The Spec

The full definition of every principle in Trust Architecture the canonical reference. Each entry gives the condition, what it means, the failure it prevents, how it holds truth against power, how it connects to the others, and a test you can run on your own organization. In time, each principle deepens into a long-form explainer beneath its definition.

The fixed question: What allows truth to survive power?

The thirteen are one system:

a Foundation, ten principles;
three Pillars (Position, Truth, Reward), and
two Bindings — 1 + 10 + 2.

Each is a structural condition of how an organization is built, never a virtue a person must summon. A structural condition does not compel honesty; it changes the price of it, so that seeing clearly becomes the rational choice rather than the costly one.

Foundation

0 · Alignment

Foundation — the base condition

The condition. The organization treats trust as the demonstrated match between word and deed proven over time, never merely declared.

What it means. Trust is not a claim, a values statement, or a feeling. It is the observable relationship between what an organization says and what it actually does, measured over time. Everything built above the foundation exists to keep that relationship from coming apart under pressure.

The failure it prevents. Trust attaches to what is claimed rather than what is done, and the gap between the two is free to widen invisibly until a shock reveals how far word and deed had drifted apart.

How it holds truth against power. By defining trust as demonstrated alignment, it makes trust auditable: deeds can be checked against words by anyone, at any level. Power can declare itself trustworthy; it cannot declare the gap closed. The definition itself denies power that shortcut.

Connections. The base of all ten pillar principles each is a way of protecting word–deed alignment in a specific arena (Position, Truth, Reward). Structural Reform (12) is the method that maintains it; The Integrated Leader (11) is its human guarantor.

The test. Where in this organization is trust granted on the strength of what someone says, rather than what they have demonstrably done?

Pillar I · Position

Can the truth-teller be placed where the truth can be told at all?

1 · Earned Authority

The condition. Decision rights are granted for demonstrated competence, not conferred by title.

What it means. The authority to make a consequential call to accept a risk, approve a design, overrule a warning should follow demonstrated competence in the matter at hand, not position in the hierarchy. Rank can grant the seat at the table; only competence should grant the decision.

The failure it prevents. The people making the call are not the people the facts answer to. Decisions are made by rank while the knowledge that should drive them sits powerless one or two levels below, able to advise but not to decide.

How it holds truth against power. When authority tracks competence, the person who holds the truth also holds the standing to act on it. When authority tracks title, truth must ask permission from power and in the ordinary run of things, it loses. Earned authority removes the permission step.

Connections. Depends on Transparency (4), which makes competence examinable without it, “competence” collapses back into reputation. Reinforced by Independence (2): authority that reports into the chain it must judge is quickly un-earned. Feeds Proportional Accountability (3): a person can be fairly held answerable only for decisions they had the standing to make.

The test. Does the person with the deepest knowledge of a risk have the authority to act on it or must they first persuade someone who outranks them but does not understand it?

2 · Independence

The condition. The function that judges a risk reports outside the chain that owns the risk.

What it means. The function responsible for judging a risk security, audit, safety, compliance reports through a line separate from the people who own that risk and benefit from downplaying it. Independence is not hostility; it is the structural distance that lets judgment stay honest.

The failure it prevents. Judgment bends toward the incentives it exists to check. The assessor answers to the assessed, so the assessment slowly becomes whatever the assessed can comfortably live with.

How it holds truth against power. Power’s simplest move against an inconvenient truth is to control the person who reports it. Independence removes that lever by placing the reporting line beyond power’s reach, so a finding can travel without first being approved by what it indicts.

Connections. Protects Earned Authority (1) from capture. A precondition for Informed Governance (6): a board’s independent sight-line depends on functions that are themselves independent. Without it, Protected Candor (7) is hollow, because candor still has to pass through the person it exposes.

The test. Can the person who assesses a risk deliver an unwelcome finding without it first passing through the person whose work it judges?

3 · Proportional Accountability

The condition. A person is held answerable only for what they were given the authority to control.

What it means. Responsibility and authority are matched: where one is given, so is the other; where authority is withheld, blame cannot fairly follow. Accountability is scaled to the actual span of control, no more and no less.

The failure it prevents. Blame settles where it is convenient rather than where the power actually sat. A role is handed the consequences of decisions it was never allowed to make the pre-positioned blame sink.

How it holds truth against power. When accountability is proportional, power cannot offload the cost of its own choices onto someone downstream. That keeps the incentive to tell the truth intact: people judged only on what they controlled have no reason to obscure what they did not.

Connections. The fair completion of Earned Authority (1) and Independence (2) you can hold someone answerable only for decisions they had the standing and freedom to make. When absent, it corrodes Protected Candor (7): people go silent when they can be blamed for what was never theirs to control.

The test. Is anyone here accountable for an outcome they lacked the authority to change?

Pillar II · Truth

Does a fact survive the journey from where it is known to where it is decided?

4 · Transparency

The condition. Competence and decisions are open to examination rather than shielded by rank.

What it means. How a call was made on what evidence, by whom is available to be seen. Not as surveillance, but as the condition that lets substance be told apart from performance and lets competence be demonstrated rather than merely asserted.

The failure it prevents. Incompetence survives by hiding behind authority. When decisions cannot be examined, the appearance of competence and the fact of it become indistinguishable and the appearance is cheaper.

How it holds truth against power. Opacity is where power hides the gap between word and deed. Transparency closes the hiding place: it puts the deed next to the word, so the Foundation’s alignment can actually be checked.

Connections. Makes Earned Authority (1) possible competence can only be demonstrated if it can be examined. The mechanism behind Informed Governance (6). Distinct from Merit Over Loyalty (5): transparency exposes competence to view; merit-over-loyalty governs what is rewarded once it is seen.

The test. Can a decision here be reconstructed after the fact who decided, on what basis or does it disappear into rank?

5 · Merit Over Loyalty

The condition. Trust is granted for demonstrated performance and cannot be demanded as loyalty.

What it means. The organization keeps trust anchored to what people actually deliver, refusing to let it be quietly redefined as agreement, deference, or personal allegiance. Loyalty may be welcome; it is never the price of trust.

The failure it prevents. Agreement is mistaken for competence, and dissent for betrayal. Trust drifts toward the loyal rather than the able, and the people who tell the truth are reclassified as disloyal.

How it holds truth against power. The most effective way power silences truth is to rename it disloyalty. Anchoring trust to merit denies that move: it keeps disagreement legible as contribution rather than treason, so the truth-teller does not automatically become the enemy.

Connections. Depends on Transparency (4) to see real performance in the first place. Closely bound to Protected Candor (7): where loyalty is the currency, candor is unaffordable. Feeds Substance Over Signal (8) both refuse to reward the performance of virtue over its substance.

The test. In this organization, is the person who disagrees well treated as a contributor or as a problem?

6 · Informed Governance

The condition. Those who govern receive an independent line of sight, not a summary edited by the people being governed.

What it means. The board or oversight body sees the organization as it is, not as management would prefer it to look. Governance has a source of reality that does not run entirely through the executives it is meant to hold to account.

The failure it prevents. Oversight sees only what it is shown. The governed write the report the governors read, and accountability becomes theatre a body formally responsible for a reality it is structurally prevented from seeing.

How it holds truth against power. Power at the operating level controls the narrative that flows upward. Informed Governance breaks that monopoly by giving the board its own eyes, so the truth reaches the top even when it embarrasses the people in between.

Connections. Depends on Independence (2) the board’s sight-line runs through functions that must themselves be independent and on Transparency (4) for its raw material. It is the organizational-summit expression of the whole Truth pillar: the last place a fact must survive to.

The test. Does the board have any source of truth about risk that does not pass through the executives being assessed?

7 · Protected Candor

The condition. Telling the truth and standing next to the person who did is survivable.

What it means. Raising a real problem, or backing someone who did, does not cost you your standing, your prospects, or your place. The name is deliberate: it specifies the structural condition, not the feeling of safety it produces.

The failure it prevents. Everyone who holds the facts has a reason to stay silent. The cost of speaking is borne by the speaker, so the rational move for good people especially is to say nothing and let the number stay green.

How it holds truth against power. This is where the price is set most directly. Protected Candor lowers the personal cost of honesty until truth-telling stops requiring heroism. It does not make people brave; it makes bravery unnecessary.

Connections. The human payoff of the whole Truth pillar Transparency (4), Merit Over Loyalty (5) and Informed Governance (6) all fail in practice if candor is not survivable. Reinforced by Proportional Accountability (3): people speak when they will not be blamed for what they did not control.

The test. What happened to the last person here who raised something no one wanted to hear and what did everyone else learn from watching?

Pillar III · Reward

Does the system, over time, keep the people who tell the truth?

8 · Substance Over Signal

The condition. The system rewards what leadership produces over what it projects.

What it means. Advancement, status, and reward track real output and real judgment not the performance of busyness, confidence, or visibility. The organization pays for what is done, not for how effective someone manages to appear.

The failure it prevents. Signal beats substance, and the wrong people rise. Over time the organization fills with those who are good at appearing effective and empties of those who are merely effective.

How it holds truth against power. Signal is cheap and truth is often quiet. When the system pays for projection, it selects for the people most willing to perform a reassuring version of reality. Rewarding substance removes the payoff for that performance.

Connections. The Reward-pillar counterpart to Transparency (4): one makes substance visible, the other makes it pay. Depends on Merit Over Loyalty (5). Guards against the decay that First Principles (10) exists to reverse a system that rewards signal drifts steadily back toward performance.

The test. Who was promoted here most recently and were they rewarded for what they delivered, or for how they appeared?

9 · Costly Action

The condition. Leaders are judged by what they do at a price to themselves, not by what they say for free.

What it means. The signal the organization trusts is action that costs the actor something capital, comfort, standing because that is the signal that cannot be faked. Words are weighed lightly; costly commitments are weighed heavily.

The failure it prevents. Cheap talk is indistinguishable from real commitment. When words are the measure, the organization cannot tell conviction from performance, and rewards the fluent over the committed.

How it holds truth against power. Power is fluent; it can always produce the right words. Costly Action defeats that fluency by moving the test to behaviour under cost, where the gap between what a leader says and what they will actually pay for becomes visible.

Connections. Sharpens Substance Over Signal (8) costly action is the hardest-to-fake substance. Rests on Transparency (4), since cost is only legible if action can be seen. Where it is absent, leadership collapses into performance and Merit Over Loyalty (5) loses its evidence.

The test. When it last cost something to do the right thing here, who paid and were they rewarded or punished for it?

10 · First Principles

The condition. Inherited structures are rebuilt from what they are for, not preserved because they were inherited.

What it means. The organization periodically asks what a structure exists to achieve and rebuilds from that answer, rather than defending arrangements whose only justification is that they already exist.

The failure it prevents. A sound design slowly decays back into the broken one it replaced. Without a first-principles habit, every reform is gradually recaptured by the inherited defaults it was built to escape.

How it holds truth against power. Inherited structure is where old power hides arrangements that serve incumbents survive long after their purpose has gone, defended by “this is how it is done.” Returning to first principles strips that defence and exposes structure to the question of what it is for.

Connections. The Reward pillar’s safeguard over time: it keeps Substance Over Signal (8) and Costly Action (9) from ossifying. Anticipates Structural Reform (12), which applies the same stance to the whole architecture. Renews the Foundation (0) by re-testing whether word and deed still align.

The test. Which structure here is defended mainly on the grounds that it already exists and what is it actually for?

The Bindings

What holds the structure together and makes it outlast any one leader.

11 · The Integrated Leader

Binding — the person

The condition. The structure is operated by a leader who can fight, build, and design at once, and knows which the moment demands.

What it means. The architecture is run by a leader able to resist when resistance is required, construct when construction is required, and redesign the system itself when that is what the moment demands and who can tell which of the three is called for. A binding is about the person the structure requires, so it names the person.

The failure it prevents. The architecture stands with no one able to run it. A structure this demanding, handed to a leader who can only fight, or only comply, or only build, is operated in one mode and fails in the others.

How it holds truth against power. Every principle above describes a condition; someone has to hold those conditions in place under pressure, against power that is constantly trying to reopen them. The Integrated Leader is that someone the human load-bearing element without which the design is only a diagram.

Connections. Binds the whole architecture to a person capable of operating it. Presupposes every pillar: this is the leader who insists on Independence (2), refuses to trade Merit for loyalty (5), and keeps candor protected (7). Paired with Structural Reform (12): the leader operates the system; the method outlasts the leader.

The test. If this leader left tomorrow, is there anyone who could hold the same lines or does the architecture depend on one irreplaceable person?

12 · Structural Reform

Binding — the method

The condition. Failures are treated as faults of design, not character, so a system built to misplace trust is rebuilt to protect it.

What it means. The organization responds to failure by asking what structure produced it and changing that structure rather than removing an individual and leaving the machine that shaped them intact.

The failure it prevents. Every repair depends on the luck of a good leader who will eventually leave. Blame the person and the structure survives to break the next one; the organization keeps solving the same failure, one scapegoat at a time.

How it holds truth against power. Blaming individuals is power’s way of surviving reform it satisfies the demand for accountability while leaving the arrangement that served power untouched. Structural Reform redirects the response from the person to the design, the only level at which the problem was ever real.

Connections. The method that makes the whole architecture durable and binds it to time. The organizational-scale expression of First Principles (10). Protects The Integrated Leader (11) from being a single point of failure by moving the fix from heroics to design. Closes the loop back to the Foundation (0): design, not character.

The test. The last time something failed here, did we change a person or the structure that shaped them?

Applications

Applications is where the architecture meets practice. It is not a fourteenth principle; it is the layer in which the thirteen are turned on a specific organization. Its core instrument is already written: the thirteen tests above. Each exposes whether a given condition is present, absent, or quietly eroding, and read together the answers form a map of where truth is protected and where it is being priced out. A leader who can answer all thirteen honestly knows the exact shape of their own trust architecture.

Thanks for reading Trust Architecture! This post is public so feel free to share it.