What invariants preserve environmental coupling that cannot be undone?

**Date of Record:** 2026 October 27 **Scope:** Applies when an agentic session interacts with an environment (physical, biological, or social system) such that the interaction changes the environment irreversibly, and the change alters subsequent interactions—the session's future actions are constrained by the environment it modified, and the modification cannot be undone. Does not apply to strictly isolated environments or interactions that leave no lasting state.

Core Distinction

The separation between **interaction isolation** (the session's actions affect only its own state) and **environmental coupling** (the session's actions become part of the environment and constrain future interactions). Relying on isolation creates the **One-Way Door Assumption**: the session acts as if it can always act again from the current state, but its action has modified the environment, and the current state is no longer the state it thought it was in.

What Was Observed

In environment-interacting agent architectures, failing to account for irreversible environmental coupling produces three primary failure modes:

  1. **Compounding State Contamination:** The session leaves a trace in the environment (a deployed resource, a written record, a consumed input) that is observed by subsequent actors and influences their behavior, cascading the session's influence beyond its direct actions.
  2. **Availability Assumption Violation:** The session assumes inputs or states are still available after acting on them, but its own consumption or modification has changed availability. The session attempts the same action twice, and the second attempt uses a different environment.
  3. **Unrecoverable Branch Commitment:** The session takes an action that forecloses alternative branches (accepts a contract, deploys an irreversible configuration, or seeds a divergent state). The commitment cannot be undone, but the session's planning still considers the alternative branches as viable.

Recorded Elements

  1. **`environmental-coupling-receipt`:** For each action, the exact environmental modifications it made (what was changed, in what system, with what durability), so coupling is explicit.
  2. **`irreversibility-classification-signature`:** For each environmental modification, its reversibility class (`REVERSIBLE`, `COMPENSABLE_WITH_COST`, `IRREVERSIBLE`), so the session knows what it cannot undo.
  3. **`irreversibility-branch-commitment-receipt`:** For commitments that foreclose future branches, the exact branches foreclosed and the cost of any alternative path, so the session knows its option space after commitment.
  4. **`post-modification-environment-receipt`:** After modifications, the exact environment state (as distinct from the pre-modification state), so the session reasons about the actual current state, not the state it remembers.

Condition of Validity

* **Applies when:** The session's actions modify the environment irreversibly, and subsequent interactions depend on the modified environment. * **Does not apply when:** Environmental modifications are strictly reversible (rollback available), or the session's actions affect only its own state.

Decision Boundary

  1. **Does the session's action modify the environment?** If no, standard action handling applies. If yes, proceed.
  2. **Is the modification reversible?** If reversible, standard action handling applies. If irreversible, proceed.
  3. **Is the `irreversibility-branch-commitment-receipt` recorded?** If yes, the foreclosed branches are known. If no, the session may plan against closed branches.
  4. **Conversely, when can the session act irreversibly without committing accounting?** Only when the irreversible action's consequences are fully within the session's prediction and evaluation capability (no surprises), or the action is strictly isolated (no future interactions with the modified environment).

Operational Effect

  1. **One-Way Door Awareness:** Irreversible modifications are treated as commitments, not routine actions.
  2. **Branch Commitment Integrity:** Foreclosed branches are removed from planning.
  3. **Environment State Honesty:** Subsequent reasoning uses the actual current state.
from dataclasses import dataclass
from enum import Enum, auto
import hashlib
import json

class EnvironmentalVerdict(Enum):
    ISOLATED_ACTION = auto()
    REVERSIBLE_MODIFICATION = auto()
    IRREVERSIBLE_COMMITMENT_TRACKED = auto()
    UNTRACKED_IRREVERSIBLE = auto()

@dataclass(frozen=True)
class EnvironmentalAction:
    action_id: str
    modifies_environment: bool
    is_reversible: bool
    forecloses_branches: tuple[str, ...]
    branch_commitment_documented: bool
    post_action_state_hash: str | None

@dataclass(frozen=True)
class EnvironmentalPolicy:
    require_commitment_for_branch_foreclosure: bool

@dataclass(frozen=True)
class EnvironmentalManifest:
    verdict: EnvironmentalVerdict
    directive: str
    manifest_digest: str

class IrreversibleCouplingGuard:
    @staticmethod
    def _hash(data: str) -> str:
        return hashlib.sha256(data.encode("utf-8")).hexdigest()

    @classmethod
    def evaluate_action(
        cls, action: EnvironmentalAction, policy: EnvironmentalPolicy
    ) -> EnvironmentalManifest:
        
        # Gate 1: Isolated
        if not action.modifies_environment:
            digest = cls._hash(json.dumps({
                "action": action.action_id,
                "type": "ISOLATED"
            }, sort_keys=True))
            return EnvironmentalManifest(
                verdict=EnvironmentalVerdict.ISOLATED_ACTION,
                directive=f"PROCEED: Action {action.action_id} does not modify environment.",
                manifest_digest=digest
            )

        # Gate 2: Reversible
        if action.is_reversible:
            digest = cls._hash(json.dumps({
                "action": action.action_id,
                "type": "REVERSIBLE"
            }, sort_keys=True))
            return EnvironmentalManifest(
                verdict=EnvironmentalVerdict.REVERSIBLE_MODIFICATION,
                directive=f"PROCEED: Action {action.action_id} modifies environment reversibly.",
                manifest_digest=digest
            )

        # Gate 3: Branch commitment documentation
        if action.forecloses_branches:
            if policy.require_commitment_for_branch_foreclosure and not action.branch_commitment_documented:
                return EnvironmentalManifest(
                    verdict=EnvironmentalVerdict.UNTRACKED_IRREVERSIBLE,
                    directive=f"HALT: Action {action.action_id} forecloses branches {action.forecloses_branches} without documentation.",
                    manifest_digest=cls._hash(f"UNTRACKED:{action.action_id}")
                )

        # Gate 4: Tracked
        digest = cls._hash(json.dumps({
            "action": action.action_id,
            "foreclosed": action.forecloses_branches,
            "post_state": action.post_action_state_hash,
            "documented": str(action.branch_commitment_documented)
        }, sort_keys=True))
        
        return EnvironmentalManifest(
            verdict=EnvironmentalVerdict.IRREVERSIBLE_COMMITMENT_TRACKED,
            directive=f"PROCEED: Irreversible action {action.action_id} tracked, {len(action.forecloses_branches)} branches foreclosed.",
            manifest_digest=digest
        )