Adaptive Rule Lifecycle
QUORUM can propose new rules, but it cannot put them into effect. Every new rule is observed in shadow mode first, and a person decides whether it is promoted.
Rules written by the institution's own team.
The adversarial tooling generates candidate rules with its reasoning and a confidence value. These enter shadow mode for review like any other rule.
In shadow mode a rule is evaluated alongside live traffic and records what it would have done, without influencing the verdict. For each shadow rule QUORUM keeps counts of true and false positives and negatives against confirmed outcomes, a false-positive threshold and a minimum number of evaluations, and a promotion deadline.
An operator approves or rejects each shadow rule; rejected rules can be cleared in bulk.
Promotion into the live rule set requires the security_admin role, WebAuthn step-up and a single-use FROST threshold approval that names the rule.
The promoted rule set is synchronised across instances and the change is written to the signed audit ledger.
Promotion is all at once. Percentage-based staged rollouts and automatic rollback on a false-positive breach are not implemented today.