, or general civic-tech support without campaign earmark. | Business receipt/contract, tax records, benefits, no-earmark acknowledgement. |
| KC/FLA | Campaign Committee | Candidate funds/property or authorized in-kind support. | Consent, valuation, candidate/sole-proprietor attribution, campaign record/reporting. [S4][S5][S6][S7] |
| KYN client | KYN/FLA | Neutral credential/poll service under published terms. | Service agreement, sponsor manifest, data terms, no paid vote advantage. |
3.2 Program funds do not flow automatically
The $150,000 public goal is held and controlled by the Campaign Committee. No donor contribution is automatically assigned to FLA. FLA’s maximum proposed compensation is limited to accepted implementation milestones and activated operations months. Infrastructure, review, pilot, and contingency allocations remain Committee-controlled unless separately and prospectively obligated.
3.3 Prohibited or presumptively unsafe flow
A corporation or other prohibited source pays FLA to build or operate a campaign-specific asset and the campaign receives the benefit without lawful Committee payment or contribution treatment.
A Party Party Patreon tier says that business payments finance official campaign infrastructure while bypassing the campaign contribution system.
The Committee transfers a lump sum to FLA because the fundraising goal was reached, without accepted deliverables or service periods.
FLA is paid from the independent-review reserve to review its own work or choose a reviewer whose independence is compromised.
The Committee reimburses FLA’s general office, home, Internet, utilities, mixed hardware, or unrelated subscriptions through estimated percentages.
A sponsor, donor, customer, or patron receives campaign policy control, KYN assurance, ballot weight, or official decision rights because of payment.
Donor, KYN, ballot, or Party Party customer data is joined for fundraising, advertising, or political profiling without a separately approved lawful purpose.
A foreign national directs campaign budgets, fundraising, messaging, donor administration, official poll rules, or campaign-specific deployment priorities. [S14]
4. Classification and decision framework
4.1 Eight-question decision tree
| Step | Question | If yes | If no / uncertain |
|---|---|---|---|
| 1 | Which entity owns the activity and receives the primary benefit? | Record exact entity; continue. | Stop and resolve ownership. |
| 2 | Is there a lawful, specific campaign purpose? | Continue. | FLA/Party Party/KYN-general/personal lane; campaign does not pay. |
| 3 | Which Section 5 program allocation and approved scope covers it? | Continue. | Use change-control/reallocation workflow or classify outside program. |
| 4 | Would the cost exist in the same form without the candidacy? | Presume noncampaign; only a direct campaign increment may proceed. | Continue. |
| 5 | Can the campaign portion be demonstrated by a milestone, activated service, dedicated asset, actual usage, or another reproducible method? | Continue. | Do not estimate a mixed flat percentage; redesign, donate lawfully, or seek advice. |
| 6 | Is the provider FLA, KC, family/related party, sponsor, or another interested entity? | Apply heightened conflict, pricing, acceptance, and disclosure controls. | Apply ordinary procurement and reporting controls. |
| 7 | Are the source, contributor, decision-maker, and worker legally eligible for the campaign-specific role? | Continue. | Reject, isolate, or place on review hold. |
| 8 | Which Section 8 classification code fits and which human approves? | Follow workflow and record. | LEGAL_REVIEW_HOLD; no execution. |
4.2 Risk labels
| Label | Meaning | Action |
|---|---|---|
| GREEN | Clearly permitted operating pattern with required records and available authority. | Proceed after ordinary approval/logging. |
| YELLOW | Fact-sensitive, related-party, mixed, novel, security/privacy consequential, or not squarely addressed. | Pause; obtain the missing treasurer, independent-review, Commission, counsel, privacy, or security approval. |
| RED | Prohibited source, personal subsidy, disguised contribution, pay-to-govern, retroactive debt, unrecorded obligation, data commingling, or agent action beyond authority. | Reject or redesign; preserve the decision record. |
5. Full technology program, funding ceiling, and related-party contracting
5.1 The Committee’s public program ceiling
The Campaign Committee may solicit contributions toward a maximum $150,000 AI for Wisconsin technology program. The program is defined by the Funding Plan, the full-system SOW, this policy, and the adopted technical requirements. [S23][S29][S30]
The ceiling is intentionally broad enough to avoid repeatedly raising the public technology target. It covers the defined campaign-period system, reviews, pilots, direct costs, operations, and contingency; it does not promise unlimited work.
5.2 Program allocation and control
| Allocation code | Maximum | Primary controller | Permitted use |
|---|---|---|---|
| TECH_IMPL_FLA | $72,000 | Treasurer + independent milestone acceptor | Prospective completion of the approved full-system SOW through M0–M8. |
| TECH_OPS_FLA | $12,000 | Treasurer + monthly service acceptance | Up to twelve active months of managed operations at $1,000/month. |
| TECH_DIRECT_INFRA | $18,000 | Committee | Campaign-specific hardware, provider, API, hosting, storage, network, backup, communications, monitoring, accessibility, and related direct costs. |
| TECH_INDEPENDENT_REVIEW | $20,000 | Committee independent of FLA | Campaign-finance/legal, privacy, security, cryptographic, accessibility, and other independent review. |
| TECH_PILOT_COMMUNITY | $8,000 | Committee | Participant/pilot support, translation, accessibility, travel/materials, in-person verification, usability, and community review. |
| TECH_CONTINGENCY_AMENDMENT | $20,000 | Treasurer under written change control | Incidents, remediation, vendor changes, scaling, and approved amendments. |
| Total | $150,000 | Campaign Committee | Maximum public technology-program budget. |
Unspent or uncommitted allocations remain Campaign Committee funds and do not become FLA property. Reallocation requires a public-safe amendment record and may not evade campaign-finance, acceptance, or related-party controls.
5.3 FLA fixed implementation ceiling and milestones
The proposed FLA implementation ceiling is $72,000, paid only through accepted milestones:
| Milestone | Maximum payment | Public result |
|---|---|---|
| M0 — Baseline, governance, pricing, IP, and requirements traceability | $4,000 | Frozen non-retroactive baseline, ADR/status register, public governance record. |
| M1 — Sovereign infrastructure, identity foundation, backup, and restore | $8,000 | Hardened deployment, durable storage, identity boundary, encrypted backup, restore evidence. |
| M2 — Campaign Core authority, consent, events, jobs, approvals, and finance boundaries | $9,000 | Typed deterministic authority and negative-path/replay/concurrency evidence. |
| M3 — Hermes profiles, plugin, knowledge, memory, connectors, goals, outreach, and transparency | $9,000 | Isolated profiles, source-backed tools, connector/goal/outreach flows, transparency slice. |
| M4 — Public web, accounts, accessibility, deliberation, receipts, results, and audit interfaces | $8,000 | Complete browser journeys and accessibility evidence. |
| M5 — KYN Trust Core, claims, attestations, challenges, credentials, recovery, and trusted-verifier pilot | $10,000 | Separate deterministic trust service and seeded abuse/audit pilot report. |
| M6 — Verified polling, authorization/ballot separation, tallies, receipts, and public verifier | $9,000 | Immutable poll, private authorization/tally boundary, reproducible public audit package. |
| M7 — Expanded credentials, privacy interoperability, statewide hardening, and external-review readiness | $9,000 | Load/recovery/correlation testing and review/remediation packet. |
| M8 — Open-source release, final acceptance, cutover/handoff, and 30-day stabilization | $6,000 | Pinned public release, runbooks, final acceptance, transition materials. |
| Total fixed implementation ceiling | $72,000 | No additional fixed implementation fee without prospective change control inside the $150,000 ceiling. |
A milestone may be subdivided only if the total does not increase and every payment remains tied to an independently useful accepted deliverable.
5.4 Managed operations ceiling
The Committee may activate up to twelve service months at $1,000 per active month, maximum $12,000. The service includes only the approved service inventory: website and agent serving, routine health/alert review, deployments, DNS/TLS, backups, maintenance, credential-expiration support, incident triage, monthly operations reporting, and orderly transition.
No fee accrues before the written activation date, during an authorized full suspension, after termination/transition, or for a month in which the material service inventory was not delivered. The service is not a 24/7 staffed enterprise SLA, unlimited development retainer, or guarantee of uptime.
5.5 Committee-held reserves
Infrastructure/provider reserve: Prefer Committee-owned accounts and assets. Pay actual documented campaign costs; no hidden markup or guessed share of FLA overhead.
Independent-review reserve: Contract directly where practical. FLA may provide evidence and remediation but does not control conclusions.
Pilot/community reserve: No payment for a vote, political answer, credential approval, or favorable review. Participant reimbursement or support must use neutral published rules.
Contingency/amendment reserve: Every use requires a written trigger, exact scope, cost, source, authority/privacy/security impact, acceptance evidence, and public-safe summary.
5.6 Non-retroactive baseline
Development began before the proposed full-system contract. The parties therefore MUST:
freeze exact repository commits, deployed artifact digests, provider accounts, hardware, and implementation status immediately before financial effectiveness;
classify existing material as Background Material/Background IP, campaign data, third-party material, or restricted configuration;
state that no pre-effective labor or cost becomes payable under the prospective SOW;
have the treasurer separately determine whether earlier campaign-specific benefit was volunteer activity or authorized/reportable in-kind support;
replace any milestone already substantially complete with additional prospective deliverables of equivalent approved value or reduce the fee; and
publish a public-safe baseline summary without exposing secrets or private campaign records.
5.7 Mandatory related-party packet
| Record | Minimum content |
|---|---|
| Full-system SOW and schedules | Purpose, workstreams, milestone values, operations inventory, exclusions, acceptance, transition, direct costs, and conditions precedent. |
| Baseline/Background IP schedule | Exact commits/artifacts, existing deployments, prior work treatment, FLA background technology, third-party materials. |
| Pricing support | Rate/comparable/cost analysis sufficient for independent review; not reverse-engineered from desired transfer. |
| Conflict statement | Candidate ownership/control of FLA; independent treasurer approval; reviewers; subcontractors; no sponsor earmark. |
| Source/foreign-national review | Who funded, performed, directed, merged, deployed, or accepted campaign-specific work. |
| IP/open-source schedule | Public repositories, licenses, release obligations, campaign rights, trademark/data exclusions, SBOM/dependency handling. |
| Data/security schedule | Data classes, permitted access, encryption, retention, incidents, backups, exports, deletion, secret custody. |
| Milestone/service acceptance | Exact evidence, reviewer, date, status, defects, credits, and payment authority. |
| Invoice/obligation/report record | Specific purpose, service period, direct costs, credits, obligation date, disbursement, public-safe description. |
| Tax/vendor record | W-9 or applicable vendor record and information-return review. [S24] |
5.8 Valid patterns
| Pattern | Default status | Required structure |
|---|---|---|
| Full prospective milestone program | YELLOW → GREEN after required review/approval | Fixed baseline, milestone values, independent acceptance, public evidence, no retroactive billing. |
| Activated monthly managed operations | GREEN/YELLOW | Exact service inventory, active month, monthly report, ordinary suspension/termination, no mixed-cost reimbursement. |
| Committee-owned provider/hardware purchase | GREEN | Campaign purpose, Committee ownership/account, invoice, inventory, security/exit record. |
| Committee contracts independent reviewer | GREEN/YELLOW | Scope, independence/conflict, deliverable, remediation/public summary. |
| Campaign commissions public open-source release | GREEN/YELLOW | Exact release/license/build/docs; campaign purpose; background IP and restricted material separated. |
| General KYN service offered to multiple clients | YELLOW | Published terms, client/data separation, campaign-specific scope/payment, poll sponsor manifest. |
5.9 Invalid or redesign-required patterns
Paying FLA all or a percentage of the $150,000 merely because funds were raised.
Paying an unaccepted milestone, a service month not activated/delivered, or work materially complete before the contract baseline.
Using the review, pilot, direct-cost, or contingency reserves as an undisclosed increase to FLA compensation.
Paying FLA’s ordinary office, home, utilities, mixed hardware, general product roadmap, Party Party commerce, or personal living costs.
Letting FLA forgive debt, offer nonordinary terms, or leave obligations unresolved without contribution/credit review.
Accepting a patron/sponsor earmark for campaign-specific infrastructure outside the campaign contribution lane.
Treating an open-source label as proof that pricing, source eligibility, data handling, or campaign purpose no longer matters.
5.10 No-upward-revision and amendment procedure
A proposed change must state:
the exact added, removed, or substituted requirement;
the allocation and remaining capacity;
whether FLA or another vendor will perform it;
price and source support;
authority, privacy, security, legal, accessibility, and operations impact;
acceptance evidence; and
public disclosure effect.
If the change cannot fit within existing uncommitted allocations, the Committee defers or substitutes work rather than increasing the public technology ceiling. A platform poll may recommend an amendment but cannot create an obligation or deploy code automatically.
6. Office, hardware, servers, providers, and shared infrastructure
6.1 Dedicated commercial campaign space
A dedicated area in a commercial FLA office can be structured as a campaign expense more credibly than a rough share of a mixed workspace. Because no published Wisconsin decision located here directly approves candidate-owned office rent, the first lease or charge is a YELLOW item for a confidential Commission request. [S12]
Use a written sublease or license and confirm that FLA's underlying lease permits it.
Define the exact room, square footage, furniture, storage, access, dates, and campaign-only use.
Support the rate with local commercial comparables or the proportionate amount FLA actually pays for the dedicated area, without a candidate-benefit markup.
Keep a floor plan, photographs, access list, and use log.
Separate campaign Internet, phone, printing, security, and other services when feasible; otherwise charge only actual measurable campaign increments.
The Campaign Committee should pay FLA under ordinary terms and report the obligation and payments with a specific purpose.
6.2 Shared FLA office
Internal rule: Do not charge a predicted percentage of FLA's flat lease, utilities, Internet, or general office overhead merely because campaign work sometimes occurs there. Dedicate a measurable unit, charge a documented per-use room rate offered on ordinary terms, treat the candidate's personal provision as a properly analyzed contribution, or obtain written advice.
This conservative rule follows the Commission's distinction between traceable campaign mileage and flat mixed-use costs that would exist anyway. [S9]
6.3 Residence and household costs
Campaign funds should not pay mortgage, home rent, household utilities, general home Internet, repairs, or ordinary household equipment. Wisconsin's personal-use rule and 2025 opinion create substantial risk. Federal guidance expressly bars a federal campaign from renting space in the candidate's home; that is an analogy, but it supports the conservative internal rule. [S8][S9][S15]
A campaign meeting at a residence does not convert the residence into reimbursable office space. Document event-specific costs separately where clearly allowed; do not allocate the home itself.
6.4 Raspberry Pi 5, OptiPlex, networking, and storage
| Fact pattern | Classification |
|---|---|
| Existing personally/FLA-owned Pi or OptiPlex used occasionally by KC for uncompensated online campaign activity | Potential qualifying volunteer/Internet activity; document ownership and uncompensated individual use. Do not have campaign pay a guessed share of original purchase. |
| Dedicated campaign-owned SSD, UPS, router segment, domain, or server purchased for campaign-only deployment | Campaign expense; campaign owns asset; inventory it; no personal/FLA use. |
| FLA provides dedicated virtual machine or container with metered resources and support | Related-party vendor service; SOW, actual metrics, normal rate, separate credentials/logs. |
| Campaign pays half of FLA's existing server because 'about half the compute' may be campaign | Do not pay on estimate. Instrument actual usage, dedicate capacity, or obtain advice. |
| FLA donates a campaign-only server or service | Potential candidate in-kind contribution at fair market value unless a clear individual Internet-activity exception applies; obtain authorization and record. [S5][S6][S7] |
| Party Party sponsors finance hardware advertised as the AI for Wisconsin campaign server | High risk of routed/earmarked campaign support, especially for corporate or foreign sources; do not use proposed structure. |
6.5 Asset ownership and end-of-use
Campaign-purchased equipment belongs to the Campaign Committee, not automatically to KC or FLA.
FLA-owned equipment remains FLA property unless sold or contributed under a documented transfer.
Do not move campaign assets into FLA after the campaign without a lawful fair-market sale, permitted disposition, or other reviewed process.
Maintain serial number, purchase date, payer, custodian, location, use restriction, and disposition record for every material asset.
6.6 Program asset and provider register
Every asset/provider funded from the technology program records: owner; payer; custodian; allocation code; purchase/obligation date; campaign purpose; data classes; credentials owner; physical/logical location; replacement and warranty; depreciation/tax treatment for review; backup/restore role; public-disclosure level; and exit/disposition plan.
Committee-owned accounts are preferred for domains, campaign email, messaging, hosting, payment processing, public analytics, and campaign-specific provider services. Where FLA must hold a master account, the SOW identifies the campaign tenant, actual charges, export rights, credential transition, and termination procedure.
7. AI agents, donor interactions, campaign operations, and program controls
7.1 Four permissible classification lanes
| Lane | Example | Treatment |
|---|---|---|
| A. Volunteer personal service | KC or another individual uses judgment and time without specific compensation to draft campaign material. | Not a contribution under Wisconsin's individual volunteer-service exclusion. Record volunteer role; no invoice. [S1] |
| B. Uncompensated individual Internet activity | An uncompensated individual uses an existing computer, software, domain, ISP, or AI tool to create/post online campaign communications. | Potential statutory exclusion, including the listed technology costs; purchased professional video production is excluded from this safe lane. [S1] |
| C. Paid FLA vendor service | FLA operates a dedicated campaign agent, CRM workflow, hosting, donor support, custom model/tooling, or data service. | SOW, related-party approval, campaign payment, ledger/reporting, data terms. |
| D. Authorized in-kind contribution | FLA/KC provides a campaign-specific service or asset free or below fair value outside a clear exclusion. | Prior consent, written description, date, fair-market value, candidate/sole-proprietor attribution, reporting as applicable. [S5][S6][S7] |
7.2 What the agent may do under an approved campaign workflow
Draft donor, volunteer, press, constituent, or event communications for human review.
Answer approved factual FAQs using a versioned knowledge base and display the required campaign attribution where applicable.
Summarize inbound messages and suggest routing, without making a legal donor determination.
Schedule approved communications and reminders after a human approves content, audience, sender, and entity.
Prepare a proposed campaign-finance ledger entry from an invoice or receipt, while flagging uncertainty for the treasurer.
Calculate metered API, SMS, email, compute, or hosting usage from deterministic logs.
Generate draft KYN poll manifests, explanations, or reports; deterministic services and authorized humans must approve eligibility, sponsorship, timing, and results.
Send standardized contribution acknowledgements only after the payment processor and treasurer-controlled rules mark the contribution accepted.
7.3 Actions requiring human approval
| Action | Required human |
|---|---|
| Accept, reject, redesignate, refund, or attribute an uncertain contribution | Treasurer or trained authorized campaign finance officer. |
| Determine whether a donor, sponsor, vendor, or contributor is an eligible source | Treasurer/counsel; foreign-national and entity questions cannot be delegated to model inference. |
| Commit campaign funds, enter a contract, or incur an obligation | Authorized human under written spending authority; treasurer review. |
| Approve related-party FLA scope, rate, invoice, or payment | Treasurer plus candidate acknowledgement; independent reviewer/counsel for yellow transactions. |
| Approve fundraising copy, required attribution, or AI synthetic-media notice | Authorized communications/compliance human. |
| Change KYN claims, challenge outcomes, poll eligibility, ballot status, or official tally | Authorized deterministic service and designated human adjudicator/campaign authority. |
| Use campaign donor or KYN data outside its original purpose | Data controller, privacy/security review, and legal approval. |
7.4 Prohibited autonomous agent actions
Do not invent a donor's citizenship, residence, employer, identity, or source-of-funds status.
Do not split, reroute, rename, or disguise contributions to make them appear permissible.
Do not send money, issue refunds, sign contracts, approve invoices, or change bank/payment settings.
Do not promise a sponsor, patron, donor, or contributor policy access, governance authority, KYN status, or voting advantage.
Do not merge campaign donor records, Party Party customer records, KYN identity evidence, or secret ballots.
Do not let a foreign national or unauthorized person approve election-related budgets, messaging, fundraising, poll administration, or campaign operations. [S14]
Do not publish an official poll result from a language-model calculation; use deterministic tally code and signed audit artifacts.
Do not generate or deploy campaign communications without the correct entity attribution and, when applicable, Wisconsin synthetic-media notice. [S11][S13]
Do not launch automated outbound email, SMS, voice, or direct-message campaigns until a separate channel-specific review confirms consent, identification, opt-out, platform, and recordkeeping requirements.
7.5 Donor interaction examples
| Scenario | Status | Rule |
|---|---|---|
| Agent answers 'How do I contribute?' with approved Zeffy campaign link and disclaimer | GREEN | Campaign-controlled content; no individualized eligibility decision. |
| Agent asks standard source-eligibility questions and routes answers to human review | GREEN/YELLOW | Collect minimum data; no automated final legal conclusion. |
| Agent sees foreign address and automatically accepts payment because card succeeds | RED | Payment processing is not source eligibility; hold for human review. [S14] |
| Agent automatically refunds a questionable contribution | RED as autonomous action | Prepare recommendation; authorized human executes and records. |
| FLA agent uses Party Party customer list to solicit campaign donations | YELLOW/RED | Requires data-purpose consent, entity separation, valuation, campaign authorization, and source review; do not assume customer relationship authorizes campaign use. |
| Agent ranks donors for special policy access or KYN influence | RED | No pay-to-govern or donor privilege. |
7.6 AI-generated political audio and video
Wisconsin requires prescribed disclosures for certain audio or video political or issue advocacy substantially produced with generative AI. Audio must include 'Contains content generated by AI' at the beginning and end; synthetic portions of video require the applicable continuous written disclosure. These are separate from ordinary campaign attribution requirements. Use deterministic publication templates; do not rely on Hermes to remember the notice. [S13]
7.7 Technology-program actions
Agents MAY prepare budget-status summaries, milestone checklists, invoice comparisons, provider-cost reconciliations, release manifests, and public transparency drafts from authoritative records. Agents MUST NOT:
infer that available cash or fundraising progress authorizes spending;
approve an FLA milestone or monthly operations invoice;
move funds among program categories without an adopted amendment;
select an “independent” reviewer whose independence has not been human-confirmed;
conceal a budget variance, failed test, rejected deliverable, incident, or reserve draw;
publish donor identities or other protected records as part of transparency reporting; or
represent a planned, coded, tested, deployed, or accepted feature as another status.
8. Cost, contribution, obligation, and program classification
8.1 Required internal codes
| Code | Use | Campaign treatment |
|---|---|---|
| TECH_IMPL_FLA | Accepted FLA M0–M8 implementation milestone. | Related-party packet, obligation, milestone acceptance, invoice, payment/reporting. |
| TECH_OPS_FLA | Activated FLA managed-operations month. | Service inventory, monthly operations record, invoice, acceptance, payment/reporting. |
| TECH_DIRECT_INFRA | Campaign-specific provider, hardware, hosting, storage, API, messaging, backup, accessibility, or network cost. | Actual documented cost; Committee ownership/account preferred. |
| TECH_INDEPENDENT_REVIEW | Independent legal/compliance/security/privacy/crypto/accessibility review. | Direct Committee contract where practical; conflict and deliverable record. |
| TECH_PILOT_COMMUNITY | Neutral participant/pilot support, translation, accessibility, travel, verification materials, usability/community review. | Published neutral criteria; never payment for vote/outcome. |
| TECH_CONTINGENCY_AMENDMENT | Prospective incident, remediation, scale, vendor change, or system amendment. | Written change control and public-safe summary; no automatic FLA entitlement. |
| CAMPAIGN_DIRECT_OTHER | Other campaign-only cost outside technology program. | Ordinary campaign obligation/payment and reporting controls. |
| CANDIDATE_IN_KIND | KC/FLA gives campaign-specific property/service outside an exclusion. | Prior consent, FMV, candidate/sole-proprietor attribution, reporting. |
| VOLUNTEER_PERSONAL_SERVICE | Uncompensated individual labor. | Statutory exclusion where facts fit; record person, role, no specific compensation. |
| VOLUNTEER_INTERNET_ACTIVITY | Qualifying uncompensated individual online activity/technology. | Potential exclusion; document facts and limits. |
| PARTY_PARTY_ONLY | Commercial/media/customer activity with no campaign deliverable. | FLA pays; no campaign data or benefit beyond public availability. |
| KYN_COMMON_INFRASTRUCTURE | Neutral multi-client KYN core not commissioned by campaign. | FLA/KYN pays unless campaign contracts for a documented service. |
| SHARED_BUT_TRACEABLE | Actual measurable campaign increment in a shared service. | Campaign may pay documented increment with logs and ordinary terms. |
| MIXED_UNALLOCABLE_DO_NOT_PAY | Flat mixed cost with no reliable campaign portion. | Campaign does not pay; dedicate, redesign, donate lawfully, or obtain advice. |
| LEGAL_REVIEW_HOLD | Novel, related-party, sponsor, foreign-source, personal-use, valuation, privacy, security, or authority uncertainty. | No execution until cleared. |
8.2 What must be captured
The internal ledger records every contribution, disbursement, obligation, direct cost, in-kind benefit, credit, refund, debt change, program reallocation, and reserve draw regardless of current filing status. [S3][S17]
At minimum capture:
obligation date, payment date, payee, address, exact purpose, amount, allocation code, and reporting status;
SOW milestone or service month, acceptance status, reviewer, defects, credits, and artifacts;
provider invoice, actual metering, ownership, account, and data/security classification;
fair-market support for in-kind or discounted benefits outside a statutory exclusion;
candidate personal funds/property contributed to the Committee; [S4]
remaining category capacity and total uncommitted technology-program capacity;
public-disclosure record or reason for lawful/security/privacy withholding; and
correction history without erasing the prior record.
8.3 Subscriptions and API plans
| Plan type | Default treatment |
|---|---|
| Committee-owned campaign-only account | TECH_DIRECT_INFRA; Committee pays and owns credentials/data. |
| Metered campaign tenant inside FLA account | Actual charge under SOW/direct-cost rules; logs and export/transition rights required. |
| Flat mixed FLA subscription | Do not invoice a guessed percentage. Use a dedicated account, a defined vendor service, a clear volunteer exclusion, or in-kind treatment. |
| Public/open-source software | License fee may be zero; implementation, compute, storage, security, support, and operations still require classification. |
| Special provider discount | Review whether the discount is ordinary or a potential contribution; prohibited sources cannot subsidize campaign activity. |
8.4 No marginal cost does not mean no value
A commercial agent or hosting service can have value through software, configuration, data, operator responsibility, reliability, security, and support even when the next API call costs little. Conversely, qualifying uncompensated individual Internet activity may be excluded under Wisconsin law. Classification follows facts and law, not a blanket zero-cost assertion. [S1][S5]
8.5 Fundraising progress and program accounting
The campaign SHOULD publish a public-safe technology ledger showing, at minimum: goal; contributions to the Committee in aggregate as appropriate; obligations; paid amounts; category commitments; uncommitted balances; milestone status; accepted releases; direct-cost categories; review/pilot status; reserve draws; credits/refunds; and final unused-fund disposition. The public ledger is not the official campaign-finance filing and must not expose nonpublic donor data.
8.6 Limited-activity reporting exemption
An exemption does not erase activity. Contributions, disbursements, debts, obligations, and candidate funds count toward the threshold. The $150,000 program and any related contract require active monitoring and likely make reliance on a limited-activity posture inappropriate once obligations/activity exceed the applicable threshold. [S17]
9. Open-source publication, licensing, contribution governance, and public audit
9.1 Publication policy
Public source is the preferred default for policy, architecture, schemas, deterministic rules, tests, deployment recipes, public-verification tools, hardware designs, accepted prompts/templates, dependency manifests, and public-safe audit evidence. The objective is reproducibility and scrutiny, not disclosure of secrets or participant data.
9.2 License model
This policy text, templates, and companion control files are licensed under Creative Commons Attribution 4.0 International (CC BY 4.0). The license permits sharing and adaptation, including commercial use, with attribution and indication of changes. [S31]
Software, schemas treated as software, hardware designs, model artifacts, fonts, media, datasets, and third-party components use separate repository-level licenses and notices.
Trademarks, campaign names/logos, Party Party branding, personal likenesses, private data, credentials, and third-party rights are not granted merely because a document is public.
A LICENSE, NOTICE, dependency/SBOM record, and per-repository license policy MUST accompany public releases.
9.3 Canonical repository and release integrity
The canonical policy repository SHOULD contain:
/policy/AIWI-OPS-001.md
/policy/implementation-profile.yaml
/policy/controls.yaml
/policy/CHANGELOG.md
/policy/ADOPTION.md
/LICENSE
/NOTICE
/CONTRIBUTING.md
/SECURITY.md
/CODE_OF_CONDUCT.md
Each adopted release records: semantic version; commit hash; content digest; adoption authorities; effective date; superseded version; source review date; public/restricted change classification; and links to applicable SOW/budget/poll manifests.
9.4 Normative versus informative content
The policy body and machine-readable controls are normative after adoption. Source notes, examples, FAQs, public summaries, diagrams, and implementation commentary are informative unless expressly incorporated. A website rendering or translated copy must identify the canonical version and disclose translation status.
9.5 Contribution workflow
Contributor opens an issue or pull request against the public source.
Maintainer labels the change: editorial, operational, financial, legal/compliance, security/privacy, KYN/polling, accessibility, or campaign-specific.
Automated checks validate formatting, links, control IDs, profile schema, and consistency.
Human reviewers evaluate substance. Legal/financial changes require candidate/treasurer and applicable external review; security/privacy changes require assigned reviewers.
Campaign-specific deployment or adoption is performed only by eligible authorized campaign humans.
Accepted change receives a changelog entry, release tag, adoption record, and public digest.
Rejected or deferred changes remain visible with reasons when safe.
Public contribution does not create vendor status, compensation, a campaign role, KYN assurance, governance weight, or a right to deployment.
9.6 Foreign-national and open technical contribution boundary
International contributors may participate in generic open-source discussion and reusable technical work, subject to applicable law and project rules. They must not direct campaign budgets, fundraising, messaging, donor administration, official campaign poll rules, campaign-specific expenditures, or other election-related decision-making. [S14]
Campaign-sensitive issues MUST be labeled and merged/deployed only by authorized eligible persons. Any uncompensated campaign-specific contribution from a source whose eligibility is uncertain is placed on review hold.
9.7 Security reporting and responsible disclosure
Do not open a public issue containing credentials, personal data, active exploit instructions, exact sensitive topology, or a vulnerability that materially endangers a live system. The public repository SHALL include a private security-reporting method. The project publishes a public-safe advisory after containment, affected-version analysis, remediation, and disclosure review.
Security transparency includes controls, threat models, audit scope, affected versions, and remediation status. It does not require releasing live secrets or a weaponized exploit before users are protected.
9.8 Public/restricted release gate
Before publication, every artifact is classified:
PUBLIC_APPROVED
PUBLIC_REDACTED
EMBARGOED_SECURITY
RESTRICTED_CAMPAIGN
RESTRICTED_DONOR
RESTRICTED_KYN_IDENTITY
RESTRICTED_BALLOT
PRIVILEGED_LEGAL
THIRD_PARTY_RESTRICTED
An AI model may propose the classification but cannot be the sole release authority.
9.9 Open-source funding and campaign accounting
The campaign may lawfully commission a public release as a campaign deliverable when the purpose, scope, price, rights, baseline, and acceptance evidence are documented. Public availability does not make engineering or operations free, and it does not authorize the Committee to pay for unrelated FLA product development.
Community contributions reduce neither the need to classify campaign-specific benefit nor the value of FLA deployment, support, data, and operations work. Discounts or donated campaign-specific work remain subject to source and contribution analysis.
9.10 Forks, modifications, and non-endorsement
A fork must preserve attribution, state material changes, replace the implementation profile, and avoid suggesting that the original project endorses the fork. Official AI for Wisconsin policy is only the exact adopted canonical release identified by the Campaign Committee.
10. Public fundraising, Party Party revenue, sponsorship, advertising, subscriptions, and merchandise
10.1 Campaign technology-program solicitation
The Campaign Committee may describe the $150,000 ceiling as a tangible program goal using the adopted funding plan. Public language MUST state:
contributions are made to the Korey Streich Campaign Committee;
the goal is a maximum budget, not an automatic expenditure;
FLA is a candidate-owned related-party vendor;
FLA’s proposed ceilings are $72,000 implementation and $12,000 managed operations;
$66,000 remains Committee-controlled for direct costs, review, pilots, and contingency;
no donation purchases votes, credentials, data access, policy control, or vendor entitlement; and
actual spending remains subject to treasurer approval, legal/source rules, milestone/service acceptance, and public-safe reporting.
Suggested concise language:
Help build Wisconsin’s open-source AI-governance prototype. AI for Wisconsin is raising up to $150,000 to build and operate a public AI representative, transparent campaign operating system, privacy-preserving KYN identity and credential service, auditable local and statewide polling, reproducible infrastructure, public verification tools, and independent legal, security, privacy, cryptographic, and accessibility review. The goal is a ceiling, not an automatic expenditure. Five Letter Agency, owned by candidate Korey Streich, may be paid only under a prospective milestone-based agreement approved through campaign controls. Donations do not buy votes, credentials, platform authority, private data, or influence over official tallies.
10.2 Cumulative public milestones
| Funding level | Intended cumulative result |
|---|---|
| $25,000 | Hardened infrastructure/recovery foundation, campaign website, continued public representative, initial Campaign Core, open-source baseline. |
| $50,000 | Campaign operating-system foundation: Hermes profiles, knowledge, goals, outreach, connectors, approvals, participation interfaces, public records. |
| $80,000 | KYN Trust Core and limited trusted-verifier pilot with challenge/recovery/privacy/abuse testing and published findings. |
| $110,000 | Verified polling, immutable manifests, separate constituencies, private authorization/ballots, receipts, deterministic tallies, public verifier. |
| $135,000 | Statewide hardening and independent legal/security/privacy/crypto/accessibility review with remediation. |
| $150,000 | Up to twelve active operations months plus incident, provider-change, scale, amendment, transition, and closeout reserve. |
These are program priorities, not donor-purchased features or automatically restricted subaccounts. Security and legal gates may change sequencing while the public ceiling remains fixed.
10.3 Party Party/FLA business-revenue lane
FLA/The Party Party may receive ordinary business revenue for general media, civic technology, memberships, merchandise, advertising, sponsorship inventory, education, events, and noncampaign clients. The solicitation and actual use must not earmark the money for campaign-specific infrastructure, communications, staff, polls, donor operations, or official campaign decisions.
Safer business wording: Membership supports The Party Party’s media, open civic-technology, education, and community work. It is not a contribution to the candidate committee and does not provide voting power, KYN status, campaign access, or official decision authority.
Unsafe wording: Fund the AI for Wisconsin campaign’s official Hermes, KYN, polling, or campaign server through this Patreon or corporate sponsor package.
10.4 Earmarking and actual use
A disclaimer cannot cure contradictory conduct. If FLA solicits or accepts money specifically to provide a campaign asset, the campaign benefit must be handled through a lawful campaign purchase, permissible volunteer activity, or authorized in-kind contribution. Corporate and foreign sources present particular risk. [S10][S14][S33]
Do not promise that a Party Party subscription percentage will finance the Committee unless a lawful, sourced, recorded transfer is separately established.
Do not use sponsor money to satisfy an FLA campaign milestone or operations month when the sponsor earmarked it for the campaign.
A general sponsor may support a public reusable release only under neutral terms with campaign-specific work separated.
The Committee’s later purchase from FLA must stand on its own contract and price, not a hidden sponsor subsidy.
10.5 Sponsorship and advertising
| Pattern | Status | Requirements |
|---|---|---|
| Sponsor buys standard Party Party ad inventory | GREEN/YELLOW | Published rate card, ordinary price, defined inventory, no campaign earmark or governance quid pro quo. |
| Sponsor supports general open-source civic technology available to all | YELLOW | Public terms, sponsor acknowledgement, campaign-specific separation, source/decision review. |
| Corporate sponsor pays for official campaign server, donor agent, ad, KYN poll, or FLA campaign milestone | RED in proposed form | Do not route prohibited campaign benefit through FLA. |
| Sponsor receives early private poll results, KYN graph access, or policy control | RED | Privacy, integrity, and quid-pro-quo risk. |
| Committee purchases ordinary ad/services from a vendor | GREEN/YELLOW | Campaign contract, attribution, source and reporting controls. |
10.6 Merchandise and subscriptions
Party Party-branded merchandise and commercial memberships belong to FLA’s lane.
Candidate/campaign-branded merchandise ordinarily belongs in the Campaign Committee fundraising lane.
Dual branding requires prospective ownership, inventory, fulfillment, IP/license, revenue, and campaign-benefit allocation.
Purchases/subscriptions never affect KYN, ballots, credentials, review priority, or campaign authority.
Applicable seller-permit, sales-tax, income-tax, and information-return duties require separate tax review. [S21][S22][S24]
10.7 Required system separation
| System | Required separation |
|---|---|
| Payment processors/banks | Campaign contributions and expenditures versus FLA Patreon/store/sponsor revenue. |
| Ledgers | Official campaign ledger and technology-program subledger versus FLA books. |
| CRM/email | Campaign donors/volunteers versus Party Party customers/patrons; cross-contact only with appropriate consent and classification. |
| Analytics | No joined profile connecting donations, purchases, KYN identity, ballots, or political answers. |
| Infrastructure | Separate tenants, databases, roles, keys, backups, logs, and retention authority as required by data class. |
| Public disclosures | Every checkout/page identifies operator, recipient, payment character, and whether the visitor is leaving a campaign surface. |
11. KYN, platform governance, collective decision-making, and system amendments
11.1 Four decision classes
| Class | Examples | Who may decide | Binding effect |
|---|---|---|---|
| Campaign compliance and administration | Contribution acceptance, refunds, reports, contracts, spending, disclaimers, donor systems. | Authorized campaign humans; no patron vote; foreign nationals excluded from election-related decision-making. | Binding on campaign only through authorized human action. |
| Campaign strategy and policy feedback | Issue priorities, messaging tests, policy preferences, public event topics. | KYN participants/public may advise under transparent manifests; authorized campaign leadership adopts or rejects. | Advisory unless a lawful internal campaign rule says otherwise; legal accountability remains human. |
| Party Party/FLA business governance | Product roadmap, content programming, open-source priorities, patron benefits. | FLA owner/authorized governance; patrons may vote within published scope. | Binding only as business governance; cannot direct campaign merely because patrons paid. |
| Personal decisions | KC's schedule, purchases, creative choices, lifestyle experiments. | KC may invite collective advice; personal/FLA funds and data only. | No campaign funds, donor privilege, or promise of official action. |
| KYN civic-platform governance | Credential policies, privacy rules, public APIs, audit methods, amendment proposals. | Defined constituencies under signed rules; no payment-based weight. | May change platform after security/legal review and authorized implementation; does not automatically change campaign law. |
11.2 No payment-based governance
Patronage may unlock commercial content, recognition, non-governance community features, or a voice in Party Party product feedback. It must not produce more votes, weighted votes, higher KYN assurance, priority credential review, immunity from challenge, privileged official campaign access, or a stronger claim on public decisions. The KYN design and this technology program require separation of identity, polling, rewards, commercial support, and campaign finance. [S23][S29]
11.3 Polls about changing the system
A platform-amendment poll must declare who is eligible, whether the result is advisory or binding within the project, quorum, separate constituencies, implementation review, and effective date.
A passed poll creates an implementation proposal, not an automatic code deployment or legal act.
Security, privacy, source eligibility, campaign law, and system integrity constraints cannot be bypassed by a simple majority.
Campaign adoption of a KYN platform amendment is a separate authorized campaign decision when the change affects campaign operations.
Paid status and campaign contribution history are never eligibility claims for civic governance.
11.4 Offloading KC's personal decisions
A public or patron-assisted decision system for KC's personal or creative choices can be part of Party Party media, provided the facts remain honest: the decision is personal/business, payments do not buy official influence, campaign resources and donor data are not used, and any costs are paid personally or by FLA. If the question becomes how campaign money is spent, how donations are solicited, what a campaign contract promises, or how official campaign systems operate, it moves into the campaign class and requires authorized human control.
11.5 If elected
The boundary becomes more demanding if KC assumes public office. Wisconsin's ethics guidance says state officials should not act officially in privately interested matters, use public position for private benefit, exchange influence for contributions, or use confidential information to receive value. State candidates and officials disclose employers, investments, commercial clients, associated organizations, real estate, and creditors through Statements of Economic Interests. [S19][S20]
Prepare a pre-office conflict and recusal policy for FLA, Party Party, KYN, sponsors, clients, and licensees.
Do not let a Party Party/KYN vote direct an official action where FLA or an associated organization has a financial interest without ethics review and appropriate recusal/authority controls.
Do not use public resources, nonpublic government data, staff, branding, or procurement to enrich FLA or patrons.
Consider independent governance, divestment, licensing at public/nonpreferential terms, or operational separation before inauguration.
11.6 Technology-budget and amendment polls
A public poll may recommend priorities or reallocations within the adopted $150,000 ceiling. It may not:
accept or spend campaign money;
bind the treasurer to an unlawful or unsupported transaction;
award work to FLA or another vendor automatically;
waive related-party, source, privacy, security, accessibility, or acceptance controls;
increase the public ceiling; or
convert donor/patron status into eligibility or weight.
A passed recommendation becomes a versioned change proposal. Authorized humans determine legality, available allocation, contracting, implementation, testing, and release; the disposition is published with reasons.
12. Common scenario matrix
| Scenario | Status | Operational answer |
|---|---|---|
| Committee publishes a $150,000 technology goal with the full allocation and related-party disclosure. | GREEN/YELLOW | Publish only after treasurer approval and campaign-finance review; contributions go to Committee, not FLA. |
| Campaign reaches $80,000 and immediately pays FLA $80,000. | RED | Fundraising progress is not acceptance or vendor entitlement. Pay only accepted milestones/active service months. |
| FLA completes M1 after the effective baseline and independent reviewer accepts the evidence. | YELLOW → GREEN | Treasurer may authorize up to the M1 amount under the SOW and ledger/reporting controls. |
| M3 is partly complete before contract effectiveness. | YELLOW | Freeze baseline; replace pre-complete value with additional prospective deliverables or reduce milestone price. |
| Committee uses $18,000 reserve to buy campaign-owned SSDs, UPS, hosting, APIs, backup, and security keys. | GREEN | Actual documented campaign purpose, ownership, inventory, security, and exit records required. |
| FLA buys mixed office Internet and asks campaign for 40%. | RED | No guessed mixed allocation. Use dedicated account, actual increment, defined service, or lawful in-kind treatment. |
| Committee pays an independent security firm from the $20,000 review reserve. | GREEN/YELLOW | Independent scope, conflict check, report, remediation/public summary; protect exploit details. |
| FLA selects and pays its own “independent” reviewer, then bills Committee. | YELLOW/RED | Independence compromised unless Committee controls selection/scope and the arrangement is reviewed. |
| Pilot reimburses travel for all participants under neutral rules. | GREEN/YELLOW | Actual support may be permissible; never condition on vote, credential approval, or political answer. |
| Pilot pays a bonus for approving identities or voting a preferred way. | RED | Corrupts verification/poll integrity and may create prohibited consideration. |
| Contingency pays for emergency provider migration after a documented incident. | GREEN/YELLOW | Written trigger/change record, cost approval, acceptance, and public-safe incident summary. |
| Community poll votes to increase technology goal to $220,000. | No automatic effect | Policy ceiling remains $150,000; Committee may defer/substitute work or separately reconsider only through formal legal/financial adoption, not automatic poll execution. |
| Campaign commissions an open-source release under a named license with reproducible builds. | YELLOW → GREEN | Valid deliverable when scope, baseline, pricing, rights, security review, and acceptance are documented. |
| Open-source volunteer submits generic accessibility fix. | GREEN | Public technical contribution; no campaign authority or guaranteed compensation. |
| Foreign contributor chooses official campaign fundraising strategy or budget priority. | RED | Election-related decision-making boundary; block and review. [S14] |
| Corporate Party Party sponsor asks that its money cover the official campaign’s FLA milestone. | RED | Earmarked campaign benefit from prohibited source cannot be routed through business. [S10][S33] |
| Party Party patron votes on general programming. | GREEN | Business/community governance only; no campaign/KYN/ballot authority. |
| Agent drafts a milestone acceptance report. | GREEN | Preparation only; human technical reviewer and treasurer make acceptance/payment decision. |
| Agent automatically publishes a public ledger including donor emails and KYN evidence. | RED | Public/restricted release gate and human approval required. |
| Committee sells campaign-branded merchandise through campaign processor. | GREEN/YELLOW | Ordinary campaign fundraising and reporting controls. |
| FLA sells Party Party merchandise and uses proceeds for general open civic tech. | GREEN/YELLOW | Business lane; no campaign earmark or hidden campaign transfer. |
| Campaign uses public generic code for free but pays FLA for deployment/operation. | GREEN/YELLOW | Public license and valuable service are separate; use SOW and acceptance. |
| Unused contingency remains at campaign closeout. | Campaign-controlled | It is not owed to FLA; handle under applicable campaign law and adopted closeout policy. |
13. Mandatory operating policy for AI agents and human participants
13.1 Agent system instruction
MUST: Before taking or recommending any action involving money, services, infrastructure, data, public communications, polling, donors, patrons, sponsors, or FLA, identify the responsible entity, campaign purpose, cost classification, source eligibility, required human approver, and record location.
MUST NOT: An agent must not execute a payment, refund, contract, contribution acceptance, reporting classification, related-party approval, sponsor commitment, data merge, official poll change, credential adjudication, or campaign-sensitive deployment without explicit authorized human approval.
13.2 Agent authority matrix
| Function | Agent may prepare | Agent may execute | Required control |
|---|---|---|---|
| Expense classification | Yes - propose code and reasons. | No final classification. | Treasurer approves; yellow issues held. |
| FLA SOW/invoice | Yes - draft/reconcile against adopted template. | No signature, acceptance, or payment. | Candidate request + independent evidence + treasurer approval. |
| Donor communication | Yes - draft/summarize/routinely send approved templates. | Only deterministic approved templates after acceptance status. | No eligibility inference; human review exceptions. |
| Contribution acceptance/refund | Yes - flag and recommend. | No. | Treasurer/authorized human executes. |
| Patron/sponsor intake | Yes - collect terms and screen for campaign earmark. | No binding acceptance of yellow/red sponsor. | FLA owner and compliance review. |
| Campaign communications | Yes - draft and validate required notices. | Only after approved content/template/audience. | Attribution and AI notice checks. |
| KYN credential/challenge | Yes - explain and prepare record. | Only deterministic low-risk actions; no adjudication by LLM. | Authorized reviewer and appeal path. |
| Poll manifest/tally | Yes - draft/test/summarize. | No opening, closing, rule change, or official tally publication. | Campaign Core + authorized human + signed audit. |
| Deployment | Yes - prepare change plan and tests. | Only within preapproved low-risk runbook; never campaign-sensitive policy change. | Named human deploy approver and rollback. |
13.3 Required agent log fields
| Field | Description |
|---|---|
| activity_id | Immutable unique identifier. |
| timestamp | UTC and local timestamp. |
| requestor | Human or service requesting action. |
| responsible_entity | CAMPAIGN, FLA_PARTY_PARTY, KYN, OPEN_SOURCE, REVIEWER, or PERSONAL. |
| campaign_or_poll_ref | Campaign task, SOW, poll manifest, or null. |
| purpose | Specific operational purpose. |
| classification_code | One Section 8 code, including technology-program category where applicable. |
| related_party | Boolean plus relationship. |
| source_eligibility_check | Not required / passed / hold / human-reviewed. |
| cost_basis | Direct amount, meter, FMV method, volunteer exclusion, or none. |
| data_domains | Donor, customer, KYN identity, ballot, public, or other. |
| human_approver | Named approver and timestamp; null only for allowed preparation. |
| artifacts | Links/hashes for SOW, invoice, receipt, communication, release, manifest, or audit. |
| result | Prepared, approved, executed, rejected, or held. |
13.4 Required agent escalation phrases
'This is a related-party Campaign Committee-to-FLA transaction. I have placed it on LEGAL_REVIEW_HOLD pending a written SOW, fair-market support, treasurer approval, and the applicable advisory decision.'
'This appears to be a mixed flat-rate cost that cannot presently be tied to actual campaign use. The campaign should not pay the proposed allocation.'
'This sponsor/patron payment is described as financing campaign-specific activity. It cannot be accepted through the FLA lane without campaign-finance review.'
'I cannot determine donor/source eligibility from the available facts. The payment must remain held for an authorized human review.'
'This proposed patron benefit would change voting, KYN, or campaign decision power. The feature is prohibited by project policy.'
'This contributor may be a foreign national or is participating in campaign-specific decision-making. The task is blocked pending eligibility review.'
13.5 Additional program-control log fields
| Field | Description |
|---|---|
| program_goal_version | Exact adopted funding-plan version. |
| allocation_code | TECH_IMPL_FLA, TECH_OPS_FLA, TECH_DIRECT_INFRA, TECH_INDEPENDENT_REVIEW, TECH_PILOT_COMMUNITY, or TECH_CONTINGENCY_AMENDMENT. |
| allocation_before / after | Authorized uncommitted capacity before and after the proposed action. |
| milestone_or_service_month | M0–M8, active operations month, or not applicable. |
| baseline_commit | Exact pre-effective baseline when related-party implementation is involved. |
| acceptance_authority | Technical reviewer and treasurer/payment authority, kept distinct. |
| public_release_class | Public approved/redacted, embargoed security, restricted, privileged, or third-party restricted. |
| canonical_policy_version | Exact policy commit/tag governing the action. |
13.6 Public-source rule for agents
An agent SHALL cite the canonical policy/control version used for a consequential recommendation. If its available policy is stale, conflicting, unofficial, or missing a required profile value, it must stop execution, state the discrepancy, and request human resolution. Agent memory and conversation history never supersede the adopted repository.
14. Required workflows
14.1 Adopt or amend this public policy
Open a versioned public change with rationale and affected controls.
Classify financial, legal, security/privacy, KYN/polling, accessibility, campaign-specific, and restricted impacts.
Obtain required human and external review.
Update policy, implementation profile, machine-readable controls, changelog, and public/restricted migration notes.
Candidate and treasurer adopt the exact commit/tag as applicable.
Publish the release manifest and effective date.
Update agents and services; verify stale versions fail closed for protected operations.
14.2 Campaign purchase from FLA
Create a campaign need/change statement tied to the adopted program and allocation.
Confirm the frozen baseline and that the deliverable is prospective.
FLA prepares the milestone/service packet, pricing support, data/security/IP effects, and invoice draft.
Independent reviewer verifies evidence; candidate may confirm technical facts but is not sole financial approver.
Treasurer reviews purpose, source, conflict, price, allocation, obligation/reporting, and advice conditions.
Record obligation before execution where required.
FLA delivers; reviewer records acceptance/rejection/conditions.
Treasurer authorizes payment only within accepted amount and allocation.
Publish public-safe scope, status, amount, evidence digest, and credits; retain protected packet privately.
14.3 Implementation milestone acceptance
Verify required acceptance package against Schedule F.
Confirm code/artifact/policy/model/dependency versions and environment.
Run required tests, negative paths, security/privacy checks, accessibility journeys, and restore/audit verification.
Identify defects, exceptions, residual risk, and whether deliverable is independently useful.
Record ACCEPTED, CONDITIONALLY_ACCEPTED, REJECTED, or SUPERSEDED.
Payment may not exceed the accepted value; rejected/uncured work is not due.
14.4 Managed operations month
Treasurer activates exact service inventory and month.
FLA operates only authorized services/accounts/data.
FLA records availability, deployments, backup/restore status, incidents, security maintenance, direct costs, and unresolved risks.
Committee verifies material service delivery and any credits/suspension.
Treasurer accepts and pays up to $1,000 for the active month.
Publish monthly public-safe operations summary.
14.5 Direct infrastructure/provider purchase
Identify asset/provider, campaign purpose, allocation, owner, account, data class, and exit plan.
Prefer Committee ownership and direct payment.
Obtain prospective approval and provider invoice/terms.
Inventory asset/account, credentials custodian, backup/retention, and public-disclosure level.
Reconcile actual cost; no guessed FLA overhead or hidden markup.
14.6 Independent review
Committee defines scope and selects reviewer independently of FLA.
Reviewer discloses conflicts, methodology, deliverables, access, confidentiality, and publication plan.
Committee contracts/pays from review allocation where practical.
FLA supplies evidence but cannot edit conclusions.
Findings receive severity, owner, remediation, retest, and public-safe summary.
14.7 Contingency or system amendment
Record trigger and why existing scope/allocation is insufficient.
Define exact change, price, source, vendor, risks, removed/substituted work, and remaining capacity.
Obtain technical, privacy/security, legal/financial, and accessibility review as applicable.
Treasurer approves written change order inside the $150,000 ceiling.
Implement/test/accept; publish public-safe amendment and budget effect.
14.8 Volunteer or in-kind service
Identify person/source, activity, dates, campaign specificity, and compensation.
Determine whether a statutory volunteer/Internet exclusion applies or whether the benefit is in-kind.
For a clear exclusion, document facts and no-specific-compensation representation.
For in-kind support, obtain prior consent, written details, fair-market value, attribution, and campaign record. [S6][S7]
Do not use volunteer classification to evade an FLA milestone, paid worker, or prohibited source.
14.9 Sponsor/patron intake
Record payer/entity, country/source indicators, amount, requested benefits, and restrictions.
Ask whether funds are earmarked for campaign assets, messages, staff, polls, donor systems, FLA milestones, operations, or election-related decisions.
If yes/ambiguous, hold and do not accept through the business lane.
Match lawful business sponsors to published Party Party inventory/rates.
Prohibit campaign/KYN/ballot/data/governance privileges.
If campaign later purchases a service, use a separate ordinary campaign contract without sponsor earmark.
14.10 Open-source release
Inventory source, licenses, Background IP, dependencies, secrets, data, security findings, and campaign-specific configuration.
Run secret/PII/license/security scans and reproducible build/tests.
Classify each artifact public/restricted.
Approve public release, tag commit, generate SBOM/release manifest/digest, and publish docs/verifier tools.
Archive restricted release evidence and record public correction/security-reporting process.
14.11 Shared infrastructure
Identify owner, payer, administrator, tenants, allocation, and data classes.
Create separate identities, networks, databases, keys, backups, logs, and access lists where required.
Classify as dedicated, metered, managed service, volunteer/in-kind, or unallocable mixed cost.
Do not allocate flat cost by prediction.
Establish incident, restore, export, termination, and asset-disposition procedures.
Review quarterly and upon material use/entity change.
15. Templates and minimum records
15.1 Related-party full-system SOW
Must identify: exact parties; campaign purpose; non-retroactive baseline; full workstreams; milestone ceiling/schedule; operations ceiling/service inventory; Committee-held reserves; direct-cost rules; exclusions; acceptance; conflict/independent review; data/security/privacy; IP/licenses; public release; transition; termination; conditions precedent; and signatures.
15.2 Milestone delivery and acceptance packet
milestone ID, scope, amount, obligation reference, baseline, and delivery date;
exact code/artifact/policy/model/dependency versions and digests;
acceptance criteria and evidence index;
test/security/privacy/accessibility/restore/audit results;
known defects, exceptions, residual risks, and remediation;
public/restricted classification;
technical reviewer decision;
treasurer financial acceptance/payment decision; and
public-safe milestone summary URL/digest.
15.3 Monthly operations record
active service month and inventory;
service availability/interruptions;
deployments and changes;
backup age, restore verification, certificate/credential status;
incidents, containment, remediation, and disclosure status;
direct provider costs and credits;
unresolved risks and recommended changes;
service acceptance/credit; and
public-safe operations summary.
15.4 Invoice
Include invoice number/date, exact parties/addresses, SOW and obligation reference, milestone/service period, specific purpose, accepted amount, actual approved direct costs with evidence, credits, prior payments, remaining balance, allocation code, and certification that no personal/FLA-only or pre-effective costs are included.
15.5 Public technology-program ledger record
Include: program version; $150,000 ceiling; category maximums; obligations/payments/credits; uncommitted balances; milestone/service status; direct-cost categories; review/pilot status; reserve draws; release/audit links; public-withholding reason; and correction history.
15.6 Public release manifest
Include: policy/repository/release identifiers; commit/digest; license/NOTICE; SBOM; build/test evidence; adoption/approval; data/security classification; known limitations; superseded release; and verification instructions.
15.7 Restricted companion register
Record protected artifact ID, classification, purpose, custodian, authorized roles, encryption/key boundary, retention, backup, legal hold, deletion, public summary, and audit access. Never place raw secrets or protected data in the public policy repository.
15.8 Organizational transfer record
Whenever FLA/KYN work, data, account, asset, or infrastructure becomes campaign-controlled, record source/destination, exact asset/service/data, purpose, rights, value/payment or in-kind treatment, source eligibility, approver, security/privacy review, export/termination, and public disclosure.
15.9 Sample disclosures
Program relationship: AI for Wisconsin is operated through the Korey Streich Campaign Committee. Five Letter Agency, owned by candidate Korey Streich, is a disclosed related-party technical vendor. The Committee’s $150,000 technology goal is a maximum program budget, not an automatic payment to Five Letter Agency. FLA may receive up to $72,000 for accepted implementation milestones and up to $12,000 for activated managed operations; other funds remain Committee-controlled for direct costs, independent review, pilots, and contingency.
Party Party relationship: The Party Party is a commercial media and civic-technology project operated through Five Letter Agency. Payments to The Party Party are not campaign contributions and do not provide KYN status, civic votes, campaign policy authority, or preferential access to official decisions.
Leaving-site notice: You are leaving a Campaign Committee website and entering a separately operated Five Letter Agency/The Party Party service. Payments there are not contributions to the Korey Streich Campaign Committee.
KYN poll disclosure: Operator: [exact KYN operator]. Sponsor: [exact organization]. Funding source: [Committee payment / FLA general civic program / other]. Participation is free. Donation, purchase, subscription, patron, Party Favors, and engagement status do not change eligibility or vote weight. Poll class: [open sentiment / verified nonrepresentative consultation / advisory / determining within stated project authority].
16. Stop and escalation triggers
| Trigger | Immediate action |
|---|---|
| First Campaign Committee obligation or payment to FLA under the full-system program | Do not obligate/pay until frozen baseline, SOW schedules, independent acceptance structure, treasurer approval, and required Wisconsin advice/counsel review. |
| FLA office rent or shared-space charge | Do not charge until Wisconsin advice addresses exact commercial-space facts. |
| FLA entity changes from sole proprietorship | Freeze in-kind/vendor assumptions; review LLC/corporate tax status and prohibited-source rules. |
| Corporate/union/association/tribal sponsor touches campaign-specific work | Reject or isolate; obtain campaign-finance review. [S10] |
| Foreign national may fund or direct campaign work | Block campaign-specific payment/decision access; obtain review. [S14] |
| Mixed flat-rate subscription, office, hardware, phone, or server allocation | Do not pay percentage; dedicate/meter/redesign. [S9] |
| Patron or sponsor requests campaign policy or KYN advantage | Reject benefit and document request. |
| Agent proposes accepting/refunding money or changing official rules | Require authorized human; preserve audit trail. |
| Campaign and FLA data are proposed to be joined | Privacy/security hold; define purpose and legal basis; default deny. |
| Payment or obligation cannot be described specifically in a public report | Do not execute until scope/purpose is clarified. |
| Proposed FLA payment exceeds $72,000 implementation or $12,000 operations ceiling | Stop; no payment without formal program amendment inside the $150,000 ceiling and required review. |
| Proposed total technology commitments exceed $150,000 | Stop; defer, substitute, reduce, or de-scope. Public poll or agent cannot override ceiling. |
| FLA seeks infrastructure/review/pilot/contingency funds without separate approved deliverable | Reject or issue prospective change order with independent review. |
| Milestone includes material pre-effective work | Rebaseline, replace with prospective value, or reduce payment. |
| “Independent” reviewer is controlled by FLA or candidate without safeguards | Hold and restructure selection/scope/payment. |
| Public release contains donor/KYN/ballot/secret/privileged/exploit-sensitive material | Stop publication, contain, classify, and initiate incident/correction workflow. |
| Canonical policy/control version is missing or stale | Protected execution fails closed pending version resolution. |
17. Questions for Wisconsin Ethics Commission advice or qualified counsel review
The Commission accepts requests about matters to which the requestor is or may become a party, and written requests/replies are confidential unless the requestor makes them public. [S12] The request should provide the exact facts, registered committee, FLA sole-proprietor status, full funding plan/SOW, baseline procedure, milestone schedule, operations model, open-source plan, infrastructure facts, and disclosures.
May the Campaign Committee purchase the described full open civic operating system, KYN, polling, website, infrastructure, open-source release, and managed operations from the candidate’s sole proprietorship under the proposed milestone/acceptance/conflict controls?
Is the proposed $72,000 fixed implementation ceiling and $12,000 operations ceiling appropriately structured, and what additional fair-market, reporting, or approval evidence should be maintained?
How should pre-effective development be classified when the contract pays only for prospectively defined remaining/replacement deliverables?
How should the Committee report obligations and milestone payments, including a milestone partly rejected, reduced, credited, or replaced?
May the Committee publicly solicit toward a $150,000 technology-program ceiling using the proposed allocation/milestone language, and what additional disclaimer or attribution is required?
What valuation/reporting method applies when campaign-funded work is released under a public license and FLA or others may reuse it?
How should campaign-specific hosting/API/provider use inside an FLA master account be valued when actual usage is metered, and when should accounts be Committee-owned?
May the Committee purchase a managed service running on FLA-owned general infrastructure without separately reimbursing mixed hardware/office/Internet costs?
May the Committee rent a specifically defined campaign-only nonresidential area controlled by FLA, and what documentation is required?
How does the individual Internet-activity exclusion apply to KC’s own uncompensated use of existing agent tools, and when does the activity become an FLA vendor service or in-kind contribution?
How should free/discounted KYN service, community contributions, or generic open-source work be treated when the campaign receives a campaign-specific benefit?
What controls are required when Party Party receives subscriptions/sponsorships while FLA separately contracts with the Campaign Committee?
What attribution/disclosure applies to Party Party communications coordinated with the campaign and to paid KYN polling?
How would the analysis change if FLA becomes an LLC/corporation or engages subcontractors?
Are there additional restrictions or reporting requirements for Committee-funded participant/pilot support, translation, travel, or in-person identity verification?
18. Implementation and publication checklist
18.1 Before open-source publication of this policy
Confirm title, policy ID, version, SPDX identifier, copyright/attribution, and canonical repository.
Add LICENSE, NOTICE, CONTRIBUTING, SECURITY, CODE_OF_CONDUCT, changelog, adoption record, profile, and controls files.
Remove secrets, personal data, signatures, tax/bank information, private legal communications, restricted KYN/ballot records, and sensitive topology.
Validate all public links and source dates.
Map every normative MUST control to a machine-readable control ID.
Candidate/treasurer approve the exact public release; record digest and effective date.
18.2 Before publishing the $150,000 fundraising goal
Treasurer approves allocation, no-upward-revision rule, public milestones, and related-party disclosures.
Obtain written Wisconsin Ethics Commission advice or qualified campaign-finance counsel review.
Confirm contribution limits, prohibited-source controls, processor settings, reporting status, and recordkeeping. [S10][S17][S32][S33]
Publish Funding Plan, program relationship disclosure, privacy/security limitations, and no-pay-to-govern language.
Ensure contribution page pays the Campaign Committee, not FLA/Party Party.
18.3 Before the full-system SOW becomes financially effective
Freeze and sign Schedule A baseline/Background IP inventory.
Complete SOW schedules, milestone evidence, operations inventory, asset/provider ownership, and direct-cost rules.
Treasurer independently approves relationship, scope, values, obligations, and acceptance process.
FLA provides vendor/tax records; campaign establishes ledger/report workflow.
Identify technical, financial, privacy, security, accessibility, and legal reviewers.
Confirm no pre-effective work is being billed and any already-complete milestone value is replaced/reduced.
18.4 Before each implementation milestone payment
Confirm milestone remained within prospective scope and category capacity.
Review exact acceptance evidence, versions/digests, defects, exceptions, and residual risks.
Separate technical confirmation from financial approval.
Record acceptance/rejection/credit and update obligation.
Publish public-safe milestone/payment record after privacy/security review.
18.5 Before each managed operations payment
Confirm written activation and service inventory.
Review monthly operations report, outages, backups, deployments, incidents, direct costs, credits, and unresolved risks.
Confirm no full suspension/termination and no double payment for included stabilization.
Publish public-safe summary.
18.6 Before first KYN campaign poll
Adopt signed poll manifest identifying operator, sponsor, funding, class, eligibility, separate tallies, effect, privacy, challenge, and audit.
Separate KYN identity/evidence from authorization, ballots, and political answers.
Exclude donation, purchase, patron, Party Favors, and engagement status from vote weight/assurance.
Complete accessibility, abuse, recovery, insider, correlation, and deterministic tally tests.
No monetization or advertising upsell in voting flow.
Authorized humans approve opening/closing/publication; public verifier reproduces result. [S23]
18.7 Quarterly and release review
Reconcile official campaign ledger, program subledger, FLA books/invoices, provider records, asset inventory, SOW obligations, and public ledger.
Review unaccepted milestones, vendor debt, credits, reserve capacity, reallocation, and no-upward-revision compliance.
Review agent permissions, canonical policy version, source eligibility, foreign-national boundary, and access logs.
Audit shared costs and provider ownership back to actual evidence.
Review public disclosures, attribution/synthetic-media notices, KYN/poll manifests, licenses, SBOMs, and security advisories.
Review entity status, sponsors, subcontractors, clients, conflicts, and candidate/public-office transition risk.
Publish changelog and public-safe quarterly status.
19. Source notes and authority hierarchy
Primary reliance is placed on Wisconsin statutes, administrative rules, and Wisconsin Ethics Commission guidance. FEC materials are used only where federal law directly applies (foreign-national restrictions) or are explicitly labeled as nonbinding federal analogies. Tax notes are limited and require separate tax review. Source links were reviewed for this Version 2.0 draft on July 25, 2026. Public maintainers should revalidate current law and official guidance before each adopted release.
[S1] Wis. Stat. § 11.0101 - Definitions, including contributions, volunteer services, Internet activity, disbursements, and obligations. https://law.justia.com/codes/wisconsin/chapter-11/section-11-0101/
[S2] Wis. Stat. § 11.0202 - Candidate committee required; campaign financial activity generally must occur through the registered committee. https://law.justia.com/codes/wisconsin/chapter-11/section-11-0202/
[S3] Wis. Stat. § 11.0204 - Candidate committee reporting of contributions, disbursements, and obligations; itemization requirements. https://law.justia.com/codes/wisconsin/chapter-11/section-11-0204/
[S4] Wis. Stat. § 11.1104 - Unlimited candidate contributions from the candidate's personal funds or property. https://law.justia.com/codes/wisconsin/chapter-11/section-11-1104/
[S5] Wis. Stat. § 11.1105 - Fair-market valuation of contributed property and services. https://law.justia.com/codes/wisconsin/chapter-11/section-11-1105/
[S6] Wis. Stat. § 11.1113 - Sole-proprietorship contributions are treated as contributions by the proprietor. https://law.justia.com/codes/wisconsin/chapter-11/section-11-1113/
[S7] Wis. Admin. Code ETH 1.20 - Authorization, valuation, timing, and written records for in-kind contributions. https://www.law.cornell.edu/regulations/wisconsin/Wis-Admin-Code-SS-ETH-1-20
[S8] Wis. Stat. § 11.1208 - Prohibition on strictly personal campaign disbursements and obligations; foreign-national rule incorporated. https://law.justia.com/codes/wisconsin/chapter-11/section-11-1208/
[S9] Wisconsin Ethics Commission, Formal Opinion 2025 ETH 02 - Mixed personal/campaign computer and phone costs; campaign-only devices allowed, mixed flat costs rejected. https://ethics.wi.gov/Resources/20250805%20Open%20Session%20Materials.pdf
[S10] Wisconsin Ethics Commission - Prohibited Contributions, including corporate and foreign-national sources. https://ethics.wi.gov/Pages/CampaignFinance/ProhibitedContributions.aspx
[S11] Wisconsin Ethics Commission - Attribution/Disclaimer Requirements. https://ethics.wi.gov/Pages/CampaignFinance/AttributionRequirements.aspx
[S12] Wisconsin Ethics Commission - Requests for Advice; written requests and replies are confidential unless the requestor makes them public. https://ethics.wi.gov/Pages/Resources/RequestAdvice.aspx
[S13] Wis. Stat. § 11.1303 - Attribution and Wisconsin synthetic-media disclosures for certain AI-generated political communications. https://law.justia.com/codes/wisconsin/chapter-11/section-11-1303/
[S14] Federal Election Commission - Foreign nationals; federal prohibition applies to federal, state, and local election contributions and election-related decision-making. https://www.fec.gov/help-candidates-and-committees/foreign-nationals/
[S15] Federal Election Commission - Personal use and candidate-owned office rental. Included only as a federal analogy, not Wisconsin authority. https://www.fec.gov/help-candidates-and-committees/making-disbursements/personal-use/
[S16] Federal Election Commission - Use of corporate facilities and resources. Included only as a federal analogy for ordinary commercial terms. https://www.fec.gov/help-candidates-and-committees/making-disbursements/using-corporate-labor-facilities-resources/
[S17] Wisconsin Ethics Commission - Limited Activity Reporting Exemption; contributions, disbursements, debts, obligations, and candidate funds count toward the threshold. https://ethics.wi.gov/Pages/CampaignFinance/Exemption.aspx
[S18] Wisconsin Ethics Commission - Sunshine reports and transaction data are public after filing. https://ethics.wi.gov/Pages/CampaignFinance/ViewReports.aspx
[S19] Wisconsin Ethics Commission - Standards of Conduct for state and local officials. https://ethics.wi.gov/Pages/Ethics/StandardsOfConduct.aspx
[S20] Wisconsin Ethics Commission - Statements of Economic Interests disclose employers, investments, real estate, commercial clients, associated organizations, and creditors. https://ethics.wi.gov/Pages/Ethics/StatementsOfEconomicInterests.aspx
[S21] Internal Revenue Service - Crowdfunding receipts may be taxable depending on facts; maintain complete records. https://www.irs.gov/newsroom/irs-reminds-taxpayers-of-important-tax-guidelines-involving-contributions-and-distributions-from-online-crowdfunding
[S22] Wisconsin Department of Revenue - Occasional-sale exemption and seller's-permit threshold for taxable products and services. https://www.revenue.wi.gov/Pages/FAQS/Occasional-Sale-Exemption-QA.aspx
[S23] AI for Wisconsin Know Your Neighbor investigation and implementation-planning report, July 25, 2026. KYN_Pro_Investigation_2026-07-25.md
[S24] Internal Revenue Service - 2026 information-return rules; the general Form 1099-NEC threshold for reportable nonemployee service payments made in 2026 is $2,000. https://www.irs.gov/businesses/small-businesses-self-employed/am-i-required-to-file-a-form-1099-or-other-information-return
[S25] Wisconsin Sunshine official registrant page for Korey Streich Campaign Committee, registrant locator 1148727. https://campaignfinance.wi.gov/browse-data/registrant/1148727
[S26] AI for Wisconsin campaign site and FAQ identify the registered committee as Korey Streich Campaign Committee. https://www.ai-for-wi.com/ https://www.ai-for-wi.com/faq
[S27] U.S. Bureau of Labor Statistics - occupational wage information used only as general pricing context, not a legal fair-market valuation. https://www.bls.gov/ooh/computer-and-information-technology/software-developers.htm
[S28] AI for Wisconsin technical baseline - USPartyParty/ai-for-wisconsin-agent: public architecture, implementation status, implementation plan, acceptance criteria, and office transition materials. The repository defines Hermes as the runtime, Campaign Core as deterministic authority, public/restricted repository boundaries, and a system not yet fully accepted for production.
[S29] AI for Wisconsin Full Technology Program Funding Plan - $150,000 maximum campaign goal, July 25, 2026. AI4WI_Full_Technology_Program_Funding_Plan_150K_2026-07-25.md
[S30] Statement of Work No. 001 - Revision B: Complete AI for Wisconsin Open Civic Operating System, KYN, public website, verifiable polling, infrastructure, open-source release, and managed operations, July 25, 2026. AI4WI_FLA_SOW_001_REV_B_Full_Civic_Operating_System_2026-07-25.md
[S31] Creative Commons Attribution 4.0 International license. It permits sharing and adaptation for any purpose, including commercially, subject to attribution and indication of changes. https://creativecommons.org/licenses/by/4.0/
[S32] Wisconsin Ethics Commission - Contribution Limits. Current official page lists a $20,000 cumulative individual limit for Governor candidate committees. https://ethics.wi.gov/Pages/CampaignFinance/ContributionLimits.aspx
[S33] Wisconsin Ethics Commission - Prohibited Contributions. Corporations, associations, labor unions, and American Indian tribes may not contribute to candidate committees; committees may accept contributions only from U.S. citizens and permanent residents under the foreign-national rule. https://ethics.wi.gov/Pages/CampaignFinance/ProhibitedContributions.aspx
Appendix A. One-page operating reference
| Question | Default answer |
|---|---|
| What is the public technology goal? | Maximum $150,000 campaign technology-program ceiling; not automatic expenditure. |
| What can FLA receive? | Up to $72,000 for accepted M0–M8 implementation milestones and $12,000 for up to twelve activated operations months. |
| Who controls the other $66,000? | Campaign Committee for direct infrastructure/providers, independent review, pilots/community operations, and contingency/amendments. |
| Does reaching a funding milestone authorize spending? | No. Every obligation/payment still needs scope, authority, source, acceptance, and records. |
| Can the goal increase later? | Not under this program policy; use reserve/reallocation/substitution/deferral or classify work outside scope. |
| Can the Committee pay FLA? | Potentially for bona fide prospective services under related-party controls and required advice/review. |
| Can prior development be invoiced? | Not retroactively. Freeze baseline; classify prior benefit; pay only prospective remaining/replacement deliverables. |
| Can campaign pay to open-source work? | Yes when exact public release is a documented campaign deliverable with rights, security, pricing, and acceptance. |
| Can campaign reimburse shared FLA office/server/Internet percentages? | No guessed flat allocation. Use Committee-owned/dedicated/metered resource, defined service, lawful in-kind, or obtain advice. |
| Can agents approve payments or polls? | No. Agents prepare/validate; designated humans and deterministic services execute within authority. |
| Can donors/patrons get more governance power? | Never. No purchase-based vote, credential, KYN, review, or campaign authority. |
| What is public? | Policy, budgets, milestone definitions/status, payments, code, methods, audit summaries. |
| What stays restricted? | Donor/source evidence, KYN identity/relationships, ballot selections, secrets, privileged advice, exploit-enabling security details. |
| How is the policy changed? | Public versioned proposal + required reviews + candidate/treasurer adoption of exact release. |
Appendix B. Public program budget and milestone register
B.1 Allocation ceiling
| Category | Ceiling |
|---|---|
| FLA implementation | $72,000 |
| FLA managed operations | $12,000 |
| Infrastructure/providers | $18,000 |
| Independent review | $20,000 |
| Pilot/community operations | $8,000 |
| Contingency/amendments | $20,000 |
| Total | $150,000 |
B.2 Public cumulative milestones
| Funding | Result |
|---|---|
| $25,000 | Public foundation and infrastructure/recovery baseline |
| $50,000 | Campaign operating-system foundation |
| $80,000 | KYN trust core and trusted-verifier pilot |
| $110,000 | Verified polling and public audit |
| $135,000 | Statewide hardening and independent review |
| $150,000 | Operations, transition, and no-upward-revision reserve |
B.3 Implementation payment ceiling
| ID | Amount |
|---|---|
| M0 | $4,000 |
| M1 | $8,000 |
| M2 | $9,000 |
| M3 | $9,000 |
| M4 | $8,000 |
| M5 | $10,000 |
| M6 | $9,000 |
| M7 | $9,000 |
| M8 | $6,000 |
| Total | $72,000 |
Appendix C. Transaction and program-ledger minimum schema
| Field | Rule/example |
|---|---|
| transaction_id | Immutable identifier, e.g. AIWI-2026-000123. |
| program_version | Exact adopted funding plan/policy. |
| allocation_code | One Section 8 code. |
| allocation_before / after | Authorized uncommitted capacity. |
| obligation_date | Date promise/contract arose, not merely payment date. |
| payment_date | Null until paid. |
| service_period | Exact dates or milestone. |
| payer_entity / payee_entity | Exact names and addresses. |
| beneficial_entity | Primary beneficiary. |
| specific_purpose | Public-report-ready description. |
| related_party | Yes/no and relationship. |
| amount_type | Cash, actual direct cost, metered, FMV, credit, estimate pending actual. |
| allocation_method | Milestone, active month, dedicated asset, actual usage, or not applicable. |
| baseline_commit | Required for prospective FLA implementation. |
| rate_price_support | SOW, rate card, comparable, provider invoice, cost build-up, advisory reference. |
| source_eligibility | Passed/hold/not applicable and reviewer. |
| technical_acceptance | Reviewer, status, date, evidence digest. |
| financial_approval | Treasurer/authorized approver and date. |
| artifacts | SOW, invoice, receipt, release, test, audit, public summary links/hashes. |
| data_domains | Campaign, donor, Party Party, KYN, ballot, public, security, legal. |
| release_class | Public approved/redacted, restricted, privileged, embargoed. |
| reporting_status | Period/transaction ID or exemption record. |
| corrections | Append-only credit/amendment/dispute history. |
Appendix D. Open-source repository and release checklist
ai4wi-business-operations-policy/
├── README.md
├── LICENSE.txt
├── NOTICE.md
├── CONTRIBUTING.md
├── SECURITY.md
├── CODE_OF_CONDUCT.md
├── CHANGELOG.md
├── policy/
│ ├── AIWI-OPS-001.md
│ ├── implementation-profile.yaml
│ ├── controls.yaml
│ └── ADOPTION.md
└── examples/
├── milestone-acceptance-template.md
├── monthly-operations-template.md
├── public-ledger-template.csv
└── restricted-register-template.csv
Release gate:
no secrets/PII/restricted records;
license/notice complete;
profile and controls validate;
source links checked;
changelog/adoption/digest complete;
public/restricted classification reviewed;
agents updated to exact release;
public rendering matches source.
Appendix E. AI for Wisconsin implementation profile
| Variable | Adopted draft value |
|---|---|
| campaign_committee_name | Korey Streich Campaign Committee |
| campaign_registrant_id | 1148727 |
| candidate_name | Korey “KC” Streich |
| related_party_vendor | Five Letter Agency, sole proprietorship of Korey Streich |
| commercial_civic_project | The Party Party |
| campaign_public_identity | AI for Wisconsin |
| kyn_operator | Five Letter Agency / The Party Party, under separate trust/data boundary |
| campaign_domain | ai-for-wi.com and approved aliases |
| party_party_domain | uspartyparty.com when activated |
| program_ceiling | $150,000 |
| fla_implementation_ceiling | $72,000 |
| fla_operations_ceiling | $12,000 / 12 active months |
| direct_infrastructure_ceiling | $18,000 |
| independent_review_ceiling | $20,000 |
| pilot_community_ceiling | $8,000 |
| contingency_ceiling | $20,000 |
| policy_license | CC BY 4.0 |
| canonical_repository | To be designated before adoption |
| treasurer | Restricted/adoption record; public name only where already officially disclosed |
| effective_date | Not set until adoption |
Fork maintainers should replace this profile and reassess every jurisdiction-specific legal source.
Appendix F. Control registry summary
The companion controls.yaml is the machine-readable source for agents and automated checks. Minimum control families:
| Family | Purpose |
|---|---|
| ORG-* | Entity, authority, and data-boundary separation |
| BUD-* | $150,000 ceiling, allocations, reallocation, no-upward-revision |
| RPT-* | Related-party scope, baseline, pricing, acceptance, payment |
| OSS-* | Public source, licensing, release, contribution, security disclosure |
| DAT-* | Donor/KYN/ballot/customer separation and release classification |
| AGT-* | Agent prepare/execute boundaries and canonical-policy enforcement |
| KYN-* | Identity/credential/attestation/challenge separation |
| POL-* | Poll manifests, separate tallies, deterministic audit, no pay-to-vote |
| OPS-* | Infrastructure, operations months, backups, incidents, transition |
| REV-* | Independent review and remediation independence |
| PUB-* | Public ledger, disclosures, changelog, adoption, corrections |
Every control has: ID, statement, severity, owner, evidence, execution rule, public/restricted classification, and source section.
| AIWI-OPS-001 v2.0.0 | Public draft | July 25, 2026 | | | :---- | :---- |